Sujet Précédent Sujet Suivant

Barre d outil infecté.. rapport toolbar

ripou -  
jlpjlp Messages postés 52399 Statut Contributeur sécurité -
Bonjour,
suite a un virus trojan et rogue.eorezo ma barre d outil a était infecté. je pense avoir réussi a supprimer les deux premier mais il reste des infection j ai lancer toolbar SD dont voici le rapport:

-----------\\ ToolBar S&D 1.2.8 XP/Vista

( : )
USER : Administrateur ( Administrator )

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [1] ( 28/12/2008|18:06 )

-----------\\ Recherche de Fichiers / Dossiers ...

C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\res
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\resFF
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\temp
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\res\alerts.gif
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\res\alerts_over.gif
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\res\alerts_rec.gif
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\res\alerts_rec_over.gif
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\res\chevron-small.gif
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\res\DealioSearch.html
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\res\deals-leftcap.gif
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\res\deal_report.jpg
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\res\ebay_login.jpg
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\res\err_mainwindow.html
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\res\err_toolbar.html
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\res\global_scripts.js
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\res\headerbgthin.jpg
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\res\highlight-bg.png
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\res\logo.gif
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\res\logo_over.gif
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\res\man_toolbar.css
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\res\man_toolbar.html
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\res\man_toolbar.js
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\res\man_toolbarl.js
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\res\post-this-deal.gif
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\res\post-this-deal_over.gif
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\res\scripts.js
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\res\scroller.js
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\res\search-chevron.gif
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\res\search-chevron_over.gif
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\res\search_bg_blink.gif
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\res\separator.gif
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\res\settings.gif
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\res\settings_over.gif
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\res\yahoo-search.png
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\resFF\deal_report.jpg
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\resFF\ebay_login.jpg
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\index.76.35
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.10.76
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.109.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.110.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.12.52
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.13.58
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.130.58
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.135.50
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.153.44
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.155.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.156.49
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.16.60
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.161.52
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.178.66
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.184.55
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.188.52
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.189.45
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.196.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.198.56
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.199.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.200.53
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.201.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.202.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.203.71
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.205.62
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.213.71
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.214.49
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.215.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.216.67
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.217.67
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.218.52
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.219.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.220.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.221.57
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.222.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.223.68
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.226.68
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.227.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.228.62
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.229.76
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.23.63
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.239.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.24.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.240.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.241.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.242.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.243.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.244.63
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.245.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.247.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.248.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.249.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.250.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.251.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.252.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.253.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.254.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.255.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.256.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.257.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.279.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.28.58
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.282.75
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.283.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.284.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.289.67
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.290.62
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.291.61
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.296.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.297.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.304.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.307.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.308.75
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.31.47
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.310.46
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.311.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.315.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.316.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.317.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.318.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.319.49
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.32.48
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.334.44
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.335.60
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.336.44
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.337.44
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.338.75
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.339.47
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.34.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.340.47
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.341.47
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.349.50
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.35.48
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.350.50
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.351.51
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.352.54
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.353.51
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.354.51
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.357.62
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.358.52
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.359.52
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.360.53
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.361.54
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.362.68
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.363.58
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.364.54
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.365.53
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.367.56
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.368.58
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.369.55
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.370.56
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.371.56
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.372.57
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.373.55
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.375.56
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.376.57
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.377.55
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.378.65
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.384.58
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.386.71
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.387.59
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.388.59
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.389.59
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.390.60
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.391.60
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.392.60
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.393.60
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.394.60
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.396.61
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.397.61
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.398.60
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.399.60
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.403.61
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.404.63
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.405.61
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.406.61
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.407.76
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.408.63
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.409.61
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.412.62
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.413.62
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.414.62
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.415.62
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.416.62
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.417.62
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.418.62
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.419.62
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.420.62
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.421.62
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.423.63
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.424.63
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.425.63
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.426.63
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.427.63
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.428.65
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.429.63
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.430.63
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.432.65
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.433.64
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.434.65
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.435.64
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.436.76
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.437.64
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.438.71
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.439.71
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.440.75
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.442.73
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.443.73
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.444.73
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.445.68
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.446.69
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.450.67
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.451.67
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.452.68
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.453.68
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.454.69
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.456.69
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.457.75
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.458.70
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.459.70
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.460.69
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.462.74
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.463.69
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.464.70
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.465.68
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.468.70
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.469.70
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.470.70
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.471.73
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.472.70
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.478.74
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.479.73
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.480.68
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.481.71
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.482.74
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.49.67
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.50.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.500.71
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.501.74
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.502.71
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.51.69
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.52.72
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.520.76
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.521.76
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.522.76
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.53.51
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.531.76
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.532.75
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.534.75
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.54.47
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.55.45
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.56.69
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.57.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.58.47
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.593.76
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.595.76
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.63.57
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.66.47
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.70.75
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rules\rules.1.71.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\index.3.67.22
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.109.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.178.66
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.198.56
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.245.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.247.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.279.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.283.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.284.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.289.67
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.290.62
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.297.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.315.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.319.49
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.335.60
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.337.44
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.340.47
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.360.53
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.386.59
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.388.59
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.391.60
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.398.60
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.399.60
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.403.61
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.404.63
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.405.61
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.406.61
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.407.61
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.408.63
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.409.61
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.412.62
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.413.62
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.414.62
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.415.62
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.416.62
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.417.62
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.418.62
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.419.62
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.420.62
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.421.62
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.424.63
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.427.63
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.432.65
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.49.67
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.51.46
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.52.57
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.53.51
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.54.47
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.57.43
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\rulesFF\rules.3.58.47
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\temp\dealio-14241.log
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\temp\dod_cache.xml
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3820_2256_4.html
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3820_2752_20.html
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3820_3328_12.html
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3956_3988_3.html
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_888_3792_4.html
C:\Program Files\Dealio
C:\Program Files\Dealio\DealioAU.exe
C:\Program Files\Dealio\kb127
C:\Program Files\Dealio\SearchSettingsKit.exe
C:\Program Files\Dealio\kb127\Dealio Deskbar.exe
C:\Program Files\Dealio\kb127\Dealio.dll
C:\Program Files\Dealio\kb127\DealioRes409.dll
C:\Program Files\Dealio\kb127\res
C:\Program Files\Dealio\kb127\resDN
C:\Program Files\Dealio\kb127\resFF
C:\Program Files\Dealio\kb127\rules
C:\Program Files\Dealio\kb127\rulesFF
C:\Program Files\Dealio\kb127\temp
C:\Program Files\Dealio\kb127\res\alerts.gif
C:\Program Files\Dealio\kb127\res\alerts_over.gif
C:\Program Files\Dealio\kb127\res\alerts_rec.gif
C:\Program Files\Dealio\kb127\res\alerts_rec_over.gif
C:\Program Files\Dealio\kb127\res\chevron-small.gif
C:\Program Files\Dealio\kb127\res\DealioSearch.html
C:\Program Files\Dealio\kb127\res\deals-leftcap.gif
C:\Program Files\Dealio\kb127\res\deal_report.jpg
C:\Program Files\Dealio\kb127\res\ebay_login.jpg
C:\Program Files\Dealio\kb127\res\err_mainwindow.html
C:\Program Files\Dealio\kb127\res\err_toolbar.html
C:\Program Files\Dealio\kb127\res\global_scripts.js
C:\Program Files\Dealio\kb127\res\headerbgthin.jpg
C:\Program Files\Dealio\kb127\res\highlight-bg.png
C:\Program Files\Dealio\kb127\res\logo.gif
C:\Program Files\Dealio\kb127\res\logo_over.gif
C:\Program Files\Dealio\kb127\res\man_toolbar.css
C:\Program Files\Dealio\kb127\res\man_toolbar.html
C:\Program Files\Dealio\kb127\res\man_toolbar.js
C:\Program Files\Dealio\kb127\res\man_toolbarl.js
C:\Program Files\Dealio\kb127\res\post-this-deal.gif
C:\Program Files\Dealio\kb127\res\post-this-deal_over.gif
C:\Program Files\Dealio\kb127\res\scripts.js
C:\Program Files\Dealio\kb127\res\scroller.js
C:\Program Files\Dealio\kb127\res\search-chevron.gif
C:\Program Files\Dealio\kb127\res\search-chevron_over.gif
C:\Program Files\Dealio\kb127\res\search_bg_blink.gif
C:\Program Files\Dealio\kb127\res\separator.gif
C:\Program Files\Dealio\kb127\res\settings.gif
C:\Program Files\Dealio\kb127\res\settings_over.gif
C:\Program Files\Dealio\kb127\res\yahoo-search.png
C:\Program Files\Dealio\kb127\resDN\bottom.gif
C:\Program Files\Dealio\kb127\resDN\chevron_down.gif
C:\Program Files\Dealio\kb127\resDN\chevron_up.gif
C:\Program Files\Dealio\kb127\resDN\close.gif
C:\Program Files\Dealio\kb127\resDN\deskbar.css
C:\Program Files\Dealio\kb127\resDN\deskbar.js
C:\Program Files\Dealio\kb127\resDN\dispatch_helper.js
C:\Program Files\Dealio\kb127\resDN\ebay_compatible.jpg
C:\Program Files\Dealio\kb127\resDN\logo.gif
C:\Program Files\Dealio\kb127\resDN\logo_chevron_bkg.gif
C:\Program Files\Dealio\kb127\resDN\losing.gif
C:\Program Files\Dealio\kb127\resDN\lost.gif
C:\Program Files\Dealio\kb127\resDN\man_deskbar.html
C:\Program Files\Dealio\kb127\resDN\menu_arrow.gif
C:\Program Files\Dealio\kb127\resDN\menu_check.gif
C:\Program Files\Dealio\kb127\resDN\no_image.gif
C:\Program Files\Dealio\kb127\resDN\prod_img.gif
C:\Program Files\Dealio\kb127\resDN\search_chevron.gif
C:\Program Files\Dealio\kb127\resDN\spacer.gif
C:\Program Files\Dealio\kb127\resDN\textfield_bkg.gif
C:\Program Files\Dealio\kb127\resDN\top.gif
C:\Program Files\Dealio\kb127\resDN\unknown.gif
C:\Program Files\Dealio\kb127\resDN\winning.gif
C:\Program Files\Dealio\kb127\resDN\won.gif
C:\Program Files\Dealio\kb127\resFF\deal_report.jpg
C:\Program Files\Dealio\kb127\resFF\ebay_login.jpg
C:\Program Files\Dealio\kb127\rules\index.76.35
C:\Program Files\Dealio\kb127\rules\rules.1.10.76
C:\Program Files\Dealio\kb127\rules\rules.1.109.43
C:\Program Files\Dealio\kb127\rules\rules.1.110.43
C:\Program Files\Dealio\kb127\rules\rules.1.12.52
C:\Program Files\Dealio\kb127\rules\rules.1.13.58
C:\Program Files\Dealio\kb127\rules\rules.1.130.58
C:\Program Files\Dealio\kb127\rules\rules.1.135.50
C:\Program Files\Dealio\kb127\rules\rules.1.153.44
C:\Program Files\Dealio\kb127\rules\rules.1.155.43
C:\Program Files\Dealio\kb127\rules\rules.1.156.49
C:\Program Files\Dealio\kb127\rules\rules.1.16.60
C:\Program Files\Dealio\kb127\rules\rules.1.161.52
C:\Program Files\Dealio\kb127\rules\rules.1.178.66
C:\Program Files\Dealio\kb127\rules\rules.1.184.55
C:\Program Files\Dealio\kb127\rules\rules.1.188.52
C:\Program Files\Dealio\kb127\rules\rules.1.189.45
C:\Program Files\Dealio\kb127\rules\rules.1.196.43
C:\Program Files\Dealio\kb127\rules\rules.1.198.56
C:\Program Files\Dealio\kb127\rules\rules.1.199.43
C:\Program Files\Dealio\kb127\rules\rules.1.200.53
C:\Program Files\Dealio\kb127\rules\rules.1.201.43
C:\Program Files\Dealio\kb127\rules\rules.1.202.43
C:\Program Files\Dealio\kb127\rules\rules.1.203.71
C:\Program Files\Dealio\kb127\rules\rules.1.205.62
C:\Program Files\Dealio\kb127\rules\rules.1.213.71
C:\Program Files\Dealio\kb127\rules\rules.1.214.49
C:\Program Files\Dealio\kb127\rules\rules.1.215.43
C:\Program Files\Dealio\kb127\rules\rules.1.216.67
C:\Program Files\Dealio\kb127\rules\rules.1.217.67
C:\Program Files\Dealio\kb127\rules\rules.1.218.52
C:\Program Files\Dealio\kb127\rules\rules.1.219.43
C:\Program Files\Dealio\kb127\rules\rules.1.220.43
C:\Program Files\Dealio\kb127\rules\rules.1.221.57
C:\Program Files\Dealio\kb127\rules\rules.1.222.43
C:\Program Files\Dealio\kb127\rules\rules.1.223.68
C:\Program Files\Dealio\kb127\rules\rules.1.226.68
C:\Program Files\Dealio\kb127\rules\rules.1.227.43
C:\Program Files\Dealio\kb127\rules\rules.1.228.62
C:\Program Files\Dealio\kb127\rules\rules.1.229.76
C:\Program Files\Dealio\kb127\rules\rules.1.23.63
C:\Program Files\Dealio\kb127\rules\rules.1.239.43
C:\Program Files\Dealio\kb127\rules\rules.1.24.43
C:\Program Files\Dealio\kb127\rules\rules.1.240.43
C:\Program Files\Dealio\kb127\rules\rules.1.241.43
C:\Program Files\Dealio\kb127\rules\rules.1.242.43
C:\Program Files\Dealio\kb127\rules\rules.1.243.43
C:\Program Files\Dealio\kb127\rules\rules.1.244.63
C:\Program Files\Dealio\kb127\rules\rules.1.245.43
C:\Program Files\Dealio\kb127\rules\rules.1.247.43
C:\Program Files\Dealio\kb127\rules\rules.1.248.43
C:\Program Files\Dealio\kb127\rules\rules.1.249.43
C:\Program Files\Dealio\kb127\rules\rules.1.250.43
C:\Program Files\Dealio\kb127\rules\rules.1.251.43
C:\Program Files\Dealio\kb127\rules\rules.1.252.43
C:\Program Files\Dealio\kb127\rules\rules.1.253.43
C:\Program Files\Dealio\kb127\rules\rules.1.254.43
C:\Program Files\Dealio\kb127\rules\rules.1.255.43
C:\Program Files\Dealio\kb127\rules\rules.1.256.43
C:\Program Files\Dealio\kb127\rules\rules.1.257.43
C:\Program Files\Dealio\kb127\rules\rules.1.279.43
C:\Program Files\Dealio\kb127\rules\rules.1.28.58
C:\Program Files\Dealio\kb127\rules\rules.1.282.75
C:\Program Files\Dealio\kb127\rules\rules.1.283.43
C:\Program Files\Dealio\kb127\rules\rules.1.284.43
C:\Program Files\Dealio\kb127\rules\rules.1.289.67
C:\Program Files\Dealio\kb127\rules\rules.1.290.62
C:\Program Files\Dealio\kb127\rules\rules.1.291.61
C:\Program Files\Dealio\kb127\rules\rules.1.296.43
C:\Program Files\Dealio\kb127\rules\rules.1.297.43
C:\Program Files\Dealio\kb127\rules\rules.1.304.43
C:\Program Files\Dealio\kb127\rules\rules.1.307.43
C:\Program Files\Dealio\kb127\rules\rules.1.308.75
C:\Program Files\Dealio\kb127\rules\rules.1.31.47
C:\Program Files\Dealio\kb127\rules\rules.1.310.46
C:\Program Files\Dealio\kb127\rules\rules.1.311.43
C:\Program Files\Dealio\kb127\rules\rules.1.315.43
C:\Program Files\Dealio\kb127\rules\rules.1.316.43
C:\Program Files\Dealio\kb127\rules\rules.1.317.43
C:\Program Files\Dealio\kb127\rules\rules.1.318.43
C:\Program Files\Dealio\kb127\rules\rules.1.319.49
C:\Program Files\Dealio\kb127\rules\rules.1.32.48
C:\Program Files\Dealio\kb127\rules\rules.1.334.44
C:\Program Files\Dealio\kb127\rules\rules.1.335.60
C:\Program Files\Dealio\kb127\rules\rules.1.336.44
C:\Program Files\Dealio\kb127\rules\rules.1.337.44
C:\Program Files\Dealio\kb127\rules\rules.1.338.75
C:\Program Files\Dealio\kb127\rules\rules.1.339.47
C:\Program Files\Dealio\kb127\rules\rules.1.34.43
C:\Program Files\Dealio\kb127\rules\rules.1.340.47
C:\Program Files\Dealio\kb127\rules\rules.1.341.47
C:\Program Files\Dealio\kb127\rules\rules.1.349.50
C:\Program Files\Dealio\kb127\rules\rules.1.35.48
C:\Program Files\Dealio\kb127\rules\rules.1.350.50
C:\Program Files\Dealio\kb127\rules\rules.1.351.51
C:\Program Files\Dealio\kb127\rules\rules.1.352.54
C:\Program Files\Dealio\kb127\rules\rules.1.353.51
C:\Program Files\Dealio\kb127\rules\rules.1.354.51
C:\Program Files\Dealio\kb127\rules\rules.1.357.62
C:\Program Files\Dealio\kb127\rules\rules.1.358.52
C:\Program Files\Dealio\kb127\rules\rules.1.359.52
C:\Program Files\Dealio\kb127\rules\rules.1.360.53
C:\Program Files\Dealio\kb127\rules\rules.1.361.54
C:\Program Files\Dealio\kb127\rules\rules.1.362.68
C:\Program Files\Dealio\kb127\rules\rules.1.363.58
C:\Program Files\Dealio\kb127\rules\rules.1.364.54
C:\Program Files\Dealio\kb127\rules\rules.1.365.53
C:\Program Files\Dealio\kb127\rules\rules.1.367.56
C:\Program Files\Dealio\kb127\rules\rules.1.368.58
C:\Program Files\Dealio\kb127\rules\rules.1.369.55
C:\Program Files\Dealio\kb127\rules\rules.1.370.56
C:\Program Files\Dealio\kb127\rules\rules.1.371.56
C:\Program Files\Dealio\kb127\rules\rules.1.372.57
C:\Program Files\Dealio\kb127\rules\rules.1.373.55
C:\Program Files\Dealio\kb127\rules\rules.1.375.56
C:\Program Files\Dealio\kb127\rules\rules.1.376.57
C:\Program Files\Dealio\kb127\rules\rules.1.377.55
C:\Program Files\Dealio\kb127\rules\rules.1.378.65
C:\Program Files\Dealio\kb127\rules\rules.1.384.58
C:\Program Files\Dealio\kb127\rules\rules.1.386.71
C:\Program Files\Dealio\kb127\rules\rules.1.387.59
C:\Program Files\Dealio\kb127\rules\rules.1.388.59
C:\Program Files\Dealio\kb127\rules\rules.1.389.59
C:\Program Files\Dealio\kb127\rules\rules.1.390.60
C:\Program Files\Dealio\kb127\rules\rules.1.391.60
C:\Program Files\Dealio\kb127\rules\rules.1.392.60
C:\Program Files\Dealio\kb127\rules\rules.1.393.60
C:\Program Files\Dealio\kb127\rules\rules.1.394.60
C:\Program Files\Dealio\kb127\rules\rules.1.396.61
C:\Program Files\Dealio\kb127\rules\rules.1.397.61
C:\Program Files\Dealio\kb127\rules\rules.1.398.60
C:\Program Files\Dealio\kb127\rules\rules.1.399.60
C:\Program Files\Dealio\kb127\rules\rules.1.403.61
C:\Program Files\Dealio\kb127\rules\rules.1.404.63
C:\Program Files\Dealio\kb127\rules\rules.1.405.61
C:\Program Files\Dealio\kb127\rules\rules.1.406.61
C:\Program Files\Dealio\kb127\rules\rules.1.407.76
C:\Program Files\Dealio\kb127\rules\rules.1.408.63
C:\Program Files\Dealio\kb127\rules\rules.1.409.61
C:\Program Files\Dealio\kb127\rules\rules.1.412.62
C:\Program Files\Dealio\kb127\rules\rules.1.413.62
C:\Program Files\Dealio\kb127\rules\rules.1.414.62
C:\Program Files\Dealio\kb127\rules\rules.1.415.62
C:\Program Files\Dealio\kb127\rules\rules.1.416.62
C:\Program Files\Dealio\kb127\rules\rules.1.417.62
C:\Program Files\Dealio\kb127\rules\rules.1.418.62
C:\Program Files\Dealio\kb127\rules\rules.1.419.62
C:\Program Files\Dealio\kb127\rules\rules.1.420.62
C:\Program Files\Dealio\kb127\rules\rules.1.421.62
C:\Program Files\Dealio\kb127\rules\rules.1.423.63
C:\Program Files\Dealio\kb127\rules\rules.1.424.63
C:\Program Files\Dealio\kb127\rules\rules.1.425.63
C:\Program Files\Dealio\kb127\rules\rules.1.426.63
C:\Program Files\Dealio\kb127\rules\rules.1.427.63
C:\Program Files\Dealio\kb127\rules\rules.1.428.65
C:\Program Files\Dealio\kb127\rules\rules.1.429.63
C:\Program Files\Dealio\kb127\rules\rules.1.430.63
C:\Program Files\Dealio\kb127\rules\rules.1.432.65
C:\Program Files\Dealio\kb127\rules\rules.1.433.64
C:\Program Files\Dealio\kb127\rules\rules.1.434.65
C:\Program Files\Dealio\kb127\rules\rules.1.435.64
C:\Program Files\Dealio\kb127\rules\rules.1.436.76
C:\Program Files\Dealio\kb127\rules\rules.1.437.64
C:\Program Files\Dealio\kb127\rules\rules.1.438.71
C:\Program Files\Dealio\kb127\rules\rules.1.439.71
C:\Program Files\Dealio\kb127\rules\rules.1.440.75
C:\Program Files\Dealio\kb127\rules\rules.1.442.73
C:\Program Files\Dealio\kb127\rules\rules.1.443.73
C:\Program Files\Dealio\kb127\rules\rules.1.444.73
C:\Program Files\Dealio\kb127\rules\rules.1.445.68
C:\Program Files\Dealio\kb127\rules\rules.1.446.69
C:\Program Files\Dealio\kb127\rules\rules.1.450.67
C:\Program Files\Dealio\kb127\rules\rules.1.451.67
C:\Program Files\Dealio\kb127\rules\rules.1.452.68
C:\Program Files\Dealio\kb127\rules\rules.1.453.68
C:\Program Files\Dealio\kb127\rules\rules.1.454.69
C:\Program Files\Dealio\kb127\rules\rules.1.456.69
C:\Program Files\Dealio\kb127\rules\rules.1.457.75
C:\Program Files\Dealio\kb127\rules\rules.1.458.70
C:\Program Files\Dealio\kb127\rules\rules.1.459.70
C:\Program Files\Dealio\kb127\rules\rules.1.460.69
C:\Program Files\Dealio\kb127\rules\rules.1.462.74
C:\Program Files\Dealio\kb127\rules\rules.1.463.69
C:\Program Files\Dealio\kb127\rules\rules.1.464.70
C:\Program Files\Dealio\kb127\rules\rules.1.465.68
C:\Program Files\Dealio\kb127\rules\rules.1.468.70
C:\Program Files\Dealio\kb127\rules\rules.1.469.70
C:\Program Files\Dealio\kb127\rules\rules.1.470.70
C:\Program Files\Dealio\kb127\rules\rules.1.471.73
C:\Program Files\Dealio\kb127\rules\rules.1.472.70
C:\Program Files\Dealio\kb127\rules\rules.1.478.74
C:\Program Files\Dealio\kb127\rules\rules.1.479.73
C:\Program Files\Dealio\kb127\rules\rules.1.480.68
C:\Program Files\Dealio\kb127\rules\rules.1.481.71
C:\Program Files\Dealio\kb127\rules\rules.1.482.74
C:\Program Files\Dealio\kb127\rules\rules.1.49.67
C:\Program Files\Dealio\kb127\rules\rules.1.50.43
C:\Program Files\Dealio\kb127\rules\rules.1.500.71
C:\Program Files\Dealio\kb127\rules\rules.1.501.74
C:\Program Files\Dealio\kb127\rules\rules.1.502.71
C:\Program Files\Dealio\kb127\rules\rules.1.51.69
C:\Program Files\Dealio\kb127\rules\rules.1.52.72
C:\Program Files\Dealio\kb127\rules\rules.1.520.76
C:\Program Files\Dealio\kb127\rules\rules.1.521.76
C:\Program Files\Dealio\kb127\rules\rules.1.522.76
C:\Program Files\Dealio\kb127\rules\rules.1.53.51
C:\Program Files\Dealio\kb127\rules\rules.1.531.76
C:\Program Files\Dealio\kb127\rules\rules.1.532.75
C:\Program Files\Dealio\kb127\rules\rules.1.534.75
C:\Program Files\Dealio\kb127\rules\rules.1.54.47
C:\Program Files\Dealio\kb127\rules\rules.1.55.45
C:\Program Files\Dealio\kb127\rules\rules.1.56.69
C:\Program Files\Dealio\kb127\rules\rules.1.57.43
C:\Program Files\Dealio\kb127\rules\rules.1.58.47
C:\Program Files\Dealio\kb127\rules\rules.1.593.76
C:\Program Files\Dealio\kb127\rules\rules.1.595.76
C:\Program Files\Dealio\kb127\rules\rules.1.63.57
C:\Program Files\Dealio\kb127\rules\rules.1.66.47
C:\Program Files\Dealio\kb127\rules\rules.1.70.75
C:\Program Files\Dealio\kb127\rules\rules.1.71.43
C:\Program Files\Dealio\kb127\rulesFF\index.3.67.22
C:\Program Files\Dealio\kb127\rulesFF\rules.3.109.43
C:\Program Files\Dealio\kb127\rulesFF\rules.3.178.66
C:\Program Files\Dealio\kb127\rulesFF\rules.3.198.56
C:\Program Files\Dealio\kb127\rulesFF\rules.3.245.43
C:\Program Files\Dealio\kb127\rulesFF\rules.3.247.43
C:\Program Files\Dealio\kb127\rulesFF\rules.3.279.43
C:\Program Files\Dealio\kb127\rulesFF\rules.3.283.43
C:\Program Files\Dealio\kb127\rulesFF\rules.3.284.43
C:\Program Files\Dealio\kb127\rulesFF\rules.3.289.67
C:\Program Files\Dealio\kb127\rulesFF\rules.3.290.62
C:\Program Files\Dealio\kb127\rulesFF\rules.3.297.43
C:\Program Files\Dealio\kb127\rulesFF\rules.3.315.43
C:\Program Files\Dealio\kb127\rulesFF\rules.3.319.49
C:\Program Files\Dealio\kb127\rulesFF\rules.3.335.60
C:\Program Files\Dealio\kb127\rulesFF\rules.3.337.44
C:\Program Files\Dealio\kb127\rulesFF\rules.3.340.47
C:\Program Files\Dealio\kb127\rulesFF\rules.3.360.53
C:\Program Files\Dealio\kb127\rulesFF\rules.3.386.59
C:\Program Files\Dealio\kb127\rulesFF\rules.3.388.59
C:\Program Files\Dealio\kb127\rulesFF\rules.3.391.60
C:\Program Files\Dealio\kb127\rulesFF\rules.3.398.60
C:\Program Files\Dealio\kb127\rulesFF\rules.3.399.60
C:\Program Files\Dealio\kb127\rulesFF\rules.3.403.61
C:\Program Files\Dealio\kb127\rulesFF\rules.3.404.63
C:\Program Files\Dealio\kb127\rulesFF\rules.3.405.61
C:\Program Files\Dealio\kb127\rulesFF\rules.3.406.61
C:\Program Files\Dealio\kb127\rulesFF\rules.3.407.61
C:\Program Files\Dealio\kb127\rulesFF\rules.3.408.63
C:\Program Files\Dealio\kb127\rulesFF\rules.3.409.61
C:\Program Files\Dealio\kb127\rulesFF\rules.3.412.62
C:\Program Files\Dealio\kb127\rulesFF\rules.3.413.62
C:\Program Files\Dealio\kb127\rulesFF\rules.3.414.62
C:\Program Files\Dealio\kb127\rulesFF\rules.3.415.62
C:\Program Files\Dealio\kb127\rulesFF\rules.3.416.62
C:\Program Files\Dealio\kb127\rulesFF\rules.3.417.62
C:\Program Files\Dealio\kb127\rulesFF\rules.3.418.62
C:\Program Files\Dealio\kb127\rulesFF\rules.3.419.62
C:\Program Files\Dealio\kb127\rulesFF\rules.3.420.62
C:\Program Files\Dealio\kb127\rulesFF\rules.3.421.62
C:\Program Files\Dealio\kb127\rulesFF\rules.3.424.63
C:\Program Files\Dealio\kb127\rulesFF\rules.3.427.63
C:\Program Files\Dealio\kb127\rulesFF\rules.3.432.65
C:\Program Files\Dealio\kb127\rulesFF\rules.3.49.67
C:\Program Files\Dealio\kb127\rulesFF\rules.3.51.46
C:\Program Files\Dealio\kb127\rulesFF\rules.3.52.57
C:\Program Files\Dealio\kb127\rulesFF\rules.3.53.51
C:\Program Files\Dealio\kb127\rulesFF\rules.3.54.47
C:\Program Files\Dealio\kb127\rulesFF\rules.3.57.43
C:\Program Files\Dealio\kb127\rulesFF\rules.3.58.47
C:\DOCUME~1\ALLUSE~1.WIN\MENUDM~1\PROGRA~1\Dealio
C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com
C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\CHROME\CONTENT\dealiotoolbarplugin.js
C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\CHROME\CONTENT\dealiotoolbarplugin.xul
C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\CHROME\LOCALE\EN-US\dealio.dtd
C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\CHROME\LOCALE\EN-US\dealio.properties
C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\CHROME\SKIN\dealio.ico
C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\CHROME\SKIN\dealiotoolbarplugin.css
C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\CHROME\SKIN\dealio_large.png
C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\CHROME\SKIN\dealio_small.png
C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\CHROME\SKIN\dealio_winxp_act.ico
C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\CHROME\SKIN\dealio_winxp_hot.ico
C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\CHROME\SKIN\dealio_win_act.bmp
C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\CHROME\SKIN\dealio_win_act.ico
C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\CHROME\SKIN\dealio_win_hot.bmp
C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\CHROME\SKIN\dealio_win_hot.ico
C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\CHROME\SKIN\search_dealio.bmp
C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\COMPONENTS\DealioFF.dll
C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\COMPONENTS\DealioProtocol.js
C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\COMPONENTS\IFBHODealio.idl
C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\COMPONENTS\IFBHODealio.xpt
C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\COMPONENTS\IFBHODealioHelperEngine.idl
C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\COMPONENTS\IFBHODealioHelperEngine.xpt
C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\COMPONENTS\IFDealioHelperPreferences.idl
C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com\COMPONENTS\IFDealioHelperPreferences.xpt
C:\DOCUME~1\ADMINI~1.MCE\Cookies\administrateur@mysearch[1].txt
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\CONTENT\searchsettingsplugin.js
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\CONTENT\searchsettingsplugin.xul
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\LOCALE\EN-US\searchsettingsplugin.dtd
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\LOCALE\EN-US\searchsettingsplugin.properties
C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\COMPONENTS\SearchSettingsFF.dll
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Search Settings
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Search Settings\kb127
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Search Settings\kb127\res
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Search Settings\kb127\temp
C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Search Settings\kb127\temp\ws-14241.log
C:\Program Files\Search Settings
C:\Program Files\Search Settings\kb127
C:\Program Files\Search Settings\SearchSettings.exe
C:\Program Files\Search Settings\kb127\res
C:\Program Files\Search Settings\kb127\SearchSettings.dll
C:\Program Files\Search Settings\kb127\SearchSettingsRes409.dll
C:\Program Files\Search Settings\kb127\temp
C:\DOCUME~1\ADMINI~1.MCE\Favoris\µTorrent Search.url

-----------\\ Extensions

(Administrateur.MCE2005) - {e4a8a97b-f2ed-450b-b12d-ee082ba24781} => greasemonkey

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"SearchMigratedDefaultURL"="https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&src={referrer:source?}"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="https://www.msn.com/fr-fr"

--------------------\\ Recherche d'autres infections

Aucune autre infection trouvée !

1 - "C:\ToolBar SD\TB_1.txt" - 27/12/2008|23:46 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 28/12/2008|18:08 - Option : [1]

-----------\\ Fin du rapport a 18:08:12,09

pour moi c est du charabia^^ donc si quelq un peut me venir en aide je lui serait reconnaissant... suis infecter? quelles sont les démarches a mettre en œuvre ?
merci d avance!
cordialement
A voir également:

25 réponses

  • 1
  • 2
Réponse 1 / 25
jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 040
 
slt refais toolsbar sd choisi l'option 2 et colle le rapport

puis

Télécharges AD-Remover ( de Cyrildu17 / C_XX ) sur ton bureau :
http://sd-1.archive-host.com/membres/up/16506160323759868/AD-R.exe

/!\ Déconnectes toi et fermes toutes applications en cours

● Double clique sur le programme d'installation , et installe le dans son emplacement par défaut. ( C:\Program files )
● Double clique sur l'icône Ad-removersituée sur ton bureau
● Au menu principal choisi l'option "A"
● Postes le rapport qui apparait à la fin .

( le rapport est sauvegardé aussi sous C:\Ad-report(date).log )

(CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

Note :

"Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

et

Télécharge ici :

http://images.malwareremoval.com/random/RSIT.exe

random's system information tool (RSIT) par andom/random et sauvegarde-le sur le Bureau.

Double-clique sur RSIT.exe afin de lancer RSIT.

Clique Continue à l'écran Disclaimer.

Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront.

Poste le contenu de log.txt (<<qui sera affiché)
ainsi que de info.txt (<<qui sera réduit dans la Barre des Tâches).

NB : Les rapports sont sauvegardés dans le dossier C:\rsit
0
Réponse 2 / 25
ripou
 
hello!
merci de me venir en aide!
donc voila:

j ai fais 2 dans toolbar, rapport:

-----------\\ ToolBar S&D 1.2.8 XP/Vista

( : )
USER : Administrateur ( Administrator )

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )

Option : [2] ( 29/12/2008|14:00 )

-----------\\ SUPPRESSION

Supprime! - C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127
Supprime! - C:\Program Files\Dealio\DealioAU.exe
Supprime! - C:\Program Files\Dealio\kb127
Supprime! - C:\Program Files\Dealio\SearchSettingsKit.exe
Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\MENUDM~1\PROGRA~1\Dealio
Supprime! - C:\Program Files\Mozilla Firefox\extensions\toolbar@dealio.com
Supprime! - C:\DOCUME~1\ADMINI~1.MCE\Cookies\administrateur@mysearch[1].txt
Supprime! - C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com
Supprime! - C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Search Settings\kb127
Supprime! - C:\Program Files\Search Settings\kb127
Supprime! - C:\Program Files\Search Settings\SearchSettings.exe
Supprime! - C:\DOCUME~1\ADMINI~1.MCE\Favoris\µTorrent Search.url
Supprime! - C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio
Supprime! - C:\Program Files\Dealio
Supprime! - C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Search Settings
Supprime! - C:\Program Files\Search Settings

-----------\\ Recherche de Fichiers / Dossiers ...

-----------\\ Extensions

(Administrateur.MCE2005) - {e4a8a97b-f2ed-450b-b12d-ee082ba24781} => greasemonkey

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"SearchMigratedDefaultURL"="https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&src={referrer:source?}"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="https://www.msn.com/fr-fr/"

--------------------\\ Recherche d'autres infections

Aucune autre infection trouvée !

1 - "C:\ToolBar SD\TB_1.txt" - 27/12/2008|23:46 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 28/12/2008|18:08 - Option : [1]
3 - "C:\ToolBar SD\TB_3.txt" - 29/12/2008|14:02 - Option : [2]

-----------\\ Fin du rapport a 14:02:20,81

puis AD Remover:

--------- Logfile of AD-Remover 1.0.8.0 by C_XX ---------

# START at: 14:10:11 | Lun 29/12/2008 | Microsoft® Windows XP™ SP2 (v5.1.2600)
# BOOT MODE: Normal

# OPTION: Scan | EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat

# PC: MCE2005 | USER: Administrateur ( Current user is an administrator)

# DRIVE(S):
- C:\ (File System: NTFS)

# Internet Explorer v7.0.5730.13

--------- [ RUNNING PROCESSES: 34 ] ---------

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\slrundll.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\system32\ntvdm.exe

-----------------------------------

+-----------------------| Boonty/Boonty Games Elements found :

.

+-----------------------| Eorezo Elements found :

.

+-----------------------| Everest Poker Elements found :

.

+-----------------------| FunWebProducts/MyWay/MyWebSearch/MyGlobalSearch Elements found :

.

+-----------------------| It's TV Elements found :

.

+-----------------------| Sweetim Elements found :

.

+-----------------------| ADDED SCAN :

+---------- Scanning prefs.js ... ( # Mozilla User Preferences )

...\7xv582vg.default\prefs.js :

~~~~ Mozilla FireFox version 2.0.0.20 ~~~~

* Browser Search Default Engine: "Yahoo"
* Browser Search Selected Engine: "Yahoo"

+----------+

+---------------------------------------------------------------------------+

+--[HKEY_CURRENT_USER\..\Run]

CTFMON.EXE REG_SZ C:\WINDOWS\system32\ctfmon.exe
msnmsgr REG_SZ "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
MSMSGS REG_SZ "C:\Program Files\Messenger\msmsgs.exe" /background
WOOKIT REG_SZ C:\PROGRA~1\Wanadoo\GestMaj.exe GestionnaireInternet.exe
SpybotSD TeaTimer REG_SZ C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

+--[HKEY_LOCAL_MACHINE\..\Run]

TkBellExe REG_SZ "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
ehTray REG_SZ C:\WINDOWS\ehome\ehtray.exe
Adobe Reader Speed Launcher REG_SZ "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
egui REG_SZ "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
KernelFaultCheck REG_EXPAND_SZ %systemroot%\system32\dumprep 0 -k

+--[HKEY_USERS\.DEFAULT\..\Run]

CTFMON.EXE REG_SZ C:\WINDOWS\system32\CTFMON.EXE

+--[HKEY_CURRENT_USER\..\Internet Explorer\MAIN]

Start Page : hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

+--[HKEY_LOCAL_MACHINE\..\Internet Explorer\MAIN]

Start Page : hxxp://www.msn.com/

+---------------------------------------------------------------------------+

- "C:\AD-report-Clean-27.12.2008.log" (~4331 bytes)

- "C:\AD-report-Scan-27.12.2008.log" (~4061 bytes)

- "C:\AD-report-Scan-29.12.2008.log" (~3779 bytes)

# END at: 14:10:39 | 29/12/2008 - Time elapsed: 28.2 seconds

+---------------------------------------------------------------------------+
+------------------------------- [ E.O.F - 83 lines ]
+---------------------------------------------------------------------------+

puis j ai télécharger : http://images.malwareremoval.com/random/RSIT.exe
mais quand j essaye de le lancer il me marque:

Line-1:

Error: Incorrect number of parameters in function call.

il doit y a voir un soucis
ps: j ai deja hitjack sur mon pc...
merci de me consacrer du temp j deviens fou^^
0
Réponse 3 / 25
jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 040
 
alors colle le rapport hijackhtis
0
Réponse 4 / 25
ripou
 
voila chef:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:59:51, on 29/12/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\WgaTray.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\slrundll.exe
C:\WINDOWS\system32\CF14793.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\explorer.exe
C:\ComboFix\handle.cfexe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (file missing)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\GestMaj.exe GestionnaireInternet.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-21-1004336348-261478967-839522115-500\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User '?')
O4 - HKUS\S-1-5-21-1004336348-261478967-839522115-500\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background (User '?')
O4 - HKUS\S-1-5-21-1004336348-261478967-839522115-500\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (User '?')
O4 - HKUS\S-1-5-21-1004336348-261478967-839522115-500\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\GestMaj.exe GestionnaireInternet.exe (User '?')
O4 - HKUS\S-1-5-21-1004336348-261478967-839522115-500\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (User '?')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User '?')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=www.generation-nt.com
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - https://www.touslesdrivers.com/index.php?v_page=29
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Unknown owner - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe (file missing)
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 25
jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 040
 
analyse ce fichier sur virus total et colle le rapport:
https://www.google.fr/search?q=virus+total&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:fr:official&client=firefox-a&gws_rd=ssl

C:\WINDOWS\system32\CF14793.exe
0
Réponse 6 / 25
ripou
 
impossible d acceder a ce site... j ai ouvert les part feu, j ai essayer d installer la version pour fire fox mais j arrive pas a acceder a la page net que puis je faire?
0
Réponse 7 / 25
jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 040
 
sinon analyse ici

https://www.virscan.org/

http://scanner.virus.org/

http://www.viruschief.com/index.html
0
Réponse 8 / 25
ripou
 
pour virus scan.org:

Nom de fichier : CF14793.exe
Taille du fichier : 400896 byte
Type de fichier : PE32 executable for MS Windows (console) Intel 80386 32-bit
MD5 : 738e6ce7aacdc92c2e3d568a2af0795d
SHA1 : adb09b3da8d1e6ebdb24732a9fb10b39207c431c

Résultats des moteurs : tous les moteurs ont dit ne pas avoir trouvé de malware !

j lance les autres...
0
Réponse 9 / 25
jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 040
 
encore des soucis?
0
Réponse 10 / 25
ripou
 
mon pc rame... les rapports sont bons?
0
Réponse 11 / 25
jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 040
 
oui pour vérifier

colle le rapport d'un des scan suivant:

bitdefender en ligne :
http://www.bitdefender.fr/scan_fr/scan8/ie.html

Panda en ligne :
http://pandasoftware.fr
0
Réponse 12 / 25
ripou
 
j ai beaucoup de mal^^ y a un souci, j suis pas sur que c est un virus... mais j essaie de scanner quand meme:
pour bitdefender j dois installer internet exploreur 8.... pas moyen... et activscan panda se lance mais s arrete tout le temps, ca bloque à 28 ou 29% le clavier et souris ne répondent plus, meme ctrl + alt + suppr ne donne rien... la j essaie en mode sans echec... j croise les doigt
0
Réponse 13 / 25
ripou
 
j ai une bonne et un mauvaise nouvelle ( enfin c es moi que ça regarde^^) j ai réussi a scanner avec panda, j suis encore infecté... voici le rapport:

;***********************************************************************************************************************************************************************************
ANALYSIS: 2008-12-30 01:40:42
PROTECTIONS: 0
MALWARE: 16
SUSPECTS: 0
;***********************************************************************************************************************************************************************************
PROTECTIONS
Description Version Active Updated
;===================================================================================================================================================================================
;===================================================================================================================================================================================
MALWARE
Id Description Type Active Severity Disinfectable Disinfected Location
;===================================================================================================================================================================================
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\Administrateur.MCE2005\Application Data\Mozilla\Firefox\Profiles\7xv582vg.default\cookies.txt[.atdmt.com/]
00145405 Cookie/RealMedia TrackingCookie No 0 Yes No C:\Documents and Settings\Administrateur.MCE2005\Application Data\Mozilla\Firefox\Profiles\7xv582vg.default\cookies.txt[.247realmedia.com/]
00145405 Cookie/RealMedia TrackingCookie No 0 Yes No C:\Documents and Settings\Administrateur.MCE2005\Application Data\Mozilla\Firefox\Profiles\7xv582vg.default\cookies.txt[.247realmedia.com/]
00145758 Cookie/Mysearch TrackingCookie No 0 Yes No C:\ToolBar SD\Backup-TB\DOCUME~1\ADMINI~1.MCE\Cookies\administrateur@mysearch[1].txt
00167704 Cookie/Xiti TrackingCookie No 0 Yes No C:\Documents and Settings\Administrateur.MCE2005\Cookies\administrateur@xiti[1].txt
00167704 Cookie/Xiti TrackingCookie No 0 Yes No C:\Documents and Settings\Administrateur.MCE2005\Application Data\Mozilla\Firefox\Profiles\7xv582vg.default\cookies.txt[.xiti.com/]
00167704 Cookie/Xiti TrackingCookie No 0 Yes No C:\Documents and Settings\Administrateur\Cookies\administrateur@xiti[1].txt
00167709 Cookie/fe.lea.lycos TrackingCookie No 0 Yes No C:\Documents and Settings\Administrateur\Cookies\administrateur@fe.lea.lycos[1].txt
00167709 Cookie/fe.lea.lycos TrackingCookie No 0 Yes No C:\Documents and Settings\Administrateur.MCE2005\Application Data\Mozilla\Firefox\Profiles\7xv582vg.default\cookies.txt[fe.lea.lycos.fr/]
00167749 Cookie/Toplist TrackingCookie No 0 Yes No C:\Documents and Settings\Administrateur\Cookies\administrateur@toplist[1].txt
00168106 Cookie/Weborama TrackingCookie No 0 Yes No C:\Documents and Settings\Administrateur.MCE2005\Application Data\Mozilla\Firefox\Profiles\7xv582vg.default\cookies.txt[.weborama.fr/]
00168110 Cookie/Server.iad.Liveperson TrackingCookie No 0 Yes No C:\Documents and Settings\Administrateur\Cookies\administrateur@server.iad.liveperson[2].txt
00168116 Cookie/Comclick TrackingCookie No 0 Yes No C:\Documents and Settings\Administrateur\Cookies\administrateur@fl01.ct2.comclick[1].txt
00170495 Cookie/PointRoll TrackingCookie No 0 Yes No C:\Documents and Settings\Administrateur.MCE2005\Cookies\administrateur@ads.pointroll[1].txt
00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Documents and Settings\Administrateur.MCE2005\Application Data\Mozilla\Firefox\Profiles\7xv582vg.default\cookies.txt[.smartadserver.com/]
00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Documents and Settings\Administrateur.MCE2005\Application Data\Mozilla\Firefox\Profiles\7xv582vg.default\cookies.txt[.smartadserver.com/]
00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Documents and Settings\Administrateur.MCE2005\Application Data\Mozilla\Firefox\Profiles\7xv582vg.default\cookies.txt[.smartadserver.com/]
00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Documents and Settings\Administrateur.MCE2005\Application Data\Mozilla\Firefox\Profiles\7xv582vg.default\cookies.txt[.smartadserver.com/]
00288208 Application/HideWindow.S HackTools No 0 Yes No C:\Program Files\Ad-remover\TOOLS\cmdow.exe
01185375 Application/Psexec.A HackTools No 0 Yes No C:\System Volume Information\_restore{877DFE0A-D4C5-4797-83DB-5CA54A4FDDDC}\RP354\A0354381.EXE
02885963 Rootkit/Booto.C Virus/Worm No 0 Yes Yes C:\System Volume Information\_restore{877DFE0A-D4C5-4797-83DB-5CA54A4FDDDC}\RP354\A0354360.sys
02916438 Application/FamilyKeylogger.B HackTools No 0 Yes No C:\WINDOWS\system32\svcl32\svcl32.dll
03898822 Generic Malware Virus/Trojan No 0 Yes Yes C:\Documents and Settings\Administrateur\Mes documents\Downloads\Windows XP home edition with serial + crack\Windows XP home edition with Serial + crack.zip[winxp/Crack/crack.exe]
03898822 Generic Malware Virus/Trojan No 0 Yes Yes C:\Documents and Settings\Administrateur\Mes documents\Downloads\Windows XP home edition with serial + crack\Windows XP home edition with Serial + crack\winxp\Crack\crack.exe
;===================================================================================================================================================================================
SUSPECTS
Sent Location
;===================================================================================================================================================================================
;===================================================================================================================================================================================
VULNERABILITIES
Id Severity Description
;===================================================================================================================================================================================
;===================================================================================================================================================================================

encore des malwares...
0
Réponse 14 / 25
jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 040
 
télécharge OTMoveIt

http://oldtimer.geekstogo.com/OTMoveIt3.exe

(de Old_Timer) sur ton Bureau.
double-clique sur OTMoveIt.exe pour le lancer.
copie la liste qui se trouve en citation ci-dessous,
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.

:files
C:\WINDOWS\system32\svcl32\svcl32.dll
C:\Documents and Settings\Administrateur\Mes documents\Downloads\Windows XP home edition with serial + crack\Windows XP home edition with Serial + crack.zip[winxp/Crack/crack.exe]
C:\Documents and Settings\Administrateur\Mes documents\Downloads\Windows XP home edition with serial + crack\Windows XP home edition with Serial + crack\winxp\Crack\crack.exe

clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre "Results".
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.

___________________

vire ce qui est dans moved files en allant dans poste de travail puis
C:\_OTMoveIt\MovedFiles

_____________________
nettoie les traces : cookies... avec ccleaner:
https://www.malekal.com/tutoriel-ccleaner/

______________________

pour virer ce qui a été utilisé lance tools cleaner et colle nous le rapport

http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner

_____________________

si tot s'est bien passé pour finir de virer les infections qui sont dans ta restauration, désactive ta restauration puis redemarre ton ordi puis réactive la

https://www.informatruc.com

_____________________

encore des problèmes???
0
Réponse 15 / 25
ripou
 
pour OTMoveIt :
j ai fais c que vous demandiez... mais j pensais qu il y aurais un rapport bloc note j ai quitter , ca a redemarer sans que j ai pris le rapport.. pardon donc j'ai réitérer l operation et voici le rapport:

========== FILES ==========
File/Folder C:\WINDOWS\system32\svcl32\svcl32.dll not found.

(la premiere foi il y avait deux message d erreur dans rapport.. ils n y sont plus)

ps: a chaque fois que j ai cliquer movelt! un message d error apparait:

"invalid time flag [crack.exe]
Must be numerical"

j continue votre procédure...
0
Réponse 16 / 25
ripou
 
"vire ce qui est dans moved files en allant dans poste de travail puis
C:\_OTMoveIt\MovedFiles"

les fichiers étaient vides...

j ai fais tourner ccleaner puis toolscleaner2:

[ Rapport ToolsCleaner version 2.2.9 (par A.Rothstein & dj QUIOU) ]

-->- Recherche:

C:\TB.txt: trouvé !
C:\_OtMoveIt: trouvé !
C:\Toolbar SD: trouvé !
C:\Rsit: trouvé !
C:\Documents and Settings\Administrateur.MCE2005\Bureau\HijackThis.lnk: trouvé !
C:\Documents and Settings\Administrateur.MCE2005\Bureau\HJTInstall.exe: trouvé !
C:\Documents and Settings\Administrateur.MCE2005\Bureau\ToolBarSD.exe: trouvé !
C:\Documents and Settings\Administrateur.MCE2005\Bureau\OTMoveIt3.exe: trouvé !
C:\Documents and Settings\Administrateur.MCE2005\Bureau\Rsit.exe: trouvé !
C:\Documents and Settings\Administrateur.MCE2005\Local Settings\Application Data\Microsoft\Messenger\pierredestrass@hotmail.fr\Sharing Folders\valwebes@hotmail.com\MsnFix: trouvé !
C:\Documents and Settings\Administrateur.MCE2005\Local Settings\Application Data\Microsoft\Messenger\pierredestrass@hotmail.fr\Sharing Folders\valwebes@hotmail.com\MSNFix\MsnFix: trouvé !
C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Program Files\Ad-remover\TOOLS\NIRCMD.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !

---------------------------------
-->- Suppression:

C:\Documents and Settings\Administrateur.MCE2005\Bureau\HijackThis.lnk: supprimé !
C:\Documents and Settings\Administrateur.MCE2005\Bureau\HJTInstall.exe: supprimé !
C:\Documents and Settings\Administrateur.MCE2005\Bureau\ToolBarSD.exe: supprimé !
C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\TB.txt: supprimé !
C:\Documents and Settings\Administrateur.MCE2005\Bureau\OTMoveIt3.exe: supprimé !
C:\Documents and Settings\Administrateur.MCE2005\Bureau\Rsit.exe: supprimé !
C:\Program Files\Ad-remover\TOOLS\NIRCMD.exe: supprimé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
C:\_OtMoveIt: supprimé !
C:\Toolbar SD: supprimé !
C:\Rsit: supprimé !
C:\Documents and Settings\Administrateur.MCE2005\Local Settings\Application Data\Microsoft\Messenger\pierredestrass@hotmail.fr\Sharing Folders\valwebes@hotmail.com\MsnFix: supprimé !
C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !

... j m en vais desactiver ma restauration! merci encore...
0
Réponse 17 / 25
ripou
 
mission accompli!
vous pouvez juste me dire si les rapports sont bons?
j utilise avast et spybot pour protéger mon ordi... est ce que vous jugez ca suffisant? ou vous avez autre chose a me proposer?
encore mille merci de m avoir consacrer du temps!
0
Réponse 18 / 25
jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 040
 
ok
alors vire manuellement si presents:

C:\WINDOWS\system32\svcl32\svcl32.dll
C:\Documents and Settings\Administrateur\Mes documents\Downloads\Windows XP home edition with serial + crack\Windows XP home edition with Serial + crack.zip[winxp/Crack/crack.exe]
C:\Documents and Settings\Administrateur\Mes documents\Downloads\Windows XP home edition with serial + crack\Windows XP home edition with Serial + crack\winxp\Crack\crack.exe

a plus
0
Réponse 19 / 25
jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 040
 
pour protéger gratos ton ordi
http://www.commentcamarche.net/telecharger/logiciel 4 securite

mettre un antivirus

ANTIVIR de préference ou (avast)
https://www.malekal.com/avira-free-security-antivirus-gratuit/ (merci Malekal)
-------------
des anti-espions :
MALWAREBYTE ANTIMALWARE + SPYBOT
+
SPYWAREBLASTER pour immuniser le système contre vundo notamment mais en anglais (mais facile d'utilisation : il suffit de faire "update" pour mettre à jour tous les mois et ensuite" enable all protection" pour immuniser)...

--------
un pare feu :
(celui de Windows) ou mieux COMODO ou KERIO ou JETICO ou ZONE ALARM (mettre que le parefeu gratuit)

http://www.clubic.com/telecharger-fiche11071-sunbelt-persona­l-firewall-e(...)
https://manuelsdaide.com/contact/
http://www.open-files.com/forum/index.php?showtopic=29277
https://www.commentcamarche.net/telecharger/ 157 zonealarm

-----------

CCLEANER pour effacer les traces de surf
0
Réponse 20 / 25
ripou
 
C:\WINDOWS\system32\svcl32\svcl32.dll
...introuvable! et:

C:\Documents and Settings\Administrateur\Mes documents\Downloads\Windows XP home edition with serial + crack\Windows XP home edition with Serial + crack\winxp\Crack\crack.exe
...introuvable également...!?
est ce normal?

merci pour les logiciels ca va bien m dépanner^^
0

Discussions similaires

O barré horizontalement
JCB40 -
JCB40 -

3 réponses
écrire un rapport de travail
asi -
REGINALD -

3 réponses
Au sujet du S majuscule avec trait oblique barré
charlene -
Pierr10 -

6 réponses
Barre verticale droite sur clavier
k_lou -
Leuide -

41 réponses