Aller au contenu
  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

Messages recommandés

Posté(e)

Bonjour a tous et d'avance UN GRAND MERCI... :P ... bravo a tous à l'aide précieuse que vous fournissez

 

l'ordi de ma copine (professionnel) lui propose un message d'erreur toutes les 5 minutes dont voici une capture d'ecran :Lien vers copie d'ecran du Message d'Erreur

 

 

Elle est équipée de F-Secure qui detecte 2 fichiers infectés :

C:\WINDOWS\system32\pjppixlm.dll Infection: Trojan.Win32.BHO.xe

C:\WINDOWS\system32\fxbukjlg.dll Infection: Trojan.Win32.BHO.zo

Lien vers Rapport FSecure

 

Bien entendu comme "les mises a jour ne servent a rien" :P son ordi n'est pas a jour et je vais faire le necessaire pour qu'il le soit.

 

 

 

D'apres Zeb Help Process et apres Analyse HijackThis j'ai un soucis avec :

O4 - HKLM\..\Run: [94f91480] rundll32.exe "C:\WINDOWS\system32\wxgldlkk.dll",b => Infection Combo ()

 

 

Rapport HijackThis :

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 14:14:32, on 10/03/2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Boot mode: Normal

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe

C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE

C:\Program Files\F-Secure\Anti-Virus\fssm32.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\F-Secure\Common\FSMA32.EXE

C:\Program Files\F-Secure\Common\FSMB32.EXE

C:\Program Files\F-Secure\Common\FCH32.EXE

C:\Program Files\F-Secure\Common\FNRB32.EXE

C:\Program Files\F-Secure\Common\FAMEH32.EXE

C:\Program Files\F-Secure\Anti-Virus\fsav32.exe

C:\Program Files\F-Secure\Common\FIH32.EXE

C:\Program Files\F-Secure\Common\FSM32.EXE

C:\WINDOWS\SOUNDMAN.EXE

C:\Program Files\Fichiers communs\InterVideo\FastTVSync\FastTVSync.exe

C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe

C:\WINDOWS\system32\Rundll32.exe

C:\Program Files\MSN Messenger\MsnMsgr.Exe

C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe

C:\WINDOWS\system32\rundll32.exe

C:\Program Files\Intervideo\WinDVD4PR\SchSvr.exe

C:\Program Files\Intervideo\Common\Bin\WinCinemaMgr.exe

C:\Program Files\OpenOffice.org 2.0\program\soffice.exe

C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN

C:\WINDOWS\system32\rundll32.exe

C:\WINDOWS\system32\rundll32.exe

C:\Program Files\Skype\Phone\Skype.exe

C:\Program Files\Skype\Plugin Manager\skypePM.exe

C:\Program Files\MSN Messenger\usnsvc.exe

C:\Program Files\Java\jre1.6.0_02\bin\jucheck.exe

C:\PROGRA~1\MOZILL~2\THUNDE~1.EXE

C:\WINDOWS\explorer.exe

C:\DOCUME~1\jfievet\LOCALS~1\Temp\Répertoire temporaire 1 pour HiJackThis.zip\HijackThis.exe

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.fr/spbasic.htm

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll

O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash

O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [FastTVSync] "C:\Program Files\Fichiers communs\InterVideo\FastTVSync\FastTVSync.exe"

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"

O4 - HKLM\..\Run: [NI.UGESV_0001_N108M2006] "c:\documents and settings\jfievet\application data\setup_fr[1].exe" -nag

O4 - HKLM\..\Run: [94f91480] rundll32.exe "C:\WINDOWS\system32\wxgldlkk.dll",b

O4 - HKLM\..\Run: [bM97ca271c] Rundll32.exe "C:\WINDOWS\system32\xsusuhju.dll",s

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"

O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-21-1935655697-1645522239-725345543-1003\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User '?')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe

O4 - Global Startup: InterVideo Scheduler server.lnk = C:\Program Files\Intervideo\WinDVD4PR\SchSvr.exe

O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\Intervideo\Common\Bin\WinCinemaMgr.exe

O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse...pDownloader.cab

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = ifremer.fr

O17 - HKLM\Software\..\Telephony: DomainName = ifremer.fr

O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = ifremer.fr

O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = ifremer.fr

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL

O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe

O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE

O23 - Service: F-Secure Authentication Agent (FSAA) - F-Secure Corporation. All Rights Reserved. - C:\Program Files\F-Secure\Common\FSAA.EXE

O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE

O23 - Service: Intranet Server Client (SicltNT) - Apsynet - C:\WINDOWS\System32\Siclt32.exe

 

--

End of file - 5903 bytes

Posté(e)

Bonjour,

 

Fermez ou désactivez tous les programmes Antivirus, Antispyware, ainsi que tout pare-feu en cours d'exécution car ils pourraient perturber le fonctionnement de ComboFix.

Fermer tous les programmes

 

Télécharger combofix.exe de sUBs

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Tutoriel:http://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

 

*Double cliquer sur combofix.exe pour le lancer.

Si pour une raison quelconque, Vista par exemple, combofix ne se lançait pas, Démarrez en mode sans échec, choisissez le compte Administrateur, lancez Combofix

Ne pas fermer la fenêtre qui vient de s'ouvrir , le bureau serait vide et cela pourrait entraîner un plantage du programme!

* Taper sur la touche 1 pour démarrer le scan.

Lorsque ComboFix tourne, ne touchez plus du tout à votre ordinateur, vous risqueriez de planter le programme.

* Lorsque le scan sera terminé, cela pourrait prendre un certain temps,un rapport sera généré : postez en le contenu dans un prochain message.

* Si le rapport est trop long, postez le en deux fois.

Posté(e)

Bonjour,

 

C'est la copine en question!

Je viens de faire ce que tu as dit sur le forum (Combofix).

Voici le rapport (long!) :

 

ComboFix 08-03-10.1 - jfievet 2008-03-11 14:37:59.1 - NTFSx86

Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.175 [GMT 1:00]

Endroit: C:\Program Files\F-Secure\ComboFix.exe

* Création d'un nouveau point de restauration

 

AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!

.

 

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))

.

 

C:\Documents and Settings\All Users\Application Data\HotbarSA(2)

C:\Documents and Settings\All Users\Application Data\HotbarSA(2)\HotbarSA.dat

C:\Documents and Settings\All Users\Application Data\HotbarSA(2)\HotbarSA_kyf.dat

C:\Documents and Settings\All Users\Application Data\HotbarSA(2)\HotbarSAAbout.mht

C:\Documents and Settings\All Users\Application Data\HotbarSA(2)\HotbarSAau.dat

C:\Documents and Settings\All Users\Application Data\HotbarSA(2)\HotbarSAEULA.mht

C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat

C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat

C:\Documents and Settings\jfievet\Application Data\HbTools(2)

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\HbTools.log

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\dynamic\1383356.sdf

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\dynamic\TooltipXML\1000027037

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\dynamic\TooltipXML\22254

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\dynamic\TooltipXML\372500

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\dynamic\TooltipXML\44320

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\dynamic\TooltipXML\576702

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\dynamic\TooltipXML\6612

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\ads.cdf

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\btntrans.idx

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\btntrans1.dat

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\business_promo.htm

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\buttondir.txt

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\components.cdf

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\cursors.res

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\d_icons_buttons_1000.res

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\d_icons_buttons_2000.res

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\d_icons_buttons_3000.res

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\d_icons_buttons_bar.res

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\d_icons_buttons_bbar1.res

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\d_icons_buttons_logos.res

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\d_icons_buttons_other.res

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\d_icons_weather.res

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\default.cdf

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_511745-514279.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_bidz.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_bidz1.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_bidz10.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_bidz11.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_bidz12.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_bidz13.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_bidz14.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_bidz15.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_bidz16.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_bidz17.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_bidz18.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_bidz19.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_bidz2.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_bidz20.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_bidz3.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_bidz4.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_bidz5.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_bidz6.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_bidz7.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_bidz8.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_bidz9.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_categorize.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_comparison.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_em_PROFL_CA_flow_b_IEB.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_explorer-Mails.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_explorer-people.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_favorites.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_Games.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_Hide.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_hotbarcom.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_Hotmail.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_hsskin.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_jemster.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_jemsterie.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_jemsteruk.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_jobsearch.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_Mails.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_new.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_premium.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_reun.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_ringtones.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_SearchBoxTrapper.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_searchfor.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_searchgo.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_weather.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Default_yellowpages.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\email-def-511724-548964.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\email-def-511724-9595.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\email-t1-bg.res

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\gamesmenu.cdf

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\gamesMenu.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\hb_ie_menu.res

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\hotbar-premium-hotbar-premium.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\hotbar-premium.cdf

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\hotbar_promo.htm

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\icons2.res

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\ie_games_icon.res

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\ie_video.res

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\keywords.idx

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\keywords1.dat

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\layout.cdf

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\linkpathlegal.txt

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\more.res

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\new_games.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\progress.res

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\s_icons_buttons.res

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\sales_buttons.res

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\t2_bg.res

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\theweb.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\top7.cdf

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\Top7_theweb.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\tsd_bg.res

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\1\weathericon.res

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\ads.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\BtnTrans.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\BtnTrans1.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\business_promo.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\buttondir.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\cursors.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\d_icons_buttons_1000.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\d_icons_buttons_2000.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\d_icons_buttons_3000.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\d_icons_buttons_bar.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\d_icons_buttons_bbar1.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\d_icons_buttons_logos.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\d_icons_buttons_other.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\d_icons_weather.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\default.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\email-t1-bg.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\gamesmenu.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\hb_ie_menu.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\hotbar-premium.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\hotbar_promo.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\icons2.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\ie_games_icon.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\ie_video.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\keywords.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\keywords1.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\layout.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\linkpathlegal.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\more.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\progress.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\s_icons_buttons.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\sales_buttons.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\samplegroups2.txt

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\samplegroups2.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\t2_bg.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\top7.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\tsd_bg.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(2)\v3.0\hbtools\static\DownLoad\weathericon.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\HbTools.log

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\ads.cdf

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\btntrans.idx

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\btntrans1.dat

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\business_promo.htm

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\buttondir.txt

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\components.cdf

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\cursors.res

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\d_icons_buttons_1000.res

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\d_icons_buttons_2000.res

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\d_icons_buttons_3000.res

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\d_icons_buttons_bar.res

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\d_icons_buttons_bbar1.res

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\d_icons_buttons_logos.res

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\d_icons_buttons_other.res

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\d_icons_weather.res

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\default.cdf

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_511745-514279.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_bidz.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_bidz1.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_bidz10.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_bidz11.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_bidz12.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_bidz13.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_bidz14.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_bidz15.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_bidz16.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_bidz17.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_bidz18.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_bidz19.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_bidz2.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_bidz20.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_bidz3.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_bidz4.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_bidz5.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_bidz6.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_bidz7.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_bidz8.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_bidz9.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_categorize.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_comparison.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_em_PROFL_CA_flow_b_IEB.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_explorer-Mails.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_explorer-people.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_favorites.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_Games.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_Hide.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_hotbarcom.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_Hotmail.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_hsskin.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_jemster.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_jemsterie.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_jemsteruk.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_jobsearch.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_Mails.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_new.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_premium.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_reun.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_ringtones.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_SearchBoxTrapper.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_searchfor.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_searchgo.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_weather.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Default_yellowpages.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\email-def-511724-548964.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\email-def-511724-9595.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\email-t1-bg.res

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\gamesmenu.cdf

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\gamesMenu.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\hb_ie_menu.res

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\hotbar-premium-hotbar-premium.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\hotbar-premium.cdf

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\hotbar_promo.htm

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\icons2.res

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\ie_games_icon.res

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\ie_video.res

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\keywords.idx

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\keywords1.dat

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\layout.cdf

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\linkpathlegal.txt

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\more.res

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\new_games.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\progress.res

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\s_icons_buttons.res

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\sales_buttons.res

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\t2_bg.res

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\theweb.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\top7.cdf

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\Top7_theweb.mnu

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\tsd_bg.res

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\1\weathericon.res

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\ads.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\BtnTrans.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\BtnTrans1.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\business_promo.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\buttondir.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\cursors.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\d_icons_buttons_1000.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\d_icons_buttons_2000.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\d_icons_buttons_3000.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\d_icons_buttons_bar.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\d_icons_buttons_bbar1.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\d_icons_buttons_logos.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\d_icons_buttons_other.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\d_icons_weather.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\default.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\email-t1-bg.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\gamesmenu.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\hb_ie_menu.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\hotbar-premium.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\hotbar_promo.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\icons2.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\ie_games_icon.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\ie_video.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\keywords.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\keywords1.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\layout.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\linkpathlegal.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\more.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\progress.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\s_icons_buttons.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\sales_buttons.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\samplegroups2.txt

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\samplegroups2.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\t2_bg.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\top7.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\tsd_bg.xip

C:\Documents and Settings\jfievet\Application Data\HbTools(3)\v3.0\HbTools\static\DownLoad\weathericon.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\eskin(2)\empty_bg_st.htm

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\eskin(2)\FileManager.txt

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\HbTools.log

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\1.sdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\1383356.sdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\1383387.sdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\1383442.sdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\1384577.sdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\1386004.sdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\1387147.sdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\1416861.sdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\1685836.sdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\2017132.sdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\2208789.sdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\269318.sdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\2889382.sdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\289096.sdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\3741814.sdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\3750949.sdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\3893111.sdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\593384.sdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\600583.sdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\737035.sdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\980763.sdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\991767.sdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\domains.txt

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000024388

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000024736

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000026073

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000027037

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000028824

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000029251

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000033079

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000036809

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000044868

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000051643

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000052008

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000052118

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000052121

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000052218

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000052228

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000052291

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000052451

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000052678

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000052938

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000052995

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000053155

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000053498

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000053560

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000057548

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000057934

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000057978

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000058574

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000059452

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000061422

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000061473

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000063923

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000064073

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000068642

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000079001

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000079884

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1000082859

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\118874

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\11891

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\12457

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\13546

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\13587

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\13632

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\15040

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\15611

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1587

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1590

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\17025

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\17040

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\180320

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\1813

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\19052

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\19482

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\19650

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\2020

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\2021

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\20570

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\20935

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\212398

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\22254

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\22657

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\247895

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\25063

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\25803

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\26335

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\29115

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\29135

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\31638

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\32242

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\32887

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\33695

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\33912

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\34911

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\352526

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\36735

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\372500

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\37280

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\374830

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\376270

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\41999

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\437306

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\44100

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\44320

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\44878

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\451453

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\459338

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\482315

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\49442

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\50056

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\505911

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\53310

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\53312

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\53481

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\5358

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\54473

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\548712

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\553281

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\5535

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\572023

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\572911

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\576702

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\5828

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\594881

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\602763

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\61779

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\624121

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\628262

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\6292

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\63801

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\639057

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\650283

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\652325

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\6546

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\658110

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\6612

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\66345

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\6704

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\67567

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\68055

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\685568

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\6873

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\696893

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\697059

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\705036

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\705063

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\705078

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\705187

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\705206

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\705211

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\705226

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\705243

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\705259

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\705261

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\705280

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\705284

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\705294

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\705316

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\705461

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\705516

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\71340

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\73804

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\73842

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\744920

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\748763

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\753017

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\753084

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\753197

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\78918

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\78920

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\85381

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\85878

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\87576

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\87584

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\87594

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\89865

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\89885

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\90234

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\90300

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\90311

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\90358

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\93909

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\95803

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\95825

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\95828

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\dynamic\TooltipXML\99739

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\ads.cdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\btntrans.idx

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\btntrans1.dat

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\business_promo.htm

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\buttondir.txt

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\components.cdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\cursors.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\d_icons_buttons_1000.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\d_icons_buttons_2000.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\d_icons_buttons_3000.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\d_icons_buttons_bar.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\d_icons_buttons_bbar1.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\d_icons_buttons_logos.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\d_icons_buttons_other.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\d_icons_weather.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\default.cdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_511745-514279.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_bidz.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_bidz1.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_bidz10.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_bidz11.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_bidz12.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_bidz13.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_bidz14.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_bidz15.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_bidz16.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_bidz17.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_bidz18.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_bidz19.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_bidz2.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_bidz20.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_bidz3.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_bidz4.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_bidz5.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_bidz6.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_bidz7.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_bidz8.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_bidz9.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_categorize.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_comparison.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_em_PROFL_CA_flow_b_IEB.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_explorer-Mails.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_explorer-people.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_favorites.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_Games.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_Hide.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_hotbarcom.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_Hotmail.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_hsskin.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_jemster.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_jemsterie.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_jemsteruk.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_jobsearch.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_Mails.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_new.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_premium.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_reun.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_ringtones.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_SearchBoxTrapper.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_searchfor.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_searchgo.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_weather.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Default_yellowpages.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\email-def-511724-548964.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\email-def-511724-9595.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\email-t1-bg.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\gamesmenu.cdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\gamesMenu.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\hb_ie_menu.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\hotbar-premium-hotbar-premium.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\hotbar-premium.cdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\hotbar_promo.htm

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\icons2.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\ie_games_icon.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\ie_video.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\keywords.idx

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\keywords1.dat

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\layout.cdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\linkpathlegal.txt

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\more.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\new_games.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\progress.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\s_icons_buttons.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\sales_buttons.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\t2_bg.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\theweb.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\top7.cdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\Top7_theweb.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\tsd_bg.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\1\weathericon.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\ads.cdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\btntrans.idx

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\btntrans1.dat

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\business_promo.htm

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\buttondir.txt

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\components.cdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\cursors.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\d_icons_buttons_1000.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\d_icons_buttons_2000.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\d_icons_buttons_3000.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\d_icons_buttons_bar.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\d_icons_buttons_bbar1.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\d_icons_buttons_logos.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\d_icons_buttons_other.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\d_icons_weather.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\default.cdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_511745-514279.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_bidz.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_bidz1.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_bidz10.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_bidz11.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_bidz12.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_bidz13.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_bidz14.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_bidz15.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_bidz16.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_bidz17.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_bidz18.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_bidz19.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_bidz2.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_bidz20.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_bidz3.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_bidz4.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_bidz5.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_bidz6.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_bidz7.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_bidz8.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_bidz9.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_categorize.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_comparison.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_em_PROFL_CA_flow_b_IEB.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_explorer-Mails.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_explorer-people.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_favorites.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_Games.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_Hide.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_hotbarcom.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_Hotmail.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_hsskin.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_jemster.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_jemsterie.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_jemsteruk.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_jobsearch.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_Mails.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_new.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_premium.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_reun.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_ringtones.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_SearchBoxTrapper.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_searchfor.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_searchgo.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_weather.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Default_yellowpages.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\email-def-511724-548964.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\email-def-511724-9595.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\email-t1-bg.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\gamesmenu.cdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\gamesMenu.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\hb_ie_menu.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\hotbar-premium-hotbar-premium.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\hotbar-premium.cdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\hotbar_promo.htm

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\icons2.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\ie_games_icon.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\ie_video.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\keywords.idx

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\keywords1.dat

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\layout.cdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\linkpathlegal.txt

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\more.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\new_games.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\progress.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\s_icons_buttons.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\sales_buttons.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\t2_bg.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\theweb.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\top7.cdf

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\Top7_theweb.mnu

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\tsd_bg.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\2\weathericon.res

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\ads.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\BtnTrans.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\BtnTrans1.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\business_promo.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\buttondir.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\cursors.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\d_icons_buttons_1000.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\d_icons_buttons_2000.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\d_icons_buttons_3000.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\d_icons_buttons_bar.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\d_icons_buttons_bbar1.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\d_icons_buttons_logos.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\d_icons_buttons_other.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\d_icons_weather.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\default.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\email-t1-bg.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\gamesmenu.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\hb_ie_menu.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\hotbar-premium.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\hotbar_promo.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\icons2.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\ie_games_icon.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\ie_video.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\keywords.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\keywords1.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\layout.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\linkpathlegal.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\more.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\progress.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\s_icons_buttons.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\sales_buttons.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\samplegroups2.txt

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\samplegroups2.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\t2_bg.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\top7.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\tsd_bg.xip

C:\Documents and Settings\jfievet\Application Data\Hotbar(2)\v3(2).0\Hotbar\static\DownLoad\weathericon.xip

C:\WINDOWS\BM97ca271c.xml

C:\WINDOWS\cookies.ini

C:\WINDOWS\pskt.ini

C:\WINDOWS\system32\awhctbqw.dll

C:\WINDOWS\system32\bfewhyse.dll

C:\WINDOWS\system32\bkrsltks.ini

C:\WINDOWS\system32\btkvyfnq.ini

C:\WINDOWS\system32\cxwwwhcp.dll

C:\WINDOWS\system32\daahjykf.dll

C:\WINDOWS\system32\dhjxetkv.ini

C:\WINDOWS\system32\dnrptjpg.dll

C:\WINDOWS\system32\dyfdpcwu.dll

C:\WINDOWS\system32\eemjmnbm.dll

C:\WINDOWS\system32\eexlvmal.ini

C:\WINDOWS\system32\fhuddaej.dll

C:\WINDOWS\system32\flsmbibe.dll

C:\WINDOWS\system32\gcnpvkjo.dll

C:\WINDOWS\system32\gebcb.dll

C:\WINDOWS\system32\gkguxbbn.dll

C:\WINDOWS\system32\gmskftwj.dll

C:\WINDOWS\system32\gpjtprnd.ini

C:\WINDOWS\system32\gwxnkflp.ini

C:\WINDOWS\system32\jgsmlqsl.dll

C:\WINDOWS\system32\jwtfksmg.ini

C:\WINDOWS\system32\kkldlgxw.ini

C:\WINDOWS\system32\kpjpeycp.dll

C:\WINDOWS\system32\kpqxbppy.dll

C:\WINDOWS\system32\kprlgnel.dll

C:\WINDOWS\system32\lenhajag.dll

C:\WINDOWS\system32\lyyplirr.ini

C:\WINDOWS\system32\mcrh.tmp

C:\WINDOWS\system32\mhplydyv.dll

C:\WINDOWS\system32\mkokgcpw.dll

C:\WINDOWS\system32\njqwhvcr.dll

C:\WINDOWS\system32\njsjxsew.ini

C:\WINDOWS\system32\nnhtdhqo.dll

C:\WINDOWS\system32\nrdwxtjy.dll

C:\WINDOWS\system32\ohgkhqvp.dll

C:\WINDOWS\system32\opwaeejn.dll

C:\WINDOWS\system32\pchwwwxc.ini

C:\WINDOWS\system32\plfknxwg.dll

C:\WINDOWS\system32\ptyudmrv.dll

C:\WINDOWS\system32\qbivnjmi.dll

C:\WINDOWS\system32\qnfyvktb.dll

C:\WINDOWS\system32\rtstv.bak1

C:\WINDOWS\system32\rtstv.bak2

C:\WINDOWS\system32\rtstv.ini

C:\WINDOWS\system32\rvqghfdt.dll

C:\WINDOWS\system32\sktlsrkb.dll

C:\WINDOWS\system32\tlmotmdh.dll

C:\WINDOWS\system32\tuentjgu.dll

C:\WINDOWS\system32\ugjtneut.ini

C:\WINDOWS\system32\ugndivbt.dll

C:\WINDOWS\system32\uoxuyxdn.dll

C:\WINDOWS\system32\uwcpdfyd.ini

C:\WINDOWS\system32\vcbgiskb.dll

C:\WINDOWS\system32\vktexjhd.dll

C:\WINDOWS\system32\vlpymnrx.dll

C:\WINDOWS\system32\vsomiwru.dll

C:\WINDOWS\system32\wesxjsjn.dll

C:\WINDOWS\system32\weuwhfio.dll

C:\WINDOWS\system32\wjsuwtiq.dll

C:\WINDOWS\system32\wqbtchwa.ini

C:\WINDOWS\system32\wsdyqvww.dll

C:\WINDOWS\system32\wxgldlkk.dll

C:\WINDOWS\system32\xsuacjaw.dll

C:\WINDOWS\system32\xsusuhju.dll

C:\WINDOWS\system32\xswljjhx.dll

C:\WINDOWS\system32\yihfqvqt.ini

C:\WINDOWS\system32\ywsshprr.ini

C:\WINDOWS\system32\yykfivag.dll

 

----- BITS: Possible sites infectés -----

 

hxxp://ntric2003

.

((((((((((((((((((((((((((((( Fichiers créés 2008-02-11 to 2008-03-11 ))))))))))))))))))))))))))))))))))))

.

 

2008-03-10 14:10 . 2008-03-10 14:10 318,369 --a------ C:\Program Files\HiJackThis.zip

2008-03-06 18:00 . 2008-03-06 18:00 <REP> d-------- C:\Program Files\MSXML 4.0

2008-03-06 14:00 . 2008-03-06 14:00 <REP> d-------- C:\Program Files\Convar

2008-03-06 14:00 . 2003-07-18 13:58 516,784 -ra------ C:\WINDOWS\system32\XceedCry.dll

2008-03-06 14:00 . 2002-02-28 09:46 217,088 --a------ C:\WINDOWS\system32\DartSock.dll

2008-03-06 14:00 . 2002-02-21 10:12 118,784 --a------ C:\WINDOWS\system32\DartWeb.dll

2008-03-06 14:00 . 2002-02-04 02:43 82,432 --a------ C:\WINDOWS\system32\msxml4r.dll

2008-03-06 14:00 . 1998-06-13 22:53 44,544 --a------ C:\WINDOWS\system32\Gif89.dll

2008-03-06 14:00 . 2002-04-12 13:19 28,672 --a------ C:\WINDOWS\system32\DartWeb.oca

2008-03-03 14:15 . 2008-03-03 16:13 <REP> d-------- C:\Program Files\Opticon Monitor 3

2008-02-29 14:58 . 2008-02-29 14:58 <REP> d-------- C:\Program Files\radio

2008-02-29 12:19 . 2008-03-11 09:01 <REP> d-------- C:\Documents and Settings\jfievet\Application Data\skypePM

2008-02-29 12:19 . 2008-02-29 12:19 32 --a------ C:\Documents and Settings\All Users\Application Data\ezsid.dat

2008-02-29 12:17 . 2008-02-29 12:17 <REP> d-------- C:\Program Files\Fichiers communs\Skype

2008-02-29 12:17 . 2008-03-11 14:20 <REP> d-------- C:\Documents and Settings\jfievet\Application Data\Skype

2008-02-29 12:17 . 2008-02-29 12:17 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Skype

2008-02-29 12:13 . 2008-02-29 12:17 <REP> d-------- C:\Program Files\Skype

2008-02-29 12:12 . 2008-02-29 12:12 26,048 --a------ C:\WINDOWS\system32\ljjklmn.dll

 

.

(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

.

2008-03-11 14:03 --------- d-----w C:\Documents and Settings\jfievet\Application Data\OpenOffice.org2

2008-03-11 13:35 --------- d-----w C:\Program Files\F-Secure

2008-03-11 08:30 --------- d-----w C:\Program Files\Mozilla Thunderbird

2008-03-06 13:00 --------- d--h--w C:\Program Files\InstallShield Installation Information

2008-01-31 15:09 95,296 ----a-w C:\WINDOWS\system32\scfwmgsv.dll

2008-01-10 14:08 1,435 ----a-w C:\Documents and Settings\jfievet\Application Data\WWB7_32.DAT

2007-12-12 09:00 896,102 --sh--w C:\WINDOWS\system32\oeoamsty.tmp

.

 

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

REGEDIT4

*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

 

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C}]

2008-02-29 12:12 26048 --a------ C:\WINDOWS\system32\ljjklmn.dll

 

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E5BE447B-7A4A-4004-83D4-6DE2F5E7AE5D}]

2007-09-17 10:12 283232 --a------ C:\WINDOWS\system32\vtstr.dll

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 11:55 5674352]

"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe" [2005-09-16 08:47 94208]

"Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2008-02-01 17:22 21898024]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"F-Secure Manager"="C:\Program Files\F-Secure\Common\FSM32.exe" [2002-12-05 16:24 106571]

"SoundMan"="SOUNDMAN.EXE" [2004-12-01 08:54 77824 C:\WINDOWS\SOUNDMAN.EXE]

"FastTVSync"="C:\Program Files\Fichiers communs\InterVideo\FastTVSync\FastTVSync.exe" [2003-06-04 16:19 241664]

"NWEReboot"="" []

"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 10:50 155648]

"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 03:00 132496]

"NI.UGESV_0001_N108M2006"="c:\documents and settings\jfievet\application data\setup_fr[1].exe" [ ]

 

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 13:00 15360]

 

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]

"{6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C}"= C:\WINDOWS\system32\ljjklmn.dll [2008-02-29 12:12 26048]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\byxuuss]

byxuuss.dll 2007-09-17 10:07 23552 C:\WINDOWS\system32\byxuuss.dll

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ljjklmn]

ljjklmn.dll 2008-02-29 12:12 26048 C:\WINDOWS\system32\ljjklmn.dll

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\vtstr]

C:\WINDOWS\system32\vtstr.dll 2007-09-17 10:12 283232 C:\WINDOWS\system32\vtstr.dll

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"=

"C:\\Program Files\\MSN Messenger\\livecall.exe"=

 

R2 F-Secure Filter;F-Secure File System Filter;C:\Program Files\F-Secure\Anti-Virus\Win2K\FSfilter.sys [2003-11-14 17:52]

R2 F-Secure Gatekeeper;F-Secure Gatekeeper;C:\Program Files\F-Secure\Anti-Virus\Win2K\FSgk.sys [2004-04-21 08:54]

R2 F-Secure Recognizer;F-Secure File System Recognizer;C:\Program Files\F-Secure\Anti-Virus\Win2K\FSrec.sys [2003-02-06 12:32]

R2 FSpm;F-Secure Policy Manager;C:\Program Files\F-Secure\Common\FSPM.SYS [2002-12-05 16:24]

S2 SicltNT;Intranet Server Client;C:\WINDOWS\System32\Siclt32.exe [2006-12-06 15:41]

S3 APSINV;APSINV;C:\WINDOWS\system32\DRIVERS\APSINV.SYS []

S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 21:58]

S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 23:08]

 

.

**************************************************************************

 

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-03-11 15:03:35

Windows 5.1.2600 Service Pack 2 NTFS

 

Balayage processus cachés ...

 

Balayage caché autostart entries ...

 

Balayage des fichiers cachés ...

 

Scan terminé avec succès

Les fichiers cachés: 0

 

**************************************************************************

.

--------------------- DLLs a chargé sous des processus courants ---------------------

 

PROCESS: C:\WINDOWS\system32\winlogon.exe

-> C:\WINDOWS\system32\ljjklmn.dll

.

------------------------ Other Running Processes ------------------------

.

C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe

C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE

C:\Program Files\F-Secure\Anti-Virus\fssm32.exe

C:\Program Files\F-Secure\Common\FSMA32.EXE

C:\Program Files\F-Secure\Common\FSMB32.EXE

C:\Program Files\F-Secure\Common\FCH32.EXE

C:\Program Files\F-Secure\Common\FNRB32.EXE

C:\Program Files\F-Secure\Common\FAMEH32.EXE

C:\Program Files\F-Secure\Common\FIH32.EXE

C:\Program Files\F-Secure\Anti-Virus\fsav32.exe

C:\Program Files\Intervideo\WinDVD4PR\SchSvr.exe

C:\Program Files\Intervideo\Common\Bin\WinCinemaMgr.exe

C:\Program Files\OpenOffice.org 2.0\program\soffice.exe

C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN

C:\Program Files\Skype\Plugin Manager\skypePM.exe

.

**************************************************************************

.

Temps d'accomplissement: 2008-03-11 15:05:47 - machine was rebooted

ComboFix-quarantined-files.txt 2008-03-11 14:05:42

.

2008-03-06 17:00:23 --- E O F ---

Posté(e)

Bonjour,

 

Il y avait du monde !

 

Combo, Nettoyage

# Déconnectez-vous du net et désactivez l'antivirus (juste le temps de la procédure !)

Lancez Combofix

# Dans le bloc-note ,copiez-collez ces lignes :

File::

C:\WINDOWS\system32\ljjklmn.dll

C:\WINDOWS\system32\scfwmgsv.dll

C:\WINDOWS\system32\oeoamsty.tmp

C:\WINDOWS\system32\vtstr.dll

 

Registry::

[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C}]

[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E5BE447B-7A4A-4004-83D4-6DE2F5E7AE5D}]

[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ljjklmn]

[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\vtstr]

 

 

* Attention, ce code a été rédigé spécialement pour cet utilisateur, prière de ne pas le réutiliser dans d'autres cas !

 

Enregistrez-le en lui donnant le nom CFScript.txt

 

* Faire un glisser/déposer de ce fichier CFScript sur le fichier ComboFix.exe

http://i261.photobucket.com/albums/ii49/Ma...te/CFScript.gif

wv0zyqhphc.gif

 

*

* Au message qui apparait dans une fenêtre bleue ( Type 1 to continue, or 2 to abort) , taper 1 puis valider.

* Patienter le temps du scan.Le bureau va disparaitre à plusieurs reprises: c'est normal!

Ne toucher à rien tant que le scan n'est pas terminé.

* Une fois le scan achevé, un rapport va s'afficher: poster son contenu.

* Si le fichier n'apparait pas, il se trouve ici > C:\ComboFix.txt

Posté(e) (modifié)
je ne pourrais le faire que demain après-midi et vous posterez le rapport.

julie ( la copine qui est nulle en informatique!)

 

Serait elle rencuniere ?????? :P:P:P:P

 

Merci pour votre aide

Modifié par moricefred
Posté(e)

Bonjour,

 

Voici le rapport de combofix :

 

ComboFix 08-03-10.1 - jfievet 2008-03-12 15:23:58.2 - NTFSx86

Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.223 [GMT 1:00]

Endroit: C:\Documents and Settings\jfievet\Bureau\ComboFix.exe

Command switches used :: C:\Documents and Settings\jfievet\Bureau\CFScript.txt

* Création d'un nouveau point de restauration

 

AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!

 

FILE ::

C:\WINDOWS\system32\ljjklmn.dll

C:\WINDOWS\system32\oeoamsty.tmp

C:\WINDOWS\system32\scfwmgsv.dll

C:\WINDOWS\system32\vtstr.dll

.

 

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))

.

 

C:\WINDOWS\BM97ca271c.xml

C:\WINDOWS\cookies.ini

C:\WINDOWS\pskt.ini

C:\WINDOWS\system32\caortiaw.dll

C:\WINDOWS\system32\epexuhge.dll

C:\WINDOWS\system32\kjllm.ini

C:\WINDOWS\system32\kjllm.ini2

C:\WINDOWS\system32\lgsyxeha.dll

C:\WINDOWS\system32\ljjklmn.dll

C:\WINDOWS\system32\mlljk.dll

C:\WINDOWS\system32\oeoamsty.tmp

C:\WINDOWS\system32\otjwebwi.dll

C:\WINDOWS\system32\pxfaikcr.dll

C:\WINDOWS\system32\rckiafxp.ini

C:\WINDOWS\system32\rtstv.bak1

C:\WINDOWS\system32\rtstv.bak2

C:\WINDOWS\system32\rtstv.ini

C:\WINDOWS\system32\scfwmgsv.dll

 

.

((((((((((((((((((((((((((((( Fichiers créés 2008-02-12 to 2008-03-12 ))))))))))))))))))))))))))))))))))))

.

 

2008-03-12 15:05 . 2008-03-12 15:05 <REP> d-------- C:\Program Files\Windows Live

2008-03-12 15:05 . 2008-03-12 15:08 <REP> d--hsc--- C:\Program Files\Fichiers communs\WindowsLiveInstaller

2008-03-12 15:05 . 2008-03-12 15:05 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller

2008-03-12 15:05 . 2008-03-12 15:05 2,402,832 --a------ C:\Program Files\WLinstaller.exe

2008-03-12 14:57 . 2008-03-12 14:57 206 --a------ C:\WINDOWS\system32\MRT.INI

2008-03-12 13:34 . 2008-03-12 13:38 <REP> d-------- C:\WINDOWS\system32\fr-fr

2008-03-12 08:26 . 2007-07-30 19:19 30,040 --a------ C:\WINDOWS\system32\wuapi.dll.mui

2008-03-11 15:26 . 2008-03-12 08:12 1,315,170 ---hs---- C:\WINDOWS\system32\qcsgxkou.ini

2008-03-10 14:10 . 2008-03-10 14:10 318,369 --a------ C:\Program Files\HiJackThis.zip

2008-03-06 18:00 . 2008-03-06 18:00 <REP> d-------- C:\Program Files\MSXML 4.0

2008-03-06 14:00 . 2008-03-06 14:00 <REP> d-------- C:\Program Files\Convar

2008-03-06 14:00 . 2003-07-18 13:58 516,784 -ra------ C:\WINDOWS\system32\XceedCry.dll

2008-03-06 14:00 . 2002-02-28 09:46 217,088 --a------ C:\WINDOWS\system32\DartSock.dll

2008-03-06 14:00 . 2002-02-21 10:12 118,784 --a------ C:\WINDOWS\system32\DartWeb.dll

2008-03-06 14:00 . 2002-02-04 02:43 82,432 --a------ C:\WINDOWS\system32\msxml4r.dll

2008-03-06 14:00 . 1998-06-13 22:53 44,544 --a------ C:\WINDOWS\system32\Gif89.dll

2008-03-06 14:00 . 2002-04-12 13:19 28,672 --a------ C:\WINDOWS\system32\DartWeb.oca

2008-03-03 14:15 . 2008-03-03 16:13 <REP> d-------- C:\Program Files\Opticon Monitor 3

2008-02-29 14:58 . 2008-02-29 14:58 <REP> d-------- C:\Program Files\radio

2008-02-29 12:19 . 2008-03-12 15:02 <REP> d-------- C:\Documents and Settings\jfievet\Application Data\skypePM

2008-02-29 12:19 . 2008-02-29 12:19 32 --a------ C:\Documents and Settings\All Users\Application Data\ezsid.dat

2008-02-29 12:17 . 2008-02-29 12:17 <REP> d-------- C:\Program Files\Fichiers communs\Skype

2008-02-29 12:17 . 2008-03-12 15:02 <REP> d-------- C:\Documents and Settings\jfievet\Application Data\Skype

2008-02-29 12:17 . 2008-02-29 12:17 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Skype

2008-02-29 12:13 . 2008-02-29 12:17 <REP> d-------- C:\Program Files\Skype

 

.

(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

.

2008-03-12 14:28 --------- d-----w C:\Documents and Settings\jfievet\Application Data\OpenOffice.org2

2008-03-12 14:20 --------- d-----w C:\Program Files\F-Secure

2008-03-12 14:03 --------- d-----w C:\Program Files\Mozilla Thunderbird

2008-03-06 13:00 --------- d--h--w C:\Program Files\InstallShield Installation Information

2008-01-10 14:08 1,435 ----a-w C:\Documents and Settings\jfievet\Application Data\WWB7_32.DAT

.

 

((((((((((((((((((((((((((((( snapshot@2008-03-11_15.05.18.58 )))))))))))))))))))))))))))))))))))))))))

.

+ 2004-08-05 12:00:00 61,440 -c----w C:\WINDOWS\ie7\admparse.dll

+ 2004-08-05 12:00:00 101,888 -c----w C:\WINDOWS\ie7\advpack.dll

+ 2004-08-05 12:00:00 35,328 -c----w C:\WINDOWS\ie7\corpol.dll

+ 2004-08-05 12:00:00 28,672 -c----w C:\WINDOWS\ie7\custsat.dll

+ 2007-12-07 01:07:03 357,888 -c----w C:\WINDOWS\ie7\dxtmsft.dll

+ 2007-12-07 01:07:03 205,312 -c----w C:\WINDOWS\ie7\dxtrans.dll

+ 2007-12-07 01:07:04 55,808 -c----w C:\WINDOWS\ie7\extmgr.dll

+ 2004-08-05 12:00:00 38,912 -c----w C:\WINDOWS\ie7\hmmapi.dll

+ 2004-08-05 12:00:00 34,304 -c----w C:\WINDOWS\ie7\ie4uinit.exe

+ 2004-08-05 12:00:00 139,264 -c----w C:\WINDOWS\ie7\ieakeng.dll

+ 2004-08-05 12:00:00 221,696 -c----w C:\WINDOWS\ie7\ieaksie.dll

+ 2004-08-05 12:00:00 245,760 -c----w C:\WINDOWS\ie7\ieakui.dll

+ 2004-08-05 12:00:00 323,584 -c----w C:\WINDOWS\ie7\iedkcs32.dll

+ 2007-12-06 13:07:07 18,432 -c----w C:\WINDOWS\ie7\iedw.exe

+ 2004-08-05 12:00:00 81,920 -c----w C:\WINDOWS\ie7\ieencode.dll

+ 2007-12-07 01:07:04 251,392 -c----w C:\WINDOWS\ie7\iepeers.dll

+ 2004-08-05 12:00:00 49,152 -c----w C:\WINDOWS\ie7\iernonce.dll

+ 2004-08-05 12:00:00 63,488 -c----w C:\WINDOWS\ie7\iesetup.dll

+ 2004-08-05 12:00:00 93,184 -c----w C:\WINDOWS\ie7\iexplore.exe

+ 2004-08-05 12:00:00 35,840 -c----w C:\WINDOWS\ie7\imgutil.dll

+ 2007-12-07 01:07:04 96,768 -c----w C:\WINDOWS\ie7\inseng.dll

+ 2007-11-14 07:28:02 450,560 -c----w C:\WINDOWS\ie7\jscript.dll

+ 2007-12-07 01:07:04 16,384 -c----w C:\WINDOWS\ie7\jsproxy.dll

+ 2004-08-05 12:00:00 22,528 -c----w C:\WINDOWS\ie7\licmgr10.dll

+ 2004-08-05 12:00:00 29,184 -c----w C:\WINDOWS\ie7\mshta.exe

+ 2007-12-07 19:07:06 3,080,192 -c----w C:\WINDOWS\ie7\mshtml.dll

+ 2007-12-07 01:07:04 449,024 -c----w C:\WINDOWS\ie7\mshtmled.dll

+ 2004-08-05 12:00:00 57,344 -c----w C:\WINDOWS\ie7\mshtmler.dll

+ 2004-08-05 12:00:00 146,432 -c----w C:\WINDOWS\ie7\msls31.dll

+ 2007-12-07 01:07:04 146,432 -c----w C:\WINDOWS\ie7\msrating.dll

+ 2007-12-07 01:07:04 532,480 -c----w C:\WINDOWS\ie7\mstime.dll

+ 2004-08-05 12:00:00 97,280 -c----w C:\WINDOWS\ie7\occache.dll

+ 2007-12-07 01:07:04 39,424 -c----w C:\WINDOWS\ie7\pngfilt.dll

+ 2007-09-26 17:34:42 33,472 -c----w C:\WINDOWS\ie7\spuninst\iecustom.dll

+ 2007-09-26 17:32:30 66,048 -c--a-w C:\WINDOWS\ie7\spuninst\ieResetIcons.exe

+ 2006-09-06 16:43:28 216,800 -c----w C:\WINDOWS\ie7\spuninst\spuninst.exe

+ 2006-09-06 16:43:30 394,976 -c----w C:\WINDOWS\ie7\spuninst\updspapi.dll

+ 2004-08-05 12:00:00 37,888 -c----w C:\WINDOWS\ie7\url.dll

+ 2007-12-07 01:07:05 617,472 -c----w C:\WINDOWS\ie7\urlmon.dll

+ 2004-08-05 12:00:00 417,792 -c----w C:\WINDOWS\ie7\vbscript.dll

+ 2007-06-26 13:56:54 851,968 -c----w C:\WINDOWS\ie7\vgx.dll

+ 2004-08-05 12:00:00 281,600 -c----w C:\WINDOWS\ie7\webcheck.dll

+ 2007-12-07 01:07:05 663,552 -c----w C:\WINDOWS\ie7\wininet.dll

+ 2005-10-12 23:15:24 216,800 -c----w C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe

+ 2005-10-12 23:15:43 394,976 -c----w C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\updspapi.dll

+ 2007-08-13 17:54:10 765,952 -c----w C:\WINDOWS\ie7updates\KB938127-IE7\vgx.dll

+ 2007-08-13 17:39:00 123,904 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\advpack.dll

+ 2007-08-13 17:35:46 346,624 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\dxtmsft.dll

+ 2007-08-13 17:35:38 214,528 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\dxtrans.dll

+ 2007-08-13 17:54:10 131,584 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\extmgr.dll

+ 2007-08-13 17:36:26 61,952 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\icardie.dll

+ 2007-08-13 17:39:06 54,784 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\ie4uinit.exe

+ 2007-08-13 17:39:26 152,064 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\ieakeng.dll

+ 2007-08-13 17:39:54 229,376 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\ieaksie.dll

+ 2007-08-13 16:56:54 161,792 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\ieakui.dll

+ 2007-02-12 15:10:12 2,451,312 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\ieapfltr.dat

+ 2007-07-11 11:27:48 383,488 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\ieapfltr.dll

+ 2007-08-13 17:39:50 382,976 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\iedkcs32.dll

+ 2007-08-13 17:54:10 6,049,280 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\ieframe.dll

+ 2007-08-13 17:39:10 43,008 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\iernonce.dll

+ 2007-08-13 17:34:04 266,752 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\iertutil.dll

+ 2007-08-13 17:39:10 13,312 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\ieudinit.exe

+ 2007-08-13 17:43:56 622,080 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\iexplore.exe

+ 2007-08-13 17:54:10 27,136 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\jsproxy.dll

+ 2007-08-13 17:54:10 458,752 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\msfeeds.dll

+ 2007-08-13 17:54:10 50,688 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\msfeedsbs.dll

+ 2007-08-13 17:54:12 3,578,368 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\mshtml.dll

+ 2007-08-13 17:54:10 475,648 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\mshtmled.dll

+ 2007-08-13 17:44:26 192,000 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\msrating.dll

+ 2007-08-13 17:54:10 670,720 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\mstime.dll

+ 2007-08-13 17:44:06 101,376 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\occache.dll

+ 2007-08-13 17:36:12 44,544 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\pngfilt.dll

+ 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe

+ 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\updspapi.dll

+ 2007-08-13 17:44:30 105,984 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\url.dll

+ 2007-08-13 17:54:10 1,162,240 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\urlmon.dll

+ 2007-08-13 17:54:10 231,424 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\webcheck.dll

+ 2007-08-13 17:54:10 818,688 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\wininet.dll

+ 2008-03-12 14:09:06 4,180 ----a-w C:\WINDOWS\SoftwareDistribution\EventCache\{3CA6DB5C-3796-44D8-91F8-C23177E7E75A}.bin

- 2004-08-05 12:00:00 61,440 ----a-w C:\WINDOWS\system32\admparse.dll

+ 2007-08-13 17:39:20 71,680 ----a-w C:\WINDOWS\system32\admparse.dll

- 2004-08-05 12:00:00 101,888 ----a-w C:\WINDOWS\system32\advpack.dll

+ 2007-12-07 02:08:32 124,928 ----a-w C:\WINDOWS\system32\advpack.dll

- 2007-04-16 20:45:28 92,504 ----a-w C:\WINDOWS\system32\cdm.dll

+ 2007-07-30 18:19:20 92,504 ----a-w C:\WINDOWS\system32\cdm.dll

- 2004-08-05 12:00:00 61,440 -c--a-w C:\WINDOWS\system32\dllcache\admparse.dll

+ 2007-08-13 17:39:20 71,680 -c--a-w C:\WINDOWS\system32\dllcache\admparse.dll

- 2004-08-05 12:00:00 101,888 -c--a-w C:\WINDOWS\system32\dllcache\advpack.dll

+ 2007-12-07 02:08:32 124,928 -c----w C:\WINDOWS\system32\dllcache\advpack.dll

- 2007-04-16 20:45:28 92,504 -c--a-w C:\WINDOWS\system32\dllcache\cdm.dll

+ 2007-07-30 18:19:20 92,504 -c--a-w C:\WINDOWS\system32\dllcache\cdm.dll

- 2004-08-05 12:00:00 28,672 -c--a-w C:\WINDOWS\system32\dllcache\custsat.dll

+ 2007-08-13 17:54:10 33,792 -c--a-w C:\WINDOWS\system32\dllcache\custsat.dll

- 2007-12-07 01:07:03 357,888 -c--a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll

+ 2007-12-19 22:53:23 347,136 -c----w C:\WINDOWS\system32\dllcache\dxtmsft.dll

- 2007-12-07 01:07:03 205,312 -c--a-w C:\WINDOWS\system32\dllcache\dxtrans.dll

+ 2007-12-07 02:08:32 214,528 -c----w C:\WINDOWS\system32\dllcache\dxtrans.dll

- 2007-12-07 01:07:04 55,808 -c--a-w C:\WINDOWS\system32\dllcache\extmgr.dll

+ 2007-12-07 02:08:32 133,120 -c----w C:\WINDOWS\system32\dllcache\extmgr.dll

- 2004-08-05 12:00:00 38,912 -c--a-w C:\WINDOWS\system32\dllcache\hmmapi.dll

+ 2007-08-13 17:18:02 60,416 -c--a-w C:\WINDOWS\system32\dllcache\hmmapi.dll

+ 2007-12-07 02:08:32 63,488 -c----w C:\WINDOWS\system32\dllcache\icardie.dll

- 2004-08-05 12:00:00 34,304 -c--a-w C:\WINDOWS\system32\dllcache\ie4uinit.exe

+ 2007-12-06 11:02:31 70,656 -c----w C:\WINDOWS\system32\dllcache\ie4uinit.exe

- 2004-08-05 12:00:00 139,264 -c--a-w C:\WINDOWS\system32\dllcache\ieakeng.dll

+ 2007-12-07 02:08:32 153,088 -c----w C:\WINDOWS\system32\dllcache\ieakeng.dll

- 2004-08-05 12:00:00 221,696 -c--a-w C:\WINDOWS\system32\dllcache\ieaksie.dll

+ 2007-12-07 02:08:32 230,400 -c----w C:\WINDOWS\system32\dllcache\ieaksie.dll

- 2004-08-05 12:00:00 245,760 -c--a-w C:\WINDOWS\system32\dllcache\ieakui.dll

+ 2007-12-06 04:59:51 161,792 -c----w C:\WINDOWS\system32\dllcache\ieakui.dll

+ 2007-04-17 09:32:38 2,455,488 -c----w C:\WINDOWS\system32\dllcache\ieapfltr.dat

+ 2007-12-07 02:08:32 383,488 -c----w C:\WINDOWS\system32\dllcache\ieapfltr.dll

- 2004-08-05 12:00:00 323,584 -c--a-w C:\WINDOWS\system32\dllcache\iedkcs32.dll

+ 2007-12-07 02:08:32 384,512 -c----w C:\WINDOWS\system32\dllcache\iedkcs32.dll

- 2007-12-06 13:07:07 18,432 -c--a-w C:\WINDOWS\system32\dllcache\iedw.exe

+ 2007-08-13 17:44:02 69,120 -c--a-w C:\WINDOWS\system32\dllcache\iedw.exe

- 2004-08-05 12:00:00 81,920 -c--a-w C:\WINDOWS\system32\dllcache\ieencode.dll

+ 2007-08-13 17:45:18 78,336 -c--a-w C:\WINDOWS\system32\dllcache\ieencode.dll

+ 2007-12-07 02:08:33 6,066,176 -c----w C:\WINDOWS\system32\dllcache\ieframe.dll

- 2007-12-07 01:07:04 251,392 -c--a-w C:\WINDOWS\system32\dllcache\iepeers.dll

+ 2007-08-13 17:54:10 191,488 -c--a-w C:\WINDOWS\system32\dllcache\iepeers.dll

- 2004-08-05 12:00:00 49,152 -c--a-w C:\WINDOWS\system32\dllcache\iernonce.dll

+ 2007-12-07 02:08:33 44,544 -c----w C:\WINDOWS\system32\dllcache\iernonce.dll

+ 2007-12-07 02:08:33 267,776 -c----w C:\WINDOWS\system32\dllcache\iertutil.dll

- 2004-08-05 12:00:00 63,488 -c--a-w C:\WINDOWS\system32\dllcache\iesetup.dll

+ 2007-08-13 17:39:12 55,296 -c--a-w C:\WINDOWS\system32\dllcache\iesetup.dll

+ 2007-12-06 11:00:58 13,824 -c----w C:\WINDOWS\system32\dllcache\ieudinit.exe

- 2004-08-05 12:00:00 93,184 -c--a-w C:\WINDOWS\system32\dllcache\iexplore.exe

+ 2007-12-06 11:03:16 625,664 -c----w C:\WINDOWS\system32\dllcache\iexplore.exe

- 2004-08-05 12:00:00 35,840 -c--a-w C:\WINDOWS\system32\dllcache\imgutil.dll

+ 2007-08-13 17:36:06 36,352 -c--a-w C:\WINDOWS\system32\dllcache\imgutil.dll

- 2007-12-07 01:07:04 96,768 -c--a-w C:\WINDOWS\system32\dllcache\inseng.dll

+ 2007-08-13 17:39:02 92,672 -c--a-w C:\WINDOWS\system32\dllcache\inseng.dll

- 2007-11-14 07:28:02 450,560 -c--a-w C:\WINDOWS\system32\dllcache\jscript.dll

+ 2007-08-13 17:38:04 491,520 -c--a-w C:\WINDOWS\system32\dllcache\jscript.dll

- 2007-12-07 01:07:04 16,384 -c--a-w C:\WINDOWS\system32\dllcache\jsproxy.dll

+ 2007-12-07 02:08:33 27,648 -c----w C:\WINDOWS\system32\dllcache\jsproxy.dll

- 2004-08-05 12:00:00 22,528 -c--a-w C:\WINDOWS\system32\dllcache\licmgr10.dll

+ 2007-08-13 17:44:18 40,960 -c--a-w C:\WINDOWS\system32\dllcache\licmgr10.dll

+ 2007-12-07 02:08:33 459,264 -c----w C:\WINDOWS\system32\dllcache\msfeeds.dll

+ 2007-12-07 02:08:33 52,224 -c----w C:\WINDOWS\system32\dllcache\msfeedsbs.dll

- 2004-08-05 12:00:00 29,184 -c--a-w C:\WINDOWS\system32\dllcache\mshta.exe

+ 2007-08-13 17:32:30 45,568 -c--a-w C:\WINDOWS\system32\dllcache\mshta.exe

- 2007-12-07 19:07:06 3,080,192 -c--a-w C:\WINDOWS\system32\dllcache\mshtml.dll

+ 2007-12-08 09:38:36 3,592,192 -c----w C:\WINDOWS\system32\dllcache\mshtml.dll

- 2007-12-07 01:07:04 449,024 -c--a-w C:\WINDOWS\system32\dllcache\mshtmled.dll

+ 2007-12-07 02:08:34 478,208 -c----w C:\WINDOWS\system32\dllcache\mshtmled.dll

- 2004-08-05 12:00:00 57,344 -c--a-w C:\WINDOWS\system32\dllcache\mshtmler.dll

+ 2007-08-13 17:01:12 48,128 -c--a-w C:\WINDOWS\system32\dllcache\mshtmler.dll

- 2004-08-05 12:00:00 146,432 -c--a-w C:\WINDOWS\system32\dllcache\msls31.dll

+ 2007-08-13 17:54:10 156,160 -c--a-w C:\WINDOWS\system32\dllcache\msls31.dll

- 2007-12-07 01:07:04 146,432 -c--a-w C:\WINDOWS\system32\dllcache\msrating.dll

+ 2007-12-07 02:08:34 193,024 -c----w C:\WINDOWS\system32\dllcache\msrating.dll

- 2007-12-07 01:07:04 532,480 -c--a-w C:\WINDOWS\system32\dllcache\mstime.dll

+ 2007-12-07 02:08:34 671,232 -c----w C:\WINDOWS\system32\dllcache\mstime.dll

- 2004-08-05 12:00:00 97,280 -c--a-w C:\WINDOWS\system32\dllcache\occache.dll

+ 2007-12-07 02:08:34 102,912 -c----w C:\WINDOWS\system32\dllcache\occache.dll

- 2007-12-07 01:07:04 39,424 -c--a-w C:\WINDOWS\system32\dllcache\pngfilt.dll

+ 2008-01-11 05:36:55 44,544 -c----w C:\WINDOWS\system32\dllcache\pngfilt.dll

- 2004-08-05 12:00:00 37,888 -c--a-w C:\WINDOWS\system32\dllcache\url.dll

+ 2007-12-07 02:08:34 105,984 -c----w C:\WINDOWS\system32\dllcache\url.dll

- 2007-12-07 01:07:05 617,472 -c--a-w C:\WINDOWS\system32\dllcache\urlmon.dll

+ 2007-12-07 02:08:34 1,159,680 -c----w C:\WINDOWS\system32\dllcache\urlmon.dll

- 2004-08-05 12:00:00 417,792 -c--a-w C:\WINDOWS\system32\dllcache\vbscript.dll

+ 2007-08-13 17:54:10 413,696 -c--a-w C:\WINDOWS\system32\dllcache\vbscript.dll

- 2007-06-26 13:56:54 851,968 -c--a-w C:\WINDOWS\system32\dllcache\vgx.dll

+ 2007-07-12 23:30:52 765,952 -c--a-w C:\WINDOWS\system32\dllcache\vgx.dll

- 2004-08-05 12:00:00 281,600 -c--a-w C:\WINDOWS\system32\dllcache\webcheck.dll

+ 2007-12-07 02:08:34 233,472 -c----w C:\WINDOWS\system32\dllcache\webcheck.dll

+ 2007-04-10 13:00:52 236,928 -c----w C:\WINDOWS\system32\dllcache\WgaLogon.dll

+ 2007-04-10 13:01:40 337,280 -c----w C:\WINDOWS\system32\dllcache\WgaTray.exe

- 2007-12-07 01:07:05 663,552 -c--a-w C:\WINDOWS\system32\dllcache\wininet.dll

+ 2007-12-07 02:08:34 824,832 -c----w C:\WINDOWS\system32\dllcache\wininet.dll

- 2007-04-16 20:45:48 549,720 -c--a-w C:\WINDOWS\system32\dllcache\wuapi.dll

+ 2007-07-30 18:19:36 549,720 -c--a-w C:\WINDOWS\system32\dllcache\wuapi.dll

- 2007-04-16 20:45:20 53,080 -c--a-w C:\WINDOWS\system32\dllcache\wuauclt.exe

+ 2007-07-30 18:19:16 53,080 -c--a-w C:\WINDOWS\system32\dllcache\wuauclt.exe

- 2007-04-16 20:45:54 1,710,936 -c--a-w C:\WINDOWS\system32\dllcache\wuaueng.dll

+ 2007-07-30 18:19:42 1,712,984 -c--a-w C:\WINDOWS\system32\dllcache\wuaueng.dll

- 2007-04-16 20:45:42 325,976 -c--a-w C:\WINDOWS\system32\dllcache\wucltui.dll

+ 2007-07-30 18:19:32 325,976 -c--a-w C:\WINDOWS\system32\dllcache\wucltui.dll

- 2007-04-16 20:47:36 33,624 -c--a-w C:\WINDOWS\system32\dllcache\wups.dll

+ 2007-07-30 18:18:40 33,624 -c--a-w C:\WINDOWS\system32\dllcache\wups.dll

- 2007-12-07 01:07:03 357,888 ----a-w C:\WINDOWS\system32\dxtmsft.dll

+ 2007-12-19 22:53:23 347,136 ----a-w C:\WINDOWS\system32\dxtmsft.dll

- 2007-12-07 01:07:03 205,312 ----a-w C:\WINDOWS\system32\dxtrans.dll

+ 2007-12-07 02:08:32 214,528 ----a-w C:\WINDOWS\system32\dxtrans.dll

- 2007-12-07 01:07:04 55,808 ----a-w C:\WINDOWS\system32\extmgr.dll

+ 2007-12-07 02:08:32 133,120 ------w C:\WINDOWS\system32\extmgr.dll

+ 2007-12-07 02:08:32 63,488 ----a-w C:\WINDOWS\system32\icardie.dll

+ 2006-06-29 07:05:44 26,112 ------w C:\WINDOWS\system32\idndl.dll

- 2004-08-05 12:00:00 34,304 ----a-w C:\WINDOWS\system32\ie4uinit.exe

+ 2007-12-06 11:02:31 70,656 ------w C:\WINDOWS\system32\ie4uinit.exe

- 2004-08-05 12:00:00 139,264 ----a-w C:\WINDOWS\system32\ieakeng.dll

+ 2007-12-07 02:08:32 153,088 ------w C:\WINDOWS\system32\ieakeng.dll

- 2004-08-05 12:00:00 221,696 ----a-w C:\WINDOWS\system32\ieaksie.dll

+ 2007-12-07 02:08:32 230,400 ------w C:\WINDOWS\system32\ieaksie.dll

- 2004-08-05 12:00:00 245,760 ----a-w C:\WINDOWS\system32\ieakui.dll

+ 2007-12-06 04:59:51 161,792 ------w C:\WINDOWS\system32\ieakui.dll

+ 2007-04-17 09:32:38 2,455,488 ----a-w C:\WINDOWS\system32\ieapfltr.dat

+ 2007-12-07 02:08:32 383,488 ----a-w C:\WINDOWS\system32\ieapfltr.dll

- 2004-08-05 12:00:00 323,584 ----a-w C:\WINDOWS\system32\iedkcs32.dll

+ 2007-12-07 02:08:32 384,512 ------w C:\WINDOWS\system32\iedkcs32.dll

- 2004-08-05 12:00:00 81,920 ----a-w C:\WINDOWS\system32\ieencode.dll

+ 2007-08-13 17:45:18 78,336 ----a-w C:\WINDOWS\system32\ieencode.dll

+ 2007-12-07 02:08:33 6,066,176 ----a-w C:\WINDOWS\system32\ieframe.dll

- 2007-12-07 01:07:04 251,392 ----a-w C:\WINDOWS\system32\iepeers.dll

+ 2007-08-13 17:54:10 191,488 ----a-w C:\WINDOWS\system32\iepeers.dll

- 2004-08-05 12:00:00 49,152 ----a-w C:\WINDOWS\system32\iernonce.dll

+ 2007-12-07 02:08:33 44,544 ------w C:\WINDOWS\system32\iernonce.dll

+ 2007-12-07 02:08:33 267,776 ----a-w C:\WINDOWS\system32\iertutil.dll

- 2004-08-05 12:00:00 63,488 ----a-w C:\WINDOWS\system32\iesetup.dll

+ 2007-08-13 17:39:12 55,296 ----a-w C:\WINDOWS\system32\iesetup.dll

+ 2007-12-06 11:00:58 13,824 ----a-w C:\WINDOWS\system32\ieudinit.exe

+ 2007-08-13 17:54:10 180,736 ------w C:\WINDOWS\system32\ieui.dll

- 2004-08-05 12:00:00 35,840 ----a-w C:\WINDOWS\system32\imgutil.dll

+ 2007-08-13 17:36:06 36,352 ----a-w C:\WINDOWS\system32\imgutil.dll

- 2007-12-07 01:07:04 96,768 ----a-w C:\WINDOWS\system32\inseng.dll

+ 2007-08-13 17:39:02 92,672 ----a-w C:\WINDOWS\system32\inseng.dll

- 2007-11-14 07:28:02 450,560 ----a-w C:\WINDOWS\system32\jscript.dll

+ 2007-08-13 17:38:04 491,520 ----a-w C:\WINDOWS\system32\jscript.dll

- 2007-12-07 01:07:04 16,384 ----a-w C:\WINDOWS\system32\jsproxy.dll

+ 2007-12-07 02:08:33 27,648 ------w C:\WINDOWS\system32\jsproxy.dll

+ 2007-10-11 13:12:48 1,468,968 ------w C:\WINDOWS\system32\LegitCheckControl.dll

- 2004-08-05 12:00:00 22,528 ----a-w C:\WINDOWS\system32\licmgr10.dll

+ 2007-08-13 17:44:18 40,960 ----a-w C:\WINDOWS\system32\licmgr10.dll

+ 2008-03-05 07:30:56 19,148,408 ----a-w C:\WINDOWS\system32\MRT.exe

+ 2007-12-07 02:08:33 459,264 ----a-w C:\WINDOWS\system32\msfeeds.dll

+ 2007-12-07 02:08:33 52,224 ----a-w C:\WINDOWS\system32\msfeedsbs.dll

+ 2007-08-13 17:36:40 12,288 ------w C:\WINDOWS\system32\msfeedssync.exe

- 2004-08-05 12:00:00 29,184 ----a-w C:\WINDOWS\system32\mshta.exe

+ 2007-08-13 17:32:30 45,568 ----a-w C:\WINDOWS\system32\mshta.exe

- 2007-12-07 19:07:06 3,080,192 ----a-w C:\WINDOWS\system32\mshtml.dll

+ 2007-12-08 09:38:36 3,592,192 ----a-w C:\WINDOWS\system32\mshtml.dll

- 2007-12-07 01:07:04 449,024 ----a-w C:\WINDOWS\system32\mshtmled.dll

+ 2007-12-07 02:08:34 478,208 ----a-w C:\WINDOWS\system32\mshtmled.dll

- 2004-08-05 12:00:00 57,344 ----a-w C:\WINDOWS\system32\mshtmler.dll

+ 2007-08-13 17:01:12 48,128 ----a-w C:\WINDOWS\system32\mshtmler.dll

- 2004-08-05 12:00:00 146,432 ----a-w C:\WINDOWS\system32\msls31.dll

+ 2007-08-13 17:54:10 156,160 ----a-w C:\WINDOWS\system32\msls31.dll

- 2007-12-07 01:07:04 146,432 ----a-w C:\WINDOWS\system32\msrating.dll

+ 2007-12-07 02:08:34 193,024 ------w C:\WINDOWS\system32\msrating.dll

- 2007-12-07 01:07:04 532,480 ----a-w C:\WINDOWS\system32\mstime.dll

+ 2007-12-07 02:08:34 671,232 ------w C:\WINDOWS\system32\mstime.dll

+ 2006-06-28 16:59:26 24,576 ------w C:\WINDOWS\system32\nlsdl.dll

+ 2006-06-29 07:05:44 23,552 ------w C:\WINDOWS\system32\normaliz.dll

- 2004-08-05 12:00:00 97,280 ----a-w C:\WINDOWS\system32\occache.dll

+ 2007-12-07 02:08:34 102,912 ------w C:\WINDOWS\system32\occache.dll

- 2008-03-11 13:48:38 40,128 ----a-w C:\WINDOWS\system32\perfc009.dat

+ 2008-03-11 14:04:39 40,128 ----a-w C:\WINDOWS\system32\perfc009.dat

- 2008-03-11 13:48:38 48,856 ----a-w C:\WINDOWS\system32\perfc00C.dat

+ 2008-03-11 14:04:39 48,856 ----a-w C:\WINDOWS\system32\perfc00C.dat

- 2008-03-11 13:48:38 311,740 ----a-w C:\WINDOWS\system32\perfh009.dat

+ 2008-03-11 14:04:39 311,740 ----a-w C:\WINDOWS\system32\perfh009.dat

- 2008-03-11 13:48:38 368,076 ----a-w C:\WINDOWS\system32\perfh00C.dat

+ 2008-03-11 14:04:39 368,076 ----a-w C:\WINDOWS\system32\perfh00C.dat

- 2007-12-07 01:07:04 39,424 ----a-w C:\WINDOWS\system32\pngfilt.dll

+ 2008-01-11 05:36:55 44,544 ------w C:\WINDOWS\system32\pngfilt.dll

+ 2007-07-30 18:19:36 549,720 ----a-w C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wuapi.dll\7.0.6000.381\wuapi.dll

+ 2007-07-30 18:18:40 33,624 ----a-w C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.0.6000.381\wups.dll

+ 2007-07-30 18:19:12 43,352 ----a-w C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.0.6000.381\wups2.dll

- 2007-03-06 01:34:33 15,072 ------w C:\WINDOWS\system32\spmsg.dll

+ 2006-12-10 13:10:04 15,664 ------w C:\WINDOWS\system32\spmsg.dll

- 2005-06-28 08:21:34 22,752 ----a-w C:\WINDOWS\system32\spupdsvc.exe

+ 2006-09-06 16:43:30 22,752 ----a-w C:\WINDOWS\system32\spupdsvc.exe

+ 2007-11-13 11:31:11 60,416 ------w C:\WINDOWS\system32\tzchange.exe

- 2004-08-05 12:00:00 37,888 ----a-w C:\WINDOWS\system32\url.dll

+ 2007-12-07 02:08:34 105,984 ----a-w C:\WINDOWS\system32\url.dll

- 2007-12-07 01:07:05 617,472 ----a-w C:\WINDOWS\system32\urlmon.dll

+ 2007-12-07 02:08:34 1,159,680 ----a-w C:\WINDOWS\system32\urlmon.dll

- 2004-08-05 12:00:00 417,792 ----a-w C:\WINDOWS\system32\vbscript.dll

+ 2007-08-13 17:54:10 413,696 ----a-w C:\WINDOWS\system32\vbscript.dll

- 2004-08-05 12:00:00 281,600 ----a-w C:\WINDOWS\system32\webcheck.dll

+ 2007-12-07 02:08:34 233,472 ----a-w C:\WINDOWS\system32\webcheck.dll

+ 2007-04-10 13:00:52 236,928 ------w C:\WINDOWS\system32\WgaLogon.dll

+ 2007-04-10 13:01:40 337,280 ------w C:\WINDOWS\system32\WgaTray.exe

+ 2007-08-13 17:45:16 206,336 ------w C:\WINDOWS\system32\WinFXDocObj.exe

- 2007-12-07 01:07:05 663,552 ----a-w C:\WINDOWS\system32\wininet.dll

+ 2007-12-07 02:08:34 824,832 ----a-w C:\WINDOWS\system32\wininet.dll

- 2007-04-16 20:45:48 549,720 ----a-w C:\WINDOWS\system32\wuapi.dll

+ 2007-07-30 18:19:36 549,720 ----a-w C:\WINDOWS\system32\wuapi.dll

- 2007-04-16 20:45:20 53,080 ----a-w C:\WINDOWS\system32\wuauclt.exe

+ 2007-07-30 18:19:16 53,080 ----a-w C:\WINDOWS\system32\wuauclt.exe

- 2007-04-16 20:45:54 1,710,936 ----a-w C:\WINDOWS\system32\wuaueng.dll

+ 2007-07-30 18:19:42 1,712,984 ----a-w C:\WINDOWS\system32\wuaueng.dll

- 2007-04-16 20:45:42 325,976 ----a-w C:\WINDOWS\system32\wucltui.dll

+ 2007-07-30 18:19:32 325,976 ----a-w C:\WINDOWS\system32\wucltui.dll

- 2007-04-16 20:47:36 33,624 ----a-w C:\WINDOWS\system32\wups.dll

+ 2007-07-30 18:18:40 33,624 ----a-w C:\WINDOWS\system32\wups.dll

- 2007-04-16 20:45:20 43,352 ----a-w C:\WINDOWS\system32\wups2.dll

+ 2007-07-30 18:19:12 43,352 ----a-w C:\WINDOWS\system32\wups2.dll

- 2007-04-16 20:45:36 203,096 ----a-w C:\WINDOWS\system32\wuweb.dll

+ 2007-07-30 18:19:46 203,096 ----a-w C:\WINDOWS\system32\wuweb.dll

+ 2006-07-14 15:51:51 121,856 ------w C:\WINDOWS\system32\xmllite.dll

.

-- Snapshot reset to current date --

.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

REGEDIT4

*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 11:55 5674352]

"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe" [2005-09-16 08:47 94208]

"Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2008-02-01 17:22 21898024]

"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 13:00 15360]

"DWQueuedReporting"="C:\PROGRA~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe" [2005-04-25 12:45 36040]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"F-Secure Manager"="C:\Program Files\F-Secure\Common\FSM32.exe" [2002-12-05 16:24 106571]

"SoundMan"="SOUNDMAN.EXE" [2004-12-01 08:54 77824 C:\WINDOWS\SOUNDMAN.EXE]

"FastTVSync"="C:\Program Files\Fichiers communs\InterVideo\FastTVSync\FastTVSync.exe" [2003-06-04 16:19 241664]

"NWEReboot"="" []

"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 10:50 155648]

"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 03:00 132496]

"NI.UGESV_0001_N108M2006"="c:\documents and settings\jfievet\application data\setup_fr[1].exe" [ ]

 

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 13:00 15360]

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

Authentication Packages REG_MULTI_SZ msv1_0 C:\WINDOWS\system32\mlljk.dll

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"=

"C:\\Program Files\\MSN Messenger\\livecall.exe"=

 

R2 F-Secure Filter;F-Secure File System Filter;C:\Program Files\F-Secure\Anti-Virus\Win2K\FSfilter.sys [2003-11-14 17:52]

R2 F-Secure Gatekeeper;F-Secure Gatekeeper;C:\Program Files\F-Secure\Anti-Virus\Win2K\FSgk.sys [2004-04-21 08:54]

R2 F-Secure Recognizer;F-Secure File System Recognizer;C:\Program Files\F-Secure\Anti-Virus\Win2K\FSrec.sys [2003-02-06 12:32]

R2 FSpm;F-Secure Policy Manager;C:\Program Files\F-Secure\Common\FSPM.SYS [2002-12-05 16:24]

R2 SicltNT;Intranet Server Client;C:\WINDOWS\System32\Siclt32.exe [2006-12-06 15:41]

S3 APSINV;APSINV;C:\WINDOWS\system32\DRIVERS\APSINV.SYS []

S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 21:58]

S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 23:08]

 

.

**************************************************************************

 

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-03-12 15:28:01

Windows 5.1.2600 Service Pack 2 NTFS

 

Balayage processus cachés ...

 

Balayage caché autostart entries ...

 

Balayage des fichiers cachés ...

 

Scan terminé avec succès

Les fichiers cachés: 0

 

**************************************************************************

.

------------------------ Other Running Processes ------------------------

.

C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe

C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE

C:\Program Files\F-Secure\Anti-Virus\fssm32.exe

C:\Program Files\F-Secure\Common\FSMA32.EXE

C:\Program Files\F-Secure\Common\FSMB32.EXE

C:\Program Files\F-Secure\Common\FCH32.EXE

C:\Program Files\F-Secure\Common\FAMEH32.EXE

C:\Program Files\F-Secure\Common\FNRB32.EXE

C:\Program Files\F-Secure\Common\FIH32.EXE

C:\Program Files\F-Secure\Anti-Virus\fsav32.exe

C:\Program Files\Intervideo\WinDVD4PR\SchSvr.exe

C:\Program Files\Intervideo\Common\Bin\WinCinemaMgr.exe

C:\Program Files\OpenOffice.org 2.0\program\soffice.exe

C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN

.

**************************************************************************

.

Temps d'accomplissement: 2008-03-12 15:29:44 - machine was rebooted [jfievet]

ComboFix-quarantined-files.txt 2008-03-12 14:29:41

ComboFix2.txt 2008-03-11 14:05:48

.

2008-03-12 14:03:55 --- E O F ---

Posté(e)

Bonjour,

 

Bonjour,

 

Copiez /collez les lignes suivantes dans le bloc notes, sans ligne blanche au début,

enregistrez, sur le bureau, sous regit.reg et fusionnez(clic droit sur fichier)

Acceptez la modification du régistre.

 

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]

"Authentication Packages"=hex(7):6d,00,73,00,76,00,31,00,5f,00,30,00,00,00,00,\ 00

 

Java n'est pas à jour,donc moins sécurisé.

Rendez vous là:

http://www.download.com/Java-Runtime-Envir...4-10009607.html

 

Java Runtime Environment (JRE) 6 Update 5

Download Now

S'ouvre une bouvelle page.

 

Vous descendrez là:

 

Java Runtime Environment (JRE) 6 Update 5

Clic sur Download

 

Nouvelle page.

 

Sélectionnez votre platform->Windows

Cochez "I agree to the java..."

clic sur continue

 

Nouvelle page

 

Cochez:

Windows Online Installation

Cochez la flèche orange

" Cochez ici"jre-6u5-windows-i586-p-iftw.exe

 

Cela fait, supprimez les installations java antérieures par "Ajout/Suppression de Programmes"

 

Télécharger Antivir ( http://www.free-av.com).

NB : le choix d'Antivir comme antivirus à utiliser dans le cadre de cette procédure, a reposé sur les critères suivants :

--- failles de votre antivirus qui a laissé passer des malwares

--- En mode sans échec ,seuls les processus systèmes sont lancés.Il est donc plus facile de supprimer les infections

--- Antivir peut-être installé et désinstallé facilement

--- Antivir est reconnu pour son efficacité en mode sans échec

--- Ce tutorial permet de le paramétrer aisément

http://www.malekal.com/tutorial_antivir.php

Désactivez votre antivirus actuel

 

Redémarrez en mode sans échec.

Lancez le scan

 

Postez le rapport

 

Postez un nouvel Hijackthis avec vos commentaires sur le comportement du pc

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...