Sujet Précédent Sujet Suivant

Disparition icones sur bureau

vinvin42 -  
DeNisCoOl Messages postés 2871 Statut Membre -
Bonjour,
voila une semaine que je galere j'ai perdu la barre des taches ainsi que les icones de mon bureau,il est egalement impossible d'ouvrir IE6(message erreur:une erreur interne s'est produite dans internet explorer,internet explorer va se terminer)quand j'essai de faire une restauration par l'intermediare du gestionnaire des taches(ctr+alt+suppr)j'ai droit a une fenetre vierge blanche avec un encadrement bleu intitulé restauration donc impossible.A part ca j'ai tenté le scan avec plusieur anti virus(avast et antivir) et antispyware(spybot,avg) mais il ne detecte rien.je note aussi que dans mes processus en cours il manque explorer.exe mais quand je le lance manuellement il apparait 1 seconde et redisparait.Il me reste plus que 2 solution:
-reinstaller win xp en mode reparation dès que j'aurais recuperé mon cd que j'ai preté
-vous poster un rapport hijack que voici:ca serai super sympa de me dire si mon pc est infecté ou pas:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 02:59:41, on 04/01/2009
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\System32\ScsiAccess.EXE
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Wanadoo\GestionnaireInternet.exe
C:\Program Files\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\Wanadoo\Watch.exe
C:\PROGRA~1\Wanadoo\WOOBrowser\WOOBrowser.exe
C:\Documents and Settings\vincent\Mes documents\Utilisateur1\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb127\Dealio.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O2 - BHO: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)
O2 - BHO: (no name) - {ecdee021-0d17-467f-a1ff-c7a115230949} - (no file)
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: (no name) - {ecdee021-0d17-467f-a1ff-c7a115230949} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: (no name) - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - (no file)
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [AtiCwd32] Aticwd32.exe
O4 - HKLM\..\Run: [AtiQiPcl] AtiQiPcl.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [Wnsp] C:\Program Files\Wnsp\wnsp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [au] C:\Program Files\Dealio\DealioAU.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [WOOKIT] C:\Program Files\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User '?')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User '?')
O4 - HKUS\S-1-5-21-682003330-2025429265-725345543-1004\..\Run: [WOOKIT] C:\Program Files\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx (User '?')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User '?')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Compare Prices with &Dealio - C:\Documents and Settings\celine\Application Data\Dealio\kb127\res\DealioSearch.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll
O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: ScsiAccess - Unknown owner - C:\WINDOWS\System32\ScsiAccess.EXE
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
A voir également:

9 réponses

Réponse 1 / 9
DeNisCoOl Messages postés 2871 Statut Membre 224
 
salut vinvin42,

Tu es infecté par une barre d'outils non désirable Dealio\DealioAU.exe
Pour des raisons de sécurité il faudra que tu fasses dès que possible les mise à jours SP2 et SP3, ainsi que Internet explorer 7.
Avast ne te protègera pas vraiment beaucoup contre toutes les failles de ton windows actuellement.

**********
* Télécharge Toolbar S&D sur ton Bureau :
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

* Lance l'installation du programme en exécutant le fichier téléchargé.
* Double-clique sur le raccourci de Toolbar S&D.
* Sélectionne la langue puis valide.
* Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
* Copie/colle le contenu du rapport situé dans C:\TB.txt .

Bien lire son tutoriel : https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/

**********
Ensuite
* Suivre les instructions pour télécharger et exécuter MalwareBytes_AntiMalware:
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
Après installation fermer vos programmes et votre navigateur:
* MBAM se met automatiquement à jour en fin d'installation

Pour une plus grand efficacité il est parfois préférable d’exécuter l’analyse en mode sans échec:
* Démarre en mode sans échec : après le bip et avant le logo windows tapoter sur la touche F8 (ou F5): menu M.S.E..
Si problème voir Tutoriel Symantec.
Choisir son compte, pas celui de l'Administrateur ou autre.

* Dans l'onglet analyse, s’assurer de cocher "Exécuter une analyse complète" et cliquer sur le bouton Rechercher pour démarrer l'analyse.

* Si des malwares ont été détectés, leur liste s'affiche.
En cliquant sur Suppression (?) , MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.

* MBAM va ouvrir le bloc-notes et y copier le rapport d'analyse. Ferme le bloc-note. (Le rapport peut être retrouvé sous l'onglet Rapports/logs)

*Le coller dans le prochain message

* Pour terminer le nettoyage tu auras peut être besoin de redémarrer.

A+

Denis
0
Réponse 2 / 9
vinvin42
 
salut deniscool!
tout d'abord merci pour ton interet et meilleur voeux pour cette nouvelle année

en ce qui concerne Malwarebytes j'ai deja lancer un scan et pas de fichier infecté detecté.
par contre voici le rapport de ToolbarSD:

-----------\\ ToolBar S&D 1.2.8 XP/Vista

( : )
USER : celine ( Administrator )

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [1] ( 04/01/2009|13:45 )

-----------\\ Recherche de Fichiers / Dossiers ...

C:\DOCUME~1\celine\APPLIC~1\Dealio
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\res
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\temp
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\res\alerts.gif
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\res\alerts_over.gif
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\res\alerts_rec.gif
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\res\alerts_rec_over.gif
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\res\chevron-small.gif
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\res\DealioSearch.html
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\res\deals-leftcap.gif
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\res\deal_report.jpg
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\res\ebay_login.jpg
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\res\err_mainwindow.html
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\res\err_toolbar.html
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\res\global_scripts.js
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\res\headerbgthin.jpg
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\res\highlight-bg.png
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\res\logo.gif
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\res\logo_over.gif
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\res\man_toolbar.css
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\res\man_toolbar.html
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\res\man_toolbar.js
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\res\man_toolbarl.js
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\res\post-this-deal.gif
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\res\post-this-deal_over.gif
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\res\scripts.js
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\res\scroller.js
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\res\search-chevron.gif
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\res\search-chevron_over.gif
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\res\search_bg_blink.gif
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\res\separator.gif
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\res\settings.gif
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\res\settings_over.gif
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\res\yahoo-search.png
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\index.76.35
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.10.76
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.109.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.110.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.12.52
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.13.58
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.130.58
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.135.50
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.153.44
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.155.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.156.49
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.16.60
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.161.52
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.178.66
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.184.55
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.188.52
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.189.45
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.196.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.198.56
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.199.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.200.53
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.201.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.202.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.203.71
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.205.62
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.213.71
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.214.49
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.215.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.216.67
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.217.67
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.218.52
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.219.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.220.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.221.57
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.222.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.223.68
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.226.68
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.227.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.228.62
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.229.76
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.23.63
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.239.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.24.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.240.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.241.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.242.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.243.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.244.63
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.245.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.247.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.248.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.249.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.250.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.251.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.252.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.253.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.254.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.255.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.256.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.257.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.279.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.28.58
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.282.75
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.283.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.284.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.289.67
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.290.62
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.291.61
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.296.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.297.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.304.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.307.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.308.75
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.31.47
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.310.46
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.311.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.315.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.316.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.317.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.318.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.319.49
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.32.48
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.334.44
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.335.60
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.336.44
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.337.44
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.338.75
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.339.47
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.34.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.340.47
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.341.47
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.349.50
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.35.48
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.350.50
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.351.51
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.352.54
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.353.51
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.354.51
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.357.62
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.358.52
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.359.52
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.360.53
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.361.54
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.362.68
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.363.58
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.364.54
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.365.53
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.367.56
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.368.58
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.369.55
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.370.56
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.371.56
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.372.57
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.373.55
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.375.56
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.376.57
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.377.55
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.378.65
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.384.58
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.386.71
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.387.59
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.388.59
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.389.59
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.390.60
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.391.60
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.392.60
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.393.60
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.394.60
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.396.61
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.397.61
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.398.60
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.399.60
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.403.61
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.404.63
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.405.61
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.406.61
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.407.76
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.408.63
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.409.61
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.412.62
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.413.62
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.414.62
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.415.62
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.416.62
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.417.62
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.418.62
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.419.62
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.420.62
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.421.62
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.423.63
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.424.63
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.425.63
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.426.63
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.427.63
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.428.65
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.429.63
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.430.63
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.432.65
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.433.64
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.434.65
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.435.64
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.436.76
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.437.64
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.438.71
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.439.71
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.440.75
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.442.73
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.443.73
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.444.73
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.445.68
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.446.69
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.450.67
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.451.67
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.452.68
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.453.68
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.454.69
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.456.69
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.457.75
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.458.70
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.459.70
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.460.69
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.462.74
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.463.69
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.464.70
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.465.68
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.468.70
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.469.70
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.470.70
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.471.73
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.472.70
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.478.74
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.479.73
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.480.68
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.481.71
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.482.74
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.49.67
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.50.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.500.71
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.501.74
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.502.71
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.51.69
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.52.72
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.520.76
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.521.76
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.522.76
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.53.51
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.531.76
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.532.75
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.534.75
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.54.47
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.55.45
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.56.69
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.57.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.58.47
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.593.76
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.595.76
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.63.57
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.66.47
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.70.75
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\rules\rules.1.71.43
C:\DOCUME~1\celine\APPLIC~1\Dealio\kb127\temp\dealio-14242.log
C:\DOCUME~1\vincent\APPLIC~1\Dealio
C:\DOCUME~1\vincent\APPLIC~1\Dealio\dinstallhelper.4B3201567C37426CAC07184764C480A9.dll
C:\DOCUME~1\vincent\APPLIC~1\Dealio\dinstallhelper.E7D0F108C6684BE18D07D54E80FF7B2D.dll
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\res
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\resDN
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\temp
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\res\alerts.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\res\alerts_over.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\res\alerts_rec.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\res\alerts_rec_over.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\res\chevron-small.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\res\DealioSearch.html
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\res\deals-leftcap.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\res\deal_report.jpg
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\res\ebay_login.jpg
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\res\err_mainwindow.html
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\res\err_toolbar.html
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\res\global_scripts.js
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\res\headerbgthin.jpg
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\res\highlight-bg.png
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\res\logo.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\res\logo_over.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\res\man_toolbar.css
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\res\man_toolbar.html
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\res\man_toolbar.js
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\res\man_toolbarl.js
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\res\post-this-deal.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\res\post-this-deal_over.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\res\scripts.js
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\res\scroller.js
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\res\search-chevron.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\res\search-chevron_over.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\res\search_bg_blink.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\res\separator.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\res\settings.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\res\settings_over.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\res\yahoo-search.png
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\resDN\bottom.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\resDN\chevron_down.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\resDN\chevron_up.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\resDN\close.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\resDN\deskbar.css
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\resDN\deskbar.js
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\resDN\dispatch_helper.js
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\resDN\ebay_compatible.jpg
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\resDN\logo.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\resDN\logo_chevron_bkg.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\resDN\losing.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\resDN\lost.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\resDN\man_deskbar.html
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\resDN\menu_arrow.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\resDN\menu_check.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\resDN\no_image.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\resDN\prod_img.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\resDN\search_chevron.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\resDN\spacer.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\resDN\textfield_bkg.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\resDN\top.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\resDN\unknown.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\resDN\winning.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\resDN\won.gif
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\index.76.35
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.10.76
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.109.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.110.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.12.52
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.13.58
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.130.58
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.135.50
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.153.44
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.155.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.156.49
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.16.60
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.161.52
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.178.66
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.184.55
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.188.52
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.189.45
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.196.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.198.56
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.199.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.200.53
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.201.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.202.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.203.71
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.205.62
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.213.71
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.214.49
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.215.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.216.67
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.217.67
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.218.52
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.219.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.220.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.221.57
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.222.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.223.68
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.226.68
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.227.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.228.62
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.229.76
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.23.63
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.239.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.24.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.240.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.241.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.242.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.243.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.244.63
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.245.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.247.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.248.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.249.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.250.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.251.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.252.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.253.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.254.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.255.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.256.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.257.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.279.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.28.58
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.282.75
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.283.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.284.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.289.67
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.290.62
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.291.61
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.296.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.297.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.304.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.307.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.308.75
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.31.47
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.310.46
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.311.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.315.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.316.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.317.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.318.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.319.49
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.32.48
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.334.44
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.335.60
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.336.44
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.337.44
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.338.75
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.339.47
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.34.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.340.47
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.341.47
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.349.50
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.35.48
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.350.50
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.351.51
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.352.54
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.353.51
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.354.51
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.357.62
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.358.52
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.359.52
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.360.53
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.361.54
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.362.68
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.363.58
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.364.54
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.365.53
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.367.56
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.368.58
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.369.55
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.370.56
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.371.56
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.372.57
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.373.55
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.375.56
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.376.57
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.377.55
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.378.65
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.384.58
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.386.71
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.387.59
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.388.59
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.389.59
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.390.60
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.391.60
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.392.60
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.393.60
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.394.60
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.396.61
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.397.61
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.398.60
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.399.60
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.403.61
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.404.63
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.405.61
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.406.61
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.407.76
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.408.63
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.409.61
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.412.62
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.413.62
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.414.62
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.415.62
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.416.62
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.417.62
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.418.62
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.419.62
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.420.62
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.421.62
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.423.63
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.424.63
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.425.63
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.426.63
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.427.63
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.428.65
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.429.63
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.430.63
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.432.65
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.433.64
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.434.65
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.435.64
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.436.76
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.437.64
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.438.71
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.439.71
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.440.75
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.442.73
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.443.73
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.444.73
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.445.68
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.446.69
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.450.67
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.451.67
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.452.68
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.453.68
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.454.69
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.456.69
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.457.75
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.458.70
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.459.70
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.460.69
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.462.74
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.463.69
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.464.70
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.465.68
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.468.70
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.469.70
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.470.70
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.471.73
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.472.70
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.478.74
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.479.73
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.480.68
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.481.71
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.482.74
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.49.67
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.50.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.500.71
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.501.74
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.502.71
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.51.69
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.52.72
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.520.76
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.521.76
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.522.76
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.53.51
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.531.76
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.532.75
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.534.75
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.54.47
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.55.45
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.56.69
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.57.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.58.47
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.593.76
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.595.76
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.63.57
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.66.47
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.70.75
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\rules\rules.1.71.43
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\temp\dealio-14239.log
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\temp\dod_cache.xml
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2520_3700_5.html
C:\DOCUME~1\vincent\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2860_2344_5.html
C:\Program Files\Dealio
C:\Program Files\Dealio\DealioAU.exe
C:\Program Files\Dealio\kb127
C:\Program Files\Dealio\SearchSettingsKit.exe
C:\Program Files\Dealio\kb127\Dealio Deskbar.exe
C:\Program Files\Dealio\kb127\Dealio.dll
C:\Program Files\Dealio\kb127\DealioRes409.dll
C:\Program Files\Dealio\kb127\res
C:\Program Files\Dealio\kb127\resDN
C:\Program Files\Dealio\kb127\rules
C:\Program Files\Dealio\kb127\temp
C:\Program Files\Dealio\kb127\res\alerts.gif
C:\Program Files\Dealio\kb127\res\alerts_over.gif
C:\Program Files\Dealio\kb127\res\alerts_rec.gif
C:\Program Files\Dealio\kb127\res\alerts_rec_over.gif
C:\Program Files\Dealio\kb127\res\chevron-small.gif
C:\Program Files\Dealio\kb127\res\DealioSearch.html
C:\Program Files\Dealio\kb127\res\deals-leftcap.gif
C:\Program Files\Dealio\kb127\res\deal_report.jpg
C:\Program Files\Dealio\kb127\res\ebay_login.jpg
C:\Program Files\Dealio\kb127\res\err_mainwindow.html
C:\Program Files\Dealio\kb127\res\err_toolbar.html
C:\Program Files\Dealio\kb127\res\global_scripts.js
C:\Program Files\Dealio\kb127\res\headerbgthin.jpg
C:\Program Files\Dealio\kb127\res\highlight-bg.png
C:\Program Files\Dealio\kb127\res\logo.gif
C:\Program Files\Dealio\kb127\res\logo_over.gif
C:\Program Files\Dealio\kb127\res\man_toolbar.css
C:\Program Files\Dealio\kb127\res\man_toolbar.html
C:\Program Files\Dealio\kb127\res\man_toolbar.js
C:\Program Files\Dealio\kb127\res\man_toolbarl.js
C:\Program Files\Dealio\kb127\res\post-this-deal.gif
C:\Program Files\Dealio\kb127\res\post-this-deal_over.gif
C:\Program Files\Dealio\kb127\res\scripts.js
C:\Program Files\Dealio\kb127\res\scroller.js
C:\Program Files\Dealio\kb127\res\search-chevron.gif
C:\Program Files\Dealio\kb127\res\search-chevron_over.gif
C:\Program Files\Dealio\kb127\res\search_bg_blink.gif
C:\Program Files\Dealio\kb127\res\separator.gif
C:\Program Files\Dealio\kb127\res\settings.gif
C:\Program Files\Dealio\kb127\res\settings_over.gif
C:\Program Files\Dealio\kb127\res\yahoo-search.png
C:\Program Files\Dealio\kb127\resDN\bottom.gif
C:\Program Files\Dealio\kb127\resDN\chevron_down.gif
C:\Program Files\Dealio\kb127\resDN\chevron_up.gif
C:\Program Files\Dealio\kb127\resDN\close.gif
C:\Program Files\Dealio\kb127\resDN\deskbar.css
C:\Program Files\Dealio\kb127\resDN\deskbar.js
C:\Program Files\Dealio\kb127\resDN\dispatch_helper.js
C:\Program Files\Dealio\kb127\resDN\ebay_compatible.jpg
C:\Program Files\Dealio\kb127\resDN\logo.gif
C:\Program Files\Dealio\kb127\resDN\logo_chevron_bkg.gif
C:\Program Files\Dealio\kb127\resDN\losing.gif
C:\Program Files\Dealio\kb127\resDN\lost.gif
C:\Program Files\Dealio\kb127\resDN\man_deskbar.html
C:\Program Files\Dealio\kb127\resDN\menu_arrow.gif
C:\Program Files\Dealio\kb127\resDN\menu_check.gif
C:\Program Files\Dealio\kb127\resDN\no_image.gif
C:\Program Files\Dealio\kb127\resDN\prod_img.gif
C:\Program Files\Dealio\kb127\resDN\search_chevron.gif
C:\Program Files\Dealio\kb127\resDN\spacer.gif
C:\Program Files\Dealio\kb127\resDN\textfield_bkg.gif
C:\Program Files\Dealio\kb127\resDN\top.gif
C:\Program Files\Dealio\kb127\resDN\unknown.gif
C:\Program Files\Dealio\kb127\resDN\winning.gif
C:\Program Files\Dealio\kb127\resDN\won.gif
C:\Program Files\Dealio\kb127\rules\index.76.35
C:\Program Files\Dealio\kb127\rules\rules.1.10.76
C:\Program Files\Dealio\kb127\rules\rules.1.109.43
C:\Program Files\Dealio\kb127\rules\rules.1.110.43
C:\Program Files\Dealio\kb127\rules\rules.1.12.52
C:\Program Files\Dealio\kb127\rules\rules.1.13.58
C:\Program Files\Dealio\kb127\rules\rules.1.130.58
C:\Program Files\Dealio\kb127\rules\rules.1.135.50
C:\Program Files\Dealio\kb127\rules\rules.1.153.44
C:\Program Files\Dealio\kb127\rules\rules.1.155.43
C:\Program Files\Dealio\kb127\rules\rules.1.156.49
C:\Program Files\Dealio\kb127\rules\rules.1.16.60
C:\Program Files\Dealio\kb127\rules\rules.1.161.52
C:\Program Files\Dealio\kb127\rules\rules.1.178.66
C:\Program Files\Dealio\kb127\rules\rules.1.184.55
C:\Program Files\Dealio\kb127\rules\rules.1.188.52
C:\Program Files\Dealio\kb127\rules\rules.1.189.45
C:\Program Files\Dealio\kb127\rules\rules.1.196.43
C:\Program Files\Dealio\kb127\rules\rules.1.198.56
C:\Program Files\Dealio\kb127\rules\rules.1.199.43
C:\Program Files\Dealio\kb127\rules\rules.1.200.53
C:\Program Files\Dealio\kb127\rules\rules.1.201.43
C:\Program Files\Dealio\kb127\rules\rules.1.202.43
C:\Program Files\Dealio\kb127\rules\rules.1.203.71
C:\Program Files\Dealio\kb127\rules\rules.1.205.62
C:\Program Files\Dealio\kb127\rules\rules.1.213.71
C:\Program Files\Dealio\kb127\rules\rules.1.214.49
C:\Program Files\Dealio\kb127\rules\rules.1.215.43
C:\Program Files\Dealio\kb127\rules\rules.1.216.67
C:\Program Files\Dealio\kb127\rules\rules.1.217.67
C:\Program Files\Dealio\kb127\rules\rules.1.218.52
C:\Program Files\Dealio\kb127\rules\rules.1.219.43
C:\Program Files\Dealio\kb127\rules\rules.1.220.43
C:\Program Files\Dealio\kb127\rules\rules.1.221.57
C:\Program Files\Dealio\kb127\rules\rules.1.222.43
C:\Program Files\Dealio\kb127\rules\rules.1.223.68
C:\Program Files\Dealio\kb127\rules\rules.1.226.68
C:\Program Files\Dealio\kb127\rules\rules.1.227.43
C:\Program Files\Dealio\kb127\rules\rules.1.228.62
C:\Program Files\Dealio\kb127\rules\rules.1.229.76
C:\Program Files\Dealio\kb127\rules\rules.1.23.63
C:\Program Files\Dealio\kb127\rules\rules.1.239.43
C:\Program Files\Dealio\kb127\rules\rules.1.24.43
C:\Program Files\Dealio\kb127\rules\rules.1.240.43
C:\Program Files\Dealio\kb127\rules\rules.1.241.43
C:\Program Files\Dealio\kb127\rules\rules.1.242.43
C:\Program Files\Dealio\kb127\rules\rules.1.243.43
C:\Program Files\Dealio\kb127\rules\rules.1.244.63
C:\Program Files\Dealio\kb127\rules\rules.1.245.43
C:\Program Files\Dealio\kb127\rules\rules.1.247.43
C:\Program Files\Dealio\kb127\rules\rules.1.248.43
C:\Program Files\Dealio\kb127\rules\rules.1.249.43
C:\Program Files\Dealio\kb127\rules\rules.1.250.43
C:\Program Files\Dealio\kb127\rules\rules.1.251.43
C:\Program Files\Dealio\kb127\rules\rules.1.252.43
C:\Program Files\Dealio\kb127\rules\rules.1.253.43
C:\Program Files\Dealio\kb127\rules\rules.1.254.43
C:\Program Files\Dealio\kb127\rules\rules.1.255.43
C:\Program Files\Dealio\kb127\rules\rules.1.256.43
C:\Program Files\Dealio\kb127\rules\rules.1.257.43
C:\Program Files\Dealio\kb127\rules\rules.1.279.43
C:\Program Files\Dealio\kb127\rules\rules.1.28.58
C:\Program Files\Dealio\kb127\rules\rules.1.282.75
C:\Program Files\Dealio\kb127\rules\rules.1.283.43
C:\Program Files\Dealio\kb127\rules\rules.1.284.43
C:\Program Files\Dealio\kb127\rules\rules.1.289.67
C:\Program Files\Dealio\kb127\rules\rules.1.290.62
C:\Program Files\Dealio\kb127\rules\rules.1.291.61
C:\Program Files\Dealio\kb127\rules\rules.1.296.43
C:\Program Files\Dealio\kb127\rules\rules.1.297.43
C:\Program Files\Dealio\kb127\rules\rules.1.304.43
C:\Program Files\Dealio\kb127\rules\rules.1.307.43
C:\Program Files\Dealio\kb127\rules\rules.1.308.75
C:\Program Files\Dealio\kb127\rules\rules.1.31.47
C:\Program Files\Dealio\kb127\rules\rules.1.310.46
C:\Program Files\Dealio\kb127\rules\rules.1.311.43
C:\Program Files\Dealio\kb127\rules\rules.1.315.43
C:\Program Files\Dealio\kb127\rules\rules.1.316.43
C:\Program Files\Dealio\kb127\rules\rules.1.317.43
C:\Program Files\Dealio\kb127\rules\rules.1.318.43
C:\Program Files\Dealio\kb127\rules\rules.1.319.49
C:\Program Files\Dealio\kb127\rules\rules.1.32.48
C:\Program Files\Dealio\kb127\rules\rules.1.334.44
C:\Program Files\Dealio\kb127\rules\rules.1.335.60
C:\Program Files\Dealio\kb127\rules\rules.1.336.44
C:\Program Files\Dealio\kb127\rules\rules.1.337.44
C:\Program Files\Dealio\kb127\rules\rules.1.338.75
C:\Program Files\Dealio\kb127\rules\rules.1.339.47
C:\Program Files\Dealio\kb127\rules\rules.1.34.43
C:\Program Files\Dealio\kb127\rules\rules.1.340.47
C:\Program Files\Dealio\kb127\rules\rules.1.341.47
C:\Program Files\Dealio\kb127\rules\rules.1.349.50
C:\Program Files\Dealio\kb127\rules\rules.1.35.48
C:\Program Files\Dealio\kb127\rules\rules.1.350.50
C:\Program Files\Dealio\kb127\rules\rules.1.351.51
C:\Program Files\Dealio\kb127\rules\rules.1.352.54
C:\Program Files\Dealio\kb127\rules\rules.1.353.51
C:\Program Files\Dealio\kb127\rules\rules.1.354.51
C:\Program Files\Dealio\kb127\rules\rules.1.357.62
C:\Program Files\Dealio\kb127\rules\rules.1.358.52
C:\Program Files\Dealio\kb127\rules\rules.1.359.52
C:\Program Files\Dealio\kb127\rules\rules.1.360.53
C:\Program Files\Dealio\kb127\rules\rules.1.361.54
C:\Program Files\Dealio\kb127\rules\rules.1.362.68
C:\Program Files\Dealio\kb127\rules\rules.1.363.58
C:\Program Files\Dealio\kb127\rules\rules.1.364.54
C:\Program Files\Dealio\kb127\rules\rules.1.365.53
C:\Program Files\Dealio\kb127\rules\rules.1.367.56
C:\Program Files\Dealio\kb127\rules\rules.1.368.58
C:\Program Files\Dealio\kb127\rules\rules.1.369.55
C:\Program Files\Dealio\kb127\rules\rules.1.370.56
C:\Program Files\Dealio\kb127\rules\rules.1.371.56
C:\Program Files\Dealio\kb127\rules\rules.1.372.57
C:\Program Files\Dealio\kb127\rules\rules.1.373.55
C:\Program Files\Dealio\kb127\rules\rules.1.375.56
C:\Program Files\Dealio\kb127\rules\rules.1.376.57
C:\Program Files\Dealio\kb127\rules\rules.1.377.55
C:\Program Files\Dealio\kb127\rules\rules.1.378.65
C:\Program Files\Dealio\kb127\rules\rules.1.384.58
C:\Program Files\Dealio\kb127\rules\rules.1.386.71
C:\Program Files\Dealio\kb127\rules\rules.1.387.59
C:\Program Files\Dealio\kb127\rules\rules.1.388.59
C:\Program Files\Dealio\kb127\rules\rules.1.389.59
C:\Program Files\Dealio\kb127\rules\rules.1.390.60
C:\Program Files\Dealio\kb127\rules\rules.1.391.60
C:\Program Files\Dealio\kb127\rules\rules.1.392.60
C:\Program Files\Dealio\kb127\rules\rules.1.393.60
C:\Program Files\Dealio\kb127\rules\rules.1.394.60
C:\Program Files\Dealio\kb127\rules\rules.1.396.61
C:\Program Files\Dealio\kb127\rules\rules.1.397.61
C:\Program Files\Dealio\kb127\rules\rules.1.398.60
C:\Program Files\Dealio\kb127\rules\rules.1.399.60
C:\Program Files\Dealio\kb127\rules\rules.1.403.61
C:\Program Files\Dealio\kb127\rules\rules.1.404.63
C:\Program Files\Dealio\kb127\rules\rules.1.405.61
C:\Program Files\Dealio\kb127\rules\rules.1.406.61
C:\Program Files\Dealio\kb127\rules\rules.1.407.76
C:\Program Files\Dealio\kb127\rules\rules.1.408.63
C:\Program Files\Dealio\kb127\rules\rules.1.409.61
C:\Program Files\Dealio\kb127\rules\rules.1.412.62
C:\Program Files\Dealio\kb127\rules\rules.1.413.62
C:\Program Files\Dealio\kb127\rules\rules.1.414.62
C:\Program Files\Dealio\kb127\rules\rules.1.415.62
C:\Program Files\Dealio\kb127\rules\rules.1.416.62
C:\Program Files\Dealio\kb127\rules\rules.1.417.62
C:\Program Files\Dealio\kb127\rules\rules.1.418.62
C:\Program Files\Dealio\kb127\rules\rules.1.419.62
C:\Program Files\Dealio\kb127\rules\rules.1.420.62
C:\Program Files\Dealio\kb127\rules\rules.1.421.62
C:\Program Files\Dealio\kb127\rules\rules.1.423.63
C:\Program Files\Dealio\kb127\rules\rules.1.424.63
C:\Program Files\Dealio\kb127\rules\rules.1.425.63
C:\Program Files\Dealio\kb127\rules\rules.1.426.63
C:\Program Files\Dealio\kb127\rules\rules.1.427.63
C:\Program Files\Dealio\kb127\rules\rules.1.428.65
C:\Program Files\Dealio\kb127\rules\rules.1.429.63
C:\Program Files\Dealio\kb127\rules\rules.1.430.63
C:\Program Files\Dealio\kb127\rules\rules.1.432.65
C:\Program Files\Dealio\kb127\rules\rules.1.433.64
C:\Program Files\Dealio\kb127\rules\rules.1.434.65
C:\Program Files\Dealio\kb127\rules\rules.1.435.64
C:\Program Files\Dealio\kb127\rules\rules.1.436.76
C:\Program Files\Dealio\kb127\rules\rules.1.437.64
C:\Program Files\Dealio\kb127\rules\rules.1.438.71
C:\Program Files\Dealio\kb127\rules\rules.1.439.71
C:\Program Files\Dealio\kb127\rules\rules.1.440.75
C:\Program Files\Dealio\kb127\rules\rules.1.442.73
C:\Program Files\Dealio\kb127\rules\rules.1.443.73
C:\Program Files\Dealio\kb127\rules\rules.1.444.73
C:\Program Files\Dealio\kb127\rules\rules.1.445.68
C:\Program Files\Dealio\kb127\rules\rules.1.446.69
C:\Program Files\Dealio\kb127\rules\rules.1.450.67
C:\Program Files\Dealio\kb127\rules\rules.1.451.67
C:\Program Files\Dealio\kb127\rules\rules.1.452.68
C:\Program Files\Dealio\kb127\rules\rules.1.453.68
C:\Program Files\Dealio\kb127\rules\rules.1.454.69
C:\Program Files\Dealio\kb127\rules\rules.1.456.69
C:\Program Files\Dealio\kb127\rules\rules.1.457.75
C:\Program Files\Dealio\kb127\rules\rules.1.458.70
C:\Program Files\Dealio\kb127\rules\rules.1.459.70
C:\Program Files\Dealio\kb127\rules\rules.1.460.69
C:\Program Files\Dealio\kb127\rules\rules.1.462.74
C:\Program Files\Dealio\kb127\rules\rules.1.463.69
C:\Program Files\Dealio\kb127\rules\rules.1.464.70
C:\Program Files\Dealio\kb127\rules\rules.1.465.68
C:\Program Files\Dealio\kb127\rules\rules.1.468.70
C:\Program Files\Dealio\kb127\rules\rules.1.469.70
C:\Program Files\Dealio\kb127\rules\rules.1.470.70
C:\Program Files\Dealio\kb127\rules\rules.1.471.73
C:\Program Files\Dealio\kb127\rules\rules.1.472.70
C:\Program Files\Dealio\kb127\rules\rules.1.478.74
C:\Program Files\Dealio\kb127\rules\rules.1.479.73
C:\Program Files\Dealio\kb127\rules\rules.1.480.68
C:\Program Files\Dealio\kb127\rules\rules.1.481.71
C:\Program Files\Dealio\kb127\rules\rules.1.482.74
C:\Program Files\Dealio\kb127\rules\rules.1.49.67
C:\Program Files\Dealio\kb127\rules\rules.1.50.43
C:\Program Files\Dealio\kb127\rules\rules.1.500.71
C:\Program Files\Dealio\kb127\rules\rules.1.501.74
C:\Program Files\Dealio\kb127\rules\rules.1.502.71
C:\Program Files\Dealio\kb127\rules\rules.1.51.69
C:\Program Files\Dealio\kb127\rules\rules.1.52.72
C:\Program Files\Dealio\kb127\rules\rules.1.520.76
C:\Program Files\Dealio\kb127\rules\rules.1.521.76
C:\Program Files\Dealio\kb127\rules\rules.1.522.76
C:\Program Files\Dealio\kb127\rules\rules.1.53.51
C:\Program Files\Dealio\kb127\rules\rules.1.531.76
C:\Program Files\Dealio\kb127\rules\rules.1.532.75
C:\Program Files\Dealio\kb127\rules\rules.1.534.75
C:\Program Files\Dealio\kb127\rules\rules.1.54.47
C:\Program Files\Dealio\kb127\rules\rules.1.55.45
C:\Program Files\Dealio\kb127\rules\rules.1.56.69
C:\Program Files\Dealio\kb127\rules\rules.1.57.43
C:\Program Files\Dealio\kb127\rules\rules.1.58.47
C:\Program Files\Dealio\kb127\rules\rules.1.593.76
C:\Program Files\Dealio\kb127\rules\rules.1.595.76
C:\Program Files\Dealio\kb127\rules\rules.1.63.57
C:\Program Files\Dealio\kb127\rules\rules.1.66.47
C:\Program Files\Dealio\kb127\rules\rules.1.70.75
C:\Program Files\Dealio\kb127\rules\rules.1.71.43
C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Dealio
C:\DOCUME~1\vincent\APPLIC~1\Search Settings
C:\DOCUME~1\vincent\APPLIC~1\Search Settings\kb127
C:\DOCUME~1\vincent\APPLIC~1\Search Settings\kb127\res
C:\DOCUME~1\vincent\APPLIC~1\Search Settings\kb127\temp
C:\DOCUME~1\vincent\APPLIC~1\Search Settings\kb127\temp\ws-14239.log
C:\Program Files\Search Settings
C:\Program Files\Search Settings\kb127
C:\Program Files\Search Settings\SearchSettings.exe
C:\Program Files\Search Settings\kb127\res
C:\Program Files\Search Settings\kb127\SearchSettings.dll
C:\Program Files\Search Settings\kb127\SearchSettingsRes409.dll
C:\Program Files\Search Settings\kb127\temp

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\System32\\blank.htm"
"Start Page"="https://www.orange.fr/portail"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Default_Search_URL"="http://www.google.com/toolbar/ie8/sidebar.html"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"

--------------------\\ Recherche d'autres infections

--------------------\\ ROGUES ..

C:\DOCUME~1\vincent\APPLIC~1\WinButler

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\celine\Local Settings\Temporary Internet Files\Content.IE5\8927C56B\0-O1TSadUD-crack-s-[1].png

1 - "C:\ToolBar SD\TB_1.txt" - 04/01/2009|13:45 - Option : [1]

-----------\\ Fin du rapport a 13:45:50,42
0
Réponse 3 / 9
DeNisCoOl Messages postés 2871 Statut Membre 224
 
salut,

Tu peux lancer le nettoyage option 2.
Renvois ensuite le rapport.

Dès que tu pourras fais les mises à jour SP2 et SP3 ainsi que IExplorer 7.

Puis renvois un autre rapport HJThis.
Tu me diras également ou en sont tes soucis.

A+

Denis
0
Réponse 4 / 9
vinvin42
 
salut Deniscool
j'ai fait une mise a jour sp2 et inetrnet explorer 7 si tu considere que qu'il faut une mise a jour sp3 je le ferai. Je note aussi que dans le desespoire j'ai fait une desinfection avec toolbarsd mais toujours pareil
voici un nouveau rapport hijack:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:43:45, on 04/01/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\System32\ScsiAccess.EXE
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Wanadoo\GestionnaireInternet.exe
C:\Program Files\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\Wanadoo\Watch.exe
C:\PROGRA~1\Wanadoo\WOOBrowser\WOOBrowser.exe
C:\Documents and Settings\vincent\Mes documents\Utilisateur1\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O2 - BHO: (no name) - {ecdee021-0d17-467f-a1ff-c7a115230949} - (no file)
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: (no name) - {ecdee021-0d17-467f-a1ff-c7a115230949} - (no file)
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [AtiCwd32] Aticwd32.exe
O4 - HKLM\..\Run: [AtiQiPcl] AtiQiPcl.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [Wnsp] C:\Program Files\Wnsp\wnsp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\System32\PSDrvCheck.exe
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKCU\..\Run: [WOOKIT] C:\Program Files\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WinButler] C:\Documents and Settings\vincent\Application Data\WinButler\WinButler.exe
O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [umdlhosxvm] c:\documents and settings\vincent\local settings\application data\umdlhosxvm.exe umdlhosxvm
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
O4 - HKCU\..\Run: [SfKg6wIPu] C:\Documents and Settings\vincent\Application Data\Microsoft\Windows\ohgbjnj.exe
O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [InstantTray] C:\Program Files\Pinnacle\Shared Files\InstantCDDVD\PCLETray.exe
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\System32\Macromed\Flash\FlashUtil9f.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User '?')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User '?')
O4 - HKUS\S-1-5-21-682003330-2025429265-725345543-1004\..\Run: [WOOKIT] C:\Program Files\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx (User '?')
O4 - HKUS\S-1-5-21-682003330-2025429265-725345543-1004\..\Run: [WinButler] C:\Documents and Settings\vincent\Application Data\WinButler\WinButler.exe (User '?')
O4 - HKUS\S-1-5-21-682003330-2025429265-725345543-1004\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide (User '?')
O4 - HKUS\S-1-5-21-682003330-2025429265-725345543-1004\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" (User '?')
O4 - HKUS\S-1-5-21-682003330-2025429265-725345543-1004\..\Run: [umdlhosxvm] c:\documents and settings\vincent\local settings\application data\umdlhosxvm.exe umdlhosxvm (User '?')
O4 - HKUS\S-1-5-21-682003330-2025429265-725345543-1004\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User '?')
O4 - HKUS\S-1-5-21-682003330-2025429265-725345543-1004\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray (User '?')
O4 - HKUS\S-1-5-21-682003330-2025429265-725345543-1004\..\Run: [SfKg6wIPu] C:\Documents and Settings\vincent\Application Data\Microsoft\Windows\ohgbjnj.exe (User '?')
O4 - HKUS\S-1-5-21-682003330-2025429265-725345543-1004\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User '?')
O4 - HKUS\S-1-5-21-682003330-2025429265-725345543-1004\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe" (User '?')
O4 - HKUS\S-1-5-21-682003330-2025429265-725345543-1004\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background (User '?')
O4 - HKUS\S-1-5-21-682003330-2025429265-725345543-1004\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (User '?')
O4 - HKUS\S-1-5-21-682003330-2025429265-725345543-1004\..\Run: [InstantTray] C:\Program Files\Pinnacle\Shared Files\InstantCDDVD\PCLETray.exe (User '?')
O4 - HKUS\S-1-5-21-682003330-2025429265-725345543-1004\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount (User '?')
O4 - HKUS\S-1-5-21-682003330-2025429265-725345543-1004\..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\System32\Macromed\Flash\FlashUtil9f.exe (User '?')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User '?')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: BlueSoleil.lnk = C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe
O4 - Global Startup: Kodak software updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\backWeb-7288971.exe
O4 - Global Startup: Logiciel Kodak EasyShare.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: VIA RAID TOOL.lnk = C:\Program Files\VIA\RAID\raid_tool.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: ScsiAccess - Unknown owner - C:\WINDOWS\System32\ScsiAccess.EXE
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 9
DeNisCoOl Messages postés 2871 Statut Membre 224
 
salut vinvin,

Je note aussi que dans le desespoire j'ai fait une desinfection avec toolbarsd mais toujours pareil
Ma première phrase concernait ToolBar S&D je me suis mal fait comprendre.

Le rapport HJThis a été fait avant ou après avoir passé ToolBar S&D?

-----------
Télécharger Navilog1 de Il_Mafioso depuis-ce lien :
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
Enregistre-le sur le bureau.

Ensuite double cliquer sur navilog1.exe pour lancer l'installation.
Une fois l'installation terminée, faire un double clic sur le raccourci Navilog1 présent sur le bureau.

Choisir l'option 1 puis valider.
! N'utilisez pas l'option 2, 3 et 4 sans notre accord !

Laissez vous guider et patienter jusqu'au message :
*** Analyse Termine le ..... ***
Appuiyer sur une touche, le bloc note va s'ouvrir.
Copier-coller l'intégralité du rapport dans la prochaine réponse.
Refermer le bloc note.
Le rapport fixnavi.txt est en outre sauvegardé dans %systemdrive% (exemple C:\ ).

A+

Denis
0
Réponse 6 / 9
vinvin42
 
bonjour Denis
encore merci pour ton aide
pour repondre a ta question le rapport HJThis a été fait après avoir passé ToolBar S&D
voici le rapport de navilog:
Search Navipromo version 3.7.1 commencé le 05/01/2009 à 15:42:51,42

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1

Mise à jour le 02.01.2009 à 19h00 par IL-MAFIOSO

( : )

USER : celine ( Administrator )

Antivirus : avast! antivirus 4.8.1296 [VPS 090104-0] 4.8.1296 (Activated)

Recherche executé en mode normal

*** Recherche Programmes installés ***

*** Recherche dossiers dans "C:\WINDOWS" ***

*** Recherche dossiers dans "C:\Program Files" ***

*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***

*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\celine\applic~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\applic~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\vincent\applic~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\celine\locals~1\applic~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\vincent\locals~1\applic~1" ***

*** Recherche dossiers dans "C:\Documents and Settings\celine\menudm~1\progra~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\menudm~1\progra~1" ***

*** Recherche dossiers dans "C:\DOCUME~1\vincent\menudm~1\progra~1" ***

*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\Documents and Settings\celine\locals~1\applic~1" *

* Recherche dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *

* Recherche dans "C:\DOCUME~1\vincent\locals~1\applic~1" *

*** Recherche fichiers ***

*** Recherche clés spécifiques dans le Registre ***
!! Les clés trouvées ne sont pas forcément infectées !!

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"umdlhosxvm"="c:\\documents and settings\\vincent\\local settings\\application data\\umdlhosxvm.exe umdlhosxvm"

*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :

2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :

* Dans "C:\Documents and Settings\celine\locals~1\applic~1" :

* Dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" :

* Dans "C:\DOCUME~1\vincent\locals~1\applic~1" :

3)Recherche Certificats :

Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat Montorgueil absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche autres dossiers et fichiers connus :

*** Analyse terminée le 05/01/2009 à 15:46:28,50 ***
0
Réponse 7 / 9
DeNisCoOl Messages postés 2871 Statut Membre 224
 
Re vinvin,

* Relancez Naviglog1 :
* Sur le menu, choisissez Désinfection automatique option 2

* Le fix va se mettre à travailler, cela peut prendre plusieurs minutes... soyez patient !
* Sur la fenêtre noire, le message Si des dll nefastes sont presentes, elles vont être desenregistrees peut apparaître.
* Une petite fenêtre RegSrv32 similaire à celle ci-dessous peut alors apparaître avec le message DllUnregisterServer dans <nom de la dll> a réussi
* Cliquez simplement sur OK, si d'autres fenêtres de ce type s'ouvrent, cliquez sur OK à chaque fois.

* Le rapport de désinfection est créé sur le bureau et porte le nom de cleanavi.txt
* Copier/collez le contenu de ce rapport

- Renvoyer également un autre rapport HJThis.

- Si l'affichage ne revient toujours pas à la normale, il faudra envisager de réparer windows avec le CD mais sans formater.

- En attendant je vais chercher d'autre solution.
Une chose à faire, sur le bureau faire un clic droit avec la souris et dans le menu choisir Arranger les icône par et cocher afficher icône du bureau.
Pour la barre des tâches as tu essayé un clic droit sur la zone d'affichage de la barre de tâche en bas?
Tu devrais avoir Barre d'outils et Propriétés cela te permettra de tout retrouver ou en passant par le Panneau de configuration?

- Sinon un bon nettoyage de la base de registre avec Wise Registry Cleaner (voir tutoriel ci dessous):
https://kerio.probb.fr/t1163-tuto-wise-registry-cleaner

A+
0
Réponse 8 / 9
vinvin42
 
salut denis

j'ai essayer navilog et wiseregistry, ce dernier a detecté pas mal d'erreur dans le registre mais n'a pas reglé le probleme: toujours pas de bureau et d'icone.
mais bon aujourd'hui j'ai pris la decision de formater mon dd et j'ai passé mon aprem a transferer mes fichier important dans mon dd externe ca r j'ai installeé un tas de chose pour me debarrasser de cette infection et je prefere repartir avec un pc propre avec deux partition sur dd avec d'un coté window et de l'autre mes fichiers importants.
mais je veux tout de meme tenté une reparation par curiosité afin de savoir comment prosseder le prochain coup.je tiendrer le forum au courant.
En tout cas je saurait te remercier assez pour ton aide et ta gentillesse merci beaucoup pour ton atention.A+
0
Réponse 9 / 9
DeNisCoOl Messages postés 2871 Statut Membre 224
 
vinvin,

Je ne penses pas que tu sois encore infecté.
J'aurais aimé avoir le rapport Navilog option 2.
Et un autre rapport HJThis.
Souvent la désinfection ne permet pas toujours de retrouver la machine dans son état d'origine.
As tu regardé toutes les options que je t'ai donné pour les différents affichages?
L'infection a peut être fait des dégâts il faut que tu réinstalles windows simplement sans formater.
Il y a l'option Combofix un outil très puissant, mais beaucoup plus risqué que de réinstaller Windows avec juste 1h de plus à attendre.

Mais c'est toi décide bien entendu.

A+
0

Discussions similaires

changer l'effet du texte de mes icones
val0105 -
kaumune -

9 réponses
afficher l'icone facebook sur mon bureau
pierrot2808 -
Utilisateur anonyme -

1 réponse