[resolu]cheval de troie

getrogibbs · le 4 janvier 2009

Bonjour tout le monde et Bonne année!

Voilà j'ai installé l'antivirus antivir, il me trouve un cheval de troie; TR/spy.gen dans le fichier C:\windows\system\cwbuncob32dll. et il n'arrive pas à l'éliminer.

On m'a conseillé de noter le chemin d'acces et de le supprimer en démarrant mon PC en mode sans echec. J'ai voulu voir avant si j'arrivais à retrouver ce virus mais... je trouve bien le fichier "cwbuncob32dll" mais je ne peux l'ouvrir.

1° est ce la bonne façon d'éliminier cette chose??

2° si oui comment faire pour le trouver ce TR\spy.gen?? Il est peux etre inscrit sous un autre nom?

Merci d'avance pour votre aide.

angelique · le 4 janvier 2009

salut

Télécharge random's system information tool (RSIT) par random/random et sauvegarde-le sur le Bureau.

Double-clique sur RSIT.exe afin de lancer RSIT.
Clique Continue à l'écran Disclaimer.
Si l'outil HIjackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera et tu devras accepter la licence.
Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (<<qui sera affiché)
ainsi que de info.txt (<<qui sera réduit dans la Barre des Tâches).

-------------------------

getrogibbs · le 4 janvier 2009

voilà, c'est fait, je poste les textes en entier? pcq y a beacoup de ligne...

angelique · le 4 janvier 2009

oui

getrogibbs · le 4 janvier 2009

info.txt logfile of random's system information tool 1.05 2009-01-04 19:02:58

======Uninstall list======

-->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL

-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\AFPViewr\DeIsL1.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\Aoc\DeIsL1.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL10.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL11.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL12.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL13.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL14.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL15.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL16.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL17.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL18.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL19.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL2.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL20.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL21.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL22.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL23.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL24.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL25.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL26.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL27.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL28.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL29.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL3.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL30.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL31.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL32.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL33.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL4.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL5.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL6.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL7.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL8.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\DeIsL9.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\Emulator\DeIsL1.isu"

-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\IBM\Client Access\Emulator\DeIsL2.isu"

-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{23EFDB58-0874-4883-9810-EDA510B19FAE}\setup.exe" -l0x9

-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2BB79C8D-9DCC-4861-8A23-AE1B0B45E2B6}\setup.exe" -l0x9

-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{775FFF70-4A8C-4500-908D-3C34DBEB11D5}\setup.exe" -l0x9

-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{83021AC3-086F-4B77-ACCD-1BD7C9AB211E}\setup.exe" -l0x9

-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B14F9B26-D695-4C4A-8B11-0FE6CDCC797B}\setup.exe" -l0x9

-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E213C271-AEFA-481D-A9B4-914D88925B8D}\setup.exe" -l0x9

-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf

ABBYY FineReader 5.0 Sprint-->MsiExec.exe /X{D1696920-9794-4BBC-8A30-7A88763DE5A2}

ABBYY FineReader 6.0 Sprint-->MsiExec.exe /I{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}

Ad-Aware-->MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}

Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe

Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe

Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001}

Adobe Shockwave Player-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log

Agere Systems HDA Modem-->agrsmdel

Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe

Assistant de connexion Windows Live-->MsiExec.exe /I{AFA4E5FD-ED70-4D92-99D0-162FD56DC986}

Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir PersonalEdition Classic\SETUP.EXE /REMOVE

AviSynth 2.5-->"C:\Program Files\AviSynth 2.5\Uninstall.exe"

Black & White® 2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D9E52CD1-9DF1-4A8A-9BDC-1E5E53982F2B}\setup.exe" -l0x40c -removeonly

Bluetooth Stack for Windows by Toshiba-->MsiExec.exe /X{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}

Camera RAW Plug-In for EPSON Creativity Suite-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8DAC1AE4-33D1-4A78-8A42-00E09EDECC3E}\SETUP.EXE" -l0x40c UNINST

CamfrogWEB Advanced ActiveX Plugin (www.bobtv.fr)-->"C:\Program Files\CFWebAdvancedU_BOBTV.FR\Uninstall.exe"

Compel Adaptec WinASPI-->"C:\Program Files\WinASPI\unins000.exe"

Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"

Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"

DAEMON Tools-->MsiExec.exe /I{3DED3A72-61A8-4B87-98A5-EF0BC8038AA0}

Dealio Toolbar 3.4-->MsiExec.exe /X{6105648C-0C3C-481D-8C11-1F4952D6FB53}

Eco Power Saving Utility-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{79821CAD-999C-443D-B420-96F914C84E27}

eMule-->"C:\Program Files\eMule\Uninstall.exe"

EPSON Attach To Email-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{20C45B32-5AB6-46A4-94EF-58950CAF05E5} /l1033 ADDREMOVEDLG

EPSON CardMonitor-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{109D28C7-FB38-483A-9C91-001CB59E2699}\SETUP.EXE" -l0x40c uninst

EPSON Copy Utility 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{67EDD823-135A-4D59-87BD-950616D6E857}\SETUP.EXE" -l0x40c -UnInstall

EPSON Easy Photo Print-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B66E665A-DF96-4C38-9422-C7F74BC1B4E5}\SETUP.EXE" -l0x40c UNINST

EPSON File Manager-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2EB81825-E9EE-44F4-8F51-1240C3898DC6}\Setup.exe" -l0x40c UNINST

EPSON Logiciel imprimante-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R

EPSON PhotoQuicker3.5-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{65F5B7AF-3363-11D7-BB6B-00018021113F}\SETUP.EXE" -l0x40c uninst

EPSON PhotoStarter3.1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C48817E7-AA05-4151-A99D-1E1E550CE801}\SETUP.EXE" -l0x40c uninst

EPSON PRINT Image Framer Tool2.1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{23B59ED4-C360-11D7-875B-0090CC005647}\SETUP.EXE" -l0x40c anything

EPSON Scan Assistant-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}\Setup.exe" -l0x40c -u

EPSON Scan-->C:\Program Files\epson\escndv\setup\setup.exe /r

EPSON Smart Panel-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6C11D561-620B-47DA-A693-4C597F3CDF40}\SETUP.EXE" -l0x40c Uninstall

EPSON Web-To-Page-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}\SETUP.EXE" -l0x40c -anything

ESCX3600 Guide de réf.-->C:\Program Files\EPSON\TPMANUAL\ESCX3600\REF_G\DOCUNINS.EXE

ESCX3600 Guide des logiciels-->C:\Program Files\EPSON\TPMANUAL\ESCX3600\PQU_G\DOCUNINS.EXE

ESDX5000_CX4900 Guide d’utilisation-->C:\Program Files\EPSON\TPMANUAL\ESDX5000_CX4900\USE_G\DOCUNINS.EXE

Favorit-->"c:\documents and settings\administrateur\local settings\application data\ucmmc.exe" -uninstall

ffdshow-->"C:\Program Files\ffdshow\uninstall.exe"

Free Easy Burner V 3.8-->"C:\Program Files\Free Easy Burner\unins000.exe"

Fujitsu Hotkey Utility-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{805BDB3F-6803-45F7-B959-4FE5B921BC55}\setup.exe"

Fujitsu System Extension Utility-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{04ECD699-9F3A-4F9C-A476-EEAA4E172079}\setup.exe"

GameShadow-->MsiExec.exe /I{21BB0483-3D43-46A7-A63F-72C702701438}

GameSpy Arcade-->C:\PROGRA~1\GAMESP~1\UNWISE.EXE C:\PROGRA~1\GAMESP~1\INSTALL.LOG

Google Desktop Search-->C:\Program Files\Google\Google Desktop Search\GoogleDesktopSearchSetup.exe -uninstall

Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar2.dll"

High Definition Audio - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"

HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall

Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"

Hotfix for Windows Media Format SDK (KB902344)-->"C:\WINDOWS\$NtUninstallKB902344$\spuninst\spuninst.exe"

IBM iSeries Access for Windows-->"C:\Program Files\IBM\Client Access\cwbinarp.exe"

Imation Disk Manager V Service-->C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Imation Disk Manager V.exe -u

Intel Matrix Storage Manager-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}\Setup.exe" -l040c -INTELUNINST

Intel® Graphics Media Accelerator Driver-->RUNDLL32.EXE C:\WINDOWS\system32\ialmrem.dll,UninstallW2KIGfx2ID PCI\VEN_8086&DEV_27A6 PCI\VEN_8086&DEV_27A2

InterVideo WinDVD-->"C:\Program Files\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\setup.exe" REMOVEALL

J2SE Runtime Environment 5.0 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060}

Java 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216010FF}

Java 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}

Java 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}

Kiwee Toolbar-->"C:\Program Files\AGI\common\bootstrapper.exe" -uninstall"\"C:/Program Files/AGI/Python25\pythonw.exe\" \"C:\Program Files\AGI\common\pyagcore\installer.pyc\" -u KiweeToolbar"

Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall

Lexmark 1400 Series-->C:\Program Files\Lexmark 1400 Series\Install\x86\Uninst.exe

Lexmark X1100 Series-->C:\WINDOWS\system32\spool\drivers\w32x86\3\LXBKUN5C.EXE -dLexmark X1100 Series

Lifebook Application Panel-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{271274D2-92C6-4EEC-A0AD-9DA5272AD5C9}\setup.exe"

LimeWire 4.18.8-->"C:\Program Files\LimeWire\uninstall.exe"

LiveUpdate 2.6 (Symantec Corporation)-->C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE /U

Ma-Config.com-->MsiExec.exe /X{DD987A54-122B-4CFD-A8C5-5577027A6B78}

Marvell Miniport Driver-->C:\Program Files\Marvell\Miniport Driver\Uninst.exe

Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}

Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"

Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}

Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}

Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}

Microsoft Access 2002 Runtime-->MsiExec.exe /I{901C040C-6000-11D3-8CFE-0050048383C9}

Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"

Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"

Microsoft Kernel-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWdf01005$\spuninst\spuninst.exe"

Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"

Microsoft Office XP Professional avec FrontPage-->MsiExec.exe /I{9028040C-6000-11D3-8CFE-0050048383C9}

Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"

Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}

Microsoft Windows Media Video 9 VCM-->RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmv9vcm.inf, Uninstall

Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Lecteur Windows Media 10 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB950759)-->"C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB958215)-->"C:\WINDOWS\$NtUninstallKB958215$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"

Mise à jour de sécurité pour Windows XP (KB960714)-->"C:\WINDOWS\$NtUninstallKB960714$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"

Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"

Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe

Mozilla Firefox (3.0.5)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe

MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}

MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}

NeoDivx Suite-->"C:\Documents and Settings\Administrateur\NeoDivX Suite\uninstall.exe"

Nero BurnRights-->C:\WINDOWS\UNNeroBurnRights.exe /UNINSTALL

Nero Suite-->C:\Program Files\Fichiers communs\Nero\Uninstall\Setupx.exe /uninstall ExtraUninstallID=""

Nokia Connectivity Cable Driver-->MsiExec.exe /X{972B1D9B-0EAD-49E8-B7D6-3B83FD5665B1}

Nokia NSeries Application Installer-->MsiExec.exe /I{FD349381-D79C-4E5C-8980-015DFFB962D5}

Nokia NSeries Content Copier-->MsiExec.exe /X{F779EC8D-6703-4C4A-817C-37B07898E647}

Nokia NSeries Multimedia Player-->MsiExec.exe /I{FA25FAF6-3097-43C9-BBB2-A77CE8AF1881}

Nokia NSeries System Utilities-->MsiExec.exe /X{96E94E18-54D6-42C1-8FC4-24DACEDC3395}

Nokia Software Launcher-->MsiExec.exe /I{A8C856AD-63CD-4613-AA29-E6C85607EA06}

Nokia Software Updater-->MsiExec.exe /X{3186AEAE-E104-424D-9152-1BF6A4404758}

O2Micro Smartcard Driver-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{C5BED10B-42A9-4142-B4C2-008C0FDE27D5} /l1033

OpenOffice.org Installer 1.0-->MsiExec.exe /X{3A2AF807-9F9F-43C9-A24A-17B617238B74}

Package de base Microsoft de service de chiffrement pour cartes à puce-->"C:\WINDOWS\$NtUninstallbasecsp$\spuninst\spuninst.exe"

PC Connectivity Solution-->MsiExec.exe /I{6094AB91-4CC8-498E-9DFF-134CC0B159DE}

PDFCreator 0.8.0-->C:\Program Files\PDFCreator\unins000.exe

PIF DESIGNER2.1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7BD0A2D8-4EA0-43C6-BDF8-DDA87B8031C6}\SETUP.EXE" -l0x40c anything

RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0

Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\setup.exe" -l0x40c -removeonly

Search Settings 1.2-->MsiExec.exe /X{D0C73318-7B4A-4D16-A0C4-3B83F075EA88}

Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}

Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}

Skype™ 3.8-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}

Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"

SpywareBlaster 4.1-->"C:\Program Files\SpywareBlaster\unins000.exe"

Symantec AntiVirus-->MsiExec.exe /I{46B63F23-2B4A-4525-A827-688026BE5E40}

Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall

User Profile Hive Cleanup Service-->MsiExec.exe /I{FF77941A-2BFA-4A18-BE2E-69B9498E4D55}

VideoLAN VLC media player 0.8.6e-->C:\Program Files\VideoLAN\VLC\uninstall.exe

VirginMega.Fr Premium-->MsiExec.exe /I{EE467474-04A8-48D5-8DDF-0F8D3A3CCBE5}

VNC 4.0-->"C:\Program Files\RealVNC\VNC4\unins000.exe"

Windows Driver Package - Nokia (WUDFRd) WPD (03/19/2007 6.83.31.1)-->C:\PROGRA~1\DIFX\D6ACC4BE676423A2B130B78A4B627FC457D98997\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\pccswpddri_039E7E24575DBAE6A389611AF28F4EB97729D33E\pccswpddriver.inf

Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}

Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}

Windows Media Connect-->"C:\WINDOWS\$NtUninstallWMCSetup$\spuninst\spuninst.exe"

Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll

Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"

Windows Media Format SDK Hotfix - KB891122-->"C:\WINDOWS\$NtUninstallKB891122$\spuninst\spuninst.exe"

Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"

Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"

Winkaa 1.0 1.0-->"C:\Program Files\Emoticons-plus.com\Winkaa 1.0\uninstall.exe"

WinZip-->"C:\Program Files\WinZip\WINZIP32.EXE" /uninstall

======Hosts File======

127.0.0.1 localhost

192.168.0.100 BARCELON

192.168.2.50 LILLE400

192.168.3.50 RENNE400

192.168.4.50 ROUEN400

192.168.5.50 BORDE400

192.168.6.50 VALEN400

192.168.7.50 GRENO400

192.168.8.50 STRAS400

192.168.9.50 CLERM400

======Security center information======

AV: Avira AntiVir PersonalEdition Classic (disabled)

AV: Symantec AntiVirus Corporate Edition (outdated)

System event log

Computer Name: ENVIRONNEMENT

Event Code: 7035

Message: Un contrôle Démarrer a correctement été envoyé au service Service COM de gravage de CD IMAPI.

Record Number: 2607

Source Name: Service Control Manager

Time Written: 20081114205115.000000+060

Event Type: Informations

User: AUTORITE NT\SYSTEM

Computer Name: ENVIRONNEMENT

Event Code: 4226

Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées.

Record Number: 2606

Source Name: Tcpip

Time Written: 20081114183629.000000+060

Event Type: Avertissement

User:

Computer Name: ENVIRONNEMENT

Event Code: 4226

Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées.

Record Number: 2605

Source Name: Tcpip

Time Written: 20081114162908.000000+060

Event Type: Avertissement

User:

Computer Name: ENVIRONNEMENT

Event Code: 4226

Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées.

Record Number: 2604

Source Name: Tcpip

Time Written: 20081114153352.000000+060

Event Type: Avertissement

User:

Computer Name: ENVIRONNEMENT

Event Code: 4226

Message: TCP/IP a atteint la limite de sécurité imposée sur le nombre de tentatives de connexion TCP simultanées.

Record Number: 2603

Source Name: Tcpip

Time Written: 20081114144006.000000+060

Event Type: Avertissement

User:

Application event log

Computer Name: ENVIRONNEMENT

Event Code: 300

Message: MsnMsgr (3580) \\.\C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Messenger\getrogibbs@wanadoo.fr\SharingMetadata\Working\database_8EF8_381D_F838_5CD\dfsr.db: Le moteur de base de données initialise la procédure de récupération.

Record Number: 11499

Source Name: ESENT

Time Written: 20081213140802.000000+060

Event Type: Informations

User:

Computer Name: ENVIRONNEMENT

Event Code: 102

Message: MsnMsgr (3580) \\.\C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Messenger\getrogibbs@wanadoo.fr\SharingMetadata\Working\database_8EF8_381D_F838_5CD\dfsr.db: Le moteur de base de données a démarré une nouvelle instance (0).

Record Number: 11498

Source Name: ESENT

Time Written: 20081213140802.000000+060

Event Type: Informations

User:

Computer Name: ENVIRONNEMENT

Event Code: 100

Message: MsnMsgr (3580) Le moteur de base de données 5.01.2600.5512 est démarré.

Record Number: 11497

Source Name: ESENT

Time Written: 20081213140802.000000+060

Event Type: Informations

User:

Computer Name: ENVIRONNEMENT

Event Code: 12001

Message: The Messenger Sharing USN Journal Reader service started successfully.

Record Number: 11496

Source Name: usnjsvc

Time Written: 20081213140800.000000+060

Event Type:

User:

Computer Name: ENVIRONNEMENT

Event Code: 0

Message:

Record Number: 11495

Source Name: ServiceLayer

Time Written: 20081213140709.000000+060

Event Type: Informations

User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe

"Path"=C:\Program Files\PC Connectivity Solution\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\PROGRA~1\IBM\CLIENT~1;C:\PROGRA~1\IBM\CLIENT~1\Shared;C:\PROGRA~1\IBM\CLIENT~1\Emulator;;C:\PROGRA~1\DeskView\system;C:\PROGRA~1\DeskView\System

"windir"=%SystemRoot%

"FP_NO_HOST_CHECK"=NO

"OS"=Windows_NT

"PROCESSOR_ARCHITECTURE"=x86

"PROCESSOR_LEVEL"=6

"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 14 Stepping 8, GenuineIntel

"PROCESSOR_REVISION"=0e08

"NUMBER_OF_PROCESSORS"=2

"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH

"TEMP"=%SystemRoot%\TEMP

"TMP"=%SystemRoot%\TEMP

"DESKVIEW"=C:\Program Files\DeskView

-----------------EOF-----------------

Logfile of random's system information tool 1.05 (written by random/random)

Run by Administrateur at 2009-01-04 19:02:47

Microsoft Windows XP Professionnel Service Pack 3

System drive C: has 9 GB (25%) free of 36 GB

Total RAM: 1014 MB (49% free)

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 19:02:51, on 04/01/2009

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe

c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe

C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe

C:\WINDOWS\system32\LEXBCES.EXE

C:\WINDOWS\system32\LEXPPS.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

C:\Program Files\AGI\common\win32\PythonService.exe

C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

c:\Program Files\Symantec AntiVirus\DefWatch.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\WINDOWS\system32\lxdjcoms.exe

C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe

c:\Program Files\Symantec AntiVirus\SavRoam.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\Explorer.EXE

c:\Program Files\Symantec AntiVirus\Rtvscan.exe

C:\Program Files\UPHClean\uphclean.exe

C:\WINDOWS\system32\UStorSrv.exe

C:\WINDOWS\system32\RUNDLL32.EXE

C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe

C:\WINDOWS\vVX3000.exe

C:\AddOn\Fujitsu\PSUtility\TrayManager.exe

C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe

C:\Program Files\Lexmark 1400 Series\lxdjamon.exe

C:\PROGRA~1\SYMANT~1\VPTray.exe

C:\Program Files\Fujitsu\BtnHnd\BtnHnd.exe

C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe

C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe

C:\AddOn\Fujitsu\Application Panel\QuickTouch.exe

C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe

C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe

C:\WINDOWS\AGRSMMSG.exe

C:\WINDOWS\RTHDCPL.EXE

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\WINDOWS\system32\igfxpers.exe

C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe

C:\WINDOWS\system32\hkcmd.exe

C:\WINDOWS\system32\ctfmon.exe

C:\documents and settings\administrateur\local settings\application data\ucmmc.exe

C:\WINDOWS\system32\wbem\wmiapsrv.exe

C:\Program Files\Windows Live\Messenger\usnsvc.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Program Files\Kiwee Toolbar\2.8.167\kwtbaim.exe

C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\WINDOWS\system32\wscntfy.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\WINDOWS\system32\igfxsrvc.exe

C:\Documents and Settings\Administrateur\Bureau\RSIT.exe

C:\Program Files\Trend Micro\HijackThis\Administrateur.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.fr/

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

R3 - URLSearchHook: AGSearchHook Class - {0BC6E3FA-78EF-4886-842C-5A1258C4455A} - C:\Program Files\AGI\common\agcutils.dll

R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)

O1 - Hosts: 172.16.222.12 LOCAL_EASYCOM

O1 - Hosts: 172.16.50.1 SOPHIETH1 SOPHIA S44A5608 SOPHIA310

O1 - Hosts: 172.16.40.5 BLACK_BERRY

O1 - Hosts: 172.16.40.1 SOPHIASERVEUR1

O1 - Hosts: 172.16.40.2 SERVEUR-BACKUP

O1 - Hosts: 172.16.40.10 GSF.LAN WWW.GSF.LAN

O2 - BHO: AGSearchHook Class - {0BC6E3FA-78EF-4886-842C-5A1258C4455A} - C:\Program Files\AGI\common\agcutils.dll

O2 - BHO: (no name) - {1EEBF144-58E5-445A-AEEC-93057287226E} - C:\WINDOWS\system32\rqRLcCtT.dll (file missing)

O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar\2.8.167\KiweeIEToolbar.dll

O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb127\Dealio.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll

O2 - BHO: D - {78F8464D-A6F2-3F0D-A87F-A53A5F10D092} - C:\WINDOWS\system32\mws59179.dll

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: (no name) - {9E9CCC69-4FF5-405E-A22F-99BC702ED5A1} - C:\WINDOWS\system32\pmnkHXPg.dll (file missing)

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll

O2 - BHO: Browser Helper Objects - {CBE202A6-3B75-4189-B161-9B4DF370BEE9} - C:\DOCUME~1\ADMINI~1\APPLIC~1\shellex.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll

O3 - Toolbar: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar\2.8.167\KiweeIEToolbar.dll

O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll

O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb127\Dealio.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll

O4 - HKLM\..\Run: [searchSettings] C:\Program Files\Search Settings\SearchSettings.exe

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [Client Access Check Version] "C:\Program Files\IBM\Client Access\cwbckver.exe" LOGIN

O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe

O4 - HKLM\..\Run: [PSUtility] C:\AddOn\Fujitsu\PSUtility\TrayManager.exe

O4 - HKLM\..\Run: [Client Access Help Update] "C:\Program Files\IBM\Client Access\cwbinhlp.exe"

O4 - HKLM\..\Run: [Client Access Express Welcome] "C:\Program Files\IBM\Client Access\cwbwlwiz.exe"

O4 - HKLM\..\Run: [iAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe

O4 - HKLM\..\Run: [lxdjmon.exe] "C:\Program Files\Lexmark 1400 Series\lxdjmon.exe"

O4 - HKLM\..\Run: [lxdjamon] "C:\Program Files\Lexmark 1400 Series\lxdjamon.exe"

O4 - HKLM\..\Run: [vptray] c:\PROGRA~1\SYMANT~1\VPTray.exe

O4 - HKLM\..\Run: [LoadBtnHnd] C:\Program Files\Fujitsu\BtnHnd\BtnHnd.exe

O4 - HKLM\..\Run: [au] C:\Program Files\Dealio\DealioAU.exe

O4 - HKLM\..\Run: [LoadFUJ02E3] C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe

O4 - HKLM\..\Run: [indicatorUtility] C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe

O4 - HKLM\..\Run: [LXDJCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXDJtime.dll,_RunDLLEntry@16

O4 - HKLM\..\Run: [LoadFujitsuQuickTouch] C:\AddOn\Fujitsu\Application Panel\QuickTouch.exe

O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"

O4 - HKLM\..\Run: [Client Access Service] "C:\Program Files\IBM\Client Access\cwbsvstr.exe"

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"

O4 - HKLM\..\Run: [Client Access PC5250 Sound] "C:\Program Files\IBM\Client Access\Emulator\pcssnd.exe"

O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe

O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [ucmmc] "c:\documents and settings\administrateur\local settings\application data\ucmmc.exe" ucmmc

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')

O8 - Extra context menu item: Compare Prices with &Dealio - C:\Documents and Settings\Administrateur\Application Data\Dealio\kb127\res\DealioSearch.html

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\MICROS~1\Office10\EXCEL.EXE/3000

O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll

O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O15 - Trusted Zone: http://www.mygsf.net

O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/dow...llerControl.cab

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1207328735203

O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://fichiers.touslesdrivers.com/fichier...ion_3_0_3_5.cab

O16 - DPF: {DFB5BCF1-06AE-4ABB-BFA8-1E228F41C50A} (CamfrogWEB Advanced Unicode Control) - http://bobtv.fr/download/cfweb_www.bobtv.f..._instmodule.exe

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL

O20 - AppInit_DLLs: ,C:\WINDOWS\System32\cwbuncob32.dll,C:\WINDOWS\System32\cwbuncob32.dll

O20 - Winlogon Notify: f83805cd509 - C:\WINDOWS\System32\cwbuncob32.dll

O20 - Winlogon Notify: rqRLcCtT - rqRLcCtT.dll (file missing)

O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe

O23 - Service: AG Windows Service (AGWinService) - Unknown owner - C:\Program Files\AGI\common\win32\PythonService.exe

O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe

O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe

O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe

O23 - Service: Fonction Commande à distance d'iSeries Access for Windows (Cwbrxd) - IBM Corporation - C:\WINDOWS\CWBRXD.EXE

O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - c:\Program Files\Symantec AntiVirus\DefWatch.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE

O23 - Service: lxdj_device - - C:\WINDOWS\system32\lxdjcoms.exe

O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe

O23 - Service: SAVRoam (SavRoam) - symantec - c:\Program Files\Symantec AntiVirus\SavRoam.exe

O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe

O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe

O23 - Service: Symantec AntiVirus - Symantec Corporation - c:\Program Files\Symantec AntiVirus\Rtvscan.exe

O23 - Service: UStorage Server Service - OTi - C:\WINDOWS\system32\UStorSrv.exe

O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - C:\Program Files\RealVNC\VNC4\WinVNC4.exe

O23 - Service: Marvell Yukon Service (yksvc) - Unknown owner - RUNDLL32.EXE (file missing)

--

End of file - 14046 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Microsoft_Hardware_Launch_setup_exe.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0BC6E3FA-78EF-4886-842C-5A1258C4455A}]

AGSearchHook Class - C:\Program Files\AGI\common\agcutils.dll [2009-01-04 43520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1EEBF144-58E5-445A-AEEC-93057287226E}]

C:\WINDOWS\system32\rqRLcCtT.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]

RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2008-09-29 308832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]

Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2008-09-15 1562960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6638A9DE-0745-4292-8A2E-AE530E7B9B3F}]

Kiwee Toolbar - C:\Program Files\Kiwee Toolbar\2.8.167\KiweeIEToolbar.dll [2008-10-24 277648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6A87B991-A31F-4130-AE72-6D0C294BF082}]

DealioBHO Class - C:\Program Files\Dealio\kb127\Dealio.dll [2008-05-26 3170144]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]

C:\Program Files\Java\jre6\bin\ssv.dll [2008-11-10 320920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{78F8464D-A6F2-3F0D-A87F-A53A5F10D092}]

D - C:\WINDOWS\system32\mws59179.dll [2008-11-06 176128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Windows Live Sign-in Helper - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2007-09-20 328752]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9E9CCC69-4FF5-405E-A22F-99BC702ED5A1}]

C:\WINDOWS\system32\pmnkHXPg.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]

Google Toolbar Helper - c:\program files\google\googletoolbar2.dll [2007-01-19 2403392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]

Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll [2008-10-08 737776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CBE202A6-3B75-4189-B161-9B4DF370BEE9}]

Browser Helper Objects - C:\DOCUME~1\ADMINI~1\APPLIC~1\shellex.dll [2008-11-03 185856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

C:\Program Files\Java\jre6\bin\jp2ssv.dll [2008-11-10 34816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}]

EpsonToolBandKicker Class - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-21 368640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - Kiwee Toolbar - C:\Program Files\Kiwee Toolbar\2.8.167\KiweeIEToolbar.dll [2008-10-24 277648]

{EE5D279F-081B-4404-994D-C6B60AAEBA6D} - EPSON Web-To-Page - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-21 368640]

{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - Dealio - C:\Program Files\Dealio\kb127\Dealio.dll [2008-05-26 3170144]

{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar2.dll [2007-01-19 2403392]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"SearchSettings"=C:\Program Files\Search Settings\SearchSettings.exe [2008-06-12 991584]

"TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2008-09-29 185872]

"Client Access Check Version"=C:\Program Files\IBM\Client Access\cwbckver.exe [2004-05-01 45106]

"VX3000"=C:\WINDOWS\vVX3000.exe [2007-04-10 709992]

"PSUtility"=C:\AddOn\Fujitsu\PSUtility\TrayManager.exe [2005-10-11 151552]

"Client Access Help Update"=C:\Program Files\IBM\Client Access\cwbinhlp.exe [2004-05-01 24576]

"Client Access Express Welcome"=C:\Program Files\IBM\Client Access\cwbwlwiz.exe [2004-05-01 20480]

"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2005-10-12 139264]

"lxdjmon.exe"=C:\Program Files\Lexmark 1400 Series\lxdjmon.exe []

"lxdjamon"=C:\Program Files\Lexmark 1400 Series\lxdjamon.exe [2007-03-06 20480]

"vptray"=c:\PROGRA~1\SYMANT~1\VPTray.exe [2005-12-27 85648]

"LoadBtnHnd"=C:\Program Files\Fujitsu\BtnHnd\BtnHnd.exe [2005-07-21 61440]

"au"=C:\Program Files\Dealio\DealioAU.exe [2008-05-26 595296]

"LoadFUJ02E3"=C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe [2005-06-08 69632]

"IndicatorUtility"=C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe [2005-08-09 81920]

"LXDJCATS"=rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXDJtime.dll []

"LoadFujitsuQuickTouch"=C:\AddOn\Fujitsu\Application Panel\QuickTouch.exe [2005-07-21 353792]

"Lexmark X1100 Series"=C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe [2003-08-19 57344]

"Client Access Service"=C:\Program Files\IBM\Client Access\cwbsvstr.exe [2004-05-01 20530]

"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]

"ccApp"=c:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe [2005-11-16 48800]

"Client Access PC5250 Sound"=C:\Program Files\IBM\Client Access\Emulator\pcssnd.exe [2004-05-01 40960]

"AGRSMMSG"=C:\WINDOWS\AGRSMMSG.exe [2006-01-17 88365]

"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2005-12-09 15691264]

"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2006-01-05 761946]

"igfxpers"=C:\WINDOWS\system32\igfxpers.exe [2005-11-03 118784]

"igfxhkcmd"=C:\WINDOWS\system32\hkcmd.exe [2005-11-03 77824]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

"MsnMsgr"=C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2007-10-18 5724184]

"ucmmc"=c:\documents and settings\administrateur\local settings\application data\ucmmc.exe [2008-12-18 229888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]

C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avgnt]

C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe [2008-06-12 266497]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools-1033]

C:\Program Files\D-Tools\daemon.exe [2004-08-22 81920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search]

C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2008-04-09 120320]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiweeHook]

C:\Program Files\Kiwee Toolbar\2.8.167\kwtbaim.exe [2008-10-24 56456]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\messengerskinner]

C:\Program Files\MessengerSkinner\MessengerSkinner.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]

C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NSLauncher]

C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe [2007-09-07 3100672]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]

C:\Program Files\Skype\Phone\Skype.exe [2008-04-23 22058792]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spy Protector]

C:\Documents and Settings\Administrateur\Application Data\srcss.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]

C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2008-09-16 1833296]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]

C:\Program Files\Java\jre6\bin\jusched.exe [2008-11-10 136600]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]

C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-05-05 68856]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]

C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2008-09-29 185872]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]

C:\Program Files\Windows Media Player\WMPNSCFG.exe [2006-11-03 204288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Bluetooth Manager.lnk]

C:\PROGRA~1\Toshiba\BLUETO~1\TosBtMng.exe [2006-01-17 1748992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk]

C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\READER~1.EXE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^WinZip Quick Pick.lnk]

C:\PROGRA~1\WinZip\WZQKPICK.EXE [2006-04-07 122880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"AppInit_DLLS"=",C:\WINDOWS\System32\cwbuncob32.dll,C:\WINDOWS\System32\cwbuncob32.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]

Ati2evxx.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\f83805cd509]

C:\WINDOWS\System32\cwbuncob32.dll [2009-01-02 135168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]

C:\WINDOWS\system32\igfxdev.dll [2005-11-03 135168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\NavLogon]

c:\WINDOWS\system32\NavLogon.dll [2005-12-27 43664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\rqRLcCtT]

rqRLcCtT.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]

C:\WINDOWS\system32\WgaLogon.dll [2007-04-10 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]

"{1EEBF144-58E5-445A-AEEC-93057287226E}"=C:\WINDOWS\system32\rqRLcCtT.dll []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]

"authentication packages"=msv1_0

C:\WINDOWS\system32\pmnkHXPg

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\aawservice]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

"C:\WINDOWS\system32\lxdjcoms.exe"="C:\WINDOWS\system32\lxdjcoms.exe:*:Enabled:Lexmark Communications System"

"C:\Program Files\Lexmark 1400 Series\lxdjamon.exe"="C:\Program Files\Lexmark 1400 Series\lxdjamon.exe:*:Enabled:Lexmark Device Monitor"

"C:\Program Files\Lexmark 1400 Series\App4R.exe"="C:\Program Files\Lexmark 1400 Series\App4R.exe:*:Enabled:Lexmark Imaging Studio"

"C:\WINDOWS\system32\LEXPPS.EXE"="C:\WINDOWS\system32\LEXPPS.EXE:*:Disabled:LEXPPS.EXE"

"C:\Documents and Settings\ISO\Program Files\uTorrent\uTorrent.exe"="C:\Documents and Settings\ISO\Program Files\uTorrent\uTorrent.exe:*:Enabled:uTorrent.exe"

"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

"C:\Program Files\Total War\Medieval - Total War\Medieval_TW.exe"="C:\Program Files\Total War\Medieval - Total War\Medieval_TW.exe:*:Enabled:Medieval_TW"

"C:\WINDOWS\system32\[Emoticons-plus.com] Winkaa 2.0.exe"="C:\WINDOWS\system32\[Emoticons-plus.com] Winkaa 2.0.exe:*:Enabled:[Emoticons-plus.com] Winkaa 2.0"

"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"

"C:\Program Files\ma-config.com\maconfservice.exe"="C:\Program Files\ma-config.com\maconfservice.exe:LocalSubNet:Enabled:maconfservice"

"C:\WINDOWS\Network Diagnostic\xpnetdiag.exe"="C:\WINDOWS\Network Diagnostic\xpnetdiag.exe:*:Disabled:@xpsp3res.dll,-20000"

"C:\Documents and Settings\ISO\Bureau\mes docs\spygestion\final\SpyGestion.exe"="C:\Documents and Settings\ISO\Bureau\mes docs\spygestion\final\SpyGestion.exe:*:Enabled:SpyGestion"

"C:\Program Files\Azureus\Azureus.exe"="C:\Program Files\Azureus\Azureus.exe:*:Enabled:Azureus"

"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"

"C:\WINDOWS\explorer.exe"="C:\WINDOWS\explorer.exe:*:Enabled:Explorateur Windows"

"C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdjwbgw.exe"="C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdjwbgw.exe:*:Enabled: "

"C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdjpswx.exe"="C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdjpswx.exe:*:Enabled: "

"C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdjjswx.exe"="C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdjjswx.exe:*:Enabled: "

"C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdjtime.exe"="C:\WINDOWS\system32\spool\drivers\w32x86\3\lxdjtime.exe:*:Enabled: "

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

"C:\Program Files\Lexmark 1400 Series\app4r.exe"="C:\Program Files\Lexmark 1400 Series\app4r.exe:*:Enabled:BorgListener"

"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\I]

shell\AutoRun\command - I:\setupSNK.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5f7abd7e-f813-11dc-8a49-00037ae696a6}]

shell\AutoRun\command - H:\

shell\open\command - rundll32.exe .\\sciwave.dll,InstallM

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{83592e24-bf92-11dc-8a29-00037ae696a6}]

shell\AutoRun\command - Autorun.exe /s

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e6c0f1ed-009f-11dd-8a59-00037ae696a6}]

shell\AutoRun\command - I:\setupSNK.exe

======List of files/folders created in the last 1 months======

2009-01-04 19:02:47 ----D---- C:\rsit

2008-12-29 17:04:26 ----HDC---- C:\WINDOWS\$NtUninstallKB955839$

2008-12-29 17:04:07 ----HDC---- C:\WINDOWS\$NtUninstallKB958215$

2008-12-29 17:01:48 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$

2008-12-29 17:01:43 ----HDC---- C:\WINDOWS\$NtUninstallKB960714$

2008-12-29 17:01:37 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$

2008-12-29 17:01:09 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$

2008-12-29 17:01:03 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$

2008-12-29 17:00:56 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$

2008-12-29 17:00:44 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$

2008-12-29 09:17:03 ----ASH---- C:\WINDOWS\system32\2EB6.tmp

2008-12-28 21:41:25 ----D---- C:\Program Files\Trend Micro

2008-12-28 20:17:11 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP

2008-12-28 20:17:00 ----D---- C:\Program Files\SpywareBlaster

2008-12-28 13:01:41 ----A---- C:\WINDOWS\IE4 Error Log.txt

2008-12-28 11:41:27 ----D---- C:\Program Files\Avira

2008-12-28 11:41:27 ----D---- C:\Documents and Settings\All Users\Application Data\Avira

2008-12-28 11:35:54 ----SH---- C:\WINDOWS\system32\xorpbhdh.ini

2008-12-28 11:33:08 ----A---- C:\WINDOWS\system32\srtiwpuv.dll

2008-12-27 11:33:09 ----SH---- C:\WINDOWS\system32\bmehrfha.ini

2008-12-24 06:10:02 ----SH---- C:\WINDOWS\system32\comrmmio.ini

2008-12-23 20:37:58 ----SH---- C:\WINDOWS\system32\ghofhnwk.ini

2008-12-22 20:36:33 ----SH---- C:\WINDOWS\system32\iaumfphf.ini

2008-12-22 15:30:13 ----A---- C:\WINDOWS\cdplayer.ini

2008-12-22 14:33:47 ----SH---- C:\WINDOWS\system32\iycmxbjp.ini

2008-12-21 12:43:58 ----SH---- C:\WINDOWS\system32\lcpjckek.ini

2008-12-21 12:41:06 ----SH---- C:\WINDOWS\system32\auflynmf.ini

2008-12-20 15:25:20 ----SH---- C:\WINDOWS\system32\otxldgwm.ini

2008-12-20 15:13:36 ----ASH---- C:\WINDOWS\system32\gPXHknmp.ini2

2008-12-20 10:14:42 ----SHD---- C:\WINDOWS\system32\GroupPolicyManifest

2008-12-17 22:51:56 ----ASH---- C:\WINDOWS\system32\gPXHknmp.ini

2008-12-17 10:45:04 ----A---- C:\WINDOWS\system32\mcrh.tmp

2008-12-16 18:34:02 ----A---- C:\WINDOWS\GnuHashes.ini

2008-12-16 18:26:32 ----ASH---- C:\WINDOWS\system32\38A.tmp

2008-12-16 18:26:26 ----A---- C:\WINDOWS\system32\cwbuncob32.dll

2008-12-13 21:31:20 ----D---- C:\Program Files\Lionhead Studios

2008-12-12 18:42:11 ----D---- C:\Program Files\Slitherine

2008-12-08 22:16:45 ----D---- C:\WINDOWS\Minidump

2008-12-07 18:07:28 ----D---- C:\Documents and Settings\All Users\Application Data\Firefly Studios

2008-12-07 18:02:46 ----D---- C:\Program Files\GameShadow

2008-12-07 18:01:20 ----A---- C:\WINDOWS\system32\xinput1_1.dll

2008-12-07 18:01:20 ----A---- C:\WINDOWS\system32\xactengine2_1.dll

2008-12-07 18:01:05 ----A---- C:\WINDOWS\system32\d3dx9_30.dll

2008-12-07 18:01:04 ----A---- C:\WINDOWS\system32\xactengine2_0.dll

2008-12-07 18:01:04 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll

2008-12-07 18:01:03 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll

2008-12-07 18:01:03 ----A---- C:\WINDOWS\system32\d3dx9_28.dll

2008-12-07 18:01:02 ----A---- C:\WINDOWS\system32\d3dx9_27.dll

2008-12-07 18:01:00 ----A---- C:\WINDOWS\system32\d3dx9_26.dll

2008-12-07 18:00:59 ----A---- C:\WINDOWS\system32\d3dx9_25.dll

2008-12-07 18:00:57 ----A---- C:\WINDOWS\system32\d3dx9_24.dll

2008-12-07 17:53:17 ----A---- C:\WINDOWS\system32\wcxdtkje.dll

2008-12-07 17:53:17 ----A---- C:\WINDOWS\system32\nlmyos.dll

======List of files/folders modified in the last 1 months======

2009-01-04 19:02:48 ----D---- C:\WINDOWS\Prefetch

2009-01-04 14:27:13 ----D---- C:\Program Files\Mozilla Firefox

2009-01-04 14:27:11 ----D---- C:\WINDOWS\Temp

2009-01-04 09:43:39 ----D---- C:\WINDOWS\system32\Lang

2009-01-04 09:40:12 ----D---- C:\Program Files\Symantec AntiVirus

2009-01-04 09:38:56 ----D---- C:\WINDOWS\system32\CatRoot2

2009-01-04 09:38:54 ----D---- C:\WINDOWS\system32\drivers

2009-01-02 21:39:54 ----A---- C:\WINDOWS\SchedLgU.Txt

2009-01-02 19:41:48 ----D---- C:\Program Files\lx_cats

2009-01-02 12:40:55 ----RASH---- C:\boot.ini

2009-01-02 12:40:55 ----A---- C:\WINDOWS\win.ini

2009-01-02 12:40:55 ----A---- C:\WINDOWS\system.ini

2009-01-02 12:35:39 ----D---- C:\WINDOWS\system32

2008-12-29 18:43:16 ----D---- C:\WINDOWS

2008-12-29 17:11:32 ----RSHDC---- C:\WINDOWS\system32\dllcache

2008-12-29 17:04:29 ----HD---- C:\WINDOWS\inf

2008-12-29 17:04:18 ----D---- C:\WINDOWS\system32\CatRoot

2008-12-29 17:04:14 ----A---- C:\WINDOWS\imsins.BAK

2008-12-29 17:04:05 ----HD---- C:\WINDOWS\$hf_mig$

2008-12-29 17:03:57 ----SHD---- C:\WINDOWS\Installer

2008-12-29 17:00:34 ----D---- C:\WINDOWS\WinSxS

2008-12-29 09:43:09 ----D---- C:\WINDOWS\Help

2008-12-28 21:51:03 ----D---- C:\Program Files\Google

2008-12-28 21:41:25 ----RD---- C:\Program Files

2008-12-28 12:43:17 ----D---- C:\Program Files\Internet Explorer

2008-12-28 12:40:56 ----D---- C:\WINDOWS\ie7updates

2008-12-28 12:40:07 ----D---- C:\WINDOWS\WBEM

2008-12-28 12:19:27 ----D---- C:\save lm

2008-12-27 11:31:13 ----A---- C:\WINDOWS\system32\f31bc11c-.txt

2008-12-23 19:51:59 ----A---- C:\WINDOWS\NeroDigital.ini

2008-12-20 16:22:26 ----HD---- C:\Program Files\InstallShield Installation Information

2008-12-20 16:22:26 ----D---- C:\Program Files\epson

2008-12-20 16:21:58 ----D---- C:\Program Files\Railroad Tycoon II

2008-12-20 16:18:37 ----D---- C:\Program Files\DeskView

2008-12-20 16:16:21 ----D---- C:\Program Files\Fichiers communs\FSC

2008-12-20 15:24:38 ----D---- C:\Program Files\Azureus

2008-12-20 15:24:16 ----D---- C:\Program Files\AVS4YOU

2008-12-20 15:24:04 ----D---- C:\Program Files\Fichiers communs\AVSMedia

2008-12-20 13:30:02 ----D---- C:\WINDOWS\pss

2008-12-16 23:30:56 ----D---- C:\Documents and Settings\Administrateur\Application Data\LimeWire

2008-12-16 23:30:55 ----D---- C:\Incomplete

2008-12-16 20:27:00 ----D---- C:\Documents and Settings\Administrateur\Application Data\Azureus

2008-12-16 17:41:09 ----D---- C:\Program Files\eMule

2008-12-13 21:31:18 ----RSD---- C:\WINDOWS\assembly

2008-12-13 21:31:18 ----D---- C:\WINDOWS\system32\DirectX

2008-12-12 18:02:12 ----A---- C:\WINDOWS\system32\mshtml.dll

2008-12-11 11:34:51 ----D---- C:\Program Files\Lexmark X1100 Series

2008-12-09 15:24:38 ----A---- C:\WINDOWS\system32\MRT.exe

2008-12-07 18:02:50 ----SD---- C:\Documents and Settings\Administrateur\Application Data\Microsoft

2008-12-07 18:02:27 ----D---- C:\WINDOWS\Downloaded Installations

2008-12-07 18:01:09 ----D---- C:\WINDOWS\Microsoft.NET

2008-12-05 11:58:21 ----D---- C:\WINDOWS\system32\Macromed

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys []

R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2008-10-30 75072]

R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\eeCtrl.sys []

R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]

R1 SAVRT;SAVRT; \??\c:\Program Files\Symantec AntiVirus\savrt.sys []

R1 SAVRTPEL;SAVRTPEL; \??\c:\Program Files\Symantec AntiVirus\Savrtpel.sys []

R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2007-11-08 21248]

R1 SYMTDI;SYMTDI; C:\WINDOWS\System32\Drivers\SYMTDI.SYS [2005-10-19 195728]

R1 Tosrfcom;Bluetooth RFCOMM from TOSHIBA; C:\WINDOWS\System32\Drivers\tosrfcom.sys [2005-08-01 64896]

R2 Aspi32;Aspi32; C:\WINDOWS\system32\drivers\Aspi32.sys [1999-09-10 25244]

R2 BtnHnd;BtnHnd; \??\C:\Program Files\Fujitsu\BtnHnd\BtnHnd.sys []

R2 irda;Protocole IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]

R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys [2006-01-20 1158816]

R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]

R3 avgntflt;avgntflt; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys []

R3 CmBatt;Pilote pour Batterie à méthode de contrôle ACPI Microsoft; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]

R3 FUJ02B1;Fujitsu FUJ02B1 Device Driver; C:\WINDOWS\system32\DRIVERS\FUJ02B1.sys [2001-08-01 5248]

R3 FUJ02E1;%FUJ02E1.DeviceDesc%; C:\WINDOWS\System32\Drivers\FUJ02E1.sys [2004-10-18 5632]

R3 FUJ02E3;Fujitsu FUJ02E3 Device Driver; C:\WINDOWS\system32\DRIVERS\FUJ02E3.sys [2004-01-17 4864]

R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]

R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]

R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2005-11-03 1353820]

R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2005-12-09 4123136]

R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]

R3 NAVENG;NAVENG; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\VIRUSD~1\20060531.019\naveng.sys []

R3 NAVEX15;NAVEX15; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\VIRUSD~1\20060531.019\navex15.sys []

R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]

R3 Rasirda;Miniport réseau étendu (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]

R3 SMCIRDA;Pilote de périphérique SMC IrCC Miniport; C:\WINDOWS\system32\DRIVERS\smcirda.sys [2001-08-23 36937]

R3 SymEvent;SymEvent; \??\C:\Program Files\Symantec\SYMEVENT.SYS []

R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2006-01-05 191936]

R3 tosporte;Bluetooth Port Driver from Toshiba; C:\WINDOWS\system32\DRIVERS\tosporte.sys [2005-11-24 47104]

R3 Tosrfbd;Bluetooth RFBUS from TOSHIBA; C:\WINDOWS\System32\Drivers\tosrfbd.sys [2006-01-20 108928]

R3 Tosrfbnp;Bluetooth RFBNEP from TOSHIBA; C:\WINDOWS\System32\Drivers\tosrfbnp.sys [2005-12-14 37632]

R3 Tosrfhid;Bluetooth RFHID from TOSHIBA; C:\WINDOWS\system32\DRIVERS\Tosrfhid.sys [2006-01-11 62848]

R3 tosrfnds;Bluetooth Personal Area Network from TOSHIBA; C:\WINDOWS\system32\DRIVERS\tosrfnds.sys [2005-01-06 18612]

R3 Tosrfusb;Bluetooth USB Controller; C:\WINDOWS\System32\Drivers\tosrfusb.sys [2006-01-18 39808]

R3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]

R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]

R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]

R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]

R3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]

R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]

R3 VX3000;VX-3000; C:\WINDOWS\system32\DRIVERS\VX3000.sys [2007-04-10 1966696]

R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS\system32\DRIVERS\yk51x86.sys [2008-09-19 290432]

S1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]

S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]

S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys []

S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]

S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]

S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]

S3 RT73;D-Link USB Wireless LAN Card Driver; C:\WINDOWS\system32\DRIVERS\Dr71WU.sys [2008-08-09 429440]

S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]

S3 SNIF0010;FSC Flash Update Driver B; \??\C:\DOCUME~1\GSF\LOCALS~1\Temp\SniF0010.sys []

S3 SNIF0011;FSC Flash Update Driver A; \??\C:\DOCUME~1\GSF\LOCALS~1\Temp\SniF0011.sys []

S3 SPBBCDrv;SPBBCDrv; \??\C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCDrv.sys []

S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]

S3 SYMREDRV;SYMREDRV; C:\WINDOWS\System32\Drivers\SYMREDRV.SYS [2005-10-19 24720]

S3 toshidpt;TOSHIBA Bluetooth HID port driver; C:\WINDOWS\system32\drivers\Toshidpt.sys [2005-07-11 3712]

S3 TosRfSnd;Bluetooth Audio Device (WDM) from TOSHIBA; C:\WINDOWS\system32\drivers\TosRfSnd.sys [2005-11-11 52864]

S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys []

S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]

S3 usbstor;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]

S3 w39n51;Intel® PRO/Wireless 3945ABG Adapter Driver; C:\WINDOWS\system32\DRIVERS\w39n51.sys [2005-12-04 1428096]

S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]

S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528]

S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]

S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]

S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aawservice;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe [2008-06-14 611664]

R2 AGWinService;AG Windows Service; C:\Program Files\AGI\common\win32\PythonService.exe [2008-10-24 10240]

R2 AntiVirScheduler;Planificateur Avira AntiVir Personal - Free Antivirus; C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe [2008-10-15 68865]

R2 AntiVirService;Avira AntiVir Personal - Free Antivirus Guard; C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe [2008-10-15 151297]

R2 ccEvtMgr;Symantec Event Manager; c:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe [2005-11-16 186016]

R2 ccSetMgr;Symantec Settings Manager; c:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe [2005-11-16 177824]

R2 DefWatch;Symantec AntiVirus Definition Watcher; c:\Program Files\Symantec AntiVirus\DefWatch.exe [2005-12-27 20112]

R2 IAANTMon;Intel® Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe [2005-10-12 86140]

R2 Irmon;Moniteur infrarouge; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2008-11-10 152984]

R2 LexBceS;LexBce Server; C:\WINDOWS\system32\LEXBCES.EXE [2003-08-18 303104]

R2 lxdj_device;lxdj_device; C:\WINDOWS\system32\lxdjcoms.exe [2007-03-12 537520]

R2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe [2003-06-19 322120]

R2 SavRoam;SAVRoam; c:\Program Files\Symantec AntiVirus\SavRoam.exe [2005-12-27 172176]

R2 Symantec AntiVirus;Symantec AntiVirus; c:\Program Files\Symantec AntiVirus\Rtvscan.exe [2005-12-27 1778320]

R2 UPHClean;User Profile Hive Cleanup; C:\Program Files\UPHClean\uphclean.exe [2005-04-27 241725]

R2 UStorage Server Service;UStorage Server Service; C:\WINDOWS\system32\UStorSrv.exe [2006-02-08 139264]

R2 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]

R2 yksvc;Marvell Yukon Service; ykx32mpcoinst []

R3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]

S2 WinVNC4;VNC Server Version 4; C:\Program Files\RealVNC\VNC4\WinVNC4.exe [2004-06-15 380928]

S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]

S3 ccPwdSvc;Symantec Password Validation; c:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe [2005-11-16 83616]

S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]

S3 Cwbrxd;Fonction Commande à distance d'iSeries Access for Windows; C:\WINDOWS\CWBRXD.EXE [2003-10-07 57344]

S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-04-09 138168]

S3 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfservice.exe [2008-11-02 195752]

S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2007-02-08 212480]

S3 SNDSrvc;Symantec Network Drivers Service; c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe [2005-10-19 214672]

S3 SPBBCSvc;Symantec SPBBCSvc; c:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe [2005-03-30 992864]

S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]

S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

-----------------EOF-----------------

angelique · le 4 janvier 2009

bah !! c'est vraiement pourri , t'as du symantec norton antivirus qui roule et antivir que tu as desactivé le lancement automatique!! faut faire un choix!!!!!

si tu desinstalles Symantec avec:

http://service1.symantec.com/SUPPORT/INTER...050414110429924

assure toi que le firewall d'xp est activé, dans panneau de configuration\onglet parefeu

1• Télécharge ToolBar-S&D de Eric_71, Angeldark, Sham_Rock et XmichouX

http://eric.71.mespages.googlepages.com/ToolBarSD.exe

tu passes l'option 1 puis 2

tuto::

http://toolbarsd.googlepages.com/aideenimages

tu postes les rapports!

2• relance HijackThis " do a system scan only" , coche uniquement et clic Fixcheked les lignes ci dessous::

O2 - BHO: (no name) - {1EEBF144-58E5-445A-AEEC-93057287226E} - C:\WINDOWS\system32\rqRLcCtT.dll (file missing)

O2 - BHO: D - {78F8464D-A6F2-3F0D-A87F-A53A5F10D092} - C:\WINDOWS\system32\mws59179.dll

O2 - BHO: (no name) - {9E9CCC69-4FF5-405E-A22F-99BC702ED5A1} - C:\WINDOWS\system32\pmnkHXPg.dll (file missing)

O2 - BHO: Browser Helper Objects - {CBE202A6-3B75-4189-B161-9B4DF370BEE9} - C:\DOCUME~1\ADMINI~1\APPLIC~1\shellex.dll

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

O4 - HKCU\..\Run: [ucmmc] "c:\documents and settings\administrateur\local settings\application data\ucmmc.exe" ucmmc

O20 - AppInit_DLLs: ,C:\WINDOWS\System32\cwbuncob32.dll,C:\WINDOWS\System32\cwbuncob32.dll

O20 - Winlogon Notify: f83805cd509 - C:\WINDOWS\System32\cwbuncob32.dll

O20 - Winlogon Notify: rqRLcCtT - rqRLcCtT.dll (file missing)

==> clic Fixchecked

3• Télécharge combofix.exe (par sUBs) et sauvegarde le sur ton bureau , pas ailleurs!!!

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

http://www.forospyware.com/sUBs/ComboFix.exe

http://subs.geekstogo.com/ComboFix.exe

*ne le lance pas maintenant!

» ComboFix doit absolument etre sur ton bureau

ouvre ton bloc note[executer--notepad] et copies/colles le contenu du cadre ci dessous:

File::
C:\WINDOWS\System32\cwbuncob32.dll
C:\WINDOWS\system32\mws59179.dll
C:\WINDOWS\system32\xorpbhdh.ini
C:\WINDOWS\system32\srtiwpuv.dll
C:\WINDOWS\system32\bmehrfha.ini
C:\WINDOWS\system32\comrmmio.ini
C:\WINDOWS\system32\ghofhnwk.ini
C:\WINDOWS\system32\iaumfphf.ini
C:\WINDOWS\cdplayer.ini
C:\WINDOWS\system32\iycmxbjp.ini
C:\WINDOWS\system32\lcpjckek.ini
C:\WINDOWS\system32\auflynmf.ini
C:\WINDOWS\system32\otxldgwm.ini
C:\WINDOWS\system32\gPXHknmp.ini2
C:\WINDOWS\system32\gPXHknmp.ini
C:\WINDOWS\system32\38A.tmp
C:\WINDOWS\system32\cwbuncob32.dll
C:\WINDOWS\system32\wcxdtkje.dll
C:\WINDOWS\system32\nlmyos.dll
Folder::
C:\WINDOWS\system32\pmnkHXPg
registry::
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1EEBF144-58E5-445A-AEEC-93057287226E}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{78F8464D-A6F2-3F0D-A87F-A53A5F10D092}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\f83805cd509]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\messengerskinner]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spy Protector]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"=-
"AppInit_DLLS"=""

[*]Va en haut de la page et clique sur le menu"Fichier" , une liste apparait=>

[*]Choisis "Enregistrer sous" et choisis "Bureau"

[*]Dans le champs "Nom du fichier" en bas de page donne le nom suivant:CFScript

[*]Clique sur le bouton "Enregistrer" à droite du champs "nom du fichier"

[*]Quitte le Bloc Notes.

[*]Fait un glisser/déposer de ce fichier CFScript sur le fichier ComboFix.exe comme sur la capture

* suis les instructions

* Patiente le temps du scan.Le bureau va disparaitre à plusieurs reprises: c'est normal!

Ne touche à rien tant que le scan n'est pas terminé.

* Une fois le scan achevé, un rapport va s'afficher: poste son contenu.

* Si le fichier n'apparait pas, il se trouve ici > C:\ComboFix.txt

getrogibbs · le 4 janvier 2009

merci en fait c'est l'ordi du boulot, symantec était mis par la société et est arrivé a expiration, mais c'est le bordel pour le remettre a jour avec mes boss, donc j'ai mis antivir, j'ai désactivé le lancement automatique car je pensais désactiver le guard, mais ça marche pas )), par contre norton, je comprends pas...

Ce que tu m'as dis c'est pour enlever symantec et activer antivir?

ça me semble compliqué pour mon petit niveau, mais je vais essayer.

getrogibbs · le 4 janvier 2009

Bon j'ai lancé "Norton_Removal_Tool.exe", il me demande de désinstaller symantec avec ajout/suppression de programme du panneau de config, mais lorsque je veux désinstaller, il me demande un code de désinstallation, que je n'ai pas. Alors, que faire???

Modifié le 4 janvier 2009 par getrogibbs

angelique · le 5 janvier 2009

tu continues le point 1 et 2 , tu postes les rapports ! garde antivir pour le moment avec le guard inactif, on s'en servira plus tard , faudra que tu vois avec tes chefs pour symantec !!! pour un pc d'entreprise , de telles infections c'est gravos /!\

getrogibbs · le 5 janvier 2009

laisse tomber pour symantec, je voudrais le désactiver au moins si on ne peut pas le supprimer. et prendre un autre antivirus comme antivir.

1 rapport toolbarSD

-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3

X86-based PC ( Multiprocessor Free : Genuine Intel® CPU T2400 @ 1.83GHz )

BIOS : Default System BIOS

USER : Administrateur ( Administrator )

BOOT : Normal boot

Antivirus : Symantec AntiVirus Corporate Edition 10.0.2.2000 (Activated)

C:\ (Local Disk) - NTFS - Total:35 Go (Free:8 Go)

D:\ (Local Disk) - NTFS - Total:39 Go (Free:9 Go)

E:\ (CD or DVD) - UDF - Total:3 Go (Free:0 Go)

F:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )

Option : [1] ( 05/01/2009|12:17 )

-----------\\ Recherche de Fichiers / Dossiers ...

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\alerts.gif

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\alerts_over.gif

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\alerts_rec.gif

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\alerts_rec_over.gif

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\chevron-small.gif

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\DealioSearch.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\deals-leftcap.gif

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\deal_report.jpg

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\ebay_login.jpg

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\err_mainwindow.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\err_toolbar.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\global_scripts.js

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\headerbgthin.jpg

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\highlight-bg.png

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\logo.gif

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\logo_over.gif

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\man_toolbar.css

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\man_toolbar.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\man_toolbar.js

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\man_toolbarl.js

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\post-this-deal.gif

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\post-this-deal_over.gif

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\scripts.js

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\scroller.js

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\search-chevron.gif

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\search-chevron_over.gif

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\search_bg_blink.gif

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\separator.gif

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\settings.gif

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\settings_over.gif

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\res\yahoo-search.png

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\index.76.35

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.10.76

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.109.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.110.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.12.52

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.13.58

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.130.58

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.135.50

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.153.44

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.155.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.156.49

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.16.60

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.161.52

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.178.66

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.184.55

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.188.52

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.189.45

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.196.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.198.56

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.199.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.200.53

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.201.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.202.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.203.71

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.205.62

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.213.71

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.214.49

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.215.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.216.67

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.217.67

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.218.52

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.219.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.220.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.221.57

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.222.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.223.68

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.226.68

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.227.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.228.62

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.229.76

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.23.63

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.239.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.24.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.240.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.241.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.242.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.243.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.244.63

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.245.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.247.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.248.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.249.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.250.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.251.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.252.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.253.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.254.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.255.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.256.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.257.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.279.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.28.58

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.282.75

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.283.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.284.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.289.67

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.290.62

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.291.61

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.296.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.297.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.304.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.307.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.308.75

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.31.47

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.310.46

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.311.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.315.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.316.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.317.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.318.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.319.49

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.32.48

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.334.44

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.335.60

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.336.44

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.337.44

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.338.75

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.339.47

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.34.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.340.47

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.341.47

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.349.50

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.35.48

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.350.50

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.351.51

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.352.54

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.353.51

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.354.51

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.357.62

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.358.52

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.359.52

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.360.53

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.361.54

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.362.68

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.363.58

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.364.54

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.365.53

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.367.56

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.368.58

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.369.55

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.370.56

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.371.56

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.372.57

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.373.55

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.375.56

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.376.57

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.377.55

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.378.65

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.384.58

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.386.71

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.387.59

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.388.59

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.389.59

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.390.60

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.391.60

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.392.60

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.393.60

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.394.60

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.396.61

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.397.61

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.398.60

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.399.60

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.403.61

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.404.63

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.405.61

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.406.61

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.407.76

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.408.63

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.409.61

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.412.62

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.413.62

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.414.62

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.415.62

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.416.62

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.417.62

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.418.62

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.419.62

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.420.62

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.421.62

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.423.63

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.424.63

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.425.63

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.426.63

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.427.63

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.428.65

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.429.63

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.430.63

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.432.65

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.433.64

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.434.65

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.435.64

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.436.76

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.437.64

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.438.71

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.439.71

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.440.75

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.442.73

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.443.73

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.444.73

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.445.68

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.446.69

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.450.67

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.451.67

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.452.68

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.453.68

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.454.69

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.456.69

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.457.75

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.458.70

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.459.70

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.460.69

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.462.74

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.463.69

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.464.70

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.465.68

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.468.70

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.469.70

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.470.70

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.471.73

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.472.70

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.478.74

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.479.73

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.480.68

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.481.71

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.482.74

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.49.67

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.50.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.500.71

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.501.74

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.502.71

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.51.69

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.52.72

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.520.76

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.521.76

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.522.76

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.53.51

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.531.76

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.532.75

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.534.75

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.54.47

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.55.45

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.56.69

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.57.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.58.47

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.593.76

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.595.76

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.63.57

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.66.47

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.70.75

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\rules\rules.1.71.43

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\dealio-14248.log

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\dod_cache.xml

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_1528_556_5.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_1628_4124_5.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_1628_5160_15.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_1836_1004_5.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_1836_4384_38.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_1836_4512_14.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_1836_5220_8.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_1836_5928_39.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_1836_5928_40.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2192_5756_8.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2552_1672_62.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2552_2124_72.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2552_2384_43.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2552_2420_5.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2552_436_18.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2552_5040_124.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2552_5040_125.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2552_5520_82.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2552_5564_117.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2552_5944_75.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2552_6004_92.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2864_1756_29.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2864_2708_10.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2864_4148_35.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2864_4292_14.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2864_4332_20.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2864_4380_19.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2864_4412_26.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2864_4900_32.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2864_5528_38.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2864_5568_11.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2864_5672_25.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2868_2880_5.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2940_3044_17.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2940_4336_5.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2940_5980_26.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3196_2632_5.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3196_3120_13.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3196_5092_24.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3196_5548_49.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3196_5636_17.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3196_5852_50.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3196_5852_51.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3244_5856_9.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3244_652_5.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3400_448_5.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3756_1788_22.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3756_3700_28.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3756_4312_108.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3756_4832_85.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3756_4936_122.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3756_4936_123.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3756_5160_111.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3756_5352_40.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3756_5576_58.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3756_5692_92.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3756_5792_34.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3784_5020_9.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3784_6092_5.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3808_2888_5.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3808_4224_78.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4136_1124_5.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4140_3504_11.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4140_5160_15.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_420_160_11.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_420_3772_22.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_420_4400_32.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_420_4648_29.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_420_4920_25.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_420_5132_40.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_420_6084_14.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_420_6088_57.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_420_928_5.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4232_2804_173.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4232_4352_5.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4232_5668_8.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4256_4224_20.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4256_4280_5.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4256_4432_23.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4256_4532_32.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4256_4612_26.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4256_4800_36.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4264_4292_5.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4264_4828_33.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4316_2252_12.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4316_3408_15.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4320_520_21.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4360_4476_40.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4360_4500_5.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4400_4412_20.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4400_5884_8.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4568_4376_37.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_1252_139.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_1268_151.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_2508_64.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_3468_136.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_4560_145.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_4816_127.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_5056_5.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_5172_124.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_5280_130.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_5328_133.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_5648_108.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_5816_148.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4628_5856_142.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4636_4416_84.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4636_5088_37.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4636_5132_8.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4636_5368_117.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4636_5436_121.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4636_5484_124.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4672_2156_78.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4672_2508_67.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4672_4236_49.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4672_4300_85.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4672_5408_56.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4672_5920_16.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4680_1116_23.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4680_2868_14.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4680_4708_5.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4680_5592_8.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_3460_106.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_3716_127.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_4104_90.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_4112_100.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_424_103.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_4292_126.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_4752_114.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_4824_123.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_4952_124.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_5240_129.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_5604_115.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_5696_131.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_5704_109.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_5736_118.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_5832_95.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_6004_87.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4684_6076_132.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4720_2856_21.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4720_3016_32.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4720_4676_65.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4720_5456_5.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4720_5924_14.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4752_5744_72.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4752_5804_15.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4972_5024_5.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4988_3164_5.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4988_3932_26.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4988_4148_12.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5048_1196_30.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5048_2464_50.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5048_3076_15.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5048_3680_36.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5048_4324_11.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5048_4344_49.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5048_5076_5.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5048_5752_21.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5048_5832_29.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5048_5960_24.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5048_680_33.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5072_4792_5.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5076_4832_24.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5076_5300_21.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5076_5432_34.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5120_3188_16.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5120_4204_29.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5120_4612_26.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5120_5200_5.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5120_5636_9.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5252_4476_37.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5252_5276_5.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5252_5524_12.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5572_5720_5.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5576_1116_14.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5576_4576_33.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5576_4724_45.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5576_924_5.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5596_1684_5.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5596_3324_22.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5596_5316_19.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5668_4508_11.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5668_5452_27.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5668_5696_5.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5736_5564_9.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5736_5760_5.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5820_1704_153.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5820_1760_122.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5820_5276_207.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5820_5564_61.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5820_5760_24.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5820_5844_5.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5848_4160_3.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5880_3512_19.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5880_3580_9.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5880_3992_15.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5880_4196_26.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5880_5936_5.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5900_3472_46.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5900_3860_58.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5900_3892_30.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5900_5140_55.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5900_5384_49.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5900_5936_43.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_2668_29.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_3372_35.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_4248_41.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_4692_16.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_5028_45.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_5220_8.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_5388_24.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_5480_11.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_5824_17.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_5932_5.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_6012_25.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_6020_26.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_704_38.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_5904_896_34.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_6108_4832_8.html

C:\DOCUME~1\ADMINI~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_6108_4876_11.html

C:\DOCUME~1\ISO\APPLIC~1\Dealio

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\temp

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\alerts.gif

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\alerts_over.gif

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\alerts_rec.gif

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\alerts_rec_over.gif

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\chevron-small.gif

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\DealioSearch.html

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\deals-leftcap.gif

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\deal_report.jpg

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\ebay_login.jpg

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\err_mainwindow.html

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\err_toolbar.html

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\global_scripts.js

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\headerbgthin.jpg

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\highlight-bg.png

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\logo.gif

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\logo_over.gif

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\man_toolbar.css

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\man_toolbar.html

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\man_toolbar.js

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\man_toolbarl.js

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\post-this-deal.gif

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\post-this-deal_over.gif

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\scripts.js

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\scroller.js

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\search-chevron.gif

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\search-chevron_over.gif

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\search_bg_blink.gif

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\separator.gif

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\settings.gif

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\settings_over.gif

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\res\yahoo-search.png

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\index.76.35

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.10.76

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.109.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.110.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.12.52

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.13.58

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.130.58

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.135.50

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.153.44

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.155.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.156.49

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.16.60

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.161.52

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.178.66

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.184.55

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.188.52

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.189.45

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.196.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.198.56

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.199.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.200.53

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.201.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.202.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.203.71

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.205.62

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.213.71

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.214.49

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.215.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.216.67

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.217.67

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.218.52

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.219.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.220.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.221.57

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.222.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.223.68

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.226.68

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.227.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.228.62

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.229.76

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.23.63

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.239.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.24.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.240.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.241.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.242.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.243.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.244.63

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.245.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.247.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.248.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.249.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.250.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.251.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.252.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.253.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.254.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.255.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.256.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.257.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.279.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.28.58

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.282.75

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.283.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.284.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.289.67

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.290.62

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.291.61

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.296.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.297.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.304.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.307.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.308.75

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.31.47

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.310.46

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.311.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.315.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.316.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.317.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.318.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.319.49

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.32.48

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.334.44

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.335.60

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.336.44

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.337.44

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.338.75

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.339.47

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.34.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.340.47

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.341.47

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.349.50

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.35.48

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.350.50

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.351.51

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.352.54

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.353.51

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.354.51

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.357.62

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.358.52

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.359.52

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.360.53

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.361.54

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.362.68

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.363.58

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.364.54

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.365.53

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.367.56

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.368.58

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.369.55

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.370.56

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.371.56

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.372.57

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.373.55

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.375.56

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.376.57

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.377.55

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.378.65

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.384.58

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.386.71

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.387.59

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.388.59

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.389.59

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.390.60

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.391.60

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.392.60

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.393.60

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.394.60

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.396.61

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.397.61

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.398.60

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.399.60

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.403.61

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.404.63

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.405.61

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.406.61

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.407.76

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.408.63

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.409.61

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.412.62

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.413.62

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.414.62

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.415.62

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.416.62

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.417.62

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.418.62

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.419.62

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.420.62

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.421.62

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.423.63

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.424.63

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.425.63

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.426.63

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.427.63

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.428.65

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.429.63

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.430.63

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.432.65

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.433.64

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.434.65

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.435.64

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.436.76

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.437.64

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.438.71

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.439.71

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.440.75

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.442.73

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.443.73

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.444.73

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.445.68

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.446.69

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.450.67

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.451.67

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.452.68

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.453.68

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.454.69

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.456.69

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.457.75

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.458.70

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.459.70

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.460.69

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.462.74

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.463.69

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.464.70

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.465.68

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.468.70

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.469.70

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.470.70

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.471.73

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.472.70

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.478.74

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.479.73

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.480.68

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.481.71

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.482.74

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.49.67

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.50.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.500.71

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.501.74

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.502.71

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.51.69

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.52.72

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.520.76

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.521.76

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.522.76

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.53.51

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.531.76

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.532.75

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.534.75

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.54.47

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.55.45

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.56.69

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.57.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.58.47

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.593.76

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.595.76

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.63.57

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.66.47

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.70.75

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\rules\rules.1.71.43

C:\DOCUME~1\ISO\APPLIC~1\Dealio\kb127\temp\dod_cache.xml

C:\Program Files\Dealio

C:\Program Files\Dealio\DealioAU.exe

C:\Program Files\Dealio\kb127

C:\Program Files\Dealio\SearchSettingsKit.exe

C:\Program Files\Dealio\kb127\Dealio Deskbar.exe

C:\Program Files\Dealio\kb127\Dealio.dll

C:\Program Files\Dealio\kb127\DealioRes409.dll

C:\Program Files\Dealio\kb127\res

C:\Program Files\Dealio\kb127\resDN

C:\Program Files\Dealio\kb127\rules

C:\Program Files\Dealio\kb127\temp

C:\Program Files\Dealio\kb127\res\alerts.gif

C:\Program Files\Dealio\kb127\res\alerts_over.gif

C:\Program Files\Dealio\kb127\res\alerts_rec.gif

C:\Program Files\Dealio\kb127\res\alerts_rec_over.gif

C:\Program Files\Dealio\kb127\res\chevron-small.gif

C:\Program Files\Dealio\kb127\res\DealioSearch.html

C:\Program Files\Dealio\kb127\res\deals-leftcap.gif

C:\Program Files\Dealio\kb127\res\deal_report.jpg

C:\Program Files\Dealio\kb127\res\ebay_login.jpg

C:\Program Files\Dealio\kb127\res\err_mainwindow.html

C:\Program Files\Dealio\kb127\res\err_toolbar.html

C:\Program Files\Dealio\kb127\res\global_scripts.js

C:\Program Files\Dealio\kb127\res\headerbgthin.jpg

C:\Program Files\Dealio\kb127\res\highlight-bg.png

C:\Program Files\Dealio\kb127\res\logo.gif

C:\Program Files\Dealio\kb127\res\logo_over.gif

C:\Program Files\Dealio\kb127\res\man_toolbar.css

C:\Program Files\Dealio\kb127\res\man_toolbar.html

C:\Program Files\Dealio\kb127\res\man_toolbar.js

C:\Program Files\Dealio\kb127\res\man_toolbarl.js

C:\Program Files\Dealio\kb127\res\post-this-deal.gif

C:\Program Files\Dealio\kb127\res\post-this-deal_over.gif

C:\Program Files\Dealio\kb127\res\scripts.js

C:\Program Files\Dealio\kb127\res\scroller.js

C:\Program Files\Dealio\kb127\res\search-chevron.gif

C:\Program Files\Dealio\kb127\res\search-chevron_over.gif

C:\Program Files\Dealio\kb127\res\search_bg_blink.gif

C:\Program Files\Dealio\kb127\res\separator.gif

C:\Program Files\Dealio\kb127\res\settings.gif

C:\Program Files\Dealio\kb127\res\settings_over.gif

C:\Program Files\Dealio\kb127\res\yahoo-search.png

C:\Program Files\Dealio\kb127\resDN\bottom.gif

C:\Program Files\Dealio\kb127\resDN\chevron_down.gif

C:\Program Files\Dealio\kb127\resDN\chevron_up.gif

C:\Program Files\Dealio\kb127\resDN\close.gif

C:\Program Files\Dealio\kb127\resDN\deskbar.css

C:\Program Files\Dealio\kb127\resDN\deskbar.js

C:\Program Files\Dealio\kb127\resDN\dispatch_helper.js

C:\Program Files\Dealio\kb127\resDN\ebay_compatible.jpg

C:\Program Files\Dealio\kb127\resDN\logo.gif

C:\Program Files\Dealio\kb127\resDN\logo_chevron_bkg.gif

C:\Program Files\Dealio\kb127\resDN\losing.gif

C:\Program Files\Dealio\kb127\resDN\lost.gif

C:\Program Files\Dealio\kb127\resDN\man_deskbar.html

C:\Program Files\Dealio\kb127\resDN\menu_arrow.gif

C:\Program Files\Dealio\kb127\resDN\menu_check.gif

C:\Program Files\Dealio\kb127\resDN\no_image.gif

C:\Program Files\Dealio\kb127\resDN\prod_img.gif

C:\Program Files\Dealio\kb127\resDN\search_chevron.gif

C:\Program Files\Dealio\kb127\resDN\spacer.gif

C:\Program Files\Dealio\kb127\resDN\textfield_bkg.gif

C:\Program Files\Dealio\kb127\resDN\top.gif

C:\Program Files\Dealio\kb127\resDN\unknown.gif

C:\Program Files\Dealio\kb127\resDN\winning.gif

C:\Program Files\Dealio\kb127\resDN\won.gif

C:\Program Files\Dealio\kb127\rules\index.76.35

C:\Program Files\Dealio\kb127\rules\rules.1.10.76

C:\Program Files\Dealio\kb127\rules\rules.1.109.43

C:\Program Files\Dealio\kb127\rules\rules.1.110.43

C:\Program Files\Dealio\kb127\rules\rules.1.12.52

C:\Program Files\Dealio\kb127\rules\rules.1.13.58

C:\Program Files\Dealio\kb127\rules\rules.1.130.58

C:\Program Files\Dealio\kb127\rules\rules.1.135.50

C:\Program Files\Dealio\kb127\rules\rules.1.153.44

C:\Program Files\Dealio\kb127\rules\rules.1.155.43

C:\Program Files\Dealio\kb127\rules\rules.1.156.49

C:\Program Files\Dealio\kb127\rules\rules.1.16.60

C:\Program Files\Dealio\kb127\rules\rules.1.161.52

C:\Program Files\Dealio\kb127\rules\rules.1.178.66

C:\Program Files\Dealio\kb127\rules\rules.1.184.55

C:\Program Files\Dealio\kb127\rules\rules.1.188.52

C:\Program Files\Dealio\kb127\rules\rules.1.189.45

C:\Program Files\Dealio\kb127\rules\rules.1.196.43

C:\Program Files\Dealio\kb127\rules\rules.1.198.56

C:\Program Files\Dealio\kb127\rules\rules.1.199.43

C:\Program Files\Dealio\kb127\rules\rules.1.200.53

C:\Program Files\Dealio\kb127\rules\rules.1.201.43

C:\Program Files\Dealio\kb127\rules\rules.1.202.43

C:\Program Files\Dealio\kb127\rules\rules.1.203.71

C:\Program Files\Dealio\kb127\rules\rules.1.205.62

C:\Program Files\Dealio\kb127\rules\rules.1.213.71

C:\Program Files\Dealio\kb127\rules\rules.1.214.49

C:\Program Files\Dealio\kb127\rules\rules.1.215.43

C:\Program Files\Dealio\kb127\rules\rules.1.216.67

C:\Program Files\Dealio\kb127\rules\rules.1.217.67

C:\Program Files\Dealio\kb127\rules\rules.1.218.52

C:\Program Files\Dealio\kb127\rules\rules.1.219.43

C:\Program Files\Dealio\kb127\rules\rules.1.220.43

C:\Program Files\Dealio\kb127\rules\rules.1.221.57

C:\Program Files\Dealio\kb127\rules\rules.1.222.43

C:\Program Files\Dealio\kb127\rules\rules.1.223.68

C:\Program Files\Dealio\kb127\rules\rules.1.226.68

C:\Program Files\Dealio\kb127\rules\rules.1.227.43

C:\Program Files\Dealio\kb127\rules\rules.1.228.62

C:\Program Files\Dealio\kb127\rules\rules.1.229.76

C:\Program Files\Dealio\kb127\rules\rules.1.23.63

C:\Program Files\Dealio\kb127\rules\rules.1.239.43

C:\Program Files\Dealio\kb127\rules\rules.1.24.43

C:\Program Files\Dealio\kb127\rules\rules.1.240.43

C:\Program Files\Dealio\kb127\rules\rules.1.241.43

C:\Program Files\Dealio\kb127\rules\rules.1.242.43

C:\Program Files\Dealio\kb127\rules\rules.1.243.43

C:\Program Files\Dealio\kb127\rules\rules.1.244.63

C:\Program Files\Dealio\kb127\rules\rules.1.245.43

C:\Program Files\Dealio\kb127\rules\rules.1.247.43

C:\Program Files\Dealio\kb127\rules\rules.1.248.43

C:\Program Files\Dealio\kb127\rules\rules.1.249.43

C:\Program Files\Dealio\kb127\rules\rules.1.250.43

C:\Program Files\Dealio\kb127\rules\rules.1.251.43

C:\Program Files\Dealio\kb127\rules\rules.1.252.43

C:\Program Files\Dealio\kb127\rules\rules.1.253.43

C:\Program Files\Dealio\kb127\rules\rules.1.254.43

C:\Program Files\Dealio\kb127\rules\rules.1.255.43

C:\Program Files\Dealio\kb127\rules\rules.1.256.43

C:\Program Files\Dealio\kb127\rules\rules.1.257.43

C:\Program Files\Dealio\kb127\rules\rules.1.279.43

C:\Program Files\Dealio\kb127\rules\rules.1.28.58

C:\Program Files\Dealio\kb127\rules\rules.1.282.75

C:\Program Files\Dealio\kb127\rules\rules.1.283.43

C:\Program Files\Dealio\kb127\rules\rules.1.284.43

C:\Program Files\Dealio\kb127\rules\rules.1.289.67

C:\Program Files\Dealio\kb127\rules\rules.1.290.62

C:\Program Files\Dealio\kb127\rules\rules.1.291.61

C:\Program Files\Dealio\kb127\rules\rules.1.296.43

C:\Program Files\Dealio\kb127\rules\rules.1.297.43

C:\Program Files\Dealio\kb127\rules\rules.1.304.43

C:\Program Files\Dealio\kb127\rules\rules.1.307.43

C:\Program Files\Dealio\kb127\rules\rules.1.308.75

C:\Program Files\Dealio\kb127\rules\rules.1.31.47

C:\Program Files\Dealio\kb127\rules\rules.1.310.46

C:\Program Files\Dealio\kb127\rules\rules.1.311.43

C:\Program Files\Dealio\kb127\rules\rules.1.315.43

C:\Program Files\Dealio\kb127\rules\rules.1.316.43

C:\Program Files\Dealio\kb127\rules\rules.1.317.43

C:\Program Files\Dealio\kb127\rules\rules.1.318.43

C:\Program Files\Dealio\kb127\rules\rules.1.319.49

C:\Program Files\Dealio\kb127\rules\rules.1.32.48

C:\Program Files\Dealio\kb127\rules\rules.1.334.44

C:\Program Files\Dealio\kb127\rules\rules.1.335.60

C:\Program Files\Dealio\kb127\rules\rules.1.336.44

C:\Program Files\Dealio\kb127\rules\rules.1.337.44

C:\Program Files\Dealio\kb127\rules\rules.1.338.75

C:\Program Files\Dealio\kb127\rules\rules.1.339.47

C:\Program Files\Dealio\kb127\rules\rules.1.34.43

C:\Program Files\Dealio\kb127\rules\rules.1.340.47

C:\Program Files\Dealio\kb127\rules\rules.1.341.47

C:\Program Files\Dealio\kb127\rules\rules.1.349.50

C:\Program Files\Dealio\kb127\rules\rules.1.35.48

C:\Program Files\Dealio\kb127\rules\rules.1.350.50

C:\Program Files\Dealio\kb127\rules\rules.1.351.51

C:\Program Files\Dealio\kb127\rules\rules.1.352.54

C:\Program Files\Dealio\kb127\rules\rules.1.353.51

C:\Program Files\Dealio\kb127\rules\rules.1.354.51

C:\Program Files\Dealio\kb127\rules\rules.1.357.62

C:\Program Files\Dealio\kb127\rules\rules.1.358.52

C:\Program Files\Dealio\kb127\rules\rules.1.359.52

C:\Program Files\Dealio\kb127\rules\rules.1.360.53

C:\Program Files\Dealio\kb127\rules\rules.1.361.54

C:\Program Files\Dealio\kb127\rules\rules.1.362.68

C:\Program Files\Dealio\kb127\rules\rules.1.363.58

C:\Program Files\Dealio\kb127\rules\rules.1.364.54

C:\Program Files\Dealio\kb127\rules\rules.1.365.53

C:\Program Files\Dealio\kb127\rules\rules.1.367.56

C:\Program Files\Dealio\kb127\rules\rules.1.368.58

C:\Program Files\Dealio\kb127\rules\rules.1.369.55

C:\Program Files\Dealio\kb127\rules\rules.1.370.56

C:\Program Files\Dealio\kb127\rules\rules.1.371.56

C:\Program Files\Dealio\kb127\rules\rules.1.372.57

C:\Program Files\Dealio\kb127\rules\rules.1.373.55

C:\Program Files\Dealio\kb127\rules\rules.1.375.56

C:\Program Files\Dealio\kb127\rules\rules.1.376.57

C:\Program Files\Dealio\kb127\rules\rules.1.377.55

C:\Program Files\Dealio\kb127\rules\rules.1.378.65

C:\Program Files\Dealio\kb127\rules\rules.1.384.58

C:\Program Files\Dealio\kb127\rules\rules.1.386.71

C:\Program Files\Dealio\kb127\rules\rules.1.387.59

C:\Program Files\Dealio\kb127\rules\rules.1.388.59

C:\Program Files\Dealio\kb127\rules\rules.1.389.59

C:\Program Files\Dealio\kb127\rules\rules.1.390.60

C:\Program Files\Dealio\kb127\rules\rules.1.391.60

C:\Program Files\Dealio\kb127\rules\rules.1.392.60

C:\Program Files\Dealio\kb127\rules\rules.1.393.60

C:\Program Files\Dealio\kb127\rules\rules.1.394.60

C:\Program Files\Dealio\kb127\rules\rules.1.396.61

C:\Program Files\Dealio\kb127\rules\rules.1.397.61

C:\Program Files\Dealio\kb127\rules\rules.1.398.60

C:\Program Files\Dealio\kb127\rules\rules.1.399.60

C:\Program Files\Dealio\kb127\rules\rules.1.403.61

C:\Program Files\Dealio\kb127\rules\rules.1.404.63

C:\Program Files\Dealio\kb127\rules\rules.1.405.61

C:\Program Files\Dealio\kb127\rules\rules.1.406.61

C:\Program Files\Dealio\kb127\rules\rules.1.407.76

C:\Program Files\Dealio\kb127\rules\rules.1.408.63

C:\Program Files\Dealio\kb127\rules\rules.1.409.61

C:\Program Files\Dealio\kb127\rules\rules.1.412.62

C:\Program Files\Dealio\kb127\rules\rules.1.413.62

C:\Program Files\Dealio\kb127\rules\rules.1.414.62

C:\Program Files\Dealio\kb127\rules\rules.1.415.62

C:\Program Files\Dealio\kb127\rules\rules.1.416.62

C:\Program Files\Dealio\kb127\rules\rules.1.417.62

C:\Program Files\Dealio\kb127\rules\rules.1.418.62

C:\Program Files\Dealio\kb127\rules\rules.1.419.62

C:\Program Files\Dealio\kb127\rules\rules.1.420.62

C:\Program Files\Dealio\kb127\rules\rules.1.421.62

C:\Program Files\Dealio\kb127\rules\rules.1.423.63

C:\Program Files\Dealio\kb127\rules\rules.1.424.63

C:\Program Files\Dealio\kb127\rules\rules.1.425.63

C:\Program Files\Dealio\kb127\rules\rules.1.426.63

C:\Program Files\Dealio\kb127\rules\rules.1.427.63

C:\Program Files\Dealio\kb127\rules\rules.1.428.65

C:\Program Files\Dealio\kb127\rules\rules.1.429.63

C:\Program Files\Dealio\kb127\rules\rules.1.430.63

C:\Program Files\Dealio\kb127\rules\rules.1.432.65

C:\Program Files\Dealio\kb127\rules\rules.1.433.64

C:\Program Files\Dealio\kb127\rules\rules.1.434.65

C:\Program Files\Dealio\kb127\rules\rules.1.435.64

C:\Program Files\Dealio\kb127\rules\rules.1.436.76

C:\Program Files\Dealio\kb127\rules\rules.1.437.64

C:\Program Files\Dealio\kb127\rules\rules.1.438.71

C:\Program Files\Dealio\kb127\rules\rules.1.439.71

C:\Program Files\Dealio\kb127\rules\rules.1.440.75

C:\Program Files\Dealio\kb127\rules\rules.1.442.73

C:\Program Files\Dealio\kb127\rules\rules.1.443.73

C:\Program Files\Dealio\kb127\rules\rules.1.444.73

C:\Program Files\Dealio\kb127\rules\rules.1.445.68

C:\Program Files\Dealio\kb127\rules\rules.1.446.69

C:\Program Files\Dealio\kb127\rules\rules.1.450.67

C:\Program Files\Dealio\kb127\rules\rules.1.451.67

C:\Program Files\Dealio\kb127\rules\rules.1.452.68

C:\Program Files\Dealio\kb127\rules\rules.1.453.68

C:\Program Files\Dealio\kb127\rules\rules.1.454.69

C:\Program Files\Dealio\kb127\rules\rules.1.456.69

C:\Program Files\Dealio\kb127\rules\rules.1.457.75

C:\Program Files\Dealio\kb127\rules\rules.1.458.70

C:\Program Files\Dealio\kb127\rules\rules.1.459.70

C:\Program Files\Dealio\kb127\rules\rules.1.460.69

C:\Program Files\Dealio\kb127\rules\rules.1.462.74

C:\Program Files\Dealio\kb127\rules\rules.1.463.69

C:\Program Files\Dealio\kb127\rules\rules.1.464.70

C:\Program Files\Dealio\kb127\rules\rules.1.465.68

C:\Program Files\Dealio\kb127\rules\rules.1.468.70

C:\Program Files\Dealio\kb127\rules\rules.1.469.70

C:\Program Files\Dealio\kb127\rules\rules.1.470.70

C:\Program Files\Dealio\kb127\rules\rules.1.471.73

C:\Program Files\Dealio\kb127\rules\rules.1.472.70

C:\Program Files\Dealio\kb127\rules\rules.1.478.74

C:\Program Files\Dealio\kb127\rules\rules.1.479.73

C:\Program Files\Dealio\kb127\rules\rules.1.480.68

C:\Program Files\Dealio\kb127\rules\rules.1.481.71

C:\Program Files\Dealio\kb127\rules\rules.1.482.74

C:\Program Files\Dealio\kb127\rules\rules.1.49.67

C:\Program Files\Dealio\kb127\rules\rules.1.50.43

C:\Program Files\Dealio\kb127\rules\rules.1.500.71

C:\Program Files\Dealio\kb127\rules\rules.1.501.74

C:\Program Files\Dealio\kb127\rules\rules.1.502.71

C:\Program Files\Dealio\kb127\rules\rules.1.51.69

C:\Program Files\Dealio\kb127\rules\rules.1.52.72

C:\Program Files\Dealio\kb127\rules\rules.1.520.76

C:\Program Files\Dealio\kb127\rules\rules.1.521.76

C:\Program Files\Dealio\kb127\rules\rules.1.522.76

C:\Program Files\Dealio\kb127\rules\rules.1.53.51

C:\Program Files\Dealio\kb127\rules\rules.1.531.76

C:\Program Files\Dealio\kb127\rules\rules.1.532.75

C:\Program Files\Dealio\kb127\rules\rules.1.534.75

C:\Program Files\Dealio\kb127\rules\rules.1.54.47

C:\Program Files\Dealio\kb127\rules\rules.1.55.45

C:\Program Files\Dealio\kb127\rules\rules.1.56.69

C:\Program Files\Dealio\kb127\rules\rules.1.57.43

C:\Program Files\Dealio\kb127\rules\rules.1.58.47

C:\Program Files\Dealio\kb127\rules\rules.1.593.76

C:\Program Files\Dealio\kb127\rules\rules.1.595.76

C:\Program Files\Dealio\kb127\rules\rules.1.63.57

C:\Program Files\Dealio\kb127\rules\rules.1.66.47

C:\Program Files\Dealio\kb127\rules\rules.1.70.75

C:\Program Files\Dealio\kb127\rules\rules.1.71.43

C:\WINDOWS\Prefetch\DEALIOAU.EXE-32C4A05D.pf

C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Dealio

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\content_a.xml

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\content_ie.xml

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\content_m.xml

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\content_y.xml

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\logger.xml

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\toolbarIE.xml

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\toolbarIM_a.xml

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\toolbarIM_m.xml

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\config\toolbarIM_y.xml

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\allow.bmp

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\block.bmp

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\dontsend.bmp

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\im_toolbardropdownmenu.bmp

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\im_toolbarsHelprolloverbase.bmp

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\im_toolbarsm1rolloverbase.bmp

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\im_toolbarsm1rolloverbase_bg.bmp

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\im_toolbarsm1rolloverbase_dp.bmp

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\im_toolbarsm2rolloverbase.bmp

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\im_toolbarstextrollover.bmp

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\kiwee_iconX16.ico

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\kiwee_iconX48.ico

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\send.bmp

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_eg.bmp

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_emoticons.bmp

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_eyeglass.bmp

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_gear.bmp

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_images.bmp

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_kiwee.bmp

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_msnlogo.bmp

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_news.bmp

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_text.bmp

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_videos.bmp

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_webshots.bmp

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\toolbar_winks.bmp

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Kiwee Toolbar\images\X.bmp

C:\Program Files\Kiwee Toolbar

C:\Program Files\Kiwee Toolbar\2.8.167

C:\Program Files\Kiwee Toolbar\2.8.167\AGTBCore.dll

C:\Program Files\Kiwee Toolbar\2.8.167\AolIMToolbar.dll

C:\Program Files\Kiwee Toolbar\2.8.167\firefox

C:\Program Files\Kiwee Toolbar\2.8.167\FlashCOM.dll

C:\Program Files\Kiwee Toolbar\2.8.167\KiweeCommonCtrls.dll

C:\Program Files\Kiwee Toolbar\2.8.167\KiweeContentHost.dll

C:\Program Files\Kiwee Toolbar\2.8.167\KiweeIEToolbar.dll

C:\Program Files\Kiwee Toolbar\2.8.167\KiweeIMToolbar.dll

C:\Program Files\Kiwee Toolbar\2.8.167\KiweeTBCore.dll

C:\Program Files\Kiwee Toolbar\2.8.167\KiweeTBCore.tlb

C:\Program Files\Kiwee Toolbar\2.8.167\kiweetoolbar.zip

C:\Program Files\Kiwee Toolbar\2.8.167\kwtbaim.exe

C:\Program Files\Kiwee Toolbar\2.8.167\mfc80u.dll

C:\Program Files\Kiwee Toolbar\2.8.167\Microsoft.VC80.CRT.manifest

C:\Program Files\Kiwee Toolbar\2.8.167\Microsoft.VC80.MFC.manifest

C:\Program Files\Kiwee Toolbar\2.8.167\msimg32.dll

C:\Program Files\Kiwee Toolbar\2.8.167\MsnIMToolbar.dll

C:\Program Files\Kiwee Toolbar\2.8.167\msvcp80.dll

C:\Program Files\Kiwee Toolbar\2.8.167\msvcr80.dll

C:\Program Files\Kiwee Toolbar\2.8.167\RemoteLib.dll

C:\Program Files\Kiwee Toolbar\2.8.167\Riched20.dll

C:\Program Files\Kiwee Toolbar\2.8.167\firefox\chrome

C:\Program Files\Kiwee Toolbar\2.8.167\firefox\chrome.manifest

C:\Program Files\Kiwee Toolbar\2.8.167\firefox\components

C:\Program Files\Kiwee Toolbar\2.8.167\firefox\defaults

C:\Program Files\Kiwee Toolbar\2.8.167\firefox\firefox.xpi

C:\Program Files\Kiwee Toolbar\2.8.167\firefox\install.rdf

C:\Program Files\Kiwee Toolbar\2.8.167\firefox\META-INF

C:\Program Files\Kiwee Toolbar\2.8.167\firefox\chrome\kiweetoolbar.jar

C:\Program Files\Kiwee Toolbar\2.8.167\firefox\components\AGCore.js

C:\Program Files\Kiwee Toolbar\2.8.167\firefox\components\AGCore.xpt

C:\Program Files\Kiwee Toolbar\2.8.167\firefox\components\KiweeSearchHistory.js

C:\Program Files\Kiwee Toolbar\2.8.167\firefox\components\SearchProtection.js

C:\Program Files\Kiwee Toolbar\2.8.167\firefox\components\SearchProtection.xpt

C:\Program Files\Kiwee Toolbar\2.8.167\firefox\defaults\preferences

C:\Program Files\Kiwee Toolbar\2.8.167\firefox\defaults\preferences\defaults.js

C:\Program Files\Kiwee Toolbar\2.8.167\firefox\META-INF\manifest.mf

C:\Program Files\Kiwee Toolbar\2.8.167\firefox\META-INF\zigbert.rsa

C:\Program Files\Kiwee Toolbar\2.8.167\firefox\META-INF\zigbert.sf

C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Kiwee Toolbar

C:\WINDOWS\Prefetch\SEARCHSETTINGS.EXE-253CB611.pf

C:\DOCUME~1\ADMINI~1\APPLIC~1\Search Settings

C:\DOCUME~1\ADMINI~1\APPLIC~1\Search Settings\kb127

C:\DOCUME~1\ADMINI~1\APPLIC~1\Search Settings\kb127\res

C:\DOCUME~1\ADMINI~1\APPLIC~1\Search Settings\kb127\temp

C:\DOCUME~1\ADMINI~1\APPLIC~1\Search Settings\kb127\temp\ws-14246.log

C:\DOCUME~1\ADMINI~1\APPLIC~1\Search Settings\kb127\temp\ws-14248.log

C:\DOCUME~1\ADMINI~1\APPLIC~1\Search Settings\kb127\temp\ws-14249.log

C:\DOCUME~1\ISO\APPLIC~1\Search Settings

C:\DOCUME~1\ISO\APPLIC~1\Search Settings\kb127

C:\DOCUME~1\ISO\APPLIC~1\Search Settings\kb127\res

C:\DOCUME~1\ISO\APPLIC~1\Search Settings\kb127\temp

C:\DOCUME~1\ISO\APPLIC~1\Search Settings\kb127\temp\ws-14248.log

C:\Program Files\Search Settings

C:\Program Files\Search Settings\kb127

C:\Program Files\Search Settings\SearchSettings.exe

C:\Program Files\Search Settings\kb127\res

C:\Program Files\Search Settings\kb127\SearchSettings.dll

C:\Program Files\Search Settings\kb127\SearchSettingsRes409.dll

C:\Program Files\Search Settings\kb127\temp

C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\ICD1.tmp

-----------\\ Extensions

(Administrateur) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

(Administrateur) - {b66bc4c3-6d25-4a10-8c59-01daa9063051} => foxgame

(ISO) - {b66bc4c3-6d25-4a10-8c59-01daa9063051} => foxgame

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Local Page"="C:\\WINDOWS\\system32\\blank.htm"

"Start Page"="http://www.msn.fr/"'>http://www.msn.fr/"

"Search Page"="http://www.google.com"'>http://www.google.com"

"Search Bar"="http://www.google.com/ie"'>http://www.google.com/ie"'>http://www.google.com/ie"'>http://www.google.com/ie"

"SearchMigratedDefaultURL"="http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"'>http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]

"Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"'>http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"

"Default_Search_URL"="http://www.google.com/ie"

"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"'>http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"'>http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"

--------------------\\ Recherche d'autres infections

C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\MessengerSkinner

C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\MessengerSkinner\Conditions g‚n‚rales.url

C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\MessengerSkinner\Confidentialit‚.url

C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\MessengerSkinner\D‚sinstaller.lnk

C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\MessengerSkinner\MessengerSkinner.lnk

C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\MessengerSkinner\Website.url

C:\DOCUME~1\ADMINI~1\LOCALS~1\APPLIC~1\ucmmc.dat

C:\DOCUME~1\ADMINI~1\LOCALS~1\APPLIC~1\ucmmc.exe

C:\DOCUME~1\ADMINI~1\LOCALS~1\APPLIC~1\ucmmc_nav.dat

C:\DOCUME~1\ADMINI~1\LOCALS~1\APPLIC~1\ucmmc_navps.dat

==> EGDACCESS <==

C:\WINDOWS\system32\gPXHknmp.ini

C:\WINDOWS\system32\gPXHknmp.ini2

==> VUNDO <==

1 - "C:\ToolBar SD\TB_1.txt" - 05/01/2009|12:19 - Option : [1]

-----------\\ Fin du rapport a 12:19:17,15