Problemes avec de pubs intempestives

Fermé
mpcrx Messages postés 7 Date d'inscription mardi 13 janvier 2009 Statut Membre Dernière intervention 13 janvier 2009 - 13 janv. 2009 à 14:28
jlpjlp Messages postés 51580 Date d'inscription vendredi 18 mai 2007 Statut Contributeur sécurité Dernière intervention 3 mai 2022 - 13 janv. 2009 à 17:02
Bonjour,


cela fait environ une semaine que des que j'ouvre une pages, plusieurs pubs s'ouvrent en meme temps. Je ne m'y connais pas trop en ordi j'ai juste pour l'instant le rapport de hijackthis.
Quelqu'un pourrait t'il m'aider???
merci

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:18:06, on 13/01/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\imapi.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Spamihilator\spamihilator.exe
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\MICROS~3\wcescomm.exe
C:\PROGRA~1\MICROS~3\rapimgr.exe
C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\IncrediMail\bin\IMApp.exe
C:\program files\steam\steam.exe
C:\documents and settings\admin\local settings\application data\kqswgaw.exe
C:\Program Files\SmartDisk\FlashPath for SD Memory Card\FPSDstat.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\Fichiers communs\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Admin\Bureau\HiJackThis.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=D4322FEE7CF74A348CB9CE970F098EF5
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ustart.org
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
R3 - URLSearchHook: Multi Media France Toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMul0.dll
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb123\Dealio.dll
O2 - BHO: Multi Media France Toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMul0.dll
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll
O3 - Toolbar: Multi Media France Toolbar - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - C:\Program Files\Multi_Media_France\tbMul0.dll
O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb123\Dealio.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [Spamihilator] "C:\Program Files\Spamihilator\spamihilator.exe"
O4 - HKLM\..\Run: [mobiswing] C:\PROGRA~1\BITTOR~1\BitP.exe
O4 - HKLM\..\RunOnce: [wextract_cleanup0] rundll32.exe C:\WINDOWS\system32\advpack.dll,DelNodeRunDLL32 "C:\DOCUME~1\Admin\LOCALS~1\Temp\IXP000.TMP\"
O4 - HKLM\..\RunOnce: [MessengerPlusLiveUninstall] "C:\DOCUME~1\Admin\LOCALS~1\Temp\MsgPlusUninstall.exe" /Cleanup
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\PROGRA~1\MICROS~3\wcescomm.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [kqswgaw] "c:\documents and settings\admin\local settings\application data\kqswgaw.exe" kqswgaw
O4 - HKUS\S-1-5-19\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'Default user')
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: FlashPath for SD Memory Card Status.lnk = C:\Program Files\SmartDisk\FlashPath for SD Memory Card\FPSDstat.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Barre RoboForm - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Compare Prices with &Dealio - C:\Documents and Settings\Admin\Application Data\Dealio\kb123\res\DealioSearch.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Enregistrer le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Personnaliser le menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Remplir le formulaire - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: Remplir - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Remplir le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Enregistrer - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Enregistrer le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb123\Dealio.dll
O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb123\Dealio.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper200711281.dll
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrowserPlugin.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{431F9218-00A2-4343-B1DC-04E5D2B45ECB}: NameServer = 212.27.53.252,212.27.54.252
O17 - HKLM\System\CCS\Services\Tcpip\..\{534A971A-AF6E-42E8-BD38-79B206C6BAB6}: NameServer = 212.27.54.252,212.27.53.252
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: Antiwpa - C:\WINDOWS\SYSTEM32\antiwpa.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Fichiers communs\Logishrd\Bluetooth\LBTServ.exe
A voir également:

9 réponses

jlpjlp Messages postés 51580 Date d'inscription vendredi 18 mai 2007 Statut Contributeur sécurité Dernière intervention 3 mai 2022 5 040
13 janv. 2009 à 14:30
slt,



1/
Fais un clic droit sur ce lien : (IL-MAFIOSO)
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
Ensuite double clique sur navilog1.exe pour lancer l'installation.
Une fois l'installation terminée, le fix s'exécutera automatiquement.
(Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

Laisse-toi guider. Au menu principal, choisis 1 et valides.
(ne fais pas le choix 2,3 ou 4 sans notre avis/accord)

Patiente jusqu'au message :
*** Analyse Termine le ..... ***
Appuie sur une touche comme demandé, le blocnote va s'ouvrir.
Copie-colle l'intégralité dans une réponse. Referme le blocnote.
Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)
0
mpcrx Messages postés 7 Date d'inscription mardi 13 janvier 2009 Statut Membre Dernière intervention 13 janvier 2009
13 janv. 2009 à 14:52
merci voila ce que ca donne :


Search Navipromo version 3.7.1 commencé le 13/01/2009 à 14:43:50.50

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1

Mise à jour le 02.01.2009 à 19h00 par IL-MAFIOSO

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP 2600+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Admin ( Administrator )
BOOT : Normal boot

Antivirus : avast! antivirus 4.8.1201 [VPS 090113-0] 4.8.1201 (Activated)


A:\ (USB)
C:\ (Local Disk) - NTFS - Total:74 Go (Free:24 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)
F:\ (CD or DVD)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (USB)
K:\ (CD or DVD)
L:\ (CD or DVD)


Recherche executé en mode normal

*** Recherche Programmes installés ***

Favorit
Favorit

*** Recherche dossiers dans "C:\WINDOWS" ***


*** Recherche dossiers dans "C:\Program Files" ***


*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***


*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\Admin\applic~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\Admin\locals~1\applic~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\Admin\menudm~1\progra~1" ***


*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net



*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\Documents and Settings\Admin\locals~1\applic~1" *



*** Recherche fichiers ***



*** Recherche clés spécifiques dans le Registre ***
!! Les clés trouvées ne sont pas forcément infectées !!

HKEY_CURRENT_USER\Software\Lanconfig

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"kqswgaw"="\"c:\\documents and settings\\admin\\local settings\\application data\\kqswgaw.exe\" kqswgaw"


*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :


* Dans "C:\Documents and Settings\Admin\locals~1\applic~1" :

kqswgaw.exe trouvé !
kqswgaw.dat trouvé !
kqswgaw_nav.dat trouvé !
kqswgaw_navps.dat trouvé !
sxcodgdq.exe trouvé !
sxcodgdq.dat trouvé !
sxcodgdq_nav.dat trouvé !
sxcodgdq_navps.dat trouvé !

3)Recherche Certificats :

Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat Montorgueil absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche autres dossiers et fichiers connus :



*** Analyse terminée le 13/01/2009 à 14:50:15.75 ***
0
mpcrx Messages postés 7 Date d'inscription mardi 13 janvier 2009 Statut Membre Dernière intervention 13 janvier 2009
13 janv. 2009 à 15:06
que doit je faire maintenant svp????
0
jlpjlp Messages postés 51580 Date d'inscription vendredi 18 mai 2007 Statut Contributeur sécurité Dernière intervention 3 mai 2022 5 040
13 janv. 2009 à 15:12
= Lance navilog1
= Cette fois-ci choisi l'option 2
= Navilog va faire le nettoyage.. patient jusqu'à ce qui soit marqué *** Nettoyage Termine le ..... ***
= Un rapport va être génrer sur ton C:\ qui sera en option 2
Note: le bureau disparaît

= colle le contenu du rapport de navilog (qui est en option2)


PS:Si ton bureau ne réapparait pas, fais CTRL+ALT+SUPP pour ouvrir le gestionnaire de tâches.
Puis rends-toi à l'onglet "processus". Clique en haut à gauche sur fichiers et choisis "exécuter"
Tape explorer et valide. Celà te fera apparaitre ton bureau.


______________________

Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

* Lance l'installation du programme en exécutant le fichier téléchargé.
* Double-clique maintenant sur le raccourci de Toolbar-S&D.
* Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
* Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
* Poste le rapport généré. (C:\TB.txt)
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
mpcrx Messages postés 7 Date d'inscription mardi 13 janvier 2009 Statut Membre Dernière intervention 13 janvier 2009
13 janv. 2009 à 15:32
Dans "C:\WINDOWS\system32" *


C:\WINDOWS\prefetch\kqswgaw*.pf trouvé !
Copie C:\WINDOWS\prefetch\kqswgaw*.pf réalisée avec succès !
C:\WINDOWS\prefetch\kqswgaw*.pf supprimé !


* Dans "C:\Documents and Settings\Admin\locals~1\applic~1" *


kqswgaw.exe trouvé !
Copie kqswgaw.exe réalisée avec succès !
kqswgaw.exe supprimé !

kqswgaw.dat trouvé !
Copie kqswgaw.dat réalisée avec succès !
kqswgaw.dat supprimé !

kqswgaw_nav.dat trouvé !
Copie kqswgaw_nav.dat réalisée avec succès !
kqswgaw_nav.dat supprimé !

kqswgaw_navps.dat trouvé !
Copie kqswgaw_navps.dat réalisée avec succès !
kqswgaw_navps.dat supprimé !

sxcodgdq.exe trouvé !
Copie sxcodgdq.exe réalisée avec succès !
sxcodgdq.exe supprimé !

sxcodgdq.dat trouvé !
Copie sxcodgdq.dat réalisée avec succès !
sxcodgdq.dat supprimé !

sxcodgdq_nav.dat trouvé !
Copie sxcodgdq_nav.dat réalisée avec succès !
sxcodgdq_nav.dat supprimé !

sxcodgdq_navps.dat trouvé !
Copie sxcodgdq_navps.dat réalisée avec succès !
sxcodgdq_navps.dat supprimé !


*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok


*** Certificats ***

Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat Montorgueil absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltdt absent !

*** Recherche autres dossiers et fichiers connus ***



*** Nettoyage terminé le 13/01/2009 à 15:21:37.45 ***
0
mpcrx Messages postés 7 Date d'inscription mardi 13 janvier 2009 Statut Membre Dernière intervention 13 janvier 2009
13 janv. 2009 à 15:33
j'ai fait ttes les étapes par contre je ne peut envoyer le dernier rapport car windows media refuse de me le lire
0
mpcrx Messages postés 7 Date d'inscription mardi 13 janvier 2009 Statut Membre Dernière intervention 13 janvier 2009
13 janv. 2009 à 15:35
oupps en faite j'ai réussi voici le rapport




-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP 2600+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Admin ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1201 [VPS 090113-0] 4.8.1201 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:74 Go (Free:24 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)
F:\ (CD or DVD)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (USB)
K:\ (CD or DVD)
L:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [1] ( 13/01/2009|15:27 )

-----------\\ Recherche de Fichiers / Dossiers ...

C:\DOCUME~1\Admin\APPLIC~1\Dealio
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\temp
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\as_sidebar.html
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\blank.gif
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\DealioSearch.html
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\deals-endcap.gif
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\deals-leftcap.gif
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\deal_report.jpg
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\ebay_login.jpg
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\endcap22-bg.png
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\endcap22-left.png
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\endcap22-right-arrow.png
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\endcap22-right.png
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\ErrorPageTemplate.css
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\err_mainwindow.html
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\err_sidebar.html
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\err_toolbar.html
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\global_scripts.js
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\headerbgthin.jpg
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\help.gif
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\logo.png
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\logo_over.png
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\man_toolbar.html
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\man_toolbar.js
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\pill_bg.gif
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\post-this-deal.gif
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\post-this-deal_over.gif
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\scripts.js
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\scroller.js
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\search-chevron.gif
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\search_bg_blink.gif
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\separator.gif
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\settings.gif
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\settings_over.gif
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\sidebar.html
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\steals_bg.gif
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\tabdata.js
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\tablib.js
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\tabwelcome_en.html
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\tab_icon.png
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\toolbar_background.gif
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\res\yahoo_search.gif
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\index.1.80.39
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.10.76
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.109.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.110.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.12.52
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.13.58
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.130.58
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.135.50
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.153.44
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.155.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.156.49
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.16.60
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.161.52
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.178.66
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.184.55
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.188.52
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.189.45
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.196.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.198.56
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.199.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.200.53
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.201.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.202.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.203.71
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.205.62
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.213.71
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.214.49
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.215.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.216.67
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.217.67
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.218.52
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.219.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.220.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.221.57
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.222.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.223.68
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.226.68
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.227.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.228.62
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.229.76
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.23.63
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.239.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.24.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.240.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.241.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.242.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.243.77
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.244.63
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.245.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.247.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.248.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.249.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.250.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.251.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.252.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.253.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.254.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.255.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.256.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.257.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.279.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.28.58
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.282.75
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.283.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.284.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.289.67
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.290.62
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.291.61
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.296.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.297.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.304.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.307.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.308.75
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.31.47
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.310.46
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.311.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.315.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.316.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.317.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.318.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.319.49
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.32.48
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.334.44
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.335.60
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.336.44
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.337.44
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.338.75
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.339.47
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.34.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.340.47
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.341.47
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.349.50
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.35.48
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.350.50
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.351.51
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.352.77
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.353.51
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.354.51
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.357.62
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.358.52
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.359.52
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.360.53
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.361.54
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.362.68
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.363.58
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.364.54
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.365.53
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.367.56
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.368.58
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.369.55
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.370.80
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.371.56
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.372.57
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.373.55
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.375.56
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.376.57
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.377.55
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.378.65
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.384.58
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.386.71
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.387.59
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.388.59
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.389.59
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.390.60
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.391.78
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.392.60
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.393.60
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.394.60
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.396.61
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.397.61
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.398.60
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.399.60
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.403.61
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.404.63
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.405.61
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.406.61
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.407.76
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.408.63
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.409.61
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.412.62
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.413.62
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.414.62
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.415.62
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.416.62
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.417.62
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.418.62
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.419.62
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.420.62
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.421.62
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.423.77
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.424.63
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.425.63
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.426.63
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.427.63
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.428.65
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.429.63
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.430.63
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.432.65
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.433.64
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.434.65
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.435.64
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.436.76
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.437.64
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.438.71
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.439.71
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.440.75
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.442.73
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.443.73
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.444.73
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.445.68
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.446.69
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.450.67
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.451.67
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.452.68
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.453.68
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.454.69
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.456.69
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.457.75
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.458.70
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.459.70
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.460.69
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.462.74
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.463.69
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.464.70
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.465.68
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.468.70
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.469.70
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.470.70
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.471.73
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.472.70
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.478.74
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.479.73
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.480.68
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.481.71
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.482.74
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.49.67
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.50.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.500.71
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.501.74
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.502.71
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.51.69
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.52.72
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.520.76
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.521.76
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.522.76
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.53.51
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.531.76
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.532.75
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.533.77
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.534.75
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.54.47
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.55.45
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.56.69
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.57.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.58.47
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.591.79
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.592.79
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.593.76
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.594.77
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.595.76
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.608.78
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.610.80
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.611.79
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.614.79
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.617.79
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.624.80
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.63.57
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.640.80
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.641.80
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.66.47
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.70.75
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\rules\rules.1.71.43
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\temp\dealio-14254.log
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\temp\dealio-14255.log
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\temp\dealio-14256.log
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\temp\dealio-14257.log
C:\DOCUME~1\Admin\APPLIC~1\Dealio\kb123\temp\dod_cache.xml
C:\Program Files\Dealio
C:\Program Files\Dealio\kb123
C:\Program Files\Dealio\kb123\Dealio Deskbar.exe
C:\Program Files\Dealio\kb123\Dealio.dll
C:\Program Files\Dealio\kb123\res
C:\Program Files\Dealio\kb123\rules
C:\Program Files\Dealio\kb123\temp
C:\Program Files\Dealio\kb123\res\as_sidebar.html
C:\Program Files\Dealio\kb123\res\blank.gif
C:\Program Files\Dealio\kb123\res\DealioSearch.html
C:\Program Files\Dealio\kb123\res\deals-endcap.gif
C:\Program Files\Dealio\kb123\res\deals-leftcap.gif
C:\Program Files\Dealio\kb123\res\deal_report.jpg
C:\Program Files\Dealio\kb123\res\ebay_login.jpg
C:\Program Files\Dealio\kb123\res\endcap22-bg.png
C:\Program Files\Dealio\kb123\res\endcap22-left.png
C:\Program Files\Dealio\kb123\res\endcap22-right-arrow.png
C:\Program Files\Dealio\kb123\res\endcap22-right.png
C:\Program Files\Dealio\kb123\res\ErrorPageTemplate.css
C:\Program Files\Dealio\kb123\res\err_mainwindow.html
C:\Program Files\Dealio\kb123\res\err_sidebar.html
C:\Program Files\Dealio\kb123\res\err_toolbar.html
C:\Program Files\Dealio\kb123\res\global_scripts.js
C:\Program Files\Dealio\kb123\res\headerbgthin.jpg
C:\Program Files\Dealio\kb123\res\help.gif
C:\Program Files\Dealio\kb123\res\logo.png
C:\Program Files\Dealio\kb123\res\logo_over.png
C:\Program Files\Dealio\kb123\res\man_toolbar.html
C:\Program Files\Dealio\kb123\res\man_toolbar.js
C:\Program Files\Dealio\kb123\res\pill_bg.gif
C:\Program Files\Dealio\kb123\res\post-this-deal.gif
C:\Program Files\Dealio\kb123\res\post-this-deal_over.gif
C:\Program Files\Dealio\kb123\res\scripts.js
C:\Program Files\Dealio\kb123\res\scroller.js
C:\Program Files\Dealio\kb123\res\search-chevron.gif
C:\Program Files\Dealio\kb123\res\search_bg_blink.gif
C:\Program Files\Dealio\kb123\res\separator.gif
C:\Program Files\Dealio\kb123\res\settings.gif
C:\Program Files\Dealio\kb123\res\settings_over.gif
C:\Program Files\Dealio\kb123\res\sidebar.html
C:\Program Files\Dealio\kb123\res\steals_bg.gif
C:\Program Files\Dealio\kb123\res\tabdata.js
C:\Program Files\Dealio\kb123\res\tablib.js
C:\Program Files\Dealio\kb123\res\tabwelcome_en.html
C:\Program Files\Dealio\kb123\res\tab_icon.png
C:\Program Files\Dealio\kb123\res\toolbar_background.gif
C:\Program Files\Dealio\kb123\res\yahoo_search.gif
C:\Program Files\Dealio\kb123\rules\index.1.80.39
C:\Program Files\Dealio\kb123\rules\rules.1.10.76
C:\Program Files\Dealio\kb123\rules\rules.1.109.43
C:\Program Files\Dealio\kb123\rules\rules.1.110.43
C:\Program Files\Dealio\kb123\rules\rules.1.12.52
C:\Program Files\Dealio\kb123\rules\rules.1.13.58
C:\Program Files\Dealio\kb123\rules\rules.1.130.58
C:\Program Files\Dealio\kb123\rules\rules.1.135.50
C:\Program Files\Dealio\kb123\rules\rules.1.153.44
C:\Program Files\Dealio\kb123\rules\rules.1.155.43
C:\Program Files\Dealio\kb123\rules\rules.1.156.49
C:\Program Files\Dealio\kb123\rules\rules.1.16.60
C:\Program Files\Dealio\kb123\rules\rules.1.161.52
C:\Program Files\Dealio\kb123\rules\rules.1.178.66
C:\Program Files\Dealio\kb123\rules\rules.1.184.55
C:\Program Files\Dealio\kb123\rules\rules.1.188.52
C:\Program Files\Dealio\kb123\rules\rules.1.189.45
C:\Program Files\Dealio\kb123\rules\rules.1.196.43
C:\Program Files\Dealio\kb123\rules\rules.1.198.56
C:\Program Files\Dealio\kb123\rules\rules.1.199.43
C:\Program Files\Dealio\kb123\rules\rules.1.200.53
C:\Program Files\Dealio\kb123\rules\rules.1.201.43
C:\Program Files\Dealio\kb123\rules\rules.1.202.43
C:\Program Files\Dealio\kb123\rules\rules.1.203.71
C:\Program Files\Dealio\kb123\rules\rules.1.205.62
C:\Program Files\Dealio\kb123\rules\rules.1.213.71
C:\Program Files\Dealio\kb123\rules\rules.1.214.49
C:\Program Files\Dealio\kb123\rules\rules.1.215.43
C:\Program Files\Dealio\kb123\rules\rules.1.216.67
C:\Program Files\Dealio\kb123\rules\rules.1.217.67
C:\Program Files\Dealio\kb123\rules\rules.1.218.52
C:\Program Files\Dealio\kb123\rules\rules.1.219.43
C:\Program Files\Dealio\kb123\rules\rules.1.220.43
C:\Program Files\Dealio\kb123\rules\rules.1.221.57
C:\Program Files\Dealio\kb123\rules\rules.1.222.43
C:\Program Files\Dealio\kb123\rules\rules.1.223.68
C:\Program Files\Dealio\kb123\rules\rules.1.226.68
C:\Program Files\Dealio\kb123\rules\rules.1.227.43
C:\Program Files\Dealio\kb123\rules\rules.1.228.62
C:\Program Files\Dealio\kb123\rules\rules.1.229.76
C:\Program Files\Dealio\kb123\rules\rules.1.23.63
C:\Program Files\Dealio\kb123\rules\rules.1.239.43
C:\Program Files\Dealio\kb123\rules\rules.1.24.43
C:\Program Files\Dealio\kb123\rules\rules.1.240.43
C:\Program Files\Dealio\kb123\rules\rules.1.241.43
C:\Program Files\Dealio\kb123\rules\rules.1.242.43
C:\Program Files\Dealio\kb123\rules\rules.1.243.77
C:\Program Files\Dealio\kb123\rules\rules.1.244.63
C:\Program Files\Dealio\kb123\rules\rules.1.245.43
C:\Program Files\Dealio\kb123\rules\rules.1.247.43
C:\Program Files\Dealio\kb123\rules\rules.1.248.43
C:\Program Files\Dealio\kb123\rules\rules.1.249.43
C:\Program Files\Dealio\kb123\rules\rules.1.250.43
C:\Program Files\Dealio\kb123\rules\rules.1.251.43
C:\Program Files\Dealio\kb123\rules\rules.1.252.43
C:\Program Files\Dealio\kb123\rules\rules.1.253.43
C:\Program Files\Dealio\kb123\rules\rules.1.254.43
C:\Program Files\Dealio\kb123\rules\rules.1.255.43
C:\Program Files\Dealio\kb123\rules\rules.1.256.43
C:\Program Files\Dealio\kb123\rules\rules.1.257.43
C:\Program Files\Dealio\kb123\rules\rules.1.279.43
C:\Program Files\Dealio\kb123\rules\rules.1.28.58
C:\Program Files\Dealio\kb123\rules\rules.1.282.75
C:\Program Files\Dealio\kb123\rules\rules.1.283.43
C:\Program Files\Dealio\kb123\rules\rules.1.284.43
C:\Program Files\Dealio\kb123\rules\rules.1.289.67
C:\Program Files\Dealio\kb123\rules\rules.1.290.62
C:\Program Files\Dealio\kb123\rules\rules.1.291.61
C:\Program Files\Dealio\kb123\rules\rules.1.296.43
C:\Program Files\Dealio\kb123\rules\rules.1.297.43
C:\Program Files\Dealio\kb123\rules\rules.1.304.43
C:\Program Files\Dealio\kb123\rules\rules.1.307.43
C:\Program Files\Dealio\kb123\rules\rules.1.308.75
C:\Program Files\Dealio\kb123\rules\rules.1.31.47
C:\Program Files\Dealio\kb123\rules\rules.1.310.46
C:\Program Files\Dealio\kb123\rules\rules.1.311.43
C:\Program Files\Dealio\kb123\rules\rules.1.315.43
C:\Program Files\Dealio\kb123\rules\rules.1.316.43
C:\Program Files\Dealio\kb123\rules\rules.1.317.43
C:\Program Files\Dealio\kb123\rules\rules.1.318.43
C:\Program Files\Dealio\kb123\rules\rules.1.319.49
C:\Program Files\Dealio\kb123\rules\rules.1.32.48
C:\Program Files\Dealio\kb123\rules\rules.1.334.44
C:\Program Files\Dealio\kb123\rules\rules.1.335.60
C:\Program Files\Dealio\kb123\rules\rules.1.336.44
C:\Program Files\Dealio\kb123\rules\rules.1.337.44
C:\Program Files\Dealio\kb123\rules\rules.1.338.75
C:\Program Files\Dealio\kb123\rules\rules.1.339.47
C:\Program Files\Dealio\kb123\rules\rules.1.34.43
C:\Program Files\Dealio\kb123\rules\rules.1.340.47
C:\Program Files\Dealio\kb123\rules\rules.1.341.47
C:\Program Files\Dealio\kb123\rules\rules.1.349.50
C:\Program Files\Dealio\kb123\rules\rules.1.35.48
C:\Program Files\Dealio\kb123\rules\rules.1.350.50
C:\Program Files\Dealio\kb123\rules\rules.1.351.51
C:\Program Files\Dealio\kb123\rules\rules.1.352.77
C:\Program Files\Dealio\kb123\rules\rules.1.353.51
C:\Program Files\Dealio\kb123\rules\rules.1.354.51
C:\Program Files\Dealio\kb123\rules\rules.1.357.62
C:\Program Files\Dealio\kb123\rules\rules.1.358.52
C:\Program Files\Dealio\kb123\rules\rules.1.359.52
C:\Program Files\Dealio\kb123\rules\rules.1.360.53
C:\Program Files\Dealio\kb123\rules\rules.1.361.54
C:\Program Files\Dealio\kb123\rules\rules.1.362.68
C:\Program Files\Dealio\kb123\rules\rules.1.363.58
C:\Program Files\Dealio\kb123\rules\rules.1.364.54
C:\Program Files\Dealio\kb123\rules\rules.1.365.53
C:\Program Files\Dealio\kb123\rules\rules.1.367.56
C:\Program Files\Dealio\kb123\rules\rules.1.368.58
C:\Program Files\Dealio\kb123\rules\rules.1.369.55
C:\Program Files\Dealio\kb123\rules\rules.1.370.80
C:\Program Files\Dealio\kb123\rules\rules.1.371.56
C:\Program Files\Dealio\kb123\rules\rules.1.372.57
C:\Program Files\Dealio\kb123\rules\rules.1.373.55
C:\Program Files\Dealio\kb123\rules\rules.1.375.56
C:\Program Files\Dealio\kb123\rules\rules.1.376.57
C:\Program Files\Dealio\kb123\rules\rules.1.377.55
C:\Program Files\Dealio\kb123\rules\rules.1.378.65
C:\Program Files\Dealio\kb123\rules\rules.1.384.58
C:\Program Files\Dealio\kb123\rules\rules.1.386.71
C:\Program Files\Dealio\kb123\rules\rules.1.387.59
C:\Program Files\Dealio\kb123\rules\rules.1.388.59
C:\Program Files\Dealio\kb123\rules\rules.1.389.59
C:\Program Files\Dealio\kb123\rules\rules.1.390.60
C:\Program Files\Dealio\kb123\rules\rules.1.391.78
C:\Program Files\Dealio\kb123\rules\rules.1.392.60
C:\Program Files\Dealio\kb123\rules\rules.1.393.60
C:\Program Files\Dealio\kb123\rules\rules.1.394.60
C:\Program Files\Dealio\kb123\rules\rules.1.396.61
C:\Program Files\Dealio\kb123\rules\rules.1.397.61
C:\Program Files\Dealio\kb123\rules\rules.1.398.60
C:\Program Files\Dealio\kb123\rules\rules.1.399.60
C:\Program Files\Dealio\kb123\rules\rules.1.403.61
C:\Program Files\Dealio\kb123\rules\rules.1.404.63
C:\Program Files\Dealio\kb123\rules\rules.1.405.61
C:\Program Files\Dealio\kb123\rules\rules.1.406.61
C:\Program Files\Dealio\kb123\rules\rules.1.407.76
C:\Program Files\Dealio\kb123\rules\rules.1.408.63
C:\Program Files\Dealio\kb123\rules\rules.1.409.61
C:\Program Files\Dealio\kb123\rules\rules.1.412.62
C:\Program Files\Dealio\kb123\rules\rules.1.413.62
C:\Program Files\Dealio\kb123\rules\rules.1.414.62
C:\Program Files\Dealio\kb123\rules\rules.1.415.62
C:\Program Files\Dealio\kb123\rules\rules.1.416.62
C:\Program Files\Dealio\kb123\rules\rules.1.417.62
C:\Program Files\Dealio\kb123\rules\rules.1.418.62
C:\Program Files\Dealio\kb123\rules\rules.1.419.62
C:\Program Files\Dealio\kb123\rules\rules.1.420.62
C:\Program Files\Dealio\kb123\rules\rules.1.421.62
C:\Program Files\Dealio\kb123\rules\rules.1.423.77
C:\Program Files\Dealio\kb123\rules\rules.1.424.63
C:\Program Files\Dealio\kb123\rules\rules.1.425.63
C:\Program Files\Dealio\kb123\rules\rules.1.426.63
C:\Program Files\Dealio\kb123\rules\rules.1.427.63
C:\Program Files\Dealio\kb123\rules\rules.1.428.65
C:\Program Files\Dealio\kb123\rules\rules.1.429.63
C:\Program Files\Dealio\kb123\rules\rules.1.430.63
C:\Program Files\Dealio\kb123\rules\rules.1.432.65
C:\Program Files\Dealio\kb123\rules\rules.1.433.64
C:\Program Files\Dealio\kb123\rules\rules.1.434.65
C:\Program Files\Dealio\kb123\rules\rules.1.435.64
C:\Program Files\Dealio\kb123\rules\rules.1.436.76
C:\Program Files\Dealio\kb123\rules\rules.1.437.64
C:\Program Files\Dealio\kb123\rules\rules.1.438.71
C:\Program Files\Dealio\kb123\rules\rules.1.439.71
C:\Program Files\Dealio\kb123\rules\rules.1.440.75
C:\Program Files\Dealio\kb123\rules\rules.1.442.73
C:\Program Files\Dealio\kb123\rules\rules.1.443.73
C:\Program Files\Dealio\kb123\rules\rules.1.444.73
C:\Program Files\Dealio\kb123\rules\rules.1.445.68
C:\Program Files\Dealio\kb123\rules\rules.1.446.69
C:\Program Files\Dealio\kb123\rules\rules.1.450.67
C:\Program Files\Dealio\kb123\rules\rules.1.451.67
C:\Program Files\Dealio\kb123\rules\rules.1.452.68
C:\Program Files\Dealio\kb123\rules\rules.1.453.68
C:\Program Files\Dealio\kb123\rules\rules.1.454.69
C:\Program Files\Dealio\kb123\rules\rules.1.456.69
C:\Program Files\Dealio\kb123\rules\rules.1.457.75
C:\Program Files\Dealio\kb123\rules\rules.1.458.70
C:\Program Files\Dealio\kb123\rules\rules.1.459.70
C:\Program Files\Dealio\kb123\rules\rules.1.460.69
C:\Program Files\Dealio\kb123\rules\rules.1.462.74
C:\Program Files\Dealio\kb123\rules\rules.1.463.69
C:\Program Files\Dealio\kb123\rules\rules.1.464.70
C:\Program Files\Dealio\kb123\rules\rules.1.465.68
C:\Program Files\Dealio\kb123\rules\rules.1.468.70
C:\Program Files\Dealio\kb123\rules\rules.1.469.70
C:\Program Files\Dealio\kb123\rules\rules.1.470.70
C:\Program Files\Dealio\kb123\rules\rules.1.471.73
C:\Program Files\Dealio\kb123\rules\rules.1.472.70
C:\Program Files\Dealio\kb123\rules\rules.1.478.74
C:\Program Files\Dealio\kb123\rules\rules.1.479.73
C:\Program Files\Dealio\kb123\rules\rules.1.480.68
C:\Program Files\Dealio\kb123\rules\rules.1.481.71
C:\Program Files\Dealio\kb123\rules\rules.1.482.74
C:\Program Files\Dealio\kb123\rules\rules.1.49.67
C:\Program Files\Dealio\kb123\rules\rules.1.50.43
C:\Program Files\Dealio\kb123\rules\rules.1.500.71
C:\Program Files\Dealio\kb123\rules\rules.1.501.74
C:\Program Files\Dealio\kb123\rules\rules.1.502.71
C:\Program Files\Dealio\kb123\rules\rules.1.51.69
C:\Program Files\Dealio\kb123\rules\rules.1.52.72
C:\Program Files\Dealio\kb123\rules\rules.1.520.76
C:\Program Files\Dealio\kb123\rules\rules.1.521.76
C:\Program Files\Dealio\kb123\rules\rules.1.522.76
C:\Program Files\Dealio\kb123\rules\rules.1.53.51
C:\Program Files\Dealio\kb123\rules\rules.1.531.76
C:\Program Files\Dealio\kb123\rules\rules.1.532.75
C:\Program Files\Dealio\kb123\rules\rules.1.533.77
C:\Program Files\Dealio\kb123\rules\rules.1.534.75
C:\Program Files\Dealio\kb123\rules\rules.1.54.47
C:\Program Files\Dealio\kb123\rules\rules.1.55.45
C:\Program Files\Dealio\kb123\rules\rules.1.56.69
C:\Program Files\Dealio\kb123\rules\rules.1.57.43
C:\Program Files\Dealio\kb123\rules\rules.1.58.47
C:\Program Files\Dealio\kb123\rules\rules.1.591.79
C:\Program Files\Dealio\kb123\rules\rules.1.592.79
C:\Program Files\Dealio\kb123\rules\rules.1.593.76
C:\Program Files\Dealio\kb123\rules\rules.1.594.77
C:\Program Files\Dealio\kb123\rules\rules.1.595.76
C:\Program Files\Dealio\kb123\rules\rules.1.608.78
C:\Program Files\Dealio\kb123\rules\rules.1.610.80
C:\Program Files\Dealio\kb123\rules\rules.1.611.79
C:\Program Files\Dealio\kb123\rules\rules.1.614.79
C:\Program Files\Dealio\kb123\rules\rules.1.617.79
C:\Program Files\Dealio\kb123\rules\rules.1.624.80
C:\Program Files\Dealio\kb123\rules\rules.1.63.57
C:\Program Files\Dealio\kb123\rules\rules.1.640.80
C:\Program Files\Dealio\kb123\rules\rules.1.641.80
C:\Program Files\Dealio\kb123\rules\rules.1.66.47
C:\Program Files\Dealio\kb123\rules\rules.1.70.75
C:\Program Files\Dealio\kb123\rules\rules.1.71.43
C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Dealio
C:\Program Files\Multi_Media_France
C:\Program Files\Multi_Media_France\INSTALL.LOG
C:\Program Files\Multi_Media_France\LanguagePack.xml
C:\Program Files\Multi_Media_France\LocalSettings.txt
C:\Program Files\Multi_Media_France\RadioPlayer
C:\Program Files\Multi_Media_France\tbMul0.dll
C:\Program Files\Multi_Media_France\tbMul1.dll
C:\Program Files\Multi_Media_France\tbMult.dll
C:\Program Files\Multi_Media_France\ThirdPartyComponents.xml
C:\Program Files\Multi_Media_France\toolbar.cfg
C:\Program Files\Multi_Media_France\UNWISE.EXE
C:\Program Files\Multi_Media_France\UNWISE.INI
C:\Program Files\Multi_Media_France\update.xml
C:\Program Files\Multi_Media_France\RadioPlayer\Predefined_Media_List.xml
C:\Program Files\Multi_Media_France\RadioPlayer\User_Media_List.xml

-----------\\ Extensions

(Admin) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
(Admin) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="https://www.msn.com/fr-fr"
"Search Bar"="https://www.bing.com/?cc=fr&toHttps=1&redig=D4322FEE7CF74A348CB9CE970F098EF5"
"Search Page"="https://www.google.com/?gws_rd=ssl"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Start Page"="http://www.ustart.org"
"Search Bar"="https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm"


--------------------\\ Recherche d'autres infections

--------------------\\ Suspect ..

C:\WINDOWS\system32\antiwpa.dll

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\Admin\Bureau\Crack
C:\DOCUME~1\Admin\Bureau\Crack.rar
C:\DOCUME~1\Admin\Bureau\Crack\Crack
C:\DOCUME~1\Admin\Bureau\Crack\lista.pdf
C:\DOCUME~1\Admin\Bureau\Crack\Crack\AMD64
C:\DOCUME~1\Admin\Bureau\Crack\Crack\AntiWPA3.cmd
C:\DOCUME~1\Admin\Bureau\Crack\Crack\IA64
C:\DOCUME~1\Admin\Bureau\Crack\Crack\readme.txt
C:\DOCUME~1\Admin\Bureau\Crack\Crack\X86
C:\DOCUME~1\Admin\Bureau\Crack\Crack\AMD64\antiwpa.dll
C:\DOCUME~1\Admin\Bureau\Crack\Crack\IA64\antiwpa.dll
C:\DOCUME~1\Admin\Bureau\Crack\Crack\X86\antiwpa.dll



1 - "C:\ToolBar SD\TB_1.txt" - 13/01/2009|15:28 - Option : [1]

-----------\\ Fin du rapport a 15:28:30.48
0
mpcrx Messages postés 7 Date d'inscription mardi 13 janvier 2009 Statut Membre Dernière intervention 13 janvier 2009
13 janv. 2009 à 15:51
y'a t'il d'autres manip a faire svp?
0
jlpjlp Messages postés 51580 Date d'inscription vendredi 18 mai 2007 Statut Contributeur sécurité Dernière intervention 3 mai 2022 5 040
13 janv. 2009 à 17:02
oui

tu as des cracks il serait bien de les virer car source d'infections
_____________


Relance Toolbar-S&D en double-cliquant sur le raccourci. Tape sur "2" puis valide en appuyant sur "Entrée".
! Ne ferme pas la fenêtre lors de la suppression !
Un rapport sera généré, poste son contenu ici.

NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.
Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."
Tape explorer puis valide.


____________

analyse ce fichier sur virus total et colle le rapport: https://www.virustotal.com/gui/

C:\WINDOWS\system32\antiwpa.dll

______________


Télécharges AD-Remover ( de Cyrildu17 / C_XX ) sur ton bureau :
http://sd-1.archive-host.com/membres/up/16506160323759868/AD-R.exe

/!\ Déconnectes toi et fermes toutes applications en cours

● Double clique sur le programme d'installation , et installe le dans son emplacement par défaut. ( C:\Program files )
● Double clique sur l'icône Ad-removersituée sur ton bureau
● Au menu principal choisi l'option "A"
● Postes le rapport qui apparait à la fin .

( le rapport est sauvegardé aussi sous C:\Ad-report(date).log )

(CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

Note :

"Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
0