barre d outil infecté.. rapport toolbar

Question

Bonjour,
suite a un virus trojan et rogue.eorezo ma barre d outil a était infecté. je pense avoir réussi a supprimer les deux premier mais il reste des infection j ai lancer toolbar SD dont voici le rapport:



   -----------\  ToolBar S&D 1.2.8   XP/Vista

   (  :  )
   USER : Administrateur ( Administrator )

   "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
   Option : [1] ( 28/12/2008|18:06 )

   -----------\  Recherche de Fichiers / Dossiers ...

   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127es
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127esFF
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ules
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFF
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127	emp
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127es\alerts.gif
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127es\alerts_over.gif
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127es\alerts_rec.gif
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127es\alerts_rec_over.gif
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127es\chevron-small.gif
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127es\DealioSearch.html
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127es\deals-leftcap.gif
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127es\deal_report.jpg
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127es\ebay_login.jpg
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127es\err_mainwindow.html
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127es\err_toolbar.html
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127es\global_scripts.js
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127es\headerbgthin.jpg
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127es\highlight-bg.png
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127es\logo.gif
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127es\logo_over.gif
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127es\man_toolbar.css
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127es\man_toolbar.html
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127es\man_toolbar.js
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127es\man_toolbarl.js
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127es\post-this-deal.gif
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127es\post-this-deal_over.gif
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127es\scripts.js
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127es\scroller.js
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127es\search-chevron.gif
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127es\search-chevron_over.gif
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127es\search_bg_blink.gif
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127es\separator.gif
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127es\settings.gif
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127es\settings_over.gif
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127es\yahoo-search.png
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127esFF\deal_report.jpg
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127esFF\ebay_login.jpg
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ules\index.76.35
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.10.76
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.109.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.110.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.12.52
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.13.58
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.130.58
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.135.50
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.153.44
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.155.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.156.49
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.16.60
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.161.52
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.178.66
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.184.55
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.188.52
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.189.45
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.196.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.198.56
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.199.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.200.53
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.201.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.202.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.203.71
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.205.62
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.213.71
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.214.49
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.215.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.216.67
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.217.67
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.218.52
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.219.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.220.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.221.57
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.222.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.223.68
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.226.68
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.227.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.228.62
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.229.76
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.23.63
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.239.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.24.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.240.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.241.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.242.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.243.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.244.63
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.245.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.247.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.248.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.249.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.250.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.251.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.252.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.253.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.254.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.255.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.256.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.257.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.279.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.28.58
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.282.75
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.283.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.284.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.289.67
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.290.62
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.291.61
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.296.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.297.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.304.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.307.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.308.75
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.31.47
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.310.46
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.311.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.315.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.316.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.317.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.318.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.319.49
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.32.48
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.334.44
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.335.60
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.336.44
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.337.44
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.338.75
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.339.47
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.34.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.340.47
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.341.47
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.349.50
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.35.48
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.350.50
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.351.51
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.352.54
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.353.51
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.354.51
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.357.62
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.358.52
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.359.52
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.360.53
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.361.54
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.362.68
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.363.58
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.364.54
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.365.53
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.367.56
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.368.58
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.369.55
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.370.56
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.371.56
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.372.57
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.373.55
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.375.56
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.376.57
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.377.55
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.378.65
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.384.58
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.386.71
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.387.59
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.388.59
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.389.59
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.390.60
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.391.60
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.392.60
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.393.60
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.394.60
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.396.61
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.397.61
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.398.60
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.399.60
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.403.61
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.404.63
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.405.61
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.406.61
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.407.76
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.408.63
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.409.61
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.412.62
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.413.62
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.414.62
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.415.62
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.416.62
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.417.62
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.418.62
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.419.62
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.420.62
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.421.62
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.423.63
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.424.63
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.425.63
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.426.63
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.427.63
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.428.65
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.429.63
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.430.63
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.432.65
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.433.64
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.434.65
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.435.64
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.436.76
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.437.64
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.438.71
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.439.71
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.440.75
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.442.73
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.443.73
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.444.73
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.445.68
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.446.69
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.450.67
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.451.67
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.452.68
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.453.68
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.454.69
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.456.69
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.457.75
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.458.70
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.459.70
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.460.69
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.462.74
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.463.69
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.464.70
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.465.68
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.468.70
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.469.70
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.470.70
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.471.73
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.472.70
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.478.74
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.479.73
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.480.68
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.481.71
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.482.74
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.49.67
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.50.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.500.71
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.501.74
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.502.71
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.51.69
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.52.72
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.520.76
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.521.76
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.522.76
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.53.51
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.531.76
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.532.75
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.534.75
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.54.47
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.55.45
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.56.69
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.57.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.58.47
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.593.76
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.595.76
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.63.57
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.66.47
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.70.75
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesules.1.71.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFF\index.3.67.22
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.109.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.178.66
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.198.56
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.245.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.247.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.279.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.283.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.284.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.289.67
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.290.62
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.297.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.315.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.319.49
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.335.60
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.337.44
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.340.47
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.360.53
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.386.59
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.388.59
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.391.60
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.398.60
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.399.60
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.403.61
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.404.63
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.405.61
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.406.61
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.407.61
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.408.63
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.409.61
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.412.62
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.413.62
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.414.62
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.415.62
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.416.62
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.417.62
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.418.62
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.419.62
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.420.62
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.421.62
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.424.63
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.427.63
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.432.65
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.49.67
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.51.46
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.52.57
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.53.51
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.54.47
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.57.43
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127ulesFFules.3.58.47
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127	emp\dealio-14241.log
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127	emp\dod_cache.xml
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127	emp\_toolbar_tmp_3820_2256_4.html
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127	emp\_toolbar_tmp_3820_2752_20.html
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127	emp\_toolbar_tmp_3820_3328_12.html
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127	emp\_toolbar_tmp_3956_3988_3.html
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127	emp\_toolbar_tmp_888_3792_4.html
   C:\Program Files\Dealio
   C:\Program Files\Dealio\DealioAU.exe
   C:\Program Files\Dealio\kb127
   C:\Program Files\Dealio\SearchSettingsKit.exe
   C:\Program Files\Dealio\kb127\Dealio Deskbar.exe
   C:\Program Files\Dealio\kb127\Dealio.dll
   C:\Program Files\Dealio\kb127\DealioRes409.dll
   C:\Program Files\Dealio\kb127es
   C:\Program Files\Dealio\kb127esDN
   C:\Program Files\Dealio\kb127esFF
   C:\Program Files\Dealio\kb127ules
   C:\Program Files\Dealio\kb127ulesFF
   C:\Program Files\Dealio\kb127	emp
   C:\Program Files\Dealio\kb127es\alerts.gif
   C:\Program Files\Dealio\kb127es\alerts_over.gif
   C:\Program Files\Dealio\kb127es\alerts_rec.gif
   C:\Program Files\Dealio\kb127es\alerts_rec_over.gif
   C:\Program Files\Dealio\kb127es\chevron-small.gif
   C:\Program Files\Dealio\kb127es\DealioSearch.html
   C:\Program Files\Dealio\kb127es\deals-leftcap.gif
   C:\Program Files\Dealio\kb127es\deal_report.jpg
   C:\Program Files\Dealio\kb127es\ebay_login.jpg
   C:\Program Files\Dealio\kb127es\err_mainwindow.html
   C:\Program Files\Dealio\kb127es\err_toolbar.html
   C:\Program Files\Dealio\kb127es\global_scripts.js
   C:\Program Files\Dealio\kb127es\headerbgthin.jpg
   C:\Program Files\Dealio\kb127es\highlight-bg.png
   C:\Program Files\Dealio\kb127es\logo.gif
   C:\Program Files\Dealio\kb127es\logo_over.gif
   C:\Program Files\Dealio\kb127es\man_toolbar.css
   C:\Program Files\Dealio\kb127es\man_toolbar.html
   C:\Program Files\Dealio\kb127es\man_toolbar.js
   C:\Program Files\Dealio\kb127es\man_toolbarl.js
   C:\Program Files\Dealio\kb127es\post-this-deal.gif
   C:\Program Files\Dealio\kb127es\post-this-deal_over.gif
   C:\Program Files\Dealio\kb127es\scripts.js
   C:\Program Files\Dealio\kb127es\scroller.js
   C:\Program Files\Dealio\kb127es\search-chevron.gif
   C:\Program Files\Dealio\kb127es\search-chevron_over.gif
   C:\Program Files\Dealio\kb127es\search_bg_blink.gif
   C:\Program Files\Dealio\kb127es\separator.gif
   C:\Program Files\Dealio\kb127es\settings.gif
   C:\Program Files\Dealio\kb127es\settings_over.gif
   C:\Program Files\Dealio\kb127es\yahoo-search.png
   C:\Program Files\Dealio\kb127esDN\bottom.gif
   C:\Program Files\Dealio\kb127esDN\chevron_down.gif
   C:\Program Files\Dealio\kb127esDN\chevron_up.gif
   C:\Program Files\Dealio\kb127esDN\close.gif
   C:\Program Files\Dealio\kb127esDN\deskbar.css
   C:\Program Files\Dealio\kb127esDN\deskbar.js
   C:\Program Files\Dealio\kb127esDN\dispatch_helper.js
   C:\Program Files\Dealio\kb127esDN\ebay_compatible.jpg
   C:\Program Files\Dealio\kb127esDN\logo.gif
   C:\Program Files\Dealio\kb127esDN\logo_chevron_bkg.gif
   C:\Program Files\Dealio\kb127esDN\losing.gif
   C:\Program Files\Dealio\kb127esDN\lost.gif
   C:\Program Files\Dealio\kb127esDN\man_deskbar.html
   C:\Program Files\Dealio\kb127esDN\menu_arrow.gif
   C:\Program Files\Dealio\kb127esDN\menu_check.gif
   C:\Program Files\Dealio\kb127esDN
o_image.gif
   C:\Program Files\Dealio\kb127esDN\prod_img.gif
   C:\Program Files\Dealio\kb127esDN\search_chevron.gif
   C:\Program Files\Dealio\kb127esDN\spacer.gif
   C:\Program Files\Dealio\kb127esDN	extfield_bkg.gif
   C:\Program Files\Dealio\kb127esDN	op.gif
   C:\Program Files\Dealio\kb127esDN\unknown.gif
   C:\Program Files\Dealio\kb127esDN\winning.gif
   C:\Program Files\Dealio\kb127esDN\won.gif
   C:\Program Files\Dealio\kb127esFF\deal_report.jpg
   C:\Program Files\Dealio\kb127esFF\ebay_login.jpg
   C:\Program Files\Dealio\kb127ules\index.76.35
   C:\Program Files\Dealio\kb127ulesules.1.10.76
   C:\Program Files\Dealio\kb127ulesules.1.109.43
   C:\Program Files\Dealio\kb127ulesules.1.110.43
   C:\Program Files\Dealio\kb127ulesules.1.12.52
   C:\Program Files\Dealio\kb127ulesules.1.13.58
   C:\Program Files\Dealio\kb127ulesules.1.130.58
   C:\Program Files\Dealio\kb127ulesules.1.135.50
   C:\Program Files\Dealio\kb127ulesules.1.153.44
   C:\Program Files\Dealio\kb127ulesules.1.155.43
   C:\Program Files\Dealio\kb127ulesules.1.156.49
   C:\Program Files\Dealio\kb127ulesules.1.16.60
   C:\Program Files\Dealio\kb127ulesules.1.161.52
   C:\Program Files\Dealio\kb127ulesules.1.178.66
   C:\Program Files\Dealio\kb127ulesules.1.184.55
   C:\Program Files\Dealio\kb127ulesules.1.188.52
   C:\Program Files\Dealio\kb127ulesules.1.189.45
   C:\Program Files\Dealio\kb127ulesules.1.196.43
   C:\Program Files\Dealio\kb127ulesules.1.198.56
   C:\Program Files\Dealio\kb127ulesules.1.199.43
   C:\Program Files\Dealio\kb127ulesules.1.200.53
   C:\Program Files\Dealio\kb127ulesules.1.201.43
   C:\Program Files\Dealio\kb127ulesules.1.202.43
   C:\Program Files\Dealio\kb127ulesules.1.203.71
   C:\Program Files\Dealio\kb127ulesules.1.205.62
   C:\Program Files\Dealio\kb127ulesules.1.213.71
   C:\Program Files\Dealio\kb127ulesules.1.214.49
   C:\Program Files\Dealio\kb127ulesules.1.215.43
   C:\Program Files\Dealio\kb127ulesules.1.216.67
   C:\Program Files\Dealio\kb127ulesules.1.217.67
   C:\Program Files\Dealio\kb127ulesules.1.218.52
   C:\Program Files\Dealio\kb127ulesules.1.219.43
   C:\Program Files\Dealio\kb127ulesules.1.220.43
   C:\Program Files\Dealio\kb127ulesules.1.221.57
   C:\Program Files\Dealio\kb127ulesules.1.222.43
   C:\Program Files\Dealio\kb127ulesules.1.223.68
   C:\Program Files\Dealio\kb127ulesules.1.226.68
   C:\Program Files\Dealio\kb127ulesules.1.227.43
   C:\Program Files\Dealio\kb127ulesules.1.228.62
   C:\Program Files\Dealio\kb127ulesules.1.229.76
   C:\Program Files\Dealio\kb127ulesules.1.23.63
   C:\Program Files\Dealio\kb127ulesules.1.239.43
   C:\Program Files\Dealio\kb127ulesules.1.24.43
   C:\Program Files\Dealio\kb127ulesules.1.240.43
   C:\Program Files\Dealio\kb127ulesules.1.241.43
   C:\Program Files\Dealio\kb127ulesules.1.242.43
   C:\Program Files\Dealio\kb127ulesules.1.243.43
   C:\Program Files\Dealio\kb127ulesules.1.244.63
   C:\Program Files\Dealio\kb127ulesules.1.245.43
   C:\Program Files\Dealio\kb127ulesules.1.247.43
   C:\Program Files\Dealio\kb127ulesules.1.248.43
   C:\Program Files\Dealio\kb127ulesules.1.249.43
   C:\Program Files\Dealio\kb127ulesules.1.250.43
   C:\Program Files\Dealio\kb127ulesules.1.251.43
   C:\Program Files\Dealio\kb127ulesules.1.252.43
   C:\Program Files\Dealio\kb127ulesules.1.253.43
   C:\Program Files\Dealio\kb127ulesules.1.254.43
   C:\Program Files\Dealio\kb127ulesules.1.255.43
   C:\Program Files\Dealio\kb127ulesules.1.256.43
   C:\Program Files\Dealio\kb127ulesules.1.257.43
   C:\Program Files\Dealio\kb127ulesules.1.279.43
   C:\Program Files\Dealio\kb127ulesules.1.28.58
   C:\Program Files\Dealio\kb127ulesules.1.282.75
   C:\Program Files\Dealio\kb127ulesules.1.283.43
   C:\Program Files\Dealio\kb127ulesules.1.284.43
   C:\Program Files\Dealio\kb127ulesules.1.289.67
   C:\Program Files\Dealio\kb127ulesules.1.290.62
   C:\Program Files\Dealio\kb127ulesules.1.291.61
   C:\Program Files\Dealio\kb127ulesules.1.296.43
   C:\Program Files\Dealio\kb127ulesules.1.297.43
   C:\Program Files\Dealio\kb127ulesules.1.304.43
   C:\Program Files\Dealio\kb127ulesules.1.307.43
   C:\Program Files\Dealio\kb127ulesules.1.308.75
   C:\Program Files\Dealio\kb127ulesules.1.31.47
   C:\Program Files\Dealio\kb127ulesules.1.310.46
   C:\Program Files\Dealio\kb127ulesules.1.311.43
   C:\Program Files\Dealio\kb127ulesules.1.315.43
   C:\Program Files\Dealio\kb127ulesules.1.316.43
   C:\Program Files\Dealio\kb127ulesules.1.317.43
   C:\Program Files\Dealio\kb127ulesules.1.318.43
   C:\Program Files\Dealio\kb127ulesules.1.319.49
   C:\Program Files\Dealio\kb127ulesules.1.32.48
   C:\Program Files\Dealio\kb127ulesules.1.334.44
   C:\Program Files\Dealio\kb127ulesules.1.335.60
   C:\Program Files\Dealio\kb127ulesules.1.336.44
   C:\Program Files\Dealio\kb127ulesules.1.337.44
   C:\Program Files\Dealio\kb127ulesules.1.338.75
   C:\Program Files\Dealio\kb127ulesules.1.339.47
   C:\Program Files\Dealio\kb127ulesules.1.34.43
   C:\Program Files\Dealio\kb127ulesules.1.340.47
   C:\Program Files\Dealio\kb127ulesules.1.341.47
   C:\Program Files\Dealio\kb127ulesules.1.349.50
   C:\Program Files\Dealio\kb127ulesules.1.35.48
   C:\Program Files\Dealio\kb127ulesules.1.350.50
   C:\Program Files\Dealio\kb127ulesules.1.351.51
   C:\Program Files\Dealio\kb127ulesules.1.352.54
   C:\Program Files\Dealio\kb127ulesules.1.353.51
   C:\Program Files\Dealio\kb127ulesules.1.354.51
   C:\Program Files\Dealio\kb127ulesules.1.357.62
   C:\Program Files\Dealio\kb127ulesules.1.358.52
   C:\Program Files\Dealio\kb127ulesules.1.359.52
   C:\Program Files\Dealio\kb127ulesules.1.360.53
   C:\Program Files\Dealio\kb127ulesules.1.361.54
   C:\Program Files\Dealio\kb127ulesules.1.362.68
   C:\Program Files\Dealio\kb127ulesules.1.363.58
   C:\Program Files\Dealio\kb127ulesules.1.364.54
   C:\Program Files\Dealio\kb127ulesules.1.365.53
   C:\Program Files\Dealio\kb127ulesules.1.367.56
   C:\Program Files\Dealio\kb127ulesules.1.368.58
   C:\Program Files\Dealio\kb127ulesules.1.369.55
   C:\Program Files\Dealio\kb127ulesules.1.370.56
   C:\Program Files\Dealio\kb127ulesules.1.371.56
   C:\Program Files\Dealio\kb127ulesules.1.372.57
   C:\Program Files\Dealio\kb127ulesules.1.373.55
   C:\Program Files\Dealio\kb127ulesules.1.375.56
   C:\Program Files\Dealio\kb127ulesules.1.376.57
   C:\Program Files\Dealio\kb127ulesules.1.377.55
   C:\Program Files\Dealio\kb127ulesules.1.378.65
   C:\Program Files\Dealio\kb127ulesules.1.384.58
   C:\Program Files\Dealio\kb127ulesules.1.386.71
   C:\Program Files\Dealio\kb127ulesules.1.387.59
   C:\Program Files\Dealio\kb127ulesules.1.388.59
   C:\Program Files\Dealio\kb127ulesules.1.389.59
   C:\Program Files\Dealio\kb127ulesules.1.390.60
   C:\Program Files\Dealio\kb127ulesules.1.391.60
   C:\Program Files\Dealio\kb127ulesules.1.392.60
   C:\Program Files\Dealio\kb127ulesules.1.393.60
   C:\Program Files\Dealio\kb127ulesules.1.394.60
   C:\Program Files\Dealio\kb127ulesules.1.396.61
   C:\Program Files\Dealio\kb127ulesules.1.397.61
   C:\Program Files\Dealio\kb127ulesules.1.398.60
   C:\Program Files\Dealio\kb127ulesules.1.399.60
   C:\Program Files\Dealio\kb127ulesules.1.403.61
   C:\Program Files\Dealio\kb127ulesules.1.404.63
   C:\Program Files\Dealio\kb127ulesules.1.405.61
   C:\Program Files\Dealio\kb127ulesules.1.406.61
   C:\Program Files\Dealio\kb127ulesules.1.407.76
   C:\Program Files\Dealio\kb127ulesules.1.408.63
   C:\Program Files\Dealio\kb127ulesules.1.409.61
   C:\Program Files\Dealio\kb127ulesules.1.412.62
   C:\Program Files\Dealio\kb127ulesules.1.413.62
   C:\Program Files\Dealio\kb127ulesules.1.414.62
   C:\Program Files\Dealio\kb127ulesules.1.415.62
   C:\Program Files\Dealio\kb127ulesules.1.416.62
   C:\Program Files\Dealio\kb127ulesules.1.417.62
   C:\Program Files\Dealio\kb127ulesules.1.418.62
   C:\Program Files\Dealio\kb127ulesules.1.419.62
   C:\Program Files\Dealio\kb127ulesules.1.420.62
   C:\Program Files\Dealio\kb127ulesules.1.421.62
   C:\Program Files\Dealio\kb127ulesules.1.423.63
   C:\Program Files\Dealio\kb127ulesules.1.424.63
   C:\Program Files\Dealio\kb127ulesules.1.425.63
   C:\Program Files\Dealio\kb127ulesules.1.426.63
   C:\Program Files\Dealio\kb127ulesules.1.427.63
   C:\Program Files\Dealio\kb127ulesules.1.428.65
   C:\Program Files\Dealio\kb127ulesules.1.429.63
   C:\Program Files\Dealio\kb127ulesules.1.430.63
   C:\Program Files\Dealio\kb127ulesules.1.432.65
   C:\Program Files\Dealio\kb127ulesules.1.433.64
   C:\Program Files\Dealio\kb127ulesules.1.434.65
   C:\Program Files\Dealio\kb127ulesules.1.435.64
   C:\Program Files\Dealio\kb127ulesules.1.436.76
   C:\Program Files\Dealio\kb127ulesules.1.437.64
   C:\Program Files\Dealio\kb127ulesules.1.438.71
   C:\Program Files\Dealio\kb127ulesules.1.439.71
   C:\Program Files\Dealio\kb127ulesules.1.440.75
   C:\Program Files\Dealio\kb127ulesules.1.442.73
   C:\Program Files\Dealio\kb127ulesules.1.443.73
   C:\Program Files\Dealio\kb127ulesules.1.444.73
   C:\Program Files\Dealio\kb127ulesules.1.445.68
   C:\Program Files\Dealio\kb127ulesules.1.446.69
   C:\Program Files\Dealio\kb127ulesules.1.450.67
   C:\Program Files\Dealio\kb127ulesules.1.451.67
   C:\Program Files\Dealio\kb127ulesules.1.452.68
   C:\Program Files\Dealio\kb127ulesules.1.453.68
   C:\Program Files\Dealio\kb127ulesules.1.454.69
   C:\Program Files\Dealio\kb127ulesules.1.456.69
   C:\Program Files\Dealio\kb127ulesules.1.457.75
   C:\Program Files\Dealio\kb127ulesules.1.458.70
   C:\Program Files\Dealio\kb127ulesules.1.459.70
   C:\Program Files\Dealio\kb127ulesules.1.460.69
   C:\Program Files\Dealio\kb127ulesules.1.462.74
   C:\Program Files\Dealio\kb127ulesules.1.463.69
   C:\Program Files\Dealio\kb127ulesules.1.464.70
   C:\Program Files\Dealio\kb127ulesules.1.465.68
   C:\Program Files\Dealio\kb127ulesules.1.468.70
   C:\Program Files\Dealio\kb127ulesules.1.469.70
   C:\Program Files\Dealio\kb127ulesules.1.470.70
   C:\Program Files\Dealio\kb127ulesules.1.471.73
   C:\Program Files\Dealio\kb127ulesules.1.472.70
   C:\Program Files\Dealio\kb127ulesules.1.478.74
   C:\Program Files\Dealio\kb127ulesules.1.479.73
   C:\Program Files\Dealio\kb127ulesules.1.480.68
   C:\Program Files\Dealio\kb127ulesules.1.481.71
   C:\Program Files\Dealio\kb127ulesules.1.482.74
   C:\Program Files\Dealio\kb127ulesules.1.49.67
   C:\Program Files\Dealio\kb127ulesules.1.50.43
   C:\Program Files\Dealio\kb127ulesules.1.500.71
   C:\Program Files\Dealio\kb127ulesules.1.501.74
   C:\Program Files\Dealio\kb127ulesules.1.502.71
   C:\Program Files\Dealio\kb127ulesules.1.51.69
   C:\Program Files\Dealio\kb127ulesules.1.52.72
   C:\Program Files\Dealio\kb127ulesules.1.520.76
   C:\Program Files\Dealio\kb127ulesules.1.521.76
   C:\Program Files\Dealio\kb127ulesules.1.522.76
   C:\Program Files\Dealio\kb127ulesules.1.53.51
   C:\Program Files\Dealio\kb127ulesules.1.531.76
   C:\Program Files\Dealio\kb127ulesules.1.532.75
   C:\Program Files\Dealio\kb127ulesules.1.534.75
   C:\Program Files\Dealio\kb127ulesules.1.54.47
   C:\Program Files\Dealio\kb127ulesules.1.55.45
   C:\Program Files\Dealio\kb127ulesules.1.56.69
   C:\Program Files\Dealio\kb127ulesules.1.57.43
   C:\Program Files\Dealio\kb127ulesules.1.58.47
   C:\Program Files\Dealio\kb127ulesules.1.593.76
   C:\Program Files\Dealio\kb127ulesules.1.595.76
   C:\Program Files\Dealio\kb127ulesules.1.63.57
   C:\Program Files\Dealio\kb127ulesules.1.66.47
   C:\Program Files\Dealio\kb127ulesules.1.70.75
   C:\Program Files\Dealio\kb127ulesules.1.71.43
   C:\Program Files\Dealio\kb127ulesFF\index.3.67.22
   C:\Program Files\Dealio\kb127ulesFFules.3.109.43
   C:\Program Files\Dealio\kb127ulesFFules.3.178.66
   C:\Program Files\Dealio\kb127ulesFFules.3.198.56
   C:\Program Files\Dealio\kb127ulesFFules.3.245.43
   C:\Program Files\Dealio\kb127ulesFFules.3.247.43
   C:\Program Files\Dealio\kb127ulesFFules.3.279.43
   C:\Program Files\Dealio\kb127ulesFFules.3.283.43
   C:\Program Files\Dealio\kb127ulesFFules.3.284.43
   C:\Program Files\Dealio\kb127ulesFFules.3.289.67
   C:\Program Files\Dealio\kb127ulesFFules.3.290.62
   C:\Program Files\Dealio\kb127ulesFFules.3.297.43
   C:\Program Files\Dealio\kb127ulesFFules.3.315.43
   C:\Program Files\Dealio\kb127ulesFFules.3.319.49
   C:\Program Files\Dealio\kb127ulesFFules.3.335.60
   C:\Program Files\Dealio\kb127ulesFFules.3.337.44
   C:\Program Files\Dealio\kb127ulesFFules.3.340.47
   C:\Program Files\Dealio\kb127ulesFFules.3.360.53
   C:\Program Files\Dealio\kb127ulesFFules.3.386.59
   C:\Program Files\Dealio\kb127ulesFFules.3.388.59
   C:\Program Files\Dealio\kb127ulesFFules.3.391.60
   C:\Program Files\Dealio\kb127ulesFFules.3.398.60
   C:\Program Files\Dealio\kb127ulesFFules.3.399.60
   C:\Program Files\Dealio\kb127ulesFFules.3.403.61
   C:\Program Files\Dealio\kb127ulesFFules.3.404.63
   C:\Program Files\Dealio\kb127ulesFFules.3.405.61
   C:\Program Files\Dealio\kb127ulesFFules.3.406.61
   C:\Program Files\Dealio\kb127ulesFFules.3.407.61
   C:\Program Files\Dealio\kb127ulesFFules.3.408.63
   C:\Program Files\Dealio\kb127ulesFFules.3.409.61
   C:\Program Files\Dealio\kb127ulesFFules.3.412.62
   C:\Program Files\Dealio\kb127ulesFFules.3.413.62
   C:\Program Files\Dealio\kb127ulesFFules.3.414.62
   C:\Program Files\Dealio\kb127ulesFFules.3.415.62
   C:\Program Files\Dealio\kb127ulesFFules.3.416.62
   C:\Program Files\Dealio\kb127ulesFFules.3.417.62
   C:\Program Files\Dealio\kb127ulesFFules.3.418.62
   C:\Program Files\Dealio\kb127ulesFFules.3.419.62
   C:\Program Files\Dealio\kb127ulesFFules.3.420.62
   C:\Program Files\Dealio\kb127ulesFFules.3.421.62
   C:\Program Files\Dealio\kb127ulesFFules.3.424.63
   C:\Program Files\Dealio\kb127ulesFFules.3.427.63
   C:\Program Files\Dealio\kb127ulesFFules.3.432.65
   C:\Program Files\Dealio\kb127ulesFFules.3.49.67
   C:\Program Files\Dealio\kb127ulesFFules.3.51.46
   C:\Program Files\Dealio\kb127ulesFFules.3.52.57
   C:\Program Files\Dealio\kb127ulesFFules.3.53.51
   C:\Program Files\Dealio\kb127ulesFFules.3.54.47
   C:\Program Files\Dealio\kb127ulesFFules.3.57.43
   C:\Program Files\Dealio\kb127ulesFFules.3.58.47
   C:\DOCUME~1\ALLUSE~1.WIN\MENUDM~1\PROGRA~1\Dealio
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\CONTENT\dealiotoolbarplugin.js
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\CONTENT\dealiotoolbarplugin.xul
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\LOCALE\EN-US\dealio.dtd
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\LOCALE\EN-US\dealio.properties
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealio.ico
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealiotoolbarplugin.css
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealio_large.png
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealio_small.png
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealio_winxp_act.ico
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealio_winxp_hot.ico
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealio_win_act.bmp
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealio_win_act.ico
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealio_win_hot.bmp
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\dealio_win_hot.ico
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\CHROME\SKIN\search_dealio.bmp
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\COMPONENTS\DealioFF.dll
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\COMPONENTS\DealioProtocol.js
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\COMPONENTS\IFBHODealio.idl
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\COMPONENTS\IFBHODealio.xpt
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\COMPONENTS\IFBHODealioHelperEngine.idl
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\COMPONENTS\IFBHODealioHelperEngine.xpt
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\COMPONENTS\IFDealioHelperPreferences.idl
   C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com\COMPONENTS\IFDealioHelperPreferences.xpt
   C:\DOCUME~1\ADMINI~1.MCE\Cookies\administrateur@mysearch[1].txt
   C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com
   C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\CONTENT\searchsettingsplugin.js
   C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\CONTENT\searchsettingsplugin.xul
   C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\LOCALE\EN-US\searchsettingsplugin.dtd
   C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\CHROME\LOCALE\EN-US\searchsettingsplugin.properties
   C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com\COMPONENTS\SearchSettingsFF.dll
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Search Settings
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Search Settings\kb127
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Search Settings\kb127es
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Search Settings\kb127	emp
   C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Search Settings\kb127	emp\ws-14241.log
   C:\Program Files\Search Settings
   C:\Program Files\Search Settings\kb127
   C:\Program Files\Search Settings\SearchSettings.exe
   C:\Program Files\Search Settings\kb127es
   C:\Program Files\Search Settings\kb127\SearchSettings.dll
   C:\Program Files\Search Settings\kb127\SearchSettingsRes409.dll
   C:\Program Files\Search Settings\kb127	emp
   C:\DOCUME~1\ADMINI~1.MCE\Favoris\µTorrent Search.url

   -----------\  Extensions

   (Administrateur.MCE2005) - {e4a8a97b-f2ed-450b-b12d-ee082ba24781} => greasemonkey


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Local Page"="C:\WINDOWS\system32\blank.htm"
   "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "SearchMigratedDefaultURL"="https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&src={referrer:source?}"
   "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
   "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Start Page"="https://www.msn.com/fr-fr"


   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !


   1 - "C:\ToolBar SD\TB_1.txt" - 27/12/2008|23:46 - Option : [1]
   2 - "C:\ToolBar SD\TB_2.txt" - 28/12/2008|18:08 - Option : [1]

   -----------\  Fin du rapport a 18:08:12,09



pour moi c est du charabia^^ donc si quelq un peut me venir en aide je lui serait reconnaissant... suis infecter? quelles sont les démarches a mettre en œuvre ?
merci d avance!
cordialement

jlpjlp · Answer

slt refais toolsbar sd choisi l'option 2 et colle le rapport

puis




Télécharges AD-Remover ( de Cyrildu17 / C_XX ) sur ton bureau : 
http://sd-1.archive-host.com/membres/up/16506160323759868/AD-R.exe

/!\ Déconnectes toi et fermes toutes applications en cours 

&#9679; Double clique sur le programme d'installation , et installe le dans son emplacement par défaut. ( C:\Program files ) 
&#9679; Double clique sur l'icône Ad-removersituée sur ton bureau 
&#9679; Au menu principal choisi l'option "A" 
&#9679; Postes le rapport qui apparait à la fin . 

( le rapport est sauvegardé aussi sous C:\Ad-report(date).log ) 

(CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller ) 

Note : 

"Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool. 
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. 
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus. 



et



Télécharge ici :

http://images.malwareremoval.com/random/RSIT.exe

random's system information tool (RSIT) par andom/random et sauvegarde-le sur le Bureau.

Double-clique sur RSIT.exe afin de lancer RSIT.

Clique Continue à l'écran Disclaimer.

Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront.

Poste le contenu de log.txt (<<qui sera affiché)
ainsi que de info.txt (<<qui sera réduit dans la Barre des Tâches).

NB : Les rapports sont sauvegardés dans le dossier C:\rsit

ripou · Answer

hello!
merci de me venir en aide!
donc voila:

j ai fais 2 dans toolbar, rapport:


   -----------\  ToolBar S&D 1.2.8   XP/Vista

   (  :  )
   USER : Administrateur ( Administrator )

   "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
 
   Option : [2] ( 29/12/2008|14:00 )

   -----------\ SUPPRESSION

   Supprime! - C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio\kb127
   Supprime! - C:\Program Files\Dealio\DealioAU.exe
   Supprime! - C:\Program Files\Dealio\kb127
   Supprime! - C:\Program Files\Dealio\SearchSettingsKit.exe
   Supprime! - C:\DOCUME~1\ALLUSE~1.WIN\MENUDM~1\PROGRA~1\Dealio
   Supprime! - C:\Program Files\Mozilla Firefox\extensions	oolbar@dealio.com
   Supprime! - C:\DOCUME~1\ADMINI~1.MCE\Cookies\administrateur@mysearch[1].txt
   Supprime! - C:\Program Files\Mozilla Firefox\extensions\search@searchsettings.com
   Supprime! - C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Search Settings\kb127
   Supprime! - C:\Program Files\Search Settings\kb127
   Supprime! - C:\Program Files\Search Settings\SearchSettings.exe
   Supprime! - C:\DOCUME~1\ADMINI~1.MCE\Favoris\µTorrent Search.url
   Supprime! - C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Dealio
   Supprime! - C:\Program Files\Dealio
   Supprime! - C:\DOCUME~1\ADMINI~1.MCE\APPLIC~1\Search Settings
   Supprime! - C:\Program Files\Search Settings

   -----------\  Recherche de Fichiers / Dossiers ...


   -----------\  Extensions

   (Administrateur.MCE2005) - {e4a8a97b-f2ed-450b-b12d-ee082ba24781} => greasemonkey


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Local Page"="C:\WINDOWS\system32\blank.htm"
   "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "SearchMigratedDefaultURL"="https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&src={referrer:source?}"
   "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
   "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Start Page"="https://www.msn.com/fr-fr/"


   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !


   1 - "C:\ToolBar SD\TB_1.txt" - 27/12/2008|23:46 - Option : [1]
   2 - "C:\ToolBar SD\TB_2.txt" - 28/12/2008|18:08 - Option : [1]
   3 - "C:\ToolBar SD\TB_3.txt" - 29/12/2008|14:02 - Option : [2]

   -----------\  Fin du rapport a 14:02:20,81




puis AD Remover:



--------- Logfile of AD-Remover 1.0.8.0 by C_XX ---------

# START at: 14:10:11 | Lun 29/12/2008 | Microsoft® Windows XP™  SP2 (v5.1.2600)
# BOOT MODE: Normal

# OPTION: Scan | EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat

# PC: MCE2005 | USER: Administrateur ( Current user is an administrator)

# DRIVE(S): 
- C:\  (File System: NTFS)

# Internet Explorer v7.0.5730.13

--------- [ RUNNING PROCESSES: 34 ] ---------

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\slrundll.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32
otepad.exe
C:\WINDOWS\system32
tvdm.exe

-----------------------------------


+-----------------------| Boonty/Boonty Games Elements found :

.

+-----------------------| Eorezo Elements found :

.

+-----------------------| Everest Poker Elements found :

.

+-----------------------| FunWebProducts/MyWay/MyWebSearch/MyGlobalSearch Elements found :

.

+-----------------------| It's TV Elements found :

.

+-----------------------| Sweetim Elements found :

.

+-----------------------| ADDED SCAN :



+---------- Scanning prefs.js ... ( # Mozilla User Preferences )

...\7xv582vg.default\prefs.js :

~~~~ Mozilla FireFox version 2.0.0.20 ~~~~

* Browser Search Default Engine:  "Yahoo"
* Browser Search Selected Engine:  "Yahoo"

+----------+


+---------------------------------------------------------------------------+

+--[HKEY_CURRENT_USER\..\Run]

CTFMON.EXE	REG_SZ	C:\WINDOWS\system32\ctfmon.exe
msnmsgr	REG_SZ	"C:\Program Files\MSN Messenger\msnmsgr.exe" /background
MSMSGS	REG_SZ	"C:\Program Files\Messenger\msmsgs.exe" /background
WOOKIT	REG_SZ	C:\PROGRA~1\Wanadoo\GestMaj.exe GestionnaireInternet.exe
SpybotSD TeaTimer	REG_SZ	C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

+--[HKEY_LOCAL_MACHINE\..\Run]

TkBellExe	REG_SZ	"C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
ehTray	REG_SZ	C:\WINDOWS\ehome\ehtray.exe
Adobe Reader Speed Launcher	REG_SZ	"C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
egui	REG_SZ	"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
KernelFaultCheck	REG_EXPAND_SZ	%systemroot%\system32\dumprep 0 -k

+--[HKEY_USERS\.DEFAULT\..\Run]

CTFMON.EXE	REG_SZ	C:\WINDOWS\system32\CTFMON.EXE

+--[HKEY_CURRENT_USER\..\Internet Explorer\MAIN]

Start Page : hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

+--[HKEY_LOCAL_MACHINE\..\Internet Explorer\MAIN]

Start Page : hxxp://www.msn.com/

+---------------------------------------------------------------------------+

- "C:\AD-report-Clean-27.12.2008.log" (~4331 bytes)

- "C:\AD-report-Scan-27.12.2008.log" (~4061 bytes)

- "C:\AD-report-Scan-29.12.2008.log" (~3779 bytes)

# END at: 14:10:39 | 29/12/2008 - Time elapsed: 28.2 seconds 

+---------------------------------------------------------------------------+
+------------------------------- [ E.O.F - 83 lines ]
+---------------------------------------------------------------------------+



puis j ai télécharger : http://images.malwareremoval.com/random/RSIT.exe
mais quand j essaye de le lancer il me marque:

Line-1:

Error: Incorrect number of parameters in function call.


il doit y a voir un soucis
ps: j ai deja hitjack sur mon pc...
merci de me consacrer du temp j deviens fou^^

jlpjlp · Answer

alors colle le rapport hijackhtis

ripou · Answer

voila chef:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:59:51, on 29/12/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\WgaTray.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\slrundll.exe
C:\WINDOWS\system32\CF14793.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\explorer.exe
C:\ComboFix\handle.cfexe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (file missing)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\GestMaj.exe GestionnaireInternet.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-21-1004336348-261478967-839522115-500\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User '?')
O4 - HKUS\S-1-5-21-1004336348-261478967-839522115-500\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background (User '?')
O4 - HKUS\S-1-5-21-1004336348-261478967-839522115-500\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (User '?')
O4 - HKUS\S-1-5-21-1004336348-261478967-839522115-500\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\GestMaj.exe GestionnaireInternet.exe (User '?')
O4 - HKUS\S-1-5-21-1004336348-261478967-839522115-500\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (User '?')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User '?')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=www.generation-nt.com
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - https://www.touslesdrivers.com/index.php?v_page=29
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Unknown owner - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe (file missing)
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe

jlpjlp · Answer

analyse ce fichier sur virus total et colle le rapport:    
https://www.google.fr/search?q=virus+total&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:fr:official&client=firefox-a&gws_rd=ssl


C:\WINDOWS\system32\CF14793.exe

ripou · Answer

impossible d acceder a ce site... j ai ouvert les part feu, j ai essayer d installer la version pour fire fox mais j arrive pas  a acceder a la page net que puis je faire?

jlpjlp · Answer

sinon analyse ici 

https://www.virscan.org/

http://scanner.virus.org/

http://www.viruschief.com/index.html

ripou · Answer

pour virus scan.org:

Nom de fichier :  	  CF14793.exe
Taille du fichier : 	  400896 byte
Type de fichier : 	  PE32 executable for MS Windows (console) Intel 80386 32-bit
MD5 : 	  738e6ce7aacdc92c2e3d568a2af0795d
SHA1 : 	  adb09b3da8d1e6ebdb24732a9fb10b39207c431c

Résultats des moteurs :  	  tous les moteurs ont dit ne pas avoir trouvé de malware !


j lance les autres...

jlpjlp · Answer

encore des soucis?

ripou · Answer

mon pc rame... les rapports sont bons?

jlpjlp · Answer

oui pour vérifier

colle le rapport d'un des scan suivant:

bitdefender en ligne :
http://www.bitdefender.fr/scan_fr/scan8/ie.html


Panda en ligne :
http://pandasoftware.fr

ripou · Answer

j ai beaucoup de mal^^ y a un souci, j suis pas sur que c est un virus... mais j essaie de scanner quand meme:
pour bitdefender j dois installer internet exploreur 8.... pas moyen... et activscan panda se lance mais s arrete tout le temps, ca bloque à  28 ou 29% le clavier et souris ne répondent plus, meme  ctrl + alt + suppr ne donne rien... la j essaie en mode sans echec... j croise les doigt

ripou · Answer

j ai une bonne et un mauvaise nouvelle ( enfin c es moi que ça regarde^^) j ai réussi a scanner avec panda, j suis encore infecté... voici le rapport:

;***********************************************************************************************************************************************************************************
ANALYSIS: 2008-12-30 01:40:42
PROTECTIONS: 0
MALWARE: 16
SUSPECTS: 0
;***********************************************************************************************************************************************************************************
PROTECTIONS
Description                                  Version                       Active    Updated
;===================================================================================================================================================================================
;===================================================================================================================================================================================
MALWARE
Id        Description                        Type                Active    Severity  Disinfectable  Disinfected Location
;===================================================================================================================================================================================
00139064  Cookie/Atlas DMT                   TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur.MCE2005\Application Data\Mozilla\Firefox\Profiles\7xv582vg.default\cookies.txt[.atdmt.com/]
00145405  Cookie/RealMedia                   TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur.MCE2005\Application Data\Mozilla\Firefox\Profiles\7xv582vg.default\cookies.txt[.247realmedia.com/]
00145405  Cookie/RealMedia                   TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur.MCE2005\Application Data\Mozilla\Firefox\Profiles\7xv582vg.default\cookies.txt[.247realmedia.com/]
00145758  Cookie/Mysearch                    TrackingCookie      No        0         Yes            No           C:\ToolBar SD\Backup-TB\DOCUME~1\ADMINI~1.MCE\Cookies\administrateur@mysearch[1].txt
00167704  Cookie/Xiti                        TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur.MCE2005\Cookies\administrateur@xiti[1].txt
00167704  Cookie/Xiti                        TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur.MCE2005\Application Data\Mozilla\Firefox\Profiles\7xv582vg.default\cookies.txt[.xiti.com/]
00167704  Cookie/Xiti                        TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur\Cookies\administrateur@xiti[1].txt
00167709  Cookie/fe.lea.lycos                TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur\Cookies\administrateur@fe.lea.lycos[1].txt
00167709  Cookie/fe.lea.lycos                TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur.MCE2005\Application Data\Mozilla\Firefox\Profiles\7xv582vg.default\cookies.txt[fe.lea.lycos.fr/]
00167749  Cookie/Toplist                     TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur\Cookies\administrateur@toplist[1].txt
00168106  Cookie/Weborama                    TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur.MCE2005\Application Data\Mozilla\Firefox\Profiles\7xv582vg.default\cookies.txt[.weborama.fr/]
00168110  Cookie/Server.iad.Liveperson       TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur\Cookies\administrateur@server.iad.liveperson[2].txt
00168116  Cookie/Comclick                    TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur\Cookies\administrateur@fl01.ct2.comclick[1].txt
00170495  Cookie/PointRoll                   TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur.MCE2005\Cookies\administrateur@ads.pointroll[1].txt
00273339  Cookie/Smartadserver               TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur.MCE2005\Application Data\Mozilla\Firefox\Profiles\7xv582vg.default\cookies.txt[.smartadserver.com/]
00273339  Cookie/Smartadserver               TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur.MCE2005\Application Data\Mozilla\Firefox\Profiles\7xv582vg.default\cookies.txt[.smartadserver.com/]
00273339  Cookie/Smartadserver               TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur.MCE2005\Application Data\Mozilla\Firefox\Profiles\7xv582vg.default\cookies.txt[.smartadserver.com/]
00273339  Cookie/Smartadserver               TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur.MCE2005\Application Data\Mozilla\Firefox\Profiles\7xv582vg.default\cookies.txt[.smartadserver.com/]
00288208  Application/HideWindow.S           HackTools           No        0         Yes            No           C:\Program Files\Ad-remover\TOOLS\cmdow.exe
01185375  Application/Psexec.A               HackTools           No        0         Yes            No           C:\System Volume Information\_restore{877DFE0A-D4C5-4797-83DB-5CA54A4FDDDC}\RP354\A0354381.EXE
02885963  Rootkit/Booto.C                    Virus/Worm          No        0         Yes            Yes          C:\System Volume Information\_restore{877DFE0A-D4C5-4797-83DB-5CA54A4FDDDC}\RP354\A0354360.sys
02916438  Application/FamilyKeylogger.B      HackTools           No        0         Yes            No           C:\WINDOWS\system32\svcl32\svcl32.dll
03898822  Generic Malware                    Virus/Trojan        No        0         Yes            Yes          C:\Documents and Settings\Administrateur\Mes documents\Downloads\Windows XP home edition with serial + crack\Windows XP home edition with Serial + crack.zip[winxp/Crack/crack.exe]
03898822  Generic Malware                    Virus/Trojan        No        0         Yes            Yes          C:\Documents and Settings\Administrateur\Mes documents\Downloads\Windows XP home edition with serial + crack\Windows XP home edition with Serial + crack\winxp\Crack\crack.exe
;===================================================================================================================================================================================
SUSPECTS
Sent      Location                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              
;===================================================================================================================================================================================
;===================================================================================================================================================================================
VULNERABILITIES
Id        Severity   Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                
;===================================================================================================================================================================================
;===================================================================================================================================================================================



encore des malwares...

jlpjlp · Answer

télécharge OTMoveIt

http://oldtimer.geekstogo.com/OTMoveIt3.exe

(de Old_Timer) sur ton Bureau.
double-clique sur OTMoveIt.exe pour le lancer.
copie la liste qui se trouve en citation ci-dessous,
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.




:files
C:\WINDOWS\system32\svcl32\svcl32.dll
C:\Documents and Settings\Administrateur\Mes documents\Downloads\Windows XP home edition with serial + crack\Windows XP home edition with Serial + crack.zip[winxp/Crack/crack.exe]
C:\Documents and Settings\Administrateur\Mes documents\Downloads\Windows XP home edition with serial + crack\Windows XP home edition with Serial + crack\winxp\Crack\crack.exe


clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre "Results".
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.

___________________

vire ce qui est dans moved files en allant dans poste de travail puis
 C:\_OTMoveIt\MovedFiles

_____________________
nettoie les traces : cookies... avec ccleaner:
https://www.malekal.com/tutoriel-ccleaner/

______________________

pour virer ce qui a été utilisé lance tools cleaner et colle nous le rapport

http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner

_____________________

si tot s'est bien passé pour finir de virer les infections qui sont dans ta restauration, désactive ta restauration puis redemarre ton ordi puis réactive la

https://www.informatruc.com

_____________________

encore des problèmes???

ripou · Answer

pour OTMoveIt :
j ai fais c que vous demandiez... mais j pensais qu il y aurais un rapport bloc note j ai quitter , ca a redemarer sans que j ai pris le rapport.. pardon donc j'ai réitérer l operation et voici le rapport:

========== FILES ==========
File/Folder C:\WINDOWS\system32\svcl32\svcl32.dll not found.

(la premiere foi il y avait deux message d erreur dans rapport.. ils n y sont plus)

ps: a chaque fois que j ai cliquer movelt! un message d error apparait:

"invalid time flag [crack.exe]
Must be numerical"

j continue votre procédure...

ripou · Answer

"vire ce qui est dans moved files en allant dans poste de travail puis
C:\_OTMoveIt\MovedFiles"

les fichiers étaient vides...

j ai fais tourner ccleaner puis toolscleaner2:


[ Rapport ToolsCleaner version 2.2.9 (par A.Rothstein & dj QUIOU) ]

-->- Recherche: 

C:\TB.txt: trouvé !
C:\_OtMoveIt: trouvé !
C:\Toolbar SD: trouvé !
C:\Rsit: trouvé !
C:\Documents and Settings\Administrateur.MCE2005\Bureau\HijackThis.lnk: trouvé !
C:\Documents and Settings\Administrateur.MCE2005\Bureau\HJTInstall.exe: trouvé !
C:\Documents and Settings\Administrateur.MCE2005\Bureau\ToolBarSD.exe: trouvé !
C:\Documents and Settings\Administrateur.MCE2005\Bureau\OTMoveIt3.exe: trouvé !
C:\Documents and Settings\Administrateur.MCE2005\Bureau\Rsit.exe: trouvé !
C:\Documents and Settings\Administrateur.MCE2005\Local Settings\Application Data\Microsoft\Messenger\pierredestrass@hotmail.fr\Sharing Folders\valwebes@hotmail.com\MsnFix: trouvé !
C:\Documents and Settings\Administrateur.MCE2005\Local Settings\Application Data\Microsoft\Messenger\pierredestrass@hotmail.fr\Sharing Folders\valwebes@hotmail.com\MSNFix\MsnFix: trouvé !
C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Program Files\Ad-remover\TOOLS\NIRCMD.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !

---------------------------------
-->- Suppression: 

C:\Documents and Settings\Administrateur.MCE2005\Bureau\HijackThis.lnk: supprimé !
C:\Documents and Settings\Administrateur.MCE2005\Bureau\HJTInstall.exe: supprimé !
C:\Documents and Settings\Administrateur.MCE2005\Bureau\ToolBarSD.exe: supprimé !
C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\TB.txt: supprimé !
C:\Documents and Settings\Administrateur.MCE2005\Bureau\OTMoveIt3.exe: supprimé !
C:\Documents and Settings\Administrateur.MCE2005\Bureau\Rsit.exe: supprimé !
C:\Program Files\Ad-remover\TOOLS\NIRCMD.exe: supprimé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
C:\_OtMoveIt: supprimé !
C:\Toolbar SD: supprimé !
C:\Rsit: supprimé !
C:\Documents and Settings\Administrateur.MCE2005\Local Settings\Application Data\Microsoft\Messenger\pierredestrass@hotmail.fr\Sharing Folders\valwebes@hotmail.com\MsnFix: supprimé !
C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !

... j m en vais desactiver ma restauration! merci encore...

ripou · Answer

mission accompli!
vous pouvez juste me dire si les rapports sont bons?
j utilise avast et spybot pour protéger mon ordi... est ce que vous jugez ca suffisant? ou vous avez autre chose a me proposer?
encore mille merci de m avoir consacrer du temps!

jlpjlp · Answer

ok
alors vire manuellement si presents:


C:\WINDOWS\system32\svcl32\svcl32.dll
C:\Documents and Settings\Administrateur\Mes documents\Downloads\Windows XP home edition with serial + crack\Windows XP home edition with Serial + crack.zip[winxp/Crack/crack.exe]
C:\Documents and Settings\Administrateur\Mes documents\Downloads\Windows XP home edition with serial + crack\Windows XP home edition with Serial + crack\winxp\Crack\crack.exe



a plus

jlpjlp · Answer

pour protéger gratos ton ordi
http://www.commentcamarche.net/telecharger/logiciel 4 securite

mettre un antivirus

ANTIVIR de préference ou (avast)
https://www.malekal.com/avira-free-security-antivirus-gratuit/ (merci Malekal)
-------------
des anti-espions :
MALWAREBYTE ANTIMALWARE + SPYBOT
+
SPYWAREBLASTER pour immuniser le système contre vundo notamment mais en anglais (mais facile d'utilisation : il suffit de faire "update" pour mettre à jour tous les mois et ensuite" enable all protection" pour immuniser)...

--------
un pare feu :
(celui de Windows) ou mieux COMODO ou KERIO ou JETICO ou ZONE ALARM (mettre que le parefeu gratuit)

http://www.clubic.com/telecharger-fiche11071-sunbelt-persona­l-firewall-e(...)
https://manuelsdaide.com/contact/
http://www.open-files.com/forum/index.php?showtopic=29277
https://www.commentcamarche.net/telecharger/ 157 zonealarm

-----------

CCLEANER pour effacer les traces de surf

ripou · Answer

C:\WINDOWS\system32\svcl32\svcl32.dll
...introuvable! et:

C:\Documents and Settings\Administrateur\Mes documents\Downloads\Windows XP home edition with serial + crack\Windows XP home edition with Serial + crack\winxp\Crack\crack.exe 
...introuvable également...!?
est ce normal?

merci pour les logiciels ca  va bien m dépanner^^

jlpjlp · Answer

ils ont peut être été déjà virés ,vérifie avec panda éventuellement


sinon encore des soucis???

ripou · Answer

re^^
nan j ai l impression qu il tourne bien mais pande detecte encore des fichiers infectés... j commence a perdre espoir... voici rapport:

;***********************************************************************************************************************************************************************************
ANALYSIS: 2008-12-30 23:10:39
PROTECTIONS: 0
MALWARE: 8
SUSPECTS: 0
;***********************************************************************************************************************************************************************************
PROTECTIONS
Description                                  Version                       Active    Updated
;===================================================================================================================================================================================
;===================================================================================================================================================================================
MALWARE
Id        Description                        Type                Active    Severity  Disinfectable  Disinfected Location
;===================================================================================================================================================================================
00167704  Cookie/Xiti                        TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur.MCE2005\Application Data\Mozilla\Firefox\Profiles\7xv582vg.default\cookies.txt[.xiti.com/]
00167704  Cookie/Xiti                        TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur\Cookies\administrateur@xiti[1].txt
00167709  Cookie/fe.lea.lycos                TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur\Cookies\administrateur@fe.lea.lycos[1].txt
00167749  Cookie/Toplist                     TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur\Cookies\administrateur@toplist[1].txt
00168110  Cookie/Server.iad.Liveperson       TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur\Cookies\administrateur@server.iad.liveperson[2].txt
00168116  Cookie/Comclick                    TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur\Cookies\administrateur@fl01.ct2.comclick[1].txt
00170495  Cookie/PointRoll                   TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur.MCE2005\Application Data\Mozilla\Firefox\Profiles\7xv582vg.default\cookies.txt[.ads.pointroll.com/]
00170495  Cookie/PointRoll                   TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur.MCE2005\Application Data\Mozilla\Firefox\Profiles\7xv582vg.default\cookies.txt[.ads.pointroll.com/]
00170495  Cookie/PointRoll                   TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur.MCE2005\Application Data\Mozilla\Firefox\Profiles\7xv582vg.default\cookies.txt[.ads.pointroll.com/]
00170495  Cookie/PointRoll                   TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur.MCE2005\Application Data\Mozilla\Firefox\Profiles\7xv582vg.default\cookies.txt[.ads.pointroll.com/]
00170495  Cookie/PointRoll                   TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur.MCE2005\Application Data\Mozilla\Firefox\Profiles\7xv582vg.default\cookies.txt[.ads.pointroll.com/]
00170495  Cookie/PointRoll                   TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur.MCE2005\Application Data\Mozilla\Firefox\Profiles\7xv582vg.default\cookies.txt[.ads.pointroll.com/]
00170495  Cookie/PointRoll                   TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur.MCE2005\Application Data\Mozilla\Firefox\Profiles\7xv582vg.default\cookies.txt[.ads.pointroll.com/]
00170495  Cookie/PointRoll                   TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur.MCE2005\Application Data\Mozilla\Firefox\Profiles\7xv582vg.default\cookies.txt[.ads.pointroll.com/]
00273339  Cookie/Smartadserver               TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur.MCE2005\Application Data\Mozilla\Firefox\Profiles\7xv582vg.default\cookies.txt[.smartadserver.com/]
00273339  Cookie/Smartadserver               TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur.MCE2005\Application Data\Mozilla\Firefox\Profiles\7xv582vg.default\cookies.txt[.smartadserver.com/]
00273339  Cookie/Smartadserver               TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur.MCE2005\Application Data\Mozilla\Firefox\Profiles\7xv582vg.default\cookies.txt[.smartadserver.com/]
00273339  Cookie/Smartadserver               TrackingCookie      No        0         Yes            No           C:\Documents and Settings\Administrateur.MCE2005\Application Data\Mozilla\Firefox\Profiles\7xv582vg.default\cookies.txt[.smartadserver.com/]
00288208  Application/HideWindow.S           HackTools           No        0         Yes            No           C:\Program Files\Ad-remover\TOOLS\cmdow.exe
;===================================================================================================================================================================================
SUSPECTS
Sent      Location                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              hc
;===================================================================================================================================================================================
;===================================================================================================================================================================================
VULNERABILITIES
Id        Severity   Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                hc
;===================================================================================================================================================================================
;===================================================================================================================================================================================

jlpjlp · Answer

ok pas de souci tu vire ad remover que nous avons utilisés en allant dans poste de travail puis

C:\Program Files\Ad-remover





pour le reste ce ne sont que des cookies que l'on a tous dès que l'on va sur le net

utilise regulièrement CCLEANER pour les virer!!


bonne suite!!!!

ripou · Answer

ok merci beaucoup! bonne année bonne santé! plein de bonheur et tout et tout!!!!!

jlpjlp · Answer

merci
et bonnes fêtes

Barre d outil infecté.. rapport toolbar

25 réponses

Votre réponse

Discussions similaires

Newsletters