Sujet Précédent Sujet Suivant

PC propre rapport hijackthis

Fermé
celine66 - 24 févr. 2009 à 12:14
pimprenelle27 Messages postés 20857 Date d'inscription lundi 10 décembre 2007 Statut Contributeur sécurité Dernière intervention 8 octobre 2019 - 24 févr. 2009 à 22:17
Bonjour,

Je voudrais savoir si mon ordinateur est propre merci d'avance.
Je suis sous xp.


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:12:02, on 24/02/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\WINDOWS\runservice.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\WINDOWS\system32\taskswitch.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Hotbar\bin\10.2.236.0\OEAddOn.exe
C:\Program Files\Hotbar\bin\10.2.236.0\HotbarSA.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Registry Mechanic\RegMech.exe
C:\Program Files\Hotbar\bin\10.2.236.0\Weather.exe
C:\Program Files\OrangeHSS\Launcher\Launcher.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\PROGRA~1\MICROS~4\rapimgr.exe
C:\Program Files\Hercules\WiFi Station pour Livebox\WifiStationLB.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.BIN
C:\Program Files\OrangeHSS\systray\systrayapp.exe
C:\Program Files\OrangeHSS\Deskboard\deskboard.exe
C:\Program Files\OrangeHSS\connectivity\connectivitymanager.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\OrangeHSS\connectivity\CoreCom\CoreCom.exe
C:\Program Files\OrangeHSS\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\Céline\Bureau\setup\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.pointnet.fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.pointnet.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.pointnet.fr/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer fourni par Prades Point Net
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Ask Search Assistant BHO - {0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Smart-Shopper - {4A7C84E2-E95C-43C6-8DD3-03ABCD0EB60E} - C:\Program Files\Smart-Shopper\Bin\2.5.1\Smrt-Shpr.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Hotbar - {90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} - C:\Program Files\Hotbar\bin\10.2.236.0\HostIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: Ask Toolbar BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL
O3 - Toolbar: Ask Toolbar - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL
O3 - Toolbar: Hotbar - {90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} - C:\Program Files\Hotbar\bin\10.2.236.0\HostIE.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\system32\taskswitch.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [HotbarOE] C:\Program Files\Hotbar\bin\10.2.236.0\OEAddOn.exe
O4 - HKLM\..\Run: [HotbarSA] "C:\Program Files\Hotbar\bin\10.2.236.0\HotbarSA.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SVCHOST.EXE] C:\WINDOWS\system32\drivers\svchost.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [RegistryMechanic] C:\Program Files\Registry Mechanic\RegMech.exe /H
O4 - HKCU\..\Run: [WeatherDPA] "C:\Program Files\Hotbar\bin\10.2.236.0\Weather.exe" -auto
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
O4 - Global Startup: WiFi Station pour Livebox.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: SmartShopper - Compare product prices - {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEBF} - C:\Program Files\Smart-Shopper\Bin\2.5.1\Smrt-Shpr.dll
O9 - Extra button: SmartShopper - Compare travel rates - {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEC0} - C:\Program Files\Smart-Shopper\Bin\2.5.1\Smrt-Shpr.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=www.illepointnet.com/
O15 - Trusted Zone: http://*.mappy.com
O15 - Trusted Zone: http://*.orange.fr
O15 - Trusted Zone: http://rw.search.ke.voila.fr
O15 - Trusted Zone: http://orange.weborama.fr
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LicCtrl Service (LicCtrlService) - Unknown owner - C:\WINDOWS\runservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
A voir également:

17 réponses

Réponse 1 / 17
Celine66
24 févr. 2009 à 13:36
Mon pc est il propre?
0
Réponse 2 / 17
pimprenelle27 Messages postés 20857 Date d'inscription lundi 10 décembre 2007 Statut Contributeur sécurité Dernière intervention 8 octobre 2019 2 502
24 févr. 2009 à 13:50
Fait moi ceci y a quelque truc dans ton pc :

Télécharges ToolBar S&D ( de Eric_71/Team IDN ) :


Tuto

!! Déconnectes toi et fermes toute tes applications en cours le temps de la manipe !! désactive ton antivirus.

* double-cliques sur l'.exe pour lancer l'installe et laisses toi guider ...
* Une fois fait, cliques sur le raccourci créé sur ton bureau pour lancer l'outil .
* Choisis l'option 1 ( "recherche") et tapes "entrée" .
* Une fois le scan finit , un rapport va apparaître, copie/colles l'intégralité
de son contenu dans ta prochaine réponse ...
( le rapport est en outre sauvegardé ici -> C:\TB.txt )

Pour ceux qui ont vista, ne pas oublier de désactiver Le contrôle des comptes utilisateurs
0
Réponse 3 / 17
celine66
24 févr. 2009 à 14:03
Voici le rapport merci de ton aide


-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.00GHz )
BIOS : BIOS Date: 01/23/07 16:51:34 Ver: 08.00.10
USER : Céline ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1335 [VPS 090223-0] 4.8.1335 (Not Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:298 Go (Free:62 Go)
D:\ (CD or DVD) - UDF - Total:3 Go (Free:0 Go)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [1] ( 24/02/2009|13:59 )

-----------\\ Recherche de Fichiers / Dossiers ...

C:\Program Files\AskSBar
C:\Program Files\AskSBar\bar
C:\Program Files\AskSBar\SrchAstt
C:\Program Files\AskSBar\bar\1.bin
C:\Program Files\AskSBar\bar\Cache
C:\Program Files\AskSBar\bar\History
C:\Program Files\AskSBar\bar\Settings
C:\Program Files\AskSBar\bar\1.bin\A2FFXTBR.JAR
C:\Program Files\AskSBar\bar\1.bin\A2FFXTBR.MANIFEST
C:\Program Files\AskSBar\bar\1.bin\A2HIGHIN.EXE
C:\Program Files\AskSBar\bar\1.bin\A2NTSTBR.JAR
C:\Program Files\AskSBar\bar\1.bin\A2NTSTBR.MANIFEST
C:\Program Files\AskSBar\bar\1.bin\A2PLUGIN.DLL
C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL
C:\Program Files\AskSBar\bar\1.bin\NPASKSBR.DLL
C:\Program Files\AskSBar\bar\1.bin\V2RSSMNU.DLL
C:\Program Files\AskSBar\bar\Cache\0045F760.bin
C:\Program Files\AskSBar\bar\Cache\0045F906.bin
C:\Program Files\AskSBar\bar\Cache\0045FA5E.bin
C:\Program Files\AskSBar\bar\Cache\0045FBB5.bin
C:\Program Files\AskSBar\bar\Cache\0045FD0D.bin
C:\Program Files\AskSBar\bar\Cache\0045FF01.bin
C:\Program Files\AskSBar\bar\Cache\0185E6D1
C:\Program Files\AskSBar\bar\Cache\files.ini
C:\Program Files\AskSBar\bar\History\search2
C:\Program Files\AskSBar\bar\Settings\prevcfg2.htm
C:\Program Files\AskSBar\SrchAstt\1.bin
C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\eskin
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\IESkins
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\dynamic
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\DownLoad
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\030104_emte10_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\030104_emte11_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\030104_emte12_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\030104_emte13_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\030104_emte14_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\030104_emte19_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\030104_emte20_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\030104_emte21_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\030104_emte9_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\030203lib_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\033102angel_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\033102bigluf_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\033102bigsmile_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\033102birthday_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\033102cheers_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\033102flo_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\033102good_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\033102jump_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\033102king_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\033102lough_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\033102luf_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\033102smiled_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\033102smile_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\033102sor_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\033102thanx_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\033102uhu_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\040103ahh_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\040103wow_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\040104_emi2_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\042102_1134_112_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\050103big_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\050103gig_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\050103hm_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\050103nomail_emoti_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\050103norm_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\060104_ema15_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\060104_ema16_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\060104_ema17_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\060104_ema18_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\060104_ema19_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\060104_ema20_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\060104_ema21_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\060104_ema24_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\060104_ema25_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\060104_ema26_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\060104_ema30_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\060104_ema33_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\060104_ema34_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\062802hippi_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\062802jumpie_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\080402argh_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\080402oops_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\080402ouch_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\082502no_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\082502yes_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\110103_boring1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\110103_confused_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\110103_crying_ugly_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\110103_fantastic_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\110103_feel_better_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\110103_gimme_break_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\110103_heehee_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\110103_hlopaet_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\110103_ign_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\110103_lol_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\110103_no_comment_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\110103_peace_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\110103_smashing_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\110103_talk2thehand_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\avatar.res
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\blocked.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\blocked2.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\block_sm.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\block_sm2.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\block_smli.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\block_smli2.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\btn_add-but.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\btn_back-but.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\btn_left_cut_enabled_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\btn_left_enabled_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\btn_left_pressed_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\btn_middle_enabled_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\btn_middle_pressed_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\btn_right_cut_enabled_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\btn_right_enabled_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\btn_right_pressed_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\business_promo.htm
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\buttondir.txt
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\components.cdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\css2_main.css
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\css2_pagingmodule.css
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\css2_topbuttons.css
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\css_cattree.css
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\css_flashpreview.css
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\delete.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\edit_clear_sound.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\edit_fs.htm
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\edit_select.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\email-def-511745-514279.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\email-def-email-backgrounds.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\email-def-email-bcards.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\email-def-email-ecards.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\email-def-email-edit.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\email-def-email-emoticons.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\email-def-email-estationery.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\email-def-email-funny.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\email-def-email-help.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\email-def-email-images.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\email-def-email-info.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\email-def-email-more.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\email-def-email-my.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\email-def-email-people.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\email-def-email-photo.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\email-def-email-tell.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\email-def-email-temp.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\email-def-email-temp_OI.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\email-def-email-text.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\email-def-email-voice.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\email-def.cdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\email-premium-email-premium.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\email-premium-email-premium_OI.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\email-t1-bg.res
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\email-temp-bg.res
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\estatationery.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\flashpatch.js
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\flashpreview.htm
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\fs3.htm
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\hotbar_promo.htm
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\icon_checked_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\icon_close_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\icon_close_pressed_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\icon_edit_preview.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\icon_edit_send.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\icon_flash_preview.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\icon_recently_used.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\icon_remove_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\icon_remove_pressed_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\icon_sand-clock2.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\icon_tell_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\icon_tell_pressed_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\icon_tree_null.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\icon_unchecked_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\icon_unchecked_pressed_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\img_barlayout.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\img_barlayout2.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\img_barlayout4.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\img_corner_left.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\img_local_logo.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\js2_basetemplate.js
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\js2_hbgroups.js
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\js2_hbobject3.js
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\js2_hbobjectset3.js
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\js2_hotbarwrapper.js
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\js2_iteratorsandreaders3nf.js
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\js2_pagingmoduleobj3.js
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\js2_texts3.js
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\js2_xmltree3nf.js
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\layout.cdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\linkpathlegal.txt
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\more.res
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\n.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\nav_bb_2.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\nav_b_2.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\nav_ff_2.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\nav_f_2.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\progress.res
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\searchbtn.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\submit.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\tab_bg.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\tab_bga.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\tab_bgia.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\tab_l.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\tab_la.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\tab_lia.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\tab_r.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\tab_ra.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\tab_ria.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\treedata_animations.xml
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\treedata_backgrounds.xml
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\treedata_ecards.xml
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\treedata_emoticons.xml
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\treedata_notifiers.xml
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\treedata_text.xml
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\tree_dots.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\tree_minus.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\1\tree_plus.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\030104_emte10_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\030104_emte11_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\030104_emte12_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\030104_emte13_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\030104_emte14_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\030104_emte19_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\030104_emte20_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\030104_emte21_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\030104_emte9_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\030203lib_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\033102angel_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\033102bigluf_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\033102bigsmile_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\033102birthday_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\033102cheers_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\033102flo_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\033102good_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\033102jump_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\033102king_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\033102lough_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\033102luf_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\033102smiled_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\033102smile_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\033102sor_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\033102thanx_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\033102uhu_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\040103ahh_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\040103wow_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\040104_emi2_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\042102_1134_112_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\050103big_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\050103gig_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\050103hm_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\050103nomail_emoti_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\050103norm_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\060104_ema15_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\060104_ema16_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\060104_ema17_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\060104_ema18_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\060104_ema19_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\060104_ema20_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\060104_ema21_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\060104_ema24_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\060104_ema25_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\060104_ema26_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\060104_ema30_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\060104_ema33_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\060104_ema34_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\062802hippi_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\062802jumpie_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\080402argh_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\080402oops_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\080402ouch_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\082502no_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\082502yes_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\110103_boring1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\110103_confused_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\110103_crying_ugly_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\110103_fantastic_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\110103_feel_better_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\110103_gimme_break_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\110103_heehee_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\110103_hlopaet_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\110103_ign_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\110103_lol_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\110103_no_comment_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\110103_peace_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\110103_smashing_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\110103_talk2thehand_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\avatar.res
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\blocked.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\blocked2.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\block_sm.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\block_sm2.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\block_smli.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\block_smli2.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\btn_add-but.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\btn_back-but.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\btn_left_cut_enabled_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\btn_left_enabled_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\btn_left_pressed_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\btn_middle_enabled_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\btn_middle_pressed_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\btn_right_cut_enabled_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\btn_right_enabled_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\btn_right_pressed_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\business_promo.htm
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\buttondir.txt
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\components.cdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\css2_main.css
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\css2_pagingmodule.css
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\css2_topbuttons.css
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\css_cattree.css
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\css_flashpreview.css
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\delete.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\edit_clear_sound.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\edit_fs.htm
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\edit_select.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\email-def-511745-514279.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\email-def-email-backgrounds.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\email-def-email-bcards.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\email-def-email-ecards.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\email-def-email-edit.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\email-def-email-emoticons.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\email-def-email-estationery.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\email-def-email-funny.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\email-def-email-help.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\email-def-email-images.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\email-def-email-info.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\email-def-email-more.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\email-def-email-my.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\email-def-email-people.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\email-def-email-photo.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\email-def-email-tell.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\email-def-email-temp.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\email-def-email-temp_OI.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\email-def-email-text.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\email-def-email-voice.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\email-def.cdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\email-premium-email-premium.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\email-premium-email-premium_OI.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\email-t1-bg.res
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\email-temp-bg.res
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\estatationery.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\flashpatch.js
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\flashpreview.htm
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\fs3.htm
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\hotbar_promo.htm
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\icon_checked_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\icon_close_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\icon_close_pressed_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\icon_edit_preview.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\icon_edit_send.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\icon_flash_preview.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\icon_recently_used.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\icon_remove_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\icon_remove_pressed_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\icon_sand-clock2.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\icon_tell_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\icon_tell_pressed_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\icon_tree_null.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\icon_unchecked_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\icon_unchecked_pressed_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\img_barlayout.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\img_barlayout2.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\img_barlayout4.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\img_corner_left.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\img_local_logo.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\js2_basetemplate.js
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\js2_hbgroups.js
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\js2_hbobject3.js
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\js2_hbobjectset3.js
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\js2_hotbarwrapper.js
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\js2_iteratorsandreaders3nf.js
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\js2_pagingmoduleobj3.js
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\js2_texts3.js
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\js2_xmltree3nf.js
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\layout.cdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\linkpathlegal.txt
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\more.res
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\n.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\nav_bb_2.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\nav_b_2.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\nav_ff_2.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\nav_f_2.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\progress.res
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\searchbtn.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\submit.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\tab_bg.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\tab_bga.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\tab_bgia.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\tab_l.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\tab_la.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\tab_lia.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\tab_r.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\tab_ra.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\tab_ria.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\treedata_animations.xml
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\treedata_backgrounds.xml
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\treedata_ecards.xml
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\treedata_emoticons.xml
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\treedata_notifiers.xml
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\treedata_text.xml
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\tree_dots.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\tree_minus.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\2\tree_plus.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\DownLoad\avatar.xip
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\DownLoad\business_promo.xip
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\DownLoad\buttondir.xip
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\DownLoad\code.xip
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\DownLoad\email-def.xip
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\DownLoad\email-t1-bg.xip
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\DownLoad\email-temp-bg.xip
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\DownLoad\hotbar_promo.xip
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\DownLoad\images.xip
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\DownLoad\layout.xip
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\DownLoad\linkpathlegal.xip
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\DownLoad\localcontent.xip
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\DownLoad\more.xip
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\DownLoad\progress.xip
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOI\static\DownLoad\treexml.xip
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\dynamic
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\DownLoad
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\030104_emte10_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\030104_emte11_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\030104_emte12_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\030104_emte13_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\030104_emte14_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\030104_emte19_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\030104_emte20_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\030104_emte21_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\030104_emte9_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\030203lib_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\033102angel_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\033102bigluf_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\033102bigsmile_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\033102birthday_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\033102cheers_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\033102flo_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\033102good_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\033102jump_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\033102king_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\033102lough_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\033102luf_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\033102smiled_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\033102smile_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\033102sor_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\033102thanx_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\033102uhu_1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\040103ahh_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\040103wow_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\040104_emi2_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\042102_1134_112_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\050103big_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\050103gig_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\050103hm_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\050103nomail_emoti_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\050103norm_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\060104_ema15_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\060104_ema16_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\060104_ema17_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\060104_ema18_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\060104_ema19_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\060104_ema20_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\060104_ema21_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\060104_ema24_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\060104_ema25_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\060104_ema26_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\060104_ema30_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\060104_ema33_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\060104_ema34_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\062802hippi_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\062802jumpie_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\080402argh_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\080402oops_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\080402ouch_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\082502no_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\082502yes_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\110103_boring1_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\110103_confused_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\110103_crying_ugly_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\110103_fantastic_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\110103_feel_better_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\110103_gimme_break_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\110103_heehee_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\110103_hlopaet_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\110103_ign_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\110103_lol_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\110103_no_comment_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\110103_peace_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\110103_smashing_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\110103_talk2thehand_prv.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\avatar.res
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\blocked.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\blocked2.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\block_sm.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\block_sm2.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\block_smli.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\block_smli2.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\btn_add-but.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\btn_back-but.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\btn_left_cut_enabled_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\btn_left_enabled_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\btn_left_pressed_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\btn_middle_enabled_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\btn_middle_pressed_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\btn_right_cut_enabled_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\btn_right_enabled_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\btn_right_pressed_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\business_promo.htm
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\buttondir.txt
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\components.cdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\css2_main.css
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\css2_pagingmodule.css
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\css2_topbuttons.css
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\css_cattree.css
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\css_flashpreview.css
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\delete.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\edit_clear_sound.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\edit_fs.htm
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\edit_select.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\email-def-511724-543450.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\email-def-511724-548964.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\email-def-511724-589306.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\email-def-511724-591943.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\email-def-511724-592579.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\email-def-511724-598579.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\email-def-511724-603763.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\email-def-511724-9595.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\email-def-511724-9696.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\email-def-511745-514279.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\email-def-email-backgrounds.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\email-def-email-bcards.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\email-def-email-ecards.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\email-def-email-emoticons.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\email-def-email-estationery.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\email-def-email-funny.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\email-def-email-help.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\email-def-email-images.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\email-def-email-info.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\email-def-email-more.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\email-def-email-my.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\email-def-email-new.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\email-def-email-new2.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\email-def-email-options.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\email-def-email-people.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\email-def-email-photo.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\email-def-email-tell.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\email-def-email-temp.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\email-def-email-text.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\email-def-email-voice.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\email-def.cdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\email-premium-email-premium.mnu
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\email-t1-bg.res
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\email-temp-bg.res
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\estatationery.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\flashpatch.js
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\flashpreview.htm
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\fs3.htm
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\hotbar_promo.htm
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\icon_checked_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\icon_close_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\icon_close_pressed_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\icon_edit_preview.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\icon_edit_send.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\icon_flash_preview.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\icon_recently_used.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\icon_remove_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\icon_remove_pressed_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\icon_sand-clock2.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\icon_tell_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\icon_tell_pressed_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\icon_tree_null.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\icon_unchecked_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\icon_unchecked_pressed_1.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\img_barlayout.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\img_barlayout2.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\img_barlayout4.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\img_corner_left.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\img_local_logo.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\js2_basetemplate.js
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\js2_hbgroups.js
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\js2_hbobject3.js
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\js2_hbobjectset3.js
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\js2_hotbarwrapper.js
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\js2_iteratorsandreaders3nf.js
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\js2_pagingmoduleobj3.js
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\js2_texts3.js
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\js2_xmltree3nf.js
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\layout.cdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\linkpathlegal.txt
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\more.res
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\n.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\nav_bb_2.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\nav_b_2.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\nav_ff_2.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\nav_f_2.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\progress.res
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\pro_hb_fo_word.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\sales_buttons.res
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\searchbtn.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\submit.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\tab_bg.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\tab_bga.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\tab_bgia.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\tab_l.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\tab_la.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\tab_lia.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\tab_r.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\tab_ra.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\tab_ria.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\treedata_animations.xml
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\treedata_backgrounds.xml
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\treedata_ecards.xml
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\treedata_emoticons.xml
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\treedata_notifiers.xml
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\treedata_text.xml
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\tree_dots.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\tree_minus.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\HostOL\static\1\tree_plus.gif
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\static
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\1.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\1383356.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\1387273.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\1388868.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\1393134.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\1396684.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\1402222.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\1402657.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\1416861.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\176155.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\2434473.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\2899630.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\2899657.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\2899670.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\297049.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\3251993.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\3340762.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\3421532.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\3425404.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\3428157.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\3749842.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\3752096.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\3756256.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\3855249.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\3893245.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\3893642.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\407824.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\486992.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\597086.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\627350.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\645857.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\806451.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\886918.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\922446.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\965522.sdf
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\domains.txt
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\ustat
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000003674
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000013401
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000021497
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000021726
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000023690
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000023840
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000024051
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000024104
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000024203
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000024268
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000024490
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000024721
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000024736
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000024874
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000024917
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000025087
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000025169
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000025284
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000025311
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000025397
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000025635
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000025650
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000025780
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000025784
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000025786
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000025790
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000026369
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000026566
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000026567
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000026655
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000026997
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000027050
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000027061
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000027598
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000027936
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000027956
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000027975
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000029227
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000030839
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000032385
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000032521
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000032981
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000033027
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000033079
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000044868
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000047858
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000049375
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000051643
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000051994
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000052008
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000052118
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000052121
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000052417
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000052451
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000052615
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000052637
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000052678
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000052875
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000052932
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000052995
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000053072
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000053091
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000053498
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000053560
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0\Hotbar\dynamic\TooltipXML\1000053803
C:\DOCUME~1\CLINE~1\APPLIC~1\Hotba
0
Réponse 4 / 17
pimprenelle27 Messages postés 20857 Date d'inscription lundi 10 décembre 2007 Statut Contributeur sécurité Dernière intervention 8 octobre 2019 2 502
24 févr. 2009 à 14:15
et ba dite donc y en à la dedans :

Nettoyage avec ToolBar S&D : Redémarre en mode sans échec comme indiqué ici ; Choisis ta session courante.


!! Déconnectes toi et fermes toute tes applications en cours le temps de la manipe !!

Relances Toolbar-S&D en double-cliquant sur le raccourci.
-->Tapes sur l'option 2 ( "nettoyage" ) puis tapes sur "Entrée".

Note : ne touches à rien lors de la suppression !

Un rapport sera généré à la fin du processus : postes son contenu dans ta prochaine réponse
accompagné d'un nouveau rapport hijackthis pour analyse ...

0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 17
celine66
24 févr. 2009 à 14:32
Je ne retrouve pas le rapport de supression pourrait tu me dire ou il ce triouve?

Donc je te poste le rapport hijackthis avant j'espere que ca ne change rien.

Et jai une question peut etre bete mais j'ai deux session sur l'ordinateur faut il desinfecter les deux?



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:30:12, on 24/02/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\WINDOWS\runservice.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\WINDOWS\system32\taskswitch.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\OrangeHSS\Launcher\Launcher.exe
C:\Program Files\Registry Mechanic\RegMech.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\PROGRA~1\MICROS~4\rapimgr.exe
C:\Program Files\Hercules\WiFi Station pour Livebox\WifiStationLB.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.BIN
C:\Program Files\OrangeHSS\systray\systrayapp.exe
C:\Program Files\OrangeHSS\Deskboard\deskboard.exe
C:\Program Files\OrangeHSS\connectivity\connectivitymanager.exe
C:\Program Files\OrangeHSS\connectivity\CoreCom\CoreCom.exe
C:\Program Files\OrangeHSS\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\Céline\Bureau\setup\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.pointnet.fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.pointnet.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer fourni par Prades Point Net
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O3 - Toolbar: (no name) - {90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} - (no file)
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\system32\taskswitch.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [HotbarOE] C:\Program Files\Hotbar\bin\10.2.236.0\OEAddOn.exe
O4 - HKLM\..\Run: [HotbarSA] "C:\Program Files\Hotbar\bin\10.2.236.0\HotbarSA.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SVCHOST.EXE] C:\WINDOWS\system32\drivers\svchost.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [RegistryMechanic] C:\Program Files\Registry Mechanic\RegMech.exe /H
O4 - HKCU\..\Run: [WeatherDPA] "C:\Program Files\Hotbar\bin\10.2.236.0\Weather.exe" -auto
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-823518204-1284227242-839522115-1003\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Propriétaire')
O4 - HKUS\S-1-5-21-823518204-1284227242-839522115-1003\..\Run: [wigoy] "c:\documents and settings\propriétaire\local settings\application data\wigoy.exe" wigoy (User 'Propriétaire')
O4 - HKUS\S-1-5-21-823518204-1284227242-839522115-1003\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe" (User 'Propriétaire')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
O4 - Global Startup: WiFi Station pour Livebox.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=www.illepointnet.com/
O15 - Trusted Zone: http://*.mappy.com
O15 - Trusted Zone: http://*.orange.fr
O15 - Trusted Zone: http://rw.search.ke.voila.fr
O15 - Trusted Zone: http://orange.weborama.fr
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LicCtrl Service (LicCtrlService) - Unknown owner - C:\WINDOWS\runservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
0
Réponse 6 / 17
celine66
24 févr. 2009 à 14:47
Je crois l'avoir trouvé.


-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.00GHz )
BIOS : BIOS Date: 01/23/07 16:51:34 Ver: 08.00.10
USER : Céline ( Administrator )
BOOT : Fail-safe boot
Antivirus : avast! antivirus 4.8.1335 [VPS 090223-0] 4.8.1335 (Not Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:298 Go (Free:62 Go)
D:\ (CD or DVD) - UDF - Total:3 Go (Free:0 Go)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( 24/02/2009|14:20 )

-----------\\ SUPPRESSION

Supprime! - C:\Program Files\AskSBar\bar
Supprime! - C:\Program Files\AskSBar\SrchAstt
Supprime! - C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\eskin
Supprime! - C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\IESkins
Supprime! - C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar\v3.0
Supprime! - C:\Program Files\Hotbar\bin
Supprime! - C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Hotbar
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\HotbarSA\HotbarSA.dat
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\HotbarSA\HotbarSAAbout.mht
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\HotbarSA\HotbarSAau.dat
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\HotbarSA\HotbarSAEULA.mht
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\HotbarSA\HotbarSA_kyf.dat
Supprime! - C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\SmartShopper
Supprime! - C:\DOCUME~1\CLINE~1\APPLIC~1\Smart-Shopper\cs
Supprime! - C:\Program Files\Smart-Shopper\Bin
Supprime! - C:\Program Files\Smart-Shopper\cs
Supprime! - C:\Program Files\Smart-Shopper\Uninst.exe
Supprime! - C:\DOCUME~1\CLINE~1\APPLIC~1\WeatherDPA\Weather
Supprime! - C:\WINDOWS\iun6002.exe
Supprime! - C:\DOCUME~1\CLINE~1\LOCALS~1\Temp\nsbB8.tmp
Supprime! - C:\DOCUME~1\CLINE~1\LOCALS~1\Temp\nsf9E.tmp
Supprime! - C:\DOCUME~1\CLINE~1\LOCALS~1\Temp\nsu8E.tmp
Supprime! - C:\Program Files\AskSBar
Supprime! - C:\DOCUME~1\CLINE~1\APPLIC~1\Hotbar
Supprime! - C:\Program Files\Hotbar
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\HotbarSA
Supprime! - C:\DOCUME~1\CLINE~1\APPLIC~1\Smart-Shopper
Supprime! - C:\Program Files\Smart-Shopper
Supprime! - C:\DOCUME~1\CLINE~1\APPLIC~1\WeatherDPA
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\2ACA5CC3-0F83-453D-A079-1076FE1A8B65

-----------\\ Recherche de Fichiers / Dossiers ...


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="https://www.google.fr/?gws_rd=ssl"
"Default_Page_URL"="https://www.pointnet.fr/"
"Url"="http://www.microsoft.com/athome/community/rss.xml"
"Url"="http://rss.msn.com/en-us/?feedoutput=rss&ocid=iehrs&unsub=true"
"Url"="http://www.microsoft.com/atwork/community/rss.xml"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.pointnet.fr/"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="https://www.msn.com/fr-fr/"


--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !


1 - "C:\ToolBar SD\TB_1.txt" - 24/02/2009|14:00 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 24/02/2009|14:23 - Option : [2]
0
Réponse 7 / 17
pimprenelle27 Messages postés 20857 Date d'inscription lundi 10 décembre 2007 Statut Contributeur sécurité Dernière intervention 8 octobre 2019 2 502
24 févr. 2009 à 14:50
il faut me faire le hijackthis après la suppression, sinon cela ne change rien.
0
Réponse 8 / 17
celine66
24 févr. 2009 à 14:54
Hijackthis a etais fais apres la supression je l'ai poster avant parce que je ne trouvé plus le rapport de la supression mais pour confirmer je refais un rapport hijackthis.

Desolé je me suis mal expliqué.


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:53:36, on 24/02/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\WINDOWS\runservice.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\WINDOWS\system32\taskswitch.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\OrangeHSS\Launcher\Launcher.exe
C:\Program Files\Registry Mechanic\RegMech.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\PROGRA~1\MICROS~4\rapimgr.exe
C:\Program Files\Hercules\WiFi Station pour Livebox\WifiStationLB.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.BIN
C:\Program Files\OrangeHSS\systray\systrayapp.exe
C:\Program Files\OrangeHSS\Deskboard\deskboard.exe
C:\Program Files\OrangeHSS\connectivity\connectivitymanager.exe
C:\Program Files\OrangeHSS\connectivity\CoreCom\CoreCom.exe
C:\Program Files\OrangeHSS\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\Céline\Bureau\setup\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.illepointnet.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.illepointnet.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer fourni par Prades Point Net
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O3 - Toolbar: (no name) - {90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} - (no file)
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\system32\taskswitch.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [HotbarOE] C:\Program Files\Hotbar\bin\10.2.236.0\OEAddOn.exe
O4 - HKLM\..\Run: [HotbarSA] "C:\Program Files\Hotbar\bin\10.2.236.0\HotbarSA.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SVCHOST.EXE] C:\WINDOWS\system32\drivers\svchost.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [RegistryMechanic] C:\Program Files\Registry Mechanic\RegMech.exe /H
O4 - HKCU\..\Run: [WeatherDPA] "C:\Program Files\Hotbar\bin\10.2.236.0\Weather.exe" -auto
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-823518204-1284227242-839522115-1003\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Propriétaire')
O4 - HKUS\S-1-5-21-823518204-1284227242-839522115-1003\..\Run: [wigoy] "c:\documents and settings\propriétaire\local settings\application data\wigoy.exe" wigoy (User 'Propriétaire')
O4 - HKUS\S-1-5-21-823518204-1284227242-839522115-1003\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe" (User 'Propriétaire')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
O4 - Global Startup: WiFi Station pour Livebox.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=www.illepointnet.com/
O15 - Trusted Zone: http://*.mappy.com
O15 - Trusted Zone: http://*.orange.fr
O15 - Trusted Zone: http://rw.search.ke.voila.fr
O15 - Trusted Zone: http://orange.weborama.fr
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LicCtrl Service (LicCtrlService) - Unknown owner - C:\WINDOWS\runservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
0
Réponse 9 / 17
pimprenelle27 Messages postés 20857 Date d'inscription lundi 10 décembre 2007 Statut Contributeur sécurité Dernière intervention 8 octobre 2019 2 502
24 févr. 2009 à 15:07
il est reste encore des hotbar, me refaire toolbar option 1. MErci.
0
Réponse 10 / 17
celine66
24 févr. 2009 à 16:47
Voila desolé j'etais absente




-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.00GHz )
BIOS : BIOS Date: 01/23/07 16:51:34 Ver: 08.00.10
USER : Céline ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1335 [VPS 090223-0] 4.8.1335 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:298 Go (Free:62 Go)
D:\ (CD or DVD) - UDF - Total:3 Go (Free:0 Go)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [1] ( 24/02/2009|16:44 )

-----------\\ Recherche de Fichiers / Dossiers ...


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="https://www.google.fr/?gws_rd=ssl"
"Default_Page_URL"="https://www.pointnet.fr/"
"Url"="http://www.microsoft.com/athome/community/rss.xml"
"Url"="http://rss.msn.com/en-us/?feedoutput=rss&ocid=iehrs&unsub=true"
"Url"="http://www.microsoft.com/atwork/community/rss.xml"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.pointnet.fr/"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="https://www.msn.com/fr-fr/"


--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !


1 - "C:\ToolBar SD\TB_1.txt" - 24/02/2009|14:00 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 24/02/2009|14:23 - Option : [2]
3 - "C:\ToolBar SD\TB_3.txt" - 24/02/2009|16:45 - Option : [1]

-----------\\ Fin du rapport a 16:45:55,53
0
Réponse 11 / 17
pimprenelle27 Messages postés 20857 Date d'inscription lundi 10 décembre 2007 Statut Contributeur sécurité Dernière intervention 8 octobre 2019 2 502
24 févr. 2009 à 16:49
il ne trouve plus rien bon pas grave, on va voir autrement fais ceci :

Fait ceci et poste moi le rapport à la suite de la question êtes vous aider par quelqu'un. Merci.

Télécharge GenProc sur ton bureau (Attention le fichier est un fichier zip)
Dézippe le dossier, double-clique sur GenProc.bat
En final, poste le contenu du rapport qui s'affiche.
Comment utiliser GenProc

Pour ceux qui ont vista, ne pas oublier de désactiver Le contrôle des comptes utilisateurs

0
Réponse 12 / 17
celine66
24 févr. 2009 à 16:54
Apparament lui non plus ne detecte rien


Rapport GenProc 2.385 [1] - 24/02/2009 à 16:53:39,78 - Windows XP

GenProc n'a détecté aucune infection caractéristique et suggère de suivre la procédure suivante :


Poste un rapport Nod32 https://www.eset.com/ (il faut utiliser Internet Explorer)
- coche toutes les cases à chaque fois, et lorsque c'est terminé, colle le rapport :
- C:\Program Files\EsetOnlineScanner\log.txt

__________________________________________________________________________________________________________

Sites officiels GenProc : www.alt-shift-return.org et www.genproc.com
0
Réponse 13 / 17
pimprenelle27 Messages postés 20857 Date d'inscription lundi 10 décembre 2007 Statut Contributeur sécurité Dernière intervention 8 octobre 2019 2 502
24 févr. 2009 à 18:12
ok bon pas grave,

Telecharge malwarebytes

NB : S'il te manque COMCTL32.OCX alors télécharge le ici

Tu l´instale; le programme va se mettre automatiquement a jour.

Une fois a jour, le programme va se lancer; click sur l´onglet parametre, et coche la case : "Arreter internet explorer pendant la suppression".

Click maintenant sur l´onglet recherche et coche la case : "executer un examen complet".

Puis click sur "rechercher".

Laisse le scanner le pc...

Si des elements on ete trouvés > click sur supprimer la selection.

si il t´es demandé de redemarrer > click sur "yes".

A la fin un rapport va s´ouvrir; sauvegarde le de maniere a le retrouver en vu de le poster sur le forum.
Copie et colle le rapport stp.

PS : les rapport sont aussi rangé dans l onglet rapport/log


Tutoriaux

0
Réponse 14 / 17
Balosssss
24 févr. 2009 à 21:17
Alors voila le rapport il ne ma pas demendé de redemarrer mais l'analyse a etais (tres) longue je ne sais pas si c'est normal.



Malwarebytes' Anti-Malware 1.34
Version de la base de données: 1798
Windows 5.1.2600 Service Pack 3

24/02/2009 21:13:54
mbam-log-2009-02-24 (21-13-54).txt

Type de recherche: Examen complet (C:\|)
Eléments examinés: 172169
Temps écoulé: 2 hour(s), 17 minute(s), 1 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 7

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\svchost.exe (Trojan.Agent) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Documents and Settings\Propriétaire\Local Settings\Application Data\wigoy_navps.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Local Settings\Application Data\wigoy_nav.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Local Settings\Application Data\wigoy.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
C:\Documents and Settings\Céline\Bureau\setup\GenProc\outil\curl.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{B2B9FADF-4FCF-41A4-905C-71E05AE9FCF9}\RP468\A0084901.exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{B2B9FADF-4FCF-41A4-905C-71E05AE9FCF9}\RP468\A0084898.exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{B2B9FADF-4FCF-41A4-905C-71E05AE9FCF9}\RP515\A0095348.dll (Adware.Shoper) -> Quarantined and deleted successfully.
0
Réponse 15 / 17
celine66
24 févr. 2009 à 21:18
Alors voila le rapport il ne ma pas demendé de redemarrer mais l'analyse a etais (tres) longue je ne sais pas si c'est normal.



Malwarebytes' Anti-Malware 1.34
Version de la base de données: 1798
Windows 5.1.2600 Service Pack 3

24/02/2009 21:13:54
mbam-log-2009-02-24 (21-13-54).txt

Type de recherche: Examen complet (C:\|)
Eléments examinés: 172169
Temps écoulé: 2 hour(s), 17 minute(s), 1 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 7

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\­Run\svchost.exe (Trojan.Agent) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Documents and Settings\Propriétaire\Local Settings\Application Data\wigoy_navps.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Local Settings\Application Data\wigoy_nav.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
C:\Documents and Settings\Propriétaire\Local Settings\Application Data\wigoy.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
C:\Documents and Settings\Céline\Bureau\setup\GenProc\outil\curl.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{B2B9FADF-4FCF-41A4-905C-71E05AE9FCF9}\RP468\A0084901.exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{B2B9FADF-4FCF-41A4-905C-71E05AE9FCF9}\RP468\A0084898.exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{B2B9FADF-4FCF-41A4-905C-71E05AE9FCF9}\RP515\A0095348.dll (Adware.Shoper) -> Quarantined and deleted successfully
0
Réponse 16 / 17
celine66
24 févr. 2009 à 21:19
Desolé j'avais oublié de changer le pseudo comme nous avons deux ordinateurs nous avons fais deux topic
0
Réponse 17 / 17
pimprenelle27 Messages postés 20857 Date d'inscription lundi 10 décembre 2007 Statut Contributeur sécurité Dernière intervention 8 octobre 2019 2 502
24 févr. 2009 à 22:17
vide la quarantaine de malware et fait ceci :

Téléchargez SmitfraudFix et enregistrez-le sur le bureau
* Ensuite, double cliquez sur SmitfraudFix puis sur Exécuter. (Sous Vista : clic droit sur SmitfraudFix et sélectionnez "Exécuter en tant qu'administrateur")
* Sélectionnez 1 pour créer un rapport des fichiers responsables de l'infection.
* A la fin de l'analyse, un rapport va être généré...Enregistrez-le sur le bureau.

Regarde bien le tuto qui est avec


/!\ Postez le rapport sur le forum pour savoir si la suppression peut être lancée.

En mode sans echec la suppression des fichiers présents.


process.exe
est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool. Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
http://www.beyondlogic.org/consulting/processutil/processutil.htm
0