getrogibbs

Bonjour, en voulant désactiver la barre de recherche "ask", j'ai malencontreusement, désactivé toute ma barre personnelle, je ne peux plus faire de recherche, je ne peux plus retourner en arriere, plus de marques page, fichiers... est il possible de récupérer tout ça sans perdre mes onglet actif et autres marque pages enregistrés? merci d'avance.

bonjour, j'avais déjà poster sur ce sujets mais n'avait pas pu suivre la discussion, alors je revient maintenant. Voilà le probleme; je suis connecté via mon pc portable à la neufbox de sfr/neuf. Jusque là pas de pb... Ma femme qui est d'origine russe a ramené son pc portable et nous voudrions le connecter également en wifi si possible. j'ai essayé tous les moyens que je connaissais, faire une recherche de réseau sur son ordi, installer le cd neuf et suivre les instructions, regardé les parametres de mon pc par rapport au sien... mais rien n'y fait; il trouve bien le réseau mais impossible de s'y connecter... Il y a surement un probleme de paramètres à régler ou je ne sais qu'elle connerie... à moins que le fait qu'il vienne de russie soit important et qu'il ne soit pas compatible avec une fréquence ou autre... elle a windows xp, le pc est un asus A3500L... j'attends vos réponse, merci d'avance, je ne répondrais peu etre pas de suite car je vais bientôt aller bosser merci d'avance

oui, il est activé, enfin je pense, le symbole est allumé

Bonjour, je voudrais connecté sur ma neuf box, en wifi, le pc de ma femme qui est russe (ma femme et le pc). J'ai essayé de le faire a partir du cd, je n'arrive pas, j'ai essayé d'autre chose mais rien ne marche. Il y a bien le symbole de connexion au réseau wifi mais je n'arrive pas à ouvrir une page internet... J'utilise un adaptateur wifi D-link qui est bien connectée... Dites moi comment faire meme si vous ne parlez pas russe, ma femme est là pour traduire... Le pc est sous windows XP

je n'arrive pas télécharger, un message "il est impossible de lancer le téléchargement de plop.exe" apparait... au fait getrogibbs et angeyom c'est pareil... c'est toujours moi

bon voilà, j'ai tout fait comme tu as dit, j'espère que ça ira et que j'arriverais à obtenir les codes pour symantec... Je te remercie pour ton aide très efficace.

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 10:23:52, on 08/01/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\LEXPPS.EXE C:\WINDOWS\Explorer.EXE C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\WINDOWS\vVX3000.exe C:\AddOn\Fujitsu\PSUtility\TrayManager.exe C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe C:\Program Files\Lexmark 1400 Series\lxdjamon.exe C:\Program Files\AGI\common\win32\PythonService.exe C:\PROGRA~1\SYMANT~1\VPTray.exe C:\Program Files\Fujitsu\BtnHnd\BtnHnd.exe C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe C:\AddOn\Fujitsu\Application Panel\QuickTouch.exe C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe c:\Program Files\Symantec AntiVirus\DefWatch.exe C:\WINDOWS\AGRSMMSG.exe C:\WINDOWS\RTHDCPL.EXE C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\igfxpers.exe C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\lxdjcoms.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe c:\Program Files\Symantec AntiVirus\SavRoam.exe C:\WINDOWS\system32\svchost.exe c:\Program Files\Symantec AntiVirus\Rtvscan.exe C:\Program Files\UPHClean\uphclean.exe C:\WINDOWS\system32\UStorSrv.exe C:\Program Files\RealVNC\VNC4\WinVNC4.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\WINDOWS\system32\NOTEPAD.EXE C:\Program Files\Trend Micro\HijackThis\Administrateur.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: (no name) - {0BC6E3FA-78EF-4886-842C-5A1258C4455A} - (no file) O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [Client Access Check Version] "C:\Program Files\IBM\Client Access\cwbckver.exe" LOGIN O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe O4 - HKLM\..\Run: [PSUtility] C:\AddOn\Fujitsu\PSUtility\TrayManager.exe O4 - HKLM\..\Run: [Client Access Help Update] "C:\Program Files\IBM\Client Access\cwbinhlp.exe" O4 - HKLM\..\Run: [Client Access Express Welcome] "C:\Program Files\IBM\Client Access\cwbwlwiz.exe" O4 - HKLM\..\Run: [iAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe O4 - HKLM\..\Run: [lxdjamon] "C:\Program Files\Lexmark 1400 Series\lxdjamon.exe" O4 - HKLM\..\Run: [vptray] c:\PROGRA~1\SYMANT~1\VPTray.exe O4 - HKLM\..\Run: [LoadBtnHnd] C:\Program Files\Fujitsu\BtnHnd\BtnHnd.exe O4 - HKLM\..\Run: [LoadFUJ02E3] C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe O4 - HKLM\..\Run: [indicatorUtility] C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe O4 - HKLM\..\Run: [LXDJCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXDJtime.dll,_RunDLLEntry@16 O4 - HKLM\..\Run: [LoadFujitsuQuickTouch] C:\AddOn\Fujitsu\Application Panel\QuickTouch.exe O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe" O4 - HKLM\..\Run: [Client Access Service] "C:\Program Files\IBM\Client Access\cwbsvstr.exe" O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [Client Access PC5250 Sound] "C:\Program Files\IBM\Client Access\Emulator\pcssnd.exe" O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user') O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\MICROS~1\Office10\EXCEL.EXE/3000 O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O15 - Trusted Zone: http://www.mygsf.net O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/dow...llerControl.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1207328735203 O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://fichiers.touslesdrivers.com/fichier...ion_3_0_3_5.cab O16 - DPF: {DFB5BCF1-06AE-4ABB-BFA8-1E228F41C50A} (CamfrogWEB Advanced Unicode Control) - http://bobtv.fr/download/cfweb_www.bobtv.f..._instmodule.exe O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe O23 - Service: AG Windows Service (AGWinService) - Unknown owner - C:\Program Files\AGI\common\win32\PythonService.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe O23 - Service: Fonction Commande à distance d'iSeries Access for Windows (Cwbrxd) - IBM Corporation - C:\WINDOWS\CWBRXD.EXE O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - c:\Program Files\Symantec AntiVirus\DefWatch.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE O23 - Service: lxdj_device - - C:\WINDOWS\system32\lxdjcoms.exe O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe O23 - Service: SAVRoam (SavRoam) - symantec - c:\Program Files\Symantec AntiVirus\SavRoam.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe O23 - Service: Symantec AntiVirus - Symantec Corporation - c:\Program Files\Symantec AntiVirus\Rtvscan.exe O23 - Service: UStorage Server Service - OTi - C:\WINDOWS\system32\UStorSrv.exe O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - C:\Program Files\RealVNC\VNC4\WinVNC4.exe O23 - Service: Marvell Yukon Service (yksvc) - Unknown owner - RUNDLL32.EXE (file missing) -- End of file - 10865 bytes

Malwarebytes' Anti-Malware 1.32 Version de la base de données: 1630 Windows 5.1.2600 Service Pack 3 08/01/2009 10:14:50 mbam-log-2009-01-08 (10-14-50).txt Type de recherche: Examen rapide Eléments examinés: 60992 Temps écoulé: 4 minute(s), 40 second(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 8 Valeur(s) du Registre infectée(s): 1 Elément(s) de données du Registre infecté(s): 1 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 0 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): HKEY_CLASSES_ROOT\shellex.tbho (Trojan.FakeAlert) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{18e4cdd5-23e9-3c2b-9ea7-7a5d489f4356} (Trojan.FakeAlert) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{107a1d63-2eaa-4694-8aba-ec209c630d83} (Trojan.FakeAlert) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Typelib\{61181f3a-b7b4-3f2d-bc24-5dc5deab99c0} (Trojan.FakeAlert) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\srcss.exe (Rogue.SpyProtector) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Directory\shellex\ContextMenuHandlers\Spy Protector (Rogue.SpyProtector) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Drive\shellex\ContextMenuHandlers\Spy Protector (Rogue.SpyProtector) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\SpyProtector (Rogue.SpyProtector) -> Quarantined and deleted successfully. Valeur(s) du Registre infectée(s): HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{107a1d63-2eaa-4694-8aba-ec209c630d83} (Trojan.FakeAlert) -> Quarantined and deleted successfully. Elément(s) de données du Registre infecté(s): HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\StartMenuLogOff (Hijack.StartMenu) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): (Aucun élément nuisible détecté)

========== PROCESSES ========== Process explorer.exe killed successfully. ========== FILES ========== DllUnregisterServer procedure not found in c:\windows\system32\khvgbw.dll c:\windows\system32\khvgbw.dll NOT unregistered. c:\windows\system32\khvgbw.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\fxkwujjl.dll c:\windows\system32\fxkwujjl.dll NOT unregistered. c:\windows\system32\fxkwujjl.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\yvobfvrx.dll c:\windows\system32\yvobfvrx.dll NOT unregistered. c:\windows\system32\yvobfvrx.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\hsteui.dll c:\windows\system32\hsteui.dll NOT unregistered. c:\windows\system32\hsteui.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\uysjnnpx.dll c:\windows\system32\uysjnnpx.dll NOT unregistered. c:\windows\system32\uysjnnpx.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\qvjfxd.dll c:\windows\system32\qvjfxd.dll NOT unregistered. c:\windows\system32\qvjfxd.dll moved successfully. c:\windows\system32\thsgwtwm.tmp moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\qbcvkaer.dll c:\windows\system32\qbcvkaer.dll NOT unregistered. c:\windows\system32\qbcvkaer.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\jlaior.dll c:\windows\system32\jlaior.dll NOT unregistered. c:\windows\system32\jlaior.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\otanqfpd.dll c:\windows\system32\otanqfpd.dll NOT unregistered. c:\windows\system32\otanqfpd.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\kwrspc.dll c:\windows\system32\kwrspc.dll NOT unregistered. c:\windows\system32\kwrspc.dll moved successfully. LoadLibrary failed for c:\windows\system32\ws59179.dll c:\windows\system32\ws59179.dll NOT unregistered. c:\windows\system32\ws59179.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\syorkx.dll c:\windows\system32\syorkx.dll NOT unregistered. c:\windows\system32\syorkx.dll moved successfully. DllUnregisterServer procedure not found in c:\windows\system32\iyebnffv.dll c:\windows\system32\iyebnffv.dll NOT unregistered. c:\windows\system32\iyebnffv.dll moved successfully. C:\Program Files\Trend Micro\HijackThis\backups moved successfully. ========== COMMANDS ========== Explorer started successfully File delete failed. C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\etilqs_4GQNa36a9VYMDcGdZ9zV scheduled to be deleted on reboot. File delete failed. C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~DF5663.tmp scheduled to be deleted on reboot. File delete failed. C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~DF56D9.tmp scheduled to be deleted on reboot. File delete failed. C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~DF6736.tmp scheduled to be deleted on reboot. File delete failed. C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~DF6743.tmp scheduled to be deleted on reboot. User's Temp folder emptied. User's Temporary Internet Files folder emptied. User's Internet Explorer cache folder emptied. Local Service Temp folder emptied. File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot. Local Service Temporary Internet Files folder emptied. File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_8b0.dat scheduled to be deleted on reboot. Windows Temp folder emptied. Java cache emptied. File delete failed. C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\w8sds7n9.default\Cache\_CACHE_001_ scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\w8sds7n9.default\Cache\_CACHE_002_ scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\w8sds7n9.default\Cache\_CACHE_003_ scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\w8sds7n9.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\w8sds7n9.default\urlclassifier3.sqlite scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\w8sds7n9.default\XUL.mfl scheduled to be deleted on reboot. FireFox cache emptied. Temp folders emptied. OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 01082009_095746 Files moved on Reboot... File C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\etilqs_4GQNa36a9VYMDcGdZ9zV not found! File C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~DF5663.tmp not found! File C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~DF56D9.tmp not found! File C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~DF6736.tmp not found! File C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~DF6743.tmp not found! File move failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot. File C:\WINDOWS\temp\Perflib_Perfdata_8b0.dat not found! C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\w8sds7n9.default\Cache\_CACHE_001_ moved successfully. C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\w8sds7n9.default\Cache\_CACHE_002_ moved successfully. C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\w8sds7n9.default\Cache\_CACHE_003_ moved successfully. C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\w8sds7n9.default\Cache\_CACHE_MAP_ moved successfully. C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\w8sds7n9.default\urlclassifier3.sqlite moved successfully. C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\w8sds7n9.default\XUL.mfl moved successfully.

ComboFix 09-01-06.02 - Administrateur 2009-01-07 15:44:51.5 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.1014.509 [GMT 1:00] Lancé depuis: c:\documents and settings\Administrateur\Bureau\ComboFix.exe Commutateurs utilisés :: c:\documents and settings\Administrateur\Bureau\CFScript.txt * Un nouveau point de restauration a été créé FILE :: C:\sqmdata15.sqm C:\sqmdata16.sqm C:\sqmnoopt15.sqm C:\sqmnoopt16.sqm c:\windows\system32\cwbuncob32.VIR c:\windows\system32\cwbuncob32.VIR000 . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\documents and settings\Administrateur\Application Data\LimeWire c:\documents and settings\All Users\Application Data\Kiwee Toolbar c:\documents and settings\All Users\Application Data\Kiwee Toolbar\config\content_a.xml c:\documents and settings\All Users\Application Data\Kiwee Toolbar\config\content_ie.xml c:\documents and settings\All Users\Application Data\Kiwee Toolbar\config\content_m.xml c:\documents and settings\All Users\Application Data\Kiwee Toolbar\config\content_y.xml c:\documents and settings\All Users\Application Data\Kiwee Toolbar\config\logger.xml c:\documents and settings\All Users\Application Data\Kiwee Toolbar\config\toolbarIE.xml c:\documents and settings\All Users\Application Data\Kiwee Toolbar\config\toolbarIM_a.xml c:\documents and settings\All Users\Application Data\Kiwee Toolbar\config\toolbarIM_m.xml c:\documents and settings\All Users\Application Data\Kiwee Toolbar\config\toolbarIM_y.xml c:\documents and settings\All Users\Application Data\Kiwee Toolbar\images\allow.bmp c:\documents and settings\All Users\Application Data\Kiwee Toolbar\images\block.bmp c:\documents and settings\All Users\Application Data\Kiwee Toolbar\images\dontsend.bmp c:\documents and settings\All Users\Application Data\Kiwee Toolbar\images\im_toolbardropdownmenu.bmp c:\documents and settings\All Users\Application Data\Kiwee Toolbar\images\im_toolbarsHelprolloverbase.bmp c:\documents and settings\All Users\Application Data\Kiwee Toolbar\images\im_toolbarsm1rolloverbase.bmp c:\documents and settings\All Users\Application Data\Kiwee Toolbar\images\im_toolbarsm1rolloverbase_bg.bmp c:\documents and settings\All Users\Application Data\Kiwee Toolbar\images\im_toolbarsm1rolloverbase_dp.bmp c:\documents and settings\All Users\Application Data\Kiwee Toolbar\images\im_toolbarsm2rolloverbase.bmp c:\documents and settings\All Users\Application Data\Kiwee Toolbar\images\im_toolbarstextrollover.bmp c:\documents and settings\All Users\Application Data\Kiwee Toolbar\images\kiwee_iconX16.ico c:\documents and settings\All Users\Application Data\Kiwee Toolbar\images\kiwee_iconX48.ico c:\documents and settings\All Users\Application Data\Kiwee Toolbar\images\send.bmp c:\documents and settings\All Users\Application Data\Kiwee Toolbar\images\toolbar_eg.bmp c:\documents and settings\All Users\Application Data\Kiwee Toolbar\images\toolbar_emoticons.bmp c:\documents and settings\All Users\Application Data\Kiwee Toolbar\images\toolbar_eyeglass.bmp c:\documents and settings\All Users\Application Data\Kiwee Toolbar\images\toolbar_gear.bmp c:\documents and settings\All Users\Application Data\Kiwee Toolbar\images\toolbar_images.bmp c:\documents and settings\All Users\Application Data\Kiwee Toolbar\images\toolbar_kiwee.bmp c:\documents and settings\All Users\Application Data\Kiwee Toolbar\images\toolbar_msnlogo.bmp c:\documents and settings\All Users\Application Data\Kiwee Toolbar\images\toolbar_news.bmp c:\documents and settings\All Users\Application Data\Kiwee Toolbar\images\toolbar_text.bmp c:\documents and settings\All Users\Application Data\Kiwee Toolbar\images\toolbar_videos.bmp c:\documents and settings\All Users\Application Data\Kiwee Toolbar\images\toolbar_webshots.bmp c:\documents and settings\All Users\Application Data\Kiwee Toolbar\images\toolbar_winks.bmp c:\documents and settings\All Users\Application Data\Kiwee Toolbar\images\X.bmp c:\documents and settings\ISO\Application Data\LimeWire c:\program files\Kiwee Toolbar C:\ToolBar SD c:\windows\system32\cwbuncob32.VIR c:\windows\system32\cwbuncob32.VIR000 . ((((((((((((((((((((((((((((( Fichiers créés du 2008-12-07 au 2009-01-07 )))))))))))))))))))))))))))))))))))) . 2009-01-04 21:24 . 2009-01-04 21:25 <REP> d-------- c:\windows\system32\NtmsData 2009-01-04 19:02 . 2009-01-04 19:02 <REP> d-------- C:\rsit 2008-12-29 09:47 . 2008-10-16 02:01 1,499,648 -----c--- c:\windows\system32\dllcache\shdocvw.dll 2008-12-29 09:46 . 2008-10-24 12:21 455,296 -----c--- c:\windows\system32\dllcache\mrxsmb.sys 2008-12-29 09:45 . 2008-09-04 18:16 1,106,944 -----c--- c:\windows\system32\dllcache\msxml3.dll 2008-12-29 09:17 . 2008-12-29 09:17 373,760 --ahs---- c:\windows\system32\2EB6.tmp 2008-12-28 21:41 . 2008-12-28 21:41 <REP> d-------- c:\program files\Trend Micro 2008-12-28 20:17 . 2008-12-28 20:17 <REP> d-------- c:\program files\SpywareBlaster 2008-12-28 20:17 . 2008-12-28 21:54 <REP> d-a------ c:\documents and settings\All Users\Application Data\TEMP 2008-12-28 12:40 . 2008-12-28 12:40 230 --a------ c:\windows\system32\spupdsvc.inf 2008-12-28 11:41 . 2008-12-28 11:41 <REP> d-------- c:\program files\Avira 2008-12-28 11:41 . 2008-12-28 11:41 <REP> d-------- c:\documents and settings\All Users\Application Data\Avira 2008-12-13 21:31 . 2008-12-13 21:31 <REP> d-------- c:\program files\Lionhead Studios 2008-12-12 18:42 . 2008-12-12 18:42 <REP> d-------- c:\program files\Slitherine 2008-12-07 18:07 . 2008-12-12 18:39 <REP> d-------- c:\documents and settings\All Users\Application Data\Firefly Studios 2008-12-07 18:02 . 2008-12-07 18:04 <REP> d-------- c:\program files\GameShadow 2008-12-07 18:01 . 2005-05-26 15:34 2,297,552 --a------ c:\windows\system32\d3dx9_26.dll . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2009-01-07 14:38 --------- d-----w c:\program files\Symantec AntiVirus 2009-01-06 07:28 --------- d-----w c:\program files\lx_cats 2009-01-06 07:25 --------- d-----w c:\program files\Lexmark X1100 Series 2009-01-05 11:10 --------- d-----w c:\documents and settings\ISO\Application Data\uTorrent 2008-12-28 20:51 --------- d-----w c:\program files\Google 2008-12-20 15:22 --------- d--h--w c:\program files\InstallShield Installation Information 2008-12-20 15:22 --------- d-----w c:\program files\epson 2008-12-20 15:21 --------- d-----w c:\program files\Railroad Tycoon II 2008-12-20 15:18 --------- d-----w c:\program files\DeskView 2008-12-20 15:16 --------- d-----w c:\program files\Fichiers communs\FSC 2008-12-20 14:24 --------- d-----w c:\program files\Fichiers communs\AVSMedia 2008-12-20 14:24 --------- d-----w c:\program files\Azureus 2008-12-20 14:24 --------- d-----w c:\program files\AVS4YOU 2008-12-16 19:27 --------- d-----w c:\documents and settings\Administrateur\Application Data\Azureus 2008-12-16 16:41 --------- d-----w c:\program files\eMule 2008-12-15 09:04 56,712 ----a-w c:\documents and settings\ISO\Application Data\GDIPFONTCACHEV1.DAT 2008-12-03 12:02 --------- d-----w c:\program files\Java 2008-11-24 20:13 1,640,521 --sh--w c:\windows\system32\thsgwtwm.tmp 2008-11-24 09:26 --------- d-----w c:\program files\Empire Interactive 2008-11-23 16:35 --------- d-----w c:\program files\GameSpy Arcade 2008-11-23 16:21 --------- d-----w c:\program files\directx 2008-11-16 11:59 104,448 ----a-w c:\windows\system32\khvgbw.dll 2008-11-16 11:59 104,448 ----a-w c:\windows\system32\fxkwujjl.dll 2008-11-15 12:00 104,448 ----a-w c:\windows\system32\yvobfvrx.dll 2008-11-15 12:00 104,448 ----a-w c:\windows\system32\hsteui.dll 2008-11-14 09:42 104,448 ----a-w c:\windows\system32\uysjnnpx.dll 2008-11-14 09:42 104,448 ----a-w c:\windows\system32\qvjfxd.dll 2008-11-13 07:01 --------- d-----w c:\documents and settings\ISO\Application Data\agi 2008-11-10 04:43 410,984 ----a-w c:\windows\system32\deploytk.dll 2008-11-09 15:50 --------- d-----w c:\program files\NOS 2008-11-09 15:50 --------- d-----w c:\documents and settings\All Users\Application Data\NOS 2008-11-09 15:49 --------- d-----w c:\program files\Marvell 2008-11-09 15:43 --------- d-----w c:\program files\ma-config.com 2008-11-09 15:43 --------- d-----w c:\documents and settings\All Users\Application Data\ma-config.com 2008-11-09 15:19 --------- d-----w c:\program files\Fichiers communs\Adobe 2008-11-08 07:45 --------- d-----w c:\program files\Spybot - Search & Destroy 2008-11-06 18:52 103,936 ----a-w c:\windows\system32\qbcvkaer.dll 2008-11-06 18:52 103,936 ----a-w c:\windows\system32\jlaior.dll 2008-11-06 18:05 103,936 ----a-w c:\windows\system32\otanqfpd.dll 2008-11-06 18:05 103,936 ----a-w c:\windows\system32\kwrspc.dll 2008-11-06 15:32 176,128 ----a-w c:\windows\system32\ws59179.dll 2008-11-06 15:12 103,936 ----a-w c:\windows\system32\syorkx.dll 2008-11-06 15:12 103,936 ----a-w c:\windows\system32\iyebnffv.dll 2008-10-24 10:47 339,968 ----a-w c:\windows\system32\pythoncom25.dll 2008-10-24 10:47 2,117,632 ----a-w c:\windows\system32\python25.dll 2008-10-24 10:47 114,688 ----a-w c:\windows\system32\pywintypes25.dll 2008-10-23 12:36 286,720 ----a-w c:\windows\system32\gdi32.dll 2008-10-16 13:13 202,776 ----a-w c:\windows\system32\wuweb.dll 2008-10-16 13:13 1,809,944 ----a-w c:\windows\system32\wuaueng.dll 2008-10-16 13:12 561,688 ----a-w c:\windows\system32\wuapi.dll 2008-10-16 13:12 323,608 ----a-w c:\windows\system32\wucltui.dll 2008-10-16 13:09 92,696 ----a-w c:\windows\system32\cdm.dll 2008-10-16 13:09 51,224 ----a-w c:\windows\system32\wuauclt.exe 2008-10-16 13:09 43,544 ----a-w c:\windows\system32\wups2.dll 2008-10-16 13:08 34,328 ----a-w c:\windows\system32\wups.dll 2008-10-16 13:06 268,648 ----a-w c:\windows\system32\mucltui.dll 2008-10-16 13:06 208,744 ----a-w c:\windows\system32\muweb.dll 2008-10-16 01:01 670,208 ----a-w c:\windows\system32\wininet.dll 2008-09-25 05:55 56,712 ----a-w c:\documents and settings\Administrateur\Application Data\GDIPFONTCACHEV1.DAT 2008-07-31 20:32 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012008073120080801\index.dat . ((((((((((((((((((((((((((((( snapshot@2009-01-05_21.26.00.37 ))))))))))))))))))))))))))))))))))))))))) . + 2009-01-07 14:37:55 16,384 ----atw c:\windows\Temp\Perflib_Perfdata_7b4.dat . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2008-09-29 185872] "Client Access Check Version"="c:\program files\IBM\Client Access\cwbckver.exe" [2004-05-01 45106] "VX3000"="c:\windows\vVX3000.exe" [2007-04-10 709992] "PSUtility"="c:\addon\Fujitsu\PSUtility\TrayManager.exe" [2005-10-11 151552] "Client Access Help Update"="c:\program files\IBM\Client Access\cwbinhlp.exe" [2004-05-01 24576] "Client Access Express Welcome"="c:\program files\IBM\Client Access\cwbwlwiz.exe" [2004-05-01 20480] "IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2005-10-12 139264] "lxdjamon"="c:\program files\Lexmark 1400 Series\lxdjamon.exe" [2007-03-06 20480] "vptray"="c:\progra~1\SYMANT~1\VPTray.exe" [2005-12-27 85648] "LoadBtnHnd"="c:\program files\Fujitsu\BtnHnd\BtnHnd.exe" [2005-07-21 61440] "LoadFUJ02E3"="c:\program files\Fujitsu\FUJ02E3\FUJ02E3.exe" [2005-06-08 69632] "IndicatorUtility"="c:\program files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe" [2005-08-09 81920] "LXDJCATS"="c:\windows\System32\spool\DRIVERS\W32X86\3\LXDJtime.dll" [2007-02-10 102400] "LoadFujitsuQuickTouch"="c:\addon\Fujitsu\Application Panel\QuickTouch.exe" [2005-07-21 353792] "Lexmark X1100 Series"="c:\program files\Lexmark X1100 Series\lxbkbmgr.exe" [2003-08-19 57344] "Client Access Service"="c:\program files\IBM\Client Access\cwbsvstr.exe" [2004-05-01 20530] "ccApp"="c:\program files\Fichiers communs\Symantec Shared\ccApp.exe" [2005-11-16 48800] "Client Access PC5250 Sound"="c:\program files\IBM\Client Access\Emulator\pcssnd.exe" [2004-05-01 40960] "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-01-05 761946] "igfxpers"="c:\windows\system32\igfxpers.exe" [2005-11-03 118784] "igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2005-11-03 77824] "AGRSMMSG"="AGRSMMSG.exe" [2006-01-17 c:\windows\AGRSMMSG.exe] "RTHDCPL"="RTHDCPL.EXE" [2005-12-09 c:\windows\RTHDCPL.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager] BootExecute REG_MULTI_SZ autocheck autochk *\0lsdelete [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Bluetooth Manager.lnk] path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Bluetooth Manager.lnk backup=c:\windows\pss\Bluetooth Manager.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk] path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Lancement rapide d'Adobe Reader.lnk backup=c:\windows\pss\Lancement rapide d'Adobe Reader.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^WinZip Quick Pick.lnk] path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\WinZip Quick Pick.lnk backup=c:\windows\pss\WinZip Quick Pick.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] --a------ 2008-06-12 02:38 34672 c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avgnt] --a------ 2008-06-12 13:28 266497 c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools-1033] --a------ 2004-08-22 16:05 81920 c:\program files\D-Tools\daemon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search] --a------ 2008-04-09 13:56 120320 c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] --a------ 2001-07-09 09:50 155648 c:\windows\system32\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NSLauncher] --a------ 2007-09-07 13:44 3100672 c:\program files\Nokia\Nokia Software Launcher\NSLauncher.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] -ra------ 2008-04-23 16:45 22058792 c:\program files\Skype\Phone\Skype.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] --a------ 2008-11-10 05:43 136600 c:\program files\Java\jre6\bin\jusched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] --a------ 2008-05-05 18:45 68856 c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe] --a------ 2008-09-29 17:04 185872 c:\program files\Fichiers communs\Real\Update_OB\realsched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG] --------- 2006-11-03 08:59 204288 c:\program files\Windows Media Player\wmpnscfg.exe [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\WINDOWS\\system32\\lxdjcoms.exe"= "c:\\Program Files\\Lexmark 1400 Series\\lxdjamon.exe"= "c:\\Program Files\\Lexmark 1400 Series\\App4R.exe"= "c:\\WINDOWS\\system32\\LEXPPS.EXE"= "c:\\Documents and Settings\\ISO\\Program Files\\uTorrent\\uTorrent.exe"= "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"= "c:\\WINDOWS\\system32\\[Emoticons-plus.com] Winkaa 2.0.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= "c:\\WINDOWS\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\eMule\\emule.exe"= "c:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\lxdjwbgw.exe"= "c:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\lxdjpswx.exe"= "c:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\lxdjjswx.exe"= "c:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\lxdjtime.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009 R3 FUJ02E1;%FUJ02E1.DeviceDesc%;c:\windows\system32\drivers\FUJ02E1.sys [2006-05-31 5632] R3 FUJ02E3;Fujitsu FUJ02E3 Device Driver;c:\windows\system32\drivers\fuj02e3.sys [2006-05-31 4864] R4 AGWinService;AG Windows Service;c:\program files\AGI\common\win32\pythonservice.exe [2008-10-24 10240] R4 SavRoam;SAVRoam;c:\program files\Symantec AntiVirus\SavRoam.exe [2005-12-27 172176] S3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [2008-11-02 195752] S3 SNIF0010;FSC Flash Update Driver B;\??\c:\docume~1\GSF\LOCALS~1\Temp\SniF0010.sys --> c:\docume~1\GSF\LOCALS~1\Temp\SniF0010.sys [?] S3 SNIF0011;FSC Flash Update Driver A;\??\c:\docume~1\GSF\LOCALS~1\Temp\SniF0011.sys --> c:\docume~1\GSF\LOCALS~1\Temp\SniF0011.sys [?] S4 yksvc;Marvell Yukon Service;RUNDLL32.EXE ykx32mpcoinst,serviceStartProc --> RUNDLL32.EXE ykx32mpcoinst,serviceStartProc [?] --- Other Services/Drivers In Memory --- *Deregistered* - EraserUtilDrv10614 *Deregistered* - uphcleanhlp [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\I] \Shell\AutoRun\command - I:\setupSNK.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5f7abd7e-f813-11dc-8a49-00037ae696a6}] \Shell\AutoRun\command - H:\ \Shell\open\Command - rundll32.exe .\\sciwave.dll,InstallM [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{83592e24-bf92-11dc-8a29-00037ae696a6}] \Shell\AutoRun\command - Autorun.exe /s [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e6c0f1ed-009f-11dd-8a59-00037ae696a6}] \Shell\AutoRun\command - I:\setupSNK.exe . Contenu du dossier 'Tâches planifiées' 2008-04-03 c:\windows\Tasks\Microsoft_Hardware_Launch_setup_exe.job - E:\setup.exe [] . . ------- Examen supplémentaire ------- . uStart Page = hxxp://www.msn.fr/ uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 mWindow Title = uSearchURL,(Default) = hxxp://www.google.com/search?q=%s IE: E&xporter vers Microsoft Excel - c:\micros~1\Office10\EXCEL.EXE/3000 Trusted Zone: www.mygsf.net c:\windows\Downloaded Program Files\InstallerControl.dll - O16 -: CabBuilder hxxp://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab c:\windows\Downloaded Program Files\OSDC5.OSD O16 -: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - hxxp://fichiers.touslesdrivers.com/fichiers/hardwaredetection/hardwaredetection_3_0_3_5.cab c:\windows\Downloaded Program Files\hardwaredetection.inf O16 -: {DFB5BCF1-06AE-4ABB-BFA8-1E228F41C50A} - hxxp://bobtv.fr/download/cfweb_www.bobtv.fr-download_instmodule.exe FF - ProfilePath - c:\documents and settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\w8sds7n9.default\ FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q= FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - hxxp://www.msn.fr/ FF - prefs.js: keyword.URL - hxxp://kwtb.search.imgag.com/?c=GNKIW29193&sbs=1&sc=2&f=web&vernum=1.0&uid=&did=f8d4a70c-98e2-4081-901d-01bf93043ede&q= FF - component: c:\program files\Real\RealPlayer\browserrecord\components\nprpbrowserrecordplugin.dll FF - plugin: c:\program files\ma-config.com\nphardwaredetection.dll . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-01-07 15:47:43 Windows 5.1.2600 Service Pack 3 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . --------------------- LOCKED REGISTRY KEYS --------------------- [HKEY_USERS\Administrator\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\Electronic Arts\C*NULL*o*NULL*m*NULL*m*NULL*a*NULL*n*NULL*d*NULL* *NULL*&*NULL* *NULL*C*NULL*o*NULL*n*NULL*q*NULL*u*NULL*e*NULL*r*NULL* *NULL*3*NULL* *NULL*L*NULL*e*NULL*s*NULL* *NULL*g*NULL*u*NULL*e*NULL*r*NULL*r*NULL*e*NULL*s*NULL* *NULL*d*NULL*u*NULL* *NULL*T*NULL*i*NULL*b*NULL*e*NULL*r*NULL*i*NULL*u*NULL*m*NULL*"!] "Order"=hex:08,00,00,00,02,00,00,00,0c,00,00,00,01,00,00,00,00,00,00,00 [HKEY_USERS\Administrator\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*NULL*] "??"=hex:d6,7e,c8,2b,7e,54,8b,be,c0,32,32,4a,06,9c,0c,bf,a4,62,24,6d,00,ef,2d,\ 73,c9,99,de,17,b7,56,dc,1f,9c,36,90,ba,b9,0a,31,b0,5f,62,2b,36,f9,f8,38,68,\ ff,ef,55,5e,2b,e5,ca,03,5b,a7,f9,a1,ed,ee,1b,a8,84,17,2b,84,98,d5,db,0e,82,\ af,6b,6e,92,62,e1,41,73,fd,9a,2f,ad,fb,21,e7,03,6b,36,dd,d2,74,be,56,04,f1,\ 37,a1,99,c6,3b,ff,47,db,e9,cf,65,c8,bc,8e,50,40,c9,1f,37,cc,cc,ad,0d,ae,8b,\ b6,16,b6,64,0e,1c,15,0a,46,23,f7,5a,1a,82,db,0a,92,9f,8d,12,b0,ad,42,e7,73,\ 47,02,ec,64,f3,8d,8b,c1,09,9f,a1,13,d1,60,e4,73,76,2b,e8,0e,b8,f3,76,19,48,\ bf,b7,b3,68,09,ac,24,2e,cf,7e,18,8a,4a,89,86,39,3b,48,c4,c6,81,30,60,43,f6,\ 0c,8d,81,11,12,48,82,59,f5,e1,05,b2,f9,31,49,0b,ff,b0,7f,03,62,a8,d3,c3,92,\ e5,a6,76,e7,b6,46,6c,d5,e3,b9,3a,c2,d5,cf,cc,4b,47,d4,31,eb,49,5d,2a,a7,28,\ 86,fc,7c,b8,55,2f,02,98,bd,66,a3,5b,bf,22,d9,fa,85,1e,82,07,1c,ae,4c,d7,4a,\ 5e,6f,dd,7d,6e,83,f9,1b,72,1c,bf,d9,a8,ac,27,c1,40,eb,6b,84,0a,d3,63,76,1a,\ 8d,ad,4d,aa,eb,d1,b1,96,36,95,78,c2,78,c5,e4,be,45,4f,43,1c,05,03,13,d1,41,\ fd,3d,13,f8,78,ed,cc,19,15,47,6c,65,31,d6,1c,13,e0,92,30,c9,fe,10,19,d0,b6,\ 13,16,97,03,1a,4c,3e,10,38,9f,9a,43,4a,58,67,04,c7,30,1b,ca,26,5c,5e,73,f7,\ ef,cf,6c,94,35,a6,ac,73,c0,3f,d9,e6,e3,2a,63,ea,76,70,0b,7d,7b,34,27,62,60,\ 1f,e7,68,eb,c3,f3,8a,60,49,07,27,f8,6f,3e,02,95,39,ce,dc,79,5e,a7,57,db,7e,\ ed,5d,1b,42,79,f0,2f,f4,d9,ef,6d,55,68,42,3e,fe,e6,22,95,49,f0,fa,1d,ee,46,\ a4,6d,cc,cf,31,83,85,9b,09,78,c6,a5,96,3b,58,e2,b6,d3,e6,5e,08,04,91,e5,8f,\ 27,3b,c8,1c,b4,aa,03,4c,d2,7b,d9,74,bb,61,66,05,49,a9,d8,50,8a,11,73,03,19,\ c4,20,94,fb,52,61,d8,ab,7f,ac,2f,26,88,d2,94,54,2e,bf,95,55,cb,bd,c5,6b,37,\ ff,dd,04,42,85,e7,59,14,b6,dc,a8,a8,90,01,01,dd,65,2e,67,7c,a5,27,7b,d3,ca,\ 2a,ad,ce,35,56,46,74,ce,2c,7c,f6,8d,4d,20,da,e4,9a,dd,40,af,c2,ef,57,40,1c,\ 8e,0a,e5,b9,94,65,e8,34,29,bc,bf,4e,e5,fe,f2,26,0c,0d,67,d9,6b,a5,a0,71,48,\ 8f,63,86,e1,f5,88,ab,eb,c0,ec,3b,d2,66,f7,0c,3a,7f,8a,1a,3b,99,5f,1b,19,4f,\ 1b,03,ef,a9,7b,8e,d8,56,4c,28,62,67,21,e1,95,53,2b,1c,5e,c0,c2,91,d5,bd,31,\ 5d,e8,d4,6b,b5,3f,e5,64,54,b3,65,73,92,9d,37,dc,56,c8,ab,19,73,44,21,b5,57,\ 38,e4,3c,cb,d4,f2,12,f4,20,eb,eb,80,ed,18,05,96,26,aa,b7,97,d3,be,6a,73,d4,\ 02,56,31,ae,8f,91,5a,d8,79,12,ec,5f,7c,63,50,d3,a9,e3,b6,0d,45,e7,34,03,1f,\ 15,14,db,7b,49,a4,29,20,5b,af,08,54,f8,80,ad,0f,af,f9,c6,76,98,86,09,84,94,\ 81,2a,52,4b,a4,9d,0f,b7,7a,ba,95,bc,da,e7,e3,b7,c5,cf,f6,b1,ca,f9,77,e7,04,\ 28,b2,bb,18,95,9b,da,3f,25,c7,98,20,30,4b,f1,be,3c,78,85,0e,cd,84,09,8f,d5,\ 0a,b4,c2,45,b5,d4,20,e5,5f,ee,29,72,94,9c,29,38,7f,ff,81,b1,94,a1,a4,4c,5d,\ 4e,9e,b5,9d,5e,e5,e7,27,56,58,b4,40,f9,d1,42,2a,17,41,9d,7d,82,a2,f3,61,9b,\ 7d,24,5c,09,75,2c,54,09,6d "??"=hex:5d,2e,bc,00,9b,07,bc,9c,34,34,87,88,c9,ab,ca,0d . Heure de fin: 2009-01-07 15:48:59 ComboFix-quarantined-files.txt 2009-01-07 14:48:56 ComboFix2.txt 2009-01-05 20:26:40 Avant-CF: 11,373,522,944 octets libres Après-CF: 11,359,985,664 octets libres 335 --- E O F --- 2008-12-29 16:04:29 Avira AntiVir Personal Date de création du fichier de rapport : mercredi 7 janvier 2009 16:09 La recherche porte sur 1156851 souches de virus. Détenteur de la licence :Avira AntiVir PersonalEdition Classic Numéro de série : 0000149996-ADJIE-0001 Plateforme : Windows XP Version de Windows :(Service Pack 3) [5.1.2600] Mode Boot : Mode sans échec avec assistance réseau Identifiant : ISO Nom de l'ordinateur :ENVIRONNEMENT Informations de version : BUILD.DAT : 8.2.0.52 Bytes 02/12/2008 14:55:00 AVSCAN.EXE : 8.1.4.10 315649 Bytes 18/11/2008 08:21:00 AVSCAN.DLL : 8.1.4.1 49921 Bytes 21/07/2008 13:44:27 LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 12:44:16 LUKERES.DLL : 8.1.4.0 13057 Bytes 04/07/2008 07:30:27 ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 11:30:36 ANTIVIR1.VDF : 7.1.1.33 1705984 Bytes 24/12/2008 20:58:11 ANTIVIR2.VDF : 7.1.1.60 318976 Bytes 02/01/2009 11:36:48 ANTIVIR3.VDF : 7.1.1.78 205824 Bytes 07/01/2009 14:56:19 Version du moteur: 8.2.0.45 AEVDF.DLL : 8.1.0.6 102772 Bytes 14/10/2008 10:05:56 AESCRIPT.DLL : 8.1.1.19 336252 Bytes 28/12/2008 20:58:24 AESCN.DLL : 8.1.1.5 123251 Bytes 07/11/2008 15:06:41 AERDL.DLL : 8.1.1.3 438645 Bytes 04/11/2008 13:58:38 AEPACK.DLL : 8.1.3.4 393591 Bytes 11/11/2008 09:41:39 AEOFFICE.DLL : 8.1.0.33 196987 Bytes 28/12/2008 20:58:23 AEHEUR.DLL : 8.1.0.75 1524087 Bytes 28/12/2008 20:58:22 AEHELP.DLL : 8.1.2.0 119159 Bytes 28/12/2008 20:58:17 AEGEN.DLL : 8.1.1.8 323956 Bytes 28/12/2008 20:58:16 AEEMU.DLL : 8.1.0.9 393588 Bytes 14/10/2008 10:05:56 AECORE.DLL : 8.1.5.2 172405 Bytes 28/12/2008 20:58:14 AEBB.DLL : 8.1.0.3 53618 Bytes 14/10/2008 10:05:56 AVWINLL.DLL : 1.0.0.12 15105 Bytes 09/07/2008 08:40:02 AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 09:27:58 AVREP.DLL : 8.0.0.2 98344 Bytes 31/07/2008 12:02:15 AVREG.DLL : 8.0.0.1 33537 Bytes 09/05/2008 11:26:37 AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:19 AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 12:27:46 SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02 SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 12:49:36 NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:07 RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 04/07/2008 07:23:16 RCTEXT.DLL : 8.0.52.1 86273 Bytes 17/07/2008 10:08:43 Configuration pour la recherche actuelle : Nom de la tâche..................: Contrôle intégral du système Fichier de configuration.........: c:\program files\avira\antivir personaledition classic\sysscan.avp Documentation....................: bas Action principale................: interactif Action secondaire................: ignorer Recherche sur les secteurs d'amorçage maître: marche Recherche sur les secteurs d'amorçage: marche Secteurs d'amorçage..............: C:, D:, Recherche dans les programmes actifs: marche Recherche en cours sur l'enregistrement: marche Recherche de Rootkits............: marche Fichier mode de recherche........: Tous les fichiers Recherche sur les archives.......: marche Limiter la profondeur de récursivité: 20 Archive Smart Extensions.........: marche Types d'archives divergents......: +BSD Mailbox, +Netscape/Mozilla Mailbox, +Eudora Mailbox, +Squid cache, +Pegasus Mailbox, +MS Outlook Mailbox, Heuristique de macrovirus........: marche Heuristique fichier..............: moyen Catégories de dangers divergentes: +APPL,+GAME,+JOKE,+PCK,+SPR, Début de la recherche : mercredi 7 janvier 2009 16:09 La recherche d'objets cachés commence. Accès à la recherche Rootkit refusé. La recherche sur les processus démarrés commence : Processus de recherche 'avscan.exe' - '1' module(s) sont contrôlés Processus de recherche 'avcenter.exe' - '1' module(s) sont contrôlés Processus de recherche 'wmiprvse.exe' - '0' module(s) sont contrôlés Processus de recherche 'explorer.exe' - '1' module(s) sont contrôlés Processus de recherche 'aawservice.exe' - '0' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '0' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '0' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '0' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '0' module(s) sont contrôlés Processus de recherche 'svchost.exe' - '0' module(s) sont contrôlés Processus de recherche 'lsass.exe' - '0' module(s) sont contrôlés Processus de recherche 'services.exe' - '0' module(s) sont contrôlés Processus de recherche 'winlogon.exe' - '0' module(s) sont contrôlés Processus de recherche 'csrss.exe' - '0' module(s) sont contrôlés Processus de recherche 'smss.exe' - '0' module(s) sont contrôlés '3' processus ont été contrôlés avec '3' modules La recherche sur les secteurs d'amorçage maître commence : Secteur d'amorçage maître HD0 [iNFO] Aucun virus trouvé ! [AVERTISSEMENT] Erreur système [5]: Accès refusé. La recherche sur les secteurs d'amorçage commence : Secteur d'amorçage 'C:\' [iNFO] Aucun virus trouvé ! [AVERTISSEMENT] Erreur système [5]: Accès refusé. Secteur d'amorçage 'D:\' [iNFO] Aucun virus trouvé ! [AVERTISSEMENT] Erreur système [5]: Accès refusé. La recherche sur les renvois aux fichiers exécutables (registre) commence. Le registre a été contrôlé ( '77' fichiers). La recherche sur les fichiers sélectionnés commence : Recherche débutant dans 'C:\' <SYSTEME> C:\NTDETECT.COM [AVERTISSEMENT] Impossible d'ouvrir le fichier ! C:\pagefile.sys [AVERTISSEMENT] Impossible d'ouvrir le fichier ! C:\Documents and Settings\ISO\Bureau\mes docs\install_flash_player.exe [AVERTISSEMENT] Impossible d'ouvrir le fichier ! C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\swg-3.0.1225.9868\SearchWithGoogleUpdate.exe [AVERTISSEMENT] Impossible d'ouvrir le fichier ! C:\Program Files\Google\GoogleToolbarNotifier\swg-3.1.807.1746\SearchWithGoogleUpdate.exe [AVERTISSEMENT] Impossible d'ouvrir le fichier ! C:\Program Files\Trend Micro\HijackThis\backups\backup-20090105-122708-768.dll [RESULTAT] Contient le modèle de détection du programme SPR/Fake.SpyProte.1 [AVERTISSEMENT] Erreur lors de la création d'une copie de sécurité du fichier. Le fichier n'a pas été supprimé. Code d'erreur : 26003 [AVERTISSEMENT] Impossible de supprimer le fichier! [REMARQUE] Tentative en cours d'exécuter l'action à l'aide de la bibliothèque ARK. [REMARQUE] Accès à la recherche Rootkit refusé. C:\Qoobox\Quarantine\C\WINDOWS\system32\cwbuncob32.dll.vir [RESULTAT] Contient le cheval de Troie TR/Spy.Gen [REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '49c6ca05.qua' ! C:\Qoobox\Quarantine\C\WINDOWS\system32\cwbuncob32.VIR.vir [RESULTAT] Contient le cheval de Troie TR/Spy.Gen [REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '49c6ca09.qua' ! C:\Qoobox\Quarantine\C\WINDOWS\system32\cwbuncob32.VIR000.vir [RESULTAT] Contient le cheval de Troie TR/Spy.Gen [REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '49c6ca0c.qua' ! C:\Qoobox\Quarantine\C\WINDOWS\system32\srtiwpuv.dll.vir [RESULTAT] Contient le cheval de Troie TR/Dldr.Small.ahzh [REMARQUE] Le fichier a été déplacé dans le répertoire de quarantaine sous le nom '49d8ca0a.qua' ! C:\Qoobox\Quarantine\C\WINDOWS\system32\_cwbuncob32_.dll.zip [0] Type d'archive: ZIP --> cwbuncob32.dll [RESULTAT] Contient le cheval de Troie TR/Spy.Gen --> cwbuncob32.dll.1 [RESULTAT] Contient le cheval de Troie TR/Drop.Softomat.AN --> cwbuncob32.dll.2 [RESULTAT] Contient le cheval de Troie TR/Drop.Softomat.AN [AVERTISSEMENT] Erreur lors de la création d'une copie de sécurité du fichier. Le fichier n'a pas été supprimé. Code d'erreur : 26003 [AVERTISSEMENT] Impossible de supprimer le fichier! [REMARQUE] Tentative en cours d'exécuter l'action à l'aide de la bibliothèque ARK. [AVERTISSEMENT] Erreur dans la bibliothèque ARK C:\WINDOWS\NIRCMD.exe [RESULTAT] Contient le modèle de détection de l'application APPL/NirCmd.E.2.B [AVERTISSEMENT] Erreur lors de la création d'une copie de sécurité du fichier. Le fichier n'a pas été supprimé. Code d'erreur : 26003 [AVERTISSEMENT] Impossible de supprimer le fichier! [REMARQUE] Tentative en cours d'exécuter l'action à l'aide de la bibliothèque ARK. [REMARQUE] Accès à la recherche Rootkit refusé. C:\WINDOWS\system32\fxkwujjl.dll [AVERTISSEMENT] Impossible d'ouvrir le fichier ! C:\WINDOWS\system32\iyebnffv.dll [AVERTISSEMENT] Impossible d'ouvrir le fichier ! C:\WINDOWS\system32\otanqfpd.dll [AVERTISSEMENT] Impossible d'ouvrir le fichier ! C:\WINDOWS\system32\qbcvkaer.dll [AVERTISSEMENT] Impossible d'ouvrir le fichier ! C:\WINDOWS\system32\uysjnnpx.dll [AVERTISSEMENT] Impossible d'ouvrir le fichier ! C:\WINDOWS\system32\yvobfvrx.dll [AVERTISSEMENT] Impossible d'ouvrir le fichier ! Recherche débutant dans 'D:\' <DONNEES> Fin de la recherche : mercredi 7 janvier 2009 16:32 Temps nécessaire: 22:41 Minute(s) La recherche a été effectuée intégralement 4934 Les répertoires ont été contrôlés 337900 Des fichiers ont été contrôlés 9 Des virus ou programmes indésirables ont été trouvés 0 Des fichiers ont été classés comme suspects 0 Des fichiers ont été supprimés 0 Des virus ou programmes indésirables ont été réparés 4 Les fichiers ont été déplacés dans la quarantaine 0 Les fichiers ont été renommés 11 Impossible de contrôler des fichiers 337880 Fichiers non infectés 12918 Les archives ont été contrôlées 17 Avertissements 7 Consignes

Bon j'ai relancé une 2e fois combo fixe, voici le rapport mais j'ai toujours cet écran de windows live. ComboFix 09-01-05.02 - Administrateur 2009-01-05 21:18:18.2 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.1014.492 [GMT 1:00] Lancé depuis: c:\documents and settings\Administrateur\Bureau\ComboFix.exe Commutateurs utilisés :: c:\documents and settings\Administrateur\Bureau\CFScript.txt * Un nouveau point de restauration a été créé FILE :: c:\windows\cdplayer.ini c:\windows\system32\38A.tmp c:\windows\system32\auflynmf.ini c:\windows\system32\bmehrfha.ini c:\windows\system32\comrmmio.ini c:\windows\System32\cwbuncob32.dll c:\windows\system32\ghofhnwk.ini c:\windows\system32\gPXHknmp.ini c:\windows\system32\gPXHknmp.ini2 c:\windows\system32\iaumfphf.ini c:\windows\system32\iycmxbjp.ini c:\windows\system32\lcpjckek.ini c:\windows\system32\mws59179.dll c:\windows\system32\nlmyos.dll c:\windows\system32\otxldgwm.ini c:\windows\system32\srtiwpuv.dll c:\windows\system32\wcxdtkje.dll c:\windows\system32\xorpbhdh.ini . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\windows\system32\cwbuncob32.dll . ---- Previous Run ------- . c:\documents and settings\Administrateur\Application Data\02000000e0c05e2b509C.manifest c:\documents and settings\Administrateur\Application Data\02000000e0c05e2b509O.manifest c:\documents and settings\Administrateur\Application Data\02000000e0c05e2b509P.manifest c:\documents and settings\Administrateur\Application Data\02000000e0c05e2b509S.manifest c:\documents and settings\Administrateur\Local Settings\Application Data\ucmmc.dat c:\documents and settings\Administrateur\Local Settings\Application Data\ucmmc.exe c:\documents and settings\Administrateur\Local Settings\Application Data\ucmmc_nav.dat c:\documents and settings\Administrateur\Local Settings\Application Data\ucmmc_navps.dat c:\documents and settings\All Users\Menu Démarrer\Programmes\MessengerSkinner c:\documents and settings\All Users\Menu Démarrer\Programmes\MessengerSkinner\Conditions générales.url c:\documents and settings\All Users\Menu Démarrer\Programmes\MessengerSkinner\Confidentialité.url c:\documents and settings\All Users\Menu Démarrer\Programmes\MessengerSkinner\Désinstaller.lnk c:\documents and settings\All Users\Menu Démarrer\Programmes\MessengerSkinner\MessengerSkinner.lnk c:\documents and settings\All Users\Menu Démarrer\Programmes\MessengerSkinner\Website.url c:\documents and settings\ISO\Application Data\02000000e0c05e2b509C.manifest c:\documents and settings\ISO\Application Data\02000000e0c05e2b509O.manifest c:\documents and settings\ISO\Application Data\02000000e0c05e2b509P.manifest c:\documents and settings\ISO\Application Data\02000000e0c05e2b509S.manifest c:\windows\cdplayer.ini c:\windows\GnuHashes.ini c:\windows\IE4 Error Log.txt c:\windows\system32\38A.tmp c:\windows\system32\auflynmf.ini c:\windows\system32\bmehrfha.ini c:\windows\system32\comrmmio.ini c:\windows\system32\cwbuncob32.dll c:\windows\system32\ghofhnwk.ini c:\windows\system32\gPXHknmp.ini c:\windows\system32\gPXHknmp.ini2 c:\windows\system32\GroupPolicy000.dat c:\windows\system32\GroupPolicyManifest c:\windows\system32\GroupPolicyManifest\1.music.mp3.kwd c:\windows\system32\GroupPolicyManifest\10.setup.zip.kwd c:\windows\system32\GroupPolicyManifest\11.unpack.zip.kwd c:\windows\system32\GroupPolicyManifest\12.limepro.zip.kwd c:\windows\system32\GroupPolicyManifest\13.keygen.zip.kwd c:\windows\system32\GroupPolicyManifest\2.crack.zip.kwd c:\windows\system32\GroupPolicyManifest\8.mpgvideo.mpg.kwd c:\windows\system32\GroupPolicyManifest\9.remix.mp3.kwd c:\windows\system32\iaumfphf.ini c:\windows\system32\iycmxbjp.ini c:\windows\system32\jbcuyoyr.tmp c:\windows\system32\jbcuyoyr.tmp2 c:\windows\system32\lcpjckek.ini c:\windows\system32\mcrh.tmp c:\windows\system32\nlmyos.dll c:\windows\system32\otxldgwm.ini c:\windows\system32\pqjtbr.dll c:\windows\system32\qieainqm.ini c:\windows\system32\srtiwpuv.dll c:\windows\system32\uaqvofey.dll c:\windows\system32\wcxdtkje.dll c:\windows\system32\xorpbhdh.ini c:\windows\system32\xywyguno.ini . ((((((((((((((((((((((((((((( Fichiers créés du 2008-12-05 au 2009-01-05 )))))))))))))))))))))))))))))))))))) . 2009-01-05 20:37 . 2009-01-05 20:37 <REP> d-------- c:\documents and settings\All Users\Application Data\Kiwee Toolbar 2009-01-04 21:40 . 2009-01-05 14:03 <REP> d-------- C:\ToolBar SD 2009-01-04 21:24 . 2009-01-04 21:25 <REP> d-------- c:\windows\system32\NtmsData 2009-01-04 19:02 . 2009-01-04 19:02 <REP> d-------- C:\rsit 2008-12-29 09:47 . 2008-10-16 02:01 1,499,648 -----c--- c:\windows\system32\dllcache\shdocvw.dll 2008-12-29 09:46 . 2008-10-24 12:21 455,296 -----c--- c:\windows\system32\dllcache\mrxsmb.sys 2008-12-29 09:45 . 2008-09-04 18:16 1,106,944 -----c--- c:\windows\system32\dllcache\msxml3.dll 2008-12-29 09:17 . 2008-12-29 09:17 373,760 --ahs---- c:\windows\system32\2EB6.tmp 2008-12-28 21:41 . 2008-12-28 21:41 <REP> d-------- c:\program files\Trend Micro 2008-12-28 20:17 . 2008-12-28 20:17 <REP> d-------- c:\program files\SpywareBlaster 2008-12-28 20:17 . 2008-12-28 21:54 <REP> d-a------ c:\documents and settings\All Users\Application Data\TEMP 2008-12-28 12:40 . 2008-12-28 12:40 230 --a------ c:\windows\system32\spupdsvc.inf 2008-12-28 11:41 . 2008-12-28 11:41 <REP> d-------- c:\program files\Avira 2008-12-28 11:41 . 2008-12-28 11:41 <REP> d-------- c:\documents and settings\All Users\Application Data\Avira 2008-12-26 06:56 . 2008-12-26 06:56 268 --ah----- C:\sqmdata16.sqm 2008-12-26 06:56 . 2008-12-26 06:56 244 --ah----- C:\sqmnoopt16.sqm 2008-12-25 22:21 . 2008-12-25 22:21 268 --ah----- C:\sqmdata15.sqm 2008-12-25 22:21 . 2008-12-25 22:21 244 --ah----- C:\sqmnoopt15.sqm 2008-12-16 18:26 . 2008-12-29 19:09 135,168 --a------ c:\windows\system32\cwbuncob32.VIR000 2008-12-16 18:26 . 2008-12-29 09:34 135,168 --a------ c:\windows\system32\cwbuncob32.VIR 2008-12-13 21:31 . 2008-12-13 21:31 <REP> d-------- c:\program files\Lionhead Studios 2008-12-12 18:42 . 2008-12-12 18:42 <REP> d-------- c:\program files\Slitherine 2008-12-07 18:07 . 2008-12-12 18:39 <REP> d-------- c:\documents and settings\All Users\Application Data\Firefly Studios 2008-12-07 18:02 . 2008-12-07 18:04 <REP> d-------- c:\program files\GameShadow 2008-12-07 18:01 . 2005-05-26 15:34 2,297,552 --a------ c:\windows\system32\d3dx9_26.dll . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2009-01-05 20:22 --------- d-----w c:\program files\Symantec AntiVirus 2009-01-05 11:10 --------- d-----w c:\documents and settings\ISO\Application Data\uTorrent 2009-01-04 20:30 --------- d-----w c:\program files\lx_cats 2008-12-28 20:51 --------- d-----w c:\program files\Google 2008-12-20 15:22 --------- d--h--w c:\program files\InstallShield Installation Information 2008-12-20 15:22 --------- d-----w c:\program files\epson 2008-12-20 15:21 --------- d-----w c:\program files\Railroad Tycoon II 2008-12-20 15:18 --------- d-----w c:\program files\DeskView 2008-12-20 15:16 --------- d-----w c:\program files\Fichiers communs\FSC 2008-12-20 14:24 --------- d-----w c:\program files\Fichiers communs\AVSMedia 2008-12-20 14:24 --------- d-----w c:\program files\Azureus 2008-12-20 14:24 --------- d-----w c:\program files\AVS4YOU 2008-12-16 23:38 --------- d-----w c:\documents and settings\ISO\Application Data\LimeWire 2008-12-16 22:30 --------- d-----w c:\documents and settings\Administrateur\Application Data\LimeWire 2008-12-16 19:27 --------- d-----w c:\documents and settings\Administrateur\Application Data\Azureus 2008-12-16 16:41 --------- d-----w c:\program files\eMule 2008-12-15 09:04 56,712 ----a-w c:\documents and settings\ISO\Application Data\GDIPFONTCACHEV1.DAT 2008-12-11 10:34 --------- d-----w c:\program files\Lexmark X1100 Series 2008-12-03 12:02 --------- d-----w c:\program files\Java 2008-11-24 09:26 --------- d-----w c:\program files\Empire Interactive 2008-11-23 16:35 --------- d-----w c:\program files\GameSpy Arcade 2008-11-23 16:21 --------- d-----w c:\program files\directx 2008-11-13 07:01 --------- d-----w c:\documents and settings\ISO\Application Data\agi 2008-11-09 15:50 --------- d-----w c:\program files\NOS 2008-11-09 15:50 --------- d-----w c:\documents and settings\All Users\Application Data\NOS 2008-11-09 15:49 --------- d-----w c:\program files\Marvell 2008-11-09 15:43 --------- d-----w c:\program files\ma-config.com 2008-11-09 15:43 --------- d-----w c:\documents and settings\All Users\Application Data\ma-config.com 2008-11-09 15:19 --------- d-----w c:\program files\Fichiers communs\Adobe 2008-11-08 07:45 --------- d-----w c:\program files\Spybot - Search & Destroy 2008-09-25 05:55 56,712 ----a-w c:\documents and settings\Administrateur\Application Data\GDIPFONTCACHEV1.DAT 2008-07-31 20:32 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012008073120080801\index.dat . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] "MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2008-09-29 185872] "Client Access Check Version"="c:\program files\IBM\Client Access\cwbckver.exe" [2004-05-01 45106] "VX3000"="c:\windows\vVX3000.exe" [2007-04-10 709992] "PSUtility"="c:\addon\Fujitsu\PSUtility\TrayManager.exe" [2005-10-11 151552] "Client Access Help Update"="c:\program files\IBM\Client Access\cwbinhlp.exe" [2004-05-01 24576] "Client Access Express Welcome"="c:\program files\IBM\Client Access\cwbwlwiz.exe" [2004-05-01 20480] "IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2005-10-12 139264] "lxdjamon"="c:\program files\Lexmark 1400 Series\lxdjamon.exe" [2007-03-06 20480] "vptray"="c:\progra~1\SYMANT~1\VPTray.exe" [2005-12-27 85648] "LoadBtnHnd"="c:\program files\Fujitsu\BtnHnd\BtnHnd.exe" [2005-07-21 61440] "LoadFUJ02E3"="c:\program files\Fujitsu\FUJ02E3\FUJ02E3.exe" [2005-06-08 69632] "IndicatorUtility"="c:\program files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe" [2005-08-09 81920] "LXDJCATS"="c:\windows\System32\spool\DRIVERS\W32X86\3\LXDJtime.dll" [2007-02-10 102400] "LoadFujitsuQuickTouch"="c:\addon\Fujitsu\Application Panel\QuickTouch.exe" [2005-07-21 353792] "Lexmark X1100 Series"="c:\program files\Lexmark X1100 Series\lxbkbmgr.exe" [2003-08-19 57344] "Client Access Service"="c:\program files\IBM\Client Access\cwbsvstr.exe" [2004-05-01 20530] "ccApp"="c:\program files\Fichiers communs\Symantec Shared\ccApp.exe" [2005-11-16 48800] "Client Access PC5250 Sound"="c:\program files\IBM\Client Access\Emulator\pcssnd.exe" [2004-05-01 40960] "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-01-05 761946] "igfxpers"="c:\windows\system32\igfxpers.exe" [2005-11-03 118784] "igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2005-11-03 77824] "AGRSMMSG"="AGRSMMSG.exe" [2006-01-17 c:\windows\AGRSMMSG.exe] "RTHDCPL"="RTHDCPL.EXE" [2005-12-09 c:\windows\RTHDCPL.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager] BootExecute REG_MULTI_SZ autocheck autochk *\0lsdelete [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Bluetooth Manager.lnk] path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Bluetooth Manager.lnk backup=c:\windows\pss\Bluetooth Manager.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk] path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Lancement rapide d'Adobe Reader.lnk backup=c:\windows\pss\Lancement rapide d'Adobe Reader.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^WinZip Quick Pick.lnk] path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\WinZip Quick Pick.lnk backup=c:\windows\pss\WinZip Quick Pick.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] --a------ 2008-06-12 02:38 34672 c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avgnt] --a------ 2008-06-12 13:28 266497 c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools-1033] --a------ 2004-08-22 16:05 81920 c:\program files\D-Tools\daemon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search] --a------ 2008-04-09 13:56 120320 c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] --a------ 2001-07-09 09:50 155648 c:\windows\system32\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NSLauncher] --a------ 2007-09-07 13:44 3100672 c:\program files\Nokia\Nokia Software Launcher\NSLauncher.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] -ra------ 2008-04-23 16:45 22058792 c:\program files\Skype\Phone\Skype.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] --a------ 2008-11-10 05:43 136600 c:\program files\Java\jre6\bin\jusched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] --a------ 2008-05-05 18:45 68856 c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe] --a------ 2008-09-29 17:04 185872 c:\program files\Fichiers communs\Real\Update_OB\realsched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG] --------- 2006-11-03 08:59 204288 c:\program files\Windows Media Player\wmpnscfg.exe [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\WINDOWS\\system32\\lxdjcoms.exe"= "c:\\Program Files\\Lexmark 1400 Series\\lxdjamon.exe"= "c:\\Program Files\\Lexmark 1400 Series\\App4R.exe"= "c:\\WINDOWS\\system32\\LEXPPS.EXE"= "c:\\Documents and Settings\\ISO\\Program Files\\uTorrent\\uTorrent.exe"= "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"= "c:\\WINDOWS\\system32\\[Emoticons-plus.com] Winkaa 2.0.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= "c:\\Program Files\\LimeWire\\LimeWire.exe"= "c:\\WINDOWS\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\eMule\\emule.exe"= "c:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\lxdjwbgw.exe"= "c:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\lxdjpswx.exe"= "c:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\lxdjjswx.exe"= "c:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\lxdjtime.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009 R3 FUJ02E1;%FUJ02E1.DeviceDesc%;c:\windows\system32\drivers\FUJ02E1.sys [2006-05-31 5632] R3 FUJ02E3;Fujitsu FUJ02E3 Device Driver;c:\windows\system32\drivers\fuj02e3.sys [2006-05-31 4864] R4 AGWinService;AG Windows Service;c:\program files\AGI\common\win32\pythonservice.exe [2008-10-24 10240] R4 SavRoam;SAVRoam;c:\program files\Symantec AntiVirus\SavRoam.exe [2005-12-27 172176] R4 yksvc;Marvell Yukon Service;RUNDLL32.EXE ykx32mpcoinst,serviceStartProc --> RUNDLL32.EXE ykx32mpcoinst,serviceStartProc [?] S3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [2008-11-02 195752] S3 SNIF0010;FSC Flash Update Driver B;\??\c:\docume~1\GSF\LOCALS~1\Temp\SniF0010.sys --> c:\docume~1\GSF\LOCALS~1\Temp\SniF0010.sys [?] S3 SNIF0011;FSC Flash Update Driver A;\??\c:\docume~1\GSF\LOCALS~1\Temp\SniF0011.sys --> c:\docume~1\GSF\LOCALS~1\Temp\SniF0011.sys [?] --- Other Services/Drivers In Memory --- *Deregistered* - EraserUtilDrv10614 *Deregistered* - uphcleanhlp [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\I] \Shell\AutoRun\command - I:\setupSNK.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5f7abd7e-f813-11dc-8a49-00037ae696a6}] \Shell\AutoRun\command - H:\ \Shell\open\Command - rundll32.exe .\\sciwave.dll,InstallM [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{83592e24-bf92-11dc-8a29-00037ae696a6}] \Shell\AutoRun\command - Autorun.exe /s [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e6c0f1ed-009f-11dd-8a59-00037ae696a6}] \Shell\AutoRun\command - I:\setupSNK.exe . Contenu du dossier 'Tâches planifiées' 2008-04-03 c:\windows\Tasks\Microsoft_Hardware_Launch_setup_exe.job - E:\setup.exe [2005-04-06 20:39] . - - - - ORPHELINS SUPPRIMES - - - - WebBrowser-{6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - c:\program files\Kiwee Toolbar\2.8.167\KiweeIEToolbar.dll HKLM-Run-lxdjmon.exe - c:\program files\Lexmark 1400 Series\lxdjmon.exe MSConfigStartUp-KiweeHook - c:\program files\Kiwee Toolbar\2.8.167\kwtbaim.exe . ------- Examen supplémentaire ------- . uStart Page = hxxp://www.msn.fr/ uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 mWindow Title = uSearchURL,(Default) = hxxp://www.google.com/search?q=%s IE: E&xporter vers Microsoft Excel - c:\micros~1\Office10\EXCEL.EXE/3000 Trusted Zone: www.mygsf.net c:\windows\Downloaded Program Files\InstallerControl.dll - O16 -: CabBuilder hxxp://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab c:\windows\Downloaded Program Files\OSDC5.OSD O16 -: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - hxxp://fichiers.touslesdrivers.com/fichiers/hardwaredetection/hardwaredetection_3_0_3_5.cab c:\windows\Downloaded Program Files\hardwaredetection.inf O16 -: {DFB5BCF1-06AE-4ABB-BFA8-1E228F41C50A} - hxxp://bobtv.fr/download/cfweb_www.bobtv.fr-download_instmodule.exe FF - ProfilePath - c:\documents and settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\w8sds7n9.default\ FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q= FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - hxxp://www.msn.fr/ FF - prefs.js: keyword.URL - hxxp://kwtb.search.imgag.com/?c=GNKIW29193&sbs=1&sc=2&f=web&vernum=1.0&uid=&did=f8d4a70c-98e2-4081-901d-01bf93043ede&q= FF - component: c:\program files\Real\RealPlayer\browserrecord\components\nprpbrowserrecordplugin.dll FF - plugin: c:\program files\ma-config.com\nphardwaredetection.dll . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-01-05 21:24:35 Windows 5.1.2600 Service Pack 3 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . ------------------------ Autres processus actifs ------------------------ . c:\program files\Fichiers communs\Symantec Shared\ccSetMgr.exe c:\program files\Fichiers communs\Symantec Shared\ccEvtMgr.exe c:\program files\Lavasoft\Ad-Aware\aawservice.exe c:\windows\system32\LEXBCES.EXE c:\windows\system32\LEXPPS.EXE c:\windows\system32\scardsvr.exe c:\program files\Avira\AntiVir PersonalEdition Classic\sched.exe c:\program files\Avira\AntiVir PersonalEdition Classic\avguard.exe c:\program files\Symantec AntiVirus\DefWatch.exe c:\program files\Intel\Intel Matrix Storage Manager\IAANTMon.exe c:\program files\Java\jre6\bin\jqs.exe c:\windows\system32\lxdjcoms.exe c:\program files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe c:\program files\Symantec AntiVirus\Rtvscan.exe c:\program files\UPHClean\uphclean.exe c:\windows\system32\UStorSrv.exe c:\program files\RealVNC\VNC4\winvnc4.exe c:\program files\Windows Media Player\wmpnetwk.exe c:\windows\system32\rundll32.exe c:\windows\system32\wbem\wmiapsrv.exe c:\program files\Lexmark X1100 Series\lxbkbmon.exe . ************************************************************************** . Heure de fin: 2009-01-05 21:26:38 - La machine a redémarré [Administrateur] ComboFix-quarantined-files.txt 2009-01-05 20:26:35 Avant-CF: 10,038,767,616 octets libres Après-CF: 9,903,788,032 octets libres 331 --- E O F --- 2008-12-29 16:04:29

J'ai lancé combofix et apparrement il a planté, la dernière ligne était: " étape 50 terminée" et l'ecran est resté comme ça. Au bout de qques heures, j'ai tout éteint et redémarré. Au redémarrage, j'ai un écran blanc sur fond gris, avec le logo windows live qui me dit ceci: "A Kiwee Heads Up: There was an error with Yahoo Messenger and your Kiwee Toolbar needs to go bye-bye for now. Would you like to send this error message in order to help us improve the toolbar?" Et pas moyen de le virer.

rapport de l'étape 2 de toolbar -----------\\ ToolBar S&D 1.2.8 XP/Vista Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3 X86-based PC ( Multiprocessor Free : Genuine Intel® CPU T2400 @ 1.83GHz ) BIOS : Default System BIOS USER : Administrateur ( Administrator ) BOOT : Normal boot Antivirus : Symantec AntiVirus Corporate Edition 10.0.2.2000 (Activated) C:\ (Local Disk) - NTFS - Total:35 Go (Free:8 Go) D:\ (Local Disk) - NTFS - Total:39 Go (Free:9 Go) E:\ (CD or DVD) - UDF - Total:3 Go (Free:0 Go) F:\ (CD or DVD) "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 ) Option : [2] ( 05/01/2009|14:01 ) -----------\\ SUPPRESSION Supprime! - C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127 Supprime! - C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127 Supprime! - C:\Program Files\Dealio\DealioAU.exe Supprime! - C:\Program Files\Dealio\kb127 Supprime! - C:\Program Files\Dealio\SearchSettingsKit.exe Supprime! - C:\WINDOWS\Prefetch\DEALIOAU.EXE-32C4A05D.pf Supprime! - C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Dealio Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167 Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167\AGTBCore.dll Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167\KiweeCommonCtrls.dll Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167\KiweeContentHost.dll Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167\KiweeTBCore.dll Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167\MsnIMToolbar.dll Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167\Riched20.dll Supprime! - C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Kiwee Toolbar Supprime! - C:\WINDOWS\Prefetch\SEARCHSETTINGS.EXE-253CB611.pf Supprime! - C:\DOCUME~1\ADMINI~1\APPLIC~1\Search Settings\kb127 Supprime! - C:\DOCUME~1\ISO\APPLIC~1\Search Settings\kb127 Supprime! - C:\Program Files\Search Settings\kb127 Supprime! - C:\Program Files\Search Settings\SearchSettings.exe Supprime! - C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\ICD1.tmp Supprime! - C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio Supprime! - C:\DOCUME~1\ISO\APPLIC~1\Dealio Supprime! - C:\Program Files\Dealio Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar Echec ! - C:\Program Files\Kiwee Toolbar Supprime! - C:\DOCUME~1\ADMINI~1\APPLIC~1\Search Settings Supprime! - C:\DOCUME~1\ISO\APPLIC~1\Search Settings Supprime! - C:\Program Files\Search Settings -----------\\ DEUXIEME PASSAGE Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167 Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167\AGTBCore.dll Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167\KiweeCommonCtrls.dll Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167\KiweeContentHost.dll Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167\KiweeTBCore.dll Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167\MsnIMToolbar.dll Echec ! - C:\Program Files\Kiwee Toolbar\2.8.167\Riched20.dll Echec ! - C:\Program Files\Kiwee Toolbar -----------\\ Recherche de Fichiers / Dossiers ... C:\Program Files\Kiwee Toolbar C:\Program Files\Kiwee Toolbar\2.8.167 C:\Program Files\Kiwee Toolbar\2.8.167\AGTBCore.dll C:\Program Files\Kiwee Toolbar\2.8.167\KiweeCommonCtrls.dll C:\Program Files\Kiwee Toolbar\2.8.167\KiweeContentHost.dll C:\Program Files\Kiwee Toolbar\2.8.167\KiweeTBCore.dll C:\Program Files\Kiwee Toolbar\2.8.167\MsnIMToolbar.dll C:\Program Files\Kiwee Toolbar\2.8.167\Riched20.dll -----------\\ Extensions (Administrateur) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar (Administrateur) - {b66bc4c3-6d25-4a10-8c59-01daa9063051} => foxgame (ISO) - {b66bc4c3-6d25-4a10-8c59-01daa9063051} => foxgame -----------\\ [..\Internet Explorer\Main] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Local Page"="C:\\WINDOWS\\system32\\blank.htm" "Start Page"="http://www.msn.fr/" "Search Page"="http://www.google.com" "Search Bar"="http://www.google.com/ie"'>http://www.google.com/ie" "SearchMigratedDefaultURL"="http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome" "Default_Search_URL"="http://www.google.com/ie" "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" "Start Page"="http://www.msn.com/" --------------------\\ Recherche d'autres infections C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\MessengerSkinner C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\MessengerSkinner\Conditions g‚n‚rales.url C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\MessengerSkinner\Confidentialit‚.url C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\MessengerSkinner\D‚sinstaller.lnk C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\MessengerSkinner\MessengerSkinner.lnk C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\MessengerSkinner\Website.url C:\DOCUME~1\ADMINI~1\LOCALS~1\APPLIC~1\ucmmc.dat C:\DOCUME~1\ADMINI~1\LOCALS~1\APPLIC~1\ucmmc.exe C:\DOCUME~1\ADMINI~1\LOCALS~1\APPLIC~1\ucmmc_nav.dat C:\DOCUME~1\ADMINI~1\LOCALS~1\APPLIC~1\ucmmc_navps.dat ==> EGDACCESS <== C:\WINDOWS\system32\gPXHknmp.ini C:\WINDOWS\system32\gPXHknmp.ini2 ==> VUNDO <== 1 - "C:\ToolBar SD\TB_1.txt" - 05/01/2009|12:19 - Option : [1] 2 - "C:\ToolBar SD\TB_2.txt" - 05/01/2009|14:03 - Option : [2] -----------\\ Fin du rapport a 14:03:48,09

2, j'ai relancé hijackthis, coché et cliqué fixcheked sur les lignes indiquées, et j'ai téléchargé combofix comme tu me l'as dit au point 3. J'attends la suite.

laisse tomber pour symantec, je voudrais le désactiver au moins si on ne peut pas le supprimer. et prendre un autre antivirus comme antivir. 1 rapport toolbarSD -----------\\ ToolBar S&D 1.2.8 XP/Vista Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3 X86-based PC ( Multiprocessor Free : Genuine Intel® CPU T2400 @ 1.83GHz ) BIOS : Default System BIOS USER : Administrateur ( Administrator ) BOOT : Normal boot Antivirus : Symantec AntiVirus Corporate Edition 10.0.2.2000 (Activated) C:\ (Local Disk) - NTFS - Total:35 Go (Free:8 Go) D:\ (Local Disk) - NTFS - Total:39 Go (Free:9 Go) E:\ (CD or DVD) - UDF - Total:3 Go (Free:0 Go) F:\ (CD or DVD) "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 ) Option : [1] ( 05/01/2009|12:17 ) -----------\\ Recherche de Fichiers / Dossiers ... C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\alerts.gif C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\alerts_over.gif C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\alerts_rec.gif C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\alerts_rec_over.gif C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\chevron-small.gif C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\DealioSearch.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\deals-leftcap.gif C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\deal_report.jpg C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\ebay_login.jpg C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\err_mainwindow.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\err_toolbar.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\global_scripts.js C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\headerbgthin.jpg C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\highlight-bg.png C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\logo.gif C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\logo_over.gif C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\man_toolbar.css C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\man_toolbar.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\man_toolbar.js C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\man_toolbarl.js C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\post-this-deal.gif C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\post-this-deal_over.gif C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\scripts.js C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\scroller.js C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\search-chevron.gif C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\search-chevron_over.gif C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\search_bg_blink.gif C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\separator.gif C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\settings.gif C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\settings_over.gif C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\yahoo-search.png C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\index.76.35 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.10.76 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.109.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.110.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.12.52 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.13.58 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.130.58 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.135.50 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.153.44 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.155.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.156.49 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.16.60 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.161.52 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.178.66 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.184.55 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.188.52 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.189.45 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.196.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.198.56 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.199.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.200.53 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.201.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.202.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.203.71 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.205.62 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.213.71 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.214.49 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.215.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.216.67 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.217.67 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.218.52 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.219.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.220.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.221.57 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.222.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.223.68 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.226.68 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.227.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.228.62 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.229.76 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.23.63 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.239.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.24.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.240.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.241.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.242.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.243.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.244.63 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.245.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.247.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.248.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.249.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.250.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.251.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.252.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.253.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.254.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.255.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.256.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.257.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.279.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.28.58 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.282.75 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.283.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.284.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.289.67 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.290.62 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.291.61 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.296.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.297.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.304.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.307.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.308.75 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.31.47 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.310.46 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.311.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.315.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.316.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.317.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.318.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.319.49 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.32.48 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.334.44 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.335.60 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.336.44 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.337.44 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.338.75 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.339.47 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.34.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.340.47 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.341.47 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.349.50 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.35.48 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.350.50 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.351.51 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.352.54 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.353.51 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.354.51 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.357.62 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.358.52 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.359.52 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.360.53 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.361.54 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.362.68 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.363.58 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.364.54 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.365.53 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.367.56 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.368.58 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.369.55 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.370.56 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.371.56 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.372.57 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.373.55 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.375.56 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.376.57 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.377.55 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.378.65 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.384.58 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.386.71 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.387.59 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.388.59 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.389.59 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.390.60 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.391.60 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.392.60 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.393.60 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.394.60 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.396.61 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.397.61 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.398.60 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.399.60 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.403.61 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.404.63 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.405.61 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.406.61 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.407.76 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.408.63 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.409.61 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.412.62 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.413.62 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.414.62 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.415.62 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.416.62 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.417.62 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.418.62 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.419.62 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.420.62 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.421.62 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.423.63 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.424.63 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.425.63 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.426.63 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.427.63 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.428.65 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.429.63 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.430.63 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.432.65 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.433.64 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.434.65 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.435.64 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.436.76 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.437.64 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.438.71 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.439.71 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.440.75 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.442.73 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.443.73 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.444.73 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.445.68 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.446.69 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.450.67 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.451.67 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.452.68 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.453.68 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.454.69 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.456.69 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.457.75 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.458.70 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.459.70 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.460.69 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.462.74 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.463.69 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.464.70 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.465.68 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.468.70 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.469.70 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.470.70 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.471.73 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.472.70 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.478.74 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.479.73 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.480.68 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.481.71 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.482.74 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.49.67 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.50.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.500.71 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.501.74 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.502.71 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.51.69 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.52.72 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.520.76 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.521.76 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.522.76 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.53.51 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.531.76 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.532.75 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.534.75 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.54.47 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.55.45 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.56.69 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.57.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.58.47 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.593.76 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.595.76 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.63.57 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.66.47 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.70.75 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.71.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\dealio-14248.log C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\dod_cache.xml C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_1528_556_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_1628_4124_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_1628_5160_15.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_1836_1004_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_1836_4384_38.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_1836_4512_14.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_1836_5220_8.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_1836_5928_39.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_1836_5928_40.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2192_5756_8.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2552_1672_62.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2552_2124_72.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2552_2384_43.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2552_2420_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2552_436_18.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2552_5040_124.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2552_5040_125.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2552_5520_82.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2552_5564_117.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2552_5944_75.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2552_6004_92.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2864_1756_29.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2864_2708_10.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2864_4148_35.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2864_4292_14.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2864_4332_20.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2864_4380_19.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2864_4412_26.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2864_4900_32.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2864_5528_38.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2864_5568_11.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2864_5672_25.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2868_2880_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2940_3044_17.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2940_4336_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2940_5980_26.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3196_2632_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3196_3120_13.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3196_5092_24.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3196_5548_49.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3196_5636_17.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3196_5852_50.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3196_5852_51.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3244_5856_9.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3244_652_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3400_448_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3756_1788_22.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3756_3700_28.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3756_4312_108.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3756_4832_85.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3756_4936_122.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3756_4936_123.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3756_5160_111.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3756_5352_40.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3756_5576_58.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3756_5692_92.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3756_5792_34.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3784_5020_9.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3784_6092_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3808_2888_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3808_4224_78.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4136_1124_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4140_3504_11.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4140_5160_15.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_420_160_11.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_420_3772_22.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_420_4400_32.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_420_4648_29.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_420_4920_25.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_420_5132_40.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_420_6084_14.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_420_6088_57.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_420_928_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4232_2804_173.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4232_4352_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4232_5668_8.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4256_4224_20.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4256_4280_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4256_4432_23.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4256_4532_32.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4256_4612_26.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4256_4800_36.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4264_4292_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4264_4828_33.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4316_2252_12.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4316_3408_15.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4320_520_21.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4360_4476_40.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4360_4500_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4400_4412_20.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4400_5884_8.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4568_4376_37.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_1252_139.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_1268_151.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_2508_64.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_3468_136.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_4560_145.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_4816_127.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_5056_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_5172_124.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_5280_130.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_5328_133.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_5648_108.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_5816_148.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_5856_142.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4636_4416_84.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4636_5088_37.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4636_5132_8.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4636_5368_117.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4636_5436_121.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4636_5484_124.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4672_2156_78.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4672_2508_67.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4672_4236_49.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4672_4300_85.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4672_5408_56.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4672_5920_16.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4680_1116_23.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4680_2868_14.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4680_4708_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4680_5592_8.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_3460_106.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_3716_127.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_4104_90.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_4112_100.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_424_103.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_4292_126.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_4752_114.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_4824_123.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_4952_124.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_5240_129.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_5604_115.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_5696_131.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_5704_109.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_5736_118.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_5832_95.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_6004_87.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_6076_132.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4720_2856_21.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4720_3016_32.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4720_4676_65.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4720_5456_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4720_5924_14.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4752_5744_72.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4752_5804_15.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4972_5024_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4988_3164_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4988_3932_26.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4988_4148_12.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5048_1196_30.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5048_2464_50.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5048_3076_15.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5048_3680_36.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5048_4324_11.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5048_4344_49.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5048_5076_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5048_5752_21.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5048_5832_29.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5048_5960_24.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5048_680_33.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5072_4792_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5076_4832_24.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5076_5300_21.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5076_5432_34.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5120_3188_16.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5120_4204_29.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5120_4612_26.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5120_5200_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5120_5636_9.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5252_4476_37.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5252_5276_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5252_5524_12.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5572_5720_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5576_1116_14.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5576_4576_33.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5576_4724_45.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5576_924_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5596_1684_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5596_3324_22.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5596_5316_19.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5668_4508_11.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5668_5452_27.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5668_5696_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5736_5564_9.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5736_5760_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5820_1704_153.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5820_1760_122.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5820_5276_207.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5820_5564_61.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5820_5760_24.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5820_5844_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5848_4160_3.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5880_3512_19.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5880_3580_9.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5880_3992_15.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5880_4196_26.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5880_5936_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5900_3472_46.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5900_3860_58.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5900_3892_30.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5900_5140_55.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5900_5384_49.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5900_5936_43.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_2668_29.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_3372_35.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_4248_41.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_4692_16.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_5028_45.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_5220_8.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_5388_24.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_5480_11.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_5824_17.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_5932_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_6012_25.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_6020_26.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_704_38.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_896_34.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_6108_4832_8.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_6108_4876_11.html C:\DOCUME~1\ISO\APPLIC~1\Dealio C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\temp C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\alerts.gif C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\alerts_over.gif C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\alerts_rec.gif C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\alerts_rec_over.gif C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\chevron-small.gif C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\DealioSearch.html C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\deals-leftcap.gif C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\deal_report.jpg C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\ebay_login.jpg C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\err_mainwindow.html C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\err_toolbar.html C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\global_scripts.js C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\headerbgthin.jpg C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\highlight-bg.png C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\logo.gif C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\logo_over.gif C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\man_toolbar.css C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\man_toolbar.html C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\man_toolbar.js C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\man_toolbarl.js C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\post-this-deal.gif C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\post-this-deal_over.gif C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\scripts.js C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\scroller.js C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\search-chevron.gif C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\search-chevron_over.gif C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\search_bg_blink.gif C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\separator.gif C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\settings.gif C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\settings_over.gif C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\yahoo-search.png C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\index.76.35 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.10.76 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.109.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.110.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.12.52 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.13.58 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.130.58 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.135.50 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.153.44 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.155.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.156.49 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.16.60 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.161.52 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.178.66 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.184.55 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.188.52 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.189.45 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.196.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.198.56 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.199.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.200.53 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.201.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.202.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.203.71 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.205.62 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.213.71 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.214.49 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.215.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.216.67 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.217.67 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.218.52 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.219.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.220.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.221.57 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.222.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.223.68 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.226.68 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.227.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.228.62 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.229.76 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.23.63 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.239.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.24.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.240.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.241.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.242.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.243.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.244.63 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.245.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.247.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.248.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.249.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.250.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.251.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.252.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.253.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.254.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.255.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.256.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.257.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.279.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.28.58 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.282.75 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.283.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.284.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.289.67 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.290.62 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.291.61 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.296.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.297.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.304.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.307.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.308.75 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.31.47 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.310.46 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.311.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.315.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.316.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.317.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.318.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.319.49 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.32.48 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.334.44 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.335.60 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.336.44 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.337.44 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.338.75 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.339.47 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.34.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.340.47 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.341.47 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.349.50 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.35.48 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.350.50 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.351.51 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.352.54 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.353.51 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.354.51 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.357.62 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.358.52 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.359.52 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.360.53 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.361.54 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.362.68 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.363.58 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.364.54 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.365.53 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.367.56 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.368.58 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.369.55 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.370.56 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.371.56 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.372.57 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.373.55 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.375.56 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.376.57 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.377.55 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.378.65 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.384.58 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.386.71 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.387.59 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.388.59 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.389.59 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.390.60 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.391.60 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.392.60 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.393.60 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.394.60 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.396.61 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.397.61 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.398.60 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.399.60 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.403.61 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.404.63 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.405.61 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.406.61 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.407.76 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.408.63 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.409.61 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.412.62 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.413.62 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.414.62 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.415.62 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.416.62 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.417.62 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.418.62 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.419.62 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.420.62 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.421.62 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.423.63 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.424.63 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.425.63 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.426.63 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.427.63 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.428.65 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.429.63 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.430.63 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.432.65 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.433.64 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.434.65 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.435.64 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.436.76 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.437.64 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.438.71 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.439.71 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.440.75 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.442.73 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.443.73 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.444.73 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.445.68 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.446.69 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.450.67 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.451.67 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.452.68 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.453.68 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.454.69 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.456.69 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.457.75 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.458.70 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.459.70 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.460.69 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.462.74 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.463.69 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.464.70 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.465.68 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.468.70 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.469.70 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.470.70 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.471.73 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.472.70 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.478.74 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.479.73 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.480.68 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.481.71 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.482.74 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.49.67 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.50.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.500.71 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.501.74 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.502.71 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.51.69 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.52.72 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.520.76 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.521.76 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.522.76 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.53.51 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.531.76 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.532.75 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.534.75 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.54.47 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.55.45 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.56.69 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.57.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.58.47 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.593.76 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.595.76 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.63.57 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.66.47 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.70.75 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.71.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\temp\dod_cache.xml C:\Program Files\Dealio C:\Program Files\Dealio\DealioAU.exe C:\Program Files\Dealio\kb127 C:\Program Files\Dealio\SearchSettingsKit.exe C:\Program Files\Dealio\kb127\Dealio Deskbar.exe C:\Program Files\Dealio\kb127\Dealio.dll C:\Program Files\Dealio\kb127\DealioRes409.dll C:\Program Files\Dealio\kb127\res C:\Program Files\Dealio\kb127\resDN C:\Program Files\Dealio\kb127\rules C:\Program Files\Dealio\kb127\temp C:\Program Files\Dealio\kb127\res\alerts.gif C:\Program Files\Dealio\kb127\res\alerts_over.gif C:\Program Files\Dealio\kb127\res\alerts_rec.gif C:\Program Files\Dealio\kb127\res\alerts_rec_over.gif C:\Program Files\Dealio\kb127\res\chevron-small.gif C:\Program Files\Dealio\kb127\res\DealioSearch.html C:\Program Files\Dealio\kb127\res\deals-leftcap.gif C:\Program Files\Dealio\kb127\res\deal_report.jpg C:\Program Files\Dealio\kb127\res\ebay_login.jpg C:\Program Files\Dealio\kb127\res\err_mainwindow.html C:\Program Files\Dealio\kb127\res\err_toolbar.html C:\Program Files\Dealio\kb127\res\global_scripts.js C:\Program Files\Dealio\kb127\res\headerbgthin.jpg C:\Program Files\Dealio\kb127\res\highlight-bg.png C:\Program Files\Dealio\kb127\res\logo.gif C:\Program Files\Dealio\kb127\res\logo_over.gif C:\Program Files\Dealio\kb127\res\man_toolbar.css C:\Program Files\Dealio\kb127\res\man_toolbar.html C:\Program Files\Dealio\kb127\res\man_toolbar.js C:\Program Files\Dealio\kb127\res\man_toolbarl.js C:\Program Files\Dealio\kb127\res\post-this-deal.gif C:\Program Files\Dealio\kb127\res\post-this-deal_over.gif C:\Program Files\Dealio\kb127\res\scripts.js C:\Program Files\Dealio\kb127\res\scroller.js C:\Program Files\Dealio\kb127\res\search-chevron.gif C:\Program Files\Dealio\kb127\res\search-chevron_over.gif C:\Program Files\Dealio\kb127\res\search_bg_blink.gif C:\Program Files\Dealio\kb127\res\separator.gif C:\Program Files\Dealio\kb127\res\settings.gif C:\Program Files\Dealio\kb127\res\settings_over.gif C:\Program Files\Dealio\kb127\res\yahoo-search.png C:\Program Files\Dealio\kb127\resDN\bottom.gif C:\Program Files\Dealio\kb127\resDN\chevron_down.gif C:\Program Files\Dealio\kb127\resDN\chevron_up.gif C:\Program Files\Dealio\kb127\resDN\close.gif C:\Program Files\Dealio\kb127\resDN\deskbar.css C:\Program Files\Dealio\kb127\resDN\deskbar.js C:\Program Files\Dealio\kb127\resDN\dispatch_helper.js C:\Program Files\Dealio\kb127\resDN\ebay_compatible.jpg C:\Program Files\Dealio\kb127\resDN\logo.gif C:\Program Files\Dealio\kb127\resDN\logo_chevron_bkg.gif C:\Program Files\Dealio\kb127\resDN\losing.gif C:\Program Files\Dealio\kb127\resDN\lost.gif C:\Program Files\Dealio\kb127\resDN\man_deskbar.html C:\Program Files\Dealio\kb127\resDN\menu_arrow.gif C:\Program Files\Dealio\kb127\resDN\menu_check.gif C:\Program Files\Dealio\kb127\resDN\no_image.gif C:\Program Files\Dealio\kb127\resDN\prod_img.gif C:\Program Files\Dealio\kb127\resDN\search_chevron.gif C:\Program Files\Dealio\kb127\resDN\spacer.gif C:\Program Files\Dealio\kb127\resDN\textfield_bkg.gif C:\Program Files\Dealio\kb127\resDN\top.gif C:\Program Files\Dealio\kb127\resDN\unknown.gif C:\Program Files\Dealio\kb127\resDN\winning.gif C:\Program Files\Dealio\kb127\resDN\won.gif C:\Program Files\Dealio\kb127\rules\index.76.35 C:\Program Files\Dealio\kb127\rules\rules.1.10.76 C:\Program Files\Dealio\kb127\rules\rules.1.109.43 C:\Program Files\Dealio\kb127\rules\rules.1.110.43 C:\Program Files\Dealio\kb127\rules\rules.1.12.52 C:\Program Files\Dealio\kb127\rules\rules.1.13.58 C:\Program Files\Dealio\kb127\rules\rules.1.130.58 C:\Program Files\Dealio\kb127\rules\rules.1.135.50 C:\Program Files\Dealio\kb127\rules\rules.1.153.44 C:\Program Files\Dealio\kb127\rules\rules.1.155.43 C:\Program Files\Dealio\kb127\rules\rules.1.156.49 C:\Program Files\Dealio\kb127\rules\rules.1.16.60 C:\Program Files\Dealio\kb127\rules\rules.1.161.52 C:\Program Files\Dealio\kb127\rules\rules.1.178.66 C:\Program Files\Dealio\kb127\rules\rules.1.184.55 C:\Program Files\Dealio\kb127\rules\rules.1.188.52 C:\Program Files\Dealio\kb127\rules\rules.1.189.45 C:\Program Files\Dealio\kb127\rules\rules.1.196.43 C:\Program Files\Dealio\kb127\rules\rules.1.198.56 C:\Program Files\Dealio\kb127\rules\rules.1.199.43 C:\Program Files\Dealio\kb127\rules\rules.1.200.53 C:\Program Files\Dealio\kb127\rules\rules.1.201.43 C:\Program Files\Dealio\kb127\rules\rules.1.202.43 C:\Program Files\Dealio\kb127\rules\rules.1.203.71 C:\Program Files\Dealio\kb127\rules\rules.1.205.62 C:\Program Files\Dealio\kb127\rules\rules.1.213.71 C:\Program Files\Dealio\kb127\rules\rules.1.214.49 C:\Program Files\Dealio\kb127\rules\rules.1.215.43 C:\Program Files\Dealio\kb127\rules\rules.1.216.67 C:\Program Files\Dealio\kb127\rules\rules.1.217.67 C:\Program Files\Dealio\kb127\rules\rules.1.218.52 C:\Program Files\Dealio\kb127\rules\rules.1.219.43 C:\Program Files\Dealio\kb127\rules\rules.1.220.43 C:\Program Files\Dealio\kb127\rules\rules.1.221.57 C:\Program Files\Dealio\kb127\rules\rules.1.222.43 C:\Program Files\Dealio\kb127\rules\rules.1.223.68 C:\Program Files\Dealio\kb127\rules\rules.1.226.68 C:\Program Files\Dealio\kb127\rules\rules.1.227.43 C:\Program Files\Dealio\kb127\rules\rules.1.228.62 C:\Program Files\Dealio\kb127\rules\rules.1.229.76 C:\Program Files\Dealio\kb127\rules\rules.1.23.63 C:\Program Files\Dealio\kb127\rules\rules.1.239.43 C:\Program Files\Dealio\kb127\rules\rules.1.24.43 C:\Program Files\Dealio\kb127\rules\rules.1.240.43 C:\Program Files\Dealio\kb127\rules\rules.1.241.43 C:\Program Files\Dealio\kb127\rules\rules.1.242.43 C:\Program Files\Dealio\kb127\rules\rules.1.243.43 C:\Program Files\Dealio\kb127\rules\rules.1.244.63 C:\Program Files\Dealio\kb127\rules\rules.1.245.43 C:\Program Files\Dealio\kb127\rules\rules.1.247.43 C:\Program Files\Dealio\kb127\rules\rules.1.248.43 C:\Program Files\Dealio\kb127\rules\rules.1.249.43 C:\Program Files\Dealio\kb127\rules\rules.1.250.43 C:\Program Files\Dealio\kb127\rules\rules.1.251.43 C:\Program Files\Dealio\kb127\rules\rules.1.252.43 C:\Program Files\Dealio\kb127\rules\rules.1.253.43 C:\Program Files\Dealio\kb127\rules\rules.1.254.43 C:\Program Files\Dealio\kb127\rules\rules.1.255.43 C:\Program Files\Dealio\kb127\rules\rules.1.256.43 C:\Program Files\Dealio\kb127\rules\rules.1.257.43 C:\Program Files\Dealio\kb127\rules\rules.1.279.43 C:\Program Files\Dealio\kb127\rules\rules.1.28.58 C:\Program Files\Dealio\kb127\rules\rules.1.282.75 C:\Program Files\Dealio\kb127\rules\rules.1.283.43 C:\Program Files\Dealio\kb127\rules\rules.1.284.43 C:\Program Files\Dealio\kb127\rules\rules.1.289.67 C:\Program Files\Dealio\kb127\rules\rules.1.290.62 C:\Program Files\Dealio\kb127\rules\rules.1.291.61 C:\Program Files\Dealio\kb127\rules\rules.1.296.43 C:\Program Files\Dealio\kb127\rules\rules.1.297.43 C:\Program Files\Dealio\kb127\rules\rules.1.304.43 C:\Program Files\Dealio\kb127\rules\rules.1.307.43 C:\Program Files\Dealio\kb127\rules\rules.1.308.75 C:\Program Files\Dealio\kb127\rules\rules.1.31.47 C:\Program Files\Dealio\kb127\rules\rules.1.310.46 C:\Program Files\Dealio\kb127\rules\rules.1.311.43 C:\Program Files\Dealio\kb127\rules\rules.1.315.43 C:\Program Files\Dealio\kb127\rules\rules.1.316.43 C:\Program Files\Dealio\kb127\rules\rules.1.317.43 C:\Program Files\Dealio\kb127\rules\rules.1.318.43 C:\Program Files\Dealio\kb127\rules\rules.1.319.49 C:\Program Files\Dealio\kb127\rules\rules.1.32.48 C:\Program Files\Dealio\kb127\rules\rules.1.334.44 C:\Program Files\Dealio\kb127\rules\rules.1.335.60 C:\Program Files\Dealio\kb127\rules\rules.1.336.44 C:\Program Files\Dealio\kb127\rules\rules.1.337.44 C:\Program Files\Dealio\kb127\rules\rules.1.338.75 C:\Program Files\Dealio\kb127\rules\rules.1.339.47 C:\Program Files\Dealio\kb127\rules\rules.1.34.43 C:\Program Files\Dealio\kb127\rules\rules.1.340.47 C:\Program Files\Dealio\kb127\rules\rules.1.341.47 C:\Program Files\Dealio\kb127\rules\rules.1.349.50 C:\Program Files\Dealio\kb127\rules\rules.1.35.48 C:\Program Files\Dealio\kb127\rules\rules.1.350.50 C:\Program Files\Dealio\kb127\rules\rules.1.351.51 C:\Program Files\Dealio\kb127\rules\rules.1.352.54 C:\Program Files\Dealio\kb127\rules\rules.1.353.51 C:\Program Files\Dealio\kb127\rules\rules.1.354.51 C:\Program Files\Dealio\kb127\rules\rules.1.357.62 C:\Program Files\Dealio\kb127\rules\rules.1.358.52 C:\Program Files\Dealio\kb127\rules\rules.1.359.52 C:\Program Files\Dealio\kb127\rules\rules.1.360.53 C:\Program Files\Dealio\kb127\rules\rules.1.361.54 C:\Program Files\Dealio\kb127\rules\rules.1.362.68 C:\Program Files\Dealio\kb127\rules\rules.1.363.58 C:\Program Files\Dealio\kb127\rules\rules.1.364.54 C:\Program Files\Dealio\kb127\rules\rules.1.365.53 C:\Program Files\Dealio\kb127\rules\rules.1.367.56 C:\Program Files\Dealio\kb127\rules\rules.1.368.58 C:\Program Files\Dealio\kb127\rules\rules.1.369.55 C:\Program Files\Dealio\kb127\rules\rules.1.370.56 C:\Program Files\Dealio\kb127\rules\rules.1.371.56 C:\Program Files\Dealio\kb127\rules\rules.1.372.57 C:\Program Files\Dealio\kb127\rules\rules.1.373.55 C:\Program Files\Dealio\kb127\rules\rules.1.375.56 C:\Program Files\Dealio\kb127\rules\rules.1.376.57 C:\Program Files\Dealio\kb127\rules\rules.1.377.55 C:\Program Files\Dealio\kb127\rules\rules.1.378.65 C:\Program Files\Dealio\kb127\rules\rules.1.384.58 C:\Program Files\Dealio\kb127\rules\rules.1.386.71 C:\Program Files\Dealio\kb127\rules\rules.1.387.59 C:\Program Files\Dealio\kb127\rules\rules.1.388.59 C:\Program Files\Dealio\kb127\rules\rules.1.389.59 C:\Program Files\Dealio\kb127\rules\rules.1.390.60 C:\Program Files\Dealio\kb127\rules\rules.1.391.60 C:\Program Files\Dealio\kb127\rules\rules.1.392.60 C:\Program Files\Dealio\kb127\rules\rules.1.393.60 C:\Program Files\Dealio\kb127\rules\rules.1.394.60 C:\Program Files\Dealio\kb127\rules\rules.1.396.61 C:\Program Files\Dealio\kb127\rules\rules.1.397.61 C:\Program Files\Dealio\kb127\rules\rules.1.398.60 C:\Program Files\Dealio\kb127\rules\rules.1.399.60 C:\Program Files\Dealio\kb127\rules\rules.1.403.61 C:\Program Files\Dealio\kb127\rules\rules.1.404.63 C:\Program Files\Dealio\kb127\rules\rules.1.405.61 C:\Program Files\Dealio\kb127\rules\rules.1.406.61 C:\Program Files\Dealio\kb127\rules\rules.1.407.76 C:\Program Files\Dealio\kb127\rules\rules.1.408.63 C:\Program Files\Dealio\kb127\rules\rules.1.409.61 C:\Program Files\Dealio\kb127\rules\rules.1.412.62 C:\Program Files\Dealio\kb127\rules\rules.1.413.62 C:\Program Files\Dealio\kb127\rules\rules.1.414.62 C:\Program Files\Dealio\kb127\rules\rules.1.415.62 C:\Program Files\Dealio\kb127\rules\rules.1.416.62 C:\Program Files\Dealio\kb127\rules\rules.1.417.62 C:\Program Files\Dealio\kb127\rules\rules.1.418.62 C:\Program Files\Dealio\kb127\rules\rules.1.419.62 C:\Program Files\Dealio\kb127\rules\rules.1.420.62 C:\Program Files\Dealio\kb127\rules\rules.1.421.62 C:\Program Files\Dealio\kb127\rules\rules.1.423.63 C:\Program Files\Dealio\kb127\rules\rules.1.424.63 C:\Program Files\Dealio\kb127\rules\rules.1.425.63 C:\Program Files\Dealio\kb127\rules\rules.1.426.63 C:\Program Files\Dealio\kb127\rules\rules.1.427.63 C:\Program Files\Dealio\kb127\rules\rules.1.428.65 C:\Program Files\Dealio\kb127\rules\rules.1.429.63 C:\Program Files\Dealio\kb127\rules\rules.1.430.63 C:\Program Files\Dealio\kb127\rules\rules.1.432.65 C:\Program Files\Dealio\kb127\rules\rules.1.433.64 C:\Program Files\Dealio\kb127\rules\rules.1.434.65 C:\Program Files\Dealio\kb127\rules\rules.1.435.64 C:\Program Files\Dealio\kb127\rules\rules.1.436.76 C:\Program Files\Dealio\kb127\rules\rules.1.437.64 C:\Program Files\Dealio\kb127\rules\rules.1.438.71 C:\Program Files\Dealio\kb127\rules\rules.1.439.71 C:\Program Files\Dealio\kb127\rules\rules.1.440.75 C:\Program Files\Dealio\kb127\rules\rules.1.442.73 C:\Program Files\Dealio\kb127\rules\rules.1.443.73 C:\Program Files\Dealio\kb127\rules\rules.1.444.73 C:\Program Files\Dealio\kb127\rules\rules.1.445.68 C:\Program Files\Dealio\kb127\rules\rules.1.446.69 C:\Program Files\Dealio\kb127\rules\rules.1.450.67 C:\Program Files\Dealio\kb127\rules\rules.1.451.67 C:\Program Files\Dealio\kb127\rules\rules.1.452.68 C:\Program Files\Dealio\kb127\rules\rules.1.453.68 C:\Program Files\Dealio\kb127\rules\rules.1.454.69 C:\Program Files\Dealio\kb127\rules\rules.1.456.69 C:\Program Files\Dealio\kb127\rules\rules.1.457.75 C:\Program Files\Dealio\kb127\rules\rules.1.458.70 C:\Program Files\Dealio\kb127\rules\rules.1.459.70 C:\Program Files\Dealio\kb127\rules\rules.1.460.69 C:\Program Files\Dealio\kb127\rules\rules.1.462.74 C:\Program Files\Dealio\kb127\rules\rules.1.463.69 C:\Program Files\Dealio\kb127\rules\rules.1.464.70 C:\Program Files\Dealio\kb127\rules\rules.1.465.68 C:\Program Files\Dealio\kb127\rules\rules.1.468.70 C:\Program Files\Dealio\kb127\rules\rules.1.469.70 C:\Program Files\Dealio\kb127\rules\rules.1.470.70 C:\Program Files\Dealio\kb127\rules\rules.1.471.73 C:\Program Files\Dealio\kb127\rules\rules.1.472.70 C:\Program Files\Dealio\kb127\rules\rules.1.478.74 C:\Program Files\Dealio\kb127\rules\rules.1.479.73 C:\Program Files\Dealio\kb127\rules\rules.1.480.68 C:\Program Files\Dealio\kb127\rules\rules.1.481.71 C:\Program Files\Dealio\kb127\rules\rules.1.482.74 C:\Program Files\Dealio\kb127\rules\rules.1.49.67 C:\Program Files\Dealio\kb127\rules\rules.1.50.43 C:\Program Files\Dealio\kb127\rules\rules.1.500.71 C:\Program Files\Dealio\kb127\rules\rules.1.501.74 C:\Program Files\Dealio\kb127\rules\rules.1.502.71 C:\Program Files\Dealio\kb127\rules\rules.1.51.69 C:\Program Files\Dealio\kb127\rules\rules.1.52.72 C:\Program Files\Dealio\kb127\rules\rules.1.520.76 C:\Program Files\Dealio\kb127\rules\rules.1.521.76 C:\Program Files\Dealio\kb127\rules\rules.1.522.76 C:\Program Files\Dealio\kb127\rules\rules.1.53.51 C:\Program Files\Dealio\kb127\rules\rules.1.531.76 C:\Program Files\Dealio\kb127\rules\rules.1.532.75 C:\Program Files\Dealio\kb127\rules\rules.1.534.75 C:\Program Files\Dealio\kb127\rules\rules.1.54.47 C:\Program Files\Dealio\kb127\rules\rules.1.55.45 C:\Program Files\Dealio\kb127\rules\rules.1.56.69 C:\Program Files\Dealio\kb127\rules\rules.1.57.43 C:\Program Files\Dealio\kb127\rules\rules.1.58.47 C:\Program Files\Dealio\kb127\rules\rules.1.593.76 C:\Program Files\Dealio\kb127\rules\rules.1.595.76 C:\Program Files\Dealio\kb127\rules\rules.1.63.57 C:\Program Files\Dealio\kb127\rules\rules.1.66.47 C:\Program Files\Dealio\kb127\rules\rules.1.70.75 C:\Program Files\Dealio\kb127\rules\rules.1.71.43 C:\WINDOWS\Prefetch\DEALIOAU.EXE-32C4A05D.pf C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Dealio C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\content_a.xml C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\content_ie.xml C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\content_m.xml C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\content_y.xml C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\logger.xml C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\toolbarIE.xml C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\toolbarIM_a.xml C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\toolbarIM_m.xml C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\toolbarIM_y.xml C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\allow.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\block.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\dontsend.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\im_toolbardropdownmenu.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\im_toolbarsHelprolloverbase.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\im_toolbarsm1rolloverbase.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\im_toolbarsm1rolloverbase_bg.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\im_toolbarsm1rolloverbase_dp.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\im_toolbarsm2rolloverbase.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\im_toolbarstextrollover.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\kiwee_iconX16.ico C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\kiwee_iconX48.ico C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\send.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_eg.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_emoticons.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_eyeglass.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_gear.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_images.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_kiwee.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_msnlogo.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_news.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_text.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_videos.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_webshots.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_winks.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\X.bmp C:\Program Files\Kiwee Toolbar C:\Program Files\Kiwee Toolbar\2.8.167 C:\Program Files\Kiwee Toolbar\2.8.167\AGTBCore.dll C:\Program Files\Kiwee Toolbar\2.8.167\AolIMToolbar.dll C:\Program Files\Kiwee Toolbar\2.8.167\firefox C:\Program Files\Kiwee Toolbar\2.8.167\FlashCOM.dll C:\Program Files\Kiwee Toolbar\2.8.167\KiweeCommonCtrls.dll C:\Program Files\Kiwee Toolbar\2.8.167\KiweeContentHost.dll C:\Program Files\Kiwee Toolbar\2.8.167\KiweeIEToolbar.dll C:\Program Files\Kiwee Toolbar\2.8.167\KiweeIMToolbar.dll C:\Program Files\Kiwee Toolbar\2.8.167\KiweeTBCore.dll C:\Program Files\Kiwee Toolbar\2.8.167\KiweeTBCore.tlb C:\Program Files\Kiwee Toolbar\2.8.167\kiweetoolbar.zip C:\Program Files\Kiwee Toolbar\2.8.167\kwtbaim.exe C:\Program Files\Kiwee Toolbar\2.8.167\mfc80u.dll C:\Program Files\Kiwee Toolbar\2.8.167\Microsoft.VC80.CRT.manifest C:\Program Files\Kiwee Toolbar\2.8.167\Microsoft.VC80.MFC.manifest C:\Program Files\Kiwee Toolbar\2.8.167\msimg32.dll C:\Program Files\Kiwee Toolbar\2.8.167\MsnIMToolbar.dll C:\Program Files\Kiwee Toolbar\2.8.167\msvcp80.dll C:\Program Files\Kiwee Toolbar\2.8.167\msvcr80.dll C:\Program Files\Kiwee Toolbar\2.8.167\RemoteLib.dll C:\Program Files\Kiwee Toolbar\2.8.167\Riched20.dll C:\Program Files\Kiwee Toolbar\2.8.167\firefox\chrome C:\Program Files\Kiwee Toolbar\2.8.167\firefox\chrome.manifest C:\Program Files\Kiwee Toolbar\2.8.167\firefox\components C:\Program Files\Kiwee Toolbar\2.8.167\firefox\defaults C:\Program Files\Kiwee Toolbar\2.8.167\firefox\firefox.xpi C:\Program Files\Kiwee Toolbar\2.8.167\firefox\install.rdf C:\Program Files\Kiwee Toolbar\2.8.167\firefox\META-INF C:\Program Files\Kiwee Toolbar\2.8.167\firefox\chrome\kiweetoolbar.jar C:\Program Files\Kiwee Toolbar\2.8.167\firefox\components\AGCore.js C:\Program Files\Kiwee Toolbar\2.8.167\firefox\components\AGCore.xpt C:\Program Files\Kiwee Toolbar\2.8.167\firefox\components\KiweeSearchHistory.js C:\Program Files\Kiwee Toolbar\2.8.167\firefox\components\SearchProtection.js C:\Program Files\Kiwee Toolbar\2.8.167\firefox\components\SearchProtection.xpt C:\Program Files\Kiwee Toolbar\2.8.167\firefox\defaults\preferences C:\Program Files\Kiwee Toolbar\2.8.167\firefox\defaults\preferences\defaults.js C:\Program Files\Kiwee Toolbar\2.8.167\firefox\META-INF\manifest.mf C:\Program Files\Kiwee Toolbar\2.8.167\firefox\META-INF\zigbert.rsa C:\Program Files\Kiwee Toolbar\2.8.167\firefox\META-INF\zigbert.sf C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Kiwee Toolbar C:\WINDOWS\Prefetch\SEARCHSETTINGS.EXE-253CB611.pf C:\DOCUME~1\ADMINI~1\APPLIC~1\Search Settings C:\DOCUME~1\ADMINI~1\APPLIC~1\Search Settings\kb127 C:\DOCUME~1\ADMINI~1\APPLIC~1\Search Settings\kb127\res C:\DOCUME~1\ADMINI~1\APPLIC~1\Search Settings\kb127\temp C:\DOCUME~1\ADMINI~1\APPLIC~1\Search Settings\kb127\temp\ws-14246.log C:\DOCUME~1\ADMINI~1\APPLIC~1\Search Settings\kb127\temp\ws-14248.log C:\DOCUME~1\ADMINI~1\APPLIC~1\Search Settings\kb127\temp\ws-14249.log C:\DOCUME~1\ISO\APPLIC~1\Search Settings C:\DOCUME~1\ISO\APPLIC~1\Search Settings\kb127 C:\DOCUME~1\ISO\APPLIC~1\Search Settings\kb127\res C:\DOCUME~1\ISO\APPLIC~1\Search Settings\kb127\temp C:\DOCUME~1\ISO\APPLIC~1\Search Settings\kb127\temp\ws-14248.log C:\Program Files\Search Settings C:\Program Files\Search Settings\kb127 C:\Program Files\Search Settings\SearchSettings.exe C:\Program Files\Search Settings\kb127\res C:\Program Files\Search Settings\kb127\SearchSettings.dll C:\Program Files\Search Settings\kb127\SearchSettingsRes409.dll C:\Program Files\Search Settings\kb127\temp C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\ICD1.tmp -----------\\ Extensions (Administrateur) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar (Administrateur) - {b66bc4c3-6d25-4a10-8c59-01daa9063051} => foxgame (ISO) - {b66bc4c3-6d25-4a10-8c59-01daa9063051} => foxgame -----------\\ [..\Internet Explorer\Main] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Local Page"="C:\\WINDOWS\\system32\\blank.htm" "Start Page"="http://www.msn.fr/"'>http://www.msn.fr/" "Search Page"="http://www.google.com"'>http://www.google.com" "Search Bar"="http://www.google.com/ie"'>http://www.google.com/ie"'>http://www.google.com/ie"'>http://www.google.com/ie" "SearchMigratedDefaultURL"="http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"'>http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"'>http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome" "Default_Search_URL"="http://www.google.com/ie" "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"'>http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"'>http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home" --------------------\\ Recherche d'autres infections C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\MessengerSkinner C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\MessengerSkinner\Conditions g‚n‚rales.url C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\MessengerSkinner\Confidentialit‚.url C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\MessengerSkinner\D‚sinstaller.lnk C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\MessengerSkinner\MessengerSkinner.lnk C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\MessengerSkinner\Website.url C:\DOCUME~1\ADMINI~1\LOCALS~1\APPLIC~1\ucmmc.dat C:\DOCUME~1\ADMINI~1\LOCALS~1\APPLIC~1\ucmmc.exe C:\DOCUME~1\ADMINI~1\LOCALS~1\APPLIC~1\ucmmc_nav.dat C:\DOCUME~1\ADMINI~1\LOCALS~1\APPLIC~1\ucmmc_navps.dat ==> EGDACCESS <== C:\WINDOWS\system32\gPXHknmp.ini C:\WINDOWS\system32\gPXHknmp.ini2 ==> VUNDO <== 1 - "C:\ToolBar SD\TB_1.txt" - 05/01/2009|12:19 - Option : [1] -----------\\ Fin du rapport a 12:19:17,15 laisse tomber pour symantec, je voudrais le désactiver au moins si on ne peut pas le supprimer. et prendre un autre antivirus comme antivir. 1 rapport toolbarSD -----------\\ ToolBar S&D 1.2.8 XP/Vista Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3 X86-based PC ( Multiprocessor Free : Genuine Intel® CPU T2400 @ 1.83GHz ) BIOS : Default System BIOS USER : Administrateur ( Administrator ) BOOT : Normal boot Antivirus : Symantec AntiVirus Corporate Edition 10.0.2.2000 (Activated) C:\ (Local Disk) - NTFS - Total:35 Go (Free:8 Go) D:\ (Local Disk) - NTFS - Total:39 Go (Free:9 Go) E:\ (CD or DVD) - UDF - Total:3 Go (Free:0 Go) F:\ (CD or DVD) "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 ) Option : [1] ( 05/01/2009|12:17 ) -----------\\ Recherche de Fichiers / Dossiers ... C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\alerts.gif C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\alerts_over.gif C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\alerts_rec.gif C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\alerts_rec_over.gif C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\chevron-small.gif C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\DealioSearch.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\deals-leftcap.gif C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\deal_report.jpg C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\ebay_login.jpg C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\err_mainwindow.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\err_toolbar.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\global_scripts.js C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\headerbgthin.jpg C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\highlight-bg.png C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\logo.gif C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\logo_over.gif C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\man_toolbar.css C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\man_toolbar.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\man_toolbar.js C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\man_toolbarl.js C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\post-this-deal.gif C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\post-this-deal_over.gif C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\scripts.js C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\scroller.js C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\search-chevron.gif C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\search-chevron_over.gif C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\search_bg_blink.gif C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\separator.gif C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\settings.gif C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\settings_over.gif C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\yahoo-search.png C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\index.76.35 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.10.76 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.109.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.110.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.12.52 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.13.58 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.130.58 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.135.50 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.153.44 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.155.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.156.49 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.16.60 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.161.52 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.178.66 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.184.55 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.188.52 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.189.45 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.196.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.198.56 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.199.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.200.53 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.201.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.202.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.203.71 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.205.62 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.213.71 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.214.49 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.215.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.216.67 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.217.67 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.218.52 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.219.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.220.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.221.57 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.222.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.223.68 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.226.68 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.227.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.228.62 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.229.76 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.23.63 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.239.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.24.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.240.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.241.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.242.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.243.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.244.63 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.245.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.247.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.248.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.249.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.250.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.251.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.252.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.253.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.254.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.255.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.256.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.257.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.279.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.28.58 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.282.75 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.283.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.284.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.289.67 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.290.62 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.291.61 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.296.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.297.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.304.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.307.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.308.75 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.31.47 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.310.46 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.311.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.315.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.316.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.317.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.318.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.319.49 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.32.48 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.334.44 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.335.60 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.336.44 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.337.44 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.338.75 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.339.47 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.34.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.340.47 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.341.47 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.349.50 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.35.48 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.350.50 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.351.51 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.352.54 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.353.51 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.354.51 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.357.62 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.358.52 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.359.52 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.360.53 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.361.54 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.362.68 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.363.58 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.364.54 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.365.53 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.367.56 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.368.58 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.369.55 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.370.56 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.371.56 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.372.57 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.373.55 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.375.56 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.376.57 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.377.55 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.378.65 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.384.58 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.386.71 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.387.59 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.388.59 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.389.59 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.390.60 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.391.60 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.392.60 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.393.60 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.394.60 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.396.61 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.397.61 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.398.60 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.399.60 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.403.61 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.404.63 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.405.61 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.406.61 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.407.76 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.408.63 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.409.61 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.412.62 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.413.62 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.414.62 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.415.62 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.416.62 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.417.62 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.418.62 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.419.62 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.420.62 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.421.62 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.423.63 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.424.63 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.425.63 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.426.63 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.427.63 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.428.65 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.429.63 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.430.63 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.432.65 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.433.64 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.434.65 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.435.64 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.436.76 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.437.64 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.438.71 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.439.71 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.440.75 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.442.73 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.443.73 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.444.73 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.445.68 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.446.69 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.450.67 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.451.67 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.452.68 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.453.68 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.454.69 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.456.69 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.457.75 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.458.70 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.459.70 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.460.69 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.462.74 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.463.69 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.464.70 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.465.68 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.468.70 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.469.70 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.470.70 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.471.73 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.472.70 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.478.74 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.479.73 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.480.68 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.481.71 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.482.74 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.49.67 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.50.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.500.71 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.501.74 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.502.71 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.51.69 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.52.72 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.520.76 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.521.76 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.522.76 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.53.51 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.531.76 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.532.75 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.534.75 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.54.47 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.55.45 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.56.69 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.57.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.58.47 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.593.76 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.595.76 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.63.57 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.66.47 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.70.75 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.71.43 C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\dealio-14248.log C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\dod_cache.xml C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_1528_556_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_1628_4124_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_1628_5160_15.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_1836_1004_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_1836_4384_38.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_1836_4512_14.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_1836_5220_8.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_1836_5928_39.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_1836_5928_40.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2192_5756_8.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2552_1672_62.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2552_2124_72.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2552_2384_43.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2552_2420_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2552_436_18.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2552_5040_124.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2552_5040_125.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2552_5520_82.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2552_5564_117.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2552_5944_75.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2552_6004_92.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2864_1756_29.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2864_2708_10.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2864_4148_35.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2864_4292_14.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2864_4332_20.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2864_4380_19.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2864_4412_26.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2864_4900_32.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2864_5528_38.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2864_5568_11.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2864_5672_25.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2868_2880_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2940_3044_17.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2940_4336_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2940_5980_26.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3196_2632_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3196_3120_13.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3196_5092_24.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3196_5548_49.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3196_5636_17.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3196_5852_50.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3196_5852_51.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3244_5856_9.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3244_652_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3400_448_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3756_1788_22.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3756_3700_28.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3756_4312_108.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3756_4832_85.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3756_4936_122.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3756_4936_123.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3756_5160_111.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3756_5352_40.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3756_5576_58.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3756_5692_92.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3756_5792_34.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3784_5020_9.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3784_6092_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3808_2888_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3808_4224_78.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4136_1124_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4140_3504_11.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4140_5160_15.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_420_160_11.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_420_3772_22.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_420_4400_32.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_420_4648_29.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_420_4920_25.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_420_5132_40.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_420_6084_14.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_420_6088_57.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_420_928_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4232_2804_173.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4232_4352_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4232_5668_8.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4256_4224_20.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4256_4280_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4256_4432_23.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4256_4532_32.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4256_4612_26.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4256_4800_36.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4264_4292_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4264_4828_33.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4316_2252_12.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4316_3408_15.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4320_520_21.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4360_4476_40.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4360_4500_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4400_4412_20.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4400_5884_8.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4568_4376_37.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_1252_139.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_1268_151.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_2508_64.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_3468_136.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_4560_145.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_4816_127.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_5056_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_5172_124.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_5280_130.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_5328_133.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_5648_108.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_5816_148.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_5856_142.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4636_4416_84.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4636_5088_37.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4636_5132_8.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4636_5368_117.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4636_5436_121.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4636_5484_124.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4672_2156_78.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4672_2508_67.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4672_4236_49.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4672_4300_85.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4672_5408_56.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4672_5920_16.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4680_1116_23.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4680_2868_14.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4680_4708_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4680_5592_8.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_3460_106.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_3716_127.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_4104_90.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_4112_100.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_424_103.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_4292_126.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_4752_114.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_4824_123.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_4952_124.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_5240_129.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_5604_115.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_5696_131.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_5704_109.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_5736_118.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_5832_95.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_6004_87.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_6076_132.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4720_2856_21.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4720_3016_32.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4720_4676_65.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4720_5456_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4720_5924_14.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4752_5744_72.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4752_5804_15.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4972_5024_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4988_3164_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4988_3932_26.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4988_4148_12.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5048_1196_30.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5048_2464_50.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5048_3076_15.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5048_3680_36.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5048_4324_11.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5048_4344_49.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5048_5076_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5048_5752_21.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5048_5832_29.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5048_5960_24.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5048_680_33.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5072_4792_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5076_4832_24.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5076_5300_21.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5076_5432_34.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5120_3188_16.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5120_4204_29.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5120_4612_26.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5120_5200_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5120_5636_9.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5252_4476_37.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5252_5276_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5252_5524_12.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5572_5720_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5576_1116_14.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5576_4576_33.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5576_4724_45.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5576_924_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5596_1684_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5596_3324_22.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5596_5316_19.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5668_4508_11.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5668_5452_27.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5668_5696_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5736_5564_9.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5736_5760_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5820_1704_153.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5820_1760_122.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5820_5276_207.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5820_5564_61.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5820_5760_24.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5820_5844_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5848_4160_3.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5880_3512_19.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5880_3580_9.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5880_3992_15.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5880_4196_26.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5880_5936_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5900_3472_46.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5900_3860_58.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5900_3892_30.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5900_5140_55.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5900_5384_49.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5900_5936_43.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_2668_29.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_3372_35.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_4248_41.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_4692_16.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_5028_45.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_5220_8.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_5388_24.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_5480_11.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_5824_17.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_5932_5.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_6012_25.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_6020_26.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_704_38.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_896_34.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_6108_4832_8.html C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_6108_4876_11.html C:\DOCUME~1\ISO\APPLIC~1\Dealio C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\temp C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\alerts.gif C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\alerts_over.gif C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\alerts_rec.gif C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\alerts_rec_over.gif C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\chevron-small.gif C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\DealioSearch.html C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\deals-leftcap.gif C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\deal_report.jpg C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\ebay_login.jpg C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\err_mainwindow.html C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\err_toolbar.html C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\global_scripts.js C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\headerbgthin.jpg C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\highlight-bg.png C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\logo.gif C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\logo_over.gif C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\man_toolbar.css C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\man_toolbar.html C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\man_toolbar.js C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\man_toolbarl.js C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\post-this-deal.gif C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\post-this-deal_over.gif C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\scripts.js C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\scroller.js C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\search-chevron.gif C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\search-chevron_over.gif C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\search_bg_blink.gif C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\separator.gif C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\settings.gif C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\settings_over.gif C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\yahoo-search.png C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\index.76.35 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.10.76 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.109.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.110.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.12.52 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.13.58 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.130.58 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.135.50 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.153.44 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.155.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.156.49 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.16.60 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.161.52 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.178.66 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.184.55 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.188.52 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.189.45 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.196.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.198.56 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.199.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.200.53 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.201.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.202.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.203.71 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.205.62 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.213.71 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.214.49 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.215.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.216.67 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.217.67 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.218.52 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.219.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.220.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.221.57 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.222.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.223.68 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.226.68 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.227.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.228.62 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.229.76 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.23.63 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.239.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.24.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.240.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.241.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.242.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.243.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.244.63 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.245.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.247.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.248.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.249.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.250.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.251.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.252.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.253.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.254.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.255.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.256.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.257.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.279.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.28.58 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.282.75 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.283.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.284.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.289.67 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.290.62 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.291.61 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.296.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.297.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.304.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.307.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.308.75 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.31.47 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.310.46 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.311.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.315.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.316.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.317.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.318.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.319.49 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.32.48 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.334.44 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.335.60 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.336.44 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.337.44 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.338.75 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.339.47 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.34.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.340.47 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.341.47 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.349.50 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.35.48 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.350.50 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.351.51 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.352.54 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.353.51 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.354.51 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.357.62 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.358.52 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.359.52 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.360.53 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.361.54 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.362.68 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.363.58 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.364.54 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.365.53 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.367.56 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.368.58 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.369.55 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.370.56 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.371.56 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.372.57 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.373.55 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.375.56 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.376.57 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.377.55 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.378.65 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.384.58 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.386.71 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.387.59 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.388.59 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.389.59 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.390.60 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.391.60 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.392.60 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.393.60 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.394.60 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.396.61 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.397.61 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.398.60 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.399.60 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.403.61 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.404.63 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.405.61 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.406.61 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.407.76 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.408.63 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.409.61 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.412.62 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.413.62 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.414.62 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.415.62 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.416.62 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.417.62 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.418.62 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.419.62 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.420.62 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.421.62 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.423.63 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.424.63 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.425.63 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.426.63 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.427.63 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.428.65 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.429.63 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.430.63 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.432.65 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.433.64 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.434.65 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.435.64 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.436.76 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.437.64 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.438.71 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.439.71 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.440.75 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.442.73 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.443.73 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.444.73 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.445.68 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.446.69 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.450.67 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.451.67 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.452.68 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.453.68 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.454.69 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.456.69 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.457.75 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.458.70 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.459.70 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.460.69 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.462.74 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.463.69 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.464.70 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.465.68 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.468.70 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.469.70 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.470.70 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.471.73 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.472.70 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.478.74 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.479.73 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.480.68 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.481.71 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.482.74 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.49.67 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.50.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.500.71 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.501.74 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.502.71 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.51.69 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.52.72 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.520.76 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.521.76 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.522.76 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.53.51 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.531.76 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.532.75 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.534.75 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.54.47 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.55.45 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.56.69 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.57.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.58.47 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.593.76 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.595.76 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.63.57 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.66.47 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.70.75 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.71.43 C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\temp\dod_cache.xml C:\Program Files\Dealio C:\Program Files\Dealio\DealioAU.exe C:\Program Files\Dealio\kb127 C:\Program Files\Dealio\SearchSettingsKit.exe C:\Program Files\Dealio\kb127\Dealio Deskbar.exe C:\Program Files\Dealio\kb127\Dealio.dll C:\Program Files\Dealio\kb127\DealioRes409.dll C:\Program Files\Dealio\kb127\res C:\Program Files\Dealio\kb127\resDN C:\Program Files\Dealio\kb127\rules C:\Program Files\Dealio\kb127\temp C:\Program Files\Dealio\kb127\res\alerts.gif C:\Program Files\Dealio\kb127\res\alerts_over.gif C:\Program Files\Dealio\kb127\res\alerts_rec.gif C:\Program Files\Dealio\kb127\res\alerts_rec_over.gif C:\Program Files\Dealio\kb127\res\chevron-small.gif C:\Program Files\Dealio\kb127\res\DealioSearch.html C:\Program Files\Dealio\kb127\res\deals-leftcap.gif C:\Program Files\Dealio\kb127\res\deal_report.jpg C:\Program Files\Dealio\kb127\res\ebay_login.jpg C:\Program Files\Dealio\kb127\res\err_mainwindow.html C:\Program Files\Dealio\kb127\res\err_toolbar.html C:\Program Files\Dealio\kb127\res\global_scripts.js C:\Program Files\Dealio\kb127\res\headerbgthin.jpg C:\Program Files\Dealio\kb127\res\highlight-bg.png C:\Program Files\Dealio\kb127\res\logo.gif C:\Program Files\Dealio\kb127\res\logo_over.gif C:\Program Files\Dealio\kb127\res\man_toolbar.css C:\Program Files\Dealio\kb127\res\man_toolbar.html C:\Program Files\Dealio\kb127\res\man_toolbar.js C:\Program Files\Dealio\kb127\res\man_toolbarl.js C:\Program Files\Dealio\kb127\res\post-this-deal.gif C:\Program Files\Dealio\kb127\res\post-this-deal_over.gif C:\Program Files\Dealio\kb127\res\scripts.js C:\Program Files\Dealio\kb127\res\scroller.js C:\Program Files\Dealio\kb127\res\search-chevron.gif C:\Program Files\Dealio\kb127\res\search-chevron_over.gif C:\Program Files\Dealio\kb127\res\search_bg_blink.gif C:\Program Files\Dealio\kb127\res\separator.gif C:\Program Files\Dealio\kb127\res\settings.gif C:\Program Files\Dealio\kb127\res\settings_over.gif C:\Program Files\Dealio\kb127\res\yahoo-search.png C:\Program Files\Dealio\kb127\resDN\bottom.gif C:\Program Files\Dealio\kb127\resDN\chevron_down.gif C:\Program Files\Dealio\kb127\resDN\chevron_up.gif C:\Program Files\Dealio\kb127\resDN\close.gif C:\Program Files\Dealio\kb127\resDN\deskbar.css C:\Program Files\Dealio\kb127\resDN\deskbar.js C:\Program Files\Dealio\kb127\resDN\dispatch_helper.js C:\Program Files\Dealio\kb127\resDN\ebay_compatible.jpg C:\Program Files\Dealio\kb127\resDN\logo.gif C:\Program Files\Dealio\kb127\resDN\logo_chevron_bkg.gif C:\Program Files\Dealio\kb127\resDN\losing.gif C:\Program Files\Dealio\kb127\resDN\lost.gif C:\Program Files\Dealio\kb127\resDN\man_deskbar.html C:\Program Files\Dealio\kb127\resDN\menu_arrow.gif C:\Program Files\Dealio\kb127\resDN\menu_check.gif C:\Program Files\Dealio\kb127\resDN\no_image.gif C:\Program Files\Dealio\kb127\resDN\prod_img.gif C:\Program Files\Dealio\kb127\resDN\search_chevron.gif C:\Program Files\Dealio\kb127\resDN\spacer.gif C:\Program Files\Dealio\kb127\resDN\textfield_bkg.gif C:\Program Files\Dealio\kb127\resDN\top.gif C:\Program Files\Dealio\kb127\resDN\unknown.gif C:\Program Files\Dealio\kb127\resDN\winning.gif C:\Program Files\Dealio\kb127\resDN\won.gif C:\Program Files\Dealio\kb127\rules\index.76.35 C:\Program Files\Dealio\kb127\rules\rules.1.10.76 C:\Program Files\Dealio\kb127\rules\rules.1.109.43 C:\Program Files\Dealio\kb127\rules\rules.1.110.43 C:\Program Files\Dealio\kb127\rules\rules.1.12.52 C:\Program Files\Dealio\kb127\rules\rules.1.13.58 C:\Program Files\Dealio\kb127\rules\rules.1.130.58 C:\Program Files\Dealio\kb127\rules\rules.1.135.50 C:\Program Files\Dealio\kb127\rules\rules.1.153.44 C:\Program Files\Dealio\kb127\rules\rules.1.155.43 C:\Program Files\Dealio\kb127\rules\rules.1.156.49 C:\Program Files\Dealio\kb127\rules\rules.1.16.60 C:\Program Files\Dealio\kb127\rules\rules.1.161.52 C:\Program Files\Dealio\kb127\rules\rules.1.178.66 C:\Program Files\Dealio\kb127\rules\rules.1.184.55 C:\Program Files\Dealio\kb127\rules\rules.1.188.52 C:\Program Files\Dealio\kb127\rules\rules.1.189.45 C:\Program Files\Dealio\kb127\rules\rules.1.196.43 C:\Program Files\Dealio\kb127\rules\rules.1.198.56 C:\Program Files\Dealio\kb127\rules\rules.1.199.43 C:\Program Files\Dealio\kb127\rules\rules.1.200.53 C:\Program Files\Dealio\kb127\rules\rules.1.201.43 C:\Program Files\Dealio\kb127\rules\rules.1.202.43 C:\Program Files\Dealio\kb127\rules\rules.1.203.71 C:\Program Files\Dealio\kb127\rules\rules.1.205.62 C:\Program Files\Dealio\kb127\rules\rules.1.213.71 C:\Program Files\Dealio\kb127\rules\rules.1.214.49 C:\Program Files\Dealio\kb127\rules\rules.1.215.43 C:\Program Files\Dealio\kb127\rules\rules.1.216.67 C:\Program Files\Dealio\kb127\rules\rules.1.217.67 C:\Program Files\Dealio\kb127\rules\rules.1.218.52 C:\Program Files\Dealio\kb127\rules\rules.1.219.43 C:\Program Files\Dealio\kb127\rules\rules.1.220.43 C:\Program Files\Dealio\kb127\rules\rules.1.221.57 C:\Program Files\Dealio\kb127\rules\rules.1.222.43 C:\Program Files\Dealio\kb127\rules\rules.1.223.68 C:\Program Files\Dealio\kb127\rules\rules.1.226.68 C:\Program Files\Dealio\kb127\rules\rules.1.227.43 C:\Program Files\Dealio\kb127\rules\rules.1.228.62 C:\Program Files\Dealio\kb127\rules\rules.1.229.76 C:\Program Files\Dealio\kb127\rules\rules.1.23.63 C:\Program Files\Dealio\kb127\rules\rules.1.239.43 C:\Program Files\Dealio\kb127\rules\rules.1.24.43 C:\Program Files\Dealio\kb127\rules\rules.1.240.43 C:\Program Files\Dealio\kb127\rules\rules.1.241.43 C:\Program Files\Dealio\kb127\rules\rules.1.242.43 C:\Program Files\Dealio\kb127\rules\rules.1.243.43 C:\Program Files\Dealio\kb127\rules\rules.1.244.63 C:\Program Files\Dealio\kb127\rules\rules.1.245.43 C:\Program Files\Dealio\kb127\rules\rules.1.247.43 C:\Program Files\Dealio\kb127\rules\rules.1.248.43 C:\Program Files\Dealio\kb127\rules\rules.1.249.43 C:\Program Files\Dealio\kb127\rules\rules.1.250.43 C:\Program Files\Dealio\kb127\rules\rules.1.251.43 C:\Program Files\Dealio\kb127\rules\rules.1.252.43 C:\Program Files\Dealio\kb127\rules\rules.1.253.43 C:\Program Files\Dealio\kb127\rules\rules.1.254.43 C:\Program Files\Dealio\kb127\rules\rules.1.255.43 C:\Program Files\Dealio\kb127\rules\rules.1.256.43 C:\Program Files\Dealio\kb127\rules\rules.1.257.43 C:\Program Files\Dealio\kb127\rules\rules.1.279.43 C:\Program Files\Dealio\kb127\rules\rules.1.28.58 C:\Program Files\Dealio\kb127\rules\rules.1.282.75 C:\Program Files\Dealio\kb127\rules\rules.1.283.43 C:\Program Files\Dealio\kb127\rules\rules.1.284.43 C:\Program Files\Dealio\kb127\rules\rules.1.289.67 C:\Program Files\Dealio\kb127\rules\rules.1.290.62 C:\Program Files\Dealio\kb127\rules\rules.1.291.61 C:\Program Files\Dealio\kb127\rules\rules.1.296.43 C:\Program Files\Dealio\kb127\rules\rules.1.297.43 C:\Program Files\Dealio\kb127\rules\rules.1.304.43 C:\Program Files\Dealio\kb127\rules\rules.1.307.43 C:\Program Files\Dealio\kb127\rules\rules.1.308.75 C:\Program Files\Dealio\kb127\rules\rules.1.31.47 C:\Program Files\Dealio\kb127\rules\rules.1.310.46 C:\Program Files\Dealio\kb127\rules\rules.1.311.43 C:\Program Files\Dealio\kb127\rules\rules.1.315.43 C:\Program Files\Dealio\kb127\rules\rules.1.316.43 C:\Program Files\Dealio\kb127\rules\rules.1.317.43 C:\Program Files\Dealio\kb127\rules\rules.1.318.43 C:\Program Files\Dealio\kb127\rules\rules.1.319.49 C:\Program Files\Dealio\kb127\rules\rules.1.32.48 C:\Program Files\Dealio\kb127\rules\rules.1.334.44 C:\Program Files\Dealio\kb127\rules\rules.1.335.60 C:\Program Files\Dealio\kb127\rules\rules.1.336.44 C:\Program Files\Dealio\kb127\rules\rules.1.337.44 C:\Program Files\Dealio\kb127\rules\rules.1.338.75 C:\Program Files\Dealio\kb127\rules\rules.1.339.47 C:\Program Files\Dealio\kb127\rules\rules.1.34.43 C:\Program Files\Dealio\kb127\rules\rules.1.340.47 C:\Program Files\Dealio\kb127\rules\rules.1.341.47 C:\Program Files\Dealio\kb127\rules\rules.1.349.50 C:\Program Files\Dealio\kb127\rules\rules.1.35.48 C:\Program Files\Dealio\kb127\rules\rules.1.350.50 C:\Program Files\Dealio\kb127\rules\rules.1.351.51 C:\Program Files\Dealio\kb127\rules\rules.1.352.54 C:\Program Files\Dealio\kb127\rules\rules.1.353.51 C:\Program Files\Dealio\kb127\rules\rules.1.354.51 C:\Program Files\Dealio\kb127\rules\rules.1.357.62 C:\Program Files\Dealio\kb127\rules\rules.1.358.52 C:\Program Files\Dealio\kb127\rules\rules.1.359.52 C:\Program Files\Dealio\kb127\rules\rules.1.360.53 C:\Program Files\Dealio\kb127\rules\rules.1.361.54 C:\Program Files\Dealio\kb127\rules\rules.1.362.68 C:\Program Files\Dealio\kb127\rules\rules.1.363.58 C:\Program Files\Dealio\kb127\rules\rules.1.364.54 C:\Program Files\Dealio\kb127\rules\rules.1.365.53 C:\Program Files\Dealio\kb127\rules\rules.1.367.56 C:\Program Files\Dealio\kb127\rules\rules.1.368.58 C:\Program Files\Dealio\kb127\rules\rules.1.369.55 C:\Program Files\Dealio\kb127\rules\rules.1.370.56 C:\Program Files\Dealio\kb127\rules\rules.1.371.56 C:\Program Files\Dealio\kb127\rules\rules.1.372.57 C:\Program Files\Dealio\kb127\rules\rules.1.373.55 C:\Program Files\Dealio\kb127\rules\rules.1.375.56 C:\Program Files\Dealio\kb127\rules\rules.1.376.57 C:\Program Files\Dealio\kb127\rules\rules.1.377.55 C:\Program Files\Dealio\kb127\rules\rules.1.378.65 C:\Program Files\Dealio\kb127\rules\rules.1.384.58 C:\Program Files\Dealio\kb127\rules\rules.1.386.71 C:\Program Files\Dealio\kb127\rules\rules.1.387.59 C:\Program Files\Dealio\kb127\rules\rules.1.388.59 C:\Program Files\Dealio\kb127\rules\rules.1.389.59 C:\Program Files\Dealio\kb127\rules\rules.1.390.60 C:\Program Files\Dealio\kb127\rules\rules.1.391.60 C:\Program Files\Dealio\kb127\rules\rules.1.392.60 C:\Program Files\Dealio\kb127\rules\rules.1.393.60 C:\Program Files\Dealio\kb127\rules\rules.1.394.60 C:\Program Files\Dealio\kb127\rules\rules.1.396.61 C:\Program Files\Dealio\kb127\rules\rules.1.397.61 C:\Program Files\Dealio\kb127\rules\rules.1.398.60 C:\Program Files\Dealio\kb127\rules\rules.1.399.60 C:\Program Files\Dealio\kb127\rules\rules.1.403.61 C:\Program Files\Dealio\kb127\rules\rules.1.404.63 C:\Program Files\Dealio\kb127\rules\rules.1.405.61 C:\Program Files\Dealio\kb127\rules\rules.1.406.61 C:\Program Files\Dealio\kb127\rules\rules.1.407.76 C:\Program Files\Dealio\kb127\rules\rules.1.408.63 C:\Program Files\Dealio\kb127\rules\rules.1.409.61 C:\Program Files\Dealio\kb127\rules\rules.1.412.62 C:\Program Files\Dealio\kb127\rules\rules.1.413.62 C:\Program Files\Dealio\kb127\rules\rules.1.414.62 C:\Program Files\Dealio\kb127\rules\rules.1.415.62 C:\Program Files\Dealio\kb127\rules\rules.1.416.62 C:\Program Files\Dealio\kb127\rules\rules.1.417.62 C:\Program Files\Dealio\kb127\rules\rules.1.418.62 C:\Program Files\Dealio\kb127\rules\rules.1.419.62 C:\Program Files\Dealio\kb127\rules\rules.1.420.62 C:\Program Files\Dealio\kb127\rules\rules.1.421.62 C:\Program Files\Dealio\kb127\rules\rules.1.423.63 C:\Program Files\Dealio\kb127\rules\rules.1.424.63 C:\Program Files\Dealio\kb127\rules\rules.1.425.63 C:\Program Files\Dealio\kb127\rules\rules.1.426.63 C:\Program Files\Dealio\kb127\rules\rules.1.427.63 C:\Program Files\Dealio\kb127\rules\rules.1.428.65 C:\Program Files\Dealio\kb127\rules\rules.1.429.63 C:\Program Files\Dealio\kb127\rules\rules.1.430.63 C:\Program Files\Dealio\kb127\rules\rules.1.432.65 C:\Program Files\Dealio\kb127\rules\rules.1.433.64 C:\Program Files\Dealio\kb127\rules\rules.1.434.65 C:\Program Files\Dealio\kb127\rules\rules.1.435.64 C:\Program Files\Dealio\kb127\rules\rules.1.436.76 C:\Program Files\Dealio\kb127\rules\rules.1.437.64 C:\Program Files\Dealio\kb127\rules\rules.1.438.71 C:\Program Files\Dealio\kb127\rules\rules.1.439.71 C:\Program Files\Dealio\kb127\rules\rules.1.440.75 C:\Program Files\Dealio\kb127\rules\rules.1.442.73 C:\Program Files\Dealio\kb127\rules\rules.1.443.73 C:\Program Files\Dealio\kb127\rules\rules.1.444.73 C:\Program Files\Dealio\kb127\rules\rules.1.445.68 C:\Program Files\Dealio\kb127\rules\rules.1.446.69 C:\Program Files\Dealio\kb127\rules\rules.1.450.67 C:\Program Files\Dealio\kb127\rules\rules.1.451.67 C:\Program Files\Dealio\kb127\rules\rules.1.452.68 C:\Program Files\Dealio\kb127\rules\rules.1.453.68 C:\Program Files\Dealio\kb127\rules\rules.1.454.69 C:\Program Files\Dealio\kb127\rules\rules.1.456.69 C:\Program Files\Dealio\kb127\rules\rules.1.457.75 C:\Program Files\Dealio\kb127\rules\rules.1.458.70 C:\Program Files\Dealio\kb127\rules\rules.1.459.70 C:\Program Files\Dealio\kb127\rules\rules.1.460.69 C:\Program Files\Dealio\kb127\rules\rules.1.462.74 C:\Program Files\Dealio\kb127\rules\rules.1.463.69 C:\Program Files\Dealio\kb127\rules\rules.1.464.70 C:\Program Files\Dealio\kb127\rules\rules.1.465.68 C:\Program Files\Dealio\kb127\rules\rules.1.468.70 C:\Program Files\Dealio\kb127\rules\rules.1.469.70 C:\Program Files\Dealio\kb127\rules\rules.1.470.70 C:\Program Files\Dealio\kb127\rules\rules.1.471.73 C:\Program Files\Dealio\kb127\rules\rules.1.472.70 C:\Program Files\Dealio\kb127\rules\rules.1.478.74 C:\Program Files\Dealio\kb127\rules\rules.1.479.73 C:\Program Files\Dealio\kb127\rules\rules.1.480.68 C:\Program Files\Dealio\kb127\rules\rules.1.481.71 C:\Program Files\Dealio\kb127\rules\rules.1.482.74 C:\Program Files\Dealio\kb127\rules\rules.1.49.67 C:\Program Files\Dealio\kb127\rules\rules.1.50.43 C:\Program Files\Dealio\kb127\rules\rules.1.500.71 C:\Program Files\Dealio\kb127\rules\rules.1.501.74 C:\Program Files\Dealio\kb127\rules\rules.1.502.71 C:\Program Files\Dealio\kb127\rules\rules.1.51.69 C:\Program Files\Dealio\kb127\rules\rules.1.52.72 C:\Program Files\Dealio\kb127\rules\rules.1.520.76 C:\Program Files\Dealio\kb127\rules\rules.1.521.76 C:\Program Files\Dealio\kb127\rules\rules.1.522.76 C:\Program Files\Dealio\kb127\rules\rules.1.53.51 C:\Program Files\Dealio\kb127\rules\rules.1.531.76 C:\Program Files\Dealio\kb127\rules\rules.1.532.75 C:\Program Files\Dealio\kb127\rules\rules.1.534.75 C:\Program Files\Dealio\kb127\rules\rules.1.54.47 C:\Program Files\Dealio\kb127\rules\rules.1.55.45 C:\Program Files\Dealio\kb127\rules\rules.1.56.69 C:\Program Files\Dealio\kb127\rules\rules.1.57.43 C:\Program Files\Dealio\kb127\rules\rules.1.58.47 C:\Program Files\Dealio\kb127\rules\rules.1.593.76 C:\Program Files\Dealio\kb127\rules\rules.1.595.76 C:\Program Files\Dealio\kb127\rules\rules.1.63.57 C:\Program Files\Dealio\kb127\rules\rules.1.66.47 C:\Program Files\Dealio\kb127\rules\rules.1.70.75 C:\Program Files\Dealio\kb127\rules\rules.1.71.43 C:\WINDOWS\Prefetch\DEALIOAU.EXE-32C4A05D.pf C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Dealio C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\content_a.xml C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\content_ie.xml C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\content_m.xml C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\content_y.xml C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\logger.xml C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\toolbarIE.xml C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\toolbarIM_a.xml C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\toolbarIM_m.xml C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\toolbarIM_y.xml C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\allow.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\block.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\dontsend.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\im_toolbardropdownmenu.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\im_toolbarsHelprolloverbase.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\im_toolbarsm1rolloverbase.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\im_toolbarsm1rolloverbase_bg.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\im_toolbarsm1rolloverbase_dp.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\im_toolbarsm2rolloverbase.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\im_toolbarstextrollover.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\kiwee_iconX16.ico C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\kiwee_iconX48.ico C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\send.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_eg.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_emoticons.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_eyeglass.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_gear.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_images.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_kiwee.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_msnlogo.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_news.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_text.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_videos.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_webshots.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_winks.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\X.bmp C:\Program Files\Kiwee Toolbar C:\Program Files\Kiwee Toolbar\2.8.167 C:\Program Files\Kiwee Toolbar\2.8.167\AGTBCore.dll C:\Program Files\Kiwee Toolbar\2.8.167\AolIMToolbar.dll C:\Program Files\Kiwee Toolbar\2.8.167\firefox C:\Program Files\Kiwee Toolbar\2.8.167\FlashCOM.dll C:\Program Files\Kiwee Toolbar\2.8.167\KiweeCommonCtrls.dll C:\Program Files\Kiwee Toolbar\2.8.167\KiweeContentHost.dll C:\Program Files\Kiwee Toolbar\2.8.167\KiweeIEToolbar.dll C:\Program Files\Kiwee Toolbar\2.8.167\KiweeIMToolbar.dll C:\Program Files\Kiwee Toolbar\2.8.167\KiweeTBCore.dll C:\Program Files\Kiwee Toolbar\2.8.167\KiweeTBCore.tlb C:\Program Files\Kiwee Toolbar\2.8.167\kiweetoolbar.zip C:\Program Files\Kiwee Toolbar\2.8.167\kwtbaim.exe C:\Program Files\Kiwee Toolbar\2.8.167\mfc80u.dll C:\Program Files\Kiwee Toolbar\2.8.167\Microsoft.VC80.CRT.manifest C:\Program Files\Kiwee Toolbar\2.8.167\Microsoft.VC80.MFC.manifest C:\Program Files\Kiwee Toolbar\2.8.167\msimg32.dll C:\Program Files\Kiwee Toolbar\2.8.167\MsnIMToolbar.dll C:\Program Files\Kiwee Toolbar\2.8.167\msvcp80.dll C:\Program Files\Kiwee Toolbar\2.8.167\msvcr80.dll C:\Program Files\Kiwee Toolbar\2.8.167\RemoteLib.dll C:\Program Files\Kiwee Toolbar\2.8.167\Riched20.dll C:\Program Files\Kiwee Toolbar\2.8.167\firefox\chrome C:\Program Files\Kiwee Toolbar\2.8.167\firefox\chrome.manifest C:\Program Files\Kiwee Toolbar\2.8.167\firefox\components C:\Program Files\Kiwee Toolbar\2.8.167\firefox\defaults C:\Program Files\Kiwee Toolbar\2.8.167\firefox\firefox.xpi C:\Program Files\Kiwee Toolbar\2.8.167\firefox\install.rdf C:\Program Files\Kiwee Toolbar\2.8.167\firefox\META-INF C:\Program Files\Kiwee Toolbar\2.8.167\firefox\chrome\kiweetoolbar.jar C:\Program Files\Kiwee Toolbar\2.8.167\firefox\components\AGCore.js C:\Program Files\Kiwee Toolbar\2.8.167\firefox\components\AGCore.xpt C:\Program Files\Kiwee Toolbar\2.8.167\firefox\components\KiweeSearchHistory.js C:\Program Files\Kiwee Toolbar\2.8.167\firefox\components\SearchProtection.js C:\Program Files\Kiwee Toolbar\2.8.167\firefox\components\SearchProtection.xpt C:\Program Files\Kiwee Toolbar\2.8.167\firefox\defaults\preferences C:\Program Files\Kiwee Toolbar\2.8.167\firefox\defaults\preferences\defaults.js C:\Program Files\Kiwee Toolbar\2.8.167\firefox\META-INF\manifest.mf C:\Program Files\Kiwee Toolbar\2.8.167\firefox\META-INF\zigbert.rsa C:\Program Files\Kiwee Toolbar\2.8.167\firefox\META-INF\zigbert.sf C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Kiwee Toolbar C:\WINDOWS\Prefetch\SEARCHSETTINGS.EXE-253CB611.pf C:\DOCUME~1\ADMINI~1\APPLIC~1\Search Settings C:\DOCUME~1\ADMINI~1\APPLIC~1\Search Settings\kb127 C:\DOCUME~1\ADMINI~1\APPLIC~1\Search Settings\kb127\res C:\DOCUME~1\ADMINI~1\APPLIC~1\Search Settings\kb127\temp C:\DOCUME~1\ADMINI~1\APPLIC~1\Search Settings\kb127\temp\ws-14246.log C:\DOCUME~1\ADMINI~1\APPLIC~1\Search Settings\kb127\temp\ws-14248.log C:\DOCUME~1\ADMINI~1\APPLIC~1\Search Settings\kb127\temp\ws-14249.log C:\DOCUME~1\ISO\APPLIC~1\Search Settings C:\DOCUME~1\ISO\APPLIC~1\Search Settings\kb127 C:\DOCUME~1\ISO\APPLIC~1\Search Settings\kb127\res C:\DOCUME~1\ISO\APPLIC~1\Search Settings\kb127\temp C:\DOCUME~1\ISO\APPLIC~1\Search Settings\kb127\temp\ws-14248.log C:\Program Files\Search Settings C:\Program Files\Search Settings\kb127 C:\Program Files\Search Settings\SearchSettings.exe C:\Program Files\Search Settings\kb127\res C:\Program Files\Search Settings\kb127\SearchSettings.dll C:\Program Files\Search Settings\kb127\SearchSettingsRes409.dll C:\Program Files\Search Settings\kb127\temp C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\ICD1.tmp -----------\\ Extensions (Administrateur) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar (Administrateur) - {b66bc4c3-6d25-4a10-8c59-01daa9063051} => foxgame (ISO) - {b66bc4c3-6d25-4a10-8c59-01daa9063051} => foxgame -----------\\ [..\Internet Explorer\Main] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Local Page"="C:\\WINDOWS\\system32\\blank.htm" "Start Page"="http://www.msn.fr/" "Search Page"="http://www.google.com" "Search Bar"="http://www.google.com/ie" "SearchMigratedDefaultURL"="http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome" "Default_Search_URL"="http://www.google.com/ie" "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home" --------------------\\ Recherche d'autres infections C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\MessengerSkinner C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\MessengerSkinner\Conditions g‚n‚rales.url C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\MessengerSkinner\Confidentialit‚.url C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\MessengerSkinner\D‚sinstaller.lnk C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\MessengerSkinner\MessengerSkinner.lnk C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\MessengerSkinner\Website.url C:\DOCUME~1\ADMINI~1\LOCALS~1\APPLIC~1\ucmmc.dat C:\DOCUME~1\ADMINI~1\LOCALS~1\APPLIC~1\ucmmc.exe C:\DOCUME~1\ADMINI~1\LOCALS~1\APPLIC~1\ucmmc_nav.dat C:\DOCUME~1\ADMINI~1\LOCALS~1\APPLIC~1\ucmmc_navps.dat ==> EGDACCESS <== C:\WINDOWS\system32\gPXHknmp.ini C:\WINDOWS\system32\gPXHknmp.ini2 ==> VUNDO <== 1 - "C:\ToolBar SD\TB_1.txt" - 05/01/2009|12:19 - Option : [1] -----------\\ Fin du rapport a 12:19:17,15

Bon j'ai lancé "Norton_Removal_Tool.exe", il me demande de désinstaller symantec avec ajout/suppression de programme du panneau de config, mais lorsque je veux désinstaller, il me demande un code de désinstallation, que je n'ai pas. Alors, que faire???

merci en fait c'est l'ordi du boulot, symantec était mis par la société et est arrivé a expiration, mais c'est le bordel pour le remettre a jour avec mes boss, donc j'ai mis antivir, j'ai désactivé le lancement automatique car je pensais désactiver le guard, mais ça marche pas )), par contre norton, je comprends pas... Ce que tu m'as dis c'est pour enlever symantec et activer antivir? ça me semble compliqué pour mon petit niveau, mais je vais essayer.

info.txt logfile of random's system information tool 1.05 2009-01-04 19:02:58 ======Uninstall list====== -->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL -->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0 -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\AFPViewr\DeIsL1.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\Aoc\DeIsL1.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL10.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL11.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL12.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL13.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL14.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL15.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL16.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL17.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL18.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL19.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL2.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL20.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL21.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL22.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL23.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL24.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL25.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL26.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL27.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL28.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL29.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL3.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL30.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL31.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL32.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL33.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL4.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL5.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL6.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL7.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL8.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL9.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\Emulator\DeIsL1.isu" -->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\Emulator\DeIsL2.isu" -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{23EFDB58-0874-4883-9810-EDA510B19FAE}\setup.exe" -l0x9 -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2BB79C8D-9DCC-4861-8A23-AE1B0B45E2B6}\setup.exe" -l0x9 -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{775FFF70-4A8C-4500-908D-3C34DBEB11D5}\setup.exe" -l0x9 -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{83021AC3-086F-4B77-ACCD-1BD7C9AB211E}\setup.exe" -l0x9 -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B14F9B26-D695-4C4A-8B11-0FE6CDCC797B}\setup.exe" -l0x9 -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E213C271-AEFA-481D-A9B4-914D88925B8D}\setup.exe" -l0x9 -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf ABBYY FineReader 5.0 Sprint-->MsiExec.exe /X{D1696920-9794-4BBC-8A30-7A88763DE5A2} ABBYY FineReader 6.0 Sprint-->MsiExec.exe /I{ACF60000-22B9-4CE9-98D6-2CCF359BAC07} Ad-Aware-->MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF} Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001} Adobe Shockwave Player-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log Agere Systems HDA Modem-->agrsmdel Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe Assistant de connexion Windows Live-->MsiExec.exe /I{AFA4E5FD-ED70-4D92-99D0-162FD56DC986} Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir PersonalEdition Classic\SETUP.EXE /REMOVE AviSynth 2.5-->"C:\Program Files\AviSynth 2.5\Uninstall.exe" Black & White® 2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D9E52CD1-9DF1-4A8A-9BDC-1E5E53982F2B}\setup.exe" -l0x40c -removeonly Bluetooth Stack for Windows by Toshiba-->MsiExec.exe /X{CEBB6BFB-D708-4F99-A633-BC2600E01EF6} Camera RAW Plug-In for EPSON Creativity Suite-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8DAC1AE4-33D1-4A78-8A42-00E09EDECC3E}\SETUP.EXE" -l0x40c UNINST CamfrogWEB Advanced ActiveX Plugin (www.bobtv.fr)-->"C:\Program Files\CFWebAdvancedU_BOBTV.FR\Uninstall.exe" Compel Adaptec WinASPI-->"C:\Program Files\WinASPI\unins000.exe" Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe" Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe" DAEMON Tools-->MsiExec.exe /I{3DED3A72-61A8-4B87-98A5-EF0BC8038AA0} Dealio Toolbar 3.4-->MsiExec.exe /X{6105648C-0C3C-481D-8C11-1F4952D6FB53} Eco Power Saving Utility-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{79821CAD-999C-443D-B420-96F914C84E27} eMule-->"C:\Program Files\eMule\Uninstall.exe" EPSON Attach To Email-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{20C45B32-5AB6-46A4-94EF-58950CAF05E5} /l1033 ADDREMOVEDLG EPSON CardMonitor-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{109D28C7-FB38-483A-9C91-001CB59E2699}\SETUP.EXE" -l0x40c uninst EPSON Copy Utility 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{67EDD823-135A-4D59-87BD-950616D6E857}\SETUP.EXE" -l0x40c -UnInstall EPSON Easy Photo Print-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B66E665A-DF96-4C38-9422-C7F74BC1B4E5}\SETUP.EXE" -l0x40c UNINST EPSON File Manager-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2EB81825-E9EE-44F4-8F51-1240C3898DC6}\Setup.exe" -l0x40c UNINST EPSON Logiciel imprimante-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R EPSON PhotoQuicker3.5-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{65F5B7AF-3363-11D7-BB6B-00018021113F}\SETUP.EXE" -l0x40c uninst EPSON PhotoStarter3.1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C48817E7-AA05-4151-A99D-1E1E550CE801}\SETUP.EXE" -l0x40c uninst EPSON PRINT Image Framer Tool2.1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{23B59ED4-C360-11D7-875B-0090CC005647}\SETUP.EXE" -l0x40c anything EPSON Scan Assistant-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}\Setup.exe" -l0x40c -u EPSON Scan-->C:\Program Files\epson\escndv\setup\setup.exe /r EPSON Smart Panel-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6C11D561-620B-47DA-A693-4C597F3CDF40}\SETUP.EXE" -l0x40c Uninstall EPSON Web-To-Page-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}\SETUP.EXE" -l0x40c -anything ESCX3600 Guide de réf.-->C:\Program Files\EPSON\TPMANUAL\ESCX3600\REF_G\DOCUNINS.EXE ESCX3600 Guide des logiciels-->C:\Program Files\EPSON\TPMANUAL\ESCX3600\PQU_G\DOCUNINS.EXE ESDX5000_CX4900 Guide d’utilisation-->C:\Program Files\EPSON\TPMANUAL\ESDX5000_CX4900\USE_G\DOCUNINS.EXE Favorit-->"c:\documents and settings\administrateur\local settings\application data\ucmmc.exe" -uninstall ffdshow-->"C:\Program Files\ffdshow\uninstall.exe" Free Easy Burner V 3.8-->"C:\Program Files\Free Easy Burner\unins000.exe" Fujitsu Hotkey Utility-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{805BDB3F-6803-45F7-B959-4FE5B921BC55}\setup.exe" Fujitsu System Extension Utility-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{04ECD699-9F3A-4F9C-A476-EEAA4E172079}\setup.exe" GameShadow-->MsiExec.exe /I{21BB0483-3D43-46A7-A63F-72C702701438} GameSpy Arcade-->C:\PROGRA~1\GAMESP~1\UNWISE.EXE C:\PROGRA~1\GAMESP~1\INSTALL.LOG Google Desktop Search-->C:\Program Files\Google\Google Desktop Search\GoogleDesktopSearchSetup.exe -uninstall Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar2.dll" High Definition Audio - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe" HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe" Hotfix for Windows Media Format SDK (KB902344)-->"C:\WINDOWS\$NtUninstallKB902344$\spuninst\spuninst.exe" IBM iSeries Access for Windows-->"C:\Program Files\IBM\Client Access\cwbinarp.exe" Imation Disk Manager V Service-->C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Imation Disk Manager V.exe -u Intel Matrix Storage Manager-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}\Setup.exe" -l040c -INTELUNINST Intel® Graphics Media Accelerator Driver-->RUNDLL32.EXE C:\WINDOWS\system32\ialmrem.dll,UninstallW2KIGfx2ID PCI\VEN_8086&DEV_27A6 PCI\VEN_8086&DEV_27A2 InterVideo WinDVD-->"C:\Program Files\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\setup.exe" REMOVEALL J2SE Runtime Environment 5.0 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060} Java 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216010FF} Java 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050} Java 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070} Kiwee Toolbar-->"C:\Program Files\AGI\common\bootstrapper.exe" -uninstall"\"C:/Program Files/AGI/Python25\pythonw.exe\" \"C:\Program Files\AGI\common\pyagcore\installer.pyc\" -u KiweeToolbar" Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall Lexmark 1400 Series-->C:\Program Files\Lexmark 1400 Series\Install\x86\Uninst.exe Lexmark X1100 Series-->C:\WINDOWS\system32\spool\drivers\w32x86\3\LXBKUN5C.EXE -dLexmark X1100 Series Lifebook Application Panel-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{271274D2-92C6-4EEC-A0AD-9DA5272AD5C9}\setup.exe" LimeWire 4.18.8-->"C:\Program Files\LimeWire\uninstall.exe" LiveUpdate 2.6 (Symantec Corporation)-->C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE /U Ma-Config.com-->MsiExec.exe /X{DD987A54-122B-4CFD-A8C5-5577027A6B78} Marvell Miniport Driver-->C:\Program Files\Marvell\Miniport Driver\Uninst.exe Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700} Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp" Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28} Microsoft Access 2002 Runtime-->MsiExec.exe /I{901C040C-6000-11D3-8CFE-0050048383C9} Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe" Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe" Microsoft Kernel-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWdf01005$\spuninst\spuninst.exe" Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe" Microsoft Office XP Professional avec FrontPage-->MsiExec.exe /I{9028040C-6000-11D3-8CFE-0050048383C9} Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe" Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d} Microsoft Windows Media Video 9 VCM-->RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmv9vcm.inf, Uninstall Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media 10 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950759)-->"C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB958215)-->"C:\WINDOWS\$NtUninstallKB958215$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB960714)-->"C:\WINDOWS\$NtUninstallKB960714$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe" Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe Mozilla Firefox (3.0.5)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF} MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71} NeoDivx Suite-->"C:\Documents and Settings\Administrateur\NeoDivX Suite\uninstall.exe" Nero BurnRights-->C:\WINDOWS\UNNeroBurnRights.exe /UNINSTALL Nero Suite-->C:\Program Files\Fichiers communs\Nero\Uninstall\Setupx.exe /uninstall ExtraUninstallID="" Nokia Connectivity Cable Driver-->MsiExec.exe /X{972B1D9B-0EAD-49E8-B7D6-3B83FD5665B1} Nokia NSeries Application Installer-->MsiExec.exe /I{FD349381-D79C-4E5C-8980-015DFFB962D5} Nokia NSeries Content Copier-->MsiExec.exe /X{F779EC8D-6703-4C4A-817C-37B07898E647} Nokia NSeries Multimedia Player-->MsiExec.exe /I{FA25FAF6-3097-43C9-BBB2-A77CE8AF1881} Nokia NSeries System Utilities-->MsiExec.exe /X{96E94E18-54D6-42C1-8FC4-24DACEDC3395} Nokia Software Launcher-->MsiExec.exe /I{A8C856AD-63CD-4613-AA29-E6C85607EA06} Nokia Software Updater-->MsiExec.exe /X{3186AEAE-E104-424D-9152-1BF6A4404758} O2Micro Smartcard Driver-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{C5BED10B-42A9-4142-B4C2-008C0FDE27D5} /l1033 OpenOffice.org Installer 1.0-->MsiExec.exe /X{3A2AF807-9F9F-43C9-A24A-17B617238B74} Package de base Microsoft de service de chiffrement pour cartes à puce-->"C:\WINDOWS\$NtUninstallbasecsp$\spuninst\spuninst.exe" PC Connectivity Solution-->MsiExec.exe /I{6094AB91-4CC8-498E-9DFF-134CC0B159DE} PDFCreator 0.8.0-->C:\Program Files\PDFCreator\unins000.exe PIF DESIGNER2.1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7BD0A2D8-4EA0-43C6-BDF8-DDA87B8031C6}\SETUP.EXE" -l0x40c anything RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0 Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\setup.exe" -l0x40c -removeonly Search Settings 1.2-->MsiExec.exe /X{D0C73318-7B4A-4D16-A0C4-3B83F075EA88} Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} Skype™ 3.8-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82} Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe" SpywareBlaster 4.1-->"C:\Program Files\SpywareBlaster\unins000.exe" Symantec AntiVirus-->MsiExec.exe /I{46B63F23-2B4A-4525-A827-688026BE5E40} Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall User Profile Hive Cleanup Service-->MsiExec.exe /I{FF77941A-2BFA-4A18-BE2E-69B9498E4D55} VideoLAN VLC media player 0.8.6e-->C:\Program Files\VideoLAN\VLC\uninstall.exe VirginMega.Fr Premium-->MsiExec.exe /I{EE467474-04A8-48D5-8DDF-0F8D3A3CCBE5} VNC 4.0-->"C:\Program Files\RealVNC\VNC4\unins000.exe" Windows Driver Package - Nokia (WUDFRd) WPD (03/19/2007 6.83.31.1)-->C:\PROGRA~1\DIFX\D6ACC4BE676423A2B130B78A4B627FC457D98997\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\pccswpddri_039E7E24575DBAE6A389611AF28F4EB97729D33E\pccswpddriver.inf Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390} Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65} Windows Media Connect-->"C:\WINDOWS\$NtUninstallWMCSetup$\spuninst\spuninst.exe" Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe" Windows Media Format SDK Hotfix - KB891122-->"C:\WINDOWS\$NtUninstallKB891122$\spuninst\spuninst.exe" Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe" Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe" Winkaa 1.0 1.0-->"C:\Program Files\Emoticons-plus.com\Winkaa 1.0\uninstall.exe" WinZip-->"C:\Program Files\WinZip\WINZIP32.EXE" /uninstall ======Hosts File====== 127.0.0.1 localhost 192.168.0.100 BARCELON 192.168.2.50 LILLE400 192.168.3.50 RENNE400 192.168.4.50 ROUEN400 192.168.5.50 BORDE400 192.168.6.50 VALEN400 192.168.7.50 GRENO400 192.168.8.50 STRAS400 192.168.9.50 CLERM400 ======Security center information====== AV: Avira AntiVir PersonalEdition Classic (disabled) AV: Symantec AntiVirus Corporate Edition (outdated) System event log Computer Name: ENVIRONNEMENT Event Code: 7035 Message: Un contrôle Démarrer a correctement été envoyé au service Service COM de gravage de CD IMAPI. Record Number: 2607 Source Name: Service Control Manager Time Written: 20081114205115.000000+060 Event Type: Informations User: AUTORITE NT\SYSTEM Computer Name: ENVIRONNEMENT Event Code: 4226 Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées. Record Number: 2606 Source Name: Tcpip Time Written: 20081114183629.000000+060 Event Type: Avertissement User: Computer Name: ENVIRONNEMENT Event Code: 4226 Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées. Record Number: 2605 Source Name: Tcpip Time Written: 20081114162908.000000+060 Event Type: Avertissement User: Computer Name: ENVIRONNEMENT Event Code: 4226 Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées. Record Number: 2604 Source Name: Tcpip Time Written: 20081114153352.000000+060 Event Type: Avertissement User: Computer Name: ENVIRONNEMENT Event Code: 4226 Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées. Record Number: 2603 Source Name: Tcpip Time Written: 20081114144006.000000+060 Event Type: Avertissement User: Application event log Computer Name: ENVIRONNEMENT Event Code: 300 Message: MsnMsgr (3580) \\.\C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Messenger\getrogibbs@wanadoo.fr\SharingMetadata\Working\database_8EF8_381D_F838_5CD\dfsr.db: Le moteur de base de données initialise la procédure de récupération. Record Number: 11499 Source Name: ESENT Time Written: 20081213140802.000000+060 Event Type: Informations User: Computer Name: ENVIRONNEMENT Event Code: 102 Message: MsnMsgr (3580) \\.\C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Messenger\getrogibbs@wanadoo.fr\SharingMetadata\Working\database_8EF8_381D_F838_5CD\dfsr.db: Le moteur de base de données a démarré une nouvelle instance (0). Record Number: 11498 Source Name: ESENT Time Written: 20081213140802.000000+060 Event Type: Informations User: Computer Name: ENVIRONNEMENT Event Code: 100 Message: MsnMsgr (3580) Le moteur de base de données 5.01.2600.5512 est démarré. Record Number: 11497 Source Name: ESENT Time Written: 20081213140802.000000+060 Event Type: Informations User: Computer Name: ENVIRONNEMENT Event Code: 12001 Message: The Messenger Sharing USN Journal Reader service started successfully. Record Number: 11496 Source Name: usnjsvc Time Written: 20081213140800.000000+060 Event Type: User: Computer Name: ENVIRONNEMENT Event Code: 0 Message: Record Number: 11495 Source Name: ServiceLayer Time Written: 20081213140709.000000+060 Event Type: Informations User: ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "Path"=C:\Program Files\PC Connectivity Solution\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\PROGRA~1\IBM\CLIENT~1;C:\PROGRA~1\IBM\CLIENT~1\Shared;C:\PROGRA~1\IBM\CLIENT~1\Emulator;;C:\PROGRA~1\DeskView\system;C:\PROGRA~1\DeskView\System "windir"=%SystemRoot% "FP_NO_HOST_CHECK"=NO "OS"=Windows_NT "PROCESSOR_ARCHITECTURE"=x86 "PROCESSOR_LEVEL"=6 "PROCESSOR_IDENTIFIER"=x86 Family 6 Model 14 Stepping 8, GenuineIntel "PROCESSOR_REVISION"=0e08 "NUMBER_OF_PROCESSORS"=2 "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP "DESKVIEW"=C:\Program Files\DeskView -----------------EOF----------------- Logfile of random's system information tool 1.05 (written by random/random) Run by Administrateur at 2009-01-04 19:02:47 Microsoft Windows XP Professionnel Service Pack 3 System drive C: has 9 GB (25%) free of 36 GB Total RAM: 1014 MB (49% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 19:02:51, on 04/01/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\LEXPPS.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\AGI\common\win32\PythonService.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe c:\Program Files\Symantec AntiVirus\DefWatch.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\lxdjcoms.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe c:\Program Files\Symantec AntiVirus\SavRoam.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE c:\Program Files\Symantec AntiVirus\Rtvscan.exe C:\Program Files\UPHClean\uphclean.exe C:\WINDOWS\system32\UStorSrv.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\WINDOWS\vVX3000.exe C:\AddOn\Fujitsu\PSUtility\TrayManager.exe C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe C:\Program Files\Lexmark 1400 Series\lxdjamon.exe C:\PROGRA~1\SYMANT~1\VPTray.exe C:\Program Files\Fujitsu\BtnHnd\BtnHnd.exe C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe C:\AddOn\Fujitsu\Application Panel\QuickTouch.exe C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe C:\WINDOWS\AGRSMMSG.exe C:\WINDOWS\RTHDCPL.EXE C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\WINDOWS\system32\igfxpers.exe C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\system32\ctfmon.exe C:\documents and settings\administrateur\local settings\application data\ucmmc.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\Program Files\Windows Live\Messenger\usnsvc.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Kiwee Toolbar\2.8.167\kwtbaim.exe C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\WINDOWS\system32\igfxsrvc.exe C:\Documents and Settings\Administrateur\Bureau\RSIT.exe C:\Program Files\Trend Micro\HijackThis\Administrateur.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.fr/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: AGSearchHook Class - {0BC6E3FA-78EF-4886-842C-5A1258C4455A} - C:\Program Files\AGI\common\agcutils.dll R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file) O1 - Hosts: 172.16.222.12 LOCAL_EASYCOM O1 - Hosts: 172.16.50.1 SOPHIETH1 SOPHIA S44A5608 SOPHIA310 O1 - Hosts: 172.16.40.5 BLACK_BERRY O1 - Hosts: 172.16.40.1 SOPHIASERVEUR1 O1 - Hosts: 172.16.40.2 SERVEUR-BACKUP O1 - Hosts: 172.16.40.10 GSF.LAN WWW.GSF.LAN O2 - BHO: AGSearchHook Class - {0BC6E3FA-78EF-4886-842C-5A1258C4455A} - C:\Program Files\AGI\common\agcutils.dll O2 - BHO: (no name) - {1EEBF144-58E5-445A-AEEC-93057287226E} - C:\WINDOWS\system32\rqRLcCtT.dll (file missing) O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar\2.8.167\KiweeIEToolbar.dll O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb127\Dealio.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: D - {78F8464D-A6F2-3F0D-A87F-A53A5F10D092} - C:\WINDOWS\system32\mws59179.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: (no name) - {9E9CCC69-4FF5-405E-A22F-99BC702ED5A1} - C:\WINDOWS\system32\pmnkHXPg.dll (file missing) O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll O2 - BHO: Browser Helper Objects - {CBE202A6-3B75-4189-B161-9B4DF370BEE9} - C:\DOCUME~1\ADMINI~1\APPLIC~1\shellex.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O3 - Toolbar: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar\2.8.167\KiweeIEToolbar.dll O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb127\Dealio.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O4 - HKLM\..\Run: [searchSettings] C:\Program Files\Search Settings\SearchSettings.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [Client Access Check Version] "C:\Program Files\IBM\Client Access\cwbckver.exe" LOGIN O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe O4 - HKLM\..\Run: [PSUtility] C:\AddOn\Fujitsu\PSUtility\TrayManager.exe O4 - HKLM\..\Run: [Client Access Help Update] "C:\Program Files\IBM\Client Access\cwbinhlp.exe" O4 - HKLM\..\Run: [Client Access Express Welcome] "C:\Program Files\IBM\Client Access\cwbwlwiz.exe" O4 - HKLM\..\Run: [iAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe O4 - HKLM\..\Run: [lxdjmon.exe] "C:\Program Files\Lexmark 1400 Series\lxdjmon.exe" O4 - HKLM\..\Run: [lxdjamon] "C:\Program Files\Lexmark 1400 Series\lxdjamon.exe" O4 - HKLM\..\Run: [vptray] c:\PROGRA~1\SYMANT~1\VPTray.exe O4 - HKLM\..\Run: [LoadBtnHnd] C:\Program Files\Fujitsu\BtnHnd\BtnHnd.exe O4 - HKLM\..\Run: [au] C:\Program Files\Dealio\DealioAU.exe O4 - HKLM\..\Run: [LoadFUJ02E3] C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe O4 - HKLM\..\Run: [indicatorUtility] C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe O4 - HKLM\..\Run: [LXDJCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXDJtime.dll,_RunDLLEntry@16 O4 - HKLM\..\Run: [LoadFujitsuQuickTouch] C:\AddOn\Fujitsu\Application Panel\QuickTouch.exe O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe" O4 - HKLM\..\Run: [Client Access Service] "C:\Program Files\IBM\Client Access\cwbsvstr.exe" O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [Client Access PC5250 Sound] "C:\Program Files\IBM\Client Access\Emulator\pcssnd.exe" O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [ucmmc] "c:\documents and settings\administrateur\local settings\application data\ucmmc.exe" ucmmc O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user') O8 - Extra context menu item: Compare Prices with &Dealio - C:\Documents and Settings\Administrateur\Application Data\Dealio\kb127\res\DealioSearch.html O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\MICROS~1\Office10\EXCEL.EXE/3000 O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O15 - Trusted Zone: http://www.mygsf.net O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/dow...llerControl.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1207328735203 O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://fichiers.touslesdrivers.com/fichier...ion_3_0_3_5.cab O16 - DPF: {DFB5BCF1-06AE-4ABB-BFA8-1E228F41C50A} (CamfrogWEB Advanced Unicode Control) - http://bobtv.fr/download/cfweb_www.bobtv.f..._instmodule.exe O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL O20 - AppInit_DLLs: ,C:\WINDOWS\System32\cwbuncob32.dll,C:\WINDOWS\System32\cwbuncob32.dll O20 - Winlogon Notify: f83805cd509 - C:\WINDOWS\System32\cwbuncob32.dll O20 - Winlogon Notify: rqRLcCtT - rqRLcCtT.dll (file missing) O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe O23 - Service: AG Windows Service (AGWinService) - Unknown owner - C:\Program Files\AGI\common\win32\PythonService.exe O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe O23 - Service: Fonction Commande à distance d'iSeries Access for Windows (Cwbrxd) - IBM Corporation - C:\WINDOWS\CWBRXD.EXE O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - c:\Program Files\Symantec AntiVirus\DefWatch.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE O23 - Service: lxdj_device - - C:\WINDOWS\system32\lxdjcoms.exe O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe O23 - Service: SAVRoam (SavRoam) - symantec - c:\Program Files\Symantec AntiVirus\SavRoam.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe O23 - Service: Symantec AntiVirus - Symantec Corporation - c:\Program Files\Symantec AntiVirus\Rtvscan.exe O23 - Service: UStorage Server Service - OTi - C:\WINDOWS\system32\UStorSrv.exe O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - C:\Program Files\RealVNC\VNC4\WinVNC4.exe O23 - Service: Marvell Yukon Service (yksvc) - Unknown owner - RUNDLL32.EXE (file missing) -- End of file - 14046 bytes ======Scheduled tasks folder====== C:\WINDOWS\tasks\Microsoft_Hardware_Launch_setup_exe.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0BC6E3FA-78EF-4886-842C-5A1258C4455A}] AGSearchHook Class - C:\Program Files\AGI\common\agcutils.dll [2009-01-04 43520] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1EEBF144-58E5-445A-AEEC-93057287226E}] C:\WINDOWS\system32\rqRLcCtT.dll [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}] RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2008-09-29 308832] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}] Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2008-09-15 1562960] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6638A9DE-0745-4292-8A2E-AE530E7B9B3F}] Kiwee Toolbar - C:\Program Files\Kiwee Toolbar\2.8.167\KiweeIEToolbar.dll [2008-10-24 277648] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6A87B991-A31F-4130-AE72-6D0C294BF082}] DealioBHO Class - C:\Program Files\Dealio\kb127\Dealio.dll [2008-05-26 3170144] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] C:\Program Files\Java\jre6\bin\ssv.dll [2008-11-10 320920] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{78F8464D-A6F2-3F0D-A87F-A53A5F10D092}] D - C:\WINDOWS\system32\mws59179.dll [2008-11-06 176128] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live Sign-in Helper - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2007-09-20 328752] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9E9CCC69-4FF5-405E-A22F-99BC702ED5A1}] C:\WINDOWS\system32\pmnkHXPg.dll [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}] Google Toolbar Helper - c:\program files\google\googletoolbar2.dll [2007-01-19 2403392] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}] Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll [2008-10-08 737776] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CBE202A6-3B75-4189-B161-9B4DF370BEE9}] Browser Helper Objects - C:\DOCUME~1\ADMINI~1\APPLIC~1\shellex.dll [2008-11-03 185856] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] C:\Program Files\Java\jre6\bin\jp2ssv.dll [2008-11-10 34816] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}] EpsonToolBandKicker Class - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-21 368640] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - Kiwee Toolbar - C:\Program Files\Kiwee Toolbar\2.8.167\KiweeIEToolbar.dll [2008-10-24 277648] {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - EPSON Web-To-Page - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-21 368640] {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - Dealio - C:\Program Files\Dealio\kb127\Dealio.dll [2008-05-26 3170144] {2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar2.dll [2007-01-19 2403392] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "SearchSettings"=C:\Program Files\Search Settings\SearchSettings.exe [2008-06-12 991584] "TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2008-09-29 185872] "Client Access Check Version"=C:\Program Files\IBM\Client Access\cwbckver.exe [2004-05-01 45106] "VX3000"=C:\WINDOWS\vVX3000.exe [2007-04-10 709992] "PSUtility"=C:\AddOn\Fujitsu\PSUtility\TrayManager.exe [2005-10-11 151552] "Client Access Help Update"=C:\Program Files\IBM\Client Access\cwbinhlp.exe [2004-05-01 24576] "Client Access Express Welcome"=C:\Program Files\IBM\Client Access\cwbwlwiz.exe [2004-05-01 20480] "IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2005-10-12 139264] "lxdjmon.exe"=C:\Program Files\Lexmark 1400 Series\lxdjmon.exe [] "lxdjamon"=C:\Program Files\Lexmark 1400 Series\lxdjamon.exe [2007-03-06 20480] "vptray"=c:\PROGRA~1\SYMANT~1\VPTray.exe [2005-12-27 85648] "LoadBtnHnd"=C:\Program Files\Fujitsu\BtnHnd\BtnHnd.exe [2005-07-21 61440] "au"=C:\Program Files\Dealio\DealioAU.exe [2008-05-26 595296] "LoadFUJ02E3"=C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe [2005-06-08 69632] "IndicatorUtility"=C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe [2005-08-09 81920] "LXDJCATS"=rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXDJtime.dll [] "LoadFujitsuQuickTouch"=C:\AddOn\Fujitsu\Application Panel\QuickTouch.exe [2005-07-21 353792] "Lexmark X1100 Series"=C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe [2003-08-19 57344] "Client Access Service"=C:\Program Files\IBM\Client Access\cwbsvstr.exe [2004-05-01 20530] "Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632] "ccApp"=c:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe [2005-11-16 48800] "Client Access PC5250 Sound"=C:\Program Files\IBM\Client Access\Emulator\pcssnd.exe [2004-05-01 40960] "AGRSMMSG"=C:\WINDOWS\AGRSMMSG.exe [2006-01-17 88365] "RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2005-12-09 15691264] "SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2006-01-05 761946] "igfxpers"=C:\WINDOWS\system32\igfxpers.exe [2005-11-03 118784] "igfxhkcmd"=C:\WINDOWS\system32\hkcmd.exe [2005-11-03 77824] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360] "MsnMsgr"=C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2007-10-18 5724184] "ucmmc"=c:\documents and settings\administrateur\local settings\application data\ucmmc.exe [2008-12-18 229888] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avgnt] C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe [2008-06-12 266497] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools-1033] C:\Program Files\D-Tools\daemon.exe [2004-08-22 81920] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search] C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2008-04-09 120320] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiweeHook] C:\Program Files\Kiwee Toolbar\2.8.167\kwtbaim.exe [2008-10-24 56456] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\messengerskinner] C:\Program Files\MessengerSkinner\MessengerSkinner.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NSLauncher] C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe [2007-09-07 3100672] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] C:\Program Files\Skype\Phone\Skype.exe [2008-04-23 22058792] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spy Protector] C:\Documents and Settings\Administrateur\Application Data\srcss.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2008-09-16 1833296] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe [2008-11-10 136600] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-05-05 68856] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe] C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2008-09-29 185872] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe [2006-11-03 204288] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Bluetooth Manager.lnk] C:\PROGRA~1\Toshiba\BLUETO~1\TosBtMng.exe [2006-01-17 1748992] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk] C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\READER~1.EXE [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^WinZip Quick Pick.lnk] C:\PROGRA~1\WinZip\WZQKPICK.EXE [2006-04-07 122880] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLS"=",C:\WINDOWS\System32\cwbuncob32.dll,C:\WINDOWS\System32\cwbuncob32.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent] Ati2evxx.dll [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\f83805cd509] C:\WINDOWS\System32\cwbuncob32.dll [2009-01-02 135168] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui] C:\WINDOWS\system32\igfxdev.dll [2005-11-03 135168] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\NavLogon] c:\WINDOWS\system32\NavLogon.dll [2005-12-27 43664] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\rqRLcCtT] rqRLcCtT.dll [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon] C:\WINDOWS\system32\WgaLogon.dll [2007-04-10 236928] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{1EEBF144-58E5-445A-AEEC-93057287226E}"=C:\WINDOWS\system32\rqRLcCtT.dll [] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa] "authentication packages"=msv1_0 C:\WINDOWS\system32\pmnkHXPg [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\aawservice] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=145 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\WINDOWS\system32\lxdjcoms.exe"="C:\WINDOWS\system32\lxdjcoms.exe:*:Enabled:Lexmark Communications System" "C:\Program Files\Lexmark 1400 Series\lxdjamon.exe"="C:\Program Files\Lexmark 1400 Series\lxdjamon.exe:*:Enabled:Lexmark Device Monitor" "C:\Program Files\Lexmark 1400 Series\App4R.exe"="C:\Program Files\Lexmark 1400 Series\App4R.exe:*:Enabled:Lexmark Imaging Studio" "C:\WINDOWS\system32\LEXPPS.EXE"="C:\WINDOWS\system32\LEXPPS.EXE:*:Disabled:LEXPPS.EXE" "C:\Documents and Settings\ISO\Program Files\uTorrent\uTorrent.exe"="C:\Documents and Settings\ISO\Program Files\uTorrent\uTorrent.exe:*:Enabled:uTorrent.exe" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" "C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)" "C:\Program Files\Total War\Medieval - Total War\Medieval_TW.exe"="C:\Program Files\Total War\Medieval - Total War\Medieval_TW.exe:*:Enabled:Medieval_TW" "C:\WINDOWS\system32\[Emoticons-plus.com] Winkaa 2.0.exe"="C:\WINDOWS\system32\[Emoticons-plus.com] Winkaa 2.0.exe:*:Enabled:[Emoticons-plus.com] Winkaa 2.0" "C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype" "C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire" "C:\Program Files\ma-config.com\maconfservice.exe"="C:\Program Files\ma-config.com\maconfservice.exe:LocalSubNet:Enabled:maconfservice" "C:\WINDOWS\Network Diagnostic\xpnetdiag.exe"="C:\WINDOWS\Network Diagnostic\xpnetdiag.exe:*:Disabled:@xpsp3res.dll,-20000" "C:\Documents and Settings\ISO\Bureau\mes docs\spygestion\final\SpyGestion.exe"="C:\Documents and Settings\ISO\Bureau\mes docs\spygestion\final\SpyGestion.exe:*:Enabled:SpyGestion" "C:\Program Files\Azureus\Azureus.exe"="C:\Program Files\Azureus\Azureus.exe:*:Enabled:Azureus" "C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule" "C:\WINDOWS\explorer.exe"="C:\WINDOWS\explorer.exe:*:Enabled:Explorateur Windows" "C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdjwbgw.exe"="C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdjwbgw.exe:*:Enabled: " "C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdjpswx.exe"="C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdjpswx.exe:*:Enabled: " "C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdjjswx.exe"="C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdjjswx.exe:*:Enabled: " "C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdjtime.exe"="C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdjtime.exe:*:Enabled: " [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\Lexmark 1400 Series\app4r.exe"="C:\Program Files\Lexmark 1400 Series\app4r.exe:*:Enabled:BorgListener" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" "C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\I] shell\AutoRun\command - I:\setupSNK.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5f7abd7e-f813-11dc-8a49-00037ae696a6}] shell\AutoRun\command - H:\ shell\open\command - rundll32.exe .\\sciwave.dll,InstallM [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{83592e24-bf92-11dc-8a29-00037ae696a6}] shell\AutoRun\command - Autorun.exe /s [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e6c0f1ed-009f-11dd-8a59-00037ae696a6}] shell\AutoRun\command - I:\setupSNK.exe ======List of files/folders created in the last 1 months====== 2009-01-04 19:02:47 ----D---- C:\rsit 2008-12-29 17:04:26 ----HDC---- C:\WINDOWS\$NtUninstallKB955839$ 2008-12-29 17:04:07 ----HDC---- C:\WINDOWS\$NtUninstallKB958215$ 2008-12-29 17:01:48 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$ 2008-12-29 17:01:43 ----HDC---- C:\WINDOWS\$NtUninstallKB960714$ 2008-12-29 17:01:37 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$ 2008-12-29 17:01:09 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$ 2008-12-29 17:01:03 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$ 2008-12-29 17:00:56 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$ 2008-12-29 17:00:44 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$ 2008-12-29 09:17:03 ----ASH---- C:\WINDOWS\system32\2EB6.tmp 2008-12-28 21:41:25 ----D---- C:\Program Files\Trend Micro 2008-12-28 20:17:11 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP 2008-12-28 20:17:00 ----D---- C:\Program Files\SpywareBlaster 2008-12-28 13:01:41 ----A---- C:\WINDOWS\IE4 Error Log.txt 2008-12-28 11:41:27 ----D---- C:\Program Files\Avira 2008-12-28 11:41:27 ----D---- C:\Documents and Settings\All Users\Application Data\Avira 2008-12-28 11:35:54 ----SH---- C:\WINDOWS\system32\xorpbhdh.ini 2008-12-28 11:33:08 ----A---- C:\WINDOWS\system32\srtiwpuv.dll 2008-12-27 11:33:09 ----SH---- C:\WINDOWS\system32\bmehrfha.ini 2008-12-24 06:10:02 ----SH---- C:\WINDOWS\system32\comrmmio.ini 2008-12-23 20:37:58 ----SH---- C:\WINDOWS\system32\ghofhnwk.ini 2008-12-22 20:36:33 ----SH---- C:\WINDOWS\system32\iaumfphf.ini 2008-12-22 15:30:13 ----A---- C:\WINDOWS\cdplayer.ini 2008-12-22 14:33:47 ----SH---- C:\WINDOWS\system32\iycmxbjp.ini 2008-12-21 12:43:58 ----SH---- C:\WINDOWS\system32\lcpjckek.ini 2008-12-21 12:41:06 ----SH---- C:\WINDOWS\system32\auflynmf.ini 2008-12-20 15:25:20 ----SH---- C:\WINDOWS\system32\otxldgwm.ini 2008-12-20 15:13:36 ----ASH---- C:\WINDOWS\system32\gPXHknmp.ini2 2008-12-20 10:14:42 ----SHD---- C:\WINDOWS\system32\GroupPolicyManifest 2008-12-17 22:51:56 ----ASH---- C:\WINDOWS\system32\gPXHknmp.ini 2008-12-17 10:45:04 ----A---- C:\WINDOWS\system32\mcrh.tmp 2008-12-16 18:34:02 ----A---- C:\WINDOWS\GnuHashes.ini 2008-12-16 18:26:32 ----ASH---- C:\WINDOWS\system32\38A.tmp 2008-12-16 18:26:26 ----A---- C:\WINDOWS\system32\cwbuncob32.dll 2008-12-13 21:31:20 ----D---- C:\Program Files\Lionhead Studios 2008-12-12 18:42:11 ----D---- C:\Program Files\Slitherine 2008-12-08 22:16:45 ----D---- C:\WINDOWS\Minidump 2008-12-07 18:07:28 ----D---- C:\Documents and Settings\All Users\Application Data\Firefly Studios 2008-12-07 18:02:46 ----D---- C:\Program Files\GameShadow 2008-12-07 18:01:20 ----A---- C:\WINDOWS\system32\xinput1_1.dll 2008-12-07 18:01:20 ----A---- C:\WINDOWS\system32\xactengine2_1.dll 2008-12-07 18:01:05 ----A---- C:\WINDOWS\system32\d3dx9_30.dll 2008-12-07 18:01:04 ----A---- C:\WINDOWS\system32\xactengine2_0.dll 2008-12-07 18:01:04 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll 2008-12-07 18:01:03 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll 2008-12-07 18:01:03 ----A---- C:\WINDOWS\system32\d3dx9_28.dll 2008-12-07 18:01:02 ----A---- C:\WINDOWS\system32\d3dx9_27.dll 2008-12-07 18:01:00 ----A---- C:\WINDOWS\system32\d3dx9_26.dll 2008-12-07 18:00:59 ----A---- C:\WINDOWS\system32\d3dx9_25.dll 2008-12-07 18:00:57 ----A---- C:\WINDOWS\system32\d3dx9_24.dll 2008-12-07 17:53:17 ----A---- C:\WINDOWS\system32\wcxdtkje.dll 2008-12-07 17:53:17 ----A---- C:\WINDOWS\system32\nlmyos.dll ======List of files/folders modified in the last 1 months====== 2009-01-04 19:02:48 ----D---- C:\WINDOWS\Prefetch 2009-01-04 14:27:13 ----D---- C:\Program Files\Mozilla Firefox 2009-01-04 14:27:11 ----D---- C:\WINDOWS\Temp 2009-01-04 09:43:39 ----D---- C:\WINDOWS\system32\Lang 2009-01-04 09:40:12 ----D---- C:\Program Files\Symantec AntiVirus 2009-01-04 09:38:56 ----D---- C:\WINDOWS\system32\CatRoot2 2009-01-04 09:38:54 ----D---- C:\WINDOWS\system32\drivers 2009-01-02 21:39:54 ----A---- C:\WINDOWS\SchedLgU.Txt 2009-01-02 19:41:48 ----D---- C:\Program Files\lx_cats 2009-01-02 12:40:55 ----RASH---- C:\boot.ini 2009-01-02 12:40:55 ----A---- C:\WINDOWS\win.ini 2009-01-02 12:40:55 ----A---- C:\WINDOWS\system.ini 2009-01-02 12:35:39 ----D---- C:\WINDOWS\system32 2008-12-29 18:43:16 ----D---- C:\WINDOWS 2008-12-29 17:11:32 ----RSHDC---- C:\WINDOWS\system32\dllcache 2008-12-29 17:04:29 ----HD---- C:\WINDOWS\inf 2008-12-29 17:04:18 ----D---- C:\WINDOWS\system32\CatRoot 2008-12-29 17:04:14 ----A---- C:\WINDOWS\imsins.BAK 2008-12-29 17:04:05 ----HD---- C:\WINDOWS\$hf_mig$ 2008-12-29 17:03:57 ----SHD---- C:\WINDOWS\Installer 2008-12-29 17:00:34 ----D---- C:\WINDOWS\WinSxS 2008-12-29 09:43:09 ----D---- C:\WINDOWS\Help 2008-12-28 21:51:03 ----D---- C:\Program Files\Google 2008-12-28 21:41:25 ----RD---- C:\Program Files 2008-12-28 12:43:17 ----D---- C:\Program Files\Internet Explorer 2008-12-28 12:40:56 ----D---- C:\WINDOWS\ie7updates 2008-12-28 12:40:07 ----D---- C:\WINDOWS\WBEM 2008-12-28 12:19:27 ----D---- C:\save lm 2008-12-27 11:31:13 ----A---- C:\WINDOWS\system32\f31bc11c-.txt 2008-12-23 19:51:59 ----A---- C:\WINDOWS\NeroDigital.ini 2008-12-20 16:22:26 ----HD---- C:\Program Files\InstallShield Installation Information 2008-12-20 16:22:26 ----D---- C:\Program Files\epson 2008-12-20 16:21:58 ----D---- C:\Program Files\Railroad Tycoon II 2008-12-20 16:18:37 ----D---- C:\Program Files\DeskView 2008-12-20 16:16:21 ----D---- C:\Program Files\Fichiers communs\FSC 2008-12-20 15:24:38 ----D---- C:\Program Files\Azureus 2008-12-20 15:24:16 ----D---- C:\Program Files\AVS4YOU 2008-12-20 15:24:04 ----D---- C:\Program Files\Fichiers communs\AVSMedia 2008-12-20 13:30:02 ----D---- C:\WINDOWS\pss 2008-12-16 23:30:56 ----D---- C:\Documents and Settings\Administrateur\Application Data\LimeWire 2008-12-16 23:30:55 ----D---- C:\Incomplete 2008-12-16 20:27:00 ----D---- C:\Documents and Settings\Administrateur\Application Data\Azureus 2008-12-16 17:41:09 ----D---- C:\Program Files\eMule 2008-12-13 21:31:18 ----RSD---- C:\WINDOWS\assembly 2008-12-13 21:31:18 ----D---- C:\WINDOWS\system32\DirectX 2008-12-12 18:02:12 ----A---- C:\WINDOWS\system32\mshtml.dll 2008-12-11 11:34:51 ----D---- C:\Program Files\Lexmark X1100 Series 2008-12-09 15:24:38 ----A---- C:\WINDOWS\system32\MRT.exe 2008-12-07 18:02:50 ----SD---- C:\Documents and Settings\Administrateur\Application Data\Microsoft 2008-12-07 18:02:27 ----D---- C:\WINDOWS\Downloaded Installations 2008-12-07 18:01:09 ----D---- C:\WINDOWS\Microsoft.NET 2008-12-05 11:58:21 ----D---- C:\WINDOWS\system32\Macromed ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys [] R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2008-10-30 75072] R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\eeCtrl.sys [] R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576] R1 SAVRT;SAVRT; \??\c:\Program Files\Symantec AntiVirus\savrt.sys [] R1 SAVRTPEL;SAVRTPEL; \??\c:\Program Files\Symantec AntiVirus\Savrtpel.sys [] R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2007-11-08 21248] R1 SYMTDI;SYMTDI; C:\WINDOWS\System32\Drivers\SYMTDI.SYS [2005-10-19 195728] R1 Tosrfcom;Bluetooth RFCOMM from TOSHIBA; C:\WINDOWS\System32\Drivers\tosrfcom.sys [2005-08-01 64896] R2 Aspi32;Aspi32; C:\WINDOWS\system32\drivers\Aspi32.sys [1999-09-10 25244] R2 BtnHnd;BtnHnd; \??\C:\Program Files\Fujitsu\BtnHnd\BtnHnd.sys [] R2 irda;Protocole IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192] R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys [2006-01-20 1158816] R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800] R3 avgntflt;avgntflt; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys [] R3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952] R3 FUJ02B1;Fujitsu FUJ02B1 Device Driver; C:\WINDOWS\system32\DRIVERS\FUJ02B1.sys [2001-08-01 5248] R3 FUJ02E1;%FUJ02E1.DeviceDesc%; C:\WINDOWS\System32\Drivers\FUJ02E1.sys [2004-10-18 5632] R3 FUJ02E3;Fujitsu FUJ02E3 Device Driver; C:\WINDOWS\system32\DRIVERS\FUJ02E3.sys [2004-01-17 4864] R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384] R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368] R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2005-11-03 1353820] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2005-12-09 4123136] R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288] R3 NAVENG;NAVENG; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\VIRUSD~1\20060531.019\naveng.sys [] R3 NAVEX15;NAVEX15; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\VIRUSD~1\20060531.019\navex15.sys [] R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824] R3 Rasirda;Miniport réseau étendu (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584] R3 SMCIRDA;Pilote de périphérique SMC IrCC Miniport; C:\WINDOWS\system32\DRIVERS\smcirda.sys [2001-08-23 36937] R3 SymEvent;SymEvent; \??\C:\Program Files\Symantec\SYMEVENT.SYS [] R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2006-01-05 191936] R3 tosporte;Bluetooth Port Driver from Toshiba; C:\WINDOWS\system32\DRIVERS\tosporte.sys [2005-11-24 47104] R3 Tosrfbd;Bluetooth RFBUS from TOSHIBA; C:\WINDOWS\System32\Drivers\tosrfbd.sys [2006-01-20 108928] R3 Tosrfbnp;Bluetooth RFBNEP from TOSHIBA; C:\WINDOWS\System32\Drivers\tosrfbnp.sys [2005-12-14 37632] R3 Tosrfhid;Bluetooth RFHID from TOSHIBA; C:\WINDOWS\system32\DRIVERS\Tosrfhid.sys [2006-01-11 62848] R3 tosrfnds;Bluetooth Personal Area Network from TOSHIBA; C:\WINDOWS\system32\DRIVERS\tosrfnds.sys [2005-01-06 18612] R3 Tosrfusb;Bluetooth USB Controller; C:\WINDOWS\System32\Drivers\tosrfusb.sys [2006-01-18 39808] R3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032] R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128] R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208] R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520] R3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856] R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608] R3 VX3000;VX-3000; C:\WINDOWS\system32\DRIVERS\VX3000.sys [2007-04-10 1966696] R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS\system32\DRIVERS\yk51x86.sys [2008-09-19 290432] S1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720] S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024] S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys [] S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504] S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248] S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880] S3 RT73;D-Link USB Wireless LAN Card Driver; C:\WINDOWS\system32\DRIVERS\Dr71WU.sys [2008-08-09 429440] S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136] S3 SNIF0010;FSC Flash Update Driver B; \??\C:\DOCUME~1\GSF\LOCALS~1\Temp\SniF0010.sys [] S3 SNIF0011;FSC Flash Update Driver A; \??\C:\DOCUME~1\GSF\LOCALS~1\Temp\SniF0011.sys [] S3 SPBBCDrv;SPBBCDrv; \??\C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCDrv.sys [] S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232] S3 SYMREDRV;SYMREDRV; C:\WINDOWS\System32\Drivers\SYMREDRV.SYS [2005-10-19 24720] S3 toshidpt;TOSHIBA Bluetooth HID port driver; C:\WINDOWS\system32\drivers\Toshidpt.sys [2005-07-11 3712] S3 TosRfSnd;Bluetooth Audio Device (WDM) from TOSHIBA; C:\WINDOWS\system32\drivers\TosRfSnd.sys [2005-11-11 52864] S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [] S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104] S3 usbstor;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368] S3 w39n51;Intel® PRO/Wireless 3945ABG Adapter Driver; C:\WINDOWS\system32\DRIVERS\w39n51.sys [2005-12-04 1428096] S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000] S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528] S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200] S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568] S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944] S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys [] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 aawservice;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe [2008-06-14 611664] R2 AGWinService;AG Windows Service; C:\Program Files\AGI\common\win32\PythonService.exe [2008-10-24 10240] R2 AntiVirScheduler;Planificateur Avira AntiVir Personal - Free Antivirus; C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe [2008-10-15 68865] R2 AntiVirService;Avira AntiVir Personal - Free Antivirus Guard; C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe [2008-10-15 151297] R2 ccEvtMgr;Symantec Event Manager; c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe [2005-11-16 186016] R2 ccSetMgr;Symantec Settings Manager; c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe [2005-11-16 177824] R2 DefWatch;Symantec AntiVirus Definition Watcher; c:\Program Files\Symantec AntiVirus\DefWatch.exe [2005-12-27 20112] R2 IAANTMon;Intel® Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe [2005-10-12 86140] R2 Irmon;Moniteur infrarouge; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336] R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2008-11-10 152984] R2 LexBceS;LexBce Server; C:\WINDOWS\system32\LEXBCES.EXE [2003-08-18 303104] R2 lxdj_device;lxdj_device; C:\WINDOWS\system32\lxdjcoms.exe [2007-03-12 537520] R2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe [2003-06-19 322120] R2 SavRoam;SAVRoam; c:\Program Files\Symantec AntiVirus\SavRoam.exe [2005-12-27 172176] R2 Symantec AntiVirus;Symantec AntiVirus; c:\Program Files\Symantec AntiVirus\Rtvscan.exe [2005-12-27 1778320] R2 UPHClean;User Profile Hive Cleanup; C:\Program Files\UPHClean\uphclean.exe [2005-04-27 241725] R2 UStorage Server Service;UStorage Server Service; C:\WINDOWS\system32\UStorSrv.exe [2006-02-08 139264] R2 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016] R2 yksvc;Marvell Yukon Service; ykx32mpcoinst [] R3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328] S2 WinVNC4;VNC Server Version 4; C:\Program Files\RealVNC\VNC4\WinVNC4.exe [2004-06-15 380928] S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800] S3 ccPwdSvc;Symantec Password Validation; c:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe [2005-11-16 83616] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144] S3 Cwbrxd;Fonction Commande à distance d'iSeries Access for Windows; C:\WINDOWS\CWBRXD.EXE [2003-10-07 57344] S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-04-09 138168] S3 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfservice.exe [2008-11-02 195752] S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2007-02-08 212480] S3 SNDSrvc;Symantec Network Drivers Service; c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe [2005-10-19 214672] S3 SPBBCSvc;Symantec SPBBCSvc; c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe [2005-03-30 992864] S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240] S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336] -----------------EOF-----------------

voilà, c'est fait, je poste les textes en entier? pcq y a beacoup de ligne...

Bonjour tout le monde et Bonne année! Voilà j'ai installé l'antivirus antivir, il me trouve un cheval de troie; TR/spy.gen dans le fichier C:\windows\system\cwbuncob32dll. et il n'arrive pas à l'éliminer. On m'a conseillé de noter le chemin d'acces et de le supprimer en démarrant mon PC en mode sans echec. J'ai voulu voir avant si j'arrivais à retrouver ce virus mais... je trouve bien le fichier "cwbuncob32dll" mais je ne peux l'ouvrir. 1° est ce la bonne façon d'éliminier cette chose?? 2° si oui comment faire pour le trouver ce TR\spy.gen?? Il est peux etre inscrit sous un autre nom? Merci d'avance pour votre aide.