[Résolu] PC infecté (virus et malwares)

[jean_pfoumf]

bonjour,

ci-dessous le résultat de Combofix.

L'historique de l'opération est compliqué :

 

1er passage : à la fin, lors de l'opération Find3M, apparition de fenêtres avec des affichages illisibles (le logiciel pirate dont l'avaos vu l'affichage après le lancement du fameux patch). Je ferme les fenêtres. Combofix ne génère pas de .txt

2ième passage : je relance le PC et Combofix qui va jusqu'au bout. C'est le .Txt ci-dessous.

 

Je relance le PC : installation de Avira : OK

installation de PC Tools Firewall : OK

 

Je relance le PC : réapparition des fenêtres pirates. je les ferme.

Le Firewall intercepte la demande du logiciel pirate : SynTPLpr

 

Je relance le PC : Avira ne fonctione plus, le Firewall non plus : retour à la case départ ...

 

 

 

ComboFix 09-11-01.04 - Jean 03/11/2009 14:43.2.1 - NTFSx86

Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.510.210 [GMT 0:00]

Lancé depuis: c:\documents and settings\Jean\Bureau\jean.exe

.

 

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))

.

 

c:\documents and settings\Jean\Application Data\drivers\downld

c:\documents and settings\Jean\Application Data\drivers\downld\153060.exe

c:\documents and settings\Jean\Application Data\drivers\downld\154732.exe

c:\documents and settings\Jean\Application Data\drivers\downld\184705.exe

c:\documents and settings\Jean\Application Data\drivers\downld\210462.exe

c:\documents and settings\Jean\Application Data\drivers\downld\225293.exe

c:\documents and settings\Jean\Application Data\drivers\downld\270569.exe

c:\documents and settings\Jean\Application Data\drivers\downld\274765.exe

c:\documents and settings\Jean\Application Data\drivers\downld\301293.exe

c:\documents and settings\Jean\Application Data\drivers\downld\329243.exe

c:\documents and settings\Jean\Application Data\drivers\downld\376220.exe

c:\documents and settings\Jean\Application Data\drivers\downld\377342.exe

c:\documents and settings\Jean\Application Data\drivers\downld\377733.exe

c:\documents and settings\Jean\Application Data\drivers\downld\390761.exe

c:\documents and settings\Jean\Application Data\drivers\downld\394797.exe

c:\documents and settings\Jean\Application Data\drivers\downld\395358.exe

c:\documents and settings\Jean\Application Data\drivers\downld\419743.exe

c:\documents and settings\Jean\Application Data\drivers\downld\435215.exe

c:\documents and settings\Jean\Application Data\drivers\downld\436858.exe

c:\documents and settings\Jean\Application Data\drivers\downld\464898.exe

c:\documents and settings\Jean\Application Data\drivers\downld\464998.exe

c:\documents and settings\Jean\Application Data\drivers\downld\465208.exe

c:\documents and settings\Jean\Application Data\drivers\downld\473430.exe

c:\documents and settings\Jean\Application Data\drivers\downld\474382.exe

c:\documents and settings\Jean\Application Data\drivers\downld\475223.exe

c:\documents and settings\Jean\Application Data\drivers\downld\506057.exe

c:\documents and settings\Jean\Application Data\drivers\downld\506107.exe

c:\documents and settings\Jean\Application Data\drivers\downld\506247.exe

c:\documents and settings\Jean\Application Data\drivers\srosa2.sys

c:\documents and settings\Jean\Application Data\drivers\wfsintwq.sys

c:\documents and settings\Jean\Application Data\drivers\winupgro.exe

c:\documents and settings\Jean\Application Data\hidires

c:\documents and settings\Jean\Application Data\hidires\config\AC_BootstrapIPs.dat

c:\documents and settings\Jean\Application Data\hidires\config\AC_SearchStrings.dat

c:\documents and settings\Jean\Application Data\hidires\config\AC_ServerMetURLs.dat

c:\documents and settings\Jean\Application Data\hidires\config\cancelled.met

c:\documents and settings\Jean\Application Data\hidires\config\clients.met

c:\documents and settings\Jean\Application Data\hidires\config\cryptkey.dat

c:\documents and settings\Jean\Application Data\hidires\config\emfriends.met

c:\documents and settings\Jean\Application Data\hidires\config\known.met

c:\documents and settings\Jean\Application Data\hidires\config\preferences.dat

c:\documents and settings\Jean\Application Data\hidires\config\preferences.ini

c:\documents and settings\Jean\Application Data\hidires\config\server.met

c:\documents and settings\Jean\Application Data\hidires\config\shareddir.dat

c:\documents and settings\Jean\Application Data\hidires\config\statistics.ini

c:\documents and settings\Jean\Application Data\hidires\config\StoredSearches.met

c:\documents and settings\Jean\Application Data\hidires\file.exe

c:\documents and settings\Jean\Application Data\hidires\flec003.exe

c:\documents and settings\Jean\Application Data\hidires\names.txt

c:\documents and settings\Jean\Application Data\hidires\server.txt

c:\documents and settings\Jean\Application Data\hidires\WDIR\3D Fireworks by the Bay 2.1.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\74-135 Practice Exam Testing Engine Software 1.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\8 Hour Shift Schedules for 7 Days a Week 2.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\8X8CC Plus 1.3.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\A1 Jummfa CDRipper and Converter 5.482 (Crack).zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\ABCPix 2.13.1 KeyGen.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Acritum Batch Processor 1.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Actual Rar Repair 3.0.1.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\AFBackuper 1.0 Beta.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Affluence Scripting Factory 1.4.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Age of Mythology - The Battle of Helms Deep beta scenario.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\AlphaEdit+ 2.0.3 build 251 (With Crack).zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\ArchiCrypt Shredder 3.5.1.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\ASEE DVD Video to DivX Converter 4.98.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Auto Login to Yahoo Account 1.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Beauty Wizard 3.0 With Crack.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Betty Boop Da Doo Demo Screensaver 1.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Budget Advisor 2.26.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Calculator Firefox Add-on 1.1.10.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Cartoon Maker Recorder 3.51.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Cliprex DS DVD Player 1.5.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Club Penguin Night Prowler toolbar for IE 4.5.126.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\CobraSoft PopStop 2.1.182 (Serial).zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\CompuPic 6.23.1364.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\CompuPic Pro 6.23 Build 1364.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\CryptoStorage 1.5.1.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\CurvFit 5.09 KeyGen.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\DBQwikEdit Lite 2.4.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\DDClip Pro 3.51 [Cracked].zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Delete Junk Context Menu 0.3.2.1.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Delphi Project Launcher 1.3.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\DesktopForecast 3.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\DigitalClock 1.108.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Drifting Windows Mean 1.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Easy Rent Pro 1.4.1.5.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Easy Time Logs Professional 2.2.19.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\EncryptedPad 1.01.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\eTraining Operating Kit 2.0.91.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Eudora Password Recovery 1.2.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\EZ ThunderBird Backup 1.23.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\FeedWidget 1.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\FolderView Activex Control 2008.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Font Finder 0.5d.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Football Pool 7.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Free FLV to MP3 Converter 1.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\FriendTools 1.21.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\gDocsBar 0.5.7.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Genuine Sound Recorder 1.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Gold Man 1.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\HashTab 2.0.8.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\HFSLIP 1.7.4.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\HP0-092 Practice Exam Testing Engine Software 1.0 Key.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\IDAutomation Barcode Image Generator 2007.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\iMagic Hotel Reservation 3.58 [Cracked].zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Innovative Firewall Manager 2.0 [serial].zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\IP-guard 2.74.2116 (With Crack).zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Just Checking 3.15.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Kana WallChanger 2.3.5.41.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\KeyboardAssist 1.0 (Crack).zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\LifeJournal 2.01.06.00 build 747 (Serial).zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\LinuxSysInfo 1.0 Beta.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\ManpowerNet 2.98.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Mathmatix 1.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\mBook 1.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Mediata Survey 2.0.6 [With Crack].zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Microsoft 70-298 Exam Cracked.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\MIDI Auto-Accompaniment Section 2.2 (KeyGen).zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Movies 1.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Moyea SWF to Zune Converter 3.5.1.3.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Net-Print 8.2.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Net Workshop 4.5.1.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\NewsMonitor 3.1.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\NoteCase 1.5.1.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Paradion Easy Editor 1.0.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Passcape Win CD Keys 1.3.0 (Key+Serial).zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\PBAS 2.1P.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\PBPaste 2.4.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\PDF U Split Desktop Edition 1.16.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\PicaJet FX 2.5.0.495.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Pinpoint 1.1.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Port Poller 1.0.0.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\PresbyCal Desktop Calendar 1.1.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Print Preview 5.20.1.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\ProStockMaster 1.3.2 [serial].zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\PublicWare Music Archive 1.30.222.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Random Word Generator 10.1 [serial].zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Recon 2.32.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\RSS Explorer 1.5.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\S Meter Lite 2.15.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Say It With a Balloon 1.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\SayaTV Broadcaster 0.6.0.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Screen Shot Engine 1.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Serial Device Test Utility 1.5.0.13.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\SimpleHelp 2.15.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\SliceTheWeb 1.6.42.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Softabar Command Line Email Client 1.5 With Crack.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Song Sheet 4.1.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Spyware Killa 9.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\StaffTracker 1.1.35 Key+Serial.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Super Fax Search 1.82.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\SuperRam 5.10.9.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Sword of Honor 3D Screensaver 1.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Tea Timer 1.9.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\The Fullpack.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\The Technician Database 2008 1.2a.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Total Network Inventory 1.6.7 Build 2506.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\touchtheWire 1.11.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Ultra Spiritual Protection 1.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Video Edit Master 1.8.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Vinyl To MP3 2.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\VisuCalc 1.0 Cracked.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Waltograph Font 4.2.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Warcraft III - AR Christmas PicNic map.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Web Page Error Toolkit 1.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Web Photo Search 1.2 Crack.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\webcamXP PRO 2008 4.12.275.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\WebSpy Analyzer Standard 4.3.2.5.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Windows MultiEnhancer 8.7.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\WinNavigator 1.96.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Wrap Switcher 0.5.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\WTKK 96.9 Radio Streaming Widget 1.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Zinc Pocket PC 2.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Zip-I-Mage 2.0 (Key+Serial).zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Zip Files Opener 1.0.zip

c:\documents and settings\Jean\Application Data\m

c:\documents and settings\Jean\Application Data\m\data.oct

c:\documents and settings\Jean\Application Data\m\flec006.exe

c:\documents and settings\Jean\Application Data\m\list.oct

c:\documents and settings\Jean\Application Data\m\shared\4Musics Multiformat Converter 4.1.zip

c:\documents and settings\Jean\Application Data\m\shared\ASPlayer_3.00f.zip

c:\documents and settings\Jean\Application Data\m\shared\Bonus XP Icon Library 1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Calculadora 1.0.1.5.zip

c:\documents and settings\Jean\Application Data\m\shared\CodeSnippets 1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\creations screensaver 01.zip

c:\documents and settings\Jean\Application Data\m\shared\Echolink_Chat_1.31.zip

c:\documents and settings\Jean\Application Data\m\shared\Ela-Salaty_0.2.3.zip

c:\documents and settings\Jean\Application Data\m\shared\ELVideoCapure .NET Solution 1.1 [With Crack].zip

c:\documents and settings\Jean\Application Data\m\shared\Focus_VideoPhone_3.0.zip

c:\documents and settings\Jean\Application Data\m\shared\HexSer 1.0.0.4.zip

c:\documents and settings\Jean\Application Data\m\shared\HoPoPi 0.0.1.2.zip

c:\documents and settings\Jean\Application Data\m\shared\HyperCoder_Standard_Edition_1.1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\HypText_1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Kaspersky.Key.01-01-2009.zip

c:\documents and settings\Jean\Application Data\m\shared\Light Image Viewer 1.0.7.zip

c:\documents and settings\Jean\Application Data\m\shared\LingvoSoft_Talking_Picture_Dictionary_2007_German_-_Russian_1.1.18_Serial.zip

c:\documents and settings\Jean\Application Data\m\shared\Mail Hunter 2.19.zip

c:\documents and settings\Jean\Application Data\m\shared\MistyChartNetLite 1.1.zip

c:\documents and settings\Jean\Application Data\m\shared\Monitis Uptime Snapshot 1.0.0.0.czip

c:\documents and settings\Jean\Application Data\m\shared\NetAdjust_Website_Monitor_1.1.0.0_Key.zip

c:\documents and settings\Jean\Application Data\m\shared\Neutral Trend TradeMax Premier Edition 2.0.2009.505.zip

c:\documents and settings\Jean\Application Data\m\shared\OfficeAssistor_1.0_[serial].zip

c:\documents and settings\Jean\Application Data\m\shared\Operation_Flashpoint_Resistance_-_Sabotage_map.zip

c:\documents and settings\Jean\Application Data\m\shared\Paginate 1.zip

c:\documents and settings\Jean\Application Data\m\shared\PL Table 4.40.zip

c:\documents and settings\Jean\Application Data\m\shared\PlexTools_Pro_XL_3.13_KeyGen.zip

c:\documents and settings\Jean\Application Data\m\shared\Privacy_Killer_1.1.507_Key+Serial.zip

c:\documents and settings\Jean\Application Data\m\shared\ProprioSoft_3.0.zip

c:\documents and settings\Jean\Application Data\m\shared\StreetSmarts_for_Drivers_101_1.0_[KeyGen].zip

c:\documents and settings\Jean\Application Data\m\shared\Survey_Power_6.30.zip

c:\documents and settings\Jean\Application Data\m\shared\Terra_1.zip

c:\documents and settings\Jean\Application Data\m\shared\Timesheet Xpress 8.7.0.zip

c:\documents and settings\Jean\Application Data\m\srvlist.oct

.

---- Exécution préalable -------

.

c:\documents and settings\Jean\Application Data\drivers\downld\1002541.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1005575.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1005605.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1022780.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1025164.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1025394.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1045643.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1047496.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1047516.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1083548.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1086292.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1086582.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1112820.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1114302.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1115003.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1117757.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1118007.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1118348.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1122023.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1125137.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1126900.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1126920.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1128302.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1128342.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1128883.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1129183.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1129233.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1130155.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1130936.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1132218.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1132488.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1132999.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1133930.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1133970.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1135052.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1135142.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1136764.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1138697.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1146047.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1147299.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1149663.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1151635.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1161009.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1162691.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1162852.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1163442.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1164334.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1164424.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1180477.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1183031.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1183601.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1187767.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1189510.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1189720.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1196951.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1197531.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1198232.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1198603.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1210881.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1214406.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1214586.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1219323.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1219673.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1221516.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1224490.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1224540.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1241274.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1244629.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1245370.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1256186.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1258489.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1258739.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1259330.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1260111.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1260141.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1261584.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1271818.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1285588.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1295753.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1297015.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1297325.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1297355.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1297806.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1303874.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1307710.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1309292.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1313739.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1318545.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1319777.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1319807.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1321440.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1332355.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1334118.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1336221.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1337943.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1338033.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1349049.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1352624.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1353346.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1370751.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1372964.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1374676.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1374706.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1378842.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1388636.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1391320.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1391901.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1392662.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1392942.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1393533.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1394154.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1394415.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1394435.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1396858.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1397269.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1398811.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1399572.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1399852.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1400453.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1401955.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1402056.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1437436.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1439610.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1439830.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1450806.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1457385.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1458006.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1488510.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1491284.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1492315.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1497563.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1503852.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1504162.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1518303.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1526184.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1529238.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1591298.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1593771.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1593811.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1612638.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1613159.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1614461.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1614521.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1621020.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1623093.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1630364.exe

c:\documents and settings\Jean\Application Data\drivers\downld\163284.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1637514.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1639237.exe

c:\documents and settings\Jean\Application Data\drivers\downld\163985.exe

c:\documents and settings\Jean\Application Data\drivers\downld\16461420.exe

c:\documents and settings\Jean\Application Data\drivers\downld\16471945.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1647338.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1654108.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1654779.exe

c:\documents and settings\Jean\Application Data\drivers\downld\16609363.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1664873.exe

c:\documents and settings\Jean\Application Data\drivers\downld\16653676.exe

c:\documents and settings\Jean\Application Data\drivers\downld\16662269.exe

c:\documents and settings\Jean\Application Data\drivers\downld\16668718.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1668699.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1669009.exe

c:\documents and settings\Jean\Application Data\drivers\downld\16726120.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1677151.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1679254.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1680937.exe

c:\documents and settings\Jean\Application Data\drivers\downld\16810071.exe

c:\documents and settings\Jean\Application Data\drivers\downld\16810151.exe

c:\documents and settings\Jean\Application Data\drivers\downld\16810191.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1681567.exe

c:\documents and settings\Jean\Application Data\drivers\downld\16839644.exe

c:\documents and settings\Jean\Application Data\drivers\downld\16839694.exe

c:\documents and settings\Jean\Application Data\drivers\downld\16839754.exe

c:\documents and settings\Jean\Application Data\drivers\downld\16881354.exe

c:\documents and settings\Jean\Application Data\drivers\downld\16882635.exe

c:\documents and settings\Jean\Application Data\drivers\downld\16882966.exe

c:\documents and settings\Jean\Application Data\drivers\downld\16890327.exe

c:\documents and settings\Jean\Application Data\drivers\downld\16892530.exe

c:\documents and settings\Jean\Application Data\drivers\downld\16894302.exe

c:\documents and settings\Jean\Application Data\drivers\downld\169613.exe

c:\documents and settings\Jean\Application Data\drivers\downld\17132995.exe

c:\documents and settings\Jean\Application Data\drivers\downld\17134327.exe

c:\documents and settings\Jean\Application Data\drivers\downld\17134498.exe

c:\documents and settings\Jean\Application Data\drivers\downld\17135018.exe

c:\documents and settings\Jean\Application Data\drivers\downld\17135149.exe

c:\documents and settings\Jean\Application Data\drivers\downld\17173033.exe

c:\documents and settings\Jean\Application Data\drivers\downld\17175086.exe

c:\documents and settings\Jean\Application Data\drivers\downld\17175457.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1725761.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1725771.exe

c:\documents and settings\Jean\Application Data\drivers\downld\17274178.exe

c:\documents and settings\Jean\Application Data\drivers\downld\17274219.exe

c:\documents and settings\Jean\Application Data\drivers\downld\17274239.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1728705.exe

c:\documents and settings\Jean\Application Data\drivers\downld\17299214.exe

c:\documents and settings\Jean\Application Data\drivers\downld\17301988.exe

c:\documents and settings\Jean\Application Data\drivers\downld\17303611.exe

c:\documents and settings\Jean\Application Data\drivers\downld\17376606.exe

c:\documents and settings\Jean\Application Data\drivers\downld\17380071.exe

c:\documents and settings\Jean\Application Data\drivers\downld\17382064.exe

c:\documents and settings\Jean\Application Data\drivers\downld\17407210.exe

c:\documents and settings\Jean\Application Data\drivers\downld\17417495.exe

c:\documents and settings\Jean\Application Data\drivers\downld\17418206.exe

c:\documents and settings\Jean\Application Data\drivers\downld\174250.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1758318.exe

c:\documents and settings\Jean\Application Data\drivers\downld\176403.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1764487.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1766860.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1767611.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1784215.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1796022.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1796563.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1804324.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1823582.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1842399.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1853795.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1856549.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1857180.exe

c:\documents and settings\Jean\Application Data\drivers\downld\191605.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1919490.exe

c:\documents and settings\Jean\Application Data\drivers\downld\192426.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1936564.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1938607.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1962011.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1971474.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1973858.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1974008.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1974188.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1974429.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1974719.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1975670.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1975700.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2044419.exe

c:\documents and settings\Jean\Application Data\drivers\downld\204704.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2064849.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2067713.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2068995.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2069185.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2073932.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2075724.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2109693.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2109963.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2116643.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2118275.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2119447.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2123813.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2126537.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2126798.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2127348.exe

c:\documents and settings\Jean\Application Data\drivers\downld\214007.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2143191.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2143231.exe

c:\documents and settings\Jean\Application Data\drivers\downld\216631.exe

c:\documents and settings\Jean\Application Data\drivers\downld\231102.exe

c:\documents and settings\Jean\Application Data\drivers\downld\23589009.exe

c:\documents and settings\Jean\Application Data\drivers\downld\23597751.exe

c:\documents and settings\Jean\Application Data\drivers\downld\23633683.exe

c:\documents and settings\Jean\Application Data\drivers\downld\238032.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2395875.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2398729.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2399780.exe

c:\documents and settings\Jean\Application Data\drivers\downld\243960.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2455430.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2459095.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2460467.exe

c:\documents and settings\Jean\Application Data\drivers\downld\249358.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2497581.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2499584.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2499614.exe

c:\documents and settings\Jean\Application Data\drivers\downld\251431.exe

c:\documents and settings\Jean\Application Data\drivers\downld\260174.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2606227.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2608010.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2639184.exe

c:\documents and settings\Jean\Application Data\drivers\downld\264780.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2660986.exe

c:\documents and settings\Jean\Application Data\drivers\downld\266212.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2670409.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2694614.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2697588.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2698179.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2699051.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2722524.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2723516.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2724417.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2750775.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2752407.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2771224.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2774779.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2775360.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2776482.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2782841.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2785525.exe

c:\documents and settings\Jean\Application Data\drivers\downld\27986852.exe

c:\documents and settings\Jean\Application Data\drivers\downld\28047580.exe

c:\documents and settings\Jean\Application Data\drivers\downld\28048551.exe

c:\documents and settings\Jean\Application Data\drivers\downld\28048671.exe

c:\documents and settings\Jean\Application Data\drivers\downld\28085214.exe

c:\documents and settings\Jean\Application Data\drivers\downld\28096260.exe

c:\documents and settings\Jean\Application Data\drivers\downld\28096280.exe

c:\documents and settings\Jean\Application Data\drivers\downld\28176585.exe

c:\documents and settings\Jean\Application Data\drivers\downld\28184106.exe

c:\documents and settings\Jean\Application Data\drivers\downld\28184617.exe

c:\documents and settings\Jean\Application Data\drivers\downld\28198006.exe

c:\documents and settings\Jean\Application Data\drivers\downld\28203814.exe

c:\documents and settings\Jean\Application Data\drivers\downld\28205817.exe

c:\documents and settings\Jean\Application Data\drivers\downld\282115.exe

c:\documents and settings\Jean\Application Data\drivers\downld\28490016.exe

c:\documents and settings\Jean\Application Data\drivers\downld\28492399.exe

c:\documents and settings\Jean\Application Data\drivers\downld\28492680.exe

c:\documents and settings\Jean\Application Data\drivers\downld\28493631.exe

c:\documents and settings\Jean\Application Data\drivers\downld\28502484.exe

c:\documents and settings\Jean\Application Data\drivers\downld\28502504.exe

c:\documents and settings\Jean\Application Data\drivers\downld\28564984.exe

c:\documents and settings\Jean\Application Data\drivers\downld\28566876.exe

c:\documents and settings\Jean\Application Data\drivers\downld\28567247.exe

c:\documents and settings\Jean\Application Data\drivers\downld\28719816.exe

c:\documents and settings\Jean\Application Data\drivers\downld\28724964.exe

c:\documents and settings\Jean\Application Data\drivers\downld\28725024.exe

c:\documents and settings\Jean\Application Data\drivers\downld\28755358.exe

c:\documents and settings\Jean\Application Data\drivers\downld\28764901.exe

c:\documents and settings\Jean\Application Data\drivers\downld\28766604.exe

c:\documents and settings\Jean\Application Data\drivers\downld\297457.exe

c:\documents and settings\Jean\Application Data\drivers\downld\299560.exe

c:\documents and settings\Jean\Application Data\drivers\downld\30226723.exe

c:\documents and settings\Jean\Application Data\drivers\downld\30236537.exe

c:\documents and settings\Jean\Application Data\drivers\downld\30237859.exe

c:\documents and settings\Jean\Application Data\drivers\downld\30256216.exe

c:\documents and settings\Jean\Application Data\drivers\downld\30260271.exe

c:\documents and settings\Jean\Application Data\drivers\downld\30261013.exe

c:\documents and settings\Jean\Application Data\drivers\downld\304517.exe

c:\documents and settings\Jean\Application Data\drivers\downld\307552.exe

c:\documents and settings\Jean\Application Data\drivers\downld\307642.exe

c:\documents and settings\Jean\Application Data\drivers\downld\307972.exe

c:\documents and settings\Jean\Application Data\drivers\downld\309174.exe

c:\documents and settings\Jean\Application Data\drivers\downld\309234.exe

c:\documents and settings\Jean\Application Data\drivers\downld\309495.exe

c:\documents and settings\Jean\Application Data\drivers\downld\310216.exe

c:\documents and settings\Jean\Application Data\drivers\downld\310326.exe

c:\documents and settings\Jean\Application Data\drivers\downld\310656.exe

c:\documents and settings\Jean\Application Data\drivers\downld\311758.exe

c:\documents and settings\Jean\Application Data\drivers\downld\311818.exe

c:\documents and settings\Jean\Application Data\drivers\downld\312038.exe

c:\documents and settings\Jean\Application Data\drivers\downld\313060.exe

c:\documents and settings\Jean\Application Data\drivers\downld\313160.exe

c:\documents and settings\Jean\Application Data\drivers\downld\313380.exe

c:\documents and settings\Jean\Application Data\drivers\downld\314001.exe

c:\documents and settings\Jean\Application Data\drivers\downld\314061.exe

c:\documents and settings\Jean\Application Data\drivers\downld\314362.exe

c:\documents and settings\Jean\Application Data\drivers\downld\315203.exe

c:\documents and settings\Jean\Application Data\drivers\downld\315263.exe

c:\documents and settings\Jean\Application Data\drivers\downld\315613.exe

c:\documents and settings\Jean\Application Data\drivers\downld\316465.exe

c:\documents and settings\Jean\Application Data\drivers\downld\316525.exe

c:\documents and settings\Jean\Application Data\drivers\downld\316745.exe

c:\documents and settings\Jean\Application Data\drivers\downld\319809.exe

c:\documents and settings\Jean\Application Data\drivers\downld\319869.exe

c:\documents and settings\Jean\Application Data\drivers\downld\320180.exe

c:\documents and settings\Jean\Application Data\drivers\downld\321121.exe

c:\documents and settings\Jean\Application Data\drivers\downld\321181.exe

c:\documents and settings\Jean\Application Data\drivers\downld\321472.exe

c:\documents and settings\Jean\Application Data\drivers\downld\322313.exe

c:\documents and settings\Jean\Application Data\drivers\downld\322373.exe

c:\documents and settings\Jean\Application Data\drivers\downld\322633.exe

c:\documents and settings\Jean\Application Data\drivers\downld\323685.exe

c:\documents and settings\Jean\Application Data\drivers\downld\323765.exe

c:\documents and settings\Jean\Application Data\drivers\downld\323875.exe

c:\documents and settings\Jean\Application Data\drivers\downld\324005.exe

c:\documents and settings\Jean\Application Data\drivers\downld\324997.exe

c:\documents and settings\Jean\Application Data\drivers\downld\325057.exe

c:\documents and settings\Jean\Application Data\drivers\downld\325337.exe

c:\documents and settings\Jean\Application Data\drivers\downld\326128.exe

c:\documents and settings\Jean\Application Data\drivers\downld\326249.exe

c:\documents and settings\Jean\Application Data\drivers\downld\326469.exe

c:\documents and settings\Jean\Application Data\drivers\downld\327080.exe

c:\documents and settings\Jean\Application Data\drivers\downld\3309799.exe

c:\documents and settings\Jean\Application Data\drivers\downld\3314896.exe

c:\documents and settings\Jean\Application Data\drivers\downld\3315457.exe

c:\documents and settings\Jean\Application Data\drivers\downld\3335325.exe

c:\documents and settings\Jean\Application Data\drivers\downld\3338830.exe

c:\documents and settings\Jean\Application Data\drivers\downld\3346922.exe

c:\documents and settings\Jean\Application Data\drivers\downld\335161.exe

c:\documents and settings\Jean\Application Data\drivers\downld\339658.exe

c:\documents and settings\Jean\Application Data\drivers\downld\340249.exe

c:\documents and settings\Jean\Application Data\drivers\downld\342021.exe

c:\documents and settings\Jean\Application Data\drivers\downld\342081.exe

c:\documents and settings\Jean\Application Data\drivers\downld\342362.exe

c:\documents and settings\Jean\Application Data\drivers\downld\342983.exe

c:\documents and settings\Jean\Application Data\drivers\downld\343043.exe

c:\documents and settings\Jean\Application Data\drivers\downld\343283.exe

c:\documents and settings\Jean\Application Data\drivers\downld\343614.exe

c:\documents and settings\Jean\Application Data\drivers\downld\343864.exe

c:\documents and settings\Jean\Application Data\drivers\downld\343924.exe

c:\documents and settings\Jean\Application Data\drivers\downld\344265.exe

c:\documents and settings\Jean\Application Data\drivers\downld\344885.exe

c:\documents and settings\Jean\Application Data\drivers\downld\345056.exe

c:\documents and settings\Jean\Application Data\drivers\downld\345316.exe

c:\documents and settings\Jean\Application Data\drivers\downld\345987.exe

c:\documents and settings\Jean\Application Data\drivers\downld\346097.exe

c:\documents and settings\Jean\Application Data\drivers\downld\346378.exe

c:\documents and settings\Jean\Application Data\drivers\downld\347119.exe

c:\documents and settings\Jean\Application Data\drivers\downld\347239.exe

c:\documents and settings\Jean\Application Data\drivers\downld\347329.exe

c:\documents and settings\Jean\Application Data\drivers\downld\347349.exe

c:\documents and settings\Jean\Application Data\drivers\downld\347489.exe

c:\documents and settings\Jean\Application Data\drivers\downld\348380.exe

c:\documents and settings\Jean\Application Data\drivers\downld\348441.exe

c:\documents and settings\Jean\Application Data\drivers\downld\348701.exe

c:\documents and settings\Jean\Application Data\drivers\downld\349382.exe

c:\documents and settings\Jean\Application Data\drivers\downld\349442.exe

c:\documents and settings\Jean\Application Data\drivers\downld\349722.exe

c:\documents and settings\Jean\Application Data\drivers\downld\349933.exe

c:\documents and settings\Jean\Application Data\drivers\downld\350403.exe

c:\documents and settings\Jean\Application Data\drivers\downld\350503.exe

c:\documents and settings\Jean\Application Data\drivers\downld\350734.exe

c:\documents and settings\Jean\Application Data\drivers\downld\350844.exe

c:\documents and settings\Jean\Application Data\drivers\downld\351755.exe

c:\documents and settings\Jean\Application Data\drivers\downld\351815.exe

c:\documents and settings\Jean\Application Data\drivers\downld\352076.exe

c:\documents and settings\Jean\Application Data\drivers\downld\352757.exe

c:\documents and settings\Jean\Application Data\drivers\downld\352867.exe

c:\documents and settings\Jean\Application Data\drivers\downld\353157.exe

c:\documents and settings\Jean\Application Data\drivers\downld\353848.exe

c:\documents and settings\Jean\Application Data\drivers\downld\353898.exe

c:\documents and settings\Jean\Application Data\drivers\downld\353958.exe

c:\documents and settings\Jean\Application Data\drivers\downld\354269.exe

c:\documents and settings\Jean\Application Data\drivers\downld\355040.exe

c:\documents and settings\Jean\Application Data\drivers\downld\355120.exe

c:\documents and settings\Jean\Application Data\drivers\downld\355340.exe

c:\documents and settings\Jean\Application Data\drivers\downld\356001.exe

c:\documents and settings\Jean\Application Data\drivers\downld\356102.exe

c:\documents and settings\Jean\Application Data\drivers\downld\356382.exe

c:\documents and settings\Jean\Application Data\drivers\downld\357003.exe

c:\documents and settings\Jean\Application Data\drivers\downld\357103.exe

c:\documents and settings\Jean\Application Data\drivers\downld\357323.exe

c:\documents and settings\Jean\Application Data\drivers\downld\357914.exe

c:\documents and settings\Jean\Application Data\drivers\downld\357974.exe

c:\documents and settings\Jean\Application Data\drivers\downld\358285.exe

c:\documents and settings\Jean\Application Data\drivers\downld\359086.exe

c:\documents and settings\Jean\Application Data\drivers\downld\359146.exe

c:\documents and settings\Jean\Application Data\drivers\downld\359366.exe

c:\documents and settings\Jean\Application Data\drivers\downld\360037.exe

c:\documents and settings\Jean\Application Data\drivers\downld\360117.exe

c:\documents and settings\Jean\Application Data\drivers\downld\360438.exe

c:\documents and settings\Jean\Application Data\drivers\downld\361099.exe

c:\documents and settings\Jean\Application Data\drivers\downld\361179.exe

c:\documents and settings\Jean\Application Data\drivers\downld\361449.exe

c:\documents and settings\Jean\Application Data\drivers\downld\361960.exe

c:\documents and settings\Jean\Application Data\drivers\downld\362020.exe

c:\documents and settings\Jean\Application Data\drivers\downld\362300.exe

c:\documents and settings\Jean\Application Data\drivers\downld\362981.exe

c:\documents and settings\Jean\Application Data\drivers\downld\363042.exe

c:\documents and settings\Jean\Application Data\drivers\downld\3632703.exe

c:\documents and settings\Jean\Application Data\drivers\downld\363282.exe

c:\documents and settings\Jean\Application Data\drivers\downld\3634586.exe

c:\documents and settings\Jean\Application Data\drivers\downld\3634886.exe

c:\documents and settings\Jean\Application Data\drivers\downld\3635597.exe

c:\documents and settings\Jean\Application Data\drivers\downld\3636749.exe

c:\documents and settings\Jean\Application Data\drivers\downld\3636779.exe

c:\documents and settings\Jean\Application Data\drivers\downld\363853.exe

c:\documents and settings\Jean\Application Data\drivers\downld\363913.exe

c:\documents and settings\Jean\Application Data\drivers\downld\364223.exe

c:\documents and settings\Jean\Application Data\drivers\downld\365004.exe

c:\documents and settings\Jean\Application Data\drivers\downld\365104.exe

c:\documents and settings\Jean\Application Data\drivers\downld\365345.exe

c:\documents and settings\Jean\Application Data\drivers\downld\3708953.exe

c:\documents and settings\Jean\Application Data\drivers\downld\3710695.exe

c:\documents and settings\Jean\Application Data\drivers\downld\3711106.exe

c:\documents and settings\Jean\Application Data\drivers\downld\371414.exe

c:\documents and settings\Jean\Application Data\drivers\downld\372024.exe

c:\documents and settings\Jean\Application Data\drivers\downld\372085.exe

c:\documents and settings\Jean\Application Data\drivers\downld\372325.exe

c:\documents and settings\Jean\Application Data\drivers\downld\373386.exe

c:\documents and settings\Jean\Application Data\drivers\downld\373457.exe

c:\documents and settings\Jean\Application Data\drivers\downld\373697.exe

c:\documents and settings\Jean\Application Data\drivers\downld\374488.exe

c:\documents and settings\Jean\Application Data\drivers\downld\374658.exe

c:\documents and settings\Jean\Application Data\drivers\downld\374999.exe

c:\documents and settings\Jean\Application Data\drivers\downld\375910.exe

c:\documents and settings\Jean\Application Data\drivers\downld\376050.exe

c:\documents and settings\Jean\Application Data\drivers\downld\376401.exe

c:\documents and settings\Jean\Application Data\drivers\downld\377132.exe

c:\documents and settings\Jean\Application Data\drivers\downld\377252.exe

c:\documents and settings\Jean\Application Data\drivers\downld\377552.exe

c:\documents and settings\Jean\Application Data\drivers\downld\378334.exe

c:\documents and settings\Jean\Application Data\drivers\downld\378414.exe

c:\documents and settings\Jean\Application Data\drivers\downld\378634.exe

c:\documents and settings\Jean\Application Data\drivers\downld\379555.exe

c:\documents and settings\Jean\Application Data\drivers\downld\379645.exe

c:\documents and settings\Jean\Application Data\drivers\downld\379906.exe

c:\documents and settings\Jean\Application Data\drivers\downld\380667.exe

c:\documents and settings\Jean\Application Data\drivers\downld\380727.exe

c:\documents and settings\Jean\Application Data\drivers\downld\381067.exe

c:\documents and settings\Jean\Application Data\drivers\downld\381839.exe

c:\documents and settings\Jean\Application Data\drivers\downld\381899.exe

c:\documents and settings\Jean\Application Data\drivers\downld\382159.exe

c:\documents and settings\Jean\Application Data\drivers\downld\383060.exe

c:\documents and settings\Jean\Application Data\drivers\downld\383120.exe

c:\documents and settings\Jean\Application Data\drivers\downld\383341.exe

c:\documents and settings\Jean\Application Data\drivers\downld\384052.exe

c:\documents and settings\Jean\Application Data\drivers\downld\384152.exe

c:\documents and settings\Jean\Application Data\drivers\downld\384412.exe

c:\documents and settings\Jean\Application Data\drivers\downld\385173.exe

c:\documents and settings\Jean\Application Data\drivers\downld\385253.exe

c:\documents and settings\Jean\Application Data\drivers\downld\385574.exe

c:\documents and settings\Jean\Application Data\drivers\downld\386435.exe

c:\documents and settings\Jean\Application Data\drivers\downld\386535.exe

c:\documents and settings\Jean\Application Data\drivers\downld\386866.exe

c:\documents and settings\Jean\Application Data\drivers\downld\387817.exe

c:\documents and settings\Jean\Application Data\drivers\downld\387897.exe

c:\documents and settings\Jean\Application Data\drivers\downld\388238.exe

c:\documents and settings\Jean\Application Data\drivers\downld\389109.exe

c:\documents and settings\Jean\Application Data\drivers\downld\389229.exe

c:\documents and settings\Jean\Application Data\drivers\downld\389480.exe

c:\documents and settings\Jean\Application Data\drivers\downld\390241.exe

c:\documents and settings\Jean\Application Data\drivers\downld\390291.exe

c:\documents and settings\Jean\Application Data\drivers\downld\390391.exe

c:\documents and settings\Jean\Application Data\drivers\downld\390631.exe

c:\documents and settings\Jean\Application Data\drivers\downld\391312.exe

c:\documents and settings\Jean\Application Data\drivers\downld\391372.exe

c:\documents and settings\Jean\Application Data\drivers\downld\391482.exe

c:\documents and settings\Jean\Application Data\drivers\downld\391793.exe

c:\documents and settings\Jean\Application Data\drivers\downld\394617.exe

c:\documents and settings\Jean\Application Data\drivers\downld\394677.exe

c:\documents and settings\Jean\Application Data\drivers\downld\395018.exe

c:\documents and settings\Jean\Application Data\drivers\downld\395598.exe

c:\documents and settings\Jean\Application Data\drivers\downld\395708.exe

c:\documents and settings\Jean\Application Data\drivers\downld\395809.exe

c:\documents and settings\Jean\Application Data\drivers\downld\396039.exe

c:\documents and settings\Jean\Application Data\drivers\downld\396850.exe

c:\documents and settings\Jean\Application Data\drivers\downld\396990.exe

c:\documents and settings\Jean\Application Data\drivers\downld\397191.exe

c:\documents and settings\Jean\Application Data\drivers\downld\397251.exe

c:\documents and settings\Jean\Application Data\drivers\downld\398112.exe

c:\documents and settings\Jean\Application Data\drivers\downld\398192.exe

c:\documents and settings\Jean\Application Data\drivers\downld\398493.exe

c:\documents and settings\Jean\Application Data\drivers\downld\399274.exe

c:\documents and settings\Jean\Application Data\drivers\downld\399354.exe

c:\documents and settings\Jean\Application Data\drivers\downld\399674.exe

c:\documents and settings\Jean\Application Data\drivers\downld\400636.exe

c:\documents and settings\Jean\Application Data\drivers\downld\400736.exe

c:\documents and settings\Jean\Application Data\drivers\downld\401036.exe

c:\documents and settings\Jean\Application Data\drivers\downld\401697.exe

c:\documents and settings\Jean\Application Data\drivers\downld\401737.exe

c:\documents and settings\Jean\Application Data\drivers\downld\401867.exe

c:\documents and settings\Jean\Application Data\drivers\downld\402308.exe

c:\documents and settings\Jean\Application Data\drivers\downld\402358.exe

c:\documents and settings\Jean\Application Data\drivers\downld\402478.exe

c:\documents and settings\Jean\Application Data\drivers\downld\402869.exe

c:\documents and settings\Jean\Application Data\drivers\downld\402879.exe

c:\documents and settings\Jean\Application Data\drivers\downld\402999.exe

c:\documents and settings\Jean\Application Data\drivers\downld\403440.exe

c:\documents and settings\Jean\Application Data\drivers\downld\403550.exe

c:\documents and settings\Jean\Application Data\drivers\downld\403770.exe

c:\documents and settings\Jean\Application Data\drivers\downld\404471.exe

c:\documents and settings\Jean\Application Data\drivers\downld\404531.exe

c:\documents and settings\Jean\Application Data\drivers\downld\404872.exe

c:\documents and settings\Jean\Application Data\drivers\downld\405573.exe

c:\documents and settings\Jean\Application Data\drivers\downld\405643.exe

c:\documents and settings\Jean\Application Data\drivers\downld\405933.exe

c:\documents and settings\Jean\Application Data\drivers\downld\406704.exe

c:\documents and settings\Jean\Application Data\drivers\downld\406764.exe

c:\documents and settings\Jean\Application Data\drivers\downld\406885.exe

c:\documents and settings\Jean\Application Data\drivers\downld\406985.exe

c:\documents and settings\Jean\Application Data\drivers\downld\407205.exe

c:\documents and settings\Jean\Application Data\drivers\downld\408907.exe

c:\documents and settings\Jean\Application Data\drivers\downld\409789.exe

c:\documents and settings\Jean\Application Data\drivers\downld\409869.exe

c:\documents and settings\Jean\Application Data\drivers\downld\410209.exe

c:\documents and settings\Jean\Application Data\drivers\downld\410500.exe

c:\documents and settings\Jean\Application Data\drivers\downld\411091.exe

c:\documents and settings\Jean\Application Data\drivers\downld\411171.exe

c:\documents and settings\Jean\Application Data\drivers\downld\411331.exe

c:\documents and settings\Jean\Application Data\drivers\downld\411511.exe

c:\documents and settings\Jean\Application Data\drivers\downld\4116469.exe

c:\documents and settings\Jean\Application Data\drivers\downld\4118652.exe

c:\documents and settings\Jean\Application Data\drivers\downld\4118692.exe

c:\documents and settings\Jean\Application Data\drivers\downld\412292.exe

c:\documents and settings\Jean\Application Data\drivers\downld\412372.exe

c:\documents and settings\Jean\Application Data\drivers\downld\413985.exe

c:\documents and settings\Jean\Application Data\drivers\downld\4143277.exe

c:\documents and settings\Jean\Application Data\drivers\downld\4145931.exe

c:\documents and settings\Jean\Application Data\drivers\downld\4150217.exe

c:\documents and settings\Jean\Application Data\drivers\downld\416669.exe

c:\documents and settings\Jean\Application Data\drivers\downld\4226317.exe

c:\documents and settings\Jean\Application Data\drivers\downld\4233116.exe

c:\documents and settings\Jean\Application Data\drivers\downld\4233988.exe

c:\documents and settings\Jean\Application Data\drivers\downld\4250612.exe

c:\documents and settings\Jean\Application Data\drivers\downld\4260025.exe

c:\documents and settings\Jean\Application Data\drivers\downld\4260616.exe

c:\documents and settings\Jean\Application Data\drivers\downld\429317.exe

c:\documents and settings\Jean\Application Data\drivers\downld\438069.exe

c:\documents and settings\Jean\Application Data\drivers\downld\443087.exe

c:\documents and settings\Jean\Application Data\drivers\downld\455975.exe

c:\documents and settings\Jean\Application Data\drivers\downld\456836.exe

c:\documents and settings\Jean\Application Data\drivers\downld\456917.exe

c:\documents and settings\Jean\Application Data\drivers\downld\464908.exe

c:\documents and settings\Jean\Application Data\drivers\downld\4660231.exe

c:\documents and settings\Jean\Application Data\drivers\downld\4665839.exe

c:\documents and settings\Jean\Application Data\drivers\downld\4666109.exe

c:\documents and settings\Jean\Application Data\drivers\downld\467181.exe

c:\documents and settings\Jean\Application Data\drivers\downld\4674151.exe

c:\documents and settings\Jean\Application Data\drivers\downld\467592.exe

c:\documents and settings\Jean\Application Data\drivers\downld\4676774.exe

c:\documents and settings\Jean\Application Data\drivers\downld\4678517.exe

c:\documents and settings\Jean\Application Data\drivers\downld\4902078.exe

c:\documents and settings\Jean\Application Data\drivers\downld\4903350.exe

c:\documents and settings\Jean\Application Data\drivers\downld\4903570.exe

c:\documents and settings\Jean\Application Data\drivers\downld\4904061.exe

c:\documents and settings\Jean\Application Data\drivers\downld\4905413.exe

c:\documents and settings\Jean\Application Data\drivers\downld\4905423.exe

c:\documents and settings\Jean\Application Data\drivers\downld\4945411.exe

c:\documents and settings\Jean\Application Data\drivers\downld\4946512.exe

c:\documents and settings\Jean\Application Data\drivers\downld\4946682.exe

c:\documents and settings\Jean\Application Data\drivers\downld\495422.exe

c:\documents and settings\Jean\Application Data\drivers\downld\4993259.exe

c:\documents and settings\Jean\Application Data\drivers\downld\499438.exe

c:\documents and settings\Jean\Application Data\drivers\downld\499458.exe

c:\documents and settings\Jean\Application Data\drivers\downld\4995072.exe

c:\documents and settings\Jean\Application Data\drivers\downld\4995362.exe

c:\documents and settings\Jean\Application Data\drivers\downld\4995973.exe

c:\documents and settings\Jean\Application Data\drivers\downld\5011906.exe

c:\documents and settings\Jean\Application Data\drivers\downld\514429.exe

c:\documents and settings\Jean\Application Data\drivers\downld\515210.exe

c:\documents and settings\Jean\Application Data\drivers\downld\515240.exe

c:\documents and settings\Jean\Application Data\drivers\downld\5155312.exe

c:\documents and settings\Jean\Application Data\drivers\downld\524814.exe

c:\documents and settings\Jean\Application Data\drivers\downld\5255647.exe

c:\documents and settings\Jean\Application Data\drivers\downld\5260103.exe

c:\documents and settings\Jean\Application Data\drivers\downld\5261275.exe

c:\documents and settings\Jean\Application Data\drivers\downld\531324.exe

c:\documents and settings\Jean\Application Data\drivers\downld\532685.exe

c:\documents and settings\Jean\Application Data\drivers\downld\532716.exe

c:\documents and settings\Jean\Application Data\drivers\downld\539135.exe

c:\documents and settings\Jean\Application Data\drivers\downld\540116.exe

c:\documents and settings\Jean\Application Data\drivers\downld\540136.exe

c:\documents and settings\Jean\Application Data\drivers\downld\5407475.exe

c:\documents and settings\Jean\Application Data\drivers\downld\5410189.exe

c:\documents and settings\Jean\Application Data\drivers\downld\5411531.exe

c:\documents and settings\Jean\Application Data\drivers\downld\547707.exe

c:\documents and settings\Jean\Application Data\drivers\downld\549610.exe

c:\documents and settings\Jean\Application Data\drivers\downld\549990.exe

c:\documents and settings\Jean\Application Data\drivers\downld\551382.exe

c:\documents and settings\Jean\Application Data\drivers\downld\5525525.exe

c:\documents and settings\Jean\Application Data\drivers\downld\552594.exe

c:\documents and settings\Jean\Application Data\drivers\downld\552654.exe

c:\documents and settings\Jean\Application Data\drivers\downld\5529280.exe

c:\documents and settings\Jean\Application Data\drivers\downld\5529360.exe

c:\documents and settings\Jean\Application Data\drivers\downld\557581.exe

c:\documents and settings\Jean\Application Data\drivers\downld\570119.exe

c:\documents and settings\Jean\Application Data\drivers\downld\5704062.exe

c:\documents and settings\Jean\Application Data\drivers\downld\5713445.exe

c:\documents and settings\Jean\Application Data\drivers\downld\5713956.exe

c:\documents and settings\Jean\Application Data\drivers\downld\572533.exe

c:\documents and settings\Jean\Application Data\drivers\downld\5729889.exe

c:\documents and settings\Jean\Application Data\drivers\downld\5735357.exe

c:\documents and settings\Jean\Application Data\drivers\downld\5742006.exe

c:\documents and settings\Jean\Application Data\drivers\downld\578361.exe

c:\documents and settings\Jean\Application Data\drivers\downld\578371.exe

c:\documents and settings\Jean\Application Data\drivers\downld\580284.exe

c:\documents and settings\Jean\Application Data\drivers\downld\581185.exe

c:\documents and settings\Jean\Application Data\drivers\downld\581245.exe

c:\documents and settings\Jean\Application Data\drivers\downld\581546.exe

c:\documents and settings\Jean\Application Data\drivers\downld\582477.exe

c:\documents and settings\Jean\Application Data\drivers\downld\582537.exe

c:\documents and settings\Jean\Application Data\drivers\downld\582878.exe

c:\documents and settings\Jean\Application Data\drivers\downld\583809.exe

c:\documents and settings\Jean\Application Data\drivers\downld\583849.exe

c:\documents and settings\Jean\Application Data\drivers\downld\583949.exe

c:\documents and settings\Jean\Application Data\drivers\downld\584290.exe

c:\documents and settings\Jean\Application Data\drivers\downld\584490.exe

c:\documents and settings\Jean\Application Data\drivers\downld\584600.exe

c:\documents and settings\Jean\Application Data\drivers\downld\584881.exe

c:\documents and settings\Jean\Application Data\drivers\downld\584891.exe

c:\documents and settings\Jean\Application Data\drivers\downld\584991.exe

c:\documents and settings\Jean\Application Data\drivers\downld\585181.exe

c:\documents and settings\Jean\Application Data\drivers\downld\585191.exe

c:\documents and settings\Jean\Application Data\drivers\downld\585321.exe

c:\documents and settings\Jean\Application Data\drivers\downld\586463.exe

c:\documents and settings\Jean\Application Data\drivers\downld\586533.exe

c:\documents and settings\Jean\Application Data\drivers\downld\586753.exe

c:\documents and settings\Jean\Application Data\drivers\downld\587114.exe

c:\documents and settings\Jean\Application Data\drivers\downld\587124.exe

c:\documents and settings\Jean\Application Data\drivers\downld\587294.exe

c:\documents and settings\Jean\Application Data\drivers\downld\587975.exe

c:\documents and settings\Jean\Application Data\drivers\downld\588055.exe

c:\documents and settings\Jean\Application Data\drivers\downld\588155.exe

c:\documents and settings\Jean\Application Data\drivers\downld\588446.exe

c:\documents and settings\Jean\Application Data\drivers\downld\588516.exe

c:\documents and settings\Jean\Application Data\drivers\downld\588646.exe

c:\documents and settings\Jean\Application Data\drivers\downld\589157.exe

c:\documents and settings\Jean\Application Data\drivers\downld\589187.exe

c:\documents and settings\Jean\Application Data\drivers\downld\589287.exe

c:\documents and settings\Jean\Application Data\drivers\downld\589587.exe

c:\documents and settings\Jean\Application Data\drivers\downld\589627.exe

c:\documents and settings\Jean\Application Data\drivers\downld\589727.exe

c:\documents and settings\Jean\Application Data\drivers\downld\590949.exe

c:\documents and settings\Jean\Application Data\drivers\downld\591059.exe

c:\documents and settings\Jean\Application Data\drivers\downld\591220.exe

c:\documents and settings\Jean\Application Data\drivers\downld\591560.exe

c:\documents and settings\Jean\Application Data\drivers\downld\591580.exe

c:\documents and settings\Jean\Application Data\drivers\downld\591690.exe

c:\documents and settings\Jean\Application Data\drivers\downld\592431.exe

c:\documents and settings\Jean\Application Data\drivers\downld\592632.exe

c:\documents and settings\Jean\Application Data\drivers\downld\592722.exe

c:\documents and settings\Jean\Application Data\drivers\downld\592892.exe

c:\documents and settings\Jean\Application Data\drivers\downld\593273.exe

c:\documents and settings\Jean\Application Data\drivers\downld\593283.exe

c:\documents and settings\Jean\Application Data\drivers\downld\593493.exe

c:\documents and settings\Jean\Application Data\drivers\downld\594094.exe

c:\documents and settings\Jean\Application Data\drivers\downld\594144.exe

c:\documents and settings\Jean\Application Data\drivers\downld\594274.exe

c:\documents and settings\Jean\Application Data\drivers\downld\594735.exe

c:\documents and settings\Jean\Application Data\drivers\downld\594775.exe

c:\documents and settings\Jean\Application Data\drivers\downld\594935.exe

c:\documents and settings\Jean\Application Data\drivers\downld\595616.exe

c:\documents and settings\Jean\Application Data\drivers\downld\595696.exe

c:\documents and settings\Jean\Application Data\drivers\downld\596067.exe

c:\documents and settings\Jean\Application Data\drivers\downld\596267.exe

c:\documents and settings\Jean\Application Data\drivers\downld\596948.exe

c:\documents and settings\Jean\Application Data\drivers\downld\597008.exe

c:\documents and settings\Jean\Application Data\drivers\downld\597108.exe

c:\documents and settings\Jean\Application Data\drivers\downld\597649.exe

c:\documents and settings\Jean\Application Data\drivers\downld\597679.exe

c:\documents and settings\Jean\Application Data\drivers\downld\597859.exe

c:\documents and settings\Jean\Application Data\drivers\downld\597919.exe

c:\documents and settings\Jean\Application Data\drivers\downld\597999.exe

c:\documents and settings\Jean\Application Data\drivers\downld\598510.exe

c:\documents and settings\Jean\Application Data\drivers\downld\598550.exe

c:\documents and settings\Jean\Application Data\drivers\downld\598811.exe

c:\documents and settings\Jean\Application Data\drivers\downld\599662.exe

c:\documents and settings\Jean\Application Data\drivers\downld\599742.exe

c:\documents and settings\Jean\Application Data\drivers\downld\600062.exe

c:\documents and settings\Jean\Application Data\drivers\downld\600363.exe

c:\documents and settings\Jean\Application Data\drivers\downld\600433.exe

c:\documents and settings\Jean\Application Data\drivers\downld\600533.exe

c:\documents and settings\Jean\Application Data\drivers\downld\603497.exe

c:\documents and settings\Jean\Application Data\drivers\downld\603597.exe

c:\documents and settings\Jean\Application Data\drivers\downld\603828.exe

c:\documents and settings\Jean\Application Data\drivers\downld\604569.exe

c:\documents and settings\Jean\Application Data\drivers\downld\604699.exe

c:\documents and settings\Jean\Application Data\drivers\downld\604939.exe

c:\documents and settings\Jean\Application Data\drivers\downld\6055517.exe

c:\documents and settings\Jean\Application Data\drivers\downld\605610.exe

c:\documents and settings\Jean\Application Data\drivers\downld\605710.exe

c:\documents and settings\Jean\Application Data\drivers\downld\606021.exe

c:\documents and settings\Jean\Application Data\drivers\downld\6061245.exe

c:\documents and settings\Jean\Application Data\drivers\downld\6062467.exe

c:\documents and settings\Jean\Application Data\drivers\downld\6064890.exe

c:\documents and settings\Jean\Application Data\drivers\downld\6068365.exe

c:\documents and settings\Jean\Application Data\drivers\downld\606972.exe

c:\documents and settings\Jean\Application Data\drivers\downld\607052.exe

c:\documents and settings\Jean\Application Data\drivers\downld\607383.exe

c:\documents and settings\Jean\Application Data\drivers\downld\608314.exe

c:\documents and settings\Jean\Application Data\drivers\downld\608394.exe

c:\documents and settings\Jean\Application Data\drivers\downld\608745.exe

c:\documents and settings\Jean\Application Data\drivers\downld\609346.exe

c:\documents and settings\Jean\Application Data\drivers\downld\609486.exe

c:\documents and settings\Jean\Application Data\drivers\downld\609716.exe

c:\documents and settings\Jean\Application Data\drivers\downld\610547.exe

c:\documents and settings\Jean\Application Data\drivers\downld\610648.exe

c:\documents and settings\Jean\Application Data\drivers\downld\610958.exe

c:\documents and settings\Jean\Application Data\drivers\downld\611839.exe

c:\documents and settings\Jean\Application Data\drivers\downld\611939.exe

c:\documents and settings\Jean\Application Data\drivers\downld\612230.exe

c:\documents and settings\Jean\Application Data\drivers\downld\613141.exe

c:\documents and settings\Jean\Application Data\drivers\downld\613251.exe

c:\documents and settings\Jean\Application Data\drivers\downld\613572.exe

c:\documents and settings\Jean\Application Data\drivers\downld\614203.exe

c:\documents and settings\Jean\Application Data\drivers\downld\614383.exe

c:\documents and settings\Jean\Application Data\drivers\downld\614453.exe

c:\documents and settings\Jean\Application Data\drivers\downld\614773.exe

c:\documents and settings\Jean\Application Data\drivers\downld\615555.exe

c:\documents and settings\Jean\Application Data\drivers\downld\615845.exe

c:\documents and settings\Jean\Application Data\drivers\downld\615925.exe

c:\documents and settings\Jean\Application Data\drivers\downld\616356.exe

c:\documents and settings\Jean\Application Data\drivers\downld\616806.exe

c:\documents and settings\Jean\Application Data\drivers\downld\616887.exe

c:\documents and settings\Jean\Application Data\drivers\downld\6172034.exe

c:\documents and settings\Jean\Application Data\drivers\downld\617217.exe

c:\documents and settings\Jean\Application Data\drivers\downld\6180046.exe

c:\documents and settings\Jean\Application Data\drivers\downld\6180126.exe

c:\documents and settings\Jean\Application Data\drivers\downld\618128.exe

c:\documents and settings\Jean\Application Data\drivers\downld\618218.exe

c:\documents and settings\Jean\Application Data\drivers\downld\618699.exe

c:\documents and settings\Jean\Application Data\drivers\downld\619490.exe

c:\documents and settings\Jean\Application Data\drivers\downld\619570.exe

c:\documents and settings\Jean\Application Data\drivers\downld\619851.exe

c:\documents and settings\Jean\Application Data\drivers\downld\6202028.exe

c:\documents and settings\Jean\Application Data\drivers\downld\6205372.exe

c:\documents and settings\Jean\Application Data\drivers\downld\6205953.exe

c:\documents and settings\Jean\Application Data\drivers\downld\620852.exe

c:\documents and settings\Jean\Application Data\drivers\downld\620932.exe

c:\documents and settings\Jean\Application Data\drivers\downld\621283.exe

c:\documents and settings\Jean\Application Data\drivers\downld\621974.exe

c:\documents and settings\Jean\Application Data\drivers\downld\622054.exe

c:\documents and settings\Jean\Application Data\drivers\downld\622314.exe

c:\documents and settings\Jean\Application Data\drivers\downld\623506.exe

c:\documents and settings\Jean\Application Data\drivers\downld\623606.exe

c:\documents and settings\Jean\Application Data\drivers\downld\623867.exe

c:\documents and settings\Jean\Application Data\drivers\downld\624067.exe

c:\documents and settings\Jean\Application Data\drivers\downld\624197.exe

c:\documents and settings\Jean\Application Data\drivers\downld\624237.exe

c:\documents and settings\Jean\Application Data\drivers\downld\624598.exe

c:\documents and settings\Jean\Application Data\drivers\downld\625569.exe

c:\documents and settings\Jean\Application Data\drivers\downld\625589.exe

c:\documents and settings\Jean\Application Data\drivers\downld\625699.exe

c:\documents and settings\Jean\Application Data\drivers\downld\625920.exe

c:\documents and settings\Jean\Application Data\drivers\downld\625930.exe

c:\documents and settings\Jean\Application Data\drivers\downld\626040.exe

c:\documents and settings\Jean\Application Data\drivers\downld\626430.exe

c:\documents and settings\Jean\Application Data\drivers\downld\626440.exe

c:\documents and settings\Jean\Application Data\drivers\downld\626550.exe

c:\documents and settings\Jean\Application Data\drivers\downld\627472.exe

c:\documents and settings\Jean\Application Data\drivers\downld\627582.exe

c:\documents and settings\Jean\Application Data\drivers\downld\627792.exe

c:\documents and settings\Jean\Application Data\drivers\downld\627862.exe

c:\documents and settings\Jean\Application Data\drivers\downld\627872.exe

c:\documents and settings\Jean\Application Data\drivers\downld\628053.exe

c:\documents and settings\Jean\Application Data\drivers\downld\628683.exe

c:\documents and settings\Jean\Application Data\drivers\downld\628744.exe

c:\documents and settings\Jean\Application Data\drivers\downld\628854.exe

c:\documents and settings\Jean\Application Data\drivers\downld\629134.exe

c:\documents and settings\Jean\Application Data\drivers\downld\629254.exe

c:\documents and settings\Jean\Application Data\drivers\downld\629405.exe

c:\documents and settings\Jean\Application Data\drivers\downld\629925.exe

c:\documents and settings\Jean\Application Data\drivers\downld\629995.exe

c:\documents and settings\Jean\Application Data\drivers\downld\630186.exe

c:\documents and settings\Jean\Application Data\drivers\downld\630686.exe

c:\documents and settings\Jean\Application Data\drivers\downld\630777.exe

c:\documents and settings\Jean\Application Data\drivers\downld\6310904.exe

c:\documents and settings\Jean\Application Data\drivers\downld\631257.exe

c:\documents and settings\Jean\Application Data\drivers\downld\6314399.exe

c:\documents and settings\Jean\Application Data\drivers\downld\6314890.exe

c:\documents and settings\Jean\Application Data\drivers\downld\631718.exe

c:\documents and settings\Jean\Application Data\drivers\downld\631728.exe

c:\documents and settings\Jean\Application Data\drivers\downld\631878.exe

c:\documents and settings\Jean\Application Data\drivers\downld\632950.exe

c:\documents and settings\Jean\Application Data\drivers\downld\633050.exe

c:\documents and settings\Jean\Application Data\drivers\downld\633420.exe

c:\documents and settings\Jean\Application Data\drivers\downld\633701.exe

c:\documents and settings\Jean\Application Data\drivers\downld\6364812.exe

c:\documents and settings\Jean\Application Data\drivers\downld\6367455.exe

c:\documents and settings\Jean\Application Data\drivers\downld\6367475.exe

c:\documents and settings\Jean\Application Data\drivers\downld\6423406.exe

c:\documents and settings\Jean\Application Data\drivers\downld\6426911.exe

c:\documents and settings\Jean\Application Data\drivers\downld\6428083.exe

c:\documents and settings\Jean\Application Data\drivers\downld\647300.exe

c:\documents and settings\Jean\Application Data\drivers\downld\649974.exe

c:\documents and settings\Jean\Application Data\drivers\downld\650295.exe

c:\documents and settings\Jean\Application Data\drivers\downld\6561875.exe

c:\documents and settings\Jean\Application Data\drivers\downld\6567804.exe

c:\documents and settings\Jean\Application Data\drivers\downld\6570487.exe

c:\documents and settings\Jean\Application Data\drivers\downld\6644103.exe

c:\documents and settings\Jean\Application Data\drivers\downld\6649611.exe

c:\documents and settings\Jean\Application Data\drivers\downld\6650813.exe

c:\documents and settings\Jean\Application Data\drivers\downld\6663411.exe

c:\documents and settings\Jean\Application Data\drivers\downld\6666075.exe

c:\documents and settings\Jean\Application Data\drivers\downld\6666616.exe

c:\documents and settings\Jean\Application Data\drivers\downld\6667507.exe

c:\documents and settings\Jean\Application Data\drivers\downld\666818.exe

c:\documents and settings\Jean\Application Data\drivers\downld\668110.exe

c:\documents and settings\Jean\Application Data\drivers\downld\670884.exe

c:\documents and settings\Jean\Application Data\drivers\downld\672877.exe

c:\documents and settings\Jean\Application Data\drivers\downld\6753721.exe

c:\documents and settings\Jean\Application Data\drivers\downld\6755984.exe

c:\documents and settings\Jean\Application Data\drivers\downld\683592.exe

c:\documents and settings\Jean\Application Data\drivers\downld\690172.exe

c:\documents and settings\Jean\Application Data\drivers\downld\706335.exe

c:\documents and settings\Jean\Application Data\drivers\downld\720766.exe

c:\documents and settings\Jean\Application Data\drivers\downld\722208.exe

c:\documents and settings\Jean\Application Data\drivers\downld\722228.exe

c:\documents and settings\Jean\Application Data\drivers\downld\722999.exe

c:\documents and settings\Jean\Application Data\drivers\downld\727676.exe

c:\documents and settings\Jean\Application Data\drivers\downld\7278235.exe

c:\documents and settings\Jean\Application Data\drivers\downld\7287178.exe

c:\documents and settings\Jean\Application Data\drivers\downld\728878.exe

c:\documents and settings\Jean\Application Data\drivers\downld\7288910.exe

c:\documents and settings\Jean\Application Data\drivers\downld\728898.exe

c:\documents and settings\Jean\Application Data\drivers\downld\729498.exe

c:\documents and settings\Jean\Application Data\drivers\downld\7303241.exe

c:\documents and settings\Jean\Application Data\drivers\downld\7306195.exe

c:\documents and settings\Jean\Application Data\drivers\downld\7306816.exe

c:\documents and settings\Jean\Application Data\drivers\downld\7307717.exe

c:\documents and settings\Jean\Application Data\drivers\downld\7312665.exe

c:\documents and settings\Jean\Application Data\drivers\downld\7314297.exe

c:\documents and settings\Jean\Application Data\drivers\downld\734716.exe

c:\documents and settings\Jean\Application Data\drivers\downld\736158.exe

c:\documents and settings\Jean\Application Data\drivers\downld\736408.exe

c:\documents and settings\Jean\Application Data\drivers\downld\736479.exe

c:\documents and settings\Jean\Application Data\drivers\downld\738531.exe

c:\documents and settings\Jean\Application Data\drivers\downld\739833.exe

c:\documents and settings\Jean\Application Data\drivers\downld\741335.exe

c:\documents and settings\Jean\Application Data\drivers\downld\744019.exe

c:\documents and settings\Jean\Application Data\drivers\downld\758170.exe

c:\documents and settings\Jean\Application Data\drivers\downld\758911.exe

c:\documents and settings\Jean\Application Data\drivers\downld\758931.exe

c:\documents and settings\Jean\Application Data\drivers\downld\765490.exe

c:\documents and settings\Jean\Application Data\drivers\downld\766602.exe

c:\documents and settings\Jean\Application Data\drivers\downld\766862.exe

c:\documents and settings\Jean\Application Data\drivers\downld\769917.exe

c:\documents and settings\Jean\Application Data\drivers\downld\772801.exe

c:\documents and settings\Jean\Application Data\drivers\downld\7728863.exe

c:\documents and settings\Jean\Application Data\drivers\downld\7733710.exe

c:\documents and settings\Jean\Application Data\drivers\downld\7734551.exe

c:\documents and settings\Jean\Application Data\drivers\downld\774463.exe

c:\documents and settings\Jean\Application Data\drivers\downld\774613.exe

c:\documents and settings\Jean\Application Data\drivers\downld\7750734.exe

c:\documents and settings\Jean\Application Data\drivers\downld\7754029.exe

c:\documents and settings\Jean\Application Data\drivers\downld\7754660.exe

c:\documents and settings\Jean\Application Data\drivers\downld\7755581.exe

c:\documents and settings\Jean\Application Data\drivers\downld\7780527.exe

c:\documents and settings\Jean\Application Data\drivers\downld\7785274.exe

c:\documents and settings\Jean\Application Data\drivers\downld\783356.exe

c:\documents and settings\Jean\Application Data\drivers\downld\784127.exe

c:\documents and settings\Jean\Application Data\drivers\downld\784568.exe

c:\documents and settings\Jean\Application Data\drivers\downld\785409.exe

c:\documents and settings\Jean\Application Data\drivers\downld\785849.exe

c:\documents and settings\Jean\Application Data\drivers\downld\786260.exe

c:\documents and settings\Jean\Application Data\drivers\downld\787973.exe

c:\documents and settings\Jean\Application Data\drivers\downld\787993.exe

c:\documents and settings\Jean\Application Data\drivers\downld\804376.exe

c:\documents and settings\Jean\Application Data\drivers\downld\808893.exe

c:\documents and settings\Jean\Application Data\drivers\downld\811296.exe

c:\documents and settings\Jean\Application Data\drivers\downld\812548.exe

c:\documents and settings\Jean\Application Data\drivers\downld\818326.exe

c:\documents and settings\Jean\Application Data\drivers\downld\827249.exe

c:\documents and settings\Jean\Application Data\drivers\downld\827479.exe

c:\documents and settings\Jean\Application Data\drivers\downld\829542.exe

c:\documents and settings\Jean\Application Data\drivers\downld\830774.exe

c:\documents and settings\Jean\Application Data\drivers\downld\831585.exe

c:\documents and settings\Jean\Application Data\drivers\downld\832637.exe

c:\documents and settings\Jean\Application Data\drivers\downld\833158.exe

c:\documents and settings\Jean\Application Data\drivers\downld\835501.exe

c:\documents and settings\Jean\Application Data\drivers\downld\840348.exe

c:\documents and settings\Jean\Application Data\drivers\downld\840648.exe

c:\documents and settings\Jean\Application Data\drivers\downld\840768.exe

c:\documents and settings\Jean\Application Data\drivers\downld\841149.exe

c:\documents and settings\Jean\Application Data\drivers\downld\841259.exe

c:\documents and settings\Jean\Application Data\drivers\downld\844544.exe

c:\documents and settings\Jean\Application Data\drivers\downld\845325.exe

c:\documents and settings\Jean\Application Data\drivers\downld\852786.exe

c:\documents and settings\Jean\Application Data\drivers\downld\855349.exe

c:\documents and settings\Jean\Application Data\drivers\downld\857102.exe

c:\documents and settings\Jean\Application Data\drivers\downld\859726.exe

c:\documents and settings\Jean\Application Data\drivers\downld\859946.exe

c:\documents and settings\Jean\Application Data\drivers\downld\863992.exe

c:\documents and settings\Jean\Application Data\drivers\downld\867567.exe

c:\documents and settings\Jean\Application Data\drivers\downld\870381.exe

c:\documents and settings\Jean\Application Data\drivers\downld\871182.exe

c:\documents and settings\Jean\Application Data\drivers\downld\873806.exe

c:\documents and settings\Jean\Application Data\drivers\downld\874978.exe

c:\documents and settings\Jean\Application Data\drivers\downld\875769.exe

c:\documents and settings\Jean\Application Data\drivers\downld\882478.exe

c:\documents and settings\Jean\Application Data\drivers\downld\8915559.exe

c:\documents and settings\Jean\Application Data\drivers\downld\8920877.exe

c:\documents and settings\Jean\Application Data\drivers\downld\8921828.exe

c:\documents and settings\Jean\Application Data\drivers\downld\8965531.exe

c:\documents and settings\Jean\Application Data\drivers\downld\8968706.exe

c:\documents and settings\Jean\Application Data\drivers\downld\8969287.exe

c:\documents and settings\Jean\Application Data\drivers\downld\924068.exe

c:\documents and settings\Jean\Application Data\drivers\downld\924118.exe

c:\documents and settings\Jean\Application Data\drivers\downld\926311.exe

c:\documents and settings\Jean\Application Data\drivers\downld\926642.exe

c:\documents and settings\Jean\Application Data\drivers\downld\928414.exe

c:\documents and settings\Jean\Application Data\drivers\downld\928595.exe

c:\documents and settings\Jean\Application Data\drivers\downld\928615.exe

c:\documents and settings\Jean\Application Data\drivers\downld\929616.exe

c:\documents and settings\Jean\Application Data\drivers\downld\930898.exe

c:\documents and settings\Jean\Application Data\drivers\downld\930958.exe

c:\documents and settings\Jean\Application Data\drivers\downld\93243857.exe

c:\documents and settings\Jean\Application Data\drivers\downld\93264677.exe

c:\documents and settings\Jean\Application Data\drivers\downld\93289052.exe

c:\documents and settings\Jean\Application Data\drivers\downld\93293529.exe

c:\documents and settings\Jean\Application Data\drivers\downld\93599529.exe

c:\documents and settings\Jean\Application Data\drivers\downld\93600840.exe

c:\documents and settings\Jean\Application Data\drivers\downld\93600860.exe

c:\documents and settings\Jean\Application Data\drivers\downld\93639095.exe

c:\documents and settings\Jean\Application Data\drivers\downld\93641259.exe

c:\documents and settings\Jean\Application Data\drivers\downld\93641589.exe

c:\documents and settings\Jean\Application Data\drivers\downld\93655629.exe

c:\documents and settings\Jean\Application Data\drivers\downld\93657822.exe

c:\documents and settings\Jean\Application Data\drivers\downld\93659425.exe

c:\documents and settings\Jean\Application Data\drivers\downld\975342.exe

c:\documents and settings\Jean\Application Data\drivers\downld\976984.exe

c:\documents and settings\Jean\Application Data\drivers\downld\977315.exe

c:\documents and settings\Jean\Application Data\drivers\downld\979668.exe

c:\documents and settings\Jean\Application Data\drivers\downld\985677.exe

c:\documents and settings\Jean\Application Data\drivers\downld\986258.exe

c:\documents and settings\Jean\Application Data\drivers\downld\986979.exe

c:\documents and settings\Jean\Application Data\drivers\downld\988080.exe

c:\documents and settings\Jean\Application Data\drivers\downld\988110.exe

c:\documents and settings\Jean\Application Data\drivers\srosa2.sys

c:\documents and settings\Jean\Application Data\drivers\wfsintwq.sys

c:\documents and settings\Jean\Application Data\drivers\winupgro.exe

c:\documents and settings\Jean\Application Data\hidires\config\AC_BootstrapIPs.dat

c:\documents and settings\Jean\Application Data\hidires\config\AC_SearchStrings.dat

c:\documents and settings\Jean\Application Data\hidires\config\AC_ServerMetURLs.dat

c:\documents and settings\Jean\Application Data\hidires\config\cancelled.met

c:\documents and settings\Jean\Application Data\hidires\config\clients.met

c:\documents and settings\Jean\Application Data\hidires\config\clients.met.bak

c:\documents and settings\Jean\Application Data\hidires\config\cryptkey.dat

c:\documents and settings\Jean\Application Data\hidires\config\emfriends.met

c:\documents and settings\Jean\Application Data\hidires\config\key_index.dat

c:\documents and settings\Jean\Application Data\hidires\config\known.met

c:\documents and settings\Jean\Application Data\hidires\config\known2_64.met

c:\documents and settings\Jean\Application Data\hidires\config\load_index.dat

c:\documents and settings\Jean\Application Data\hidires\config\nodes.dat

c:\documents and settings\Jean\Application Data\hidires\config\preferences.dat

c:\documents and settings\Jean\Application Data\hidires\config\preferences.ini

c:\documents and settings\Jean\Application Data\hidires\config\preferencesKad.dat

c:\documents and settings\Jean\Application Data\hidires\config\server.met

c:\documents and settings\Jean\Application Data\hidires\config\server_met.old

c:\documents and settings\Jean\Application Data\hidires\config\shareddir.dat

c:\documents and settings\Jean\Application Data\hidires\config\src_index.dat

c:\documents and settings\Jean\Application Data\hidires\config\statistics.ini

c:\documents and settings\Jean\Application Data\hidires\config\StoredSearches.met

c:\documents and settings\Jean\Application Data\hidires\downloads.bak

c:\documents and settings\Jean\Application Data\hidires\downloads.txt

c:\documents and settings\Jean\Application Data\hidires\file.exe

c:\documents and settings\Jean\Application Data\hidires\flec003.exe

c:\documents and settings\Jean\Application Data\hidires\names.txt

c:\documents and settings\Jean\Application Data\hidires\server.txt

c:\documents and settings\Jean\Application Data\hidires\WDIR\.NET Zip Component ZipForge.NET 2.01.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\0-Code HTML Converter 3.0 [Key].zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\AcQuest 1065 Solution 1.05.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Address Book Recovery 1.2.14 [KeyGen].zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Adrift Screensaver 2.3.3.1.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\ADSL Reporter 1.0.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Advanced Time Reports Server 3.2.41.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Affiliate Link Protect 1.00.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Altova MissionKit for Enterprise Software Architects 2007.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Amazing Girls screensaver Free Edition 1.2.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\American Canyons Free Screensaver 1.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Antivir Personal Edition Classic V7 0 Crack.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Any Outlook Backup 1.80.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Ap Text To PDF 2.2.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Armor Tools 7.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Artistic Toolbar Icons 2007.2.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\ASA Maestro 9.1.0.1.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Avast Pro v4.6.665 Incl. kaygen FRENCH-BS.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\AVD Volume Calculator 5.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Bad Cookie 1.6.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Black & White 1.3 patch.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\C++ Code Library 1.8.5.441.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Clicktionary (German) 3.2.1.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\CompeGPS Air 6.2.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\CoolLabel 2.117 (Key+Serial).zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Copy Expert 2.3 [Cracked].zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\crack.panda.2006.antivirus.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Delayed Shutdown 1.01.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Desktop Rover 3.2.0.8.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Desktop Snow Screensaver 2 (Key+Serial).zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\DeskWay 1.1.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Dr. Regener Sun-Moon-Calendar 8.1.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\drweb.for.windows.4.33.keyfile.rev.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\DS FadeToTunnel 1.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\DTM Schema Comparer 1.01.04 [Patch].zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\DTSdec 0.0.2.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Duplicate Content Checker 1.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\E-Mail Converter 1.2.2.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Easy Drive Lock 3.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Explorer View - File Viewer 4.4.0.949.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Flash2Video 3.85 build 940.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Free Compound Interest Calculator 1.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\GameBuddy! 1.1.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Ghost Forest - a children's fantasy novel 2.5.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\goTwingly 1.0.1.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\GrafEq 2.12 (KeyGen).zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Hidden River Screensaver 3.11.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Icon Bank (Desktop Edition) 4.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Inside Chat Spy 1.9.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\IntelliAdmin LAN Edition 2.8.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\IntraWeb Studio Personal 2.1.2151 (Serial).zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Kaspersky Security for PDA v5.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Library Data Manager 1.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Link Counter 1.3.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Loto 2.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Math Crony 1.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\MemoryCards 1.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Mercury 3D ScreenSaver 1.0 With Crack.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\My Favorite Manager 1.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Network Traffic Monitor 1.03 With Crack.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Nice One! 3.0 (With Crack).zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Nod32 2.51.12 XP-2k3-x64 SLO.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Omniquad Desktop Booster 1.5.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Online Training Solution JUL.2007 [Key+Serial].zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\OptionsVantage 1.2.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Password Coffer 3.1 Serial.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\PasteBinPost 1.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Personal Biorhythm Forecast 1.2.8.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\PicView 1.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\PingFu Iris A7033.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Pixel Mixer (PMX) 0.7rel13 Build 449 Alpha 2.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Pop Art Studio 2.1.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Portable Bitmap 2 HTML Table Convertor 0.92.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Privacy Sweeper 4.20 (Crack).zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Professor Franklins Instant Photo Effects 2.0 (Key+Serial).zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\PyroTrans 2.22.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Quicktype 1.0.0.0 (Key).zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\RawShooter essentials 1.1.3.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\RQ Search and Replace 1.91.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\rssPlayPen 1.0.31.20061220.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Ryarc CampaignManager Digital Signage Edition 1.5 Build 914.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Sencesa Flash Player 2.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Serial Port Sniffer ActiveX Control 4.0 Build 4.0.0.62.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\SetPicker 1.0.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Shag 2 Map 1.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Single Stock Futures Calculator 1.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\SinhSub 1.2.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Sippax 2.3.6 (With Crack).zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Small Business Advantage 1.0 (Cracked).zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Softener 1.26.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Software Catalog 1.0.2.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\SpongeBob Screensaver 1.0 Key+Serial.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\SQL Dictionary English Italian 1.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Sun ODF Plugin for Microsoft Office 1.1.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\SwingMan 1.1.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\TaskSheet 0.1.2.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\TeamBios.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\The Mind Accelerator is Your Lexicon for Success 1.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\The PC Detective SE 2.9.17.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\TheMP3Renamer 1.7.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Toddler Keys .97.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Towmv DVD to WMV Converter 1.10.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\TrainTrax 1.4.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\TWAIN Integration Kit 2.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Unreal Tournament 2004 Clone Bandits mod.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Unreal Tournament 2004 DM Tintagel map.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Unreal Tournament 2004 Vehicle Stuff mod.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Video Conference 1.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Video File Master 2.0.0.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Vine Garden 1.0.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Vivid Report for C++ Builder 6 3.0 Std Patch.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\VocProf Vocabulary Trainer 2.05.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Volume Snapshot Manager 1.01.46 (Patch).zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Wallpaper manager 3.4.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\WebHtmlEdit Control 2.4 (KeyGen).zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\World Cup Desktop Alerts 1.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\X2Net Recent Documents 3.0.2.0 [With Crack].zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\XnView 1.82.4.zip

c:\documents and settings\Jean\Application Data\hidires\WDIR\Your Brothers Keeper 5.3.18.zip

c:\documents and settings\Jean\Application Data\m\data.oct

c:\documents and settings\Jean\Application Data\m\flec006.exe

c:\documents and settings\Jean\Application Data\m\list.oct

c:\documents and settings\Jean\Application Data\m\shared\2004 Steelers Screensaver 1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Access MySql Converter 1.5.zip

c:\documents and settings\Jean\Application Data\m\shared\ACE Safari Foxdie (Graphite) 3.0.4.zip

c:\documents and settings\Jean\Application Data\m\shared\Advanced Encryption Plug-In Pro for Windows Explorer 4.0.5 [With Crack].zip

c:\documents and settings\Jean\Application Data\m\shared\Ascii art picture designer 3.0 (Patch).zip

c:\documents and settings\Jean\Application Data\m\shared\AsiaFont_Studio_4.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Aspose.Editor 2.3.0.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Asset_Tracking_System_7.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Avast!.4.6.652.Professional.Edition.Br.Utilitario.By.Robocop.(Sbfriends).zip

c:\documents and settings\Jean\Application Data\m\shared\Basketball Scoreboard Deluxe 1.0.1 Crack.zip

c:\documents and settings\Jean\Application Data\m\shared\BioStat_Professional_2007_build_2.1.0.0_(KeyGen).zip

c:\documents and settings\Jean\Application Data\m\shared\Blaze Media Pro 8.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Bluefox iPod Touch Video Converter 2.11.09.0512.zip

c:\documents and settings\Jean\Application Data\m\shared\BMExtreme 2.52.zip

c:\documents and settings\Jean\Application Data\m\shared\CheckWWW_2.2.zip

c:\documents and settings\Jean\Application Data\m\shared\CiAN_File_Splitter_Pro_3.85.zip

c:\documents and settings\Jean\Application Data\m\shared\Color Cop 5.4.5.zip

c:\documents and settings\Jean\Application Data\m\shared\compaact! 1.2.1.zip

c:\documents and settings\Jean\Application Data\m\shared\Context_Menu_Builder_1.21.zip

c:\documents and settings\Jean\Application Data\m\shared\Convert Photos to Coloring Book Images (Grayscale) Software 7.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Creative_Painter_2006.zip

c:\documents and settings\Jean\Application Data\m\shared\Cute Password Manager 2008 1.3.9.zip

c:\documents and settings\Jean\Application Data\m\shared\Dating Web Icons 2009.1.zip

c:\documents and settings\Jean\Application Data\m\shared\Davory 1.75.zip

c:\documents and settings\Jean\Application Data\m\shared\DecisionMaker_2.5_[serial].zip

c:\documents and settings\Jean\Application Data\m\shared\DSpeech 1.55.3.zip

c:\documents and settings\Jean\Application Data\m\shared\Duplicati 0.5 Alpha.zip

c:\documents and settings\Jean\Application Data\m\shared\Dylo's_Adventure_-_Windows_1.0b.zip

c:\documents and settings\Jean\Application Data\m\shared\DynSite_Dynamic_DNS_Site_Configure_1.1.zip

c:\documents and settings\Jean\Application Data\m\shared\Easy Uninstall 3.0.zip

c:\documents and settings\Jean\Application Data\m\shared\EasyLicenser_2.0.02_Key+Serial.zip

c:\documents and settings\Jean\Application Data\m\shared\EcoEuroMillions_1.30.zip

c:\documents and settings\Jean\Application Data\m\shared\Elektronika Live 2.12.zip

c:\documents and settings\Jean\Application Data\m\shared\Encryption_Xpert_1.2_(Cracked).zip

c:\documents and settings\Jean\Application Data\m\shared\ePrompter_2.0_SR103.zip

c:\documents and settings\Jean\Application Data\m\shared\Eternal Roses Screensaver 1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Excel Compare by Mousesoft 1.00.zip

c:\documents and settings\Jean\Application Data\m\shared\ExchangeRecovery_2.0.0716.zip

c:\documents and settings\Jean\Application Data\m\shared\EZ_GPO_1.04.zip

c:\documents and settings\Jean\Application Data\m\shared\FabFilter_One_3.04.zip

c:\documents and settings\Jean\Application Data\m\shared\Fast_AVI_MPEG_Splitter_1.1.2.zip

c:\documents and settings\Jean\Application Data\m\shared\FILEize 1.1.05.zip

c:\documents and settings\Jean\Application Data\m\shared\Find_Favorites_3.00_SR4.zip

c:\documents and settings\Jean\Application Data\m\shared\FlyTreeView for ASP.NET 2.0 4.3.7.zip

c:\documents and settings\Jean\Application Data\m\shared\Foorius 1.1.zip

c:\documents and settings\Jean\Application Data\m\shared\Free_WMA_to_MP3_Converter_1.16.zip

c:\documents and settings\Jean\Application Data\m\shared\FTPShell_Client_3.983_[Key+Serial].zip

c:\documents and settings\Jean\Application Data\m\shared\Game Rebellion Toolbar 1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Google Suggest for Opera Widget 1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Guitar Plus 2.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Hind_Site_1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\idImager_3.5.10.zip

c:\documents and settings\Jean\Application Data\m\shared\IMonitor Keylogger 4.0.zip

c:\documents and settings\Jean\Application Data\m\shared\ImTOO DVD to MP4 Converter 5.0.50.0515.zip

c:\documents and settings\Jean\Application Data\m\shared\Incredimail_Email_Extractor_Pro_1.0_(Crack).zip

c:\documents and settings\Jean\Application Data\m\shared\InfoSnorkel_1.00.10_Key.zip

c:\documents and settings\Jean\Application Data\m\shared\Internet_Satellite_TV_Player_1.1_With_Crack.zip

c:\documents and settings\Jean\Application Data\m\shared\IRQ_Finder_1.0_(KeyGen).zip

c:\documents and settings\Jean\Application Data\m\shared\Keep_It_Up_5.6.2.zip

c:\documents and settings\Jean\Application Data\m\shared\Kernel DBF 5.01.zip

c:\documents and settings\Jean\Application Data\m\shared\LabelsWin 1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\LingvoSoft Suite 2008 English - Portuguese 2.1.26.zip

c:\documents and settings\Jean\Application Data\m\shared\LingvoSoft Talking Picture Dictionary 2007 Chinese Mandarin Simplified - Korean 1.1.20.zip

c:\documents and settings\Jean\Application Data\m\shared\LingvoSoft_Picture_Dictionary_2007_French_-_Persian_(Farsi)_1.1.19_Key.zip

c:\documents and settings\Jean\Application Data\m\shared\LockGear_Enterprise_1.01_(With_Crack).zip

c:\documents and settings\Jean\Application Data\m\shared\Mail Express Enterprise Client Monitor 1.0.1.24.zip

c:\documents and settings\Jean\Application Data\m\shared\Mail_Commander_8.60.zip

c:\documents and settings\Jean\Application Data\m\shared\Mathpad Draw 1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\McAfee.SpamKiller.v6.0.Retail-SSG.ShareConnector.zip

c:\documents and settings\Jean\Application Data\m\shared\MedalFolders 2.0.0.500.zip

c:\documents and settings\Jean\Application Data\m\shared\Microsoft Office Communicator Vista Gadget 1.0.0.62.zip

c:\documents and settings\Jean\Application Data\m\shared\miniKeys 2.2.zip

c:\documents and settings\Jean\Application Data\m\shared\Monte_Carlo_Extractor_1.00.zip

c:\documents and settings\Jean\Application Data\m\shared\Morgan-Greer_1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\NB_Giraffe_1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\NetSupport_Protect_1.0.0.26_(With_Crack).zip

c:\documents and settings\Jean\Application Data\m\shared\NOD32.2.51.20.XP.SLO.-.cracked.updated-fixed.01-2007.zip

c:\documents and settings\Jean\Application Data\m\shared\NOD32_2.51.30.zip

c:\documents and settings\Jean\Application Data\m\shared\Notebook BatteryInfo 1.2.0.21.zip

c:\documents and settings\Jean\Application Data\m\shared\One-Rep-Max_1.zip

c:\documents and settings\Jean\Application Data\m\shared\Online_Store_System_toolbar_for_IE_4.5.132.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Perpetual Disco Screensaver 1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\PG_Calculator_2.2.9_[KeyGen].zip

c:\documents and settings\Jean\Application Data\m\shared\Phartz 2.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Philipp_Winterberg_Berlin_2.00.zip

c:\documents and settings\Jean\Application Data\m\shared\PhoneAnalytics_1.6_With_Crack.zip

c:\documents and settings\Jean\Application Data\m\shared\Pixel Editor 2.20.zip

c:\documents and settings\Jean\Application Data\m\shared\Pocket Stars PC 5.5.0.0.zip

c:\documents and settings\Jean\Application Data\m\shared\PopConverter 1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Print_Screen_Deluxe_6.1.zip

c:\documents and settings\Jean\Application Data\m\shared\Prisma 1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Protector_Plus_2007_8.0.A03.zip

c:\documents and settings\Jean\Application Data\m\shared\QuickieClick Toolbar 1.1.zip

c:\documents and settings\Jean\Application Data\m\shared\Radiator_1.8.0.7.zip

c:\documents and settings\Jean\Application Data\m\shared\Random Number Generator Pro 1.48 Key+Serial.zip

c:\documents and settings\Jean\Application Data\m\shared\ReFrame 1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Reminder 19 1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Repo Car Auctions 1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Revolver Mail Pro 6.4 R3.zip

c:\documents and settings\Jean\Application Data\m\shared\RTF-2-HTML 6.6.7.zip

c:\documents and settings\Jean\Application Data\m\shared\ScanAsPDF_1.8.1.zip

c:\documents and settings\Jean\Application Data\m\shared\Search GT 2.3.zip

c:\documents and settings\Jean\Application Data\m\shared\SeasonPlanner_2004_4.0.1135.zip

c:\documents and settings\Jean\Application Data\m\shared\seqdiff 1.0.1.zip

c:\documents and settings\Jean\Application Data\m\shared\Sliced File Upload 1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Small Ermsnet 15.0.zip

c:\documents and settings\Jean\Application Data\m\shared\SMS_Ticker_2.3.2.zip

c:\documents and settings\Jean\Application Data\m\shared\Spectacular Sunsets Screensaver.zip

c:\documents and settings\Jean\Application Data\m\shared\StockMarketXP SideWinder 1.16.zip

c:\documents and settings\Jean\Application Data\m\shared\Super_Text_Search_2.85.zip

c:\documents and settings\Jean\Application Data\m\shared\Symantec.Pcanywhere.v11.zip

c:\documents and settings\Jean\Application Data\m\shared\TabCloser 1.03.zip

c:\documents and settings\Jean\Application Data\m\shared\TextExtract 2.2.0.zip

c:\documents and settings\Jean\Application Data\m\shared\The_PC_Detective_Pro_2.8.107.zip

c:\documents and settings\Jean\Application Data\m\shared\Time Meter for MS Outlook 2.95.zip

c:\documents and settings\Jean\Application Data\m\shared\Timexam 2.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Tiny Banner Network 1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\TurboBass_Litre_to_Cubic_Feet_Converter_1.zip

c:\documents and settings\Jean\Application Data\m\shared\Unreal_Tournament_2003_-_Pain_skin.zip

c:\documents and settings\Jean\Application Data\m\shared\URL_Manager_2005_2.67.zip

c:\documents and settings\Jean\Application Data\m\shared\Viewmy.tv gadget 2.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Virtual_U_2.1.zip

c:\documents and settings\Jean\Application Data\m\shared\Visual_LogParser_1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\VisualKii Easy 1.0 Key+Serial.zip

c:\documents and settings\Jean\Application Data\m\shared\VisualMask 1.0.4.zip

c:\documents and settings\Jean\Application Data\m\shared\Wavelab_6.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Webmasters Tool 1.0.0.zip

c:\documents and settings\Jean\Application Data\m\shared\WinXP-Tweaker 1.50.zip

c:\documents and settings\Jean\Application Data\m\shared\Yogi Berra Quotes 0.2.zip

c:\documents and settings\Jean\Application Data\m\srvlist.oct

c:\documents and settings\root\Application Data\drivers\downld\1714915.exe

c:\documents and settings\root\Application Data\drivers\downld\1718170.exe

c:\documents and settings\root\Application Data\drivers\downld\1723057.exe

c:\documents and settings\root\Application Data\drivers\downld\1736877.exe

c:\documents and settings\root\Application Data\drivers\downld\1738860.exe

c:\documents and settings\root\Application Data\drivers\downld\1773299.exe

c:\documents and settings\root\Application Data\drivers\downld\1779989.exe

c:\documents and settings\root\Application Data\drivers\downld\1817283.exe

c:\documents and settings\root\Application Data\drivers\downld\1818705.exe

c:\documents and settings\root\Application Data\drivers\downld\1824263.exe

c:\documents and settings\root\Application Data\drivers\downld\1828449.exe

c:\documents and settings\root\Application Data\drivers\downld\1931677.exe

c:\documents and settings\root\Application Data\drivers\downld\1958766.exe

c:\documents and settings\root\Application Data\drivers\downld\1962672.exe

c:\documents and settings\root\Application Data\drivers\downld\1962822.exe

c:\documents and settings\root\Application Data\drivers\downld\2010310.exe

c:\documents and settings\root\Application Data\drivers\downld\2012243.exe

c:\documents and settings\root\Application Data\drivers\downld\2012413.exe

c:\documents and settings\root\Application Data\drivers\downld\2014516.exe

c:\documents and settings\root\Application Data\drivers\downld\2014526.exe

c:\documents and settings\root\Application Data\drivers\downld\2014807.exe

c:\documents and settings\root\Application Data\drivers\downld\2073872.exe

c:\documents and settings\root\Application Data\drivers\downld\2074062.exe

c:\documents and settings\root\Application Data\drivers\downld\2074222.exe

c:\documents and settings\root\Application Data\drivers\downld\2080481.exe

c:\documents and settings\root\Application Data\drivers\downld\2101091.exe

c:\documents and settings\root\Application Data\drivers\downld\2102833.exe

c:\documents and settings\root\Application Data\drivers\downld\2136472.exe

c:\documents and settings\root\Application Data\drivers\downld\2162088.exe

c:\documents and settings\root\Application Data\drivers\downld\2165443.exe

c:\documents and settings\root\Application Data\drivers\downld\2171502.exe

c:\documents and settings\root\Application Data\drivers\downld\2173905.exe

c:\documents and settings\root\Application Data\drivers\downld\2175107.exe

c:\documents and settings\root\Application Data\drivers\downld\2209166.exe

c:\documents and settings\root\Application Data\drivers\downld\2216687.exe

c:\documents and settings\root\Application Data\drivers\downld\2220663.exe

c:\documents and settings\root\Application Data\drivers\downld\2412769.exe

c:\documents and settings\root\Application Data\drivers\downld\2416054.exe

c:\documents and settings\root\Application Data\drivers\downld\2416955.exe

c:\documents and settings\root\Application Data\drivers\downld\2418818.exe

c:\documents and settings\root\Application Data\drivers\downld\2420560.exe

c:\documents and settings\root\Application Data\drivers\downld\2420800.exe

c:\documents and settings\root\Application Data\drivers\downld\2439577.exe

c:\documents and settings\root\Application Data\drivers\downld\2440489.exe

c:\documents and settings\root\Application Data\drivers\downld\2441070.exe

c:\documents and settings\root\Application Data\drivers\downld\2445286.exe

c:\documents and settings\root\Application Data\drivers\downld\2445346.exe

c:\documents and settings\root\Application Data\drivers\downld\2445536.exe

c:\documents and settings\root\Application Data\drivers\downld\2476671.exe

c:\documents and settings\root\Application Data\drivers\downld\2481117.exe

c:\documents and settings\root\Application Data\drivers\downld\2482028.exe

c:\documents and settings\root\Application Data\drivers\downld\2482219.exe

c:\documents and settings\root\Application Data\drivers\downld\2482529.exe

c:\documents and settings\root\Application Data\drivers\downld\2603403.exe

c:\documents and settings\root\Application Data\drivers\downld\2605907.exe

c:\documents and settings\root\Application Data\drivers\downld\2606127.exe

c:\documents and settings\root\Application Data\drivers\downld\2606327.exe

c:\documents and settings\root\Application Data\drivers\downld\2606407.exe

c:\documents and settings\root\Application Data\drivers\downld\2606487.exe

c:\documents and settings\root\Application Data\drivers\downld\2623662.exe

c:\documents and settings\root\Application Data\drivers\downld\2625775.exe

c:\documents and settings\root\Application Data\drivers\downld\2627808.exe

c:\documents and settings\root\Application Data\drivers\downld\2628018.exe

c:\documents and settings\root\Application Data\drivers\downld\2629190.exe

c:\documents and settings\root\Application Data\drivers\downld\2629330.exe

c:\documents and settings\root\Application Data\drivers\downld\2722474.exe

c:\documents and settings\root\Application Data\drivers\downld\2725539.exe

c:\documents and settings\root\Application Data\drivers\downld\2765216.exe

c:\documents and settings\root\Application Data\drivers\downld\2768020.exe

c:\documents and settings\root\Application Data\drivers\downld\2792405.exe

c:\documents and settings\root\Application Data\drivers\downld\2795860.exe

c:\documents and settings\root\Application Data\drivers\downld\2832643.exe

c:\documents and settings\root\Application Data\drivers\downld\2833734.exe

c:\documents and settings\root\Application Data\drivers\downld\2837349.exe

c:\documents and settings\root\Application Data\drivers\downld\2837389.exe

c:\documents and settings\root\Application Data\drivers\downld\2838080.exe

c:\documents and settings\root\Application Data\drivers\downld\2838231.exe

c:\documents and settings\root\Application Data\drivers\srosa2.sys

c:\documents and settings\root\Application Data\drivers\wfsintwq.sys

c:\documents and settings\root\Application Data\drivers\winupgro.exe

c:\documents and settings\root\Application Data\hidires\config\AC_BootstrapIPs.dat

c:\documents and settings\root\Application Data\hidires\config\AC_SearchStrings.dat

c:\documents and settings\root\Application Data\hidires\config\AC_ServerMetURLs.dat

c:\documents and settings\root\Application Data\hidires\config\cancelled.met

c:\documents and settings\root\Application Data\hidires\config\clients.met

c:\documents and settings\root\Application Data\hidires\config\cryptkey.dat

c:\documents and settings\root\Application Data\hidires\config\emfriends.met

c:\documents and settings\root\Application Data\hidires\config\key_index.dat

c:\documents and settings\root\Application Data\hidires\config\known.met

c:\documents and settings\root\Application Data\hidires\config\known2_64.met

c:\documents and settings\root\Application Data\hidires\config\load_index.dat

c:\documents and settings\root\Application Data\hidires\config\nodes.dat

c:\documents and settings\root\Application Data\hidires\config\preferences.dat

c:\documents and settings\root\Application Data\hidires\config\preferences.ini

c:\documents and settings\root\Application Data\hidires\config\preferencesKad.dat

c:\documents and settings\root\Application Data\hidires\config\server.met

c:\documents and settings\root\Application Data\hidires\config\server_met.old

c:\documents and settings\root\Application Data\hidires\config\shareddir.dat

c:\documents and settings\root\Application Data\hidires\config\src_index.dat

c:\documents and settings\root\Application Data\hidires\config\statistics.ini

c:\documents and settings\root\Application Data\hidires\config\StoredSearches.met

c:\documents and settings\root\Application Data\hidires\downloads.txt

c:\documents and settings\root\Application Data\hidires\file.exe

c:\documents and settings\root\Application Data\hidires\flec003.exe

c:\documents and settings\root\Application Data\hidires\names.txt

c:\documents and settings\root\Application Data\hidires\server.txt

c:\documents and settings\root\Application Data\hidires\WDIR\[bitDefender.Internet.Security.v9.0.官方简体中文版].BIS9chs.zip

c:\documents and settings\root\Application Data\hidires\WDIR\3D Mini Golf.zip

c:\documents and settings\root\Application Data\hidires\WDIR\4Videosoft DVD to iPhone Suite 3.1.06.zip

c:\documents and settings\root\Application Data\hidires\WDIR\646-102 - Wireless LAN for Account Managers Exam (WLANAM) Practice Test Questions 1.0.zip

c:\documents and settings\root\Application Data\hidires\WDIR\A House Divided

c:\documents and settings\root\Application Data\hidires\WDIR\AB Complete Ping 3.00 Crack.zip

c:\documents and settings\root\Application Data\hidires\WDIR\ABF Visual Components Library 4.0.1.409 (Cracked).zip

c:\documents and settings\root\Application Data\hidires\WDIR\Active Directory Schema Manager 1.0.zip

c:\documents and settings\root\Application Data\hidires\WDIR\AdaptX for Winamp 3.61c.zip

c:\documents and settings\root\Application Data\hidires\WDIR\All My Books 1.1 Build 1102.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Amadis DVD to 3GP Converter 1.2.16 (Key).zip

c:\documents and settings\root\Application Data\hidires\WDIR\Aries DVD to iPod Ripper 2.1.0.213.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Aspose.Chart 3.3.6.0 [Cracked].zip

c:\documents and settings\root\Application Data\hidires\WDIR\AUAU MPEG WMV AVI to MOV Converter 4.2.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Audio CD Ripper Pro 1.6.08.zip

c:\documents and settings\root\Application Data\hidires\WDIR\AutoDWG eTransmit 1.1 Serial.zip

c:\documents and settings\root\Application Data\hidires\WDIR\AutoFlashFXP 1.3.0.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Autorun Creator 1.6.zip

c:\documents and settings\root\Application Data\hidires\WDIR\BankBook 4.3.4.zip

c:\documents and settings\root\Application Data\hidires\WDIR\BankSite 0.99.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Baroque Art Collection Screensaver.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Battlefield 1942 - BattleGroup42 Texture Set Mod.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Best Consignment Shop Software Diamond Edition 5.1.0.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Betavine Widget 1.0.zip

c:\documents and settings\root\Application Data\hidires\WDIR\C1 Network Monitor 1.0.2.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Casting Calculator 3.0.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Code Visual Editor 2.0.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Comic Book Creator 1.0.8 [Crack].zip

c:\documents and settings\root\Application Data\hidires\WDIR\Corvette Anniversary Screensaver.zip

c:\documents and settings\root\Application Data\hidires\WDIR\CplxCalPro 4.1.zip

c:\documents and settings\root\Application Data\hidires\WDIR\CPUOff 5.5.zip

c:\documents and settings\root\Application Data\hidires\WDIR\DataTagsCloud Control 1.1.zip

c:\documents and settings\root\Application Data\hidires\WDIR\DEKSI LAN Manager 1.82.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Dewqs' No More Spam 3.1 Patch.zip

c:\documents and settings\root\Application Data\hidires\WDIR\DirectShow FilterPack 3.0.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Documentor 5.0.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Drugs 1.1.zip

c:\documents and settings\root\Application Data\hidires\WDIR\DVD-fx 2.3.0.zip

c:\documents and settings\root\Application Data\hidires\WDIR\EasyTable Manager 6.10 Key+Serial.zip

c:\documents and settings\root\Application Data\hidires\WDIR\ePodcast Express 1.0.25 [Key].zip

c:\documents and settings\root\Application Data\hidires\WDIR\Equity Rider 2.1 With Crack.zip

c:\documents and settings\root\Application Data\hidires\WDIR\ExButton 1.0.1.4.2734.zip

c:\documents and settings\root\Application Data\hidires\WDIR\eXComboBox 3.1.0.2.6864.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Fantasy General demo.zip

c:\documents and settings\root\Application Data\hidires\WDIR\File Stitcher 1.2.zip

c:\documents and settings\root\Application Data\hidires\WDIR\FileCroc 1.0.1.3006.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Finder Icons.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Fly Help 6.5 Build 1121.zip

c:\documents and settings\root\Application Data\hidires\WDIR\FreeMeter 2.8.zip

c:\documents and settings\root\Application Data\hidires\WDIR\FundRaiser Basic 1.35.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Greek - Spanish Keyboard 1.0.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Hare 1.5.1 Build 675.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Heroes of Might and Magic V v1.02 Hungarian patch.zip

c:\documents and settings\root\Application Data\hidires\WDIR\History Book for IE 1.0.zip

c:\documents and settings\root\Application Data\hidires\WDIR\HotPixelDetector 1.0.0.zip

c:\documents and settings\root\Application Data\hidires\WDIR\HP0-754 Practice Exam Testing Engine Software 1.0 Key.zip

c:\documents and settings\root\Application Data\hidires\WDIR\IE Pets 1.0.0.1 [KeyGen].zip

c:\documents and settings\root\Application Data\hidires\WDIR\IE Throttle 1.0.zip

c:\documents and settings\root\Application Data\hidires\WDIR\In Spirited We Love Icon Set.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Inside Keylogger 4.1.zip

c:\documents and settings\root\Application Data\hidires\WDIR\iOrgSoft 3GP Video Converter 1.6.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Jerry Springer The Opera Screensaver 1.0.zip

c:\documents and settings\root\Application Data\hidires\WDIR\JustHex 0.9 Alpha.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Katie Holmes Sexy Screensaver 1.5.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Key Holder 1.0.zip

c:\documents and settings\root\Application Data\hidires\WDIR\KGB Employee Monitor 4.2.2.809.zip

c:\documents and settings\root\Application Data\hidires\WDIR\KueL-FTP 0.1.5.0 Beta1.zip

c:\documents and settings\root\Application Data\hidires\WDIR\LibTomMath 0.41.zip

c:\documents and settings\root\Application Data\hidires\WDIR\MapStar Driving Directrions 1.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Merge Pro 1.1 build 25.zip

c:\documents and settings\root\Application Data\hidires\WDIR\MingSoft 3GP Video Converter Pro 1.0.3.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Money Maker 123 toolbar for Firefox 1.0.1.30.zip

c:\documents and settings\root\Application Data\hidires\WDIR\News Interceptor 3.02 (Serial).zip

c:\documents and settings\root\Application Data\hidires\WDIR\Novell NetWare Revisor 3.3.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Oceans in Motion 3.5.zip

c:\documents and settings\root\Application Data\hidires\WDIR\OdfToTxt 1.2.1.zip

c:\documents and settings\root\Application Data\hidires\WDIR\ParisVu 1.0.zip

c:\documents and settings\root\Application Data\hidires\WDIR\PenSoft Payroll Plus Professional Edition 2007 3.07.0216 (Key+Serial).zip

c:\documents and settings\root\Application Data\hidires\WDIR\Policy Template Editor 2.0.2.zip

c:\documents and settings\root\Application Data\hidires\WDIR\POPFile 1.0.0.zip

c:\documents and settings\root\Application Data\hidires\WDIR\PPTmovie 2.1.0.zip

c:\documents and settings\root\Application Data\hidires\WDIR\ProjectTrack Collaborative Edition 2007.1.8 - Build 658 (With Crack).zip

c:\documents and settings\root\Application Data\hidires\WDIR\QIF - Converter 1.4.41.zip

c:\documents and settings\root\Application Data\hidires\WDIR\QuitMeter Counter 1.0.7.zip

c:\documents and settings\root\Application Data\hidires\WDIR\RAM Memory Cleaner and Optimizer 2.9.40.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Randomizer 1.0.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Registry Sweeper Pro 1.2 (Patch).zip

c:\documents and settings\root\Application Data\hidires\WDIR\Relaxation Techniques Screensaver 1.01.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Reservation Master 2.00-R12 [Crack].zip

c:\documents and settings\root\Application Data\hidires\WDIR\SafeSurf 1.0.zip

c:\documents and settings\root\Application Data\hidires\WDIR\SecurAble 1.0.2570.1.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Shadow Warrior 1.2.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Shareaza Turbo Booster 2.3.0 (With Crack).zip

c:\documents and settings\root\Application Data\hidires\WDIR\Shark Apple TV Video Converter 6.8.1.9.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Simple Caller Id 2.01.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Soldier of Fortune II Double Helix - Realistic mod.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Sophos.Enterprise.Console.v2.0.0.&.EM.Library.v1.3.0-ARN-Shared.by.koolman.zip

c:\documents and settings\root\Application Data\hidires\WDIR\StaticCharge 0.7.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Store Locator 0.1.2.zip

c:\documents and settings\root\Application Data\hidires\WDIR\TCPSpeed 1.01.zip

c:\documents and settings\root\Application Data\hidires\WDIR\The Wolves of Denali 1.3.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Tube MSN 1.01.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Vembu StoreGrid Backup Software 2.3.zip

c:\documents and settings\root\Application Data\hidires\WDIR\VideoMate 14.1.zip

c:\documents and settings\root\Application Data\hidires\WDIR\VideoTagger 1.0.zip

c:\documents and settings\root\Application Data\hidires\WDIR\ViewletACE 1.0.8 build 1121.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Virtins Sound Card Oscilloscope 2.1.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Virtual Teacher Screensaver 2.5.zip

c:\documents and settings\root\Application Data\hidires\WDIR\ViviClip Video Filters Basic 3.01.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Vnc Thumbnail Viewer 1.3.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Waterfall Beauty Screen Saver 1.0 (Crack).zip

c:\documents and settings\root\Application Data\hidires\WDIR\Web Based Helpdesk Add-In for MS Outlook 5.9.337 KeyGen.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Web Updates Checker 1.0.0.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Website Monitor Gadget 1.2.0.zip

c:\documents and settings\root\Application Data\hidires\WDIR\Webspace Friendly Gallery Generator Beta 1.zip

c:\documents and settings\root\Application Data\hidires\WDIR\What Is Cancer 1.0.0.0.zip

c:\documents and settings\root\Application Data\hidires\WDIR\WindowsUpdate 1.1.9.zip

c:\documents and settings\root\Application Data\hidires\WDIR\WinQcad 38.0 Key+Serial.zip

c:\documents and settings\root\Application Data\hidires\WDIR\WinTopMost Disable Close 1.2 Patch.zip

c:\documents and settings\root\Application Data\hidires\WDIR\YASA AVI to MPEG Converter 3.6.54.1302.zip

c:\documents and settings\root\Application Data\hidires\WDIR\ZoneIDTrimmer 1.0.0.zip

c:\documents and settings\root\Application Data\m\flec006.exe

c:\windows\system32\ban_list.txt

c:\windows\system32\mdelk.exe

c:\windows\system32\wintems.exe

E:\install.exe

 

.

((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.

 

-------\Service_SROSA

-------\Legacy_SROSA

-------\Legacy_NPF

-------\Legacy_SK9OU0S

-------\Service_sK9Ou0s

 

 

((((((((((((((((((((((((((((( Fichiers créés du 2009-10-03 au 2009-11-03 ))))))))))))))))))))))))))))))))))))

.

 

2009-11-02 17:36 . 2009-11-02 18:37 -------- d-----w- C:\jean

2009-10-20 16:18 . 2009-08-26 21:08 1238408 ----a-w- c:\windows\system32\zpeng25.dll

2009-10-20 16:18 . 2009-10-20 16:18 -------- d-----w- c:\windows\system32\ZoneLabs

2009-10-20 16:18 . 2009-10-20 16:18 -------- d-----w- c:\program files\Zone Labs

2009-10-19 18:00 . 2009-11-02 17:58 -------- d-----w- c:\program files\SuperCopier2

2009-10-19 17:44 . 2009-11-02 18:24 -------- d--h--w- c:\documents and settings\root\Application Data\drivers

2009-10-19 17:36 . 2009-10-19 17:36 -------- d-----w- c:\documents and settings\root\Local Settings\Application Data\Thunderbird

2009-10-19 17:36 . 2009-10-19 17:36 -------- d-----w- c:\documents and settings\root\Application Data\Thunderbird

2009-10-19 17:29 . 2009-10-19 17:29 101192 ----a-w- c:\documents and settings\root\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

2009-10-19 17:00 . 2009-10-19 17:00 -------- d-----w- c:\documents and settings\root\Application Data\Malwarebytes

2009-10-19 16:57 . 2009-10-19 16:57 -------- d-----w- c:\documents and settings\root\Local Settings\Application Data\Mozilla

2009-10-19 16:56 . 2009-10-19 16:56 -------- d-----w- c:\documents and settings\root\Application Data\PCToolsFirewallPlus

2009-10-19 15:47 . 2009-11-03 14:54 -------- d--h--w- c:\documents and settings\Jean\Application Data\drivers

 

.

(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

.

2009-11-02 18:42 . 2009-06-04 16:48 -------- d-----w- c:\program files\Firefox

2009-11-02 17:24 . 2006-01-19 08:30 -------- d-----w- c:\program files\Mozilla Thunderbird

2009-11-02 16:55 . 2006-12-07 09:29 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP

2009-11-01 17:44 . 2006-01-18 21:32 -------- d-----w- c:\documents and settings\Jean\Application Data\Skype

2009-10-30 16:24 . 2008-10-10 17:54 -------- d-----w- c:\documents and settings\Jean\Application Data\Winamp

2009-10-29 16:40 . 2009-05-27 17:29 -------- d-----w- c:\documents and settings\Jean\Application Data\StarDict

2009-10-21 18:21 . 2006-01-19 10:04 -------- d-----w- c:\program files\WXTide32

2009-10-20 16:10 . 2009-05-23 18:46 -------- d-----w- c:\program files\Fichiers communs\PC Tools

2009-10-20 16:10 . 2009-05-23 18:46 -------- d-----w- c:\program files\PC Tools Firewall Plus

2009-10-19 14:40 . 2006-12-07 09:29 -------- d-----w- c:\program files\DAP

2009-10-16 17:57 . 2009-08-08 16:29 -------- d-----w- c:\program files\OpenERP AllInOne

2009-10-15 18:06 . 1979-12-31 23:00 83564 ----a-w- c:\windows\system32\perfc00C.dat

2009-10-15 18:06 . 1979-12-31 23:00 506994 ----a-w- c:\windows\system32\perfh00C.dat

2009-10-14 16:20 . 2009-03-08 18:44 -------- d-----w- c:\documents and settings\Jean\Application Data\dvdcss

2009-09-27 15:16 . 2006-02-22 17:11 -------- d-----w- c:\program files\Google

2009-09-26 17:28 . 2007-06-14 17:52 -------- d-----w- c:\documents and settings\Jean\Application Data\gtk-2.0

2009-09-25 05:36 . 1979-12-31 23:00 671232 ------w- c:\windows\system32\wininet.dll

2009-09-25 05:36 . 1979-12-31 23:00 81920 ----a-w- c:\windows\system32\ieencode.dll

2009-09-11 18:18 . 2009-09-11 18:18 101192 ----a-w- c:\documents and settings\eMule_Secure\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

2009-09-11 17:46 . 2006-01-19 19:41 -------- d-----w- c:\program files\QuickTime

2009-09-11 17:45 . 2008-01-06 16:20 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple Computer

2009-09-11 17:40 . 2009-09-11 17:40 -------- d-----w- c:\program files\Fichiers communs\Apple

2009-09-11 16:45 . 2009-05-27 17:29 -------- d-----w- c:\program files\StarDict

2009-09-11 16:43 . 2009-05-27 17:26 -------- d-----w- c:\program files\Fichiers communs\GTK

2009-09-11 14:18 . 1979-12-31 23:00 136192 ----a-w- c:\windows\system32\msv1_0.dll

2009-09-05 15:12 . 2009-08-16 16:05 -------- d-----w- c:\program files\zyGrib_win

2009-09-04 21:04 . 1979-12-31 23:00 58880 ----a-w- c:\windows\system32\msasn1.dll

2009-08-26 08:01 . 1979-12-31 23:00 247326 ----a-w- c:\windows\system32\strmdll.dll

2009-08-25 14:50 . 2006-01-18 15:54 101192 ----a-w- c:\documents and settings\Jean\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

2009-08-19 16:12 . 2009-06-01 16:24 55656 ----a-w- c:\windows\system32\drivers\avgntflt.sys

2008-01-04 15:00 . 2008-01-04 15:00 479 ----a-w- c:\program files\SECURITE.lnk

2004-08-19 15:10 . 2006-11-08 12:11 73728 --sha-w- c:\windows\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}$BACKUP$\System\wmplayer.exe

2007-07-13 16:21 . 2006-03-02 17:08 952 --sha-w- c:\windows\system32\KGyGaAvL.sys

.

 

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

REGEDIT4

 

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]

"{F4F10C1D-87C7-404A-B4B3-000000000000}"= "c:\progra~1\DAP\SBSearch.dll" [2008-09-04 32768]

 

[HKEY_CLASSES_ROOT\clsid\{f4f10c1d-87c7-404a-b4b3-000000000000}]

[HKEY_CLASSES_ROOT\SearchHook.SrchHook.1]

[HKEY_CLASSES_ROOT\TypeLib\{95EFB171-F3DF-4BEC-9EF7-829A800203E6}]

[HKEY_CLASSES_ROOT\SearchHook.SrchHook]

 

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{FF6C3CF0-4B15-11D1-ABED-709549C10000}]

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"DownloadAccelerator"="c:\program files\DAP\DAP.EXE" [2006-10-13 901120]

"SuperCopier2.exe"="c:\program files\SuperCopier2\SuperCopier2.exe" [2006-10-13 901120]

"flec003.exe"="c:\documents and settings\Jean\Application Data\hidires\flec003.exe" [bU]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SynTPLpr"="c:\program files\Synaptics\SynTP\SynTPLpr.exe" [2006-10-13 901120]

"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2004-05-20 532480]

"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-05 59392]

"EPM-DM"="c:\acer\ePM\EPM-DM.exe" [2004-11-03 163840]

"ePowerManagement"="c:\acer\ePM\ePM.exe" [2004-11-03 2883584]

"WinampAgent"="c:\program files\Winamp\winampa.exe" [2009-07-01 37888]

"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-07-25 149280]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-09-05 417792]

"BluetoothAuthenticationAgent"="bthprops.cpl" - c:\windows\system32\bthprops.cpl [2008-04-14 110592]

 

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]

"EnableFirewall"= 0 (0x0)

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"c:\\WINDOWS\\system32\\sessmgr.exe"=

"c:\\Program Files\\PHPEdit\\DBG\\DbgListener.exe"=

"c:\\WINDOWS\\system32\\dpvsetup.exe"=

"c:\\WINDOWS\\system32\\javaw.exe"=

"c:\\WINDOWS\\system32\\fxsclnt.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"%windir%\\system32\\sessmgr.exe"=

"c:\\Program Files\\eMule\\emule.exe"=

"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

"13676:TCP"= 13676:TCP:NortonAV

 

R1 SMBHC;Pilote de contrôleur hôte du bus de gestion du système Microsoft;c:\windows\system32\drivers\smbhc.sys [22/09/2004 09:04 6784]

R1 VBoxDrv;VirtualBox Service;c:\windows\system32\drivers\VBoxDrv.sys [17/05/2008 17:56 115856]

R1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\drivers\VBoxUSBMon.sys [17/05/2008 17:56 41424]

R2 HWiNFO32;HWiNFO32 Kernel Driver;c:\program files\HWiNFO32\HWiNFO32.SYS [22/12/2008 16:16 16616]

R3 SMBBATT;Pilote de batterie intelligente Microsoft;c:\windows\system32\drivers\smbbatt.sys [22/09/2004 09:04 16000]

R3 VBoxNetFlt;VBoxNetFlt Service;c:\windows\system32\drivers\VBoxNetFlt.sys [10/07/2009 17:51 99472]

S2 gupdate1c8ce3fcb863340;Google Update Service (gupdate1c8ce3fcb863340);c:\program files\Google\Update\GoogleUpdate.exe [06/09/2008 16:57 133104]

S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [28/05/2009 15:42 38160]

S3 postgresql-8.4;PostgreSQL Server 8.4;C:/Program Files/PostgreSQL/8.4/bin/pg_ctl.exe runservice -N "postgresql-8.4" -D "C:/Program Files/PostgreSQL/8.4/data" -w --> C:/Program Files/PostgreSQL/8.4/bin/pg_ctl.exe runservice -N postgresql-8.4 [?]

S3 sentemul;sentemul;c:\windows\system32\drivers\SentEmul.sys [29/03/2008 16:06 9536]

S3 silabenm;Silicon Labs CP210x USB to UART Bridge Serial Port Enumerator Driver;c:\windows\system32\drivers\silabenm.sys [02/02/2009 17:10 17920]

S3 silabser;Silicon Labs CP210x USB to UART Bridge Driver;c:\windows\system32\drivers\silabser.sys [02/02/2009 17:10 60544]

S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\drivers\VBoxNetAdp.sys [26/07/2009 16:28 91472]

S3 VBoxUSB;VirtualBox USB;c:\windows\system32\drivers\VBoxUSB.sys [16/03/2008 15:23 31824]

 

--- Autres Services/Pilotes en mémoire ---

 

*Deregistered* - mbr

*Deregistered* - PROCEXP113

.

Contenu du dossier 'Tâches planifiées'

 

2009-09-13 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2008-09-06 16:03]

.

.

------- Examen supplémentaire -------

.

uStart Page = hxxp://search.speedbit.com/

IE: &Clean Traces - c:\program files\DAP\Privacy Package\dapcleanerie.htm

IE: &Download with &DAP - c:\program files\DAP\dapextie.htm

IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200

IE: Download &all with DAP - c:\program files\DAP\dapextie2.htm

IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

FF - ProfilePath - c:\documents and settings\Jean\Application Data\Mozilla\Firefox\Profiles\51mrxkbk.jean\

FF - prefs.js: browser.startup.homepage -

FF - prefs.js: keyword.URL -

FF - component: c:\documents and settings\Jean\Application Data\Mozilla\Firefox\Profiles\51mrxkbk.jean\extensions\{3502a070-ea2f-11dd-ba2f-0800200c9a66}\components\mintray-9178506d-2005072516-trunk.dll

FF - component: c:\program files\DAP\DAPFireFox\components\DAPFireFox.dll

FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll

FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll

FF - plugin: c:\program files\Google\Update\1.2.183.7\npGoogleOneClick8.dll

FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

.

- - - - ORPHELINS SUPPRIMES - - - -

 

SafeBoot-aawservice

AddRemove-Language pack for Ad-Aware SE - c:\progra~1\SECURITE\Lavasoft\Plugins\Langs\UNWISE.EXE

 

 

 

**************************************************************************

 

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-11-03 14:55

Windows 5.1.2600 Service Pack 3 NTFS

 

Recherche de processus cachés ...

 

Recherche d'éléments en démarrage automatique cachés ...

 

Recherche de fichiers cachés ...

 

Scan terminé avec succès

Fichiers cachés: 0

 

**************************************************************************

 

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

 

device: opened successfully

user: MBR read successfully

called modules: ntoskrnl.exe catchme.sys CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys sptd.sys >>UNKNOWN [0x833878AC]<<

kernel: MBR read successfully

user & kernel MBR OK

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

 

atapi.sys @ 0x0 0x0 bytes

 

\Driver\atapi [ IRP_MJ_CREATE ] 0xA6F2 != 0xF8348B40 atapi.sys

\Driver\atapi [ IRP_MJ_CLOSE ] 0xA6F2 != 0xF8348B40 atapi.sys

\Driver\atapi [ IRP_MJ_DEVICE_CONTROL ] 0xA712 != 0xF8348B40 atapi.sys

\Driver\atapi [ IRP_MJ_INTERNAL_DEVICE_CONTROL ] 0x6852 != 0xF8348B40 atapi.sys

\Driver\atapi [ IRP_MJ_POWER ] 0xA73C != 0xF8348B40 atapi.sys

\Driver\atapi [ IRP_MJ_SYSTEM_CONTROL ] 0x11336 != 0xF8348B40 atapi.sys

\Driver\atapi IRP hooks detected !

 

**************************************************************************

 

[HKEY_LOCAL_MACHINE\System\ControlSet004\Services\postgresql-8.4]

"ImagePath"="C:/Program Files/PostgreSQL/8.4/bin/pg_ctl.exe runservice -N \"postgresql-8.4\" -D \"C:/Program Files/PostgreSQL/8.4/data\" -w"

 

[HKEY_LOCAL_MACHINE\System\ControlSet004\Services\postgresql-8.4]

"ImagePath"="C:/Program Files/PostgreSQL/8.4/bin/pg_ctl.exe runservice -N \"postgresql-8.4\" -D \"C:/Program Files/PostgreSQL/8.4/data\" -w"

.

Heure de fin: 2009-11-03 15:00

ComboFix-quarantined-files.txt 2009-11-03 15:00

 

Avant-CF: 9 475 796 992 octets libres

Après-CF: 9 399 578 624 octets libres

 

Current=4 Default=4 Failed=3 LastKnownGood=6 Sets=1,2,3,4,5,6

- - End Of File - - 5F7096F76F1479B8C34C91A0BA844FF7

[Mark]

Aïe. Oké. Bien joué pour ComboFix en tout cas.

 

Ton sujet a été déplacé en désinfection alors fais-moi signe pour me dire si tu peux le lire ou pas (je me réfère à ton premier message - incapable d'ouvrir ce sous forum sans faire planter FF). Si je n'ai pas de tes nouvelles d'ici quelques heures, je te contacterai par messagerie et on déplacera à nouveau le sujet. Pas de soucis

 

Je vais revenir plus tard pour bien analyser les rapports.

 

@bientôt,

 

Mark

 

Edit : j'ai remis ce sujet en Optimisation car l'infection bloque l'accès au forum de désinfection..

Modifié le 3 novembre 2009 par Mark

[Mark]

Bonsoir Jean

 

Bon ben ça ressemble à un nouveau Bagle ça. Je crois qu'il est nouveau parce que le ré-infecteur est passé sous le nez de ComboFix (d'où la ré-infection) et le blocage du forum de désinfection ressemble étrangement à une nouvelle astuce signée Bagle. Cette infection détruit les antivirus et pares-feu, comme tu peux le constater... On va te virer ça maintenant. Avant d'attaquer, je vais te demander de m'expédier un fichier pour analyse ; c'est tout simple :

 

Via l'Explorateur, retrouve le fichier suivant :

 

C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

 

> Fais un clic droit dessus et choisis "Envoyer vers" >> "Dossier compressé"

> Un nouveau fichier .zip nommé SynTPLpr.zip sera créé dans le dossier SynTP

> Fais maintenant un clic droit sur le fichier SynTPLpr.exe et choisis "Supprimer"

> Rends-toi sur le site de Senduit :

http://www.senduit.com/

> Clique "Parcourir..." puis cherche et double-clique sur le fichier suivant :

 

C:\Program Files\Synaptics\SynTP\SynTPLpr.zip

 

> Avant de cliquer sur "Upload", il faut modifier l'option "Expire in:" à 3 days

> Clique maintenant sur "Upload" et patiente quelques secondes ;

> Une adresse (URL) apparaîtra dans la boîte : copie/colle cette adresse dans un nouveau fichier du Bloc-notes et sauvegarde le fichier sur ton Bureau (nomme-le "Senduit" par exemple).

> Je vais te demander de me refiler cette adresse via ma messagerie car je ne veux pas que le lien apparaisse sur le forum (fichier infecté et dangereux).

 

==========

 

Maintenant que le ré-infecteur n'y est plus (en principe), tu peux relancer ComboFix (nommé jean.exe).

S'il te demande de prendre une version à jour : accepte.

Tu auras sûrement droit à un message te disant qu'une activité de rootkit a été détectée et ComboFix te signalera qu'il doit redémarrer : accepte.

Laisse ComboFix bosser (c'est long avec Bagle présent, possiblement plus de 10 minutes).

Poste son rapport ici lorsque terminé.

 

Tu peux également désinstaller AntiVir et Zone Alarm, puis les réinstaller. Poste tout d'abord le rapport de ComboFix, puis passe AntiVir et poste ensuite son rapport ici, pour vérification.

 

Bon succès

 

Mark

 

 

(*Note : ce fichier est normalement légitime, mais pas cette fois-ci ; Bagle l'a remplacé)

[jean_pfoumf]

Rien de neuf sous le soleil :

ComboFix I : message Windows : Filekill a rencontré un problème, etc.

pendant Find3M, ouvrture de la fenêtre pirate, mais sans nom. Pas d'affichage ni de création de ComboFix.txt

Au redémarrage du PC, affichage de la fenêtre pirate que je ferme. relancde COmboFix

 

ComboFix II : je le lance, il démarre et presque tout de suite redémarre le PC. Mais COmboFix ne se relance pas après le redémarrage. Je relance COmboFix une 3ième fois manuellement.

 

ComboFix III : toujours un problème avec Filekill.cfxxe

Combofix détecte la présence du rootkit.

Il va jusqu'au bout et crée Combofix.txt, dont copie ci-dessous.

 

Installation de Avira antivir et de PCtools Firewall : OK

Redémarrage du PC et ... affichage fenêtre pirate !!!

Je ferme cette fenêtre. Redémarrage intempestif du PC.

Avira ne se lance plus... La bête n'est pas morte.

 

 

ComboFix 09-11-01.04 - Jean 04/11/2009 16:15.5.1 - NTFSx86

Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.510.220 [GMT 0:00]

Lancé depuis: c:\documents and settings\Jean\Bureau\jean.exe

.

 

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))

.

 

c:\documents and settings\Jean\Application Data\drivers\downld

c:\documents and settings\Jean\Application Data\drivers\srosa2.sys

c:\documents and settings\Jean\Application Data\drivers\wfsintwq.sys

c:\documents and settings\Jean\Application Data\drivers\winupgro.exe

 

.

((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.

 

-------\Service_SROSA

-------\Legacy_SROSA

 

 

((((((((((((((((((((((((((((( Fichiers créés du 2009-10-04 au 2009-11-04 ))))))))))))))))))))))))))))))))))))

.

 

2009-11-04 15:17 . 2009-11-04 15:54 -------- d-----w- C:\jean3525j

2009-11-03 16:58 . 2009-11-03 16:58 -------- d-----w- C:\jean991j

2009-11-02 17:36 . 2009-11-02 18:37 -------- d-----w- C:\jean

2009-10-20 16:18 . 2009-08-26 21:08 1238408 ----a-w- c:\windows\system32\zpeng25.dll

2009-10-20 16:18 . 2009-10-20 16:18 -------- d-----w- c:\windows\system32\ZoneLabs

2009-10-20 16:18 . 2009-10-20 16:18 -------- d-----w- c:\program files\Zone Labs

2009-10-19 18:00 . 2009-11-02 17:58 -------- d-----w- c:\program files\SuperCopier2

2009-10-19 17:44 . 2009-11-02 18:24 -------- d--h--w- c:\documents and settings\root\Application Data\drivers

2009-10-19 17:36 . 2009-10-19 17:36 -------- d-----w- c:\documents and settings\root\Local Settings\Application Data\Thunderbird

2009-10-19 17:36 . 2009-10-19 17:36 -------- d-----w- c:\documents and settings\root\Application Data\Thunderbird

2009-10-19 17:29 . 2009-10-19 17:29 101192 ----a-w- c:\documents and settings\root\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

2009-10-19 17:00 . 2009-10-19 17:00 -------- d-----w- c:\documents and settings\root\Application Data\Malwarebytes

2009-10-19 16:57 . 2009-10-19 16:57 -------- d-----w- c:\documents and settings\root\Local Settings\Application Data\Mozilla

2009-10-19 16:56 . 2009-10-19 16:56 -------- d-----w- c:\documents and settings\root\Application Data\PCToolsFirewallPlus

2009-10-19 15:47 . 2009-11-04 16:25 -------- d--h--w- c:\documents and settings\Jean\Application Data\drivers

 

.

(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

.

2009-11-04 15:14 . 2009-05-23 18:46 -------- d-----w- c:\program files\Fichiers communs\PC Tools

2009-11-04 15:14 . 2009-05-23 18:46 -------- d-----w- c:\program files\PC Tools Firewall Plus

2009-11-04 15:12 . 2006-12-07 09:29 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP

2009-11-04 15:02 . 2006-01-18 21:32 -------- d-----w- c:\documents and settings\Jean\Application Data\Skype

2009-11-04 14:33 . 2009-06-04 16:48 -------- d-----w- c:\program files\Firefox

2009-11-04 14:24 . 2006-01-19 08:30 -------- d-----w- c:\program files\Mozilla Thunderbird

2009-10-30 16:24 . 2008-10-10 17:54 -------- d-----w- c:\documents and settings\Jean\Application Data\Winamp

2009-10-29 16:40 . 2009-05-27 17:29 -------- d-----w- c:\documents and settings\Jean\Application Data\StarDict

2009-10-21 18:21 . 2006-01-19 10:04 -------- d-----w- c:\program files\WXTide32

2009-10-19 14:40 . 2006-12-07 09:29 -------- d-----w- c:\program files\DAP

2009-10-16 17:57 . 2009-08-08 16:29 -------- d-----w- c:\program files\OpenERP AllInOne

2009-10-15 18:06 . 1979-12-31 23:00 83564 ----a-w- c:\windows\system32\perfc00C.dat

2009-10-15 18:06 . 1979-12-31 23:00 506994 ----a-w- c:\windows\system32\perfh00C.dat

2009-10-14 16:20 . 2009-03-08 18:44 -------- d-----w- c:\documents and settings\Jean\Application Data\dvdcss

2009-09-27 15:16 . 2006-02-22 17:11 -------- d-----w- c:\program files\Google

2009-09-26 17:28 . 2007-06-14 17:52 -------- d-----w- c:\documents and settings\Jean\Application Data\gtk-2.0

2009-09-25 05:36 . 1979-12-31 23:00 671232 ------w- c:\windows\system32\wininet.dll

2009-09-25 05:36 . 1979-12-31 23:00 81920 ----a-w- c:\windows\system32\ieencode.dll

2009-09-11 18:18 . 2009-09-11 18:18 101192 ----a-w- c:\documents and settings\eMule_Secure\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

2009-09-11 17:46 . 2006-01-19 19:41 -------- d-----w- c:\program files\QuickTime

2009-09-11 17:45 . 2008-01-06 16:20 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple Computer

2009-09-11 17:40 . 2009-09-11 17:40 -------- d-----w- c:\program files\Fichiers communs\Apple

2009-09-11 16:45 . 2009-05-27 17:29 -------- d-----w- c:\program files\StarDict

2009-09-11 16:43 . 2009-05-27 17:26 -------- d-----w- c:\program files\Fichiers communs\GTK

2009-09-11 14:18 . 1979-12-31 23:00 136192 ----a-w- c:\windows\system32\msv1_0.dll

2009-09-04 21:04 . 1979-12-31 23:00 58880 ----a-w- c:\windows\system32\msasn1.dll

2009-08-26 08:01 . 1979-12-31 23:00 247326 ----a-w- c:\windows\system32\strmdll.dll

2009-08-25 14:50 . 2006-01-18 15:54 101192 ----a-w- c:\documents and settings\Jean\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

2008-01-04 15:00 . 2008-01-04 15:00 479 ----a-w- c:\program files\SECURITE.lnk

2004-08-19 15:10 . 2006-11-08 12:11 73728 --sha-w- c:\windows\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}$BACKUP$\System\wmplayer.exe

2007-07-13 16:21 . 2006-03-02 17:08 952 --sha-w- c:\windows\system32\KGyGaAvL.sys

.

 

((((((((((((((((((((((((((((( SnapShot@2009-11-02_18.28.19 )))))))))))))))))))))))))))))))))))))))))

.

+ 2009-06-01 16:24 . 2009-03-24 16:07 55640 c:\windows\system32\drivers\avgntflt.sys

.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

REGEDIT4

 

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]

"{F4F10C1D-87C7-404A-B4B3-000000000000}"= "c:\progra~1\DAP\SBSearch.dll" [2008-09-04 32768]

 

[HKEY_CLASSES_ROOT\clsid\{f4f10c1d-87c7-404a-b4b3-000000000000}]

[HKEY_CLASSES_ROOT\SearchHook.SrchHook.1]

[HKEY_CLASSES_ROOT\TypeLib\{95EFB171-F3DF-4BEC-9EF7-829A800203E6}]

[HKEY_CLASSES_ROOT\SearchHook.SrchHook]

 

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{FF6C3CF0-4B15-11D1-ABED-709549C10000}]

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"DownloadAccelerator"="c:\program files\DAP\DAP.EXE" [2006-10-13 901120]

"SuperCopier2.exe"="c:\program files\SuperCopier2\SuperCopier2.exe" [2006-10-13 901120]

"flec003.exe"="c:\documents and settings\Jean\Application Data\hidires\flec003.exe" [bU]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2004-05-20 532480]

"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-05 59392]

"EPM-DM"="c:\acer\ePM\EPM-DM.exe" [2004-11-03 163840]

"ePowerManagement"="c:\acer\ePM\ePM.exe" [2004-11-03 2883584]

"WinampAgent"="c:\program files\Winamp\winampa.exe" [2009-07-01 37888]

"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-07-25 149280]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-09-05 417792]

"BluetoothAuthenticationAgent"="bthprops.cpl" - c:\windows\system32\bthprops.cpl [2008-04-14 110592]

 

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]

"EnableFirewall"= 0 (0x0)

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"c:\\WINDOWS\\system32\\sessmgr.exe"=

"c:\\Program Files\\PHPEdit\\DBG\\DbgListener.exe"=

"c:\\WINDOWS\\system32\\dpvsetup.exe"=

"c:\\WINDOWS\\system32\\javaw.exe"=

"c:\\WINDOWS\\system32\\fxsclnt.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"%windir%\\system32\\sessmgr.exe"=

"c:\\Program Files\\eMule\\emule.exe"=

"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

"13676:TCP"= 13676:TCP:NortonAV

 

R1 SMBHC;Pilote de contrôleur hôte du bus de gestion du système Microsoft;c:\windows\system32\drivers\smbhc.sys [22/09/2004 09:04 6784]

R1 VBoxDrv;VirtualBox Service;c:\windows\system32\drivers\VBoxDrv.sys [17/05/2008 17:56 115856]

R1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\drivers\VBoxUSBMon.sys [17/05/2008 17:56 41424]

R2 HWiNFO32;HWiNFO32 Kernel Driver;c:\program files\HWiNFO32\HWiNFO32.SYS [22/12/2008 16:16 16616]

R3 SMBBATT;Pilote de batterie intelligente Microsoft;c:\windows\system32\drivers\smbbatt.sys [22/09/2004 09:04 16000]

R3 VBoxNetFlt;VBoxNetFlt Service;c:\windows\system32\drivers\VBoxNetFlt.sys [10/07/2009 17:51 99472]

S2 gupdate1c8ce3fcb863340;Google Update Service (gupdate1c8ce3fcb863340);c:\program files\Google\Update\GoogleUpdate.exe [06/09/2008 16:57 133104]

S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [28/05/2009 15:42 38160]

S3 postgresql-8.4;PostgreSQL Server 8.4;C:/Program Files/PostgreSQL/8.4/bin/pg_ctl.exe runservice -N "postgresql-8.4" -D "C:/Program Files/PostgreSQL/8.4/data" -w --> C:/Program Files/PostgreSQL/8.4/bin/pg_ctl.exe runservice -N postgresql-8.4 [?]

S3 sentemul;sentemul;c:\windows\system32\drivers\SentEmul.sys [29/03/2008 16:06 9536]

S3 silabenm;Silicon Labs CP210x USB to UART Bridge Serial Port Enumerator Driver;c:\windows\system32\drivers\silabenm.sys [02/02/2009 17:10 17920]

S3 silabser;Silicon Labs CP210x USB to UART Bridge Driver;c:\windows\system32\drivers\silabser.sys [02/02/2009 17:10 60544]

S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\drivers\VBoxNetAdp.sys [26/07/2009 16:28 91472]

S3 VBoxUSB;VirtualBox USB;c:\windows\system32\drivers\VBoxUSB.sys [16/03/2008 15:23 31824]

 

--- Autres Services/Pilotes en mémoire ---

 

*Deregistered* - mbr

*Deregistered* - PROCEXP113

.

Contenu du dossier 'Tâches planifiées'

 

2009-09-13 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2008-09-06 16:03]

.

.

------- Examen supplémentaire -------

.

uStart Page = hxxp://search.speedbit.com/

IE: &Clean Traces - c:\program files\DAP\Privacy Package\dapcleanerie.htm

IE: &Download with &DAP - c:\program files\DAP\dapextie.htm

IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200

IE: Download &all with DAP - c:\program files\DAP\dapextie2.htm

IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

FF - ProfilePath - c:\documents and settings\Jean\Application Data\Mozilla\Firefox\Profiles\51mrxkbk.jean\

FF - prefs.js: browser.startup.homepage -

FF - prefs.js: keyword.URL -

FF - component: c:\documents and settings\Jean\Application Data\Mozilla\Firefox\Profiles\51mrxkbk.jean\extensions\{3502a070-ea2f-11dd-ba2f-0800200c9a66}\components\mintray-9178506d-2005072516-trunk.dll

FF - component: c:\program files\DAP\DAPFireFox\components\DAPFireFox.dll

FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll

FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll

FF - plugin: c:\program files\Google\Update\1.2.183.7\npGoogleOneClick8.dll

FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

.

 

**************************************************************************

 

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-11-04 16:25

Windows 5.1.2600 Service Pack 3 NTFS

 

Recherche de processus cachés ...

 

Recherche d'éléments en démarrage automatique cachés ...

 

Recherche de fichiers cachés ...

 

Scan terminé avec succès

Fichiers cachés: 0

 

**************************************************************************

 

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

 

device: opened successfully

user: MBR read successfully

called modules: ntoskrnl.exe catchme.sys CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys sptd.sys >>UNKNOWN [0x833878AC]<<

kernel: MBR read successfully

user & kernel MBR OK

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

 

atapi.sys @ 0x0 0x0 bytes

 

\Driver\atapi [ IRP_MJ_CREATE ] 0xA6F2 != 0xF8348B40 atapi.sys

\Driver\atapi [ IRP_MJ_CLOSE ] 0xA6F2 != 0xF8348B40 atapi.sys

\Driver\atapi [ IRP_MJ_DEVICE_CONTROL ] 0xA712 != 0xF8348B40 atapi.sys

\Driver\atapi [ IRP_MJ_INTERNAL_DEVICE_CONTROL ] 0x6852 != 0xF8348B40 atapi.sys

\Driver\atapi [ IRP_MJ_POWER ] 0xA73C != 0xF8348B40 atapi.sys

\Driver\atapi [ IRP_MJ_SYSTEM_CONTROL ] 0x11336 != 0xF8348B40 atapi.sys

\Driver\atapi IRP hooks detected !

 

**************************************************************************

 

[HKEY_LOCAL_MACHINE\System\ControlSet004\Services\postgresql-8.4]

"ImagePath"="C:/Program Files/PostgreSQL/8.4/bin/pg_ctl.exe runservice -N \"postgresql-8.4\" -D \"C:/Program Files/PostgreSQL/8.4/data\" -w"

 

[HKEY_LOCAL_MACHINE\System\ControlSet004\Services\postgresql-8.4]

"ImagePath"="C:/Program Files/PostgreSQL/8.4/bin/pg_ctl.exe runservice -N \"postgresql-8.4\" -D \"C:/Program Files/PostgreSQL/8.4/data\" -w"

.

Heure de fin: 2009-11-04 16:31

ComboFix-quarantined-files.txt 2009-11-04 16:30

 

Avant-CF: 8 652 316 672 octets libres

Après-CF: 8 612 040 704 octets libres

 

Current=4 Default=4 Failed=3 LastKnownGood=6 Sets=1,2,3,4,5,6

- - End Of File - - 77E3F902C96A538F12AF53483C45B42B

[Mark]

Merci pour le fichier, Jean

 

Bon là c'est ma faute... J'avais regardé tes rapports trop vite ; il n'y avait pas seulement un ré-infecteur, mais bien trois. On va tous les virer et ensuite tu repasses ComboFix :

===================

 

Via l'Explorateur, recherche et supprime les fichiers suivants (clic-droit >> "Supprimer") :

 

C:\Program Files\DAP\DAP.EXE <<

C:\Program Files\SuperCopier2\SuperCopier2.exe <<

 

**Note : ces deux fichiers (+ SynTPLpr.exe supprimé précédemment) sont normalement légitimes ; dans ce cas-ci, Bagle les a remplacés donc les fichiers ne sont plus ce qu'ils étaient à l'origine. Il faudra donc réinstaller les programmes touchés (les 3), mais juste lorsque la machine sera propre.

~~~~~~~~~~~~~~~~~~~~

 

On va maintenant lancer ComboFix, mais d'une manière différente :

 

**Le script prescrit ci-bas a été préparé pour la machine de jean_pfoumf seulement et ne dois pas être exécuté sur une autre machine**

 

Créé un nouveau fichier du Bloc-notes, puis "Copie/Colle" le texte qui se trouve dans la boîte "Code" ci-dessous (sans le mot "Code" ):

 

KillAll::

Registry::
[-HKEY_CLASSES_ROOT\clsid\{f4f10c1d-87c7-404a-b4b3-000000000000}]
[-HKEY_CLASSES_ROOT\SearchHook.SrchHook.1]
[-HKEY_CLASSES_ROOT\TypeLib\{95EFB171-F3DF-4BEC-9EF7-829A800203E6}]
[-HKEY_CLASSES_ROOT\SearchHook.SrchHook]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{FF6C3CF0-4B15-11D1-ABED-709549C10000}]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DownloadAccelerator"=-
"SuperCopier2.exe"=-
"flec003.exe"=-
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"13676:TCP"=-

 

*Sauvegarde ce fichier sur ton Bureau et nomme-le CFScript.txt (orthographe exacte primordiale)

 

 

 

• Fait un glisser/déposer de ce fichier CFScript sur le fichier ComboFix.exe comme sur la capture ci-dessus.
  
• ComboFix sera lancé.
  
• *Si ComboFix t'offre de télécharger une version à jour de l'outil, accepte*
  
• Patiente le temps du scan. Le Bureau va disparaître à plusieurs reprises : c'est normal.
  
• Tu auras droit à un avertissement d'activité de rootkit : accepte pour le redémarrage. L'ordi va redémarrer et ComboFix va poursuivre le nettoyage.
  
• Ne touche à rien tant que le scan n'est pas terminé.
  
• Une fois le scan achevé, un rapport va s'afficher : tu peux le fermer pour l'instant (le rapport est sauvegardé automatiquement).
  

 

~~~~~~~~~~~~~~~~

 

Ne réinstalle pas AntiVir tout de suite, on va faire une autre analyse avant :

 

Télécharge FindyKill (de Chiquitine29) du lien suivant et sauvegarde-le sur le Bureau :

http://pagesperso-orange.fr/NosTools/Chiqu...9/FindyKill.exe

 

- Lance l'outil et choisis l'option #1.

- Laisse-le bosser, puis un rapport va apparaître ;

- Copie/colle le rapport ici dans ta réponse, à la suite du rapport de ComboFix, situé à : C:\ComboFix.txt

 

Bon succès... et on verra pour terminer le travail, selon les résultats. La fin est proche, sois sans craintes

 

@+

 

Mark

[jean_pfoumf]

Quelques soucis avec Combofix, car après la mise à jour, la Bête l'a reconnu et l'a bloqué.

J'ai du recharger l'ancienne version, et refuser la màj. Ci dessous le .Txt. J'espère que le Mode FONCTIONNALITES REDUITES n'est pas un problème.

J'ai du arrêter FindyKill car trop long. Je le relancerai demain et je t'enverrai le rapport.

Je n'ai plus vu de fenêtre de la Bête et le Parefeu fonctionne apparemment toujours. J'attends de faire fonctionner FIndykill pour réinstaller Avira.

 

@+

 

ComboFix 09-11-01.04 - Jean 05/11/2009 15:57.6.1 - NTFSx86

Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.510.218 [GMT 0:00]

Lancé depuis: c:\documents and settings\Jean\Bureau\jean.exe

Commutateurs utilisés :: c:\documents and settings\Jean\Bureau\CFScript.txt

FW: PC Tools Firewall Plus *disabled* {ABBD5028-5A95-4B6D-996E-98D64AE88D52}

.

- Mode FONCTIONNALITES REDUITES -

.

 

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))

.

 

c:\windows\system32\ban_list.txt

c:\windows\system32\mdelk.exe

c:\windows\system32\wintems.exe

 

.

((((((((((((((((((((((((((((( Fichiers créés du 2009-10-05 au 2009-11-05 ))))))))))))))))))))))))))))))))))))

.

 

2009-11-05 15:13 . 2009-11-05 15:14 -------- d--h--w- c:\documents and settings\Jean\Application Data\m

2009-11-04 16:37 . 2009-03-06 16:45 130424 ----a-w- c:\windows\system32\drivers\PCTCore.sys

2009-11-04 16:37 . 2008-12-18 12:16 73840 ----a-w- c:\windows\system32\drivers\PCTAppEvent.sys

2009-11-04 16:37 . 2008-12-11 08:38 159600 ----a-w- c:\windows\system32\drivers\pctgntdi.sys

2009-11-04 16:37 . 2009-01-21 10:38 95640 ----a-w- c:\windows\system32\drivers\pctplfw.sys

2009-11-04 15:17 . 2009-11-04 15:54 -------- d-----w- C:\jean3525j

2009-11-03 16:58 . 2009-11-03 16:58 -------- d-----w- C:\jean991j

2009-11-02 17:36 . 2009-11-02 18:37 -------- d-----w- C:\jean

2009-10-20 16:18 . 2009-08-26 21:08 1238408 ----a-w- c:\windows\system32\zpeng25.dll

2009-10-20 16:18 . 2009-10-20 16:18 -------- d-----w- c:\windows\system32\ZoneLabs

2009-10-20 16:18 . 2009-10-20 16:18 -------- d-----w- c:\program files\Zone Labs

2009-10-19 18:00 . 2009-11-05 15:23 -------- d-----w- c:\program files\SuperCopier2

2009-10-19 17:44 . 2009-11-02 18:24 -------- d--h--w- c:\documents and settings\root\Application Data\drivers

2009-10-19 17:36 . 2009-10-19 17:36 -------- d-----w- c:\documents and settings\root\Local Settings\Application Data\Thunderbird

2009-10-19 17:36 . 2009-10-19 17:36 -------- d-----w- c:\documents and settings\root\Application Data\Thunderbird

2009-10-19 17:29 . 2009-10-19 17:29 101192 ----a-w- c:\documents and settings\root\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

2009-10-19 17:00 . 2009-10-19 17:00 -------- d-----w- c:\documents and settings\root\Application Data\Malwarebytes

2009-10-19 16:57 . 2009-10-19 16:57 -------- d-----w- c:\documents and settings\root\Local Settings\Application Data\Mozilla

2009-10-19 16:56 . 2009-10-19 16:56 -------- d-----w- c:\documents and settings\root\Application Data\PCToolsFirewallPlus

2009-10-19 15:47 . 2009-11-04 16:49 -------- d--h--w- c:\documents and settings\Jean\Application Data\drivers

 

.

(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

.

2009-11-05 16:00 . 2006-12-07 09:29 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP

2009-11-05 15:22 . 2006-12-07 09:29 -------- d-----w- c:\program files\DAP

2009-11-05 15:20 . 2006-01-19 08:30 -------- d-----w- c:\program files\Mozilla Thunderbird

2009-11-05 15:12 . 2009-06-04 16:48 -------- d-----w- c:\program files\Firefox

2009-11-04 16:41 . 2009-05-23 18:46 -------- d-----w- c:\program files\PC Tools Firewall Plus

2009-11-04 16:37 . 2009-05-23 18:46 -------- d-----w- c:\program files\Fichiers communs\PC Tools

2009-11-04 15:02 . 2006-01-18 21:32 -------- d-----w- c:\documents and settings\Jean\Application Data\Skype

2009-10-30 16:24 . 2008-10-10 17:54 -------- d-----w- c:\documents and settings\Jean\Application Data\Winamp

2009-10-29 16:40 . 2009-05-27 17:29 -------- d-----w- c:\documents and settings\Jean\Application Data\StarDict

2009-10-21 18:21 . 2006-01-19 10:04 -------- d-----w- c:\program files\WXTide32

2009-10-16 17:57 . 2009-08-08 16:29 -------- d-----w- c:\program files\OpenERP AllInOne

2009-10-15 18:06 . 1979-12-31 23:00 83564 ----a-w- c:\windows\system32\perfc00C.dat

2009-10-15 18:06 . 1979-12-31 23:00 506994 ----a-w- c:\windows\system32\perfh00C.dat

2009-10-14 16:20 . 2009-03-08 18:44 -------- d-----w- c:\documents and settings\Jean\Application Data\dvdcss

2009-09-27 15:16 . 2006-02-22 17:11 -------- d-----w- c:\program files\Google

2009-09-26 17:28 . 2007-06-14 17:52 -------- d-----w- c:\documents and settings\Jean\Application Data\gtk-2.0

2009-09-25 05:36 . 1979-12-31 23:00 671232 ------w- c:\windows\system32\wininet.dll

2009-09-25 05:36 . 1979-12-31 23:00 81920 ----a-w- c:\windows\system32\ieencode.dll

2009-09-11 18:18 . 2009-09-11 18:18 101192 ----a-w- c:\documents and settings\eMule_Secure\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

2009-09-11 17:46 . 2006-01-19 19:41 -------- d-----w- c:\program files\QuickTime

2009-09-11 17:45 . 2008-01-06 16:20 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple Computer

2009-09-11 17:40 . 2009-09-11 17:40 -------- d-----w- c:\program files\Fichiers communs\Apple

2009-09-11 16:45 . 2009-05-27 17:29 -------- d-----w- c:\program files\StarDict

2009-09-11 16:43 . 2009-05-27 17:26 -------- d-----w- c:\program files\Fichiers communs\GTK

2009-09-11 14:18 . 1979-12-31 23:00 136192 ----a-w- c:\windows\system32\msv1_0.dll

2009-09-04 21:04 . 1979-12-31 23:00 58880 ----a-w- c:\windows\system32\msasn1.dll

2009-08-26 08:01 . 1979-12-31 23:00 247326 ----a-w- c:\windows\system32\strmdll.dll

2009-08-25 14:50 . 2006-01-18 15:54 101192 ----a-w- c:\documents and settings\Jean\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

2008-01-04 15:00 . 2008-01-04 15:00 479 ----a-w- c:\program files\SECURITE.lnk

2004-08-19 15:10 . 2006-11-08 12:11 73728 --sha-w- c:\windows\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}$BACKUP$\System\wmplayer.exe

2007-07-13 16:21 . 2006-03-02 17:08 952 --sha-w- c:\windows\system32\KGyGaAvL.sys

.

 

((((((((((((((((((((((((((((( SnapShot@2009-11-02_18.28.19 )))))))))))))))))))))))))))))))))))))))))

.

+ 2009-11-05 16:00 . 2009-11-05 16:00 16384 c:\windows\temp\Perflib_Perfdata_25c.dat

+ 2009-06-01 16:24 . 2009-03-24 16:07 55640 c:\windows\system32\drivers\avgntflt.sys

.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

REGEDIT4

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2004-05-20 532480]

"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-05 59392]

"EPM-DM"="c:\acer\ePM\EPM-DM.exe" [2004-11-03 163840]

"ePowerManagement"="c:\acer\ePM\ePM.exe" [2004-11-03 2883584]

"WinampAgent"="c:\program files\Winamp\winampa.exe" [2009-07-01 37888]

"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-07-25 149280]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-09-05 417792]

"00PCTFW"="c:\program files\PC Tools Firewall Plus\FirewallGUI.exe" [2009-02-23 2652056]

"BluetoothAuthenticationAgent"="bthprops.cpl" - c:\windows\system32\bthprops.cpl [2008-04-14 110592]

 

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]

"EnableFirewall"= 0 (0x0)

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"c:\\WINDOWS\\system32\\sessmgr.exe"=

"c:\\Program Files\\PHPEdit\\DBG\\DbgListener.exe"=

"c:\\WINDOWS\\system32\\dpvsetup.exe"=

"c:\\WINDOWS\\system32\\javaw.exe"=

"c:\\WINDOWS\\system32\\fxsclnt.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"%windir%\\system32\\sessmgr.exe"=

"c:\\Program Files\\eMule\\emule.exe"=

"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

 

R1 pctgntdi;pctgntdi;c:\windows\system32\drivers\pctgntdi.sys [04/11/2009 16:37 159600]

R1 sK9Ou0s;sK9Ou0s;c:\documents and settings\Jean\Application Data\drivers\srosa2.sys [04/11/2009 16:48 7168]

R1 SMBHC;Pilote de contrôleur hôte du bus de gestion du système Microsoft;c:\windows\system32\drivers\smbhc.sys [22/09/2004 09:04 6784]

R1 VBoxDrv;VirtualBox Service;c:\windows\system32\drivers\VBoxDrv.sys [17/05/2008 17:56 115856]

R1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\drivers\VBoxUSBMon.sys [17/05/2008 17:56 41424]

R2 HWiNFO32;HWiNFO32 Kernel Driver;c:\program files\HWiNFO32\HWiNFO32.SYS [22/12/2008 16:16 16616]

R2 PCTAppEvent;PCTAppEvent Driver;c:\windows\system32\drivers\PCTAppEvent.sys [04/11/2009 16:37 73840]

R3 SMBBATT;Pilote de batterie intelligente Microsoft;c:\windows\system32\drivers\smbbatt.sys [22/09/2004 09:04 16000]

R3 VBoxNetFlt;VBoxNetFlt Service;c:\windows\system32\drivers\VBoxNetFlt.sys [10/07/2009 17:51 99472]

S2 gupdate1c8ce3fcb863340;Google Update Service (gupdate1c8ce3fcb863340);c:\program files\Google\Update\GoogleUpdate.exe [06/09/2008 16:57 133104]

S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [28/05/2009 15:42 38160]

S3 pctplfw;pctplfw;c:\windows\system32\drivers\pctplfw.sys [04/11/2009 16:37 95640]

S3 postgresql-8.4;PostgreSQL Server 8.4;C:/Program Files/PostgreSQL/8.4/bin/pg_ctl.exe runservice -N "postgresql-8.4" -D "C:/Program Files/PostgreSQL/8.4/data" -w --> C:/Program Files/PostgreSQL/8.4/bin/pg_ctl.exe runservice -N postgresql-8.4 [?]

S3 sentemul;sentemul;c:\windows\system32\drivers\SentEmul.sys [29/03/2008 16:06 9536]

S3 silabenm;Silicon Labs CP210x USB to UART Bridge Serial Port Enumerator Driver;c:\windows\system32\drivers\silabenm.sys [02/02/2009 17:10 17920]

S3 silabser;Silicon Labs CP210x USB to UART Bridge Driver;c:\windows\system32\drivers\silabser.sys [02/02/2009 17:10 60544]

S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\drivers\VBoxNetAdp.sys [26/07/2009 16:28 91472]

S3 VBoxUSB;VirtualBox USB;c:\windows\system32\drivers\VBoxUSB.sys [16/03/2008 15:23 31824]

 

--- Autres Services/Pilotes en mémoire ---

 

*Deregistered* - mbr

.

Contenu du dossier 'Tâches planifiées'

 

2009-09-13 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2008-09-06 16:03]

.

.

------- Examen supplémentaire -------

.

uStart Page = hxxp://search.speedbit.com/

IE: &Clean Traces - c:\program files\DAP\Privacy Package\dapcleanerie.htm

IE: &Download with &DAP - c:\program files\DAP\dapextie.htm

IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200

IE: Download &all with DAP - c:\program files\DAP\dapextie2.htm

IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

FF - ProfilePath - c:\documents and settings\Jean\Application Data\Mozilla\Firefox\Profiles\51mrxkbk.jean\

FF - prefs.js: browser.startup.homepage -

FF - prefs.js: keyword.URL -

FF - component: c:\documents and settings\Jean\Application Data\Mozilla\Firefox\Profiles\51mrxkbk.jean\extensions\{3502a070-ea2f-11dd-ba2f-0800200c9a66}\components\mintray-9178506d-2005072516-trunk.dll

FF - component: c:\program files\DAP\DAPFireFox\components\DAPFireFox.dll

FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll

FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll

FF - plugin: c:\program files\Google\Update\1.2.183.7\npGoogleOneClick8.dll

FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

.

- - - - ORPHELINS SUPPRIMES - - - -

 

URLSearchHooks-{F4F10C1D-87C7-404A-B4B3-000000000000} - (no file)

 

 

 

**************************************************************************

 

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-11-05 16:02

Windows 5.1.2600 Service Pack 3 NTFS

 

Recherche de processus cachés ...

 

Recherche d'éléments en démarrage automatique cachés ...

 

Recherche de fichiers cachés ...

 

Scan terminé avec succès

Fichiers cachés: 0

 

**************************************************************************

 

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

 

device: opened successfully

user: MBR read successfully

called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys sptd.sys >>UNKNOWN [0x833868AC]<<

kernel: MBR read successfully

user & kernel MBR OK

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

 

atapi.sys @ 0x0 0x0 bytes

 

\Driver\atapi [ IRP_MJ_CREATE ] 0xA6F2 != 0xF8348B40 atapi.sys

\Driver\atapi [ IRP_MJ_CLOSE ] 0xA6F2 != 0xF8348B40 atapi.sys

\Driver\atapi [ IRP_MJ_DEVICE_CONTROL ] 0xA712 != 0xF8348B40 atapi.sys

\Driver\atapi [ IRP_MJ_INTERNAL_DEVICE_CONTROL ] 0x6852 != 0xF8348B40 atapi.sys

\Driver\atapi [ IRP_MJ_POWER ] 0xA73C != 0xF8348B40 atapi.sys

\Driver\atapi [ IRP_MJ_SYSTEM_CONTROL ] 0x11336 != 0xF8348B40 atapi.sys

\Driver\atapi IRP hooks detected !

 

**************************************************************************

 

[HKEY_LOCAL_MACHINE\System\ControlSet004\Services\postgresql-8.4]

"ImagePath"="C:/Program Files/PostgreSQL/8.4/bin/pg_ctl.exe runservice -N \"postgresql-8.4\" -D \"C:/Program Files/PostgreSQL/8.4/data\" -w"

 

[HKEY_LOCAL_MACHINE\System\ControlSet004\Services\postgresql-8.4]

"ImagePath"="C:/Program Files/PostgreSQL/8.4/bin/pg_ctl.exe runservice -N \"postgresql-8.4\" -D \"C:/Program Files/PostgreSQL/8.4/data\" -w"

.

--------------------- DLLs chargées dans les processus actifs ---------------------

 

- - - - - - - > 'explorer.exe'(3164)

c:\windows\system32\eappprxy.dll

c:\windows\system32\WPDShServiceObj.dll

c:\windows\system32\PortableDeviceTypes.dll

c:\windows\system32\PortableDeviceApi.dll

.

------------------------ Autres processus actifs ------------------------

.

c:\windows\system32\LEXBCES.EXE

c:\windows\system32\LEXPPS.EXE

c:\acer\eManager\anbmServ.exe

c:\progra~1\EASYPH~1.0B1\Apache\bin\apache.exe

c:\windows\system32\DRIVERS\CDANTSRV.EXE

c:\windows\system32\crypserv.exe

c:\program files\Java\jre6\bin\jqs.exe

c:\program files\PC Tools Firewall Plus\FWService.exe

c:\progra~1\EASYPH~1.0B1\Apache\bin\apache.exe

c:\windows\system32\wbem\wmiapsrv.exe

c:\windows\system32\wscntfy.exe

c:\windows\system32\rundll32.exe

c:\program files\Java\jre6\bin\jucheck.exe

.

**************************************************************************

.

Heure de fin: 2009-11-05 16:15 - La machine a redémarré

ComboFix-quarantined-files.txt 2009-11-05 16:15

ComboFix2.txt 2009-11-04 16:31

 

Avant-CF: 8 917 012 480 octets libres

Après-CF: 8 833 245 184 octets libres

 

Current=4 Default=4 Failed=3 LastKnownGood=6 Sets=1,2,3,4,5,6

- - End Of File - - C7E1611835DC90FC5097DDBE620F24D4

[Mark]

Bonsoir Jean

 

Malheureusement, ComboFix doit fonctionner à pleine puissance pour Bagle. Il a d'ailleurs été mis à jour pour cette nouvelle variante (merci à toi pour le fichier). ComboFix doit donc être à date aussi, et renommé sinon Bagle lui saute dessus. Là il reste une partie du rootkit de Bagle, présent et actif sur ta machine, alors ce n'est pas terminé..

 

Tu as deux options en ce moment : tu prends une nouvelle copie de ComboFix depuis une autre machine (saine), tu la renommes et la mets sur le PC infecté, ou... tu tentes d'installer Malwarebytes' Anti-Malware et tu le lances en analyse rapide directement (il est à jour aussi pour cette variante maintenant). FindyKill : l'option #1 n'est qu'un examen et ne nettoie pas ; de plus, je ne sais pas s'il est à jour pour cette variante, alors je ne te suggérerai pas de le lancer avec l'option #2 à l'aveugle, ça c'est sûr.

 

Je te suggère donc de transporter une copie fraîche et renommée de ComboFix (jean2.exe si tu veux) sur la machine infectée et de la lancer.

 

Note : ton pare-feu peut être partiellement actif, mais Bagle l'a probablement diminué et countourné déjà. Il faudra le désinstaller/réinstaller après nettoyage. Bagle met les machines infectées sur son Botnet (un réseau de machines zombies/infectées) alors ta connexion, sans pare-feu qui le gêne, lui est essentielle.

 

Fais signe si tu as des questions ou problèmes...

 

@+

[jean_pfoumf]

J'ai relancé la procédure, et la MAJ de Combofix s'est effectuée sans problème, le précédent déverminage ayant probablement neutralisé partiellement la Bête.

Ci-dessous le rapport de Combofix.

 

Néanmoins quelques messages d'erreur (vers les lignes 1800 je crois...).

 

J'ai fait une maj de MBAM mais la date de base indiquée est le 9 octobre donc je pense que le nouveau Bagle ne doit pas y être. Le scan est négatif. Je vais recommencer d'ici quelques jours. ET essayer de télécharger et lancer Combofix en direct. Ce sera le test !!!

 

En tout cas, un grand merci pour ton assistance efficace car je pense que ma machine est propre désormais. A moi de la garder telle.

 

 

 

 

ComboFix 09-11-05.05 - Jean 06/11/2009 15:12.7.1 - NTFSx86

Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.510.168 [GMT 0:00]

Lancé depuis: c:\documents and settings\Jean\Bureau\jean.exe

Commutateurs utilisés :: c:\documents and settings\Jean\Bureau\CFScript.txt

FW: PC Tools Firewall Plus *enabled* {ABBD5028-5A95-4B6D-996E-98D64AE88D52}

.

 

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))

.

 

c:\documents and settings\Jean\Application Data\drivers\downld

c:\documents and settings\Jean\Application Data\drivers\downld\1000278.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1016020.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1016301.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1016711.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1016812.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1016852.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1017312.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1018053.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1018214.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1018594.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1018724.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1018784.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1019295.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1019846.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1020106.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1020707.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1020827.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1078130.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1079402.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1079662.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1214105.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1214316.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1215918.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1216208.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1216479.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1216769.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1217480.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1218001.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1218892.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1219012.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1219243.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1219363.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1219563.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1219894.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1232141.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1232181.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1232402.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1232492.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1428303.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1429175.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1429335.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1429535.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1429765.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1429886.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1429986.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1430476.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1431358.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1431638.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1431878.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1432129.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1432840.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1433441.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1433501.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1433621.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1434152.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1434853.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1434973.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1435013.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1435093.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1435534.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1435654.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1435694.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1435854.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1436385.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1443735.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1447591.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1447721.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1448352.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1449424.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1449484.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1449914.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1450075.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1450175.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1450525.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1450645.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1450665.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1451066.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1454140.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1454321.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1454441.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1454681.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1455002.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1455172.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1455833.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1456173.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1456213.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1457105.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1457185.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1457545.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1457876.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1457976.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1458206.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1458226.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1458286.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1458617.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1459738.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1459999.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1460059.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1460460.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1461331.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1461681.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1461912.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1463173.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1463183.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1463384.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1463634.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1463995.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1464605.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1465246.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1465307.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1465527.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1466008.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1466568.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1466608.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1467249.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1467960.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1468201.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1468581.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1468641.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1468741.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1469222.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1470143.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1470294.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1470634.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1470724.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1470764.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1471375.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1472267.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1472527.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1472867.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1472907.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1472927.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1473478.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1474650.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1475081.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1475411.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1475531.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1475571.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1476062.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1477123.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1477304.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1477564.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1477684.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1477784.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1478155.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1479427.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1479787.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1480368.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1480749.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1480869.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1481330.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1481710.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1481880.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1482291.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1482371.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1482461.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1482812.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1483393.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1483453.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1483713.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1483773.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1492936.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1497463.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1497763.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1499365.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1517301.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1517401.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1659356.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1659466.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1661028.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1661208.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1661248.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1662470.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1662590.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1663021.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1663962.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1664022.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1664082.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1664142.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1664243.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1664503.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1664984.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1665104.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1665194.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1665394.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1665955.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1666486.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1666856.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1667207.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1667637.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1667698.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1668228.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1669530.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1669650.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1669901.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1670001.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1670081.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1670301.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1670982.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1671022.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1671092.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1671173.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1671523.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1672905.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1673035.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1673256.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1673436.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1673496.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1674117.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1674848.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1675028.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1675439.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1675499.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1675549.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1676210.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1678072.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1678112.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1678193.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1678253.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1678793.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1678834.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1680286.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1680386.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1680446.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1680606.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1680957.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1681017.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1682419.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1682729.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1682789.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1683090.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1683941.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1684602.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1684722.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1684862.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1685413.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1685934.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1685974.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1686615.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1686755.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1687246.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1687887.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1688007.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1688517.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1688658.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1688698.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1688738.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1688928.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1689359.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1689629.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1691151.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1691502.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1692754.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1692794.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1693274.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1694386.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1694466.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1694646.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1694706.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1694786.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1695097.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1696479.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1696679.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1696799.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1697040.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1697771.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1698392.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1698512.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1698732.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1699203.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1699613.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1699704.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1700124.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1700324.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1700435.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1700765.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1700785.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1700825.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1701086.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1702297.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1702488.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1702838.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1703118.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1703779.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1704130.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1705091.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1705181.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1705242.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1706473.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1707224.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1707785.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1708927.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1709147.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1709377.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1709798.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1710429.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1711030.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1711130.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1711190.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1711430.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1711551.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1711691.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1712091.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1713694.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1713734.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1713774.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1715126.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1715196.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1715747.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1716548.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1716668.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1717048.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1717269.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1718140.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1718501.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1718661.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1718821.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1718921.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1719091.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1719111.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1719492.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1720804.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1720954.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1721345.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1721365.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1721575.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1722166.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1722787.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1722947.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1723428.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1723708.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1723768.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1724339.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1725921.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1726021.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1726041.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1726102.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1726332.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1727534.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1727674.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1727724.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1727814.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1728205.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1728295.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1729677.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1729907.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1729997.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1731179.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1731369.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1731670.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1732571.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1732711.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1732901.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1733082.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1733482.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1733813.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1734003.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1734243.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1734764.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1735114.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1735155.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1735635.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1736046.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1736396.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1736907.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1736947.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1736997.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1737538.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1738700.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1738820.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1738990.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1739050.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1739321.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1739541.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1740993.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1741103.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1741223.exe

c:\documents and settings\Jean\Application Data\drivers\downld\1741333.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2179183.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2192402.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2210228.exe

c:\documents and settings\Jean\Application Data\drivers\downld\226085.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2478964.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2497220.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2507575.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2561733.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2567792.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2568453.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2569464.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2577896.exe

c:\documents and settings\Jean\Application Data\drivers\downld\2581271.exe

c:\documents and settings\Jean\Application Data\drivers\downld\267184.exe

c:\documents and settings\Jean\Application Data\drivers\downld\359036.exe

c:\documents and settings\Jean\Application Data\drivers\downld\364103.exe

c:\documents and settings\Jean\Application Data\drivers\downld\364293.exe

c:\documents and settings\Jean\Application Data\drivers\downld\364864.exe

c:\documents and settings\Jean\Application Data\drivers\downld\364914.exe

c:\documents and settings\Jean\Application Data\drivers\downld\365345.exe

c:\documents and settings\Jean\Application Data\drivers\downld\365655.exe

c:\documents and settings\Jean\Application Data\drivers\downld\365976.exe

c:\documents and settings\Jean\Application Data\drivers\downld\368579.exe

c:\documents and settings\Jean\Application Data\drivers\downld\368820.exe

c:\documents and settings\Jean\Application Data\drivers\downld\369471.exe

c:\documents and settings\Jean\Application Data\drivers\downld\369581.exe

c:\documents and settings\Jean\Application Data\drivers\downld\369751.exe

c:\documents and settings\Jean\Application Data\drivers\downld\371273.exe

c:\documents and settings\Jean\Application Data\drivers\downld\371394.exe

c:\documents and settings\Jean\Application Data\drivers\downld\371654.exe

c:\documents and settings\Jean\Application Data\drivers\downld\372225.exe

c:\documents and settings\Jean\Application Data\drivers\downld\372305.exe

c:\documents and settings\Jean\Application Data\drivers\downld\375890.exe

c:\documents and settings\Jean\Application Data\drivers\downld\376020.exe

c:\documents and settings\Jean\Application Data\drivers\downld\376311.exe

c:\documents and settings\Jean\Application Data\drivers\downld\376691.exe

c:\documents and settings\Jean\Application Data\drivers\downld\377633.exe

c:\documents and settings\Jean\Application Data\drivers\downld\378213.exe

c:\documents and settings\Jean\Application Data\drivers\downld\378604.exe

c:\documents and settings\Jean\Application Data\drivers\downld\378894.exe

c:\documents and settings\Jean\Application Data\drivers\downld\379695.exe

c:\documents and settings\Jean\Application Data\drivers\downld\379856.exe

c:\documents and settings\Jean\Application Data\drivers\downld\380076.exe

c:\documents and settings\Jean\Application Data\drivers\downld\380427.exe

c:\documents and settings\Jean\Application Data\drivers\downld\380977.exe

c:\documents and settings\Jean\Application Data\drivers\downld\381097.exe

c:\documents and settings\Jean\Application Data\drivers\downld\381118.exe

c:\documents and settings\Jean\Application Data\drivers\downld\381728.exe

c:\documents and settings\Jean\Application Data\drivers\downld\381919.exe

c:\documents and settings\Jean\Application Data\drivers\downld\382550.exe

c:\documents and settings\Jean\Application Data\drivers\downld\382570.exe

c:\documents and settings\Jean\Application Data\drivers\downld\382710.exe

c:\documents and settings\Jean\Application Data\drivers\downld\382730.exe

c:\documents and settings\Jean\Application Data\drivers\downld\382950.exe

c:\documents and settings\Jean\Application Data\drivers\downld\383080.exe

c:\documents and settings\Jean\Application Data\drivers\downld\384392.exe

c:\documents and settings\Jean\Application Data\drivers\downld\384583.exe

c:\documents and settings\Jean\Application Data\drivers\downld\384723.exe

c:\documents and settings\Jean\Application Data\drivers\downld\385103.exe

c:\documents and settings\Jean\Application Data\drivers\downld\385944.exe

c:\documents and settings\Jean\Application Data\drivers\downld\386525.exe

c:\documents and settings\Jean\Application Data\drivers\downld\386826.exe

c:\documents and settings\Jean\Application Data\drivers\downld\387046.exe

c:\documents and settings\Jean\Application Data\drivers\downld\387867.exe

c:\documents and settings\Jean\Application Data\drivers\downld\387887.exe

c:\documents and settings\Jean\Application Data\drivers\downld\388228.exe

c:\documents and settings\Jean\Application Data\drivers\downld\388829.exe

c:\documents and settings\Jean\Application Data\drivers\downld\389590.exe

c:\documents and settings\Jean\Application Data\drivers\downld\389720.exe

c:\documents and settings\Jean\Application Data\drivers\downld\389780.exe

c:\documents and settings\Jean\Application Data\drivers\downld\390321.exe

c:\documents and settings\Jean\Application Data\drivers\downld\390581.exe

c:\documents and settings\Jean\Application Data\drivers\downld\391002.exe

c:\documents and settings\Jean\Application Data\drivers\downld\392103.exe

c:\documents and settings\Jean\Application Data\drivers\downld\392464.exe

c:\documents and settings\Jean\Application Data\drivers\downld\392504.exe

c:\documents and settings\Jean\Application Data\drivers\downld\393495.exe

c:\documents and settings\Jean\Application Data\drivers\downld\393946.exe

c:\documents and settings\Jean\Application Data\drivers\downld\394066.exe

c:\documents and settings\Jean\Application Data\drivers\downld\395188.exe

c:\documents and settings\Jean\Application Data\drivers\downld\395298.exe

c:\documents and settings\Jean\Application Data\drivers\downld\395338.exe

c:\documents and settings\Jean\Application Data\drivers\downld\395919.exe

c:\documents and settings\Jean\Application Data\drivers\downld\396089.exe

c:\documents and settings\Jean\Application Data\drivers\downld\396109.exe

c:\documents and settings\Jean\Application Data\drivers\downld\396590.exe

c:\documents and settings\Jean\Application Data\drivers\downld\396600.exe

c:\documents and settings\Jean\Application Data\drivers\downld\396690.exe

c:\documents and settings\Jean\Application Data\drivers\downld\396780.exe

c:\documents and settings\Jean\Application Data\drivers\downld\397491.exe

c:\documents and settings\Jean\Application Data\drivers\downld\397671.exe

c:\documents and settings\Jean\Application Data\drivers\downld\397691.exe

c:\documents and settings\Jean\Application Data\drivers\downld\398102.exe

c:\documents and settings\Jean\Application Data\drivers\downld\398533.exe

c:\documents and settings\Jean\Application Data\drivers\downld\398683.exe

c:\documents and settings\Jean\Application Data\drivers\downld\406804.exe

c:\documents and settings\Jean\Application Data\drivers\downld\409218.exe

c:\documents and settings\Jean\Application Data\drivers\downld\409298.exe

c:\documents and settings\Jean\Application Data\drivers\downld\409318.exe

c:\documents and settings\Jean\Application Data\drivers\downld\409719.exe

c:\documents and settings\Jean\Application Data\drivers\downld\409849.exe

c:\documents and settings\Jean\Application Data\drivers\downld\410259.exe

c:\documents and settings\Jean\Application Data\drivers\downld\410520.exe

c:\documents and settings\Jean\Application Data\drivers\downld\412042.exe

c:\documents and settings\Jean\Application Data\drivers\downld\412082.exe

c:\documents and settings\Jean\Application Data\drivers\downld\412162.exe

c:\documents and settings\Jean\Application Data\drivers\downld\412753.exe

c:\documents and settings\Jean\Application Data\drivers\downld\413234.exe

c:\documents and settings\Jean\Application Data\drivers\downld\413314.exe

c:\documents and settings\Jean\Application Data\drivers\downld\414475.exe

c:\documents and settings\Jean\Application Data\drivers\downld\414676.exe

c:\documents and settings\Jean\Application Data\drivers\downld\414876.exe

c:\documents and settings\Jean\Application Data\drivers\downld\415227.exe

c:\documents and settings\Jean\Application Data\drivers\downld\416088.exe

c:\documents and settings\Jean\Application Data\drivers\downld\416639.exe

c:\documents and settings\Jean\Application Data\drivers\downld\417079.exe

c:\documents and settings\Jean\Application Data\drivers\downld\417400.exe

c:\documents and settings\Jean\Application Data\drivers\downld\417870.exe

c:\documents and settings\Jean\Application Data\drivers\downld\417991.exe

c:\documents and settings\Jean\Application Data\drivers\downld\418061.exe

c:\documents and settings\Jean\Application Data\drivers\downld\418091.exe

c:\documents and settings\Jean\Application Data\drivers\downld\418591.exe

c:\documents and settings\Jean\Application Data\drivers\downld\419383.exe

c:\documents and settings\Jean\Application Data\drivers\downld\419643.exe

c:\documents and settings\Jean\Application Data\drivers\downld\419793.exe

c:\documents and settings\Jean\Application Data\drivers\downld\420114.exe

c:\documents and settings\Jean\Application Data\drivers\downld\421035.exe

c:\documents and settings\Jean\Application Data\drivers\downld\421496.exe

c:\documents and settings\Jean\Application Data\drivers\downld\421556.exe

c:\documents and settings\Jean\Application Data\drivers\downld\421846.exe

c:\documents and settings\Jean\Application Data\drivers\downld\422407.exe

c:\documents and settings\Jean\Application Data\drivers\downld\423068.exe

c:\documents and settings\Jean\Application Data\drivers\downld\423278.exe

c:\documents and settings\Jean\Application Data\drivers\downld\423729.exe

c:\documents and settings\Jean\Application Data\drivers\downld\423949.exe

c:\documents and settings\Jean\Application Data\drivers\downld\424139.exe

c:\documents and settings\Jean\Application Data\drivers\downld\424690.exe

c:\documents and settings\Jean\Application Data\drivers\downld\425391.exe

c:\documents and settings\Jean\Application Data\drivers\downld\425591.exe

c:\documents and settings\Jean\Application Data\drivers\downld\426182.exe

c:\documents and settings\Jean\Application Data\drivers\downld\426583.exe

c:\documents and settings\Jean\Application Data\drivers\downld\426733.exe

c:\documents and settings\Jean\Application Data\drivers\downld\427154.exe

c:\documents and settings\Jean\Application Data\drivers\downld\427244.exe

c:\documents and settings\Jean\Application Data\drivers\downld\427334.exe

c:\documents and settings\Jean\Application Data\drivers\downld\427534.exe

c:\documents and settings\Jean\Application Data\drivers\downld\428195.exe

c:\documents and settings\Jean\Application Data\drivers\downld\428215.exe

c:\documents and settings\Jean\Application Data\drivers\downld\428275.exe

c:\documents and settings\Jean\Application Data\drivers\downld\428496.exe

c:\documents and settings\Jean\Application Data\drivers\downld\428596.exe

c:\documents and settings\Jean\Application Data\drivers\downld\429267.exe

c:\documents and settings\Jean\Application Data\drivers\downld\429307.exe

c:\documents and settings\Jean\Application Data\drivers\downld\429337.exe

c:\documents and settings\Jean\Application Data\drivers\downld\429467.exe

c:\documents and settings\Jean\Application Data\drivers\downld\429848.exe

c:\documents and settings\Jean\Application Data\drivers\downld\430038.exe

c:\documents and settings\Jean\Application Data\drivers\downld\431260.exe

c:\documents and settings\Jean\Application Data\drivers\downld\431560.exe

c:\documents and settings\Jean\Application Data\drivers\downld\431600.exe

c:\documents and settings\Jean\Application Data\drivers\downld\432722.exe

c:\documents and settings\Jean\Application Data\drivers\downld\432932.exe

c:\documents and settings\Jean\Application Data\drivers\downld\433343.exe

c:\documents and settings\Jean\Application Data\drivers\downld\434394.exe

c:\documents and settings\Jean\Application Data\drivers\downld\434524.exe

c:\documents and settings\Jean\Application Data\drivers\downld\434695.exe

c:\documents and settings\Jean\Application Data\drivers\downld\435015.exe

c:\documents and settings\Jean\Application Data\drivers\downld\436006.exe

c:\documents and settings\Jean\Application Data\drivers\downld\436447.exe

c:\documents and settings\Jean\Application Data\drivers\downld\436748.exe

c:\documents and settings\Jean\Application Data\drivers\downld\436808.exe

c:\documents and settings\Jean\Application Data\drivers\downld\436898.exe

c:\documents and settings\Jean\Application Data\drivers\downld\437018.exe

c:\documents and settings\Jean\Application Data\drivers\downld\437158.exe

c:\documents and settings\Jean\Application Data\drivers\downld\437469.exe

c:\documents and settings\Jean\Application Data\drivers\downld\438190.exe

c:\documents and settings\Jean\Application Data\drivers\downld\438420.exe

c:\documents and settings\Jean\Application Data\drivers\downld\438891.exe

c:\documents and settings\Jean\Application Data\drivers\downld\438951.exe

c:\documents and settings\Jean\Application Data\drivers\downld\439041.exe

c:\documents and settings\Jean\Application Data\drivers\downld\439461.exe

c:\documents and settings\Jean\Application Data\drivers\downld\440233.exe

c:\documents and settings\Jean\Application Data\drivers\downld\440463.exe

c:\documents and settings\Jean\Application Data\drivers\downld\440803.exe

c:\documents and settings\Jean\Application Data\drivers\downld\440944.exe

c:\documents and settings\Jean\Application Data\drivers\downld\441534.exe

c:\documents and settings\Jean\Application Data\drivers\downld\442285.exe

c:\documents and settings\Jean\Application Data\drivers\downld\442356.exe

c:\documents and settings\Jean\Application Data\drivers\downld\442556.exe

c:\documents and settings\Jean\Application Data\drivers\downld\442616.exe

c:\documents and settings\Jean\Application Data\drivers\downld\442696.exe

c:\documents and settings\Jean\Application Data\drivers\downld\442946.exe

c:\documents and settings\Jean\Application Data\drivers\downld\443818.exe

c:\documents and settings\Jean\Application Data\drivers\downld\443848.exe

c:\documents and settings\Jean\Application Data\drivers\downld\443858.exe

c:\documents and settings\Jean\Application Data\drivers\downld\443958.exe

c:\documents and settings\Jean\Application Data\drivers\downld\444188.exe

c:\documents and settings\Jean\Application Data\drivers\downld\444198.exe

c:\documents and settings\Jean\Application Data\drivers\downld\444449.exe

c:\documents and settings\Jean\Application Data\drivers\downld\444529.exe

c:\documents and settings\Jean\Application Data\drivers\downld\444759.exe

c:\documents and settings\Jean\Application Data\drivers\downld\445270.exe

c:\documents and settings\Jean\Application Data\drivers\downld\445410.exe

c:\documents and settings\Jean\Application Data\drivers\downld\445520.exe

c:\documents and settings\Jean\Application Data\drivers\downld\445750.exe

c:\documents and settings\Jean\Application Data\drivers\downld\446712.exe

c:\documents and settings\Jean\Application Data\drivers\downld\447132.exe

c:\documents and settings\Jean\Application Data\drivers\downld\447233.exe

c:\documents and settings\Jean\Application Data\drivers\downld\447273.exe

c:\documents and settings\Jean\Application Data\drivers\downld\447513.exe

c:\documents and settings\Jean\Application Data\drivers\downld\447944.exe

c:\documents and settings\Jean\Application Data\drivers\downld\448064.exe

c:\documents and settings\Jean\Application Data\drivers\downld\449306.exe

c:\documents and settings\Jean\Application Data\drivers\downld\449496.exe

c:\documents and settings\Jean\Application Data\drivers\downld\449556.exe

c:\documents and settings\Jean\Application Data\drivers\downld\450617.exe

c:\documents and settings\Jean\Application Data\drivers\downld\450808.exe

c:\documents and settings\Jean\Application Data\drivers\downld\451098.exe

c:\documents and settings\Jean\Application Data\drivers\downld\452460.exe

c:\documents and settings\Jean\Application Data\drivers\downld\452630.exe

c:\documents and settings\Jean\Application Data\drivers\downld\453071.exe

c:\documents and settings\Jean\Application Data\drivers\downld\453381.exe

c:\documents and settings\Jean\Application Data\drivers\downld\475383.exe

c:\documents and settings\Jean\Application Data\drivers\downld\476395.exe

c:\documents and settings\Jean\Application Data\drivers\downld\476525.exe

c:\documents and settings\Jean\Application Data\drivers\downld\485748.exe

c:\documents and settings\Jean\Application Data\drivers\downld\488141.exe

c:\documents and settings\Jean\Application Data\drivers\downld\488752.exe

c:\documents and settings\Jean\Application Data\drivers\downld\519206.exe

c:\documents and settings\Jean\Application Data\drivers\downld\520628.exe

c:\documents and settings\Jean\Application Data\drivers\downld\521049.exe

c:\documents and settings\Jean\Application Data\drivers\downld\636324.exe

c:\documents and settings\Jean\Application Data\drivers\downld\647771.exe

c:\documents and settings\Jean\Application Data\drivers\downld\647961.exe

c:\documents and settings\Jean\Application Data\drivers\downld\648252.exe

c:\documents and settings\Jean\Application Data\drivers\downld\648302.exe

c:\documents and settings\Jean\Application Data\drivers\downld\648442.exe

c:\documents and settings\Jean\Application Data\drivers\downld\648903.exe

c:\documents and settings\Jean\Application Data\drivers\downld\649924.exe

c:\documents and settings\Jean\Application Data\drivers\downld\650074.exe

c:\documents and settings\Jean\Application Data\drivers\downld\650315.exe

c:\documents and settings\Jean\Application Data\drivers\downld\650465.exe

c:\documents and settings\Jean\Application Data\drivers\downld\650485.exe

c:\documents and settings\Jean\Application Data\drivers\downld\650956.exe

c:\documents and settings\Jean\Application Data\drivers\downld\651637.exe

c:\documents and settings\Jean\Application Data\drivers\downld\651837.exe

c:\documents and settings\Jean\Application Data\drivers\downld\652448.exe

c:\documents and settings\Jean\Application Data\drivers\downld\652568.exe

c:\documents and settings\Jean\Application Data\drivers\downld\652698.exe

c:\documents and settings\Jean\Application Data\drivers\downld\653229.exe

c:\documents and settings\Jean\Application Data\drivers\downld\653689.exe

c:\documents and settings\Jean\Application Data\drivers\downld\653810.exe

c:\documents and settings\Jean\Application Data\drivers\downld\654290.exe

c:\documents and settings\Jean\Application Data\drivers\downld\654821.exe

c:\documents and settings\Jean\Application Data\drivers\downld\655041.exe

c:\documents and settings\Jean\Application Data\drivers\downld\655382.exe

c:\documents and settings\Jean\Application Data\drivers\downld\655522.exe

c:\documents and settings\Jean\Application Data\drivers\downld\655562.exe

c:\documents and settings\Jean\Application Data\drivers\downld\655762.exe

c:\documents and settings\Jean\Application Data\drivers\downld\655883.exe

c:\documents and settings\Jean\Application Data\drivers\downld\656153.exe

c:\documents and settings\Jean\Application Data\drivers\downld\656493.exe

c:\documents and settings\Jean\Application Data\drivers\downld\657355.exe

c:\documents and settings\Jean\Application Data\drivers\downld\657615.exe

c:\documents and settings\Jean\Application Data\drivers\downld\657785.exe

c:\documents and settings\Jean\Application Data\drivers\downld\658076.exe

c:\documents and settings\Jean\Application Data\drivers\downld\658797.exe

c:\documents and settings\Jean\Application Data\drivers\downld\659368.exe

c:\documents and settings\Jean\Application Data\drivers\downld\659428.exe

c:\documents and settings\Jean\Application Data\drivers\downld\659528.exe

c:\documents and settings\Jean\Application Data\drivers\downld\659628.exe

c:\documents and settings\Jean\Application Data\drivers\downld\659748.exe

c:\documents and settings\Jean\Application Data\drivers\downld\660209.exe

c:\documents and settings\Jean\Application Data\drivers\downld\660229.exe

c:\documents and settings\Jean\Application Data\drivers\downld\661661.exe

c:\documents and settings\Jean\Application Data\drivers\downld\661991.exe

c:\documents and settings\Jean\Application Data\drivers\downld\662752.exe

c:\documents and settings\Jean\Application Data\drivers\downld\663383.exe

c:\documents and settings\Jean\Application Data\drivers\downld\663714.exe

c:\documents and settings\Jean\Application Data\drivers\downld\664475.exe

c:\documents and settings\Jean\Application Data\drivers\downld\664725.exe

c:\documents and settings\Jean\Application Data\drivers\downld\665226.exe

c:\documents and settings\Jean\Application Data\drivers\downld\665266.exe

c:\documents and settings\Jean\Application Data\drivers\downld\665817.exe

c:\documents and settings\Jean\Application Data\drivers\downld\666538.exe

c:\documents and settings\Jean\Application Data\drivers\downld\666698.exe

c:\documents and settings\Jean\Application Data\drivers\downld\667159.exe

c:\documents and settings\Jean\Application Data\drivers\downld\667179.exe

c:\documents and settings\Jean\Application Data\drivers\downld\667279.exe

c:\documents and settings\Jean\Application Data\drivers\downld\667609.exe

c:\documents and settings\Jean\Application Data\drivers\downld\668190.exe

c:\documents and settings\Jean\Application Data\drivers\downld\668200.exe

c:\documents and settings\Jean\Application Data\drivers\downld\668220.exe

c:\documents and settings\Jean\Application Data\drivers\downld\668300.exe

c:\documents and settings\Jean\Application Data\drivers\downld\668320.exe

c:\documents and settings\Jean\Application Data\drivers\downld\668701.exe

c:\documents and settings\Jean\Application Data\drivers\downld\668751.exe

c:\documents and settings\Jean\Application Data\drivers\downld\668791.exe

c:\documents and settings\Jean\Application Data\drivers\downld\668881.exe

c:\documents and settings\Jean\Application Data\drivers\downld\668891.exe

c:\documents and settings\Jean\Application Data\drivers\downld\669712.exe

c:\documents and settings\Jean\Application Data\drivers\downld\669793.exe

c:\documents and settings\Jean\Application Data\drivers\downld\669813.exe

c:\documents and settings\Jean\Application Data\drivers\downld\670063.exe

c:\documents and settings\Jean\Application Data\drivers\downld\670474.exe

c:\documents and settings\Jean\Application Data\drivers\downld\670934.exe

c:\documents and settings\Jean\Application Data\drivers\downld\671215.exe

c:\documents and settings\Jean\Application Data\drivers\downld\671435.exe

c:\documents and settings\Jean\Application Data\drivers\downld\671876.exe

c:\documents and settings\Jean\Application Data\drivers\downld\672406.exe

c:\documents and settings\Jean\Application Data\drivers\downld\672707.exe

c:\documents and settings\Jean\Application Data\drivers\downld\673318.exe

c:\documents and settings\Jean\Application Data\drivers\downld\673468.exe

c:\documents and settings\Jean\Application Data\drivers\downld\673528.exe

c:\documents and settings\Jean\Application Data\drivers\downld\673708.exe

c:\documents and settings\Jean\Application Data\drivers\downld\674029.exe

c:\documents and settings\Jean\Application Data\drivers\downld\674109.exe

c:\documents and settings\Jean\Application Data\drivers\downld\675281.exe

c:\documents and settings\Jean\Application Data\drivers\downld\675641.exe

c:\documents and settings\Jean\Application Data\drivers\downld\676432.exe

c:\documents and settings\Jean\Application Data\drivers\downld\677053.exe

c:\documents and settings\Jean\Application Data\drivers\downld\677243.exe

c:\documents and settings\Jean\Application Data\drivers\downld\678235.exe

c:\documents and settings\Jean\Application Data\drivers\downld\678445.exe

c:\documents and settings\Jean\Application Data\drivers\downld\678495.exe

c:\documents and settings\Jean\Application Data\drivers\downld\679757.exe

c:\documents and settings\Jean\Application Data\drivers\downld\679987.exe

c:\documents and settings\Jean\Application Data\drivers\downld\680498.exe

c:\documents and settings\Jean\Application Data\drivers\downld\681509.exe

c:\documents and settings\Jean\Application Data\drivers\downld\681720.exe

c:\documents and settings\Jean\Application Data\drivers\downld\682100.exe

c:\documents and settings\Jean\Application Data\drivers\downld\682190.exe

c:\documents and settings\Jean\Application Data\drivers\downld\682251.exe

c:\documents and settings\Jean\Application Data\drivers\downld\682651.exe

c:\documents and settings\Jean\Application Data\drivers\downld\683532.exe

c:\documents and settings\Jean\Application Data\drivers\downld\683693.exe

c:\documents and settings\Jean\Application Data\drivers\downld\684133.exe

c:\documents and settings\Jean\Application Data\drivers\downld\684223.exe

c:\documents and settings\Jean\Application Data\drivers\downld\684364.exe

c:\documents and settings\Jean\Application Data\drivers\downld\684994.exe

c:\documents and settings\Jean\Application Data\drivers\downld\687568.exe

c:\documents and settings\Jean\Application Data\drivers\downld\687899.exe

c:\documents and settings\Jean\Application Data\drivers\downld\688009.exe

c:\documents and settings\Jean\Application Data\drivers\downld\688129.exe

c:\documents and settings\Jean\Application Data\drivers\downld\688329.exe

c:\documents and settings\Jean\Application Data\drivers\downld\688750.exe

c:\documents and settings\Jean\Application Data\drivers\downld\690162.exe

c:\documents and settings\Jean\Application Data\drivers\downld\690352.exe

c:\documents and settings\Jean\Application Data\drivers\downld\690883.exe

c:\documents and settings\Jean\Application Data\drivers\downld\692245.exe

c:\documents and settings\Jean\Application Data\drivers\downld\692605.exe

c:\documents and settings\Jean\Application Data\drivers\downld\693637.exe

c:\documents and settings\Jean\Application Data\drivers\downld\694037.exe

c:\documents and settings\Jean\Application Data\drivers\downld\694158.exe

c:\documents and settings\Jean\Application Data\drivers\downld\695439.exe

c:\documents and settings\Jean\Application Data\drivers\downld\695650.exe

c:\documents and settings\Jean\Application Data\drivers\downld\695820.exe

c:\documents and settings\Jean\Application Data\drivers\downld\695940.exe

c:\documents and settings\Jean\Application Data\drivers\downld\696110.exe

c:\documents and settings\Jean\Application Data\drivers\downld\696471.exe

c:\documents and settings\Jean\Application Data\drivers\downld\697382.exe

c:\documents and settings\Jean\Application Data\drivers\downld\697502.exe

c:\documents and settings\Jean\Application Data\drivers\downld\697773.exe

c:\documents and settings\Jean\Application Data\drivers\downld\697833.exe

c:\documents and settings\Jean\Application Data\drivers\downld\697953.exe

c:\documents and settings\Jean\Application Data\drivers\downld\698364.exe

c:\documents and settings\Jean\Application Data\drivers\downld\698854.exe

c:\documents and settings\Jean\Application Data\drivers\downld\698914.exe

c:\documents and settings\Jean\Application Data\drivers\downld\699215.exe

c:\documents and settings\Jean\Application Data\drivers\downld\699295.exe

c:\documents and settings\Jean\Application Data\drivers\downld\699355.exe

c:\documents and settings\Jean\Application Data\drivers\downld\699646.exe

c:\documents and settings\Jean\Application Data\drivers\downld\699816.exe

c:\documents and settings\Jean\Application Data\drivers\downld\699836.exe

c:\documents and settings\Jean\Application Data\drivers\downld\699866.exe

c:\documents and settings\Jean\Application Data\drivers\downld\699976.exe

c:\documents and settings\Jean\Application Data\drivers\downld\700627.exe

c:\documents and settings\Jean\Application Data\drivers\downld\700667.exe

c:\documents and settings\Jean\Application Data\drivers\downld\700687.exe

c:\documents and settings\Jean\Application Data\drivers\downld\700767.exe

c:\documents and settings\Jean\Application Data\drivers\downld\701068.exe

c:\documents and settings\Jean\Application Data\drivers\downld\701188.exe

c:\documents and settings\Jean\Application Data\drivers\downld\702169.exe

c:\documents and settings\Jean\Application Data\drivers\downld\702329.exe

c:\documents and settings\Jean\Application Data\drivers\downld\702580.exe

c:\documents and settings\Jean\Application Data\drivers\downld\702740.exe

c:\documents and settings\Jean\Application Data\drivers\downld\702780.exe

c:\documents and settings\Jean\Application Data\drivers\downld\703221.exe

c:\documents and settings\Jean\Application Data\drivers\downld\703982.exe

c:\documents and settings\Jean\Application Data\drivers\downld\704102.exe

c:\documents and settings\Jean\Application Data\drivers\downld\704523.exe

c:\documents and settings\Jean\Application Data\drivers\downld\704643.exe

c:\documents and settings\Jean\Application Data\drivers\downld\704693.exe

c:\documents and settings\Jean\Application Data\drivers\downld\705153.exe

c:\documents and settings\Jean\Application Data\drivers\downld\705925.exe

c:\documents and settings\Jean\Application Data\drivers\downld\706185.exe

c:\documents and settings\Jean\Application Data\drivers\downld\706405.exe

c:\documents and settings\Jean\Application Data\drivers\downld\706465.exe

c:\documents and settings\Jean\Application Data\drivers\downld\706596.exe

c:\documents and settings\Jean\Application Data\drivers\downld\706936.exe

c:\documents and settings\Jean\Application Data\drivers\downld\707737.exe

c:\documents and settings\Jean\Application Data\drivers\downld\707887.exe

c:\documents and settings\Jean\Application Data\drivers\downld\708158.exe

c:\documents and settings\Jean\Application Data\drivers\downld\708218.exe

c:\documents and settings\Jean\Application Data\drivers\downld\708368.exe

c:\documents and settings\Jean\Application Data\drivers\downld\708769.exe

c:\documents and settings\Jean\Application Data\drivers\downld\709820.exe

c:\documents and settings\Jean\Application Data\drivers\downld\709940.exe

c:\documents and settings\Jean\Application Data\drivers\downld\710211.exe

c:\documents and settings\Jean\Application Data\drivers\downld\710431.exe

c:\documents and settings\Jean\Application Data\drivers\downld\710461.exe

c:\documents and settings\Jean\Application Data\drivers\downld\710902.exe

c:\documents and settings\Jean\Application Data\drivers\downld\711793.exe

c:\documents and settings\Jean\Application Data\drivers\downld\711953.exe

c:\documents and settings\Jean\Application Data\drivers\downld\712184.exe

c:\documents and settings\Jean\Application Data\drivers\downld\712244.exe

c:\documents and settings\Jean\Application Data\drivers\downld\732673.exe

c:\documents and settings\Jean\Application Data\drivers\downld\741536.exe

c:\documents and settings\Jean\Application Data\drivers\downld\741966.exe

c:\documents and settings\Jean\Application Data\drivers\downld\751410.exe

c:\documents and settings\Jean\Application Data\drivers\downld\754755.exe

c:\documents and settings\Jean\Application Data\drivers\downld\756557.exe

c:\documents and settings\Jean\Application Data\drivers\downld\892633.exe

c:\documents and settings\Jean\Application Data\drivers\downld\892843.exe

c:\documents and settings\Jean\Application Data\drivers\downld\894045.exe

c:\documents and settings\Jean\Application Data\drivers\downld\894215.exe

c:\documents and settings\Jean\Application Data\drivers\downld\894446.exe

c:\documents and settings\Jean\Application Data\drivers\downld\894766.exe

c:\documents and settings\Jean\Application Data\drivers\downld\895707.exe

c:\documents and settings\Jean\Application Data\drivers\downld\896038.exe

c:\documents and settings\Jean\Application Data\drivers\downld\896218.exe

c:\documents and settings\Jean\Application Data\drivers\downld\896288.exe

c:\documents and settings\Jean\Application Data\drivers\downld\896549.exe

c:\documents and settings\Jean\Application Data\drivers\downld\896629.exe

c:\documents and settings\Jean\Application Data\drivers\downld\896879.exe

c:\documents and settings\Jean\Application Data\drivers\downld\897320.exe

c:\documents and settings\Jean\Application Data\drivers\downld\898291.exe

c:\documents and settings\Jean\Application Data\drivers\downld\898491.exe

c:\documents and settings\Jean\Application Data\drivers\downld\898842.exe

c:\documents and settings\Jean\Application Data\drivers\downld\899052.exe

c:\documents and settings\Jean\Application Data\drivers\downld\899102.exe

c:\documents and settings\Jean\Application Data\drivers\downld\899643.exe

c:\documents and settings\Jean\Application Data\drivers\downld\900795.exe

c:\documents and settings\Jean\Application Data\drivers\downld\901045.exe

c:\documents and settings\Jean\Application Data\drivers\downld\901295.exe

c:\documents and settings\Jean\Application Data\drivers\downld\901636.exe

c:\documents and settings\Jean\Application Data\drivers\downld\902457.exe

c:\documents and settings\Jean\Application Data\drivers\downld\902858.exe

c:\documents and settings\Jean\Application Data\drivers\downld\902918.exe

c:\documents and settings\Jean\Application Data\drivers\downld\903078.exe

c:\documents and settings\Jean\Application Data\drivers\downld\903729.exe

c:\documents and settings\Jean\Application Data\drivers\downld\904250.exe

c:\documents and settings\Jean\Application Data\drivers\downld\904420.exe

c:\documents and settings\Jean\Application Data\drivers\downld\904971.exe

c:\documents and settings\Jean\Application Data\drivers\downld\905121.exe

c:\documents and settings\Jean\Application Data\drivers\downld\905301.exe

c:\documents and settings\Jean\Application Data\drivers\downld\905732.exe

c:\documents and settings\Jean\Application Data\drivers\downld\906463.exe

c:\documents and settings\Jean\Application Data\drivers\downld\906643.exe

c:\documents and settings\Jean\Application Data\drivers\downld\907164.exe

c:\documents and settings\Jean\Application Data\drivers\downld\907244.exe

c:\documents and settings\Jean\Application Data\drivers\downld\907374.exe

c:\documents and settings\Jean\Application Data\drivers\downld\907945.exe

c:\documents and settings\Jean\Application Data\drivers\downld\908546.exe

c:\documents and settings\Jean\Application Data\drivers\downld\908586.exe

c:\documents and settings\Jean\Application Data\drivers\downld\909177.exe

c:\documents and settings\Jean\Application Data\drivers\downld\909327.exe

c:\documents and settings\Jean\Application Data\drivers\downld\909688.exe

c:\documents and settings\Jean\Application Data\drivers\downld\910108.exe

c:\documents and settings\Jean\Application Data\drivers\downld\910669.exe

c:\documents and settings\Jean\Application Data\drivers\downld\910809.exe

c:\documents and settings\Jean\Application Data\drivers\downld\911490.exe

c:\documents and settings\Jean\Application Data\drivers\downld\913173.exe

c:\documents and settings\Jean\Application Data\drivers\downld\913213.exe

c:\documents and settings\Jean\Application Data\drivers\downld\913273.exe

c:\documents and settings\Jean\Application Data\drivers\downld\913503.exe

c:\documents and settings\Jean\Application Data\drivers\downld\913844.exe

c:\documents and settings\Jean\Application Data\drivers\downld\913964.exe

c:\documents and settings\Jean\Application Data\drivers\downld\916908.exe

c:\documents and settings\Jean\Application Data\drivers\downld\917038.exe

c:\documents and settings\Jean\Application Data\drivers\downld\917299.exe

c:\documents and settings\Jean\Application Data\drivers\downld\917419.exe

c:\documents and settings\Jean\Application Data\drivers\downld\917529.exe

c:\documents and settings\Jean\Application Data\drivers\downld\917989.exe

c:\documents and settings\Jean\Application Data\drivers\downld\919081.exe

c:\documents and settings\Jean\Application Data\drivers\downld\919201.exe

c:\documents and settings\Jean\Application Data\drivers\downld\919502.exe

c:\documents and settings\Jean\Application Data\drivers\downld\919712.exe

c:\documents and settings\Jean\Application Data\drivers\downld\919732.exe

c:\documents and settings\Jean\Application Data\drivers\downld\920143.exe

c:\documents and settings\Jean\Application Data\drivers\downld\920974.exe

c:\documents and settings\Jean\Application Data\drivers\downld\921244.exe

c:\documents and settings\Jean\Application Data\drivers\downld\921414.exe

c:\documents and settings\Jean\Application Data\drivers\downld\921675.exe

c:\documents and settings\Jean\Application Data\drivers\downld\922606.exe

c:\documents and settings\Jean\Application Data\drivers\downld\923217.exe

c:\documents and settings\Jean\Application Data\drivers\downld\923337.exe

c:\documents and settings\Jean\Application Data\drivers\downld\923507.exe

c:\documents and settings\Jean\Application Data\drivers\downld\924048.exe

c:\documents and settings\Jean\Application Data\drivers\downld\924429.exe

c:\documents and settings\Jean\Application Data\drivers\downld\924469.exe

c:\documents and settings\Jean\Application Data\drivers\downld\924970.exe

c:\documents and settings\Jean\Application Data\drivers\downld\925350.exe

c:\documents and settings\Jean\Application Data\drivers\downld\925520.exe

c:\documents and settings\Jean\Application Data\drivers\downld\926131.exe

c:\documents and settings\Jean\Application Data\drivers\downld\926512.exe

c:\documents and settings\Jean\Application Data\drivers\downld\926662.exe

c:\documents and settings\Jean\Application Data\drivers\downld\927063.exe

c:\documents and settings\Jean\Application Data\drivers\downld\927603.exe

c:\documents and settings\Jean\Application Data\drivers\downld\927774.exe

c:\documents and settings\Jean\Application Data\drivers\downld\928184.exe

c:\documents and settings\Jean\Application Data\drivers\downld\928475.exe

c:\documents and settings\Jean\Application Data\drivers\downld\928635.exe

c:\documents and settings\Jean\Application Data\drivers\downld\929136.exe

c:\documents and settings\Jean\Application Data\drivers\downld\929666.exe

c:\documents and settings\Jean\Application Data\drivers\downld\929937.exe

c:\documents and settings\Jean\Application Data\drivers\downld\930568.exe

c:\documents and settings\Jean\Application Data\drivers\downld\930688.exe

c:\documents and settings\Jean\Application Data\drivers\downld\930738.exe

c:\documents and settings\Jean\Application Data\drivers\downld\931188.exe

c:\documents and settings\Jean\Application Data\drivers\downld\931970.exe

c:\documents and settings\Jean\Application Data\drivers\downld\932150.exe

c:\documents and settings\Jean\Application Data\drivers\downld\932611.exe

c:\documents and settings\Jean\Application Data\drivers\downld\932651.exe

c:\documents and settings\Jean\Application Data\drivers\downld\932861.exe

c:\documents and settings\Jean\Application Data\drivers\downld\933322.exe

c:\documents and settings\Jean\Application Data\drivers\downld\934393.exe

c:\documents and settings\Jean\Application Data\drivers\downld\934553.exe

c:\documents and settings\Jean\Application Data\drivers\downld\934673.exe

c:\documents and settings\Jean\Application Data\drivers\downld\934734.exe

c:\documents and settings\Jean\Application Data\drivers\downld\934894.exe

c:\documents and settings\Jean\Application Data\drivers\downld\935164.exe

c:\documents and settings\Jean\Application Data\drivers\downld\936116.exe

c:\documents and settings\Jean\Application Data\drivers\downld\936236.exe

c:\documents and settings\Jean\Application Data\drivers\downld\936396.exe

c:\documents and settings\Jean\Application Data\drivers\downld\936726.exe

c:\documents and settings\Jean\Application Data\drivers\downld\937568.exe

c:\documents and settings\Jean\Application Data\drivers\downld\937908.exe

c:\documents and settings\Jean\Application Data\drivers\downld\938078.exe

c:\documents and settings\Jean\Application Data\drivers\downld\938159.exe

c:\documents and settings\Jean\Application Data\drivers\downld\938279.exe

c:\documents and settings\Jean\Application Data\drivers\downld\938399.exe

c:\documents and settings\Jean\Application Data\drivers\downld\938449.exe

c:\documents and settings\Jean\Application Data\drivers\downld\938990.exe

c:\documents and settings\Jean\Application Data\drivers\downld\939971.exe

c:\documents and settings\Jean\Application Data\drivers\downld\940141.exe

c:\documents and settings\Jean\Application Data\drivers\downld\940211.exe

c:\documents and settings\Jean\Application Data\drivers\downld\941513.exe

c:\documents and settings\Jean\Application Data\drivers\downld\941573.exe

c:\documents and settings\Jean\Application Data\drivers\downld\942064.exe

c:\documents and settings\Jean\Application Data\drivers\downld\942775.exe

c:\documents and settings\Jean\Application Data\drivers\downld\942875.exe

c:\documents and settings\Jean\Application Data\drivers\downld\943116.exe

c:\documents and settings\Jean\Application Data\drivers\downld\943256.exe

c:\documents and settings\Jean\Application Data\drivers\downld\943276.exe

c:\documents and settings\Jean\Application Data\drivers\downld\943536.exe

c:\documents and settings\Jean\Application Data\drivers\downld\944157.exe

c:\documents and settings\Jean\Application Data\drivers\downld\944377.exe

c:\documents and settings\Jean\Application Data\drivers\downld\944918.exe

c:\documents and settings\Jean\Application Data\drivers\downld\945038.exe

c:\documents and settings\Jean\Application Data\drivers\downld\945239.exe

c:\documents and settings\Jean\Application Data\drivers\downld\945890.exe

c:\documents and settings\Jean\Application Data\drivers\downld\945950.exe

c:\documents and settings\Jean\Application Data\drivers\downld\945970.exe

c:\documents and settings\Jean\Application Data\drivers\downld\946601.exe

c:\documents and settings\Jean\Application Data\drivers\downld\946911.exe

c:\documents and settings\Jean\Application Data\drivers\downld\947913.exe

c:\documents and settings\Jean\Application Data\drivers\downld\948113.exe

c:\documents and settings\Jean\Application Data\drivers\downld\948293.exe

c:\documents and settings\Jean\Application Data\drivers\downld\948814.exe

c:\documents and settings\Jean\Application Data\drivers\downld\949405.exe

c:\documents and settings\Jean\Application Data\drivers\downld\949525.exe

c:\documents and settings\Jean\Application Data\drivers\downld\950106.exe

c:\documents and settings\Jean\Application Data\drivers\downld\950206.exe

c:\documents and settings\Jean\Application Data\drivers\downld\950356.exe

c:\documents and settings\Jean\Application Data\drivers\downld\950977.exe

c:\documents and settings\Jean\Application Data\drivers\downld\951518.exe

c:\documents and settings\Jean\Application Data\drivers\downld\951678.exe

c:\documents and settings\Jean\Application Data\drivers\downld\952119.exe

c:\documents and settings\Jean\Application Data\drivers\downld\952209.exe

c:\documents and settings\Jean\Application Data\drivers\downld\952249.exe

c:\documents and settings\Jean\Application Data\drivers\downld\952329.exe

c:\documents and settings\Jean\Application Data\drivers\downld\952529.exe

c:\documents and settings\Jean\Application Data\drivers\downld\952749.exe

c:\documents and settings\Jean\Application Data\drivers\downld\953000.exe

c:\documents and settings\Jean\Application Data\drivers\downld\954282.exe

c:\documents and settings\Jean\Application Data\drivers\downld\954402.exe

c:\documents and settings\Jean\Application Data\drivers\downld\954682.exe

c:\documents and settings\Jean\Application Data\drivers\downld\954832.exe

c:\documents and settings\Jean\Application Data\drivers\downld\954933.exe

c:\documents and settings\Jean\Application Data\drivers\downld\955413.exe

c:\documents and settings\Jean\Application Data\drivers\downld\956395.exe

c:\documents and settings\Jean\Application Data\drivers\downld\956565.exe

c:\documents and settings\Jean\Application Data\drivers\downld\956996.exe

c:\documents and settings\Jean\Application Data\drivers\downld\957096.exe

c:\documents and settings\Jean\Application Data\drivers\downld\957216.exe

c:\documents and settings\Jean\Application Data\drivers\downld\957647.exe

c:\documents and settings\Jean\Application Data\drivers\downld\958528.exe

c:\documents and settings\Jean\Application Data\drivers\downld\958738.exe

c:\documents and settings\Jean\Application Data\drivers\downld\959149.exe

c:\documents and settings\Jean\Application Data\drivers\downld\959299.exe

c:\documents and settings\Jean\Application Data\drivers\downld\959810.exe

c:\documents and settings\Jean\Application Data\drivers\downld\960691.exe

c:\documents and settings\Jean\Application Data\drivers\downld\960891.exe

c:\documents and settings\Jean\Application Data\drivers\downld\961222.exe

c:\documents and settings\Jean\Application Data\drivers\downld\961532.exe

c:\documents and settings\Jean\Application Data\drivers\downld\962293.exe

c:\documents and settings\Jean\Application Data\drivers\downld\962944.exe

c:\documents and settings\Jean\Application Data\drivers\downld\964406.exe

c:\documents and settings\Jean\Application Data\drivers\downld\964546.exe

c:\documents and settings\Jean\Application Data\drivers\downld\964807.exe

c:\documents and settings\Jean\Application Data\drivers\downld\965328.exe

c:\documents and settings\Jean\Application Data\drivers\downld\965828.exe

c:\documents and settings\Jean\Application Data\drivers\downld\966309.exe

c:\documents and settings\Jean\Application Data\drivers\downld\967260.exe

c:\documents and settings\Jean\Application Data\drivers\downld\967391.exe

c:\documents and settings\Jean\Application Data\drivers\downld\967771.exe

c:\documents and settings\Jean\Application Data\drivers\downld\967891.exe

c:\documents and settings\Jean\Application Data\drivers\downld\967941.exe

c:\documents and settings\Jean\Application Data\drivers\downld\968482.exe

c:\documents and settings\Jean\Application Data\drivers\downld\969654.exe

c:\documents and settings\Jean\Application Data\drivers\downld\969774.exe

c:\documents and settings\Jean\Application Data\drivers\downld\969994.exe

c:\documents and settings\Jean\Application Data\drivers\downld\970155.exe

c:\documents and settings\Jean\Application Data\drivers\downld\970205.exe

c:\documents and settings\Jean\Application Data\drivers\downld\970695.exe

c:\documents and settings\Jean\Application Data\drivers\downld\971957.exe

c:\documents and settings\Jean\Application Data\drivers\downld\972167.exe

c:\documents and settings\Jean\Application Data\drivers\downld\972248.exe

c:\documents and settings\Jean\Application Data\drivers\downld\973109.exe

c:\documents and settings\Jean\Application Data\drivers\downld\973609.exe

c:\documents and settings\Jean\Application Data\drivers\downld\974070.exe

c:\documents and settings\Jean\Application Data\drivers\downld\974210.exe

c:\documents and settings\Jean\Application Data\drivers\downld\974270.exe

c:\documents and settings\Jean\Application Data\drivers\downld\974551.exe

c:\documents and settings\Jean\Application Data\drivers\downld\974611.exe

c:\documents and settings\Jean\Application Data\drivers\downld\975392.exe

c:\documents and settings\Jean\Application Data\drivers\downld\975572.exe

c:\documents and settings\Jean\Application Data\drivers\downld\975873.exe

c:\documents and settings\Jean\Application Data\drivers\downld\976203.exe

c:\documents and settings\Jean\Application Data\drivers\downld\976484.exe

c:\documents and settings\Jean\Application Data\drivers\downld\976834.exe

c:\documents and settings\Jean\Application Data\drivers\downld\977415.exe

c:\documents and settings\Jean\Application Data\drivers\downld\977505.exe

c:\documents and settings\Jean\Application Data\drivers\downld\977545.exe

c:\documents and settings\Jean\Application Data\drivers\downld\977605.exe

c:\documents and settings\Jean\Application Data\drivers\downld\977775.exe

c:\documents and settings\Jean\Application Data\drivers\downld\978036.exe

c:\documents and settings\Jean\Application Data\drivers\downld\979218.exe

c:\documents and settings\Jean\Application Data\drivers\downld\979478.exe

c:\documents and settings\Jean\Application Data\drivers\downld\979528.exe

c:\documents and settings\Jean\Application Data\drivers\downld\979989.exe

c:\documents and settings\Jean\Application Data\drivers\downld\980329.exe

c:\documents and settings\Jean\Application Data\drivers\downld\980770.exe

c:\documents and settings\Jean\Application Data\drivers\downld\981691.exe

c:\documents and settings\Jean\Application Data\drivers\downld\981811.exe

c:\documents and settings\Jean\Application Data\drivers\downld\982012.exe

c:\documents and settings\Jean\Application Data\drivers\downld\982162.exe

c:\documents and settings\Jean\Application Data\drivers\downld\982262.exe

c:\documents and settings\Jean\Application Data\drivers\downld\982873.exe

c:\documents and settings\Jean\Application Data\drivers\downld\984034.exe

c:\documents and settings\Jean\Application Data\drivers\downld\984305.exe

c:\documents and settings\Jean\Application Data\drivers\downld\984355.exe

c:\documents and settings\Jean\Application Data\drivers\downld\984846.exe

c:\documents and settings\Jean\Application Data\drivers\downld\984946.exe

c:\documents and settings\Jean\Application Data\drivers\downld\985416.exe

c:\documents and settings\Jean\Application Data\drivers\downld\985987.exe

c:\documents and settings\Jean\Application Data\drivers\downld\986738.exe

c:\documents and settings\Jean\Application Data\drivers\downld\986959.exe

c:\documents and settings\Jean\Application Data\drivers\downld\986979.exe

c:\documents and settings\Jean\Application Data\drivers\downld\987139.exe

c:\documents and settings\Jean\Application Data\drivers\downld\987519.exe

c:\documents and settings\Jean\Application Data\drivers\downld\987780.exe

c:\documents and settings\Jean\Application Data\drivers\downld\988301.exe

c:\documents and settings\Jean\Application Data\drivers\downld\989072.exe

c:\documents and settings\Jean\Application Data\drivers\downld\989232.exe

c:\documents and settings\Jean\Application Data\drivers\downld\989733.exe

c:\documents and settings\Jean\Application Data\drivers\downld\990894.exe

c:\documents and settings\Jean\Application Data\drivers\downld\991045.exe

c:\documents and settings\Jean\Application Data\drivers\downld\991615.exe

c:\documents and settings\Jean\Application Data\drivers\downld\992737.exe

c:\documents and settings\Jean\Application Data\drivers\downld\992877.exe

c:\documents and settings\Jean\Application Data\drivers\downld\993468.exe

c:\documents and settings\Jean\Application Data\drivers\downld\994079.exe

c:\documents and settings\Jean\Application Data\drivers\downld\994199.exe

c:\documents and settings\Jean\Application Data\drivers\downld\994660.exe

c:\documents and settings\Jean\Application Data\drivers\downld\994890.exe

c:\documents and settings\Jean\Application Data\drivers\downld\995010.exe

c:\documents and settings\Jean\Application Data\drivers\downld\995191.exe

c:\documents and settings\Jean\Application Data\drivers\downld\995381.exe

c:\documents and settings\Jean\Application Data\drivers\downld\995591.exe

c:\documents and settings\Jean\Application Data\drivers\downld\995751.exe

c:\documents and settings\Jean\Application Data\drivers\downld\995811.exe

c:\documents and settings\Jean\Application Data\drivers\downld\995902.exe

c:\documents and settings\Jean\Application Data\drivers\downld\996372.exe

c:\documents and settings\Jean\Application Data\drivers\downld\996542.exe

c:\documents and settings\Jean\Application Data\drivers\downld\996723.exe

c:\documents and settings\Jean\Application Data\drivers\downld\996993.exe

c:\documents and settings\Jean\Application Data\drivers\downld\997153.exe

c:\documents and settings\Jean\Application Data\drivers\downld\997504.exe

c:\documents and settings\Jean\Application Data\drivers\downld\997564.exe

c:\documents and settings\Jean\Application Data\drivers\downld\997784.exe

c:\documents and settings\Jean\Application Data\drivers\downld\997904.exe

c:\documents and settings\Jean\Application Data\drivers\downld\998325.exe

c:\documents and settings\Jean\Application Data\drivers\downld\998525.exe

c:\documents and settings\Jean\Application Data\drivers\downld\998645.exe

c:\documents and settings\Jean\Application Data\drivers\downld\998846.exe

c:\documents and settings\Jean\Application Data\drivers\downld\998996.exe

c:\documents and settings\Jean\Application Data\drivers\downld\999427.exe

c:\documents and settings\Jean\Application Data\drivers\downld\999507.exe

c:\documents and settings\Jean\Application Data\drivers\downld\999557.exe

c:\documents and settings\Jean\Application Data\drivers\downld\999747.exe

c:\documents and settings\Jean\Application Data\drivers\srosa2.sys

c:\documents and settings\Jean\Application Data\drivers\winupgro.exe

c:\documents and settings\Jean\Application Data\m

c:\documents and settings\Jean\Application Data\m\data.oct

c:\documents and settings\Jean\Application Data\m\flec006.exe

c:\documents and settings\Jean\Application Data\m\list.oct

c:\documents and settings\Jean\Application Data\m\shared\.NET_Encryption_Library_1.05.zip

c:\documents and settings\Jean\Application Data\m\shared\1st_French_ExamCram_4.0.0.0.zip

c:\documents and settings\Jean\Application Data\m\shared\4Movy_DVD_Video_to_Zune_Converter_3.5.zip

c:\documents and settings\Jean\Application Data\m\shared\Acronis_Migrate_Easy_7.0.0_Build_645.zip

c:\documents and settings\Jean\Application Data\m\shared\ActMask_ALL2PDF_PDF_Creator_5.03_(Crack).zip

c:\documents and settings\Jean\Application Data\m\shared\Allergy_Info_Finder_1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\anti-virus.McaFee.8.0.zip

c:\documents and settings\Jean\Application Data\m\shared\ASCII_Art_Studio_2.2.0_(Serial).zip

c:\documents and settings\Jean\Application Data\m\shared\Aspose.Pdf For Java 2.4.0.0.zip

c:\documents and settings\Jean\Application Data\m\shared\ASTRA32_-_Advanced_System_Information_Tool_1.54.zip

c:\documents and settings\Jean\Application Data\m\shared\Atol 0.3.7.zip

c:\documents and settings\Jean\Application Data\m\shared\Atomic Subscription Manager 1.70.zip

c:\documents and settings\Jean\Application Data\m\shared\Automation_Anywhere_3.0.2.zip

c:\documents and settings\Jean\Application Data\m\shared\Avaide DVD To MP3 Converter 1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Babya_bSuite_to_Go_1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Backup To The Web 5.2.2.4.zip

c:\documents and settings\Jean\Application Data\m\shared\Blackjack_Gold_1.2.4.zip

c:\documents and settings\Jean\Application Data\m\shared\Boa_Constrictor_CE_1.1.zip

c:\documents and settings\Jean\Application Data\m\shared\BookmarkMenuHider 0.1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Breakthru Payroll 2008 12.0.8.zip

c:\documents and settings\Jean\Application Data\m\shared\BTPlayer 1.0 [serial].zip

c:\documents and settings\Jean\Application Data\m\shared\C-Privacy Free 2.1.zip

c:\documents and settings\Jean\Application Data\m\shared\Calculator-Bar_1.2.1.zip

c:\documents and settings\Jean\Application Data\m\shared\Call_of_Duty_Mogadishu_map.zip

c:\documents and settings\Jean\Application Data\m\shared\Circuit Scraping 1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\CityDesk Starter Edition 2.0.zip

c:\documents and settings\Jean\Application Data\m\shared\CmdOnWnd 1.2.1 Build 3434.zip

c:\documents and settings\Jean\Application Data\m\shared\Colourpick 2.zip

c:\documents and settings\Jean\Application Data\m\shared\DataparkSearch 4.26.zip

c:\documents and settings\Jean\Application Data\m\shared\Dekart_Logon_for_Lotus_Notes_2.21_(Key+Serial).zip

c:\documents and settings\Jean\Application Data\m\shared\Derekware_HTML_3.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Devil_Whiskey_demo_2.0.zip

c:\documents and settings\Jean\Application Data\m\shared\DigiGenius DVD to Zune Converter 3.6.6.zip

c:\documents and settings\Jean\Application Data\m\shared\Doom_3_E3_2003_trailer_(high_resolution).zip

c:\documents and settings\Jean\Application Data\m\shared\Dry Hair Remedies.zip

c:\documents and settings\Jean\Application Data\m\shared\Easy_CD_Creator_Update_(Standard)_4.02.zip

c:\documents and settings\Jean\Application Data\m\shared\Educational_Worksheets_-_Math_(Windows_XP)_1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Enterprise Password Safe 1.57.12.zip

c:\documents and settings\Jean\Application Data\m\shared\Espheres 1.02.zip

c:\documents and settings\Jean\Application Data\m\shared\FlyAKite_2.0.2112.zip

c:\documents and settings\Jean\Application Data\m\shared\G-Soft_Encryptor_2006_1.1.0_[Key+Serial].zip

c:\documents and settings\Jean\Application Data\m\shared\g0 Shoutcast recorder 1.5.zip

c:\documents and settings\Jean\Application Data\m\shared\GridBagger_1.0_(KeyGen).zip

c:\documents and settings\Jean\Application Data\m\shared\Guru3D - Driver Sweeper 0.9.zip

c:\documents and settings\Jean\Application Data\m\shared\Haihaisoft DRM-X PDF Packager 1.0.0.2.zip

c:\documents and settings\Jean\Application Data\m\shared\Icon Pack - Models.zip

c:\documents and settings\Jean\Application Data\m\shared\ICQ_5.1.zip

c:\documents and settings\Jean\Application Data\m\shared\IISRegMgmt 0.1.zip

c:\documents and settings\Jean\Application Data\m\shared\Ikaros_1.0.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Integrare 1.0.3.40.zip

c:\documents and settings\Jean\Application Data\m\shared\iSpeak Widget 1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Joke_eBook_1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Kaufman_Icon_Snatcher_1.10.zip

c:\documents and settings\Jean\Application Data\m\shared\Kirby Icons 32 1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\LCD_Font_Maker_3.92_[serial].zip

c:\documents and settings\Jean\Application Data\m\shared\LingvoSoft Dictionary 2007 English - Thai 4.0.22.zip

c:\documents and settings\Jean\Application Data\m\shared\Lutz Roeder's .NET Resourcer 4.1.0.0.zip

c:\documents and settings\Jean\Application Data\m\shared\M-DVD.Org 2.5.zip

c:\documents and settings\Jean\Application Data\m\shared\Magic_Audio_Editor_Pro_10.2.7.zip

c:\documents and settings\Jean\Application Data\m\shared\mCore SMS & WAP Push Component 1.8.2.zip

c:\documents and settings\Jean\Application Data\m\shared\medi@mirror_2.03_(Crack).zip

c:\documents and settings\Jean\Application Data\m\shared\MichiganDoppler! 3.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Moyea_SWF_to_Video_Converter_Pro_1.20.1.1_(Key+Serial).zip

c:\documents and settings\Jean\Application Data\m\shared\Multi-Contactor 2.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Music_memory_online_game_5.zip

c:\documents and settings\Jean\Application Data\m\shared\MySecurityCenter Antivirus 2006 7.1.501.zip

c:\documents and settings\Jean\Application Data\m\shared\MySQL Developer Tools for Visual Studio .NET 2.0 beta.zip

c:\documents and settings\Jean\Application Data\m\shared\NetWorx Portable 4.9.5.zip

c:\documents and settings\Jean\Application Data\m\shared\NewsLeecher_2.1_Final.zip

c:\documents and settings\Jean\Application Data\m\shared\NORTON_ANTIVIRUS_2007_ITA_CRACK.zip

c:\documents and settings\Jean\Application Data\m\shared\Nova_Fonts_1.31B_Patch.zip

c:\documents and settings\Jean\Application Data\m\shared\NukesPimpShit 1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Once_Upon_a_Knight_demo.zip

c:\documents and settings\Jean\Application Data\m\shared\Oracle_to_Excel_1.3.zip

c:\documents and settings\Jean\Application Data\m\shared\Palm Coast Screensaver 1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Personal_Information_Manager_1.5.9_(Patch).zip

c:\documents and settings\Jean\Application Data\m\shared\PhotoFeed 1.4.zip

c:\documents and settings\Jean\Application Data\m\shared\Picture_Viewer_1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Portable Uniform Server 3.5.zip

c:\documents and settings\Jean\Application Data\m\shared\Project KickStart 4.0.zip

c:\documents and settings\Jean\Application Data\m\shared\ProStream_Browser_1.2.zip

c:\documents and settings\Jean\Application Data\m\shared\Q-Dir 3.79.zip

c:\documents and settings\Jean\Application Data\m\shared\Quickie_Web_Albums_4.3.2.zip

c:\documents and settings\Jean\Application Data\m\shared\QuikDial_Pro2K_1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Quotes_2006.zip

c:\documents and settings\Jean\Application Data\m\shared\Raven's_Gate_1.9.zip

c:\documents and settings\Jean\Application Data\m\shared\Red_Eye_Remover_2.0.zip

c:\documents and settings\Jean\Application Data\m\shared\RedPhone_1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\ReNameIt_1.0.20.zip

c:\documents and settings\Jean\Application Data\m\shared\RolloSONIC 1.0b Serial.zip

c:\documents and settings\Jean\Application Data\m\shared\Safepage_1.21.zip

c:\documents and settings\Jean\Application Data\m\shared\Safesquid proxy server 3.1.3.zip

c:\documents and settings\Jean\Application Data\m\shared\Shrila_Prabhupada_1965_Screensaver_1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\SKWChicagoScreenSaver_1.0_[Cracked].zip

c:\documents and settings\Jean\Application Data\m\shared\SlovoEd Compact French-Russian 6.3.zip

c:\documents and settings\Jean\Application Data\m\shared\Smart Screensaver 1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\SmartQRP_1.0_RC_2.zip

c:\documents and settings\Jean\Application Data\m\shared\SnapShotPro 1.30.zip

c:\documents and settings\Jean\Application Data\m\shared\Soft191 Uninstaller 1.03.zip

c:\documents and settings\Jean\Application Data\m\shared\SoftCE_1.0.2.zip

c:\documents and settings\Jean\Application Data\m\shared\SomaFM Radio Player 2.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Spring Training Countdown 1.2.zip

c:\documents and settings\Jean\Application Data\m\shared\Sqirlz Lite 1.4.zip

c:\documents and settings\Jean\Application Data\m\shared\Star Wars Screensaver 2 1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Super AJAX Programming Seed 1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Super Search Bar 1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\SWiSH_Presenter_1.0_2005.09.12.zip

c:\documents and settings\Jean\Application Data\m\shared\Tagalog_Translator_1.5.zip

c:\documents and settings\Jean\Application Data\m\shared\TCPKeyBlockHook_1.5_Cracked.zip

c:\documents and settings\Jean\Application Data\m\shared\The Personal FTP Server 5.52f.zip

c:\documents and settings\Jean\Application Data\m\shared\The_Sims_-_Bandito_skin.zip

c:\documents and settings\Jean\Application Data\m\shared\Total_Pro_Golf_1.1.zip

c:\documents and settings\Jean\Application Data\m\shared\touchtheWire 1.11.zip

c:\documents and settings\Jean\Application Data\m\shared\Tourism Malaysia - Culture Screensaver.zip

c:\documents and settings\Jean\Application Data\m\shared\TZ Privacy Guard 5.0.0.0.zip

c:\documents and settings\Jean\Application Data\m\shared\UltraGram 3.2.39.zip

c:\documents and settings\Jean\Application Data\m\shared\UrlHistory 1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\VideoReDo TVSuite 3.1.4.551.zip

c:\documents and settings\Jean\Application Data\m\shared\Virtual_Sandbox_2.0_Build_209.zip

c:\documents and settings\Jean\Application Data\m\shared\VisDir Free Disk Space Finder 1.5.zip

c:\documents and settings\Jean\Application Data\m\shared\Waffle Magic 1.21.zip

c:\documents and settings\Jean\Application Data\m\shared\Warcraft III - The Return of the Sheep map.zip

c:\documents and settings\Jean\Application Data\m\shared\Web Confidential 3.1 Crack.zip

c:\documents and settings\Jean\Application Data\m\shared\Weddle's_Contact_Handler_1.0.zip

c:\documents and settings\Jean\Application Data\m\shared\Whizlabs_SCJA_Preparation_Kit_6.0.1_(Patch).zip

c:\documents and settings\Jean\Application Data\m\shared\WMA_To_MP3_Activex_1.0_Key.zip

c:\documents and settings\Jean\Application Data\m\shared\ZeroAds_1.40.0262.zip

c:\documents and settings\Jean\Application Data\m\shared\Zoom Activex Control 2.1.zip

c:\documents and settings\Jean\Application Data\m\srvlist.oct

 

.

((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.

 

-------\Legacy_SK9OU0S

-------\Legacy_SROSA

-------\Service_sK9Ou0s

 

 

((((((((((((((((((((((((((((( Fichiers créés du 2009-10-06 au 2009-11-06 ))))))))))))))))))))))))))))))))))))

.

 

2009-11-05 16:20 . 2009-11-06 14:41 -------- d-----w- C:\FindyKill

2009-11-04 16:37 . 2009-03-06 16:45 130424 ----a-w- c:\windows\system32\drivers\PCTCore.sys

2009-11-04 16:37 . 2008-12-18 12:16 73840 ----a-w- c:\windows\system32\drivers\PCTAppEvent.sys

2009-11-04 16:37 . 2008-12-11 08:38 159600 ----a-w- c:\windows\system32\drivers\pctgntdi.sys

2009-11-04 16:37 . 2008-09-22 12:29 97408 ----a-w- c:\windows\system32\drivers\pctfw.sys

2009-11-04 16:37 . 2009-01-21 10:38 95640 ----a-w- c:\windows\system32\drivers\pctplfw.sys

2009-11-04 15:17 . 2009-11-04 15:54 -------- d-----w- C:\jean3525j

2009-11-03 16:58 . 2009-11-03 16:58 -------- d-----w- C:\jean991j

2009-11-02 17:36 . 2009-11-02 18:37 -------- d-----w- C:\jean

2009-10-20 16:18 . 2009-08-26 21:08 1238408 ----a-w- c:\windows\system32\zpeng25.dll

2009-10-20 16:18 . 2009-10-20 16:18 -------- d-----w- c:\windows\system32\ZoneLabs

2009-10-20 16:18 . 2009-10-20 16:18 -------- d-----w- c:\program files\Zone Labs

2009-10-19 18:00 . 2009-11-05 15:23 -------- d-----w- c:\program files\SuperCopier2

2009-10-19 17:44 . 2009-11-02 18:24 -------- d--h--w- c:\documents and settings\root\Application Data\drivers

2009-10-19 17:36 . 2009-10-19 17:36 -------- d-----w- c:\documents and settings\root\Local Settings\Application Data\Thunderbird

2009-10-19 17:36 . 2009-10-19 17:36 -------- d-----w- c:\documents and settings\root\Application Data\Thunderbird

2009-10-19 17:29 . 2009-10-19 17:29 101192 ----a-w- c:\documents and settings\root\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

2009-10-19 17:00 . 2009-10-19 17:00 -------- d-----w- c:\documents and settings\root\Application Data\Malwarebytes

2009-10-19 16:57 . 2009-10-19 16:57 -------- d-----w- c:\documents and settings\root\Local Settings\Application Data\Mozilla

2009-10-19 16:56 . 2009-10-19 16:56 -------- d-----w- c:\documents and settings\root\Application Data\PCToolsFirewallPlus

2009-10-19 15:47 . 2009-11-06 15:27 -------- d--h--w- c:\documents and settings\Jean\Application Data\drivers

 

.

(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

.

2009-11-06 15:34 . 2006-12-07 09:29 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP

2009-11-06 15:02 . 2009-06-04 16:48 -------- d-----w- c:\program files\Firefox

2009-11-06 14:59 . 2009-05-23 18:46 -------- d-----w- c:\program files\PC Tools Firewall Plus

2009-11-06 14:42 . 2006-01-19 08:30 -------- d-----w- c:\program files\Mozilla Thunderbird

2009-11-05 17:21 . 2006-01-18 21:32 -------- d-----w- c:\documents and settings\Jean\Application Data\Skype

2009-11-05 15:22 . 2006-12-07 09:29 -------- d-----w- c:\program files\DAP

2009-11-04 16:37 . 2009-05-23 18:46 -------- d-----w- c:\program files\Fichiers communs\PC Tools

2009-11-04 15:09 . 2009-11-04 15:09 858263 ----a-w- c:\windows\Internet Logs\vsmon_2nd_2007_10_06_13_09_16_small.dmp.zip

2009-11-04 15:09 . 2009-11-04 15:09 861457 ----a-w- c:\windows\Internet Logs\vsmon_2nd_2007_09_20_21_35_54_small.dmp.zip

2009-11-01 16:06 . 2008-10-13 17:46 1 ----a-w- c:\documents and settings\Jean\Application Data\OpenOffice.org\3\user\uno_packages\cache\stamp.sys

2009-10-30 16:24 . 2008-10-10 17:54 -------- d-----w- c:\documents and settings\Jean\Application Data\Winamp

2009-10-29 16:40 . 2009-05-27 17:29 -------- d-----w- c:\documents and settings\Jean\Application Data\StarDict

2009-10-21 18:21 . 2006-01-19 10:04 -------- d-----w- c:\program files\WXTide32

2009-10-16 17:57 . 2009-08-08 16:29 -------- d-----w- c:\program files\OpenERP AllInOne

2009-10-15 18:06 . 1979-12-31 23:00 83564 ----a-w- c:\windows\system32\perfc00C.dat

2009-10-15 18:06 . 1979-12-31 23:00 506994 ----a-w- c:\windows\system32\perfh00C.dat

2009-10-14 16:20 . 2009-03-08 18:44 -------- d-----w- c:\documents and settings\Jean\Application Data\dvdcss

2009-09-27 15:16 . 2006-02-22 17:11 -------- d-----w- c:\program files\Google

2009-09-26 17:28 . 2007-06-14 17:52 -------- d-----w- c:\documents and settings\Jean\Application Data\gtk-2.0

2009-09-25 05:36 . 1979-12-31 23:00 671232 ------w- c:\windows\system32\wininet.dll

2009-09-25 05:36 . 1979-12-31 23:00 81920 ----a-w- c:\windows\system32\ieencode.dll

2009-09-11 18:18 . 2009-09-11 18:18 101192 ----a-w- c:\documents and settings\eMule_Secure\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

2009-09-11 17:46 . 2006-01-19 19:41 -------- d-----w- c:\program files\QuickTime

2009-09-11 17:45 . 2008-01-06 16:20 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple Computer

2009-09-11 17:40 . 2009-09-11 17:40 -------- d-----w- c:\program files\Fichiers communs\Apple

2009-09-11 16:45 . 2009-05-27 17:29 -------- d-----w- c:\program files\StarDict

2009-09-11 16:43 . 2009-05-27 17:26 -------- d-----w- c:\program files\Fichiers communs\GTK

2009-09-11 14:18 . 1979-12-31 23:00 136192 ----a-w- c:\windows\system32\msv1_0.dll

2009-09-04 21:04 . 1979-12-31 23:00 58880 ----a-w- c:\windows\system32\msasn1.dll

2009-09-03 14:27 . 2008-12-06 10:19 83456 ----a-w- c:\documents and settings\All Users\Application Data\SpeedBit\DAP\SDCondition.dll

2009-08-26 08:01 . 1979-12-31 23:00 247326 ----a-w- c:\windows\system32\strmdll.dll

2009-08-25 14:50 . 2006-01-18 15:54 101192 ----a-w- c:\documents and settings\Jean\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

2008-01-04 15:00 . 2008-01-04 15:00 479 ----a-w- c:\program files\SECURITE.lnk

2004-08-19 15:10 . 2006-11-08 12:11 73728 --sha-w- c:\windows\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}$BACKUP$\System\wmplayer.exe

2007-07-13 16:21 . 2006-03-02 17:08 952 --sha-w- c:\windows\system32\KGyGaAvL.sys

.

 

((((((((((((((((((((((((((((( SnapShot@2009-11-02_18.28.19 )))))))))))))))))))))))))))))))))))))))))

.

+ 2009-11-06 15:30 . 2009-11-06 15:30 16384 c:\windows\temp\Perflib_Perfdata_48c.dat

+ 2005-05-26 03:16 . 2009-08-06 19:24 44768 c:\windows\system32\wups2.dll

+ 2004-09-22 09:07 . 2009-08-06 19:24 35552 c:\windows\system32\wups.dll

+ 2004-09-22 09:07 . 2009-08-06 19:24 53472 c:\windows\system32\wuauclt.exe

- 2006-11-21 17:39 . 2009-05-26 11:40 18296 c:\windows\system32\spmsg.dll

+ 2006-11-21 17:39 . 2008-07-08 13:03 18296 c:\windows\system32\spmsg.dll

+ 2009-11-06 14:41 . 2009-08-06 19:24 44768 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.4.7600.226\wups2.dll

+ 2009-11-06 14:41 . 2009-08-06 19:24 35552 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.4.7600.226\wups.dll

+ 2009-06-01 16:24 . 2009-03-24 16:07 55640 c:\windows\system32\drivers\avgntflt.sys

+ 2004-09-22 09:07 . 2009-08-06 19:24 35552 c:\windows\system32\dllcache\wups.dll

+ 2004-09-22 09:07 . 2009-08-06 19:24 53472 c:\windows\system32\dllcache\wuauclt.exe

+ 1979-12-31 23:00 . 2009-08-06 19:24 96480 c:\windows\system32\dllcache\cdm.dll

+ 1979-12-31 23:00 . 2009-08-06 19:24 96480 c:\windows\system32\cdm.dll

+ 2009-11-05 16:16 . 2009-11-05 16:16 22528 c:\windows\Installer\ecf86.msi

+ 2004-09-22 09:07 . 2009-08-06 19:24 209632 c:\windows\system32\wuweb.dll

+ 2004-09-22 09:07 . 2009-08-06 19:24 327896 c:\windows\system32\wucltui.dll

+ 2004-09-22 09:07 . 2009-08-06 19:23 575704 c:\windows\system32\wuapi.dll

+ 2004-09-22 09:07 . 2009-08-06 19:24 209632 c:\windows\system32\dllcache\wuweb.dll

+ 2004-09-22 09:07 . 2009-08-06 19:24 327896 c:\windows\system32\dllcache\wucltui.dll

+ 2004-09-22 09:07 . 2009-08-06 19:23 575704 c:\windows\system32\dllcache\wuapi.dll

+ 2004-09-22 09:07 . 2009-08-06 19:23 1929952 c:\windows\system32\wuaueng.dll

+ 1979-12-31 23:00 . 2009-10-19 23:52 3091968 c:\windows\system32\mshtml.dll

- 1979-12-31 23:00 . 2009-09-25 05:36 3091968 c:\windows\system32\mshtml.dll

+ 2004-09-22 09:07 . 2009-08-06 19:23 1929952 c:\windows\system32\dllcache\wuaueng.dll

- 2008-04-21 06:43 . 2009-09-25 05:36 3091968 c:\windows\system32\dllcache\mshtml.dll

+ 2008-04-21 06:43 . 2009-10-19 23:52 3091968 c:\windows\system32\dllcache\mshtml.dll

.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

REGEDIT4

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2004-05-20 532480]

"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-05 59392]

"EPM-DM"="c:\acer\ePM\EPM-DM.exe" [2004-11-03 163840]

"ePowerManagement"="c:\acer\ePM\ePM.exe" [2004-11-03 2883584]

"WinampAgent"="c:\program files\Winamp\winampa.exe" [2009-07-01 37888]

"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-07-25 149280]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-09-05 417792]

"00PCTFW"="c:\program files\PC Tools Firewall Plus\FirewallGUI.exe" [2009-02-23 2652056]

"combofix"="c:\jean17306j\CF18309.exe" [2009-11-06 401408]

"BluetoothAuthenticationAgent"="bthprops.cpl" - c:\windows\system32\bthprops.cpl [2008-04-14 110592]

 

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]

"EnableFirewall"= 0 (0x0)

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"c:\\WINDOWS\\system32\\sessmgr.exe"=

"c:\\Program Files\\PHPEdit\\DBG\\DbgListener.exe"=

"c:\\WINDOWS\\system32\\dpvsetup.exe"=

"c:\\WINDOWS\\system32\\javaw.exe"=

"c:\\WINDOWS\\system32\\fxsclnt.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"%windir%\\system32\\sessmgr.exe"=

"c:\\Program Files\\eMule\\emule.exe"=

"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

 

R1 pctgntdi;pctgntdi;c:\windows\system32\drivers\pctgntdi.sys [04/11/2009 16:37 159600]

R1 SMBHC;Pilote de contrôleur hôte du bus de gestion du système Microsoft;c:\windows\system32\drivers\smbhc.sys [22/09/2004 09:04 6784]

R1 VBoxDrv;VirtualBox Service;c:\windows\system32\drivers\VBoxDrv.sys [17/05/2008 17:56 115856]

R1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\drivers\VBoxUSBMon.sys [17/05/2008 17:56 41424]

R2 HWiNFO32;HWiNFO32 Kernel Driver;c:\program files\HWiNFO32\HWiNFO32.SYS [22/12/2008 16:16 16616]

R2 PCTAppEvent;PCTAppEvent Driver;c:\windows\system32\drivers\PCTAppEvent.sys [04/11/2009 16:37 73840]

R3 pctplfw;pctplfw;c:\windows\system32\drivers\pctplfw.sys [04/11/2009 16:37 95640]

R3 SMBBATT;Pilote de batterie intelligente Microsoft;c:\windows\system32\drivers\smbbatt.sys [22/09/2004 09:04 16000]

R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\drivers\VBoxNetAdp.sys [26/07/2009 16:28 91472]

R3 VBoxNetFlt;VBoxNetFlt Service;c:\windows\system32\drivers\VBoxNetFlt.sys [10/07/2009 17:51 99472]

S2 gupdate1c8ce3fcb863340;Google Update Service (gupdate1c8ce3fcb863340);c:\program files\Google\Update\GoogleUpdate.exe [06/09/2008 16:57 133104]

S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [28/05/2009 15:42 38160]

S3 postgresql-8.4;PostgreSQL Server 8.4;C:/Program Files/PostgreSQL/8.4/bin/pg_ctl.exe runservice -N "postgresql-8.4" -D "C:/Program Files/PostgreSQL/8.4/data" -w --> C:/Program Files/PostgreSQL/8.4/bin/pg_ctl.exe runservice -N postgresql-8.4 [?]

S3 sentemul;sentemul;c:\windows\system32\drivers\SentEmul.sys [29/03/2008 16:06 9536]

S3 silabenm;Silicon Labs CP210x USB to UART Bridge Serial Port Enumerator Driver;c:\windows\system32\drivers\silabenm.sys [02/02/2009 17:10 17920]

S3 silabser;Silicon Labs CP210x USB to UART Bridge Driver;c:\windows\system32\drivers\silabser.sys [02/02/2009 17:10 60544]

S3 VBoxUSB;VirtualBox USB;c:\windows\system32\drivers\VBoxUSB.sys [16/03/2008 15:23 31824]

 

--- Autres Services/Pilotes en mémoire ---

 

*Deregistered* - mbr

.

Contenu du dossier 'Tâches planifiées'

 

2009-11-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore1ca5e3346c98b70.job

- c:\program files\Google\Update\GoogleUpdate.exe [2008-09-06 16:03]

.

.

------- Examen supplémentaire -------

.

uStart Page = hxxp://search.speedbit.com/

IE: &Clean Traces - c:\program files\DAP\Privacy Package\dapcleanerie.htm

IE: &Download with &DAP - c:\program files\DAP\dapextie.htm

IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200

IE: Download &all with DAP - c:\program files\DAP\dapextie2.htm

IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

FF - ProfilePath - c:\documents and settings\Jean\Application Data\Mozilla\Firefox\Profiles\51mrxkbk.jean\

FF - prefs.js: browser.startup.homepage -

FF - prefs.js: keyword.URL -

FF - component: c:\documents and settings\Jean\Application Data\Mozilla\Firefox\Profiles\51mrxkbk.jean\extensions\{3502a070-ea2f-11dd-ba2f-0800200c9a66}\components\mintray-9178506d-2005072516-trunk.dll

FF - component: c:\program files\DAP\DAPFireFox\components\DAPFireFox.dll

FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll

FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll

FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll

FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

.

 

**************************************************************************

 

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-11-06 15:33

Windows 5.1.2600 Service Pack 3 NTFS

 

Recherche de processus cachés ...

 

Recherche d'éléments en démarrage automatique cachés ...

 

Recherche de fichiers cachés ...

 

Scan terminé avec succès

Fichiers cachés: 0

 

**************************************************************************

 

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

 

device: opened successfully

user: MBR read successfully

called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys sptd.sys >>UNKNOWN [0x833868AC]<<

kernel: MBR read successfully

user & kernel MBR OK

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

 

atapi.sys @ 0x0 0x0 bytes

 

\Driver\atapi [ IRP_MJ_CREATE ] 0xA6F2 != 0xF8362B40 atapi.sys

\Driver\atapi [ IRP_MJ_CLOSE ] 0xA6F2 != 0xF8362B40 atapi.sys

\Driver\atapi [ IRP_MJ_DEVICE_CONTROL ] 0xA712 != 0xF8362B40 atapi.sys

\Driver\atapi [ IRP_MJ_INTERNAL_DEVICE_CONTROL ] 0x6852 != 0xF8362B40 atapi.sys

\Driver\atapi [ IRP_MJ_POWER ] 0xA73C != 0xF8362B40 atapi.sys

\Driver\atapi [ IRP_MJ_SYSTEM_CONTROL ] 0x11336 != 0xF8362B40 atapi.sys

\Driver\atapi IRP hooks detected !

 

**************************************************************************

 

[HKEY_LOCAL_MACHINE\System\ControlSet004\Services\postgresql-8.4]

"ImagePath"="C:/Program Files/PostgreSQL/8.4/bin/pg_ctl.exe runservice -N \"postgresql-8.4\" -D \"C:/Program Files/PostgreSQL/8.4/data\" -w"

 

[HKEY_LOCAL_MACHINE\System\ControlSet004\Services\postgresql-8.4]

"ImagePath"="C:/Program Files/PostgreSQL/8.4/bin/pg_ctl.exe runservice -N \"postgresql-8.4\" -D \"C:/Program Files/PostgreSQL/8.4/data\" -w"

.

------------------------ Autres processus actifs ------------------------

.

c:\windows\system32\LEXBCES.EXE

c:\windows\system32\LEXPPS.EXE

c:\acer\eManager\anbmServ.exe

c:\progra~1\EASYPH~1.0B1\Apache\bin\apache.exe

c:\windows\system32\DRIVERS\CDANTSRV.EXE

c:\windows\system32\crypserv.exe

c:\program files\Java\jre6\bin\jqs.exe

c:\program files\PC Tools Firewall Plus\FWService.exe

c:\progra~1\EASYPH~1.0B1\Apache\bin\apache.exe

c:\windows\system32\wbem\wmiapsrv.exe

c:\windows\system32\wscntfy.exe

c:\windows\system32\rundll32.exe

.

**************************************************************************

.

Heure de fin: 2009-11-06 15:47 - La machine a redémarré

ComboFix-quarantined-files.txt 2009-11-06 15:47

ComboFix2.txt 2009-11-05 16:15

ComboFix3.txt 2009-11-04 16:31

 

Avant-CF: 8 785 588 224 octets libres

Après-CF: 8 735 449 088 octets libres

 

Current=4 Default=4 Failed=3 LastKnownGood=6 Sets=1,2,3,4,5,6

- - End Of File - - C253FE86EC0281B0328F2E1B67EE2528

[Mark]

Bravo Jean, la bête est bien morte

 

Un petit test parmi tant d'autres pour confirmer : essaie d'aller sur la section de désinfection >>

http://forum.zebulon.fr/analyse-rapports-h...lwares-f51.html

 

Si ton navigateur ne se ferme pas immédiatement, c'est signe que l'infection n'est pas active.

 

J'ai testé l'infection à quelques reprises ici, depuis deux jours : très agressive en effet et elle bloque plusieurs sites et applications. Je ne vais pas dépalcer ce sujet en désinfection car d'autres malchanceux pourraient la trouver ici, et poster. Ils ne pourront pas accéder à l'autre section.

 

Les priorités : t'assurer que l'antivirus et le pare-feu soient désinstallés/réinstallés. AntiVir connait bien ce nouveau Bagle mais pas Avast!, alors le choix devrait être simple.

 

Reviens dans quelques jours et on terminera le petit nettoyage (les outils, etc...). Ne fais rien de tout ça toi-même car nous avons des procédures spécifiques et efficaces pour ce nettoyage final.

 

Edit/ajout : il y a de la corruption dans ta base de registre aussi, et je n'ai jamais vu ça avec Bagle. Je vais voir si on peut nettoyer ça.

 

Si questions, pas de gêne. Je suis très pris mais je passerai de temps en temps.

 

@+

Modifié le 6 novembre 2009 par Mark

[jean_pfoumf]

Bonjour Mark,

 

j'avais déjà essayé tout ce que Bagle avait bloqué et tout fonctionne apparemment normalement.

J'utilise déjà Avira Antivir + PC Tools firewall + MBAM , le trio gagnant ! J'ai téléchargé les nouvelles versions , comme test.

Je passerai ici voir si tu as pu trouver quelque chose pour finir le grand ménage.

 

Encore merci.

 

@+