Pb avec Win32.RK.ao

Résolu
Bonjour,
J'ai l'antivirus Kaspersky et depuis quelques jours j'ai des logiciels publicitaires en pagaille qui me sont détectés en permanence (une 100 aine par jour). Ci-dessous le lien pour la capture d'écran que j'ai faite et le rapport Hijackthis Merci
2ème question qui n'a pas de rapport. Où puis-je modifier mon adresse email qui a changé pour recevoir les réponses

https://www.cjoint.com/?mBrPxdF6rD

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:42:58, on 27/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Program Files\Search Settings\SearchSettings.exe
C:\program files\relevantknowledge\rlvknlg.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
E:\Sylvie\TELECHARGEMENT\Hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.atcomet.com/b/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;*.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll
O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb127\Dealio.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb127\Dealio.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [SW24] C:\WINDOWS\system32\sw24.exe
O4 - HKLM\..\Run: [SW20] C:\WINDOWS\system32\sw20.exe
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
O4 - HKLM\..\Run: [au] C:\Program Files\Dealio\DealioAU.exe
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKLM\..\Run: [RelevantKnowledge] C:\program files\relevantknowledge\rlvknlg.exe -boot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Compare Prices with &Dealio - C:\Documents and Settings\AGUESSE\Application Data\Dealio\kb127\res\DealioSearch.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll/206 (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll
O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Anti-Virus (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pinnacle Systems Media Service (PinnacleSys.MediaServer) - Pinnacle Systems - C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

--
End of file - 12194 bytes
Configuration: Windows XP
Firefox 3.0.5

13 réponses

  1. Bonjour, telecharges ToolbarSD sur ton bureau : https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2 Fermes tous les programmes et executes le fichier telecharge.. Double-cliques ensuite sur le raccourci de ton bureau, selectionnes la langue et valide par la touche Entree... Choisis ensuite l'option1 et patientes jusqu'a la fin de la recherche... un rapport est genere, postes le...Note : le rapport TB.txt se trouve aussi a la racine du disque dur...
    0
    1. Voici le rapport

      -----------\\ ToolBar S&D 1.2.8 XP/Vista

      Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
      X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 3800+ )
      BIOS : Default System BIOS
      USER : AGUESSE ( Administrator )
      BOOT : Normal boot
      Antivirus : Kaspersky Anti-Virus 8.0.0.454 (Activated)
      C:\ (Local Disk) - NTFS - Total:149 Go (Free:16 Go)
      D:\ (CD or DVD)
      E:\ (Local Disk) - NTFS - Total:149 Go (Free:137 Go)
      F:\ (CD or DVD)

      "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
      Option : [1] ( 27/12/2008|19:10 )

      -----------\\ Recherche de Fichiers / Dossiers ...

      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\temp
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\alerts.gif
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\alerts_over.gif
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\alerts_rec.gif
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\alerts_rec_over.gif
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\chevron-small.gif
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\DealioSearch.html
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\deals-leftcap.gif
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\deal_report.jpg
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\ebay_login.jpg
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\err_mainwindow.html
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\err_toolbar.html
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\global_scripts.js
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\headerbgthin.jpg
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\highlight-bg.png
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\logo.gif
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\logo_over.gif
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\man_toolbar.css
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\man_toolbar.html
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\man_toolbar.js
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\man_toolbarl.js
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\post-this-deal.gif
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\post-this-deal_over.gif
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\scripts.js
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\scroller.js
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\search-chevron.gif
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\search-chevron_over.gif
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\search_bg_blink.gif
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\separator.gif
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\settings.gif
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\settings_over.gif
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\res\yahoo-search.png
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\index.76.35
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.10.76
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.109.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.110.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.12.52
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.13.58
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.130.58
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.135.50
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.153.44
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.155.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.156.49
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.16.60
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.161.52
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.178.66
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.184.55
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.188.52
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.189.45
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.196.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.198.56
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.199.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.200.53
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.201.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.202.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.203.71
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.205.62
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.213.71
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.214.49
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.215.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.216.67
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.217.67
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.218.52
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.219.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.220.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.221.57
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.222.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.223.68
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.226.68
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.227.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.228.62
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.229.76
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.23.63
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.239.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.24.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.240.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.241.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.242.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.243.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.244.63
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.245.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.247.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.248.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.249.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.250.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.251.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.252.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.253.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.254.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.255.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.256.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.257.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.279.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.28.58
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.282.75
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.283.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.284.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.289.67
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.290.62
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.291.61
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.296.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.297.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.304.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.307.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.308.75
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.31.47
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.310.46
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.311.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.315.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.316.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.317.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.318.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.319.49
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.32.48
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.334.44
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.335.60
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.336.44
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.337.44
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.338.75
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.339.47
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.34.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.340.47
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.341.47
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.349.50
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.35.48
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.350.50
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.351.51
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.352.54
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.353.51
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.354.51
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.357.62
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.358.52
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.359.52
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.360.53
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.361.54
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.362.68
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.363.58
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.364.54
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.365.53
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.367.56
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.368.58
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.369.55
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.370.56
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.371.56
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.372.57
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.373.55
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.375.56
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.376.57
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.377.55
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.378.65
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.384.58
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.386.71
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.387.59
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.388.59
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.389.59
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.390.60
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.391.60
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.392.60
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.393.60
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.394.60
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.396.61
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.397.61
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.398.60
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.399.60
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.403.61
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.404.63
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.405.61
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.406.61
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.407.76
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.408.63
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.409.61
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.412.62
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.413.62
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.414.62
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.415.62
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.416.62
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.417.62
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.418.62
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.419.62
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.420.62
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.421.62
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.423.63
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.424.63
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.425.63
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.426.63
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.427.63
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.428.65
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.429.63
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.430.63
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.432.65
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.433.64
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.434.65
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.435.64
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.436.76
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.437.64
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.438.71
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.439.71
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.440.75
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.442.73
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.443.73
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.444.73
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.445.68
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.446.69
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.450.67
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.451.67
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.452.68
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.453.68
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.454.69
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.456.69
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.457.75
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.458.70
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.459.70
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.460.69
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.462.74
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.463.69
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.464.70
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.465.68
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.468.70
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.469.70
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.470.70
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.471.73
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.472.70
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.478.74
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.479.73
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.480.68
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.481.71
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.482.74
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.49.67
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.50.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.500.71
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.501.74
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.502.71
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.51.69
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.52.72
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.520.76
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.521.76
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.522.76
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.53.51
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.531.76
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.532.75
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.534.75
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.54.47
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.55.45
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.56.69
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.57.43
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.58.47
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.593.76
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.595.76
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.63.57
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.66.47
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.70.75
      C:\DOCUME~1\AGUESSE\APPLIC~1\Dealio\kb127\rules\rules.1.71.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\temp
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\alerts.gif
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\alerts_over.gif
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\alerts_rec.gif
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\alerts_rec_over.gif
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\chevron-small.gif
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\DealioSearch.html
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\deals-leftcap.gif
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\deal_report.jpg
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\ebay_login.jpg
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\err_mainwindow.html
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\err_toolbar.html
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\global_scripts.js
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\headerbgthin.jpg
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\highlight-bg.png
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\logo.gif
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\logo_over.gif
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\man_toolbar.css
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\man_toolbar.html
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\man_toolbar.js
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\man_toolbarl.js
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\post-this-deal.gif
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\post-this-deal_over.gif
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\scripts.js
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\scroller.js
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\search-chevron.gif
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\search-chevron_over.gif
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\search_bg_blink.gif
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\separator.gif
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\settings.gif
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\settings_over.gif
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\res\yahoo-search.png
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\index.76.35
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.10.76
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.109.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.110.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.12.52
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.13.58
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.130.58
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.135.50
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.153.44
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.155.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.156.49
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.16.60
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.161.52
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.178.66
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.184.55
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.188.52
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.189.45
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.196.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.198.56
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.199.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.200.53
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.201.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.202.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.203.71
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.205.62
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.213.71
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.214.49
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.215.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.216.67
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.217.67
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.218.52
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.219.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.220.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.221.57
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.222.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.223.68
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.226.68
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.227.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.228.62
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.229.76
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.23.63
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.239.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.24.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.240.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.241.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.242.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.243.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.244.63
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.245.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.247.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.248.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.249.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.250.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.251.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.252.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.253.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.254.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.255.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.256.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.257.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.279.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.28.58
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.282.75
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.283.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.284.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.289.67
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.290.62
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.291.61
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.296.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.297.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.304.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.307.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.308.75
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.31.47
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.310.46
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.311.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.315.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.316.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.317.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.318.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.319.49
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.32.48
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.334.44
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.335.60
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.336.44
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.337.44
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.338.75
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.339.47
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.34.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.340.47
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.341.47
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.349.50
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.35.48
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.350.50
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.351.51
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.352.54
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.353.51
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.354.51
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.357.62
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.358.52
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.359.52
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.360.53
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.361.54
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.362.68
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.363.58
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.364.54
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.365.53
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.367.56
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.368.58
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.369.55
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.370.56
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.371.56
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.372.57
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.373.55
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.375.56
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.376.57
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.377.55
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.378.65
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.384.58
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.386.71
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.387.59
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.388.59
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.389.59
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.390.60
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.391.60
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.392.60
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.393.60
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.394.60
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.396.61
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.397.61
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.398.60
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.399.60
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.403.61
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.404.63
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.405.61
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.406.61
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.407.76
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.408.63
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.409.61
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.412.62
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.413.62
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.414.62
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.415.62
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.416.62
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.417.62
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.418.62
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.419.62
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.420.62
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.421.62
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.423.63
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.424.63
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.425.63
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.426.63
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.427.63
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.428.65
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.429.63
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.430.63
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.432.65
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.433.64
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.434.65
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.435.64
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.436.76
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.437.64
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.438.71
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.439.71
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.440.75
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.442.73
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.443.73
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.444.73
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.445.68
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.446.69
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.450.67
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.451.67
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.452.68
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.453.68
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.454.69
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.456.69
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.457.75
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.458.70
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.459.70
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.460.69
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.462.74
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.463.69
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.464.70
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.465.68
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.468.70
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.469.70
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.470.70
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.471.73
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.472.70
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.478.74
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.479.73
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.480.68
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.481.71
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.482.74
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.49.67
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.50.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.500.71
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.501.74
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.502.71
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.51.69
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.52.72
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.520.76
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.521.76
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.522.76
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.53.51
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.531.76
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.532.75
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.534.75
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.54.47
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.55.45
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.56.69
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.57.43
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.58.47
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.593.76
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.595.76
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.63.57
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.66.47
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.70.75
      C:\DOCUME~1\ETIENN~1.USE\APPLIC~1\Dealio\kb127\rules\rules.1.71.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\temp
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\alerts.gif
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\alerts_over.gif
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\alerts_rec.gif
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\alerts_rec_over.gif
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\chevron-small.gif
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\DealioSearch.html
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\deals-leftcap.gif
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\deal_report.jpg
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\ebay_login.jpg
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\err_mainwindow.html
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\err_toolbar.html
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\global_scripts.js
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\headerbgthin.jpg
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\highlight-bg.png
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\logo.gif
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\logo_over.gif
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\man_toolbar.css
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\man_toolbar.html
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\man_toolbar.js
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\man_toolbarl.js
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\post-this-deal.gif
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\post-this-deal_over.gif
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\scripts.js
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\scroller.js
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\search-chevron.gif
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\search-chevron_over.gif
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\search_bg_blink.gif
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\separator.gif
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\settings.gif
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\settings_over.gif
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\res\yahoo-search.png
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\index.76.35
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.10.76
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.109.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.110.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.12.52
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.13.58
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.130.58
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.135.50
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.153.44
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.155.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.156.49
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.16.60
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.161.52
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.178.66
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.184.55
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.188.52
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.189.45
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.196.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.198.56
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.199.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.200.53
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.201.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.202.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.203.71
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.205.62
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.213.71
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.214.49
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.215.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.216.67
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.217.67
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.218.52
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.219.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.220.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.221.57
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.222.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.223.68
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.226.68
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.227.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.228.62
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.229.76
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.23.63
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.239.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.24.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.240.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.241.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.242.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.243.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.244.63
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.245.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.247.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.248.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.249.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.250.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.251.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.252.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.253.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.254.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.255.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.256.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.257.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.279.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.28.58
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.282.75
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.283.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.284.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.289.67
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.290.62
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.291.61
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.296.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.297.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.304.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.307.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.308.75
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.31.47
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.310.46
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.311.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.315.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.316.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.317.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.318.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.319.49
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.32.48
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.334.44
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.335.60
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.336.44
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.337.44
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.338.75
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.339.47
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.34.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.340.47
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.341.47
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.349.50
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.35.48
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.350.50
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.351.51
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.352.54
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.353.51
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.354.51
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.357.62
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.358.52
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.359.52
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.360.53
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.361.54
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.362.68
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.363.58
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.364.54
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.365.53
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.367.56
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.368.58
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.369.55
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.370.56
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.371.56
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.372.57
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.373.55
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.375.56
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.376.57
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.377.55
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.378.65
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.384.58
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.386.71
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.387.59
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.388.59
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.389.59
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.390.60
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.391.60
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.392.60
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.393.60
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.394.60
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.396.61
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.397.61
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.398.60
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.399.60
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.403.61
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.404.63
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.405.61
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.406.61
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.407.76
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.408.63
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.409.61
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.412.62
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.413.62
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.414.62
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.415.62
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.416.62
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.417.62
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.418.62
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.419.62
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.420.62
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.421.62
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.423.63
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.424.63
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.425.63
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.426.63
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.427.63
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.428.65
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.429.63
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.430.63
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.432.65
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.433.64
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.434.65
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.435.64
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.436.76
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.437.64
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.438.71
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.439.71
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.440.75
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.442.73
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.443.73
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.444.73
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.445.68
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.446.69
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.450.67
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.451.67
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.452.68
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.453.68
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.454.69
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.456.69
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.457.75
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.458.70
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.459.70
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.460.69
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.462.74
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.463.69
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.464.70
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.465.68
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.468.70
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.469.70
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.470.70
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.471.73
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.472.70
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.478.74
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.479.73
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.480.68
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.481.71
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.482.74
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.49.67
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.50.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.500.71
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.501.74
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.502.71
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.51.69
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.52.72
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.520.76
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.521.76
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.522.76
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.53.51
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.531.76
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.532.75
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.534.75
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.54.47
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.55.45
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.56.69
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.57.43
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.58.47
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.593.76
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.595.76
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.63.57
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.66.47
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.70.75
      C:\DOCUME~1\INVIT~1\APPLIC~1\Dealio\kb127\rules\rules.1.71.43
      C:\Program Files\Dealio
      C:\Program Files\Dealio\DealioAU.exe
      C:\Program Files\Dealio\kb127
      C:\Program Files\Dealio\SearchSettingsKit.exe
      C:\Program Files\Dealio\kb127\Dealio Deskbar.exe
      C:\Program Files\Dealio\kb127\Dealio.dll
      C:\Program Files\Dealio\kb127\DealioRes409.dll
      C:\Program Files\Dealio\kb127\res
      C:\Program Files\Dealio\kb127\resDN
      C:\Program Files\Dealio\kb127\rules
      C:\Program Files\Dealio\kb127\temp
      C:\Program Files\Dealio\kb127\res\alerts.gif
      C:\Program Files\Dealio\kb127\res\alerts_over.gif
      C:\Program Files\Dealio\kb127\res\alerts_rec.gif
      C:\Program Files\Dealio\kb127\res\alerts_rec_over.gif
      C:\Program Files\Dealio\kb127\res\chevron-small.gif
      C:\Program Files\Dealio\kb127\res\DealioSearch.html
      C:\Program Files\Dealio\kb127\res\deals-leftcap.gif
      C:\Program Files\Dealio\kb127\res\deal_report.jpg
      C:\Program Files\Dealio\kb127\res\ebay_login.jpg
      C:\Program Files\Dealio\kb127\res\err_mainwindow.html
      C:\Program Files\Dealio\kb127\res\err_toolbar.html
      C:\Program Files\Dealio\kb127\res\global_scripts.js
      C:\Program Files\Dealio\kb127\res\headerbgthin.jpg
      C:\Program Files\Dealio\kb127\res\highlight-bg.png
      C:\Program Files\Dealio\kb127\res\logo.gif
      C:\Program Files\Dealio\kb127\res\logo_over.gif
      C:\Program Files\Dealio\kb127\res\man_toolbar.css
      C:\Program Files\Dealio\kb127\res\man_toolbar.html
      C:\Program Files\Dealio\kb127\res\man_toolbar.js
      C:\Program Files\Dealio\kb127\res\man_toolbarl.js
      C:\Program Files\Dealio\kb127\res\post-this-deal.gif
      C:\Program Files\Dealio\kb127\res\post-this-deal_over.gif
      C:\Program Files\Dealio\kb127\res\scripts.js
      C:\Program Files\Dealio\kb127\res\scroller.js
      C:\Program Files\Dealio\kb127\res\search-chevron.gif
      C:\Program Files\Dealio\kb127\res\search-chevron_over.gif
      C:\Program Files\Dealio\kb127\res\search_bg_blink.gif
      C:\Program Files\Dealio\kb127\res\separator.gif
      C:\Program Files\Dealio\kb127\res\settings.gif
      C:\Program Files\Dealio\kb127\res\settings_over.gif
      C:\Program Files\Dealio\kb127\res\yahoo-search.png
      C:\Program Files\Dealio\kb127\resDN\bottom.gif
      C:\Program Files\Dealio\kb127\resDN\chevron_down.gif
      C:\Program Files\Dealio\kb127\resDN\chevron_up.gif
      C:\Program Files\Dealio\kb127\resDN\close.gif
      C:\Program Files\Dealio\kb127\resDN\deskbar.css
      C:\Program Files\Dealio\kb127\resDN\deskbar.js
      C:\Program Files\Dealio\kb127\resDN\dispatch_helper.js
      C:\Program Files\Dealio\kb127\resDN\ebay_compatible.jpg
      C:\Program Files\Dealio\kb127\resDN\logo.gif
      C:\Program Files\Dealio\kb127\resDN\logo_chevron_bkg.gif
      C:\Program Files\Dealio\kb127\resDN\losing.gif
      C:\Program Files\Dealio\kb127\resDN\lost.gif
      C:\Program Files\Dealio\kb127\resDN\man_deskbar.html
      C:\Program Files\Dealio\kb127\resDN\menu_arrow.gif
      C:\Program Files\Dealio\kb127\resDN\menu_check.gif
      C:\Program Files\Dealio\kb127\resDN\no_image.gif
      C:\Program Files\Dealio\kb127\resDN\prod_img.gif
      C:\Program Files\Dealio\kb127\resDN\search_chevron.gif
      C:\Program Files\Dealio\kb127\resDN\spacer.gif
      C:\Program Files\Dealio\kb127\resDN\textfield_bkg.gif
      C:\Program Files\Dealio\kb127\resDN\top.gif
      C:\Program Files\Dealio\kb127\resDN\unknown.gif
      C:\Program Files\Dealio\kb127\resDN\winning.gif
      C:\Program Files\Dealio\kb127\resDN\won.gif
      C:\Program Files\Dealio\kb127\rules\index.76.35
      C:\Program Files\Dealio\kb127\rules\rules.1.10.76
      C:\Program Files\Dealio\kb127\rules\rules.1.109.43
      C:\Program Files\Dealio\kb127\rules\rules.1.110.43
      C:\Program Files\Dealio\kb127\rules\rules.1.12.52
      C:\Program Files\Dealio\kb127\rules\rules.1.13.58
      C:\Program Files\Dealio\kb127\rules\rules.1.130.58
      C:\Program Files\Dealio\kb127\rules\rules.1.135.50
      C:\Program Files\Dealio\kb127\rules\rules.1.153.44
      C:\Program Files\Dealio\kb127\rules\rules.1.155.43
      C:\Program Files\Dealio\kb127\rules\rules.1.156.49
      C:\Program Files\Dealio\kb127\rules\rules.1.16.60
      C:\Program Files\Dealio\kb127\rules\rules.1.161.52
      C:\Program Files\Dealio\kb127\rules\rules.1.178.66
      C:\Program Files\Dealio\kb127\rules\rules.1.184.55
      C:\Program Files\Dealio\kb127\rules\rules.1.188.52
      C:\Program Files\Dealio\kb127\rules\rules.1.189.45
      C:\Program Files\Dealio\kb127\rules\rules.1.196.43
      C:\Program Files\Dealio\kb127\rules\rules.1.198.56
      C:\Program Files\Dealio\kb127\rules\rules.1.199.43
      C:\Program Files\Dealio\kb127\rules\rules.1.200.53
      C:\Program Files\Dealio\kb127\rules\rules.1.201.43
      C:\Program Files\Dealio\kb127\rules\rules.1.202.43
      C:\Program Files\Dealio\kb127\rules\rules.1.203.71
      C:\Program Files\Dealio\kb127\rules\rules.1.205.62
      C:\Program Files\Dealio\kb127\rules\rules.1.213.71
      C:\Program Files\Dealio\kb127\rules\rules.1.214.49
      C:\Program Files\Dealio\kb127\rules\rules.1.215.43
      C:\Program Files\Dealio\kb127\rules\rules.1.216.67
      C:\Program Files\Dealio\kb127\rules\rules.1.217.67
      C:\Program Files\Dealio\kb127\rules\rules.1.218.52
      C:\Program Files\Dealio\kb127\rules\rules.1.219.43
      C:\Program Files\Dealio\kb127\rules\rules.1.220.43
      C:\Program Files\Dealio\kb127\rules\rules.1.221.57
      C:\Program Files\Dealio\kb127\rules\rules.1.222.43
      C:\Program Files\Dealio\kb127\rules\rules.1.223.68
      C:\Program Files\Dealio\kb127\rules\rules.1.226.68
      C:\Program Files\Dealio\kb127\rules\rules.1.227.43
      C:\Program Files\Dealio\kb127\rules\rules.1.228.62
      C:\Program Files\Dealio\kb127\rules\rules.1.229.76
      C:\Program Files\Dealio\kb127\rules\rules.1.23.63
      C:\Program Files\Dealio\kb127\rules\rules.1.239.43
      C:\Program Files\Dealio\kb127\rules\rules.1.24.43
      C:\Program Files\Dealio\kb127\rules\rules.1.240.43
      C:\Program Files\Dealio\kb127\rules\rules.1.241.43
      C:\Program Files\Dealio\kb127\rules\rules.1.242.43
      C:\Program Files\Dealio\kb127\rules\rules.1.243.43
      C:\Program Files\Dealio\kb127\rules\rules.1.244.63
      C:
      0
      1. Ok, tu relances Toolbar SD et tu choisis l'option2 ( nettoyage), ne touche a rien pendant le nettoyage, un rapport sera genere, postes le avec un nouveau rapport hijackthis...
        0
        1. Je n'ai pas l'option 2.
          ┌───────────────────────────────────────────────────────────────────────┐
          │ ToolBar S&D Windows XP - Vista │
          └───────────────────────────────────────────────────────────────────────┘
          ╔═════════════════════════════════════╗
          ║ ║
          ║ 1 - Recherche ║
          ║ 2 - Suppression ║
          ║ Q - Quitter ║
          ║ ║
          ╚═════════════════════════════════════╝

          . Entrez votre choix puis validez :
          0
          1. et c'est quoi suppression >> option 2, Non !
            0
        2. C'est le mot Suppression qui m'a induite en erreur.

          Logfile of Trend Micro HijackThis v2.0.2
          Scan saved at 19:45:16, on 27/12/2008
          Platform: Windows XP SP3 (WinNT 5.01.2600)
          MSIE: Internet Explorer v7.00 (7.00.6000.16762)
          Boot mode: Normal

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\system32\spoolsv.exe
          C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
          C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
          C:\Program Files\Bonjour\mDNSResponder.exe
          C:\Program Files\Java\jre6\bin\jqs.exe
          C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
          C:\WINDOWS\system32\nvsvc32.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\system32\SearchIndexer.exe
          C:\WINDOWS\Explorer.EXE
          C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
          C:\WINDOWS\system32\RunDLL32.exe
          C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
          C:\WINDOWS\RTHDCPL.EXE
          C:\Program Files\iTunes\iTunesHelper.exe
          C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
          C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
          C:\program files\relevantknowledge\rlvknlg.exe
          C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
          C:\Program Files\Java\jre6\bin\jusched.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\Program Files\Windows Live\Messenger\msnmsgr.exe
          C:\Program Files\iPod\bin\iPodService.exe
          C:\PROGRA~1\INCRED~1\bin\IMApp.exe
          C:\WINDOWS\system32\wuauclt.exe
          C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
          C:\Program Files\Logitech\SetPoint\KEM.exe
          C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
          C:\Program Files\Windows Desktop Search\WindowsSearch.exe
          C:\Program Files\WinZip\WZQKPICK.EXE
          C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
          C:\WINDOWS\system32\SearchProtocolHost.exe
          C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
          C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
          C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
          E:\Sylvie\TELECHARGEMENT\Hijackthis.exe

          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.atcomet.com/b/
          R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;*.local
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          R3 - Default URLSearchHook is missing
          O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
          O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
          O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
          O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll
          O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll
          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
          O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
          O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
          O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
          O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
          O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
          O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
          O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
          O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
          O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
          O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
          O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
          O4 - HKLM\..\Run: [SW24] C:\WINDOWS\system32\sw24.exe
          O4 - HKLM\..\Run: [SW20] C:\WINDOWS\system32\sw20.exe
          O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
          O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
          O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
          O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
          O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
          O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
          O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
          O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
          O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
          O4 - HKLM\..\Run: [RelevantKnowledge] C:\program files\relevantknowledge\rlvknlg.exe -boot
          O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
          O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
          O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
          O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
          O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
          O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
          O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
          O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
          O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
          O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
          O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
          O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
          O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
          O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
          O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
          O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
          O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
          O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
          O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
          O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
          O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
          O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll
          O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
          O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
          O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll/206 (file missing)
          O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
          O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
          O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
          O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll
          O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
          O23 - Service: Kaspersky Anti-Virus (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
          O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
          O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
          O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
          O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
          O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
          O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
          O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
          O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
          O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
          O23 - Service: Pinnacle Systems Media Service (PinnacleSys.MediaServer) - Pinnacle Systems - C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
          O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
          0
          1. Ok, telecharges Malwarebytes : http://www.malwarebytes.org/mbam/program/mbam-setup.exe a la fin du telechargement mbam se met automatiquement a jour ( important) Redemarres le pc en mode sans echec ( tapotes sur la touche F8 ou F5 au demarrage de ton pc, jusqu'a l'apparition d'un ecran noir avec diverses options, choisis >> mode sans echec et valides par la touche entree de ton clavier... ouvres ensuite mbam, cliques sur Recherche et executes une analyse rapide de ton pc... a la fin du scan,cliques sur >> afficher les resultats puis sur supprimer la selection... un rapport sera genere, postes le...
            0
            1. Malwarebytes' Anti-Malware 1.31
              Version de la base de données: 1556
              Windows 5.1.2600 Service Pack 3

              27/12/2008 21:05:21
              mbam-log-2008-12-27 (21-05-21).txt

              Type de recherche: Examen rapide
              Eléments examinés: 67150
              Temps écoulé: 4 minute(s), 20 second(s)

              Processus mémoire infecté(s): 0
              Module(s) mémoire infecté(s): 0
              Clé(s) du Registre infectée(s): 8
              Valeur(s) du Registre infectée(s): 1
              Elément(s) de données du Registre infecté(s): 1
              Dossier(s) infecté(s): 3
              Fichier(s) infecté(s): 9

              Processus mémoire infecté(s):
              (Aucun élément nuisible détecté)

              Module(s) mémoire infecté(s):
              (Aucun élément nuisible détecté)

              Clé(s) du Registre infectée(s):
              HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{733e9132-53ca-4c97-9ac9-145c4502fa20} (Trojan.Vundo) -> Quarantined and deleted successfully.
              HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{0ac49246-419b-4ee0-8917-8818daad6a4e} (Adware.180Solutions) -> Quarantined and deleted successfully.
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{99410cde-6f16-42ce-9d49-3807f78f0287} (Adware.180Solutions) -> Quarantined and deleted successfully.
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{f31a5d11-bf0b-4a4e-90af-274f2090aaa6} (Adware.180Solutions) -> Quarantined and deleted successfully.
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.
              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FOPF (Rogue.AVSystemShield) -> Quarantined and deleted successfully.

              Valeur(s) du Registre infectée(s):
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform\zangotoolbar 4.8.3 (Adware.Zango) -> Quarantined and deleted successfully.

              Elément(s) de données du Registre infecté(s):
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\Local Page (Hijack.Search) -> Bad: (http://www.iesearch.com/) Good: (https://www.google.com/?gws_rd=ssl -> Quarantined and deleted successfully.

              Dossier(s) infecté(s):
              C:\Program Files\RelevantKnowledge (Spyware.Marketscore) -> Quarantined and deleted successfully.
              C:\Program Files\BitDownload (Trojan.Lop) -> Quarantined and deleted successfully.
              C:\Documents and Settings\Etienne.USER-PC\Local Settings\Temp\NI.UGA6PV_0001_N108M0207 (Rogue.Multiple) -> Quarantined and deleted successfully.

              Fichier(s) infecté(s):
              C:\Program Files\RelevantKnowledge\rk.bin (Spyware.Marketscore) -> Quarantined and deleted successfully.
              C:\Program Files\RelevantKnowledge\rlls.dll (Spyware.Marketscore) -> Quarantined and deleted successfully.
              C:\Program Files\RelevantKnowledge\rloci.bin (Spyware.Marketscore) -> Quarantined and deleted successfully.
              C:\Program Files\RelevantKnowledge\rlservice.exe (Spyware.Marketscore) -> Quarantined and deleted successfully.
              C:\Program Files\RelevantKnowledge\rlvknlg.exe (Spyware.Marketscore) -> Quarantined and deleted successfully.
              C:\Program Files\RelevantKnowledge\sporder.dll (Spyware.Marketscore) -> Quarantined and deleted successfully.
              C:\Program Files\BitDownload\BitDownload Setup Components (Trojan.Lop) -> Quarantined and deleted successfully.
              C:\WINDOWS\cookies.ini (Malware.Trace) -> Quarantined and deleted successfully.
              C:\clean.cmd (Trojan.Agent) -> Quarantined and deleted successfully.
              0
              1. Postes un nouveau rapport hijackthis stp !
                0
                1. Logfile of Trend Micro HijackThis v2.0.2
                  Scan saved at 21:29:46, on 27/12/2008
                  Platform: Windows XP SP3 (WinNT 5.01.2600)
                  MSIE: Internet Explorer v7.00 (7.00.6000.16762)
                  Boot mode: Normal

                  Running processes:
                  C:\WINDOWS\System32\smss.exe
                  C:\WINDOWS\system32\winlogon.exe
                  C:\WINDOWS\system32\services.exe
                  C:\WINDOWS\system32\lsass.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\system32\spoolsv.exe
                  C:\WINDOWS\Explorer.EXE
                  C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                  C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
                  C:\Program Files\Bonjour\mDNSResponder.exe
                  C:\Program Files\Java\jre6\bin\jqs.exe
                  C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
                  C:\WINDOWS\system32\RunDLL32.exe
                  C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
                  C:\WINDOWS\RTHDCPL.EXE
                  C:\WINDOWS\system32\nvsvc32.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\system32\SearchIndexer.exe
                  C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
                  C:\Program Files\iTunes\iTunesHelper.exe
                  C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                  C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
                  C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
                  C:\Program Files\Java\jre6\bin\jusched.exe
                  C:\WINDOWS\system32\ctfmon.exe
                  C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                  C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                  C:\Program Files\iPod\bin\iPodService.exe
                  C:\Program Files\Logitech\SetPoint\KEM.exe
                  C:\Program Files\Windows Desktop Search\WindowsSearch.exe
                  C:\Program Files\WinZip\WZQKPICK.EXE
                  C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
                  C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
                  C:\PROGRA~1\INCRED~1\bin\IMApp.exe
                  C:\WINDOWS\system32\wuauclt.exe
                  C:\WINDOWS\system32\SearchProtocolHost.exe
                  C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
                  C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
                  C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
                  E:\Sylvie\TELECHARGEMENT\Hijackthis.exe
                  C:\WINDOWS\system32\HPZipm12.exe

                  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
                  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.atcomet.com/b/
                  R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;*.local
                  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                  R3 - Default URLSearchHook is missing
                  O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                  O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                  O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                  O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll
                  O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll
                  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
                  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                  O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                  O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
                  O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
                  O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                  O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
                  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                  O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
                  O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
                  O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
                  O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
                  O4 - HKLM\..\Run: [SW24] C:\WINDOWS\system32\sw24.exe
                  O4 - HKLM\..\Run: [SW20] C:\WINDOWS\system32\sw20.exe
                  O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
                  O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
                  O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
                  O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
                  O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
                  O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
                  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                  O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                  O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                  O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
                  O4 - HKLM\..\Run: [RelevantKnowledge] C:\program files\relevantknowledge\rlvknlg.exe -boot
                  O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
                  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
                  O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                  O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
                  O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
                  O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                  O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
                  O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                  O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
                  O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
                  O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
                  O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
                  O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                  O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
                  O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
                  O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
                  O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
                  O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
                  O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
                  O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
                  O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
                  O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
                  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
                  O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
                  O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll
                  O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                  O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                  O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll/206 (file missing)
                  O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                  O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                  O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
                  O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                  O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll
                  O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                  O23 - Service: Kaspersky Anti-Virus (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
                  O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
                  O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
                  O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
                  O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                  O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
                  O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
                  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
                  O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                  O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
                  O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                  O23 - Service: Pinnacle Systems Media Service (PinnacleSys.MediaServer) - Pinnacle Systems - C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
                  O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
                  0
                  1. Apres avoir supprimer la quarantaine de mbam ( fais le >>important)... telecharges AD-Remover http://sd-1.archive-host.com/membres/up/16506160323759868/AD-R.exe Deconnectes-toi et fermes toutes les apllications en cours... double-clique sur le programme d'installation et installes le dans son emplacement par defaut -->> C:/program files . Double cliques ensuite sur l'icone AD-Remover sur ton bureau >> au menu, choisis l'option A ( recherche). a la fin un rapport est gener, postes le !
                    0
                    1. --------- Logfile of AD-Remover 1.0.8.0 by C_XX ---------

                      # START at: 21:48:44 | Sam 27/12/2008 | Microsoft® Windows XP™ SP3 (v5.1.2600)
                      # BOOT MODE: Normal

                      # OPTION: Scan | EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat

                      # PC: USER-PC | USER: AGUESSE ( Current user is an administrator)

                      # DRIVE(S):
                      - C:\ (File System: NTFS)
                      - E:\ (File System: NTFS)

                      # Internet Explorer v7.0.5730.11

                      --------- [ RUNNING PROCESSES: 45 ] ---------

                      C:\WINDOWS\System32\smss.exe
                      C:\WINDOWS\system32\csrss.exe
                      C:\WINDOWS\system32\winlogon.exe
                      C:\WINDOWS\system32\services.exe
                      C:\WINDOWS\system32\lsass.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\System32\svchost.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\system32\spoolsv.exe
                      C:\WINDOWS\Explorer.EXE
                      C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                      C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
                      C:\Program Files\Bonjour\mDNSResponder.exe
                      C:\Program Files\Java\jre6\bin\jqs.exe
                      C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
                      C:\WINDOWS\system32\RunDLL32.exe
                      C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
                      C:\WINDOWS\RTHDCPL.EXE
                      C:\WINDOWS\system32\nvsvc32.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\system32\SearchIndexer.exe
                      C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
                      C:\Program Files\iTunes\iTunesHelper.exe
                      C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                      C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
                      C:\Program Files\Java\jre6\bin\jusched.exe
                      C:\WINDOWS\system32\ctfmon.exe
                      C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                      C:\Program Files\iPod\bin\iPodService.exe
                      C:\Program Files\Logitech\SetPoint\KEM.exe
                      C:\WINDOWS\System32\alg.exe
                      C:\Program Files\Windows Desktop Search\WindowsSearch.exe
                      C:\Program Files\WinZip\WZQKPICK.EXE
                      C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
                      C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
                      C:\PROGRA~1\INCRED~1\bin\IMApp.exe
                      C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
                      C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
                      C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
                      C:\WINDOWS\system32\SearchProtocolHost.exe
                      C:\WINDOWS\system32\SearchFilterHost.exe
                      C:\WINDOWS\system32\ntvdm.exe

                      -----------------------------------

                      +-----------------------| Boonty/Boonty Games Elements found :

                      "Boonty Games" (service)
                      .
                      "HKEY_CLASSES_ROOT\boontybox"
                      "HKEY_LOCAL_MACHINE\Software\Boonty"
                      "HKEY_LOCAL_MACHINE\Software\Classes\boontybox"
                      "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Boonty Games"
                      "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Boonty Games"
                      "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Boonty Games"
                      .
                      [14/06/2008 10:42|d--------] C:\PROGRA~1\Boonty
                      [13/12/2007 20:34|d--------] C:\PROGRA~1\Boonty\COMPON~1
                      [13/12/2007 20:30|--a------] C:\PROGRA~1\Boonty\COMPON~1\BOONTY~1.EXE
                      [13/12/2007 20:34|--a------] C:\PROGRA~1\Boonty\COMPON~1\CRAZY_~1.EXE
                      [01/05/2008 16:47|d--------] C:\PROGRA~1\BOONTY~1
                      [01/04/2008 20:29|d--------] C:\PROGRA~1\BOONTY~1\COMPON~1
                      [01/04/2008 20:29|--a------] C:\PROGRA~1\BOONTY~1\kudos.exe
                      [27/03/2007 09:18|--a------] C:\PROGRA~1\BOONTY~1\COMPON~1\bureau.url
                      [27/10/2003 14:07|--a------] C:\PROGRA~1\BOONTY~1\COMPON~1\Joystick.ico
                      [27/03/2007 09:18|--a------] C:\PROGRA~1\BOONTY~1\COMPON~1\start.url
                      [13/12/2007 20:32|d--------] C:\PROGRA~1\FICHIE~1\BOONTY~1
                      [13/12/2007 20:32|d--------] C:\PROGRA~1\FICHIE~1\BOONTY~1\Service
                      [13/12/2007 20:32|--a------] C:\PROGRA~1\FICHIE~1\BOONTY~1\Service\Boonty.exe
                      [13/12/2007 20:32|d--------] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
                      [01/04/2008 20:30|d--------] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY\Licenses
                      [01/04/2008 20:28|-ra------] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY\Licenses\B382E000.dat
                      [04/05/2008 14:55|-r-------] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY\Licenses\B4595000.dat
                      [04/03/2008 21:02|-ra------] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY\Licenses\B45EA000.dat
                      [13/12/2007 20:49|-ra------] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY\Licenses\B4C0E000.dat
                      [01/04/2008 20:32|-r-------] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY\Licenses\B5057000.dat
                      [13/12/2007 21:20|-ra------] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY\Licenses\B5529000.dat
                      [14/06/2008 10:50|d--------] C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\BOONTY~1
                      [01/04/2008 20:29|--a------] C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\BOONTY~1\JEUXTL~1.LNK

                      +-----------------------| Eorezo Elements found :

                      .

                      +-----------------------| Everest Poker Elements found :

                      .

                      +-----------------------| FunWebProducts/MyWay/MyWebSearch/MyGlobalSearch Elements found :

                      "HKEY_CURRENT_USER\Software\FunWebProducts"
                      .

                      +-----------------------| It's TV Elements found :

                      .

                      +-----------------------| Sweetim Elements found :

                      .

                      +-----------------------| ADDED SCAN :

                      +---------- Scanning prefs.js ... ( # Mozilla User Preferences )

                      ...\s59lfeoj.default\prefs.js :

                      ~~~~ Mozilla FireFox version 3.0.5 ~~~~

                      * Browser Search Default Engine: "Search the web"
                      * Browser Search Selected Engine: "Google"
                      * Browser Search Default Url: "http://search.babylon.com/web/{searchTerms}?babsrc=browsersearch"
                      * Browser Startup HomePage: "https://www.google.fr/webhp?hl=fr&gws_rd=ssl"

                      +----------+

                      +---------------------------------------------------------------------------+

                      +--[HKEY_CURRENT_USER\..\Run]

                      CTFMON.EXE REG_SZ C:\WINDOWS\system32\ctfmon.exe
                      IncrediMail REG_SZ C:\Program Files\IncrediMail\bin\IncMail.exe /c
                      NBJ REG_SZ "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
                      msnmsgr REG_SZ "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

                      +--[HKEY_LOCAL_MACHINE\..\Run]

                      NvCplDaemon REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                      NvMediaCenter REG_SZ RunDLL32.exe NvMCTray.dll,NvTaskbarInit
                      Sony Ericsson PC Suite REG_SZ "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
                      Logitech Hardware Abstraction Layer REG_SZ KHALMNPR.EXE
                      PinnacleDriverCheck REG_SZ C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
                      SW24 REG_SZ C:\WINDOWS\system32\sw24.exe
                      SW20 REG_SZ C:\WINDOWS\system32\sw20.exe
                      SkyTel REG_SZ SkyTel.EXE
                      RTHDCPL REG_SZ RTHDCPL.EXE
                      nwiz REG_SZ nwiz.exe /install
                      NeroFilterCheck REG_SZ C:\WINDOWS\system32\NeroCheck.exe
                      Alcmtr REG_SZ ALCMTR.EXE
                      AppleSyncNotifier REG_SZ C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
                      QuickTime Task REG_SZ "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                      iTunesHelper REG_SZ "C:\Program Files\iTunes\iTunesHelper.exe"
                      HP Software Update REG_SZ C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                      AVP REG_SZ "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
                      RelevantKnowledge REG_SZ C:\program files\relevantknowledge\rlvknlg.exe -boot
                      Adobe Reader Speed Launcher REG_SZ "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
                      SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre6\bin\jusched.exe"

                      +--[HKEY_USERS\.DEFAULT\..\Run]

                      CTFMON.EXE REG_SZ C:\WINDOWS\system32\ctfmon.exe

                      +--[HKEY_CURRENT_USER\..\Internet Explorer\MAIN]

                      Start Page : hxxp://google.atcomet.com/b/

                      +--[HKEY_LOCAL_MACHINE\..\Internet Explorer\MAIN]

                      Start Page : hxxp://www.msn.com/

                      +---------------------------------------------------------------------------+

                      - "C:\AD-report-Scan-27.12.2008.log" (~7600 bytes)

                      # END at: 21:49:06 | 27/12/2008 - Time elapsed: 21.5 seconds

                      +---------------------------------------------------------------------------+
                      +------------------------------- [ E.O.F - 143 lines ]
                      +---------------------------------------------------------------------------+
                      0
                      1. Relances Ad remover et choisis l'option B et choisis de tout supprimer... un rapport sera genere, postes le ! ainsi qu'un nouveau rapport hijackthis !
                        0
                        1. --------- Logfile of AD-Remover 1.0.8.0 by C_XX ---------

                          *** Limited to ***

                          Boonty/BoontyGames
                          Eorezo
                          Everest Poker
                          Funwebproduct/MyWay/MyWebsearch
                          It's TV
                          Sweetim

                          ******************

                          # START at: 22:03:39 | Sam 27/12/2008 | Microsoft® Windows XP™ SP3 (v5.1.2600)
                          # BOOT MODE: Normal

                          # OPTION: Clean | EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat

                          # PC: USER-PC | USER: AGUESSE ( Current user is an administrator)

                          # DRIVE(S):
                          - C:\ (File System: NTFS)
                          - E:\ (File System: NTFS)

                          # Internet Explorer v7.0.5730.11

                          --------- [ RUNNING PROCESSES: 43 ] ---------

                          C:\WINDOWS\System32\smss.exe
                          C:\WINDOWS\system32\csrss.exe
                          C:\WINDOWS\system32\winlogon.exe
                          C:\WINDOWS\system32\services.exe
                          C:\WINDOWS\system32\lsass.exe
                          C:\WINDOWS\system32\svchost.exe
                          C:\WINDOWS\system32\svchost.exe
                          C:\WINDOWS\System32\svchost.exe
                          C:\WINDOWS\system32\svchost.exe
                          C:\WINDOWS\system32\svchost.exe
                          C:\WINDOWS\system32\spoolsv.exe
                          C:\WINDOWS\Explorer.EXE
                          C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                          C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
                          C:\Program Files\Bonjour\mDNSResponder.exe
                          C:\Program Files\Java\jre6\bin\jqs.exe
                          C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
                          C:\WINDOWS\system32\RunDLL32.exe
                          C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
                          C:\WINDOWS\RTHDCPL.EXE
                          C:\WINDOWS\system32\nvsvc32.exe
                          C:\WINDOWS\system32\svchost.exe
                          C:\WINDOWS\system32\SearchIndexer.exe
                          C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
                          C:\Program Files\iTunes\iTunesHelper.exe
                          C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                          C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
                          C:\Program Files\Java\jre6\bin\jusched.exe
                          C:\WINDOWS\system32\ctfmon.exe
                          C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                          C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                          C:\Program Files\iPod\bin\iPodService.exe
                          C:\Program Files\Logitech\SetPoint\KEM.exe
                          C:\WINDOWS\System32\alg.exe
                          C:\Program Files\Windows Desktop Search\WindowsSearch.exe
                          C:\Program Files\WinZip\WZQKPICK.EXE
                          C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
                          C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
                          C:\PROGRA~1\INCRED~1\bin\IMApp.exe
                          C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
                          C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
                          C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
                          C:\WINDOWS\system32\ntvdm.exe

                          -----------------------------------

                          (!) ---- IE start pages reset

                          +-----------------------| Boonty/Boonty Games Elements Deleted :

                          "Boonty Games" (service)
                          .
                          "HKEY_CLASSES_ROOT\boontybox"
                          "HKEY_LOCAL_MACHINE\Software\Boonty"
                          "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Boonty Games"
                          .
                          [14/06/2008 10:42|d--------] C:\Program Files\Boonty
                          [01/05/2008 16:47|d--------] C:\Program Files\BoontyGames
                          [13/12/2007 20:32|d--------] C:\Program Files\Fichiers communs\BOONTY Shared
                          [13/12/2007 20:32|d--------] C:\Documents and Settings\All Users\Application Data\BOONTY
                          [14/06/2008 10:50|d--------] C:\Documents and Settings\All Users\MENUDM~1\PROGRA~1\BoontyGames

                          +-----------------------| Eorezo Elements Deleted :

                          .

                          +-----------------------| Everest Poker Elements Deleted :

                          .

                          +-----------------------| FunWebProducts/MyWay/MyWebSearch/MyGlobalSearch Elements Deleted :

                          "HKEY_CURRENT_USER\Software\FunWebProducts"
                          .

                          +-----------------------| It's TV Elements Deleted :

                          .

                          +-----------------------| Sweetim Elements Deleted :

                          .

                          (!) ---- Temp files deleted.
                          (!) ---- Recycle bin emptied in all drives.

                          +-----------------------| ADDED SCAN :

                          +---------- Scanning prefs.js ... ( # Mozilla User Preferences )

                          ...\s59lfeoj.default\prefs.js :

                          ~~~~ Mozilla FireFox version 3.0.5 ~~~~

                          * Browser Search Default Engine: "Search the web"
                          * Browser Search Selected Engine: "Google"
                          * Browser Search Default Url: "http://search.babylon.com/web/{searchTerms}?babsrc=browsersearch"
                          * Browser Startup HomePage: "https://www.google.fr/webhp?hl=fr&gws_rd=ssl"

                          +----------+

                          +--[HKEY_CURRENT_USER\..\Run]

                          CTFMON.EXE REG_SZ C:\WINDOWS\system32\ctfmon.exe
                          IncrediMail REG_SZ C:\Program Files\IncrediMail\bin\IncMail.exe /c
                          NBJ REG_SZ "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
                          msnmsgr REG_SZ "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

                          +--[HKEY_LOCAL_MACHINE\..\Run]

                          NvCplDaemon REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                          NvMediaCenter REG_SZ RunDLL32.exe NvMCTray.dll,NvTaskbarInit
                          Sony Ericsson PC Suite REG_SZ "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
                          Logitech Hardware Abstraction Layer REG_SZ KHALMNPR.EXE
                          PinnacleDriverCheck REG_SZ C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
                          SW24 REG_SZ C:\WINDOWS\system32\sw24.exe
                          SW20 REG_SZ C:\WINDOWS\system32\sw20.exe
                          SkyTel REG_SZ SkyTel.EXE
                          RTHDCPL REG_SZ RTHDCPL.EXE
                          nwiz REG_SZ nwiz.exe /install
                          NeroFilterCheck REG_SZ C:\WINDOWS\system32\NeroCheck.exe
                          Alcmtr REG_SZ ALCMTR.EXE
                          AppleSyncNotifier REG_SZ C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
                          QuickTime Task REG_SZ "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                          iTunesHelper REG_SZ "C:\Program Files\iTunes\iTunesHelper.exe"
                          HP Software Update REG_SZ C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                          AVP REG_SZ "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
                          RelevantKnowledge REG_SZ C:\program files\relevantknowledge\rlvknlg.exe -boot
                          Adobe Reader Speed Launcher REG_SZ "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
                          SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre6\bin\jusched.exe"

                          +--[HKEY_USERS\.DEFAULT\..\Run]

                          CTFMON.EXE REG_SZ C:\WINDOWS\system32\ctfmon.exe

                          +--[HKEY_CURRENT_USER\..\Internet Explorer\MAIN]

                          Start Page : hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

                          +--[HKEY_LOCAL_MACHINE\..\Internet Explorer\MAIN]

                          Start Page : hxxp://fr.msn.com/

                          +---------------------------------------------------------------------------+

                          - "C:\AD-report-Clean-27.12.2008.log" (~6236 bytes)

                          - "C:\AD-report-Scan-27.12.2008.log" (~7935 bytes)

                          # END at: 22:11:04 | 27/12/2008 - Time elapsed: 7 minutes, 25 seconds

                          +---------------------------------------------------------------------------+
                          +------------------------------- [ E.O.F - 130 lines ]
                          +---------------------------------------------------------------------------+

                          Logfile of Trend Micro HijackThis v2.0.2
                          Scan saved at 22:19:53, on 27/12/2008
                          Platform: Windows XP SP3 (WinNT 5.01.2600)
                          MSIE: Internet Explorer v7.00 (7.00.6000.16762)
                          Boot mode: Normal

                          Running processes:
                          C:\WINDOWS\System32\smss.exe
                          C:\WINDOWS\system32\winlogon.exe
                          C:\WINDOWS\system32\services.exe
                          C:\WINDOWS\system32\lsass.exe
                          C:\WINDOWS\system32\svchost.exe
                          C:\WINDOWS\System32\svchost.exe
                          C:\WINDOWS\system32\svchost.exe
                          C:\WINDOWS\system32\spoolsv.exe
                          C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                          C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
                          C:\Program Files\Bonjour\mDNSResponder.exe
                          C:\Program Files\Java\jre6\bin\jqs.exe
                          C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
                          C:\WINDOWS\system32\nvsvc32.exe
                          C:\WINDOWS\system32\svchost.exe
                          C:\WINDOWS\system32\SearchIndexer.exe
                          C:\WINDOWS\Explorer.EXE
                          C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
                          C:\WINDOWS\system32\RunDLL32.exe
                          C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
                          C:\WINDOWS\RTHDCPL.EXE
                          C:\Program Files\iTunes\iTunesHelper.exe
                          C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                          C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
                          C:\Program Files\Java\jre6\bin\jusched.exe
                          C:\WINDOWS\system32\ctfmon.exe
                          C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                          C:\Program Files\iPod\bin\iPodService.exe
                          C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                          C:\PROGRA~1\INCRED~1\bin\IMApp.exe
                          C:\Program Files\Logitech\SetPoint\KEM.exe
                          C:\Program Files\Windows Desktop Search\WindowsSearch.exe
                          C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
                          C:\Program Files\WinZip\WZQKPICK.EXE
                          C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
                          C:\WINDOWS\system32\wuauclt.exe
                          C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
                          C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
                          C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
                          C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32Info.exe
                          E:\Sylvie\TELECHARGEMENT\Hijackthis.exe
                          C:\WINDOWS\system32\SearchProtocolHost.exe

                          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
                          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                          R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;*.local
                          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                          R3 - Default URLSearchHook is missing
                          O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                          O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                          O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                          O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll
                          O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll
                          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
                          O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                          O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                          O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
                          O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
                          O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                          O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
                          O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                          O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
                          O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
                          O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
                          O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
                          O4 - HKLM\..\Run: [SW24] C:\WINDOWS\system32\sw24.exe
                          O4 - HKLM\..\Run: [SW20] C:\WINDOWS\system32\sw20.exe
                          O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
                          O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
                          O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
                          O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
                          O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
                          O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
                          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                          O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                          O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                          O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
                          O4 - HKLM\..\Run: [RelevantKnowledge] C:\program files\relevantknowledge\rlvknlg.exe -boot
                          O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
                          O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
                          O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                          O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
                          O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
                          O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                          O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
                          O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                          O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
                          O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
                          O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
                          O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
                          O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                          O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
                          O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
                          O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
                          O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
                          O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
                          O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
                          O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
                          O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
                          O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
                          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
                          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
                          O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll
                          O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                          O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                          O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll/206 (file missing)
                          O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                          O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
                          O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                          O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll
                          O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                          O23 - Service: Kaspersky Anti-Virus (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
                          O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
                          O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
                          O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                          O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
                          O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
                          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
                          O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                          O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
                          O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                          O23 - Service: Pinnacle Systems Media Service (PinnacleSys.MediaServer) - Pinnacle Systems - C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
                          O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
                          0