Pb avec Win32.RK.ao
Résolu
Miche93
Messages postés
106
Statut
Membre
-
Miche93 Messages postés 106 Statut Membre -
Miche93 Messages postés 106 Statut Membre -
Bonjour,
J'ai l'antivirus Kaspersky et depuis quelques jours j'ai des logiciels publicitaires en pagaille qui me sont détectés en permanence (une 100 aine par jour). Ci-dessous le lien pour la capture d'écran que j'ai faite et le rapport Hijackthis Merci
2ème question qui n'a pas de rapport. Où puis-je modifier mon adresse email qui a changé pour recevoir les réponses
https://www.cjoint.com/?mBrPxdF6rD
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:42:58, on 27/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Search Settings\SearchSettings.exe
C:\program files\relevantknowledge\rlvknlg.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
E:\Sylvie\TELECHARGEMENT\Hijackthis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.atcomet.com/b/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;*.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll
O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb127\Dealio.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb127\Dealio.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [SW24] C:\WINDOWS\system32\sw24.exe
O4 - HKLM\..\Run: [SW20] C:\WINDOWS\system32\sw20.exe
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
O4 - HKLM\..\Run: [au] C:\Program Files\Dealio\DealioAU.exe
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKLM\..\Run: [RelevantKnowledge] C:\program files\relevantknowledge\rlvknlg.exe -boot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Compare Prices with &Dealio - C:\Documents and Settings\AGUESSE\Application Data\Dealio\kb127\res\DealioSearch.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll/206 (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll
O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Anti-Virus (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pinnacle Systems Media Service (PinnacleSys.MediaServer) - Pinnacle Systems - C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
J'ai l'antivirus Kaspersky et depuis quelques jours j'ai des logiciels publicitaires en pagaille qui me sont détectés en permanence (une 100 aine par jour). Ci-dessous le lien pour la capture d'écran que j'ai faite et le rapport Hijackthis Merci
2ème question qui n'a pas de rapport. Où puis-je modifier mon adresse email qui a changé pour recevoir les réponses
https://www.cjoint.com/?mBrPxdF6rD
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:42:58, on 27/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Search Settings\SearchSettings.exe
C:\program files\relevantknowledge\rlvknlg.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
E:\Sylvie\TELECHARGEMENT\Hijackthis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.atcomet.com/b/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;*.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll
O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb127\Dealio.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb127\Dealio.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [SW24] C:\WINDOWS\system32\sw24.exe
O4 - HKLM\..\Run: [SW20] C:\WINDOWS\system32\sw20.exe
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
O4 - HKLM\..\Run: [au] C:\Program Files\Dealio\DealioAU.exe
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKLM\..\Run: [RelevantKnowledge] C:\program files\relevantknowledge\rlvknlg.exe -boot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Compare Prices with &Dealio - C:\Documents and Settings\AGUESSE\Application Data\Dealio\kb127\res\DealioSearch.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll/206 (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll
O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Anti-Virus (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pinnacle Systems Media Service (PinnacleSys.MediaServer) - Pinnacle Systems - C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
A voir également:
- Pb avec Win32.RK.ao
- Trojan win32 - Forum Virus
- Puabundler win32 rostpay ✓ - Forum Antivirus
- Puadimanager win32/offercore ✓ - Forum Virus
- PUADlManager:Win32/OfferCore ✓ - Forum Virus
- Win32 pup gen ✓ - Forum Linux / Unix
13 réponses
Bonjour, telecharges ToolbarSD sur ton bureau : https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2 Fermes tous les programmes et executes le fichier telecharge.. Double-cliques ensuite sur le raccourci de ton bureau, selectionnes la langue et valide par la touche Entree... Choisis ensuite l'option1 et patientes jusqu'a la fin de la recherche... un rapport est genere, postes le...Note : le rapport TB.txt se trouve aussi a la racine du disque dur...
Voici le rapport
-----------\\ ToolBar S&D 1.2.8 XP/Vista
Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 3800+ )
BIOS : Default System BIOS
USER : AGUESSE ( Administrator )
BOOT : Normal boot
Antivirus : Kaspersky Anti-Virus 8.0.0.454 (Activated)
C:\ (Local Disk) - NTFS - Total:149 Go (Free:16 Go)
D:\ (CD or DVD)
E:\ (Local Disk) - NTFS - Total:149 Go (Free:137 Go)
F:\ (CD or DVD)
"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [1] ( 27/12/2008|19:10 )
-----------\\ Recherche de Fichiers / Dossiers ...
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\temp
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\alerts.gif
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\alerts_over.gif
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\alerts_rec.gif
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\alerts_rec_over.gif
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\chevron-small.gif
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\DealioSearch.html
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\deals-leftcap.gif
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\deal_report.jpg
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\ebay_login.jpg
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\err_mainwindow.html
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\err_toolbar.html
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\global_scripts.js
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\headerbgthin.jpg
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\highlight-bg.png
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\logo.gif
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\logo_over.gif
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\man_toolbar.css
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\man_toolbar.html
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\man_toolbar.js
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\man_toolbarl.js
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\post-this-deal.gif
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\post-this-deal_over.gif
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\scripts.js
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\scroller.js
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\search-chevron.gif
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\search-chevron_over.gif
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\search_bg_blink.gif
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\separator.gif
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\settings.gif
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\settings_over.gif
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\yahoo-search.png
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\index.76.35
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.10.76
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.109.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.110.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.12.52
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.13.58
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.130.58
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.135.50
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.153.44
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.155.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.156.49
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.16.60
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.161.52
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.178.66
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.184.55
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.188.52
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.189.45
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.196.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.198.56
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.199.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.200.53
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.201.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.202.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.203.71
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.205.62
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.213.71
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.214.49
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.215.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.216.67
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.217.67
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.218.52
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.219.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.220.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.221.57
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.222.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.223.68
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.226.68
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.227.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.228.62
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.229.76
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.23.63
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.239.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.24.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.240.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.241.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.242.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.243.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.244.63
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.245.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.247.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.248.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.249.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.250.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.251.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.252.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.253.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.254.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.255.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.256.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.257.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.279.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.28.58
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.282.75
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.283.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.284.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.289.67
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.290.62
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.291.61
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.296.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.297.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.304.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.307.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.308.75
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.31.47
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.310.46
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.311.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.315.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.316.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.317.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.318.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.319.49
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.32.48
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.334.44
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.335.60
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.336.44
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.337.44
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.338.75
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.339.47
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.34.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.340.47
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.341.47
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.349.50
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.35.48
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.350.50
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.351.51
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.352.54
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.353.51
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.354.51
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.357.62
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.358.52
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.359.52
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.360.53
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.361.54
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.362.68
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.363.58
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.364.54
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.365.53
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.367.56
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.368.58
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.369.55
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.370.56
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.371.56
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.372.57
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.373.55
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.375.56
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.376.57
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.377.55
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.378.65
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.384.58
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.386.71
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.387.59
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.388.59
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.389.59
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.390.60
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.391.60
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.392.60
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.393.60
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.394.60
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.396.61
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.397.61
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.398.60
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.399.60
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.403.61
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.404.63
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.405.61
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.406.61
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.407.76
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.408.63
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.409.61
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.412.62
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.413.62
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.414.62
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.415.62
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.416.62
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.417.62
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.418.62
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.419.62
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.420.62
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.421.62
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.423.63
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.424.63
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.425.63
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.426.63
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.427.63
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.428.65
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.429.63
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.430.63
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.432.65
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.433.64
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.434.65
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.435.64
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.436.76
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.437.64
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.438.71
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.439.71
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.440.75
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.442.73
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.443.73
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.444.73
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.445.68
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.446.69
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.450.67
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.451.67
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.452.68
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.453.68
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.454.69
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.456.69
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.457.75
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.458.70
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.459.70
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.460.69
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.462.74
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.463.69
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.464.70
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.465.68
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.468.70
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.469.70
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.470.70
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.471.73
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.472.70
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.478.74
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.479.73
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.480.68
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.481.71
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.482.74
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.49.67
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.50.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.500.71
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.501.74
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.502.71
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.51.69
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.52.72
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.520.76
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.521.76
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.522.76
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.53.51
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.531.76
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.532.75
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.534.75
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.54.47
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.55.45
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.56.69
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.57.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.58.47
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.593.76
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.595.76
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.63.57
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.66.47
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.70.75
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.71.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\temp
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\alerts.gif
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\alerts_over.gif
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\alerts_rec.gif
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\alerts_rec_over.gif
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\chevron-small.gif
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\DealioSearch.html
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\deals-leftcap.gif
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\deal_report.jpg
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\ebay_login.jpg
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\err_mainwindow.html
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\err_toolbar.html
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\global_scripts.js
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\headerbgthin.jpg
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\highlight-bg.png
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\logo.gif
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\logo_over.gif
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\man_toolbar.css
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\man_toolbar.html
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\man_toolbar.js
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\man_toolbarl.js
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\post-this-deal.gif
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\post-this-deal_over.gif
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\scripts.js
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\scroller.js
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\search-chevron.gif
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\search-chevron_over.gif
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\search_bg_blink.gif
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\separator.gif
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\settings.gif
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\settings_over.gif
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\yahoo-search.png
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\index.76.35
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.10.76
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.109.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.110.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.12.52
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.13.58
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.130.58
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.135.50
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.153.44
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.155.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.156.49
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.16.60
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.161.52
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.178.66
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.184.55
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.188.52
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.189.45
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.196.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.198.56
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.199.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.200.53
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.201.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.202.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.203.71
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.205.62
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.213.71
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.214.49
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.215.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.216.67
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.217.67
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.218.52
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.219.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.220.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.221.57
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.222.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.223.68
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.226.68
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.227.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.228.62
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.229.76
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.23.63
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.239.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.24.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.240.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.241.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.242.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.243.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.244.63
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.245.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.247.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.248.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.249.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.250.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.251.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.252.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.253.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.254.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.255.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.256.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.257.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.279.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.28.58
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.282.75
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.283.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.284.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.289.67
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.290.62
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.291.61
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.296.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.297.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.304.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.307.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.308.75
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.31.47
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.310.46
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.311.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.315.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.316.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.317.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.318.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.319.49
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.32.48
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.334.44
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.335.60
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.336.44
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.337.44
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.338.75
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.339.47
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.34.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.340.47
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.341.47
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.349.50
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.35.48
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.350.50
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.351.51
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.352.54
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.353.51
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.354.51
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.357.62
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.358.52
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.359.52
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.360.53
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.361.54
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.362.68
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.363.58
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.364.54
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.365.53
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.367.56
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.368.58
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.369.55
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.370.56
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.371.56
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.372.57
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.373.55
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.375.56
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.376.57
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.377.55
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.378.65
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.384.58
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.386.71
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.387.59
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.388.59
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.389.59
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.390.60
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.391.60
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.392.60
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.393.60
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.394.60
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.396.61
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.397.61
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.398.60
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.399.60
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.403.61
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.404.63
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.405.61
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.406.61
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.407.76
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.408.63
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.409.61
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.412.62
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.413.62
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.414.62
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.415.62
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.416.62
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.417.62
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.418.62
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.419.62
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.420.62
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.421.62
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.423.63
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.424.63
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.425.63
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.426.63
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.427.63
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.428.65
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.429.63
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.430.63
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.432.65
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.433.64
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.434.65
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.435.64
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.436.76
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.437.64
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.438.71
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.439.71
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.440.75
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.442.73
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.443.73
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.444.73
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.445.68
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.446.69
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.450.67
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.451.67
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.452.68
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.453.68
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.454.69
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.456.69
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.457.75
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.458.70
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.459.70
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.460.69
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.462.74
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.463.69
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.464.70
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.465.68
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.468.70
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.469.70
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.470.70
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.471.73
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.472.70
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.478.74
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.479.73
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.480.68
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.481.71
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.482.74
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.49.67
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.50.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.500.71
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.501.74
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.502.71
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.51.69
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.52.72
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.520.76
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.521.76
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.522.76
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.53.51
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.531.76
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.532.75
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.534.75
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.54.47
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.55.45
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.56.69
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.57.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.58.47
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.593.76
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.595.76
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.63.57
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.66.47
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.70.75
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.71.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\temp
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\alerts.gif
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\alerts_over.gif
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\alerts_rec.gif
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\alerts_rec_over.gif
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\chevron-small.gif
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\DealioSearch.html
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\deals-leftcap.gif
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\deal_report.jpg
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\ebay_login.jpg
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\err_mainwindow.html
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\err_toolbar.html
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\global_scripts.js
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\headerbgthin.jpg
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\highlight-bg.png
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\logo.gif
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\logo_over.gif
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\man_toolbar.css
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\man_toolbar.html
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\man_toolbar.js
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\man_toolbarl.js
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\post-this-deal.gif
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\post-this-deal_over.gif
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\scripts.js
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\scroller.js
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\search-chevron.gif
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\search-chevron_over.gif
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\search_bg_blink.gif
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\separator.gif
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\settings.gif
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\settings_over.gif
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\yahoo-search.png
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\index.76.35
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.10.76
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.109.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.110.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.12.52
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.13.58
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.130.58
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.135.50
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.153.44
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.155.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.156.49
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.16.60
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.161.52
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.178.66
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.184.55
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.188.52
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.189.45
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.196.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.198.56
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.199.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.200.53
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.201.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.202.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.203.71
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.205.62
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.213.71
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.214.49
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.215.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.216.67
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.217.67
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.218.52
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.219.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.220.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.221.57
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.222.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.223.68
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.226.68
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.227.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.228.62
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.229.76
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.23.63
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.239.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.24.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.240.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.241.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.242.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.243.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.244.63
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.245.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.247.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.248.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.249.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.250.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.251.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.252.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.253.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.254.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.255.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.256.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.257.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.279.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.28.58
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.282.75
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.283.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.284.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.289.67
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.290.62
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.291.61
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.296.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.297.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.304.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.307.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.308.75
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.31.47
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.310.46
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.311.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.315.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.316.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.317.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.318.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.319.49
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.32.48
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.334.44
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.335.60
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.336.44
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.337.44
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.338.75
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.339.47
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.34.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.340.47
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.341.47
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.349.50
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.35.48
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.350.50
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.351.51
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.352.54
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.353.51
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.354.51
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.357.62
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.358.52
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.359.52
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.360.53
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.361.54
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.362.68
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.363.58
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.364.54
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.365.53
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.367.56
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.368.58
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.369.55
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.370.56
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.371.56
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.372.57
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.373.55
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.375.56
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.376.57
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.377.55
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.378.65
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.384.58
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.386.71
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.387.59
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.388.59
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.389.59
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.390.60
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.391.60
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.392.60
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.393.60
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.394.60
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.396.61
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.397.61
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.398.60
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.399.60
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.403.61
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.404.63
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.405.61
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.406.61
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.407.76
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.408.63
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.409.61
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.412.62
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.413.62
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.414.62
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.415.62
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.416.62
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.417.62
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.418.62
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.419.62
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.420.62
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.421.62
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.423.63
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.424.63
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.425.63
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.426.63
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.427.63
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.428.65
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.429.63
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.430.63
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.432.65
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.433.64
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.434.65
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.435.64
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.436.76
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.437.64
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.438.71
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.439.71
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.440.75
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.442.73
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.443.73
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.444.73
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.445.68
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.446.69
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.450.67
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.451.67
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.452.68
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.453.68
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.454.69
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.456.69
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.457.75
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.458.70
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.459.70
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.460.69
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.462.74
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.463.69
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.464.70
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.465.68
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.468.70
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.469.70
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.470.70
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.471.73
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.472.70
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.478.74
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.479.73
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.480.68
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.481.71
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.482.74
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.49.67
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.50.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.500.71
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.501.74
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.502.71
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.51.69
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.52.72
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.520.76
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.521.76
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.522.76
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.53.51
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.531.76
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.532.75
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.534.75
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.54.47
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.55.45
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.56.69
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.57.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.58.47
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.593.76
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.595.76
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.63.57
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.66.47
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.70.75
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.71.43
C:\Program Files\Dealio
C:\Program Files\Dealio\DealioAU.exe
C:\Program Files\Dealio\kb127
C:\Program Files\Dealio\SearchSettingsKit.exe
C:\Program Files\Dealio\kb127\Dealio Deskbar.exe
C:\Program Files\Dealio\kb127\Dealio.dll
C:\Program Files\Dealio\kb127\DealioRes409.dll
C:\Program Files\Dealio\kb127\res
C:\Program Files\Dealio\kb127\resDN
C:\Program Files\Dealio\kb127\rules
C:\Program Files\Dealio\kb127\temp
C:\Program Files\Dealio\kb127\res\alerts.gif
C:\Program Files\Dealio\kb127\res\alerts_over.gif
C:\Program Files\Dealio\kb127\res\alerts_rec.gif
C:\Program Files\Dealio\kb127\res\alerts_rec_over.gif
C:\Program Files\Dealio\kb127\res\chevron-small.gif
C:\Program Files\Dealio\kb127\res\DealioSearch.html
C:\Program Files\Dealio\kb127\res\deals-leftcap.gif
C:\Program Files\Dealio\kb127\res\deal_report.jpg
C:\Program Files\Dealio\kb127\res\ebay_login.jpg
C:\Program Files\Dealio\kb127\res\err_mainwindow.html
C:\Program Files\Dealio\kb127\res\err_toolbar.html
C:\Program Files\Dealio\kb127\res\global_scripts.js
C:\Program Files\Dealio\kb127\res\headerbgthin.jpg
C:\Program Files\Dealio\kb127\res\highlight-bg.png
C:\Program Files\Dealio\kb127\res\logo.gif
C:\Program Files\Dealio\kb127\res\logo_over.gif
C:\Program Files\Dealio\kb127\res\man_toolbar.css
C:\Program Files\Dealio\kb127\res\man_toolbar.html
C:\Program Files\Dealio\kb127\res\man_toolbar.js
C:\Program Files\Dealio\kb127\res\man_toolbarl.js
C:\Program Files\Dealio\kb127\res\post-this-deal.gif
C:\Program Files\Dealio\kb127\res\post-this-deal_over.gif
C:\Program Files\Dealio\kb127\res\scripts.js
C:\Program Files\Dealio\kb127\res\scroller.js
C:\Program Files\Dealio\kb127\res\search-chevron.gif
C:\Program Files\Dealio\kb127\res\search-chevron_over.gif
C:\Program Files\Dealio\kb127\res\search_bg_blink.gif
C:\Program Files\Dealio\kb127\res\separator.gif
C:\Program Files\Dealio\kb127\res\settings.gif
C:\Program Files\Dealio\kb127\res\settings_over.gif
C:\Program Files\Dealio\kb127\res\yahoo-search.png
C:\Program Files\Dealio\kb127\resDN\bottom.gif
C:\Program Files\Dealio\kb127\resDN\chevron_down.gif
C:\Program Files\Dealio\kb127\resDN\chevron_up.gif
C:\Program Files\Dealio\kb127\resDN\close.gif
C:\Program Files\Dealio\kb127\resDN\deskbar.css
C:\Program Files\Dealio\kb127\resDN\deskbar.js
C:\Program Files\Dealio\kb127\resDN\dispatch_helper.js
C:\Program Files\Dealio\kb127\resDN\ebay_compatible.jpg
C:\Program Files\Dealio\kb127\resDN\logo.gif
C:\Program Files\Dealio\kb127\resDN\logo_chevron_bkg.gif
C:\Program Files\Dealio\kb127\resDN\losing.gif
C:\Program Files\Dealio\kb127\resDN\lost.gif
C:\Program Files\Dealio\kb127\resDN\man_deskbar.html
C:\Program Files\Dealio\kb127\resDN\menu_arrow.gif
C:\Program Files\Dealio\kb127\resDN\menu_check.gif
C:\Program Files\Dealio\kb127\resDN\no_image.gif
C:\Program Files\Dealio\kb127\resDN\prod_img.gif
C:\Program Files\Dealio\kb127\resDN\search_chevron.gif
C:\Program Files\Dealio\kb127\resDN\spacer.gif
C:\Program Files\Dealio\kb127\resDN\textfield_bkg.gif
C:\Program Files\Dealio\kb127\resDN\top.gif
C:\Program Files\Dealio\kb127\resDN\unknown.gif
C:\Program Files\Dealio\kb127\resDN\winning.gif
C:\Program Files\Dealio\kb127\resDN\won.gif
C:\Program Files\Dealio\kb127\rules\index.76.35
C:\Program Files\Dealio\kb127\rules\rules.1.10.76
C:\Program Files\Dealio\kb127\rules\rules.1.109.43
C:\Program Files\Dealio\kb127\rules\rules.1.110.43
C:\Program Files\Dealio\kb127\rules\rules.1.12.52
C:\Program Files\Dealio\kb127\rules\rules.1.13.58
C:\Program Files\Dealio\kb127\rules\rules.1.130.58
C:\Program Files\Dealio\kb127\rules\rules.1.135.50
C:\Program Files\Dealio\kb127\rules\rules.1.153.44
C:\Program Files\Dealio\kb127\rules\rules.1.155.43
C:\Program Files\Dealio\kb127\rules\rules.1.156.49
C:\Program Files\Dealio\kb127\rules\rules.1.16.60
C:\Program Files\Dealio\kb127\rules\rules.1.161.52
C:\Program Files\Dealio\kb127\rules\rules.1.178.66
C:\Program Files\Dealio\kb127\rules\rules.1.184.55
C:\Program Files\Dealio\kb127\rules\rules.1.188.52
C:\Program Files\Dealio\kb127\rules\rules.1.189.45
C:\Program Files\Dealio\kb127\rules\rules.1.196.43
C:\Program Files\Dealio\kb127\rules\rules.1.198.56
C:\Program Files\Dealio\kb127\rules\rules.1.199.43
C:\Program Files\Dealio\kb127\rules\rules.1.200.53
C:\Program Files\Dealio\kb127\rules\rules.1.201.43
C:\Program Files\Dealio\kb127\rules\rules.1.202.43
C:\Program Files\Dealio\kb127\rules\rules.1.203.71
C:\Program Files\Dealio\kb127\rules\rules.1.205.62
C:\Program Files\Dealio\kb127\rules\rules.1.213.71
C:\Program Files\Dealio\kb127\rules\rules.1.214.49
C:\Program Files\Dealio\kb127\rules\rules.1.215.43
C:\Program Files\Dealio\kb127\rules\rules.1.216.67
C:\Program Files\Dealio\kb127\rules\rules.1.217.67
C:\Program Files\Dealio\kb127\rules\rules.1.218.52
C:\Program Files\Dealio\kb127\rules\rules.1.219.43
C:\Program Files\Dealio\kb127\rules\rules.1.220.43
C:\Program Files\Dealio\kb127\rules\rules.1.221.57
C:\Program Files\Dealio\kb127\rules\rules.1.222.43
C:\Program Files\Dealio\kb127\rules\rules.1.223.68
C:\Program Files\Dealio\kb127\rules\rules.1.226.68
C:\Program Files\Dealio\kb127\rules\rules.1.227.43
C:\Program Files\Dealio\kb127\rules\rules.1.228.62
C:\Program Files\Dealio\kb127\rules\rules.1.229.76
C:\Program Files\Dealio\kb127\rules\rules.1.23.63
C:\Program Files\Dealio\kb127\rules\rules.1.239.43
C:\Program Files\Dealio\kb127\rules\rules.1.24.43
C:\Program Files\Dealio\kb127\rules\rules.1.240.43
C:\Program Files\Dealio\kb127\rules\rules.1.241.43
C:\Program Files\Dealio\kb127\rules\rules.1.242.43
C:\Program Files\Dealio\kb127\rules\rules.1.243.43
C:\Program Files\Dealio\kb127\rules\rules.1.244.63
C:
-----------\\ ToolBar S&D 1.2.8 XP/Vista
Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 3800+ )
BIOS : Default System BIOS
USER : AGUESSE ( Administrator )
BOOT : Normal boot
Antivirus : Kaspersky Anti-Virus 8.0.0.454 (Activated)
C:\ (Local Disk) - NTFS - Total:149 Go (Free:16 Go)
D:\ (CD or DVD)
E:\ (Local Disk) - NTFS - Total:149 Go (Free:137 Go)
F:\ (CD or DVD)
"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [1] ( 27/12/2008|19:10 )
-----------\\ Recherche de Fichiers / Dossiers ...
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\temp
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\alerts.gif
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\alerts_over.gif
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\alerts_rec.gif
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\alerts_rec_over.gif
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\chevron-small.gif
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\DealioSearch.html
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\deals-leftcap.gif
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\deal_report.jpg
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\ebay_login.jpg
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\err_mainwindow.html
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\err_toolbar.html
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\global_scripts.js
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\headerbgthin.jpg
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\highlight-bg.png
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\logo.gif
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\logo_over.gif
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\man_toolbar.css
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\man_toolbar.html
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\man_toolbar.js
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\man_toolbarl.js
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\post-this-deal.gif
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\post-this-deal_over.gif
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\scripts.js
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\scroller.js
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\search-chevron.gif
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\search-chevron_over.gif
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\search_bg_blink.gif
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\separator.gif
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\settings.gif
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\settings_over.gif
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\yahoo-search.png
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\index.76.35
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.10.76
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.109.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.110.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.12.52
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.13.58
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.130.58
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.135.50
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.153.44
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.155.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.156.49
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.16.60
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.161.52
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.178.66
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.184.55
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.188.52
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.189.45
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.196.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.198.56
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.199.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.200.53
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.201.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.202.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.203.71
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.205.62
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.213.71
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.214.49
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.215.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.216.67
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.217.67
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.218.52
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.219.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.220.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.221.57
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.222.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.223.68
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.226.68
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.227.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.228.62
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.229.76
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.23.63
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.239.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.24.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.240.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.241.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.242.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.243.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.244.63
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.245.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.247.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.248.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.249.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.250.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.251.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.252.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.253.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.254.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.255.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.256.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.257.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.279.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.28.58
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.282.75
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.283.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.284.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.289.67
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.290.62
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.291.61
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.296.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.297.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.304.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.307.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.308.75
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.31.47
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.310.46
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.311.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.315.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.316.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.317.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.318.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.319.49
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.32.48
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.334.44
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.335.60
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.336.44
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.337.44
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.338.75
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.339.47
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.34.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.340.47
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.341.47
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.349.50
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.35.48
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.350.50
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.351.51
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.352.54
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.353.51
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.354.51
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.357.62
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.358.52
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.359.52
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.360.53
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.361.54
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.362.68
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.363.58
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.364.54
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.365.53
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.367.56
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.368.58
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.369.55
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.370.56
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.371.56
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.372.57
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.373.55
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.375.56
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.376.57
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.377.55
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.378.65
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.384.58
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.386.71
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.387.59
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.388.59
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.389.59
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.390.60
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.391.60
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.392.60
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.393.60
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.394.60
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.396.61
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.397.61
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.398.60
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.399.60
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.403.61
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.404.63
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.405.61
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.406.61
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.407.76
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.408.63
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.409.61
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.412.62
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.413.62
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.414.62
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.415.62
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.416.62
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.417.62
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.418.62
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.419.62
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.420.62
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.421.62
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.423.63
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.424.63
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.425.63
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.426.63
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.427.63
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.428.65
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.429.63
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.430.63
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.432.65
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.433.64
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.434.65
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.435.64
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.436.76
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.437.64
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.438.71
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.439.71
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.440.75
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.442.73
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.443.73
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.444.73
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.445.68
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.446.69
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.450.67
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.451.67
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.452.68
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.453.68
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.454.69
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.456.69
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.457.75
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.458.70
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.459.70
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.460.69
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.462.74
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.463.69
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.464.70
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.465.68
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.468.70
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.469.70
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.470.70
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.471.73
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.472.70
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.478.74
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.479.73
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.480.68
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.481.71
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.482.74
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.49.67
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.50.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.500.71
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.501.74
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.502.71
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.51.69
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.52.72
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.520.76
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.521.76
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.522.76
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.53.51
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.531.76
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.532.75
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.534.75
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.54.47
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.55.45
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.56.69
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.57.43
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.58.47
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.593.76
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.595.76
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.63.57
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.66.47
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.70.75
C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.71.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\temp
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\alerts.gif
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\alerts_over.gif
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\alerts_rec.gif
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\alerts_rec_over.gif
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\chevron-small.gif
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\DealioSearch.html
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\deals-leftcap.gif
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\deal_report.jpg
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\ebay_login.jpg
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\err_mainwindow.html
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\err_toolbar.html
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\global_scripts.js
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\headerbgthin.jpg
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\highlight-bg.png
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\logo.gif
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\logo_over.gif
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\man_toolbar.css
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\man_toolbar.html
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\man_toolbar.js
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\man_toolbarl.js
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\post-this-deal.gif
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\post-this-deal_over.gif
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\scripts.js
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\scroller.js
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\search-chevron.gif
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\search-chevron_over.gif
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\search_bg_blink.gif
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\separator.gif
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\settings.gif
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\settings_over.gif
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\yahoo-search.png
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\index.76.35
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.10.76
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.109.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.110.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.12.52
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.13.58
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.130.58
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.135.50
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.153.44
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.155.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.156.49
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.16.60
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.161.52
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.178.66
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.184.55
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.188.52
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.189.45
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.196.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.198.56
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.199.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.200.53
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.201.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.202.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.203.71
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.205.62
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.213.71
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.214.49
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.215.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.216.67
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.217.67
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.218.52
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.219.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.220.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.221.57
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.222.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.223.68
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.226.68
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.227.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.228.62
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.229.76
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.23.63
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.239.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.24.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.240.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.241.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.242.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.243.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.244.63
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.245.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.247.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.248.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.249.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.250.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.251.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.252.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.253.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.254.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.255.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.256.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.257.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.279.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.28.58
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.282.75
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.283.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.284.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.289.67
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.290.62
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.291.61
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.296.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.297.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.304.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.307.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.308.75
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.31.47
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.310.46
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.311.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.315.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.316.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.317.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.318.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.319.49
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.32.48
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.334.44
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.335.60
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.336.44
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.337.44
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.338.75
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.339.47
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.34.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.340.47
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.341.47
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.349.50
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.35.48
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.350.50
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.351.51
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.352.54
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.353.51
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.354.51
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.357.62
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.358.52
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.359.52
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.360.53
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.361.54
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.362.68
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.363.58
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.364.54
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.365.53
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.367.56
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.368.58
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.369.55
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.370.56
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.371.56
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.372.57
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.373.55
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.375.56
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.376.57
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.377.55
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.378.65
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.384.58
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.386.71
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.387.59
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.388.59
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.389.59
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.390.60
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.391.60
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.392.60
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.393.60
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.394.60
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.396.61
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.397.61
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.398.60
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.399.60
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.403.61
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.404.63
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.405.61
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.406.61
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.407.76
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.408.63
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.409.61
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.412.62
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.413.62
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.414.62
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.415.62
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.416.62
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.417.62
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.418.62
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.419.62
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.420.62
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.421.62
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.423.63
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.424.63
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.425.63
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.426.63
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.427.63
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.428.65
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.429.63
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.430.63
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.432.65
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.433.64
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.434.65
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.435.64
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.436.76
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.437.64
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.438.71
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.439.71
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.440.75
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.442.73
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.443.73
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.444.73
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.445.68
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.446.69
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.450.67
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.451.67
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.452.68
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.453.68
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.454.69
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.456.69
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.457.75
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.458.70
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.459.70
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.460.69
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.462.74
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.463.69
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.464.70
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.465.68
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.468.70
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.469.70
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.470.70
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.471.73
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.472.70
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.478.74
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.479.73
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.480.68
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.481.71
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.482.74
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.49.67
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.50.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.500.71
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.501.74
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.502.71
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.51.69
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.52.72
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.520.76
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.521.76
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.522.76
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.53.51
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.531.76
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.532.75
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.534.75
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.54.47
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.55.45
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.56.69
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.57.43
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.58.47
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.593.76
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.595.76
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.63.57
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.66.47
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.70.75
C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.71.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\temp
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\alerts.gif
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\alerts_over.gif
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\alerts_rec.gif
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\alerts_rec_over.gif
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\chevron-small.gif
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\DealioSearch.html
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\deals-leftcap.gif
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\deal_report.jpg
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\ebay_login.jpg
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\err_mainwindow.html
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\err_toolbar.html
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\global_scripts.js
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\headerbgthin.jpg
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\highlight-bg.png
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\logo.gif
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\logo_over.gif
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\man_toolbar.css
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\man_toolbar.html
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\man_toolbar.js
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\man_toolbarl.js
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\post-this-deal.gif
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\post-this-deal_over.gif
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\scripts.js
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\scroller.js
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\search-chevron.gif
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\search-chevron_over.gif
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\search_bg_blink.gif
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\separator.gif
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\settings.gif
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\settings_over.gif
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\yahoo-search.png
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\index.76.35
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.10.76
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.109.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.110.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.12.52
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.13.58
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.130.58
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.135.50
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.153.44
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.155.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.156.49
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.16.60
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.161.52
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.178.66
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.184.55
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.188.52
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.189.45
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.196.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.198.56
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.199.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.200.53
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.201.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.202.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.203.71
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.205.62
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.213.71
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.214.49
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.215.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.216.67
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.217.67
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.218.52
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.219.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.220.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.221.57
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.222.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.223.68
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.226.68
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.227.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.228.62
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.229.76
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.23.63
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.239.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.24.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.240.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.241.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.242.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.243.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.244.63
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.245.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.247.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.248.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.249.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.250.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.251.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.252.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.253.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.254.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.255.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.256.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.257.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.279.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.28.58
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.282.75
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.283.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.284.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.289.67
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.290.62
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.291.61
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.296.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.297.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.304.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.307.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.308.75
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.31.47
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.310.46
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.311.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.315.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.316.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.317.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.318.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.319.49
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.32.48
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.334.44
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.335.60
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.336.44
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.337.44
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.338.75
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.339.47
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.34.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.340.47
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.341.47
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.349.50
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.35.48
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.350.50
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.351.51
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.352.54
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.353.51
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.354.51
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.357.62
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.358.52
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.359.52
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.360.53
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.361.54
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.362.68
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.363.58
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.364.54
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.365.53
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.367.56
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.368.58
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.369.55
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.370.56
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.371.56
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.372.57
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.373.55
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.375.56
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.376.57
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.377.55
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.378.65
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.384.58
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.386.71
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.387.59
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.388.59
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.389.59
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.390.60
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.391.60
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.392.60
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.393.60
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.394.60
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.396.61
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.397.61
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.398.60
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.399.60
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.403.61
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.404.63
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.405.61
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.406.61
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.407.76
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.408.63
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.409.61
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.412.62
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.413.62
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.414.62
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.415.62
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.416.62
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.417.62
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.418.62
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.419.62
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.420.62
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.421.62
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.423.63
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.424.63
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.425.63
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.426.63
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.427.63
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.428.65
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.429.63
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.430.63
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.432.65
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.433.64
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.434.65
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.435.64
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.436.76
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.437.64
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.438.71
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.439.71
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.440.75
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.442.73
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.443.73
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.444.73
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.445.68
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.446.69
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.450.67
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.451.67
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.452.68
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.453.68
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.454.69
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.456.69
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.457.75
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.458.70
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.459.70
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.460.69
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.462.74
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.463.69
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.464.70
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.465.68
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.468.70
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.469.70
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.470.70
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.471.73
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.472.70
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.478.74
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.479.73
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.480.68
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.481.71
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.482.74
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.49.67
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.50.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.500.71
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.501.74
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.502.71
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.51.69
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.52.72
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.520.76
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.521.76
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.522.76
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.53.51
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.531.76
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.532.75
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.534.75
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.54.47
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.55.45
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.56.69
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.57.43
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.58.47
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.593.76
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.595.76
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.63.57
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.66.47
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.70.75
C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.71.43
C:\Program Files\Dealio
C:\Program Files\Dealio\DealioAU.exe
C:\Program Files\Dealio\kb127
C:\Program Files\Dealio\SearchSettingsKit.exe
C:\Program Files\Dealio\kb127\Dealio Deskbar.exe
C:\Program Files\Dealio\kb127\Dealio.dll
C:\Program Files\Dealio\kb127\DealioRes409.dll
C:\Program Files\Dealio\kb127\res
C:\Program Files\Dealio\kb127\resDN
C:\Program Files\Dealio\kb127\rules
C:\Program Files\Dealio\kb127\temp
C:\Program Files\Dealio\kb127\res\alerts.gif
C:\Program Files\Dealio\kb127\res\alerts_over.gif
C:\Program Files\Dealio\kb127\res\alerts_rec.gif
C:\Program Files\Dealio\kb127\res\alerts_rec_over.gif
C:\Program Files\Dealio\kb127\res\chevron-small.gif
C:\Program Files\Dealio\kb127\res\DealioSearch.html
C:\Program Files\Dealio\kb127\res\deals-leftcap.gif
C:\Program Files\Dealio\kb127\res\deal_report.jpg
C:\Program Files\Dealio\kb127\res\ebay_login.jpg
C:\Program Files\Dealio\kb127\res\err_mainwindow.html
C:\Program Files\Dealio\kb127\res\err_toolbar.html
C:\Program Files\Dealio\kb127\res\global_scripts.js
C:\Program Files\Dealio\kb127\res\headerbgthin.jpg
C:\Program Files\Dealio\kb127\res\highlight-bg.png
C:\Program Files\Dealio\kb127\res\logo.gif
C:\Program Files\Dealio\kb127\res\logo_over.gif
C:\Program Files\Dealio\kb127\res\man_toolbar.css
C:\Program Files\Dealio\kb127\res\man_toolbar.html
C:\Program Files\Dealio\kb127\res\man_toolbar.js
C:\Program Files\Dealio\kb127\res\man_toolbarl.js
C:\Program Files\Dealio\kb127\res\post-this-deal.gif
C:\Program Files\Dealio\kb127\res\post-this-deal_over.gif
C:\Program Files\Dealio\kb127\res\scripts.js
C:\Program Files\Dealio\kb127\res\scroller.js
C:\Program Files\Dealio\kb127\res\search-chevron.gif
C:\Program Files\Dealio\kb127\res\search-chevron_over.gif
C:\Program Files\Dealio\kb127\res\search_bg_blink.gif
C:\Program Files\Dealio\kb127\res\separator.gif
C:\Program Files\Dealio\kb127\res\settings.gif
C:\Program Files\Dealio\kb127\res\settings_over.gif
C:\Program Files\Dealio\kb127\res\yahoo-search.png
C:\Program Files\Dealio\kb127\resDN\bottom.gif
C:\Program Files\Dealio\kb127\resDN\chevron_down.gif
C:\Program Files\Dealio\kb127\resDN\chevron_up.gif
C:\Program Files\Dealio\kb127\resDN\close.gif
C:\Program Files\Dealio\kb127\resDN\deskbar.css
C:\Program Files\Dealio\kb127\resDN\deskbar.js
C:\Program Files\Dealio\kb127\resDN\dispatch_helper.js
C:\Program Files\Dealio\kb127\resDN\ebay_compatible.jpg
C:\Program Files\Dealio\kb127\resDN\logo.gif
C:\Program Files\Dealio\kb127\resDN\logo_chevron_bkg.gif
C:\Program Files\Dealio\kb127\resDN\losing.gif
C:\Program Files\Dealio\kb127\resDN\lost.gif
C:\Program Files\Dealio\kb127\resDN\man_deskbar.html
C:\Program Files\Dealio\kb127\resDN\menu_arrow.gif
C:\Program Files\Dealio\kb127\resDN\menu_check.gif
C:\Program Files\Dealio\kb127\resDN\no_image.gif
C:\Program Files\Dealio\kb127\resDN\prod_img.gif
C:\Program Files\Dealio\kb127\resDN\search_chevron.gif
C:\Program Files\Dealio\kb127\resDN\spacer.gif
C:\Program Files\Dealio\kb127\resDN\textfield_bkg.gif
C:\Program Files\Dealio\kb127\resDN\top.gif
C:\Program Files\Dealio\kb127\resDN\unknown.gif
C:\Program Files\Dealio\kb127\resDN\winning.gif
C:\Program Files\Dealio\kb127\resDN\won.gif
C:\Program Files\Dealio\kb127\rules\index.76.35
C:\Program Files\Dealio\kb127\rules\rules.1.10.76
C:\Program Files\Dealio\kb127\rules\rules.1.109.43
C:\Program Files\Dealio\kb127\rules\rules.1.110.43
C:\Program Files\Dealio\kb127\rules\rules.1.12.52
C:\Program Files\Dealio\kb127\rules\rules.1.13.58
C:\Program Files\Dealio\kb127\rules\rules.1.130.58
C:\Program Files\Dealio\kb127\rules\rules.1.135.50
C:\Program Files\Dealio\kb127\rules\rules.1.153.44
C:\Program Files\Dealio\kb127\rules\rules.1.155.43
C:\Program Files\Dealio\kb127\rules\rules.1.156.49
C:\Program Files\Dealio\kb127\rules\rules.1.16.60
C:\Program Files\Dealio\kb127\rules\rules.1.161.52
C:\Program Files\Dealio\kb127\rules\rules.1.178.66
C:\Program Files\Dealio\kb127\rules\rules.1.184.55
C:\Program Files\Dealio\kb127\rules\rules.1.188.52
C:\Program Files\Dealio\kb127\rules\rules.1.189.45
C:\Program Files\Dealio\kb127\rules\rules.1.196.43
C:\Program Files\Dealio\kb127\rules\rules.1.198.56
C:\Program Files\Dealio\kb127\rules\rules.1.199.43
C:\Program Files\Dealio\kb127\rules\rules.1.200.53
C:\Program Files\Dealio\kb127\rules\rules.1.201.43
C:\Program Files\Dealio\kb127\rules\rules.1.202.43
C:\Program Files\Dealio\kb127\rules\rules.1.203.71
C:\Program Files\Dealio\kb127\rules\rules.1.205.62
C:\Program Files\Dealio\kb127\rules\rules.1.213.71
C:\Program Files\Dealio\kb127\rules\rules.1.214.49
C:\Program Files\Dealio\kb127\rules\rules.1.215.43
C:\Program Files\Dealio\kb127\rules\rules.1.216.67
C:\Program Files\Dealio\kb127\rules\rules.1.217.67
C:\Program Files\Dealio\kb127\rules\rules.1.218.52
C:\Program Files\Dealio\kb127\rules\rules.1.219.43
C:\Program Files\Dealio\kb127\rules\rules.1.220.43
C:\Program Files\Dealio\kb127\rules\rules.1.221.57
C:\Program Files\Dealio\kb127\rules\rules.1.222.43
C:\Program Files\Dealio\kb127\rules\rules.1.223.68
C:\Program Files\Dealio\kb127\rules\rules.1.226.68
C:\Program Files\Dealio\kb127\rules\rules.1.227.43
C:\Program Files\Dealio\kb127\rules\rules.1.228.62
C:\Program Files\Dealio\kb127\rules\rules.1.229.76
C:\Program Files\Dealio\kb127\rules\rules.1.23.63
C:\Program Files\Dealio\kb127\rules\rules.1.239.43
C:\Program Files\Dealio\kb127\rules\rules.1.24.43
C:\Program Files\Dealio\kb127\rules\rules.1.240.43
C:\Program Files\Dealio\kb127\rules\rules.1.241.43
C:\Program Files\Dealio\kb127\rules\rules.1.242.43
C:\Program Files\Dealio\kb127\rules\rules.1.243.43
C:\Program Files\Dealio\kb127\rules\rules.1.244.63
C:
Ok, tu relances Toolbar SD et tu choisis l'option2 ( nettoyage), ne touche a rien pendant le nettoyage, un rapport sera genere, postes le avec un nouveau rapport hijackthis...
Je n'ai pas l'option 2.
┌───────────────────────────────────────────────────────────────────────┐
│ ToolBar S&D Windows XP - Vista │
└───────────────────────────────────────────────────────────────────────┘
╔═════════════════════════════════════╗
║ ║
║ 1 - Recherche ║
║ 2 - Suppression ║
║ Q - Quitter ║
║ ║
╚═════════════════════════════════════╝
. Entrez votre choix puis validez :
┌───────────────────────────────────────────────────────────────────────┐
│ ToolBar S&D Windows XP - Vista │
└───────────────────────────────────────────────────────────────────────┘
╔═════════════════════════════════════╗
║ ║
║ 1 - Recherche ║
║ 2 - Suppression ║
║ Q - Quitter ║
║ ║
╚═════════════════════════════════════╝
. Entrez votre choix puis validez :
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
C'est le mot Suppression qui m'a induite en erreur.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:45:16, on 27/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\program files\relevantknowledge\rlvknlg.exe
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
E:\Sylvie\TELECHARGEMENT\Hijackthis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.atcomet.com/b/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;*.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - Default URLSearchHook is missing
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [SW24] C:\WINDOWS\system32\sw24.exe
O4 - HKLM\..\Run: [SW20] C:\WINDOWS\system32\sw20.exe
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
O4 - HKLM\..\Run: [RelevantKnowledge] C:\program files\relevantknowledge\rlvknlg.exe -boot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll/206 (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Anti-Virus (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pinnacle Systems Media Service (PinnacleSys.MediaServer) - Pinnacle Systems - C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:45:16, on 27/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\program files\relevantknowledge\rlvknlg.exe
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
E:\Sylvie\TELECHARGEMENT\Hijackthis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.atcomet.com/b/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;*.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - Default URLSearchHook is missing
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [SW24] C:\WINDOWS\system32\sw24.exe
O4 - HKLM\..\Run: [SW20] C:\WINDOWS\system32\sw20.exe
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
O4 - HKLM\..\Run: [RelevantKnowledge] C:\program files\relevantknowledge\rlvknlg.exe -boot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll/206 (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Anti-Virus (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pinnacle Systems Media Service (PinnacleSys.MediaServer) - Pinnacle Systems - C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
Ok, telecharges Malwarebytes : http://www.malwarebytes.org/mbam/program/mbam-setup.exe a la fin du telechargement mbam se met automatiquement a jour ( important) Redemarres le pc en mode sans echec ( tapotes sur la touche F8 ou F5 au demarrage de ton pc, jusqu'a l'apparition d'un ecran noir avec diverses options, choisis >> mode sans echec et valides par la touche entree de ton clavier... ouvres ensuite mbam, cliques sur Recherche et executes une analyse rapide de ton pc... a la fin du scan,cliques sur >> afficher les resultats puis sur supprimer la selection... un rapport sera genere, postes le...
Malwarebytes' Anti-Malware 1.31
Version de la base de données: 1556
Windows 5.1.2600 Service Pack 3
27/12/2008 21:05:21
mbam-log-2008-12-27 (21-05-21).txt
Type de recherche: Examen rapide
Eléments examinés: 67150
Temps écoulé: 4 minute(s), 20 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 8
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 3
Fichier(s) infecté(s): 9
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{733e9132-53ca-4c97-9ac9-145c4502fa20} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{0ac49246-419b-4ee0-8917-8818daad6a4e} (Adware.180Solutions) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{99410cde-6f16-42ce-9d49-3807f78f0287} (Adware.180Solutions) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{f31a5d11-bf0b-4a4e-90af-274f2090aaa6} (Adware.180Solutions) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FOPF (Rogue.AVSystemShield) -> Quarantined and deleted successfully.
Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform\zangotoolbar 4.8.3 (Adware.Zango) -> Quarantined and deleted successfully.
Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\Local Page (Hijack.Search) -> Bad: (http://www.iesearch.com/) Good: (https://www.google.com/?gws_rd=ssl -> Quarantined and deleted successfully.
Dossier(s) infecté(s):
C:\Program Files\RelevantKnowledge (Spyware.Marketscore) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Documents and Settings\Etienne.USER-PC\Local Settings\Temp\NI.UGA6PV_0001_N108M0207 (Rogue.Multiple) -> Quarantined and deleted successfully.
Fichier(s) infecté(s):
C:\Program Files\RelevantKnowledge\rk.bin (Spyware.Marketscore) -> Quarantined and deleted successfully.
C:\Program Files\RelevantKnowledge\rlls.dll (Spyware.Marketscore) -> Quarantined and deleted successfully.
C:\Program Files\RelevantKnowledge\rloci.bin (Spyware.Marketscore) -> Quarantined and deleted successfully.
C:\Program Files\RelevantKnowledge\rlservice.exe (Spyware.Marketscore) -> Quarantined and deleted successfully.
C:\Program Files\RelevantKnowledge\rlvknlg.exe (Spyware.Marketscore) -> Quarantined and deleted successfully.
C:\Program Files\RelevantKnowledge\sporder.dll (Spyware.Marketscore) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\BitDownload Setup Components (Trojan.Lop) -> Quarantined and deleted successfully.
C:\WINDOWS\cookies.ini (Malware.Trace) -> Quarantined and deleted successfully.
C:\clean.cmd (Trojan.Agent) -> Quarantined and deleted successfully.
Version de la base de données: 1556
Windows 5.1.2600 Service Pack 3
27/12/2008 21:05:21
mbam-log-2008-12-27 (21-05-21).txt
Type de recherche: Examen rapide
Eléments examinés: 67150
Temps écoulé: 4 minute(s), 20 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 8
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 3
Fichier(s) infecté(s): 9
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{733e9132-53ca-4c97-9ac9-145c4502fa20} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{0ac49246-419b-4ee0-8917-8818daad6a4e} (Adware.180Solutions) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{99410cde-6f16-42ce-9d49-3807f78f0287} (Adware.180Solutions) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{f31a5d11-bf0b-4a4e-90af-274f2090aaa6} (Adware.180Solutions) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FOPF (Rogue.AVSystemShield) -> Quarantined and deleted successfully.
Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform\zangotoolbar 4.8.3 (Adware.Zango) -> Quarantined and deleted successfully.
Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\Local Page (Hijack.Search) -> Bad: (http://www.iesearch.com/) Good: (https://www.google.com/?gws_rd=ssl -> Quarantined and deleted successfully.
Dossier(s) infecté(s):
C:\Program Files\RelevantKnowledge (Spyware.Marketscore) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Documents and Settings\Etienne.USER-PC\Local Settings\Temp\NI.UGA6PV_0001_N108M0207 (Rogue.Multiple) -> Quarantined and deleted successfully.
Fichier(s) infecté(s):
C:\Program Files\RelevantKnowledge\rk.bin (Spyware.Marketscore) -> Quarantined and deleted successfully.
C:\Program Files\RelevantKnowledge\rlls.dll (Spyware.Marketscore) -> Quarantined and deleted successfully.
C:\Program Files\RelevantKnowledge\rloci.bin (Spyware.Marketscore) -> Quarantined and deleted successfully.
C:\Program Files\RelevantKnowledge\rlservice.exe (Spyware.Marketscore) -> Quarantined and deleted successfully.
C:\Program Files\RelevantKnowledge\rlvknlg.exe (Spyware.Marketscore) -> Quarantined and deleted successfully.
C:\Program Files\RelevantKnowledge\sporder.dll (Spyware.Marketscore) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\BitDownload Setup Components (Trojan.Lop) -> Quarantined and deleted successfully.
C:\WINDOWS\cookies.ini (Malware.Trace) -> Quarantined and deleted successfully.
C:\clean.cmd (Trojan.Agent) -> Quarantined and deleted successfully.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:29:46, on 27/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
E:\Sylvie\TELECHARGEMENT\Hijackthis.exe
C:\WINDOWS\system32\HPZipm12.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.atcomet.com/b/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;*.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - Default URLSearchHook is missing
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [SW24] C:\WINDOWS\system32\sw24.exe
O4 - HKLM\..\Run: [SW20] C:\WINDOWS\system32\sw20.exe
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
O4 - HKLM\..\Run: [RelevantKnowledge] C:\program files\relevantknowledge\rlvknlg.exe -boot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll/206 (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Anti-Virus (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pinnacle Systems Media Service (PinnacleSys.MediaServer) - Pinnacle Systems - C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
Scan saved at 21:29:46, on 27/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
E:\Sylvie\TELECHARGEMENT\Hijackthis.exe
C:\WINDOWS\system32\HPZipm12.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.atcomet.com/b/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;*.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - Default URLSearchHook is missing
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [SW24] C:\WINDOWS\system32\sw24.exe
O4 - HKLM\..\Run: [SW20] C:\WINDOWS\system32\sw20.exe
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
O4 - HKLM\..\Run: [RelevantKnowledge] C:\program files\relevantknowledge\rlvknlg.exe -boot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll/206 (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Anti-Virus (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pinnacle Systems Media Service (PinnacleSys.MediaServer) - Pinnacle Systems - C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
Apres avoir supprimer la quarantaine de mbam ( fais le >>important)... telecharges AD-Remover http://sd-1.archive-host.com/membres/up/16506160323759868/AD-R.exe Deconnectes-toi et fermes toutes les apllications en cours... double-clique sur le programme d'installation et installes le dans son emplacement par defaut -->> C:/program files . Double cliques ensuite sur l'icone AD-Remover sur ton bureau >> au menu, choisis l'option A ( recherche). a la fin un rapport est gener, postes le !
--------- Logfile of AD-Remover 1.0.8.0 by C_XX ---------
# START at: 21:48:44 | Sam 27/12/2008 | Microsoft® Windows XP™ SP3 (v5.1.2600)
# BOOT MODE: Normal
# OPTION: Scan | EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat
# PC: USER-PC | USER: AGUESSE ( Current user is an administrator)
# DRIVE(S):
- C:\ (File System: NTFS)
- E:\ (File System: NTFS)
# Internet Explorer v7.0.5730.11
--------- [ RUNNING PROCESSES: 45 ] ---------
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\WINDOWS\system32\SearchFilterHost.exe
C:\WINDOWS\system32\ntvdm.exe
-----------------------------------
+-----------------------| Boonty/Boonty Games Elements found :
"Boonty Games" (service)
.
"HKEY_CLASSES_ROOT\boontybox"
"HKEY_LOCAL_MACHINE\Software\Boonty"
"HKEY_LOCAL_MACHINE\Software\Classes\boontybox"
"HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Boonty Games"
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Boonty Games"
"HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Boonty Games"
.
[14/06/2008 10:42|d--------] C:\PROGRA~1\Boonty
[13/12/2007 20:34|d--------] C:\PROGRA~1\Boonty\COMPON~1
[13/12/2007 20:30|--a------] C:\PROGRA~1\Boonty\COMPON~1\BOONTY~1.EXE
[13/12/2007 20:34|--a------] C:\PROGRA~1\Boonty\COMPON~1\CRAZY_~1.EXE
[01/05/2008 16:47|d--------] C:\PROGRA~1\BOONTY~1
[01/04/2008 20:29|d--------] C:\PROGRA~1\BOONTY~1\COMPON~1
[01/04/2008 20:29|--a------] C:\PROGRA~1\BOONTY~1\kudos.exe
[27/03/2007 09:18|--a------] C:\PROGRA~1\BOONTY~1\COMPON~1\bureau.url
[27/10/2003 14:07|--a------] C:\PROGRA~1\BOONTY~1\COMPON~1\Joystick.ico
[27/03/2007 09:18|--a------] C:\PROGRA~1\BOONTY~1\COMPON~1\start.url
[13/12/2007 20:32|d--------] C:\PROGRA~1\FICHIE~1\BOONTY~1
[13/12/2007 20:32|d--------] C:\PROGRA~1\FICHIE~1\BOONTY~1\Service
[13/12/2007 20:32|--a------] C:\PROGRA~1\FICHIE~1\BOONTY~1\Service\Boonty.exe
[13/12/2007 20:32|d--------] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
[01/04/2008 20:30|d--------] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY\Licenses
[01/04/2008 20:28|-ra------] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY\Licenses\B382E000.dat
[04/05/2008 14:55|-r-------] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY\Licenses\B4595000.dat
[04/03/2008 21:02|-ra------] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY\Licenses\B45EA000.dat
[13/12/2007 20:49|-ra------] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY\Licenses\B4C0E000.dat
[01/04/2008 20:32|-r-------] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY\Licenses\B5057000.dat
[13/12/2007 21:20|-ra------] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY\Licenses\B5529000.dat
[14/06/2008 10:50|d--------] C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\BOONTY~1
[01/04/2008 20:29|--a------] C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\BOONTY~1\JEUXTL~1.LNK
+-----------------------| Eorezo Elements found :
.
+-----------------------| Everest Poker Elements found :
.
+-----------------------| FunWebProducts/MyWay/MyWebSearch/MyGlobalSearch Elements found :
"HKEY_CURRENT_USER\Software\FunWebProducts"
.
+-----------------------| It's TV Elements found :
.
+-----------------------| Sweetim Elements found :
.
+-----------------------| ADDED SCAN :
+---------- Scanning prefs.js ... ( # Mozilla User Preferences )
...\s59lfeoj.default\prefs.js :
~~~~ Mozilla FireFox version 3.0.5 ~~~~
* Browser Search Default Engine: "Search the web"
* Browser Search Selected Engine: "Google"
* Browser Search Default Url: "http://search.babylon.com/web/{searchTerms}?babsrc=browsersearch"
* Browser Startup HomePage: "https://www.google.fr/webhp?hl=fr&gws_rd=ssl"
+----------+
+---------------------------------------------------------------------------+
+--[HKEY_CURRENT_USER\..\Run]
CTFMON.EXE REG_SZ C:\WINDOWS\system32\ctfmon.exe
IncrediMail REG_SZ C:\Program Files\IncrediMail\bin\IncMail.exe /c
NBJ REG_SZ "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
msnmsgr REG_SZ "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
+--[HKEY_LOCAL_MACHINE\..\Run]
NvCplDaemon REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
NvMediaCenter REG_SZ RunDLL32.exe NvMCTray.dll,NvTaskbarInit
Sony Ericsson PC Suite REG_SZ "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
Logitech Hardware Abstraction Layer REG_SZ KHALMNPR.EXE
PinnacleDriverCheck REG_SZ C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
SW24 REG_SZ C:\WINDOWS\system32\sw24.exe
SW20 REG_SZ C:\WINDOWS\system32\sw20.exe
SkyTel REG_SZ SkyTel.EXE
RTHDCPL REG_SZ RTHDCPL.EXE
nwiz REG_SZ nwiz.exe /install
NeroFilterCheck REG_SZ C:\WINDOWS\system32\NeroCheck.exe
Alcmtr REG_SZ ALCMTR.EXE
AppleSyncNotifier REG_SZ C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
QuickTime Task REG_SZ "C:\Program Files\QuickTime\QTTask.exe" -atboottime
iTunesHelper REG_SZ "C:\Program Files\iTunes\iTunesHelper.exe"
HP Software Update REG_SZ C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
AVP REG_SZ "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
RelevantKnowledge REG_SZ C:\program files\relevantknowledge\rlvknlg.exe -boot
Adobe Reader Speed Launcher REG_SZ "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre6\bin\jusched.exe"
+--[HKEY_USERS\.DEFAULT\..\Run]
CTFMON.EXE REG_SZ C:\WINDOWS\system32\ctfmon.exe
+--[HKEY_CURRENT_USER\..\Internet Explorer\MAIN]
Start Page : hxxp://google.atcomet.com/b/
+--[HKEY_LOCAL_MACHINE\..\Internet Explorer\MAIN]
Start Page : hxxp://www.msn.com/
+---------------------------------------------------------------------------+
- "C:\AD-report-Scan-27.12.2008.log" (~7600 bytes)
# END at: 21:49:06 | 27/12/2008 - Time elapsed: 21.5 seconds
+---------------------------------------------------------------------------+
+------------------------------- [ E.O.F - 143 lines ]
+---------------------------------------------------------------------------+
# START at: 21:48:44 | Sam 27/12/2008 | Microsoft® Windows XP™ SP3 (v5.1.2600)
# BOOT MODE: Normal
# OPTION: Scan | EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat
# PC: USER-PC | USER: AGUESSE ( Current user is an administrator)
# DRIVE(S):
- C:\ (File System: NTFS)
- E:\ (File System: NTFS)
# Internet Explorer v7.0.5730.11
--------- [ RUNNING PROCESSES: 45 ] ---------
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\WINDOWS\system32\SearchFilterHost.exe
C:\WINDOWS\system32\ntvdm.exe
-----------------------------------
+-----------------------| Boonty/Boonty Games Elements found :
"Boonty Games" (service)
.
"HKEY_CLASSES_ROOT\boontybox"
"HKEY_LOCAL_MACHINE\Software\Boonty"
"HKEY_LOCAL_MACHINE\Software\Classes\boontybox"
"HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Boonty Games"
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Boonty Games"
"HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Boonty Games"
.
[14/06/2008 10:42|d--------] C:\PROGRA~1\Boonty
[13/12/2007 20:34|d--------] C:\PROGRA~1\Boonty\COMPON~1
[13/12/2007 20:30|--a------] C:\PROGRA~1\Boonty\COMPON~1\BOONTY~1.EXE
[13/12/2007 20:34|--a------] C:\PROGRA~1\Boonty\COMPON~1\CRAZY_~1.EXE
[01/05/2008 16:47|d--------] C:\PROGRA~1\BOONTY~1
[01/04/2008 20:29|d--------] C:\PROGRA~1\BOONTY~1\COMPON~1
[01/04/2008 20:29|--a------] C:\PROGRA~1\BOONTY~1\kudos.exe
[27/03/2007 09:18|--a------] C:\PROGRA~1\BOONTY~1\COMPON~1\bureau.url
[27/10/2003 14:07|--a------] C:\PROGRA~1\BOONTY~1\COMPON~1\Joystick.ico
[27/03/2007 09:18|--a------] C:\PROGRA~1\BOONTY~1\COMPON~1\start.url
[13/12/2007 20:32|d--------] C:\PROGRA~1\FICHIE~1\BOONTY~1
[13/12/2007 20:32|d--------] C:\PROGRA~1\FICHIE~1\BOONTY~1\Service
[13/12/2007 20:32|--a------] C:\PROGRA~1\FICHIE~1\BOONTY~1\Service\Boonty.exe
[13/12/2007 20:32|d--------] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
[01/04/2008 20:30|d--------] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY\Licenses
[01/04/2008 20:28|-ra------] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY\Licenses\B382E000.dat
[04/05/2008 14:55|-r-------] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY\Licenses\B4595000.dat
[04/03/2008 21:02|-ra------] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY\Licenses\B45EA000.dat
[13/12/2007 20:49|-ra------] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY\Licenses\B4C0E000.dat
[01/04/2008 20:32|-r-------] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY\Licenses\B5057000.dat
[13/12/2007 21:20|-ra------] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY\Licenses\B5529000.dat
[14/06/2008 10:50|d--------] C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\BOONTY~1
[01/04/2008 20:29|--a------] C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\BOONTY~1\JEUXTL~1.LNK
+-----------------------| Eorezo Elements found :
.
+-----------------------| Everest Poker Elements found :
.
+-----------------------| FunWebProducts/MyWay/MyWebSearch/MyGlobalSearch Elements found :
"HKEY_CURRENT_USER\Software\FunWebProducts"
.
+-----------------------| It's TV Elements found :
.
+-----------------------| Sweetim Elements found :
.
+-----------------------| ADDED SCAN :
+---------- Scanning prefs.js ... ( # Mozilla User Preferences )
...\s59lfeoj.default\prefs.js :
~~~~ Mozilla FireFox version 3.0.5 ~~~~
* Browser Search Default Engine: "Search the web"
* Browser Search Selected Engine: "Google"
* Browser Search Default Url: "http://search.babylon.com/web/{searchTerms}?babsrc=browsersearch"
* Browser Startup HomePage: "https://www.google.fr/webhp?hl=fr&gws_rd=ssl"
+----------+
+---------------------------------------------------------------------------+
+--[HKEY_CURRENT_USER\..\Run]
CTFMON.EXE REG_SZ C:\WINDOWS\system32\ctfmon.exe
IncrediMail REG_SZ C:\Program Files\IncrediMail\bin\IncMail.exe /c
NBJ REG_SZ "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
msnmsgr REG_SZ "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
+--[HKEY_LOCAL_MACHINE\..\Run]
NvCplDaemon REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
NvMediaCenter REG_SZ RunDLL32.exe NvMCTray.dll,NvTaskbarInit
Sony Ericsson PC Suite REG_SZ "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
Logitech Hardware Abstraction Layer REG_SZ KHALMNPR.EXE
PinnacleDriverCheck REG_SZ C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
SW24 REG_SZ C:\WINDOWS\system32\sw24.exe
SW20 REG_SZ C:\WINDOWS\system32\sw20.exe
SkyTel REG_SZ SkyTel.EXE
RTHDCPL REG_SZ RTHDCPL.EXE
nwiz REG_SZ nwiz.exe /install
NeroFilterCheck REG_SZ C:\WINDOWS\system32\NeroCheck.exe
Alcmtr REG_SZ ALCMTR.EXE
AppleSyncNotifier REG_SZ C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
QuickTime Task REG_SZ "C:\Program Files\QuickTime\QTTask.exe" -atboottime
iTunesHelper REG_SZ "C:\Program Files\iTunes\iTunesHelper.exe"
HP Software Update REG_SZ C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
AVP REG_SZ "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
RelevantKnowledge REG_SZ C:\program files\relevantknowledge\rlvknlg.exe -boot
Adobe Reader Speed Launcher REG_SZ "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre6\bin\jusched.exe"
+--[HKEY_USERS\.DEFAULT\..\Run]
CTFMON.EXE REG_SZ C:\WINDOWS\system32\ctfmon.exe
+--[HKEY_CURRENT_USER\..\Internet Explorer\MAIN]
Start Page : hxxp://google.atcomet.com/b/
+--[HKEY_LOCAL_MACHINE\..\Internet Explorer\MAIN]
Start Page : hxxp://www.msn.com/
+---------------------------------------------------------------------------+
- "C:\AD-report-Scan-27.12.2008.log" (~7600 bytes)
# END at: 21:49:06 | 27/12/2008 - Time elapsed: 21.5 seconds
+---------------------------------------------------------------------------+
+------------------------------- [ E.O.F - 143 lines ]
+---------------------------------------------------------------------------+
Relances Ad remover et choisis l'option B et choisis de tout supprimer... un rapport sera genere, postes le ! ainsi qu'un nouveau rapport hijackthis !
--------- Logfile of AD-Remover 1.0.8.0 by C_XX ---------
*** Limited to ***
Boonty/BoontyGames
Eorezo
Everest Poker
Funwebproduct/MyWay/MyWebsearch
It's TV
Sweetim
******************
# START at: 22:03:39 | Sam 27/12/2008 | Microsoft® Windows XP™ SP3 (v5.1.2600)
# BOOT MODE: Normal
# OPTION: Clean | EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat
# PC: USER-PC | USER: AGUESSE ( Current user is an administrator)
# DRIVE(S):
- C:\ (File System: NTFS)
- E:\ (File System: NTFS)
# Internet Explorer v7.0.5730.11
--------- [ RUNNING PROCESSES: 43 ] ---------
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\WINDOWS\system32\ntvdm.exe
-----------------------------------
(!) ---- IE start pages reset
+-----------------------| Boonty/Boonty Games Elements Deleted :
"Boonty Games" (service)
.
"HKEY_CLASSES_ROOT\boontybox"
"HKEY_LOCAL_MACHINE\Software\Boonty"
"HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Boonty Games"
.
[14/06/2008 10:42|d--------] C:\Program Files\Boonty
[01/05/2008 16:47|d--------] C:\Program Files\BoontyGames
[13/12/2007 20:32|d--------] C:\Program Files\Fichiers communs\BOONTY Shared
[13/12/2007 20:32|d--------] C:\Documents and Settings\All Users\Application Data\BOONTY
[14/06/2008 10:50|d--------] C:\Documents and Settings\All Users\MENUDM~1\PROGRA~1\BoontyGames
+-----------------------| Eorezo Elements Deleted :
.
+-----------------------| Everest Poker Elements Deleted :
.
+-----------------------| FunWebProducts/MyWay/MyWebSearch/MyGlobalSearch Elements Deleted :
"HKEY_CURRENT_USER\Software\FunWebProducts"
.
+-----------------------| It's TV Elements Deleted :
.
+-----------------------| Sweetim Elements Deleted :
.
(!) ---- Temp files deleted.
(!) ---- Recycle bin emptied in all drives.
+-----------------------| ADDED SCAN :
+---------- Scanning prefs.js ... ( # Mozilla User Preferences )
...\s59lfeoj.default\prefs.js :
~~~~ Mozilla FireFox version 3.0.5 ~~~~
* Browser Search Default Engine: "Search the web"
* Browser Search Selected Engine: "Google"
* Browser Search Default Url: "http://search.babylon.com/web/{searchTerms}?babsrc=browsersearch"
* Browser Startup HomePage: "https://www.google.fr/webhp?hl=fr&gws_rd=ssl"
+----------+
+--[HKEY_CURRENT_USER\..\Run]
CTFMON.EXE REG_SZ C:\WINDOWS\system32\ctfmon.exe
IncrediMail REG_SZ C:\Program Files\IncrediMail\bin\IncMail.exe /c
NBJ REG_SZ "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
msnmsgr REG_SZ "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
+--[HKEY_LOCAL_MACHINE\..\Run]
NvCplDaemon REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
NvMediaCenter REG_SZ RunDLL32.exe NvMCTray.dll,NvTaskbarInit
Sony Ericsson PC Suite REG_SZ "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
Logitech Hardware Abstraction Layer REG_SZ KHALMNPR.EXE
PinnacleDriverCheck REG_SZ C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
SW24 REG_SZ C:\WINDOWS\system32\sw24.exe
SW20 REG_SZ C:\WINDOWS\system32\sw20.exe
SkyTel REG_SZ SkyTel.EXE
RTHDCPL REG_SZ RTHDCPL.EXE
nwiz REG_SZ nwiz.exe /install
NeroFilterCheck REG_SZ C:\WINDOWS\system32\NeroCheck.exe
Alcmtr REG_SZ ALCMTR.EXE
AppleSyncNotifier REG_SZ C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
QuickTime Task REG_SZ "C:\Program Files\QuickTime\QTTask.exe" -atboottime
iTunesHelper REG_SZ "C:\Program Files\iTunes\iTunesHelper.exe"
HP Software Update REG_SZ C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
AVP REG_SZ "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
RelevantKnowledge REG_SZ C:\program files\relevantknowledge\rlvknlg.exe -boot
Adobe Reader Speed Launcher REG_SZ "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre6\bin\jusched.exe"
+--[HKEY_USERS\.DEFAULT\..\Run]
CTFMON.EXE REG_SZ C:\WINDOWS\system32\ctfmon.exe
+--[HKEY_CURRENT_USER\..\Internet Explorer\MAIN]
Start Page : hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
+--[HKEY_LOCAL_MACHINE\..\Internet Explorer\MAIN]
Start Page : hxxp://fr.msn.com/
+---------------------------------------------------------------------------+
- "C:\AD-report-Clean-27.12.2008.log" (~6236 bytes)
- "C:\AD-report-Scan-27.12.2008.log" (~7935 bytes)
# END at: 22:11:04 | 27/12/2008 - Time elapsed: 7 minutes, 25 seconds
+---------------------------------------------------------------------------+
+------------------------------- [ E.O.F - 130 lines ]
+---------------------------------------------------------------------------+
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:19:53, on 27/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32Info.exe
E:\Sylvie\TELECHARGEMENT\Hijackthis.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;*.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - Default URLSearchHook is missing
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [SW24] C:\WINDOWS\system32\sw24.exe
O4 - HKLM\..\Run: [SW20] C:\WINDOWS\system32\sw20.exe
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
O4 - HKLM\..\Run: [RelevantKnowledge] C:\program files\relevantknowledge\rlvknlg.exe -boot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll/206 (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Anti-Virus (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pinnacle Systems Media Service (PinnacleSys.MediaServer) - Pinnacle Systems - C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
*** Limited to ***
Boonty/BoontyGames
Eorezo
Everest Poker
Funwebproduct/MyWay/MyWebsearch
It's TV
Sweetim
******************
# START at: 22:03:39 | Sam 27/12/2008 | Microsoft® Windows XP™ SP3 (v5.1.2600)
# BOOT MODE: Normal
# OPTION: Clean | EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat
# PC: USER-PC | USER: AGUESSE ( Current user is an administrator)
# DRIVE(S):
- C:\ (File System: NTFS)
- E:\ (File System: NTFS)
# Internet Explorer v7.0.5730.11
--------- [ RUNNING PROCESSES: 43 ] ---------
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\WINDOWS\system32\ntvdm.exe
-----------------------------------
(!) ---- IE start pages reset
+-----------------------| Boonty/Boonty Games Elements Deleted :
"Boonty Games" (service)
.
"HKEY_CLASSES_ROOT\boontybox"
"HKEY_LOCAL_MACHINE\Software\Boonty"
"HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Boonty Games"
.
[14/06/2008 10:42|d--------] C:\Program Files\Boonty
[01/05/2008 16:47|d--------] C:\Program Files\BoontyGames
[13/12/2007 20:32|d--------] C:\Program Files\Fichiers communs\BOONTY Shared
[13/12/2007 20:32|d--------] C:\Documents and Settings\All Users\Application Data\BOONTY
[14/06/2008 10:50|d--------] C:\Documents and Settings\All Users\MENUDM~1\PROGRA~1\BoontyGames
+-----------------------| Eorezo Elements Deleted :
.
+-----------------------| Everest Poker Elements Deleted :
.
+-----------------------| FunWebProducts/MyWay/MyWebSearch/MyGlobalSearch Elements Deleted :
"HKEY_CURRENT_USER\Software\FunWebProducts"
.
+-----------------------| It's TV Elements Deleted :
.
+-----------------------| Sweetim Elements Deleted :
.
(!) ---- Temp files deleted.
(!) ---- Recycle bin emptied in all drives.
+-----------------------| ADDED SCAN :
+---------- Scanning prefs.js ... ( # Mozilla User Preferences )
...\s59lfeoj.default\prefs.js :
~~~~ Mozilla FireFox version 3.0.5 ~~~~
* Browser Search Default Engine: "Search the web"
* Browser Search Selected Engine: "Google"
* Browser Search Default Url: "http://search.babylon.com/web/{searchTerms}?babsrc=browsersearch"
* Browser Startup HomePage: "https://www.google.fr/webhp?hl=fr&gws_rd=ssl"
+----------+
+--[HKEY_CURRENT_USER\..\Run]
CTFMON.EXE REG_SZ C:\WINDOWS\system32\ctfmon.exe
IncrediMail REG_SZ C:\Program Files\IncrediMail\bin\IncMail.exe /c
NBJ REG_SZ "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
msnmsgr REG_SZ "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
+--[HKEY_LOCAL_MACHINE\..\Run]
NvCplDaemon REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
NvMediaCenter REG_SZ RunDLL32.exe NvMCTray.dll,NvTaskbarInit
Sony Ericsson PC Suite REG_SZ "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
Logitech Hardware Abstraction Layer REG_SZ KHALMNPR.EXE
PinnacleDriverCheck REG_SZ C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
SW24 REG_SZ C:\WINDOWS\system32\sw24.exe
SW20 REG_SZ C:\WINDOWS\system32\sw20.exe
SkyTel REG_SZ SkyTel.EXE
RTHDCPL REG_SZ RTHDCPL.EXE
nwiz REG_SZ nwiz.exe /install
NeroFilterCheck REG_SZ C:\WINDOWS\system32\NeroCheck.exe
Alcmtr REG_SZ ALCMTR.EXE
AppleSyncNotifier REG_SZ C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
QuickTime Task REG_SZ "C:\Program Files\QuickTime\QTTask.exe" -atboottime
iTunesHelper REG_SZ "C:\Program Files\iTunes\iTunesHelper.exe"
HP Software Update REG_SZ C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
AVP REG_SZ "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
RelevantKnowledge REG_SZ C:\program files\relevantknowledge\rlvknlg.exe -boot
Adobe Reader Speed Launcher REG_SZ "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre6\bin\jusched.exe"
+--[HKEY_USERS\.DEFAULT\..\Run]
CTFMON.EXE REG_SZ C:\WINDOWS\system32\ctfmon.exe
+--[HKEY_CURRENT_USER\..\Internet Explorer\MAIN]
Start Page : hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
+--[HKEY_LOCAL_MACHINE\..\Internet Explorer\MAIN]
Start Page : hxxp://fr.msn.com/
+---------------------------------------------------------------------------+
- "C:\AD-report-Clean-27.12.2008.log" (~6236 bytes)
- "C:\AD-report-Scan-27.12.2008.log" (~7935 bytes)
# END at: 22:11:04 | 27/12/2008 - Time elapsed: 7 minutes, 25 seconds
+---------------------------------------------------------------------------+
+------------------------------- [ E.O.F - 130 lines ]
+---------------------------------------------------------------------------+
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:19:53, on 27/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32Info.exe
E:\Sylvie\TELECHARGEMENT\Hijackthis.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;*.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - Default URLSearchHook is missing
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [SW24] C:\WINDOWS\system32\sw24.exe
O4 - HKLM\..\Run: [SW20] C:\WINDOWS\system32\sw20.exe
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
O4 - HKLM\..\Run: [RelevantKnowledge] C:\program files\relevantknowledge\rlvknlg.exe -boot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll/206 (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Anti-Virus (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pinnacle Systems Media Service (PinnacleSys.MediaServer) - Pinnacle Systems - C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe