Plus d'antivirus

sblanot Messages postés 131 Statut Membre -  
sblanot Messages postés 131 Statut Membre -
Bonjour,
Depuis hier soir Bitdefender ne fonctionne plus, je ne peux plus le réinstaller, j'ai peur qu'un virus soit passé a travers, pouvez vous m'aider s'il vous plait.Merci
Configuration: Windows Vista Internet Explorer 8.0

25 réponses

  • 1
  • 2
  1. Utilisateur anonyme
     
    • Télécharges : http://sd-1.archive-host.com/membres/up/127028005715545653/F-indyKill.exe
    • \ !/Utilisateurs de Vista, il est nécessaire de désactiver l'UAC (contrôle des comptes utilisateurs) comme expliqué : ici
    • Lance l’ installation avec les paramètres par defaut

    • Double clic sur le raccourci FindyKill sur ton bureau
    • Au menu principal, choisi option 1 (Recherche)
    • Post le rapport FindyKill.txt

    • Note : le rapport FindyKill.txt est sauvegardé a la racine du disque

    0
  2. sblanot Messages postés 131 Statut Membre 5
     
    Merci. Je suis sous XP.J'ai écris mon message dpuis mon portable, d peur de me connecter a internt.Maintenant j suis sur mon PC et l lien que tu m'as indiquer ne fonctionne pas.
    0
  3. Utilisateur anonyme
     
    Fait celui-ci:http://sd-1.archive-host.com/membres/up/127028005715545653/FindyKill.exe
    0
  4. sblanot Messages postés 131 Statut Membre 5
     
    Ok installé.
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. sblanot Messages postés 131 Statut Membre 5
     
    ############################## | FindyKill V6.001 |

    # User : Utilisateur (Administrateurs) # UTILISAT-841A1F
    # Update on 30/06/09 by Chiquitine29 & C_XX
    # Start at: 18:19:01 | 03/07/2009
    # Website : http://pagesperso-orange.fr/NosTools/index.html

    # AMD Athlon(tm) 64 X2 Dual Core Processor 3600+
    # Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
    # Internet Explorer 8.0.6001.18372
    # Windows Firewall Status : Enabled
    # AV : Antivirus BitDefender 12.0 [ Enabled | Updated ]
    # FW : Online Armor Firewall[ (!) Disabled ]2.1.0.31
    # FW : Pare-feu BitDefender [ Enabled ]12.0

    # C:\ # Disque fixe local # 232,88 Go (166,51 Go free) # NTFS
    # D:\ # Disque CD-ROM # 422,11 Mo (0 Mo free) [LinuxDefender] # CDFS
    # F:\ # Disque amovible

    ############################## | Processus actifs |

    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Tall Emu\Online Armor\oasrv.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\CTsvcCDA.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Windows Live\Family Safety\fsssvc.exe
    C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\Drivers\WTSRV.EXE
    C:\Program Files\Canon\CAL\CALMAIN.exe
    C:\WINDOWS\System32\alg.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    C:\WINDOWS\system32\wbem\wmiapsrv.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
    C:\Program Files\Logitech\QuickCam\Quickcam.exe
    C:\Program Files\Windows Live\Family Safety\fsui.exe
    C:\Program Files\Orange\Systray\SystrayApp.exe
    C:\Program Files\Adobe\Photoshop Elements 4.0\apdproxy.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files\QuickTime\QTTask.exe
    C:\WINDOWS\system32\WTClient.exe
    C:\Program Files\Visagesoft\eXPert PDF\vspdfprsrv.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\DNA\btdna.exe
    C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
    C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
    C:\Program Files\Cloudmark\SafetyBar\OE\snoe.exe
    C:\Program Files\Microsoft Office\Office\OSA.EXE
    C:\Documents and Settings\Utilisateur\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
    C:\Program Files\OpenOffice.org 3\program\soffice.exe
    C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
    C:\Program Files\OpenOffice.org 3\program\soffice.bin
    C:\WINDOWS\system32\runonce.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Windows Live\Toolbar\wltuser.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\WINDOWS\system32\wbem\wmiprvse.exe

    ################## | Registre Startup |

    HKCU_Main: "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
    HKCU_Main: "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
    HKCU_Main: "Start Page Redirect Cache"="https://www.msn.com/fr-fr?ocid=iehp"
    HKCU_Main: "Start Page Redirect Cache_TIMESTAMP"=hex:6f,11,80,c3,86,ba,c9,01
    HKCU_Main: "Start Page Redirect Cache AcceptLangs"="fr"
    HKCU_Main: "Start Page Restore"="https://www.orange.fr/portail"
    HKCU_Main: "Start Page"="https://www.orange.fr/portail"
    HKLM_logon: "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
    HKLM_logon: "DefaultUserName"="Utilisateur"
    HKLM_logon: "AltDefaultUserName"="Utilisateur"
    HKLM_logon: "LegalNoticeCaption"=""
    HKLM_logon: "LegalNoticeText"=""
    HKLM_Run: BluetoothAuthenticationAgent=rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
    HKLM_Run: NvCplDaemon=RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    HKLM_Run: LogitechCommunicationsManager="C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
    HKLM_Run: LogitechQuickCamRibbon="C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
    HKLM_Run: fssui="C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun
    HKLM_Run: au=C:\Program Files\Dealio\DealioAU.exe
    HKLM_Run: SearchSettings=C:\Program Files\Search Settings\SearchSettings.exe
    HKLM_Run: warn default inter for=C:\Documents and Settings\All Users\Application Data\Time Dead Warn Default\vc info.exe
    HKLM_Run: Adobe Reader Speed Launcher="C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
    HKLM_Run: SystrayORAHSS="C:\Program Files\Orange\Systray\SystrayApp.exe"
    HKLM_Run: ORAHSSSessionManager=C:\Program Files\Orange\SessionManager\SessionManager.exe
    HKLM_Run: Adobe Photo Downloader="C:\Program Files\Adobe\Photoshop Elements 4.0\apdproxy.exe"
    HKLM_Run: SunJavaUpdateSched="C:\Program Files\Java\jre6\bin\jusched.exe"
    HKLM_Run: QuickTime Task="C:\Program Files\QuickTime\QTTask.exe" -atboottime
    HKLM_Run: WTClient=WTClient.exe
    HKLM_Run: vspdfprsrv.exe=C:\Program Files\Visagesoft\eXPert PDF\vspdfprsrv.exe --background
    HKLM_Run: KernelFaultCheck=%systemroot%\system32\dumprep 0 -k
    HKLM_Run: Babylon Client=C:\Program Files\Babylon\Babylon-Pro\Babylon.exe -AutoStart
    HKLM_Run: OnlineArmor GUI="C:\Program Files\Tall Emu\Online Armor\oaui.exe"
    HKLM_Run: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
    HKCU_Run: ctfmon.exe=C:\WINDOWS\system32\ctfmon.exe
    HKCU_Run: swg=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    HKCU_Run: msnmsgr="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    HKCU_Run: Window support=C:\DOCUME~1\UTILIS~1\APPLIC~1\CAMPJU~1\Soft live gram.exe
    HKCU_Run: BitTorrent DNA="C:\Program Files\DNA\btdna.exe"
    HKCU_Run: HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\AdobeUpdater=

    ################## | Fichiers # Dossiers infectieux |

    ################## | C:\Documents and Settings\Utilisateur\Temporary Internet Files |

    Présent ! C:\DOCUME~1\UTILIS~1\LOCALS~1\Temp\Babylon8.0.0\BabylonInstall.exe
    Présent ! C:\DOCUME~1\UTILIS~1\LOCALS~1\Temp\ICD1.tmp\jinstall.exe

    ################## | All Drives ... |

    Présent ! D:\autorun.inf

    ################## | Registre # Clés Run infectieuses |

    ################## | Registre # Mountpoints2 |

    HKCU\...\Explorer\MountPoints2\{52ba1fcc-0d58-11de-8830-001bfcb8c970}\Shell\Auto\Command
    HKCU\...\Explorer\MountPoints2\{52ba1fcc-0d58-11de-8830-001bfcb8c970}\Shell\AutoRun\Command
    HKCU\...\Explorer\MountPoints2\{b7c94716-5bdd-11dc-add4-001bfcb8c970}\Shell\AutoRun\Command
    HKCU\...\Explorer\MountPoints2\{e4aabd52-95e5-11d4-af6d-806d6172696f}\Shell\AutoRun\Command

    ################## | Etat / Services / Informations |

    # Affichage des fichiers cachés : OK

    # Mode sans echec : OK

    # Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )
    # EapHost -> Start = 2 ( Good = 2 | Bad = 4 )
    # Ip6Fw -> Start = 2 ( Good = 2 | Bad = 4 )
    # SharedAccess -> Start = 2 ( Good = 2 | Bad = 4 )
    # wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )
    # wscsvc -> Start = 2 ( Good = 2 | Bad = 4 )

    ################## | Cracks / Keygens / Serials |

    ################## | ! Fin du rapport # FindyKill V6.001 ! |
    0
  7. LiittleGiirl Messages postés 53 Date d'inscription   Statut Membre
     
    As-tu téléchargé quelque chose avant que cela se produise ??
    0
    1. Utilisateur anonyme
       
      Ce type d'infection s'attrape après avoir la plus par du temps téléchargé des cracks.
      a lire
      0
  8. Utilisateur anonyme
     
    Tres bien il a trouvé l'infection.
    • Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) suceptible d avoir été infectés sans les ouvrir
    • Double clic sur le raccourci FindyKill sur ton bureau
    • Au menu principal,choisi l option 2 (Suppression)

    /!\ il y aura 2 redémarrage, laisse travailler l outils jusqu a l apparition du message "nettoyage effectué"

    /!\ Ne te sert pas du pc durant la suppression , ton bureau ne sera pas accessible c est normal !
    • ensuite post le rapport FindyKill.txt

    • Note : le rapport FindyKill.txt est sauvegardé a la racine du disque
    • Note : Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet "Fichier" , "Nouvelle tâche" , tapes explorer.exe et valides
    0
  9. sblanot Messages postés 131 Statut Membre 5
     
    Ho oui....ma fille s'en est donné a coeur joie...le controle parental était désactivé..
    0
  10. LiittleGiirl Messages postés 53 Date d'inscription   Statut Membre
     
    Une infection Beagle/Bagle peut être ?
    0
  12. LiittleGiirl Messages postés 53 Date d'inscription   Statut Membre
     
    Il y quelques semaines il m'est arrivé à ce que mon Antivirus ne fonctionnait pas et ni msn messenger et mon wifi ne detectait pas ma livebox..
    J'ai intallé Elibagla et ça s'est résolu pour l'antivirus...
    Peut être ça peut t'aider ..
    0
  13. Utilisateur anonyme
     
    Elibagla et findykill sot deux applications qui détruisent bagle.Les maj de findykill sont beaucoup plus fréquentes ce qui est un avantages pour combattre le virus.
    0
    1. sblanot Messages postés 131 Statut Membre 5
       
      ça y est reparti...


      ############################## | FindyKill V6.001 |

      # User : Utilisateur (Administrateurs) # UTILISAT-841A1F
      # Update on 30/06/09 by Chiquitine29 & C_XX
      # Start at: 18:43:23 | 03/07/2009
      # Website : http://pagesperso-orange.fr/NosTools/index.html

      # AMD Athlon(tm) 64 X2 Dual Core Processor 3600+
      # Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
      # Internet Explorer 8.0.6001.18372
      # Windows Firewall Status : Enabled
      # AV : Antivirus BitDefender 12.0 [ Enabled | Updated ]
      # FW : Online Armor Firewall[ (!) Disabled ]2.1.0.31
      # FW : Pare-feu BitDefender [ Enabled ]12.0

      # C:\ # Disque fixe local # 232,88 Go (166,52 Go free) # NTFS
      # D:\ # Disque CD-ROM # 422,11 Mo (0 Mo free) [LinuxDefender] # CDFS
      # F:\ # Disque amovible

      ############################## | Processus actifs |

      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\logonui.exe
      C:\Program Files\Tall Emu\Online Armor\oasrv.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
      C:\Program Files\Bonjour\mDNSResponder.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\CTsvcCDA.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Windows Live\Family Safety\fsssvc.exe
      C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Java\jre6\bin\jqs.exe
      C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
      C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\nvsvc32.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\Drivers\WTSRV.EXE
      C:\Program Files\Canon\CAL\CALMAIN.exe
      C:\WINDOWS\System32\alg.exe
      C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
      C:\WINDOWS\system32\wbem\wmiprvse.exe
      C:\WINDOWS\system32\wbem\wmiapsrv.exe
      C:\WINDOWS\system32\wbem\wmiprvse.exe

      ################## | Fichiers # Dossiers infectieux |


      ################## | C:\Documents and Settings\Utilisateur\Temporary Internet Files |

      Supprimé ! C:\DOCUME~1\UTILIS~1\LOCALS~1\Temp\Babylon8.0.0\BabylonInstall.exe
      Supprimé ! C:\DOCUME~1\UTILIS~1\LOCALS~1\Temp\ICD1.tmp\jinstall.exe

      ################## | All Drives ... |

      (!) Non supprimé ! D:\autorun.inf

      ################## | Autres ... |


      ################## | Registre # Clés Run infectieuses |


      ################## | Registre # Mountpoints2 |

      Supprimé ! HKCU\...\Explorer\MountPoints2\{52ba1fcc-0d58-11de-8830-001bfcb8c970}\Shell\Auto\Command
      Supprimé ! HKCU\...\Explorer\MountPoints2\{b7c94716-5bdd-11dc-add4-001bfcb8c970}\Shell\AutoRun\Command
      Supprimé ! HKCU\...\Explorer\MountPoints2\{e4aabd52-95e5-11d4-af6d-806d6172696f}\Shell\AutoRun\Command

      ################## | Listing des fichiers présent |

      [13/01/2009 00:43|--a------|1700] - C:\AD-report-Clean-12.01.2009.log
      [13/01/2009 01:34|--a------|2456] - C:\AD-report-Clean-13.01.2009.log
      [13/01/2009 00:15|--a------|30569] - C:\AD-report-Scan-12.01.2009.log
      [17/05/2009 11:06|--a------|2469] - C:\additdiag.txt
      [25/04/2009 15:32|--a------|0] - C:\AdobeDebug.txt
      [28/01/2009 19:51|--a------|16] - C:\asdict.dat
      [28/08/2007 17:55|--a------|50] - C:\AUTOEXEC.BAT
      [14/03/2009 11:46|--ahs----|216] - C:\boot.ini
      [05/08/2004 14:00|-rahs----|4952] - C:\Bootfont.bin
      [01/08/2007 01:37|--a------|0] - C:\CONFIG.SYS
      [26/03/2009 18:36|--a------|0] - C:\conmgr.log
      [15/03/2008 21:57|--a------|263] - C:\CtDrvIns.log
      [15/03/2008 21:59|--a------|2936] - C:\CtDrvStp.log
      [03/08/2008 21:16|--a------|0] - C:\DTSHDSpOut.txt
      [07/06/2009 01:00|--a------|141] - C:\dwl.dat
      [27/09/2000 20:11|--a------|1245] - C:\error.log
      [22/09/2007 17:07|--ah-----|5506] - C:\ffastun.ffa
      [22/09/2007 17:07|--ah-----|860160] - C:\ffastun.ffl
      [22/09/2007 17:07|--ah-----|307200] - C:\ffastun.ffo
      [22/09/2007 17:07|--ah-----|2224128] - C:\ffastun0.ffx
      [16/02/2009 19:54|--a------|0] - C:\fftoutput.txt
      [03/07/2009 20:50|--a------|4458] - C:\FindyKill.txt
      [07/06/2009 01:00|--a------|132] - C:\httpdwl.dat
      [01/08/2007 01:37|-rahs----|0] - C:\IO.SYS
      [13/01/2009 01:02|--a------|16460] - C:\lopR1.txt
      [20/03/2009 21:50|--a------|41624] - C:\Morgane police.ttf
      [01/08/2007 01:37|-rahs----|0] - C:\MSDOS.SYS
      [05/08/2004 14:00|-rahs----|47564] - C:\NTDETECT.COM
      [23/12/2008 17:00|-rahs----|252240] - C:\ntldr
      [29/02/2004 17:44|--a------|52576] - C:\orange.bmp
      [03/02/2009 21:20|--a------|2291452] - C:\output.avi
      [||] - C:\pagefile.sys
      [04/01/2009 16:33|--a------|1664] - C:\rapport1.txt
      [04/08/2007 17:48|--a------|2206] - C:\resetlog.txt
      [07/06/2009 01:00|--a------|815] - C:\rtsr_eml_sr.dat
      [11/11/2008 16:39|--ah-----|232] - C:\sqmdata00.sqm
      [11/11/2008 16:39|--ah-----|244] - C:\sqmnoopt00.sqm
      [23/01/2009 19:47|--a------|3631] - C:\TCleaner.txt
      [25/11/2007 20:37|--a------|61] - C:\twacker.log
      [03/04/2009 21:00|--a------|512] - C:\updatedatfix.log
      [02/08/2007 18:59|-r-------|3937636] - D:\autorun.exe
      [06/08/2007 14:03|-r-------|45] - D:\autorun.inf
      [11/01/2005 02:00|-r-------|1150] - D:\cdrom.ico

      ################## | Vaccination |

      # C:\autorun.inf ( # Not infected ) -> Folder created by FindyKill.

      ################## | Etat / Services / Informations |

      # Mode sans echec : OK


      # Affichage des fichiers cachés : OK

      # Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )
      # EapHost -> Start = 2 ( Good = 2 | Bad = 4 )
      # Ip6Fw -> Start = 2 ( Good = 2 | Bad = 4 )
      # SharedAccess -> Start = 2 ( Good = 2 | Bad = 4 )
      # wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )
      # wscsvc -> Start = 2 ( Good = 2 | Bad = 4 )

      ################## | PEH ... |


      ################## | Cracks / Keygens / Serials |


      ################## | ! Fin du rapport # FindyKill V6.001 ! |
      0
  14. sblanot Messages postés 131 Statut Membre 5
     
    Mon PC est maintenant complètement planté.j'ai essayé de me connecter pour t'envoyer le rapport, impossible, aussi lent qu'un minitel.je l'ai redemarrer, une fenetre BITDEFENDER RECUE est apparue et depuis ecran noir, plus rien....
    0
  15. Utilisateur anonyme
     
    L'infection bagle est vaincu.Pour ton pc qui est planté je ne comprends pas .Peut être que bagle a modifie des fichiers?Si tu peut ont va essayer un diagnostic avec rsit.
    • Télécharge : http://images.malwareremoval.com/random/RSIT.exe

    /!\ Important (Sous Vista) /!\
    Vous devez exécuter RSIT avec les droits d'administrateur, pour cela Clique droit sur RSIT et "Lancer en tant qu'administrateur"
    • Double clique sur RSIT.exe pour lancer l'outil.
    • Clique sur 'Continue' à l'écran Disclaimer.
    • Si l'outil Hijackthis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera et tu devras accepter la licence.
    • Une fois le scan fini , 2 rapports vont apparaitre. Poste le contenu des 2 rapports.
    ( C:\RSIT\log.txt et C:\RSIT\info.txt )
    • CTRL A pour sélectionner tout, CTRL C pour copier et puis CTRL V pour coller
    • tuto: : https://www.androidworld.fr/
    0
    1. sblanot Messages postés 131 Statut Membre 5
       
      Logfile of random's system information tool 1.06 (written by random/random)
      Run by Utilisateur at 2009-07-03 22:16:18
      Microsoft Windows XP Édition familiale Service Pack 3
      System drive C: has 172 GB (72%) free of 238 GB
      Total RAM: 895 MB (39% free)

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 22:16:27, on 03/07/2009
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v8.00 (8.00.6001.18372)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Tall Emu\Online Armor\oasrv.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
      C:\Program Files\Bonjour\mDNSResponder.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\CTsvcCDA.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Windows Live\Family Safety\fsssvc.exe
      C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Java\jre6\bin\jqs.exe
      C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
      C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\nvsvc32.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\Drivers\WTSRV.EXE
      C:\Program Files\Canon\CAL\CALMAIN.exe
      C:\WINDOWS\system32\wbem\wmiapsrv.exe
      C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
      C:\WINDOWS\System32\alg.exe
      C:\WINDOWS\system32\wbem\wmiprvse.exe
      C:\WINDOWS\system32\rundll32.exe
      C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
      C:\Program Files\Logitech\QuickCam\Quickcam.exe
      C:\Program Files\Windows Live\Family Safety\fsui.exe
      C:\Program Files\Orange\Systray\SystrayApp.exe
      C:\Program Files\Adobe\Photoshop Elements 4.0\apdproxy.exe
      C:\Program Files\Java\jre6\bin\jusched.exe
      C:\Program Files\QuickTime\QTTask.exe
      C:\WINDOWS\system32\WTClient.exe
      C:\Program Files\Visagesoft\eXPert PDF\vspdfprsrv.exe
      C:\Program Files\Orange\Launcher\Launcher.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
      C:\Program Files\DNA\btdna.exe
      C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
      C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
      C:\Program Files\Cloudmark\SafetyBar\OE\snoe.exe
      C:\Program Files\Microsoft Office\Office\OSA.EXE
      C:\Documents and Settings\Utilisateur\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
      C:\Program Files\OpenOffice.org 3\program\soffice.exe
      C:\Program Files\OpenOffice.org 3\program\soffice.bin
      C:\Program Files\Orange\Deskboard\deskboard.exe
      C:\Program Files\Orange\connectivity\connectivitymanager.exe
      C:\Program Files\Orange\connectivity\CoreCom\CoreCom.exe
      C:\Program Files\Orange\connectivity\CoreCom\OraConfigRecover.exe
      C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Windows Live\Toolbar\wltuser.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Documents and Settings\Utilisateur\Local Settings\Temporary Internet Files\Content.IE5\EYRDFZB5\RSIT[1].exe
      C:\WINDOWS\system32\wbem\wmiprvse.exe
      C:\Program Files\trend micro\Utilisateur.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.orange.fr/portail?kw=
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yoower.com/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\SearchURLHook\SearchPageURL.dll
      R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
      R3 - URLSearchHook: myBabylon English Toolbar - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English\tbmyBa.dll (file missing)
      O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
      O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
      O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
      O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
      O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb127\Dealio.dll
      O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Babylon IE plugin - {9CFACCB6-2F3F-4177-94EA-0D2B72D384C1} - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (file missing)
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.1852\swg.dll
      O2 - BHO: myBabylon English Toolbar - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English\tbmyBa.dll (file missing)
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
      O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
      O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
      O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
      O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb127\Dealio.dll
      O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
      O3 - Toolbar: myBabylon English Toolbar - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English\tbmyBa.dll (file missing)
      O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
      O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
      O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun
      O4 - HKLM\..\Run: [au] C:\Program Files\Dealio\DealioAU.exe
      O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
      O4 - HKLM\..\Run: [warn default inter for] C:\Documents and Settings\All Users\Application Data\Time Dead Warn Default\vc info.exe
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\Orange\Systray\SystrayApp.exe"
      O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\Orange\SessionManager\SessionManager.exe
      O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Elements 4.0\apdproxy.exe"
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
      O4 - HKLM\..\Run: [WTClient] WTClient.exe
      O4 - HKLM\..\Run: [vspdfprsrv.exe] C:\Program Files\Visagesoft\eXPert PDF\vspdfprsrv.exe --background
      O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
      O4 - HKLM\..\Run: [Babylon Client] C:\Program Files\Babylon\Babylon-Pro\Babylon.exe -AutoStart
      O4 - HKLM\..\Run: [OnlineArmor GUI] "C:\Program Files\Tall Emu\Online Armor\oaui.exe"
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [Window support] C:\DOCUME~1\UTILIS~1\APPLIC~1\CAMPJU~1\Soft live gram.exe
      O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O4 - Startup: Démarrage d'Office.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
      O4 - Startup: Microsoft Recherche accélérée.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
      O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\Utilisateur\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
      O4 - Startup: OpenOffice.org 3.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
      O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
      O4 - Global Startup: SafetyBar for Microsoft Outlook Express.lnk = ?
      O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
      O8 - Extra context menu item: Compare Prices with &Dealio - C:\Documents and Settings\Utilisateur\Application Data\Dealio\kb127\res\DealioSearch.html
      O8 - Extra context menu item: Translate this web page with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/ActionTU.htm
      O8 - Extra context menu item: Translate with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Action.htm
      O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
      O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
      O9 - Extra button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
      O9 - Extra button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll
      O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll
      O9 - Extra button: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (file missing)
      O9 - Extra 'Tools' menuitem: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O15 - Trusted Zone: https://www.orange.fr/portail
      O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
      O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://download.microsoft.com/download/C/B/F/CBF23A2C-3E55-4664-BC5C-762780D79BA0/OGAControl.cab
      O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/softwareupdate/su/ocx/15031/CTSUEng.cab
      O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
      O16 - DPF: {1E3F1348-4370-4BBE-A67A-CC7ED824CA85} (Microsoft Genuine Advantage Self Support Tool) - http://download.microsoft.com/download/7/4/9/749b0dc5-2175-4d5b-a6dd-9c4bc923683e/Selfhelpcontrol.cab
      O16 - DPF: {474F00F5-3853-492C-AC3A-476512BBC336} (UploadListView Class) - http://picasaweb.google.com/s/v/27.38/uploader2.cab
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
      O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
      O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game02.zylom.com/activex/zylomgamesplayer.cab
      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
      O16 - DPF: {E6ACF817-0A85-4EBE-9F0A-096C6488CFEA} (NTR ActiveX 1.1.8) - http://eu.ntrsupport.com/inquiero/mod/setup/ntractivex118_28.cab
      O16 - DPF: {EBF85371-A38F-485B-B28F-0B4C82D25937} (CUpdateCtl Object) - http://update.hpphoto.com/download/HPSWUpdate.ocx
      O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
      O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/softwareupdate/su/ocx/15034/CTPID.cab
      O17 - HKLM\System\CCS\Services\Tcpip\..\{60219892-9BD6-4388-818E-20464378E3CF}: NameServer = 192.168.1.1
      O18 - Protocol: skyline - {3A4F9195-65A8-11D5-85C1-0001023952C1} - C:\Program Files\Skyline\TerraExplorer\TerraExplorerX.dll
      O20 - AppInit_DLLs: C:\WINDOWS\System32\bitsprx232.dll
      O20 - Winlogon Notify: c81348d1632 - C:\WINDOWS\System32\bitsprx232.dll
      O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
      O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
      O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
      O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
      O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
      O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
      O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
      O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
      O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Fichiers communs\SureThing Shared\stllssvr.exe
      O23 - Service: Online Armor (SvcOnlineArmor) - Tall Emu - C:\Program Files\Tall Emu\Online Armor\oasrv.exe
      O23 - Service: WinTab Service (WinTabService) - Tablet Driver - C:\WINDOWS\System32\Drivers\WTSRV.EXE
      0
  16. LiittleGiirl Messages postés 53 Date d'inscription   Statut Membre
     
    Peut tu l'allumer ? Comment est-il en ce moment ?
    0
  17. sblanot Messages postés 131 Statut Membre 5
     
    Oui c'est bon il a redémarrer
    0
  18. LiittleGiirl Messages postés 53 Date d'inscription   Statut Membre
     
    Alors problème résolu ou non ?
    0
  19. Utilisateur anonyme
     
    oh ho Tu es super infecté.
    • Télécharge:https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2
    • !! Déconnectes toi et fermes toute tes applications en cours le temps de la manipe !!
    • Double-cliques sur l'.exe pour lancer l'installe et laisses toi guider
    • Une fois fait, cliques sur le raccourci créé sur ton bureau pour lancer l'outil .
    • Choisis l'option 1 ( "recherche") et tapes "entrée" .
    • Une fois le scan finit , un rapport va apparaître, copie/colles l'intégralité de son contenu dans ta prochaine réponse ...
    • ( le rapport est en outre sauvegardé ici -> C:\TB.txt )
    • Tuto :[ https://sites.google.com/site/toolbarsd/aideenimages toolbarSD]
    0
  20. sblanot Messages postés 131 Statut Membre 5
     
    -----------\\ ToolBar S&D 1.2.8 XP/Vista

    Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
    X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 3600+ )
    BIOS : BIOS Date: 05/28/07 15:18:21 Ver: 08.00.12
    USER : Utilisateur ( Administrator )
    BOOT : Normal boot
    Firewall : Online Armor Firewall 2.1.0.31 (Not Activated)
    C:\ (Local Disk) - NTFS - Total:232 Go (Free:167 Go)
    D:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
    F:\ (USB)

    "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
    Option : [1] ( 03/07/2009|22:35 )

    -----------\\ Recherche de Fichiers / Dossiers ...

    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\res
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\temp
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\res\alerts.gif
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\res\alerts_over.gif
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\res\alerts_rec.gif
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\res\alerts_rec_over.gif
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\res\chevron-small.gif
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\res\DealioSearch.html
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\res\deals-leftcap.gif
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\res\deal_report.jpg
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\res\ebay_login.jpg
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\res\err_mainwindow.html
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\res\err_toolbar.html
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\res\global_scripts.js
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\res\headerbgthin.jpg
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\res\highlight-bg.png
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\res\logo.gif
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\res\logo_over.gif
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\res\man_toolbar.css
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\res\man_toolbar.html
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\res\man_toolbar.js
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\res\man_toolbarl.js
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\res\post-this-deal.gif
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\res\post-this-deal_over.gif
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\res\scripts.js
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\res\scroller.js
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\res\search-chevron.gif
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\res\search-chevron_over.gif
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\res\search_bg_blink.gif
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\res\separator.gif
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\res\settings.gif
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\res\settings_over.gif
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\res\yahoo-search.png
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\index.76.35
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.10.76
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.109.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.110.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.12.52
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.13.58
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.130.58
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.135.50
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.153.44
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.155.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.156.49
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.16.60
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.161.52
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.178.66
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.184.55
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.188.52
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.189.45
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.196.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.198.56
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.199.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.200.53
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.201.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.202.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.203.71
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.205.62
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.213.71
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.214.49
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.215.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.216.67
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.217.67
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.218.52
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.219.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.220.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.221.57
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.222.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.223.68
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.226.68
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.227.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.228.62
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.229.76
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.23.63
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.239.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.24.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.240.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.241.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.242.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.243.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.244.63
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.245.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.247.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.248.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.249.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.250.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.251.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.252.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.253.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.254.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.255.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.256.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.257.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.279.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.28.58
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.282.75
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.283.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.284.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.289.67
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.290.62
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.291.61
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.296.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.297.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.304.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.307.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.308.75
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.31.47
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.310.46
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.311.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.315.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.316.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.317.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.318.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.319.49
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.32.48
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.334.44
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.335.60
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.336.44
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.337.44
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.338.75
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.339.47
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.34.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.340.47
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.341.47
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.349.50
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.35.48
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.350.50
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.351.51
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.352.54
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.353.51
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.354.51
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.357.62
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.358.52
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.359.52
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.360.53
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.361.54
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.362.68
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.363.58
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.364.54
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.365.53
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.367.56
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.368.58
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.369.55
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.370.56
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.371.56
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.372.57
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.373.55
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.375.56
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.376.57
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.377.55
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.378.65
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.384.58
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.386.71
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.387.59
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.388.59
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.389.59
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.390.60
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.391.60
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.392.60
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.393.60
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.394.60
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.396.61
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.397.61
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.398.60
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.399.60
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.403.61
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.404.63
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.405.61
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.406.61
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.407.76
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.408.63
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.409.61
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.412.62
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.413.62
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.414.62
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.415.62
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.416.62
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.417.62
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.418.62
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.419.62
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.420.62
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.421.62
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.423.63
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.424.63
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.425.63
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.426.63
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.427.63
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.428.65
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.429.63
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.430.63
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.432.65
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.433.64
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.434.65
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.435.64
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.436.76
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.437.64
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.438.71
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.439.71
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.440.75
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.442.73
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.443.73
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.444.73
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.445.68
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.446.69
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.450.67
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.451.67
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.452.68
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.453.68
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.454.69
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.456.69
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.457.75
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.458.70
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.459.70
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.460.69
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.462.74
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.463.69
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.464.70
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.465.68
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.468.70
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.469.70
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.470.70
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.471.73
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.472.70
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.478.74
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.479.73
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.480.68
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.481.71
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.482.74
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.49.67
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.50.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.500.71
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.501.74
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.502.71
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.51.69
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.52.72
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.520.76
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.521.76
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.522.76
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.53.51
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.531.76
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.532.75
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.534.75
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.54.47
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.55.45
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.56.69
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.57.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.58.47
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.593.76
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.595.76
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.63.57
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.66.47
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.70.75
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\rules\rules.1.71.43
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\temp\dealio-14285.log
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Dealio\kb127\temp\dod_cache.xml
    C:\Program Files\Dealio
    C:\Program Files\Dealio\DealioAU.exe
    C:\Program Files\Dealio\kb127
    C:\Program Files\Dealio\SearchSettingsKit.exe
    C:\Program Files\Dealio\kb127\Dealio Deskbar.exe
    C:\Program Files\Dealio\kb127\Dealio.dll
    C:\Program Files\Dealio\kb127\DealioRes409.dll
    C:\Program Files\Dealio\kb127\res
    C:\Program Files\Dealio\kb127\resDN
    C:\Program Files\Dealio\kb127\rules
    C:\Program Files\Dealio\kb127\temp
    C:\Program Files\Dealio\kb127\res\alerts.gif
    C:\Program Files\Dealio\kb127\res\alerts_over.gif
    C:\Program Files\Dealio\kb127\res\alerts_rec.gif
    C:\Program Files\Dealio\kb127\res\alerts_rec_over.gif
    C:\Program Files\Dealio\kb127\res\chevron-small.gif
    C:\Program Files\Dealio\kb127\res\DealioSearch.html
    C:\Program Files\Dealio\kb127\res\deals-leftcap.gif
    C:\Program Files\Dealio\kb127\res\deal_report.jpg
    C:\Program Files\Dealio\kb127\res\ebay_login.jpg
    C:\Program Files\Dealio\kb127\res\err_mainwindow.html
    C:\Program Files\Dealio\kb127\res\err_toolbar.html
    C:\Program Files\Dealio\kb127\res\global_scripts.js
    C:\Program Files\Dealio\kb127\res\headerbgthin.jpg
    C:\Program Files\Dealio\kb127\res\highlight-bg.png
    C:\Program Files\Dealio\kb127\res\logo.gif
    C:\Program Files\Dealio\kb127\res\logo_over.gif
    C:\Program Files\Dealio\kb127\res\man_toolbar.css
    C:\Program Files\Dealio\kb127\res\man_toolbar.html
    C:\Program Files\Dealio\kb127\res\man_toolbar.js
    C:\Program Files\Dealio\kb127\res\man_toolbarl.js
    C:\Program Files\Dealio\kb127\res\post-this-deal.gif
    C:\Program Files\Dealio\kb127\res\post-this-deal_over.gif
    C:\Program Files\Dealio\kb127\res\scripts.js
    C:\Program Files\Dealio\kb127\res\scroller.js
    C:\Program Files\Dealio\kb127\res\search-chevron.gif
    C:\Program Files\Dealio\kb127\res\search-chevron_over.gif
    C:\Program Files\Dealio\kb127\res\search_bg_blink.gif
    C:\Program Files\Dealio\kb127\res\separator.gif
    C:\Program Files\Dealio\kb127\res\settings.gif
    C:\Program Files\Dealio\kb127\res\settings_over.gif
    C:\Program Files\Dealio\kb127\res\yahoo-search.png
    C:\Program Files\Dealio\kb127\resDN\bottom.gif
    C:\Program Files\Dealio\kb127\resDN\chevron_down.gif
    C:\Program Files\Dealio\kb127\resDN\chevron_up.gif
    C:\Program Files\Dealio\kb127\resDN\close.gif
    C:\Program Files\Dealio\kb127\resDN\deskbar.css
    C:\Program Files\Dealio\kb127\resDN\deskbar.js
    C:\Program Files\Dealio\kb127\resDN\dispatch_helper.js
    C:\Program Files\Dealio\kb127\resDN\ebay_compatible.jpg
    C:\Program Files\Dealio\kb127\resDN\logo.gif
    C:\Program Files\Dealio\kb127\resDN\logo_chevron_bkg.gif
    C:\Program Files\Dealio\kb127\resDN\losing.gif
    C:\Program Files\Dealio\kb127\resDN\lost.gif
    C:\Program Files\Dealio\kb127\resDN\man_deskbar.html
    C:\Program Files\Dealio\kb127\resDN\menu_arrow.gif
    C:\Program Files\Dealio\kb127\resDN\menu_check.gif
    C:\Program Files\Dealio\kb127\resDN\no_image.gif
    C:\Program Files\Dealio\kb127\resDN\prod_img.gif
    C:\Program Files\Dealio\kb127\resDN\search_chevron.gif
    C:\Program Files\Dealio\kb127\resDN\spacer.gif
    C:\Program Files\Dealio\kb127\resDN\textfield_bkg.gif
    C:\Program Files\Dealio\kb127\resDN\top.gif
    C:\Program Files\Dealio\kb127\resDN\unknown.gif
    C:\Program Files\Dealio\kb127\resDN\winning.gif
    C:\Program Files\Dealio\kb127\resDN\won.gif
    C:\Program Files\Dealio\kb127\rules\index.76.35
    C:\Program Files\Dealio\kb127\rules\rules.1.10.76
    C:\Program Files\Dealio\kb127\rules\rules.1.109.43
    C:\Program Files\Dealio\kb127\rules\rules.1.110.43
    C:\Program Files\Dealio\kb127\rules\rules.1.12.52
    C:\Program Files\Dealio\kb127\rules\rules.1.13.58
    C:\Program Files\Dealio\kb127\rules\rules.1.130.58
    C:\Program Files\Dealio\kb127\rules\rules.1.135.50
    C:\Program Files\Dealio\kb127\rules\rules.1.153.44
    C:\Program Files\Dealio\kb127\rules\rules.1.155.43
    C:\Program Files\Dealio\kb127\rules\rules.1.156.49
    C:\Program Files\Dealio\kb127\rules\rules.1.16.60
    C:\Program Files\Dealio\kb127\rules\rules.1.161.52
    C:\Program Files\Dealio\kb127\rules\rules.1.178.66
    C:\Program Files\Dealio\kb127\rules\rules.1.184.55
    C:\Program Files\Dealio\kb127\rules\rules.1.188.52
    C:\Program Files\Dealio\kb127\rules\rules.1.189.45
    C:\Program Files\Dealio\kb127\rules\rules.1.196.43
    C:\Program Files\Dealio\kb127\rules\rules.1.198.56
    C:\Program Files\Dealio\kb127\rules\rules.1.199.43
    C:\Program Files\Dealio\kb127\rules\rules.1.200.53
    C:\Program Files\Dealio\kb127\rules\rules.1.201.43
    C:\Program Files\Dealio\kb127\rules\rules.1.202.43
    C:\Program Files\Dealio\kb127\rules\rules.1.203.71
    C:\Program Files\Dealio\kb127\rules\rules.1.205.62
    C:\Program Files\Dealio\kb127\rules\rules.1.213.71
    C:\Program Files\Dealio\kb127\rules\rules.1.214.49
    C:\Program Files\Dealio\kb127\rules\rules.1.215.43
    C:\Program Files\Dealio\kb127\rules\rules.1.216.67
    C:\Program Files\Dealio\kb127\rules\rules.1.217.67
    C:\Program Files\Dealio\kb127\rules\rules.1.218.52
    C:\Program Files\Dealio\kb127\rules\rules.1.219.43
    C:\Program Files\Dealio\kb127\rules\rules.1.220.43
    C:\Program Files\Dealio\kb127\rules\rules.1.221.57
    C:\Program Files\Dealio\kb127\rules\rules.1.222.43
    C:\Program Files\Dealio\kb127\rules\rules.1.223.68
    C:\Program Files\Dealio\kb127\rules\rules.1.226.68
    C:\Program Files\Dealio\kb127\rules\rules.1.227.43
    C:\Program Files\Dealio\kb127\rules\rules.1.228.62
    C:\Program Files\Dealio\kb127\rules\rules.1.229.76
    C:\Program Files\Dealio\kb127\rules\rules.1.23.63
    C:\Program Files\Dealio\kb127\rules\rules.1.239.43
    C:\Program Files\Dealio\kb127\rules\rules.1.24.43
    C:\Program Files\Dealio\kb127\rules\rules.1.240.43
    C:\Program Files\Dealio\kb127\rules\rules.1.241.43
    C:\Program Files\Dealio\kb127\rules\rules.1.242.43
    C:\Program Files\Dealio\kb127\rules\rules.1.243.43
    C:\Program Files\Dealio\kb127\rules\rules.1.244.63
    C:\Program Files\Dealio\kb127\rules\rules.1.245.43
    C:\Program Files\Dealio\kb127\rules\rules.1.247.43
    C:\Program Files\Dealio\kb127\rules\rules.1.248.43
    C:\Program Files\Dealio\kb127\rules\rules.1.249.43
    C:\Program Files\Dealio\kb127\rules\rules.1.250.43
    C:\Program Files\Dealio\kb127\rules\rules.1.251.43
    C:\Program Files\Dealio\kb127\rules\rules.1.252.43
    C:\Program Files\Dealio\kb127\rules\rules.1.253.43
    C:\Program Files\Dealio\kb127\rules\rules.1.254.43
    C:\Program Files\Dealio\kb127\rules\rules.1.255.43
    C:\Program Files\Dealio\kb127\rules\rules.1.256.43
    C:\Program Files\Dealio\kb127\rules\rules.1.257.43
    C:\Program Files\Dealio\kb127\rules\rules.1.279.43
    C:\Program Files\Dealio\kb127\rules\rules.1.28.58
    C:\Program Files\Dealio\kb127\rules\rules.1.282.75
    C:\Program Files\Dealio\kb127\rules\rules.1.283.43
    C:\Program Files\Dealio\kb127\rules\rules.1.284.43
    C:\Program Files\Dealio\kb127\rules\rules.1.289.67
    C:\Program Files\Dealio\kb127\rules\rules.1.290.62
    C:\Program Files\Dealio\kb127\rules\rules.1.291.61
    C:\Program Files\Dealio\kb127\rules\rules.1.296.43
    C:\Program Files\Dealio\kb127\rules\rules.1.297.43
    C:\Program Files\Dealio\kb127\rules\rules.1.304.43
    C:\Program Files\Dealio\kb127\rules\rules.1.307.43
    C:\Program Files\Dealio\kb127\rules\rules.1.308.75
    C:\Program Files\Dealio\kb127\rules\rules.1.31.47
    C:\Program Files\Dealio\kb127\rules\rules.1.310.46
    C:\Program Files\Dealio\kb127\rules\rules.1.311.43
    C:\Program Files\Dealio\kb127\rules\rules.1.315.43
    C:\Program Files\Dealio\kb127\rules\rules.1.316.43
    C:\Program Files\Dealio\kb127\rules\rules.1.317.43
    C:\Program Files\Dealio\kb127\rules\rules.1.318.43
    C:\Program Files\Dealio\kb127\rules\rules.1.319.49
    C:\Program Files\Dealio\kb127\rules\rules.1.32.48
    C:\Program Files\Dealio\kb127\rules\rules.1.334.44
    C:\Program Files\Dealio\kb127\rules\rules.1.335.60
    C:\Program Files\Dealio\kb127\rules\rules.1.336.44
    C:\Program Files\Dealio\kb127\rules\rules.1.337.44
    C:\Program Files\Dealio\kb127\rules\rules.1.338.75
    C:\Program Files\Dealio\kb127\rules\rules.1.339.47
    C:\Program Files\Dealio\kb127\rules\rules.1.34.43
    C:\Program Files\Dealio\kb127\rules\rules.1.340.47
    C:\Program Files\Dealio\kb127\rules\rules.1.341.47
    C:\Program Files\Dealio\kb127\rules\rules.1.349.50
    C:\Program Files\Dealio\kb127\rules\rules.1.35.48
    C:\Program Files\Dealio\kb127\rules\rules.1.350.50
    C:\Program Files\Dealio\kb127\rules\rules.1.351.51
    C:\Program Files\Dealio\kb127\rules\rules.1.352.54
    C:\Program Files\Dealio\kb127\rules\rules.1.353.51
    C:\Program Files\Dealio\kb127\rules\rules.1.354.51
    C:\Program Files\Dealio\kb127\rules\rules.1.357.62
    C:\Program Files\Dealio\kb127\rules\rules.1.358.52
    C:\Program Files\Dealio\kb127\rules\rules.1.359.52
    C:\Program Files\Dealio\kb127\rules\rules.1.360.53
    C:\Program Files\Dealio\kb127\rules\rules.1.361.54
    C:\Program Files\Dealio\kb127\rules\rules.1.362.68
    C:\Program Files\Dealio\kb127\rules\rules.1.363.58
    C:\Program Files\Dealio\kb127\rules\rules.1.364.54
    C:\Program Files\Dealio\kb127\rules\rules.1.365.53
    C:\Program Files\Dealio\kb127\rules\rules.1.367.56
    C:\Program Files\Dealio\kb127\rules\rules.1.368.58
    C:\Program Files\Dealio\kb127\rules\rules.1.369.55
    C:\Program Files\Dealio\kb127\rules\rules.1.370.56
    C:\Program Files\Dealio\kb127\rules\rules.1.371.56
    C:\Program Files\Dealio\kb127\rules\rules.1.372.57
    C:\Program Files\Dealio\kb127\rules\rules.1.373.55
    C:\Program Files\Dealio\kb127\rules\rules.1.375.56
    C:\Program Files\Dealio\kb127\rules\rules.1.376.57
    C:\Program Files\Dealio\kb127\rules\rules.1.377.55
    C:\Program Files\Dealio\kb127\rules\rules.1.378.65
    C:\Program Files\Dealio\kb127\rules\rules.1.384.58
    C:\Program Files\Dealio\kb127\rules\rules.1.386.71
    C:\Program Files\Dealio\kb127\rules\rules.1.387.59
    C:\Program Files\Dealio\kb127\rules\rules.1.388.59
    C:\Program Files\Dealio\kb127\rules\rules.1.389.59
    C:\Program Files\Dealio\kb127\rules\rules.1.390.60
    C:\Program Files\Dealio\kb127\rules\rules.1.391.60
    C:\Program Files\Dealio\kb127\rules\rules.1.392.60
    C:\Program Files\Dealio\kb127\rules\rules.1.393.60
    C:\Program Files\Dealio\kb127\rules\rules.1.394.60
    C:\Program Files\Dealio\kb127\rules\rules.1.396.61
    C:\Program Files\Dealio\kb127\rules\rules.1.397.61
    C:\Program Files\Dealio\kb127\rules\rules.1.398.60
    C:\Program Files\Dealio\kb127\rules\rules.1.399.60
    C:\Program Files\Dealio\kb127\rules\rules.1.403.61
    C:\Program Files\Dealio\kb127\rules\rules.1.404.63
    C:\Program Files\Dealio\kb127\rules\rules.1.405.61
    C:\Program Files\Dealio\kb127\rules\rules.1.406.61
    C:\Program Files\Dealio\kb127\rules\rules.1.407.76
    C:\Program Files\Dealio\kb127\rules\rules.1.408.63
    C:\Program Files\Dealio\kb127\rules\rules.1.409.61
    C:\Program Files\Dealio\kb127\rules\rules.1.412.62
    C:\Program Files\Dealio\kb127\rules\rules.1.413.62
    C:\Program Files\Dealio\kb127\rules\rules.1.414.62
    C:\Program Files\Dealio\kb127\rules\rules.1.415.62
    C:\Program Files\Dealio\kb127\rules\rules.1.416.62
    C:\Program Files\Dealio\kb127\rules\rules.1.417.62
    C:\Program Files\Dealio\kb127\rules\rules.1.418.62
    C:\Program Files\Dealio\kb127\rules\rules.1.419.62
    C:\Program Files\Dealio\kb127\rules\rules.1.420.62
    C:\Program Files\Dealio\kb127\rules\rules.1.421.62
    C:\Program Files\Dealio\kb127\rules\rules.1.423.63
    C:\Program Files\Dealio\kb127\rules\rules.1.424.63
    C:\Program Files\Dealio\kb127\rules\rules.1.425.63
    C:\Program Files\Dealio\kb127\rules\rules.1.426.63
    C:\Program Files\Dealio\kb127\rules\rules.1.427.63
    C:\Program Files\Dealio\kb127\rules\rules.1.428.65
    C:\Program Files\Dealio\kb127\rules\rules.1.429.63
    C:\Program Files\Dealio\kb127\rules\rules.1.430.63
    C:\Program Files\Dealio\kb127\rules\rules.1.432.65
    C:\Program Files\Dealio\kb127\rules\rules.1.433.64
    C:\Program Files\Dealio\kb127\rules\rules.1.434.65
    C:\Program Files\Dealio\kb127\rules\rules.1.435.64
    C:\Program Files\Dealio\kb127\rules\rules.1.436.76
    C:\Program Files\Dealio\kb127\rules\rules.1.437.64
    C:\Program Files\Dealio\kb127\rules\rules.1.438.71
    C:\Program Files\Dealio\kb127\rules\rules.1.439.71
    C:\Program Files\Dealio\kb127\rules\rules.1.440.75
    C:\Program Files\Dealio\kb127\rules\rules.1.442.73
    C:\Program Files\Dealio\kb127\rules\rules.1.443.73
    C:\Program Files\Dealio\kb127\rules\rules.1.444.73
    C:\Program Files\Dealio\kb127\rules\rules.1.445.68
    C:\Program Files\Dealio\kb127\rules\rules.1.446.69
    C:\Program Files\Dealio\kb127\rules\rules.1.450.67
    C:\Program Files\Dealio\kb127\rules\rules.1.451.67
    C:\Program Files\Dealio\kb127\rules\rules.1.452.68
    C:\Program Files\Dealio\kb127\rules\rules.1.453.68
    C:\Program Files\Dealio\kb127\rules\rules.1.454.69
    C:\Program Files\Dealio\kb127\rules\rules.1.456.69
    C:\Program Files\Dealio\kb127\rules\rules.1.457.75
    C:\Program Files\Dealio\kb127\rules\rules.1.458.70
    C:\Program Files\Dealio\kb127\rules\rules.1.459.70
    C:\Program Files\Dealio\kb127\rules\rules.1.460.69
    C:\Program Files\Dealio\kb127\rules\rules.1.462.74
    C:\Program Files\Dealio\kb127\rules\rules.1.463.69
    C:\Program Files\Dealio\kb127\rules\rules.1.464.70
    C:\Program Files\Dealio\kb127\rules\rules.1.465.68
    C:\Program Files\Dealio\kb127\rules\rules.1.468.70
    C:\Program Files\Dealio\kb127\rules\rules.1.469.70
    C:\Program Files\Dealio\kb127\rules\rules.1.470.70
    C:\Program Files\Dealio\kb127\rules\rules.1.471.73
    C:\Program Files\Dealio\kb127\rules\rules.1.472.70
    C:\Program Files\Dealio\kb127\rules\rules.1.478.74
    C:\Program Files\Dealio\kb127\rules\rules.1.479.73
    C:\Program Files\Dealio\kb127\rules\rules.1.480.68
    C:\Program Files\Dealio\kb127\rules\rules.1.481.71
    C:\Program Files\Dealio\kb127\rules\rules.1.482.74
    C:\Program Files\Dealio\kb127\rules\rules.1.49.67
    C:\Program Files\Dealio\kb127\rules\rules.1.50.43
    C:\Program Files\Dealio\kb127\rules\rules.1.500.71
    C:\Program Files\Dealio\kb127\rules\rules.1.501.74
    C:\Program Files\Dealio\kb127\rules\rules.1.502.71
    C:\Program Files\Dealio\kb127\rules\rules.1.51.69
    C:\Program Files\Dealio\kb127\rules\rules.1.52.72
    C:\Program Files\Dealio\kb127\rules\rules.1.520.76
    C:\Program Files\Dealio\kb127\rules\rules.1.521.76
    C:\Program Files\Dealio\kb127\rules\rules.1.522.76
    C:\Program Files\Dealio\kb127\rules\rules.1.53.51
    C:\Program Files\Dealio\kb127\rules\rules.1.531.76
    C:\Program Files\Dealio\kb127\rules\rules.1.532.75
    C:\Program Files\Dealio\kb127\rules\rules.1.534.75
    C:\Program Files\Dealio\kb127\rules\rules.1.54.47
    C:\Program Files\Dealio\kb127\rules\rules.1.55.45
    C:\Program Files\Dealio\kb127\rules\rules.1.56.69
    C:\Program Files\Dealio\kb127\rules\rules.1.57.43
    C:\Program Files\Dealio\kb127\rules\rules.1.58.47
    C:\Program Files\Dealio\kb127\rules\rules.1.593.76
    C:\Program Files\Dealio\kb127\rules\rules.1.595.76
    C:\Program Files\Dealio\kb127\rules\rules.1.63.57
    C:\Program Files\Dealio\kb127\rules\rules.1.66.47
    C:\Program Files\Dealio\kb127\rules\rules.1.70.75
    C:\Program Files\Dealio\kb127\rules\rules.1.71.43
    C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Dealio
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Search Settings
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Search Settings\kb127
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Search Settings\kb127\res
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Search Settings\kb127\temp
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Search Settings\kb127\temp\ws-14425.log
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Search Settings\kb127\temp\ws-14426.log
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Search Settings\kb127\temp\ws-14427.log
    C:\DOCUME~1\UTILIS~1\APPLIC~1\Search Settings\kb127\temp\ws-14428.log
    C:\Program Files\Search Settings
    C:\Program Files\Search Settings\kb127
    C:\Program Files\Search Settings\SearchSettings.exe
    C:\Program Files\Search Settings\kb127\res
    C:\Program Files\Search Settings\kb127\SearchSettings.dll
    C:\Program Files\Search Settings\kb127\SearchSettingsRes409.dll
    C:\Program Files\Search Settings\kb127\temp
    C:\DOCUME~1\UTILIS~1\LOCALS~1\Temp\ICD1.tmp

    -----------\\ [..\Internet Explorer\Main]

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
    "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
    "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
    "SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"
    "Start Page Redirect Cache"="https://www.msn.com/fr-fr?ocid=iehp"
    "Start Page Restore"="https://www.orange.fr/portail"
    "Search Bar"="https://www.orange.fr/portail?kw="
    "Start Page"="https://www.orange.fr/portail"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
    "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
    "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
    "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
    "Local Page"="https://www.msn.com/fr-fr/"
    "Start Page"="http://www.yoower.com/"

    --------------------\\ Recherche d'autres infections

    --------------------\\ Cracks & Keygens ..

    C:\DOCUME~1\UTILIS~1\Recent\Able2Extract 5.0 Crack No-Dvd Fixes.lnk

    1 - "C:\ToolBar SD\TB_1.txt" - 03/07/2009|22:36 - Option : [1]

    -----------\\ Fin du rapport a 22:36:47,78
    0
  21. Utilisateur anonyme
     
    C:\DOCUME~1\UTILIS~1\Recent\Able2Extract 5.0 Crack No-Dvd Fixes.lnk Vires ce fichier.Certainement le départ de tes problèmes.Post les rapports au fur et a mesure.
    1=> Nettoyage avec ToolBar S&D :
    • !! Déconnectes toi et fermes toute tes applications en cours le temps de la
    manipe !!
    • Relances Toolbar-S&D en double-cliquant sur le raccourci.
    • Tapes sur l'option 2 ( "nettoyage" ) puis tapes sur "Entrée".
    • Note : Ne touches à rien lors de la suppression !!
    • Un rapport sera généré à la fin du processus : postes son contenu dans ta prochaine réponse .
    -------------------------------------------------------------------------------------------------------------------------
    2=> Télécharge et installe Malwarebytes' Anti-Malware
    • (NB : S'il te manque"COMCTL32.OCX" lors de l'installe, alors télécharge le ici : https://www.malekal.com/tutorial-aboutbuster/
    • A la fin de l'installation, veille à ce que l'option « mettre a jour Malwarebyte's Anti-Malware » soit cochée
    • Lance MBAM et laisse les Mises à jour se télécharger (sinon fais les manuellement au lancement du programme)
    • Puis va dans l'onglet "Recherche", coche "Exécuter un examen complet" puis "Rechercher"
    • Sélectionne tes disques durs" puis clique sur "Lancer l’examen"
    • A la fin du scan, clique sur Afficher les résultats
    • Coche tous les éléments détectés puis clique sur Supprimer la sélection
    • Enregistre le rapport
    • S'il t'est demandé de redémarrer, clique sur Yes
    • Poste le rapport de scan après la suppression ici
    • Si tu as besoin d’aide regarde ce tutorial
    https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
    ------------------------------------------------------------------------------------------------------------------------
    3=>• Télécharge :https://www.superantispyware.com/
    • Choisis "enregistrer" et enregistre-le sur ton bureau.
    • Double-clique sur l'icône d'installation qui vient de se créer et suis les instructions.
    • Créé une icône sur le bureau.
    • Double-clique sur l'icône de SAS (une tête dans un cercle rouge barré) pour le lancer.
    • Si l'outil te demande de mettre à jour le programme ("update the program definitions", clique sur yes.
    • Sous Configuration and Preferences, clique sur le bouton "Preferences"
    • Clique sur l'onglet "Scanning Control "
    • Dans "Scanner Options ", assure toi que la case devant lles lignes suivantes est cochée :
    • Close browsers before scanning
    • Scan for tracking cookies
    • Terminate memory threats before quarantining
    • Laisse les autres lignes décochées.
    • Clique sur le bouton "Close" pour quitter l'écran du centre de contrôle.
    • Dans la fenêtre principale, clique, dans "Scan for Harmful Software", sur "Scan your computer".
    • Dans la colonne de gauche, coche C:\Fixed Drive.
    • Dans la colonne de droite, sous "Complete scan", clique sur "Perform Complete Scan"
    • Clique sur "next" pour lancer le scan. Patiente pendant la durée du scan.
    • A la fin du scan, une fenêtre de résultats s'ouvre . Clique sur OK.
    • Assure toi que toutes les lignes de la fenêtre blanche sont cochées et clique sur "Next".
    • Tout ce qui a été trouvé sera mis en quarantaine. S'il t'es demandé de redémarrer l'ordi ("reboot"), clique sur Yes.
    • Pour recopier les informations sur le forum, fais ceci :
    • après le redémarrage de l'ordi, double-clique sur l'icône pour lancer SAS.
    • Clique sur "Preferences" puis sur l'onglet "Statistics/Logs ".
    • Dans "scanners logs", double-clique sur SUPERAntiSpyware Scan Log.
    • Le rapport va s'ouvrir dans ton éditeur de texte par défaut.
    • Copie son contenu dans ta réponse.
    • Regarde bien le tuto SUPERAntiSpyware il est très bien expliqué.
    • https://www.malekal.com/?s=SUPERAntiSpyware

    0
  • 1
  • 2

Discussions similaires

Google Chrome "  Échec de l'analyse antivirus "
jmpower -
RBmoon -

18 réponses
" Échec de l'analyse antivirus " la solution.
bazfile -
bazfile -

0 réponse