A l'aide j'ai un virus

bonjours a tous
une fois mon pc allumer j'ai un message qui dit "c:\windows\kesenjangansosial.exe n'est pas une applicatio win32 valide" que dois-je faire.En plus ce message s ouvre tout le temps.
merci d'avance

salut voici les rapports
merci de m'aider

Rapport hijarkthis
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:24:22, on 02/02/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Zango\bin\10.3.75.0\ZangoSA.exe
C:\Program Files\Zango\bin\10.3.75.0\OEAddOn.exe
C:\WINDOWS\system32\WDBtnMgr.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\WANADOO\TaskBarIcon.exe
C:\Program Files\Acer\Acer eConsole\MediaSync.exe
C:\Acer\Empowering Technology\eRecovery\Monitor.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE
C:\Program Files\Acer\Acer eMode Management\AspireService.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Zango\bin\10.3.75.0\Weather.exe
C:\WINDOWS\system32\rundll32.exe
C:\documents and settings\frederic blouin\local settings\application data\owykm.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
C:\PROGRA~1\WANADOO\GestionnaireInternet.exe
C:\PROGRA~1\WANADOO\ComComp.exe
C:\PROGRA~1\WANADOO\Toaster.exe
C:\PROGRA~1\WANADOO\Inactivity.exe
C:\PROGRA~1\WANADOO\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\WINDOWS\System32\alg.exe
C:\PROGRA~1\WANADOO\Watch.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre1.6.0_07\bin\jucheck.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\PROGRA~1\WANADOO\WOOBrowser\WOOBrowser.exe
C:\PROGRA~1\WANADOO\WOOBRO~1\DownloadManager.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.atcomet.com/b/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://global.acer.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar2\1.2.116\KiweeIEToolbar.dll (file missing)
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\WANADOO\SEARCH~1.DLL
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
F2 - REG:system.ini: Shell=Explorer.exe "C:\WINDOWS\KesenjanganSosial.exe"
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: ShoppingReport - {100EB1FD-D03E-47FD-81F3-EE91287F9465} - C:\Program Files\ShoppingReport\Bin\2.5.0\ShoppingReport.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Zango - {90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} - C:\Program Files\Zango\bin\10.3.75.0\HostIE.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Zango - {90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} - C:\Program Files\Zango\bin\10.3.75.0\HostIE.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [ZangoSA] "C:\Program Files\Zango\bin\10.3.75.0\ZangoSA.exe"
O4 - HKLM\..\Run: [ZangoOE] C:\Program Files\Zango\bin\10.3.75.0\OEAddOn.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\WANADOO\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\WANADOO\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [WD Button Manager] WDBtnMgr.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [ntiMUI] c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [MediaSync] C:\Program Files\Acer\Acer eConsole\MediaSync.exe
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe
O4 - HKLM\..\Run: [EPSON Stylus DX3800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE /P26 "EPSON Stylus DX3800 Series" /O6 "USB001" /M "Stylus DX3800"
O4 - HKLM\..\Run: [Bron-Spizaetus] "C:\WINDOWS\ShellNew\RakyatKelaparan.exe"
O4 - HKLM\..\Run: [AspireService] C:\Program Files\Acer\Acer eMode Management\AspireService.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\WANADOO\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [WeatherDPA] "C:\Program Files\Zango\bin\10.3.75.0\Weather.exe" -auto
O4 - HKCU\..\Run: [Tok-Cirrhatus-3741] "C:\Documents and Settings\Frederic Blouin\Local Settings\Application Data\smss.exe"
O4 - HKCU\..\Run: [Tok-Cirrhatus] "C:\Documents and Settings\Frederic Blouin\Local Settings\Application Data\smss.exe"
O4 - HKCU\..\Run: [owykm] "c:\documents and settings\frederic blouin\local settings\application data\owykm.exe" owykm
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Documents and Settings\Frederic Blouin\Bureau\msmsgs.exe" /background
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BitComet] "C:\Program Files\BitComet\BitComet.exe" /tray
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?81dbe12862b14cbebefebba09c656447
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?81dbe12862b14cbebefebba09c656447
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: ShopperReports - Compare product prices - {C5428486-50A0-4a02-9D20-520B59A9F9B2} - C:\Program Files\ShoppingReport\Bin\2.5.0\ShoppingReport.dll
O9 - Extra button: ShopperReports - Compare travel rates - {C5428486-50A0-4a02-9D20-520B59A9F9B3} - C:\Program Files\ShoppingReport\Bin\2.5.0\ShoppingReport.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.orange.fr (file missing) (HKCU)
O16 - DPF: CabBuilder - http://ak.imgag.com/imgag/kiw/tool [...] ontrol.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/bina [...] b56986.cab
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://cid-2ea799fc0cffff54.spaces [...] nPUpld.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b56907.cab
O23 - Service: Acer Media Server - Acer Inc. - C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe

--
End of file - 13094 bytes

rapport rooter


Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) 64 Processor 3400+ )
BIOS : )Phoenix - Award WorkstationBIOS v6.00PG
USER : Frederic Blouin ( Administrator )
BOOT : Normal boot

Antivirus : Avira AntiVir PersonalEdition Classic 8.0.1.30 (Activated)


C:\ (Local Disk) - FAT32 - Total:72 Go (Free:34 Go)
D:\ (Local Disk) - NTFS - Total:72 Go (Free:66 Go)
E:\ (CD or DVD)
F:\ (CD or DVD)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (USB)
K:\ (Local Disk) - NTFS - Total:232 Go (Free:63 Go)

02/02/2009| 8:26

----------------------\\ Search..


[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"owykm"="\"c:\\documents and settings\\frederic blouin\\local settings\\application data\\owykm.exe\" owykm"

C:\DOCUME~1\FREDER~1\LOCALS~1\APPLIC~1\owykm.dat
C:\DOCUME~1\FREDER~1\LOCALS~1\APPLIC~1\owykm_nav.dat
C:\DOCUME~1\FREDER~1\LOCALS~1\APPLIC~1\owykm_navps.dat
C:\DOCUME~1\FREDER~1\LOCALS~1\APPLIC~1\OWYKM.EXE
==> NAVIPROMO <==

----------------------\\ Cracks & Keygens..

C:\DOCUME~1\FREDER~1\Local Settings\Temp\Rar$EX02.172\Nero 8.3.6.0 + keygen
C:\DOCUME~1\FREDER~1\Local Settings\Temp\Rar$EX02.172\Nero 8.3.6.0 + keygen\Keygen
C:\DOCUME~1\FREDER~1\Local Settings\Temp\Rar$EX02.172\Nero 8.3.6.0 + keygen\Nero-8.3.6.0_fra_trial.exe


1 - "C:\Rooter$\Rooter_1.txt" - 02/02/2009| 8:27

----------------------\\ Scan completed at 8:27

Salut ,
voici les rapports demandé :
1.RAPPORT TOOLBAR

-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) 64 Processor 3400+ )
BIOS : )Phoenix - Award WorkstationBIOS v6.00PG
USER : Frederic Blouin ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition Classic 8.0.1.30 (Activated)
C:\ (Local Disk) - FAT32 - Total:72 Go (Free:34 Go)
D:\ (Local Disk) - NTFS - Total:72 Go (Free:66 Go)
E:\ (CD or DVD)
F:\ (CD or DVD)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (USB)
K:\ (Local Disk) - NTFS - Total:232 Go (Free:63 Go)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [1] ( 03/02/2009| 9:22 )

-----------\\ Recherche de Fichiers / Dossiers ...

C:\DOCUME~1\FREDER~1\APPLIC~1\ShoppingReport
C:\DOCUME~1\FREDER~1\APPLIC~1\ShoppingReport\cs
C:\DOCUME~1\FREDER~1\APPLIC~1\ShoppingReport\cs\dwld
C:\DOCUME~1\FREDER~1\APPLIC~1\ShoppingReport\cs\Config.xml
C:\DOCUME~1\FREDER~1\APPLIC~1\ShoppingReport\cs\report
C:\DOCUME~1\FREDER~1\APPLIC~1\ShoppingReport\cs\db
C:\DOCUME~1\FREDER~1\APPLIC~1\ShoppingReport\cs\res1
C:\DOCUME~1\FREDER~1\APPLIC~1\ShoppingReport\cs\dwld\WhiteList.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\ShoppingReport\cs\report\aggr_storage.xml
C:\DOCUME~1\FREDER~1\APPLIC~1\ShoppingReport\cs\report\send_storage.xml
C:\DOCUME~1\FREDER~1\APPLIC~1\ShoppingReport\cs\db\Aliases.dbs
C:\DOCUME~1\FREDER~1\APPLIC~1\ShoppingReport\cs\db\Sites.dbs
C:\DOCUME~1\FREDER~1\APPLIC~1\ShoppingReport\cs\res1\WhiteList.dbs
C:\Program Files\ShoppingReport
C:\Program Files\ShoppingReport\Bin
C:\Program Files\ShoppingReport\Uninst.exe
C:\Program Files\ShoppingReport\Bin\2.5.0
C:\Program Files\ShoppingReport\Bin\2.5.0\ShoppingReport.dll
C:\DOCUME~1\FREDER~1\APPLIC~1\WeatherDPA
C:\DOCUME~1\FREDER~1\APPLIC~1\WeatherDPA\Weather
C:\DOCUME~1\FREDER~1\APPLIC~1\WeatherDPA\Weather\WeatherStartup.xml
C:\DOCUME~1\FREDER~1\APPLIC~1\WeatherDPA\Weather\WeatherDPA
C:\DOCUME~1\FREDER~1\APPLIC~1\WeatherDPA\Weather\WeatherDPA\Weather_XML
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\IESkins
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\eskin
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\Default_Mails.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\Default_MobileSidewalk.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\Default_SearchBoxTrapper.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\Default_bidzC_ZT_IE-ca.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\Default_bidzC_ZT_IE-us.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\Default_categorize.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\Default_comparison.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\Default_explorer-Mails.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\Default_explorer-people.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\Default_favorites.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\Default_hotbarcom.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\Default_hsskin.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\Default_jemster.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\Default_jemsterie.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\Default_jemsteruk.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\Default_jobsearch.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\Default_new.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\Default_premium.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\Default_reun.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\Default_ringtones.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\Default_searchfor.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\Default_searchgo.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\Default_weather.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\Default_yellowpages.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\Top7_theweb.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\btntrans1.dat
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\buttondir.txt
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\components.cdf
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\cursors.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\d_icons_buttons_1000.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\d_icons_buttons_2000.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\d_icons_buttons_3000.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\d_icons_buttons_bar.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\d_icons_buttons_bbar1.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\d_icons_buttons_logos.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\d_icons_buttons_other.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\d_icons_weather.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\default.cdf
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\editblbuttons.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\email-def-511724-548964.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\email-def-511724-9595.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\email-t1-bg.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\icons2.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\ie_games_icon.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\ie_video.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\keywords.idx
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\keywords1.dat
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\layout.cdf
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\linkpathlegal.txt
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\progress.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\s_icons_buttons.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\sales_buttons.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\sdfmodifier.xml
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\t2_bg.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\theweb.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\top7.cdf
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\tsd_bg.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\zango_btn.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\zango_ie_menu.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\Default_511745-514279.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\Default_Games.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\Default_Hide.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\Default_Hotmail.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\avatar.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\1\btntrans.idx
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\buttondir.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\samplegroups2.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\samplegroups2.txt
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\linkpathlegal.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\layout.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\d_icons_buttons_1000.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\d_icons_buttons_2000.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\d_icons_buttons_3000.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\d_icons_buttons_logos.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\d_icons_buttons_other.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\tsd_bg.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\t2_bg.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\s_icons_buttons.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\progress.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\d_icons_buttons_bar.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\d_icons_buttons_bbar1.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\sales_buttons.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\zango_btn.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\email-t1-bg.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\ie_video.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\ie_games_icon.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\cursors.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\d_icons_weather.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\sdfmodifier.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\editblbuttons.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\avatar.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\keywords.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\keywords1.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\BtnTrans.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\BtnTrans1.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\default.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\icons2.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\top7.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\DownLoad\zango_ie_menu.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\Default_511745-514279.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\Default_Games.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\Default_Hide.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\Default_Hotmail.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\Default_Mails.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\Default_MobileSidewalk.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\Default_SearchBoxTrapper.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\Default_bidzC_ZT_IE-ca.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\Default_bidzC_ZT_IE-us.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\Default_categorize.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\Default_comparison.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\Default_explorer-Mails.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\Default_explorer-people.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\Default_favorites.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\Default_hotbarcom.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\Default_hsskin.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\Default_jemster.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\Default_jemsterie.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\Default_jemsteruk.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\Default_jobsearch.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\Default_new.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\Default_premium.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\Default_reun.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\Default_ringtones.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\Default_searchfor.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\Default_searchgo.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\Default_weather.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\Default_yellowpages.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\Top7_theweb.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\avatar.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\btntrans.idx
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\btntrans1.dat
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\buttondir.txt
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\components.cdf
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\cursors.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\d_icons_buttons_1000.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\d_icons_buttons_2000.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\d_icons_buttons_3000.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\d_icons_buttons_bar.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\d_icons_buttons_bbar1.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\d_icons_buttons_logos.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\d_icons_buttons_other.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\d_icons_weather.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\default.cdf
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\editblbuttons.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\email-def-511724-548964.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\email-def-511724-9595.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\email-t1-bg.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\icons2.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\ie_games_icon.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\ie_video.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\keywords.idx
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\keywords1.dat
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\layout.cdf
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\linkpathlegal.txt
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\progress.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\s_icons_buttons.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\sales_buttons.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\sdfmodifier.xml
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\t2_bg.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\theweb.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\top7.cdf
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\tsd_bg.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\zango_btn.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\static\2\zango_ie_menu.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\1.sdf
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\domains.txt
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\ustat
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\3893292.sdf
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\1384900.sdf
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\292413.sdf
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\3893498.sdf
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\1390994.sdf
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\471737.sdf
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\3251993.sdf
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\3893245.sdf
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\3786291.sdf
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\3755917.sdf
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\442905.sdf
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\600583.sdf
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\1405886.sdf
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\3737697.sdf
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\1390732.sdf
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\2876074.sdf
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\194557.sdf
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\ustat\37c6.dat
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000025650
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000026567
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\57904
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1370
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\95645
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000027050
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000063615
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000057076
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\89865
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\505911
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\472390
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\528757
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\5777
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\64364
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000052615
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000027037
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000028063
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000091175
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000091806
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000091430
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000091386
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000091308
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000091336
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\87385
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000027598
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000025311
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1130
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\82011
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\7521
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1491
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000063624
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\97741
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\85701
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\459509
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\753553
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\166651
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\15135
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\32200
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000066866
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\211084
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\746932
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\140072
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000028920
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000063348
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000082926
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000029227
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000059657
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000059554
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\652325
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\35503
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\87304
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\747663
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\710858
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000082797
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\93910
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000027929
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000037257
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000033024
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\3338
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000090886
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000053091
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\69156
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000058289
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000082412
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\45102
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000083033
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\81392
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\752858
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\705413
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000064073
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\15596
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\482315
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000061533
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\81256
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\77617
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\463995
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000026008
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\41694
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\571472
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\49438
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\750891
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\436199
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\17025
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000063625
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000032930
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000054461
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\18991
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\753197
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\218859
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000033025
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\180320
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\753590
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\705211
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000081733
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000056104
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\61367
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\738022
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\68041
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\520094
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\620412
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000083145
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\461315
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\33912
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\213887
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\59844
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000026267
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\533670
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000025065
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\64424
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000027220
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\2020
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\751223
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\753331
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\753426
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000027956
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000078587
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000024736
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000023690
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\753427
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\716936
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000030596
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000065325
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000066676
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\9941
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000053072
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\4442
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000063476
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000028911
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000081177
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000033019
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\82292
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000052875
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\19052
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000025015
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000026235
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\6292
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\13546
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000025211
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\685568
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000052678
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000013401
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\Zango\dynamic\TooltipXML\1000023894
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\dynamic
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\DownLoad
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\DownLoad\buttondir.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\DownLoad\linkpathlegal.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\DownLoad\layout.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\DownLoad\progress.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\DownLoad\email-t1-bg.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\DownLoad\code.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\DownLoad\images.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\DownLoad\treexml.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\DownLoad\business_promo.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\DownLoad\hotbar_promo.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\DownLoad\localcontent.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\DownLoad\email-temp-bg.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\DownLoad\sales_buttons.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\DownLoad\zango_btn.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\DownLoad\cursors.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\DownLoad\pro_hb_fo_word.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\DownLoad\avatar.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\DownLoad\email-def.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\030104_emte10_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\030104_emte11_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\030104_emte12_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\030104_emte13_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\030104_emte14_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\030104_emte19_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\030104_emte20_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\030104_emte21_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\030104_emte9_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\030203lib_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\033102angel_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\033102bigluf_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\033102bigsmile_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\033102birthday_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\033102cheers_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\033102flo_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\033102good_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\033102jump_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\033102king_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\033102lough_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\033102luf_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\033102smile_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\033102smiled_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\033102sor_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\033102thanx_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\033102uhu_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\040103ahh_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\040103wow_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\040104_emi2_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\042102_1134_112_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\050103big_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\050103gig_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\050103hm_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\050103nomail_emoti_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\050103norm_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\060104_ema15_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\060104_ema16_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\060104_ema17_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\060104_ema18_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\060104_ema19_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\060104_ema20_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\060104_ema21_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\060104_ema24_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\060104_ema25_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\060104_ema26_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\060104_ema30_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\060104_ema33_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\060104_ema34_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\062802hippi_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\062802jumpie_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\080402argh_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\080402oops_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\080402ouch_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\082502no_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\082502yes_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\110103_boring1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\110103_confused_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\110103_crying_ugly_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\110103_fantastic_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\110103_feel_better_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\110103_gimme_break_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\110103_heehee_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\110103_hlopaet_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\110103_ign_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\110103_lol_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\110103_no_comment_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\110103_peace_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\110103_smashing_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\110103_talk2thehand_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\avatar.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\block_sm.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\block_sm2.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\block_smli.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\block_smli2.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\blocked.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\blocked2.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\btn_add-but.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\btn_back-but.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\btn_left_cut_enabled_1.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\btn_left_enabled_1.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\btn_left_pressed_1.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\btn_middle_enabled_1.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\btn_middle_pressed_1.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\btn_right_cut_enabled_1.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\btn_right_enabled_1.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\btn_right_pressed_1.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\business_promo.htm
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\buttondir.txt
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\components.cdf
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\css2_main.css
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\css2_pagingmodule.css
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\css2_topbuttons.css
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\css_cattree.css
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\css_flashpreview.css
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\cursors.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\delete.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\edit_clear_sound.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\edit_fs.htm
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\edit_select.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\email-def-511724-543450.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\email-def-511724-548964.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\email-def-511724-589306.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\email-def-511724-591943.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\email-def-511724-592579.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\email-def-511724-598579.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\email-def-511724-603763.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\email-def-511724-9595.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\email-def-511724-9696.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\email-def-511745-514279.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\email-def-email-backgrounds.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\email-def-email-bcards.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\email-def-email-ecards.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\email-def-email-emoticons.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\email-def-email-estationery.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\email-def-email-funny.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\email-def-email-help.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\email-def-email-images.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\email-def-email-info.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\email-def-email-more.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\email-def-email-my.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\email-def-email-new.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\email-def-email-new2.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\email-def-email-options.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\email-def-email-people.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\email-def-email-photo.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\email-def-email-tell.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\email-def-email-temp.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\email-def-email-text.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\email-def-email-voice.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\email-def.cdf
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\email-premium-email-premium.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\email-t1-bg.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\email-temp-bg.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\estatationery.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\flashpatch.js
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\flashpreview.htm
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\fs3.htm
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\hotbar_promo.htm
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\icon_checked_1.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\icon_close_1.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\icon_close_pressed_1.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\icon_edit_preview.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\icon_edit_send.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\icon_flash_preview.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\icon_recently_used.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\icon_remove_1.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\icon_remove_pressed_1.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\icon_sand-clock2.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\icon_tell_1.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\icon_tell_pressed_1.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\icon_tree_null.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\icon_unchecked_1.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\icon_unchecked_pressed_1.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\img_barlayout.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\img_barlayout2.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\img_barlayout4.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\img_corner_left.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\img_local_logo.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\js2_basetemplate.js
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\js2_hbgroups.js
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\js2_hbobject3.js
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\js2_hbobjectset3.js
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\js2_hotbarwrapper.js
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\js2_iteratorsandreaders3nf.js
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\js2_pagingmoduleobj3.js
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\js2_texts3.js
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\js2_xmltree3nf.js
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\layout.cdf
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\linkpathlegal.txt
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\n.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\nav_b_2.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\nav_bb_2.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\nav_f_2.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\nav_ff_2.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\pro_hb_fo_word.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\progress.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\sales_buttons.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\searchbtn.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\submit.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\tab_bg.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\tab_bga.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\tab_bgia.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\tab_l.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\tab_la.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\tab_lia.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\tab_r.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\tab_ra.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\tab_ria.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\tree_dots.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\tree_minus.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\tree_plus.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\treedata_animations.xml
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\treedata_backgrounds.xml
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\treedata_ecards.xml
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\treedata_emoticons.xml
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\treedata_notifiers.xml
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\treedata_text.xml
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\1\zango_btn.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\030104_emte10_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\030104_emte11_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\030104_emte12_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\030104_emte13_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\030104_emte14_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\030104_emte19_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\030104_emte20_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\030104_emte21_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\030104_emte9_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\030203lib_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\033102angel_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\033102bigluf_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\033102bigsmile_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\033102birthday_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\033102cheers_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\033102flo_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\033102good_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\033102jump_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\033102king_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\033102lough_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\033102luf_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\033102smile_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\033102smiled_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\033102sor_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\033102thanx_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\033102uhu_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\040103ahh_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\040103wow_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\040104_emi2_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\042102_1134_112_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\050103big_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\050103gig_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\050103hm_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\050103nomail_emoti_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\050103norm_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\060104_ema15_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\060104_ema16_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\060104_ema17_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\060104_ema18_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\060104_ema19_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\060104_ema20_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\060104_ema21_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\060104_ema24_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\060104_ema25_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\060104_ema26_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\060104_ema30_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\060104_ema33_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\060104_ema34_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\062802hippi_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\062802jumpie_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\080402argh_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\080402oops_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\080402ouch_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\082502no_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\082502yes_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\110103_boring1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\110103_confused_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\110103_crying_ugly_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\110103_fantastic_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\110103_feel_better_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\110103_gimme_break_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\110103_heehee_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\110103_hlopaet_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\110103_ign_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\110103_lol_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\110103_no_comment_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\110103_peace_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\110103_smashing_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\110103_talk2thehand_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\avatar.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\block_sm.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\block_sm2.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\block_smli.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\block_smli2.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\blocked.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\blocked2.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\btn_add-but.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\btn_back-but.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\btn_left_cut_enabled_1.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\btn_left_enabled_1.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\btn_left_pressed_1.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\btn_middle_enabled_1.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\btn_middle_pressed_1.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\btn_right_cut_enabled_1.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\btn_right_enabled_1.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\btn_right_pressed_1.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\business_promo.htm
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\buttondir.txt
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\components.cdf
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\css2_main.css
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\css2_pagingmodule.css
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\css2_topbuttons.css
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\css_cattree.css
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\css_flashpreview.css
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\cursors.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\delete.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\edit_clear_sound.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\edit_fs.htm
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\edit_select.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\email-def-511724-543450.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\email-def-511724-548964.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\email-def-511724-589306.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\email-def-511724-591943.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\email-def-511724-592579.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\email-def-511724-598579.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\email-def-511724-603763.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\email-def-511724-9595.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\email-def-511724-9696.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\email-def-511745-514279.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\email-def-email-backgrounds.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\email-def-email-bcards.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\email-def-email-ecards.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\email-def-email-emoticons.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\email-def-email-estationery.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\email-def-email-funny.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\email-def-email-help.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\email-def-email-images.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\email-def-email-info.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\email-def-email-more.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\email-def-email-my.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\email-def-email-new.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\email-def-email-new2.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\email-def-email-options.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\email-def-email-people.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\email-def-email-photo.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\email-def-email-tell.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\email-def-email-temp.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\email-def-email-text.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\email-def-email-voice.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\email-def.cdf
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\email-premium-email-premium.mnu
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\email-t1-bg.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\email-temp-bg.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\estatationery.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\flashpatch.js
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\flashpreview.htm
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\fs3.htm
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\hotbar_promo.htm
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\icon_checked_1.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\icon_close_1.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\icon_close_pressed_1.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\icon_edit_preview.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\icon_edit_send.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\icon_flash_preview.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\icon_recently_used.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\icon_remove_1.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\icon_remove_pressed_1.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\icon_sand-clock2.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\icon_tell_1.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\icon_tell_pressed_1.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\icon_tree_null.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\icon_unchecked_1.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\icon_unchecked_pressed_1.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\img_barlayout.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\img_barlayout2.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\img_barlayout4.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\img_corner_left.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\img_local_logo.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\js2_basetemplate.js
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\js2_hbgroups.js
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\js2_hbobject3.js
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\js2_hbobjectset3.js
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\js2_hotbarwrapper.js
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\js2_iteratorsandreaders3nf.js
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\js2_pagingmoduleobj3.js
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\js2_texts3.js
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\js2_xmltree3nf.js
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\layout.cdf
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\linkpathlegal.txt
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\n.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\nav_b_2.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\nav_bb_2.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\nav_f_2.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\nav_ff_2.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\pro_hb_fo_word.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\progress.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\sales_buttons.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\searchbtn.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\submit.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\tab_bg.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\tab_bga.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\tab_bgia.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\tab_l.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\tab_la.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\tab_lia.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\tab_r.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\tab_ra.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\tab_ria.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\tree_dots.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\tree_minus.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\tree_plus.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\treedata_animations.xml
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\treedata_backgrounds.xml
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\treedata_ecards.xml
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\treedata_emoticons.xml
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\treedata_notifiers.xml
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\treedata_text.xml
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOL\static\2\zango_btn.res
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\static
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\dynamic
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\static\DownLoad
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\static\1
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\static\2
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\static\DownLoad\buttondir.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\static\DownLoad\linkpathlegal.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\static\DownLoad\layout.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\static\DownLoad\progress.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\static\DownLoad\email-t1-bg.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\static\DownLoad\code.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\static\DownLoad\images.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\static\DownLoad\treexml.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\static\DownLoad\business_promo.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\static\DownLoad\hotbar_promo.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\static\DownLoad\localcontent.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\static\DownLoad\email-temp-bg.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\static\DownLoad\sales_buttons.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\static\DownLoad\zango_btn.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\static\DownLoad\cursors.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\static\DownLoad\avatar.xip
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\static\1\030104_emte10_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\static\1\030104_emte11_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\static\1\030104_emte12_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\static\1\030104_emte13_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\static\1\030104_emte14_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\static\1\030104_emte19_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\static\1\030104_emte20_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\static\1\030104_emte21_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\static\1\030104_emte9_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\static\1\030203lib_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\static\1\033102angel_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\static\1\033102bigluf_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\static\1\033102bigsmile_1_prv.gif
C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0\HostOI\static\1\033102birthday_1_prv.gif
C:\DOCUME~1\F

SALUT j ai une petite question :
mon PC rame ainsi que mes lecteur dvd es ce dû au virus
merci et encore merci a toi sham rock

bonjour,
j'ai un souci avec atf cleaner quand je clique sur empty selected une fenetre s ouvre a chaque fois : "atf ATF Cleaner.exe a rencontré un problème et doit fermer. Nous vous prions de nous excuser pour le désagrément encouru."
donc je n'arrive pas à l installé.
merci

BONSOIR
rapport toolbar

-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) 64 Processor 3400+ )
BIOS : )Phoenix - Award WorkstationBIOS v6.00PG
USER : Frederic Blouin ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition Classic 8.0.1.30 (Activated)
C:\ (Local Disk) - FAT32 - Total:72 Go (Free:33 Go)
D:\ (Local Disk) - NTFS - Total:72 Go (Free:66 Go)
E:\ (CD or DVD)
F:\ (CD or DVD)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (USB)
K:\ (Local Disk) - NTFS - Total:232 Go (Free:56 Go)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( 05/02/2009|19:55 )

-----------\\ SUPPRESSION

Supprime! - C:\DOCUME~1\FREDER~1\APPLIC~1\ShoppingReport\cs
Supprime! - C:\Program Files\ShoppingReport\Bin
Supprime! - C:\Program Files\ShoppingReport\Uninst.exe
Supprime! - C:\DOCUME~1\FREDER~1\APPLIC~1\WeatherDPA\Weather
Supprime! - C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\v3.0
Supprime! - C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\IESkins
Supprime! - C:\DOCUME~1\FREDER~1\APPLIC~1\Zango\eskin
Echec ! - C:\Program Files\Zango\bin
Echec ! - C:\Program Files\Zango\bin\10.3.75.0
Echec ! - C:\Program Files\Zango\bin\10.3.75.0\HostOE.dll
Supprime! - C:\DOCUME~1\ALLUSE~1\MENUDÉ~1\PROGRA~1\Zango
Supprime! - C:\DOCUME~1\FREDER~1\APPLIC~1\ShoppingReport
Supprime! - C:\Program Files\ShoppingReport
Supprime! - C:\DOCUME~1\FREDER~1\APPLIC~1\WeatherDPA
Supprime! - C:\DOCUME~1\FREDER~1\APPLIC~1\Zango
Echec ! - C:\Program Files\Zango
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\2ACA5CC3-0F83-453D-A079-1076FE1A8B65

-----------\\ DEUXIEME PASSAGE

Echec ! - C:\Program Files\Zango\bin
Echec ! - C:\Program Files\Zango\bin\10.3.75.0
Echec ! - C:\Program Files\Zango\bin\10.3.75.0\HostOE.dll
Echec ! - C:\Program Files\Zango

-----------\\ Recherche de Fichiers / Dossiers ...

C:\Program Files\Zango
C:\Program Files\Zango\bin
C:\Program Files\Zango\bin\10.3.75.0
C:\Program Files\Zango\bin\10.3.75.0\HostOE.dll

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="http://google.atcomet.com/b/"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Search Bar"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://global.acer.com"
"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Start Page"="http://www.msn.com/"


--------------------\\ Recherche d'autres infections


C:\DOCUME~1\FREDER~1\LOCALS~1\APPLIC~1\owykm.dat
C:\DOCUME~1\FREDER~1\LOCALS~1\APPLIC~1\owykm_nav.dat
C:\DOCUME~1\FREDER~1\LOCALS~1\APPLIC~1\owykm_navps.dat
C:\DOCUME~1\FREDER~1\LOCALS~1\APPLIC~1\OWYKM.EXE
==> EGDACCESS <==




1 - "C:\ToolBar SD\TB_1.txt" - 03/02/2009| 9:22 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 05/02/2009|19:56 - Option : [2]

-----------\\ Fin du rapport a 19:56:27,95

bonjours,
Quand je lance la procedure pour navilog1 ,apres avoir choisi l option 2 et avant que le pc redemarre une fenetre editeur de registre aparait "la modification du registre a ete desactive par votre administrateur" puis je clique sur ok
le pc redemarre et je n ai pas de message il redemarre comme d'habitude.
merci

bonjours
ne m oublier pas car je suis vraiment embeter
merci

voici le rapport demander
Search Navipromo version 3.7.1 commencé le 07/02/2009 à 15:51:39,57

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1

Mise à jour le 02.01.2009 à 19h00 par IL-MAFIOSO

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) 64 Processor 3400+ )
BIOS : )Phoenix - Award WorkstationBIOS v6.00PG
USER : Frederic Blouin ( Administrator )
BOOT : Normal boot

Antivirus : Avira AntiVir PersonalEdition Classic 8.0.1.30 (Activated)


C:\ (Local Disk) - FAT32 - Total:72 Go (Free:33 Go)
D:\ (Local Disk) - NTFS - Total:72 Go (Free:66 Go)
E:\ (CD or DVD)
F:\ (CD or DVD)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (USB)
K:\ (Local Disk) - NTFS - Total:232 Go (Free:56 Go)


Recherche executé en mode normal

*** Recherche Programmes installés ***

Favorit

*** Recherche dossiers dans "C:\WINDOWS" ***


*** Recherche dossiers dans "C:\Program Files" ***


*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudÉ~1\progra~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudÉ~1" ***


*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\Frederic Blouin\applic~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\Frederic Blouin\locals~1\applic~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\Frederic Blouin\menud+~1\progra~1" ***


*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net



*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\Documents and Settings\Frederic Blouin\locals~1\applic~1" *



*** Recherche fichiers ***



*** Recherche clés spécifiques dans le Registre ***
!! Les clés trouvées ne sont pas forcément infectées !!

HKEY_CURRENT_USER\Software\Lanconfig

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"owykm"="\"c:\\documents and settings\\frederic blouin\\local settings\\application data\\owykm.exe\" owykm"


*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :


* Dans "C:\Documents and Settings\Frederic Blouin\locals~1\applic~1" :

OWYKM.EXE trouvé !
owykm.dat trouvé !
owykm_nav.dat trouvé !
owykm_navps.dat trouvé !

3)Recherche Certificats :

Certificat Egroup trouvé !
Certificat Electronic-Group trouvé !
Certificat Montorgueil absent !
Certificat OOO-Favorit trouvé !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche autres dossiers et fichiers connus :



*** Analyse terminée le 07/02/2009 à 15:55:33,42 ***

encore merci

J'apprécie ce genre de comportement...

Double clique sur le raccourci de Navilog1 présent sur ton Bureau.
Suis les instructions. Choisis ensuite l'option 2 puis valide.
Laisse toi guider et réponds aux questions éventuelles.

L'utilitaire va t'informer qu'il va redémarrer l'ordinateur.
**Ferme toutes les fenêtres ouvertes et enregistre tes documents personnels ouverts**
Appuie maintenant sur une touche, comme demandé.
(si ton PC ne redémarre pas automatiquement, fais-le manuellement)

Patiente jusqu'à l'apparition de ce message :
"*** Nettoyage Termine le ..... ***"

Le Bloc-notes va s'ouvrir.
Sauvegarde le rapport de manière à le retrouver.
Referme le Bloc-notes. Ton bureau va maintenant réapparaître.

NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.
Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."
Tape explorer puis valide.

Poste le rapport sauvegardé auparavant (C:\cleannavi.txt)
Ainsi qu'un nouveau rapport Hijackthis.

Ferme Internet Explorer puis Démarrer/Panneau de Configuration/Options Internet.
Choisis l'onglet Contenu puis onglet Certificats.
Si tu trouves le programme VIP (en particulier dans Editeurs approuvés), Dis-le moi.

.

bonjour
j ai windows xp et pas vista
merci

ca ne marche pas j obtiens le message suivant :
pour effectuer un nettoyage avec choix 2
vous devez avoir fait auparavant une recherche avec le choix 1 et transmis le rapport au helper qui vous a pris en charge
l outil va etre interrompu
appuyer sur une touche pour continuer

donc j appuye et je reviens sur mon bureau

apres avoir poste le rapport
je lance la procedure pour navilog1 ,apres avoir choisi l option 2 et avant que le pc redemarre une fenetre editeur de registre aparait "la modification du registre a ete desactive par votre administrateur" puis je clique sur ok
le pc redemarre et je n ai pas de message il redemarre comme d'habitude.

bonsoir
ca ne marche toujours pas
le message n apparait plus avant de redemarrer
mais quand le pc redemarre je n ai toujours pas de message
merci

bonjours ,
voici le rapport

ComboFix 09-02-08.02 - Frederic Blouin 2009-02-10 7:17:10.1 - [color=red]FAT32[/color]x86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.1022.598 [GMT 1:00]
Lancé depuis: c:\documents and settings\Frederic Blouin\Bureau\combofix.exe
AV: Avira AntiVir PersonalEdition Classic *On-access scanning disabled* (Updated)
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\All Users\Application Data\ZangoSA
c:\documents and settings\All Users\Application Data\ZangoSA\ZangoSA.dat
c:\documents and settings\All Users\Application Data\ZangoSA\ZangoSA_kyf.dat
c:\documents and settings\All Users\Application Data\ZangoSA\ZangoSAAbout.mht
c:\documents and settings\All Users\Application Data\ZangoSA\ZangoSAau.dat
c:\documents and settings\All Users\Application Data\ZangoSA\ZangoSAEula.mht
c:\documents and settings\Frederic Blouin\Application Data\inst.exe
c:\documents and settings\Frederic Blouin\Local Settings\Application Data\inetinfo.exe
c:\documents and settings\Frederic Blouin\Local Settings\Application Data\lsass.exe
c:\documents and settings\Frederic Blouin\Local Settings\Application Data\owykm.dat
c:\documents and settings\Frederic Blouin\Local Settings\Application Data\OWYKM.EXE
c:\documents and settings\Frederic Blouin\Local Settings\Application Data\owykm_nav.dat
c:\documents and settings\Frederic Blouin\Local Settings\Application Data\owykm_navps.dat
c:\documents and settings\Frederic Blouin\Local Settings\Application Data\services.exe
c:\documents and settings\Frederic Blouin\Menu Démarrer\Programmes\moviebox
c:\documents and settings\Frederic Blouin\Menu Démarrer\Programmes\moviebox\Uninstall.lnk
c:\program files\moviebox
c:\program files\moviebox\Uninstall.exe
c:\windows\system32\cmd-brontok.exe
c:\windows\system32\kdnij.exe
c:\windows\system32\Process.exe
c:\windows\system32\winsvcup.exe
c:\windows\system32\winupsvc.exe

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_OREANS32
-------\Service_oreans32


((((((((((((((((((((((((((((( Fichiers créés du 2009-01-10 au 2009-02-10 ))))))))))))))))))))))))))))))))))))
.

2009-02-03 19:01 . 2009-02-03 19:01 410,984 --a------ c:\windows\system32\deploytk.dll
2009-02-03 09:25 . 2009-02-03 09:25 <REP> d-------- c:\program files\Navilog1
2009-02-03 09:21 . 2009-02-03 09:21 <REP> d-------- C:\ToolBar SD
2009-02-03 08:19 . 2009-02-03 08:19 5,120 --ahs---- C:\Thumbs.db
2009-02-02 08:26 . 2009-02-02 08:26 <REP> d-------- C:\Rooter$
2009-02-01 18:57 . 2009-02-01 18:57 <REP> d-------- c:\program files\Avira
2009-02-01 18:57 . 2009-02-01 18:57 <REP> d-------- c:\documents and settings\All Users\Application Data\Avira
2009-02-01 14:17 . 2009-02-01 14:17 <REP> d-------- c:\program files\Yahoo!
2009-02-01 14:17 . 2009-02-01 14:17 <REP> d-------- c:\program files\CCleaner
2009-02-01 14:17 . 2009-02-01 14:17 <REP> d-------- c:\documents and settings\Frederic Blouin\Application Data\Yahoo!
2009-02-01 14:17 . 2009-02-01 14:17 <REP> d-------- c:\documents and settings\All Users\Application Data\Yahoo! Companion
2009-02-01 13:44 . 2009-02-01 13:44 <REP> d-------- c:\program files\Trend Micro
2009-02-01 09:59 . 2009-02-01 09:59 <REP> d--h----- c:\windows\PIF
2009-02-01 09:58 . 2009-02-01 09:59 <REP> d-------- c:\program files\Torrents Open Registrations Checker
2009-02-01 09:31 . 2009-02-01 09:31 8,192 --ahs---- c:\windows\Thumbs.db
2009-01-31 12:46 . 2009-01-31 12:46 <REP> d-------- c:\program files\WinAVI MP4 Converter
2009-01-30 08:53 . 2009-02-01 09:35 54,156 --ah----- c:\windows\QTFont.qfn
2009-01-30 08:53 . 2009-01-30 08:53 1,409 --a------ c:\windows\QTFont.for
2009-01-30 08:53 . 2009-01-30 09:39 42 --a------ c:\windows\IniFile1.ini

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-12-14 20:32 --------- d-----w c:\program files\MSXML 4.0
2008-12-13 15:55 --------- d-----w c:\program files\Fichiers communs\Nero
2008-12-13 15:55 --------- d-----w c:\documents and settings\All Users\Application Data\Nero
2008-12-13 15:15 --------- d-----w c:\program files\uTorrent
2008-12-13 15:15 --------- d-----w c:\documents and settings\Frederic Blouin\Application Data\uTorrent
2008-12-12 17:02 3,088,896 ------w c:\windows\system32\dllcache\mshtml.dll
2008-12-11 10:57 333,952 ----a-w c:\windows\system32\drivers\srv.sys
2008-12-11 10:57 333,952 ------w c:\windows\system32\dllcache\srv.sys
2007-11-06 17:44 47,360 ----a-w c:\documents and settings\Frederic Blouin\Application Data\pcouffin.sys
2007-05-01 08:36 81,920 ----a-w c:\documents and settings\Frederic Blouin\Application Data\ezpinst.exe
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WOOKIT"="c:\progra~1\WANADOO\Shell.exe" [2004-08-23 122880]
"Tok-Cirrhatus-3741"="c:\documents and settings\Frederic Blouin\Local Settings\Application Data\smss.exe" [2008-10-28 0]
"MsnMsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 5724184]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LaunchApp"="Alaunch" [X]
"WOOWATCH"="c:\progra~1\WANADOO\Watch.exe" [2004-08-23 20480]
"WOOTASKBARICON"="c:\progra~1\WANADOO\GestMaj.exe" [2004-10-14 32768]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-02-03 136600]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2004-11-02 32768]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-06-15 98304]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 455168]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-09-17 81920]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-09-17 8491008]
"ntiMUI"="c:\program files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe" [2005-05-11 45056]
"NeroFilterCheck"="c:\program files\Fichiers communs\Nero\Lib\NeroCheck.exe" [2008-06-19 570664]
"NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2008-06-08 2221352]
"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-05 59392]
"MediaSync"="c:\program files\Acer\Acer eConsole\MediaSync.exe" [2005-09-21 425984]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-05 208952]
"eRecoveryService"="c:\acer\Empowering Technology\eRecovery\Monitor.exe" [2005-10-31 393216]
"EPSON Stylus DX3800 Series"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE" [2005-02-08 98304]
"AspireService"="c:\program files\Acer\Acer eMode Management\AspireService.exe" [2005-09-29 114688]
"avgnt"="c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 266497]
"WD Button Manager"="WDBtnMgr.exe" [2007-04-19 c:\windows\system32\WDBtnMgr.exe]
"SoundMan"="SOUNDMAN.EXE" [2005-09-22 c:\windows\soundman.exe]
"nwiz"="nwiz.exe" [2007-09-17 c:\windows\system32\nwiz.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\eMule\\emule.exe"=
"c:\\Program Files\\EA Games\\Command and Conquer Generals\\game.dat"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"c:\\Program Files\\BitTorrent\\btdownloadgui.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"19884:TCP"= 19884:TCP:BitComet 19884 TCP
"19884:UDP"= 19884:UDP:BitComet 19884 UDP

R3 ovt530;Dual Mode USB Camera OV530;c:\windows\system32\drivers\ov530vid.sys [2006-02-08 173939]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{888bc884-1be6-11dc-a34c-00155805a0fb}]
\Shell\AutoRun\command - L:\LaunchU3.exe -a
.
Contenu du dossier 'Tâches planifiées'

2009-02-10 c:\windows\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job
- c:\program files\Windows Live Toolbar\MSNTBUP.EXE [2007-10-19 11:20]
.
- - - - ORPHELINS SUPPRIMES - - - -

URLSearchHooks-{6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - c:\program files\Kiwee Toolbar2\1.2.116\KiweeIEToolbar.dll
WebBrowser-{6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - c:\program files\Kiwee Toolbar2\1.2.116\KiweeIEToolbar.dll
HKCU-Run-owykm - c:\documents and settings\frederic blouin\local settings\application data\owykm.exe
HKCU-Run-MSMSGS - c:\documents and settings\Frederic Blouin\Bureau\msmsgs.exe
HKCU-Run-BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} - c:\program files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
HKCU-Run-ares - c:\program files\Ares\Ares.exe


.
------- Examen supplémentaire -------
.
uStart Page = hxxp://google.atcomet.com/b/
mWindow Title =
uInternet Connection Wizard,ShellNext = iexplore
IE: &Windows Live Search - c:\program files\Windows Live Toolbar\msntb.dll/search.htm
IE: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Ouvrir dans un nouvel onglet d'arrière-plan - c:\program files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?81dbe12862b14cbebefebba09c656447
IE: Ouvrir dans un nouvel onglet de premier plan - c:\program files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?81dbe12862b14cbebefebba09c656447
IE: { - c:\program files\Messenger\msmsgs.exe
DPF: CabBuilder - hxxp://ak.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-10 07:20:49
Windows 5.1.2600 Service Pack 3 FAT NTAPI

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\AVIRA\ANTIVIR PERSONALEDITION CLASSIC\SCHED.EXE
c:\program files\Acer\Acer eConsole\MediaServerService.exe
c:\program files\Avira\AntiVir PersonalEdition Classic\avguard.exe
c:\windows\System32\FTRTSVC.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Nero\Nero8\Nero BackItUp\NBService.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\IoctlSvc.exe
c:\program files\Canon\CAL\CALMAIN.exe
c:\progra~1\WANADOO\TaskBarIcon.exe
c:\windows\SYSTEM32\RUNDLL32.EXE
c:\windows\SYSTEM32\RUNDLL32.EXE
c:\progra~1\WANADOO\GestionnaireInternet.exe
c:\progra~1\WANADOO\ComComp.exe
c:\progra~1\WANADOO\Toaster.exe
c:\progra~1\WANADOO\Inactivity.exe
c:\progra~1\WANADOO\PollingModule.exe
c:\windows\system32\wbem\wmiapsrv.exe
.
**************************************************************************
.
Heure de fin: 2009-02-10 7:22:32 - La machine a redémarré [Frederic Blouin]
ComboFix-quarantined-files.txt 2009-02-10 06:22:30

Avant-CF: 36,149,166,080 octets libres
Après-CF: 36,814,684,160 octets libres

189 --- E O F --- 2009-02-01 12:22:03


merci

bonjour ,
excuse moi pour le retard
j avais un probleme avec ma connection
voici le rapport 1
ComboFix 09-02-08.02 - Frederic Blouin 2009-02-13 17:00:25.2 - [color=red]FAT32[/color]x86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.1022.615 [GMT 1:00]
Lancé depuis: c:\documents and settings\Frederic Blouin\Bureau\combofix.exe
Commutateurs utilisés :: c:\documents and settings\Frederic Blouin\Bureau\CFScript.txt
AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated)
* Un nouveau point de restauration a été créé

FILE ::
c:\documents and settings\Frederic Blouin\Local Settings\Application Data\smss.exe
.

((((((((((((((((((((((((((((( Fichiers créés du 2009-01-13 au 2009-02-13 ))))))))))))))))))))))))))))))))))))
.

2009-02-13 03:00 . 2009-02-13 03:00 <REP> d-------- c:\windows\LastGood
2009-02-03 19:01 . 2009-02-03 19:01 410,984 --a------ c:\windows\system32\deploytk.dll
2009-02-03 09:25 . 2009-02-03 09:25 <REP> d-------- c:\program files\Navilog1
2009-02-03 09:21 . 2009-02-03 09:21 <REP> d-------- C:\ToolBar SD
2009-02-03 08:19 . 2009-02-03 08:19 5,120 --ahs---- C:\Thumbs.db
2009-02-02 08:26 . 2009-02-02 08:26 <REP> d-------- C:\Rooter$
2009-02-01 18:57 . 2009-02-01 18:57 <REP> d-------- c:\program files\Avira
2009-02-01 18:57 . 2009-02-01 18:57 <REP> d-------- c:\documents and settings\All Users\Application Data\Avira
2009-02-01 14:17 . 2009-02-01 14:17 <REP> d-------- c:\program files\Yahoo!
2009-02-01 14:17 . 2009-02-01 14:17 <REP> d-------- c:\program files\CCleaner
2009-02-01 14:17 . 2009-02-01 14:17 <REP> d-------- c:\documents and settings\Frederic Blouin\Application Data\Yahoo!
2009-02-01 14:17 . 2009-02-01 14:17 <REP> d-------- c:\documents and settings\All Users\Application Data\Yahoo! Companion
2009-02-01 13:44 . 2009-02-01 13:44 <REP> d-------- c:\program files\Trend Micro
2009-02-01 09:59 . 2009-02-01 09:59 <REP> d--h----- c:\windows\PIF
2009-02-01 09:58 . 2009-02-01 09:59 <REP> d-------- c:\program files\Torrents Open Registrations Checker
2009-02-01 09:31 . 2009-02-01 09:31 8,192 --ahs---- c:\windows\Thumbs.db
2009-01-31 12:46 . 2009-01-31 12:46 <REP> d-------- c:\program files\WinAVI MP4 Converter
2009-01-30 08:53 . 2009-02-01 09:35 54,156 --ah----- c:\windows\QTFont.qfn
2009-01-30 08:53 . 2009-01-30 08:53 1,409 --a------ c:\windows\QTFont.for
2009-01-30 08:53 . 2009-01-30 09:39 42 --a------ c:\windows\IniFile1.ini

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-12-14 20:32 --------- d-----w c:\program files\MSXML 4.0
2008-12-13 15:55 --------- d-----w c:\program files\Fichiers communs\Nero
2008-12-13 15:55 --------- d-----w c:\documents and settings\All Users\Application Data\Nero
2008-12-13 15:15 --------- d-----w c:\program files\uTorrent
2008-12-13 15:15 --------- d-----w c:\documents and settings\Frederic Blouin\Application Data\uTorrent
2008-12-12 17:02 3,088,896 ------w c:\windows\system32\dllcache\mshtml.dll
2008-12-11 10:57 333,952 ------w c:\windows\system32\dllcache\srv.sys
2007-11-06 17:44 47,360 ----a-w c:\documents and settings\Frederic Blouin\Application Data\pcouffin.sys
2007-05-01 08:36 81,920 ----a-w c:\documents and settings\Frederic Blouin\Application Data\ezpinst.exe
.

((((((((((((((((((((((((((((( SnapShot@2009-02-10_ 7.21.53.48 )))))))))))))))))))))))))))))))))))))))))
.
- 2009-01-15 02:00:40 1,165,584 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\accicons.exe
+ 2009-02-13 02:00:56 1,165,584 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\accicons.exe
- 2009-01-15 02:00:40 20,240 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\cagicon.exe
+ 2009-02-13 02:00:58 20,240 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\cagicon.exe
- 2009-01-15 02:00:40 159,504 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\inficon.exe
+ 2009-02-13 02:00:56 159,504 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\inficon.exe
- 2009-01-15 02:00:40 217,864 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\misc.exe
+ 2009-02-13 02:00:58 217,864 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\misc.exe
- 2009-01-15 02:00:40 18,704 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\mspicons.exe
+ 2009-02-13 02:00:58 18,704 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\mspicons.exe
- 2009-01-15 02:00:40 35,088 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\oisicon.exe
+ 2009-02-13 02:00:58 35,088 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\oisicon.exe
- 2009-01-15 02:00:40 845,584 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\outicon.exe
+ 2009-02-13 02:00:56 845,584 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\outicon.exe
- 2009-01-15 02:00:40 922,384 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pptico.exe
+ 2009-02-13 02:00:56 922,384 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pptico.exe
- 2009-01-15 02:00:40 272,648 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pubs.exe
+ 2009-02-13 02:00:58 272,648 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\pubs.exe
- 2009-01-15 02:00:40 888,080 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\wordicon.exe
+ 2009-02-13 02:00:58 888,080 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\wordicon.exe
- 2009-01-15 02:00:40 1,172,240 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\xlicons.exe
+ 2009-02-13 02:00:56 1,172,240 ----a-r c:\windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\xlicons.exe
- 2009-01-10 01:35:28 20,853,704 ----a-w c:\windows\system32\MRT.exe
+ 2009-02-03 23:21:12 21,244,864 ----a-w c:\windows\system32\MRT.exe
- 2007-11-30 11:19:06 18,296 ------w c:\windows\system32\spmsg.dll
+ 2008-07-09 07:40:22 18,296 ------w c:\windows\system32\spmsg.dll
+ 2009-02-12 16:12:06 16,384 ----a-w c:\windows\temp\Perflib_Perfdata_fc.dat
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WOOKIT"="c:\progra~1\WANADOO\Shell.exe" [2004-08-23 122880]
"MsnMsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 5724184]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LaunchApp"="Alaunch" [X]
"WOOWATCH"="c:\progra~1\WANADOO\Watch.exe" [2004-08-23 20480]
"WOOTASKBARICON"="c:\progra~1\WANADOO\GestMaj.exe" [2004-10-14 32768]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-02-03 136600]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2004-11-02 32768]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-06-15 98304]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 455168]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-09-17 81920]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-09-17 8491008]
"ntiMUI"="c:\program files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe" [2005-05-11 45056]
"NeroFilterCheck"="c:\program files\Fichiers communs\Nero\Lib\NeroCheck.exe" [2008-06-19 570664]
"NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2008-06-08 2221352]
"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-05 59392]
"MediaSync"="c:\program files\Acer\Acer eConsole\MediaSync.exe" [2005-09-21 425984]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-05 208952]
"eRecoveryService"="c:\acer\Empowering Technology\eRecovery\Monitor.exe" [2005-10-31 393216]
"EPSON Stylus DX3800 Series"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE" [2005-02-08 98304]
"AspireService"="c:\program files\Acer\Acer eMode Management\AspireService.exe" [2005-09-29 114688]
"avgnt"="c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 266497]
"WD Button Manager"="WDBtnMgr.exe" [2007-04-19 c:\windows\system32\WDBtnMgr.exe]
"SoundMan"="SOUNDMAN.EXE" [2005-09-22 c:\windows\soundman.exe]
"nwiz"="nwiz.exe" [2007-09-17 c:\windows\system32\nwiz.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\eMule\\emule.exe"=
"c:\\Program Files\\EA Games\\Command and Conquer Generals\\game.dat"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"c:\\Program Files\\BitTorrent\\btdownloadgui.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"19884:TCP"= 19884:TCP:BitComet 19884 TCP
"19884:UDP"= 19884:UDP:BitComet 19884 UDP

R3 ovt530;Dual Mode USB Camera OV530;c:\windows\system32\drivers\ov530vid.sys [2006-02-08 173939]

--- Autres Services/Pilotes en mémoire ---

*NewlyCreated* - INT15.SYS

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{888bc884-1be6-11dc-a34c-00155805a0fb}]
\Shell\AutoRun\command - L:\LaunchU3.exe -a
.
Contenu du dossier 'Tâches planifiées'

2009-02-13 c:\windows\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job
- c:\program files\Windows Live Toolbar\MSNTBUP.EXE [2007-10-19 11:20]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://google.atcomet.com/b/
mWindow Title =
IE: &Windows Live Search - c:\program files\Windows Live Toolbar\msntb.dll/search.htm
IE: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Ouvrir dans un nouvel onglet d'arrière-plan - c:\program files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?81dbe12862b14cbebefebba09c656447
IE: Ouvrir dans un nouvel onglet de premier plan - c:\program files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?81dbe12862b14cbebefebba09c656447
IE: { - c:\program files\Messenger\msmsgs.exe
DPF: CabBuilder - hxxp://ak.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-13 17:01:42
Windows 5.1.2600 Service Pack 3 FAT NTAPI

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
Heure de fin: 2009-02-13 17:02:28
ComboFix-quarantined-files.txt 2009-02-13 16:02:28
ComboFix2.txt 2009-02-10 06:22:34

Avant-CF: 36 397 842 432 octets libres
Après-CF: 36,498,210,816 octets libres

164 --- E O F --- 2009-02-13 02:02:18

bonjour
j avais un probleme de connexion maintenant c regler
je vais faire la suite

bonjour
reposte un log hijackthis stp

re
~Lance Hijackthis “Do a system scan only”.
Coche les lignes qui suivent si encore présentes et uniquement celles-là.

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.orange.fr (file missing) (HKCU)
O16 - DPF: CabBuilder - http://ak.imgag.com/imgag/kiw/tool [...] ontrol.cab
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://cid-2ea799fc0cffff54.spaces [...] nPUpld.cab



Clique sur Fix checked (en bas à gauche)


Fais une analyse antivirus en ligne sur Kaspersky avec Internet Explorer.

• Autorise les Active x.
• Clique sur Démarrer Online Scanner.
• Sélectionne le poste de travail comme analyse. Enregistres sous le rapport en format .txt.
• Colle son rapport ici.
• Poste un nouveau rapport Hijackthis.

Aide : Comment faire un scan en ligne avec Kaspersky.

puis le rapport hijackthis
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:13:04, on 25/02/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\system32\WDBtnMgr.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\PROGRA~1\WANADOO\TaskBarIcon.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Acer\Acer eConsole\MediaSync.exe
C:\Acer\Empowering Technology\eRecovery\Monitor.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Acer\Acer eMode Management\AspireService.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Wanadoo\GestionnaireInternet.exe
C:\Program Files\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\Wanadoo\Watch.exe
C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\explorer.exe
C:\Program Files\VideoLAN\VLC\vlc.exe
C:\PROGRA~1\WANADOO\WOOBrowser\WOOBrowser.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.atcomet.com/b/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\WANADOO\SEARCH~1.DLL
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\WANADOO\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\WANADOO\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [WD Button Manager] WDBtnMgr.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [ntiMUI] c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [MediaSync] C:\Program Files\Acer\Acer eConsole\MediaSync.exe
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe
O4 - HKLM\..\Run: [EPSON Stylus DX3800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE /P26 "EPSON Stylus DX3800 Series" /O6 "USB001" /M "Stylus DX3800"
O4 - HKLM\..\Run: [AspireService] C:\Program Files\Acer\Acer eMode Management\AspireService.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\WANADOO\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?81dbe12862b14cbebefebba09c656447
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?81dbe12862b14cbebefebba09c656447
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/bina [...] b56986.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/bina [...] b56907.cab
O23 - Service: Acer Media Server - Acer Inc. - C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe

--
End of file - 10526 bytes

merci

bonjour j ai encore un souci
c mais deux lecteur dvd qui rame
je ne pe plus lire des cd audio et dvd
car il rame de trop merci encore pour tout