Petit problème à grandes conséquences !

Réponse 1 / 26

pimprenelle27 Messages postés 20857 Date d'inscription Statut Contributeur sécurité Dernière intervention 2 502

Bonjour,

Si ce n'est pas déjà fait, changer le mot de passe de messagerie hotmail.

Ensuite

▶ Télécharge Random's System Information Tool (RSIT).

▶ Un tutoriel est à ta disposition pour l'installer et l'utiliser correctement ici

▶ Double clique sur RSIT.exe pour lancer l'outil.

▶ Clique sur 'Continue' à l'écran Disclaimer.

▶ Si l'outil Hijackthis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera et tu devras accepter la licence.

▶ Une fois le scan fini , 2 rapports vont apparaitre. ▶ Héberge le contenu des 2 rapports.

( C:\RSIT\log.txt et C:\RSIT\info.txt )

CTRL A pour sélectionner tout, CTRL C pour copier et puis CTRL V pour coller

Petite chose à faire pour les rapports générés par RSIT avant de continuer

▶ Vous devez fusionner les deux rapports.
▶ C'est-à-dire, copier/coller le contenu du rapport info.txt à la suite du rapport log.txt pour ne faire qu'un seul rapport.
▶ Ensuite enregistrer le rapport log.txt.

Ensuite :

▶ Rendez-vous à cette adresse d'hébergement gratuit : https://www.cjoint.com/

▶ Cliquez sur parcourir, puis sur créer le lien cjoint

▶ Une fois le lien crée, faite un clique droit dessus et copier l'adresse du lien pour venir le coller dans votre réponse

Réponse 2 / 26

Lenalee

Merci beaucoup, je ne m'attendais pas à une réponse aussi rapide ^^"
Donc j'ai tout suivi à la lettre... voici le lien du rapport : https://www.cjoint.com/?istcyYDTcb

Réponse 3 / 26

pimprenelle27 Messages postés 20857 Date d'inscription Statut Contributeur sécurité Dernière intervention 2 502

Tu disais petit problèmes, mais ton systèmes est très infecté dite donc c'est un gros problème,

1ère chose à faire :

Dans tes antivirus tu utilise quoi comme antivirus avast ou f-secure car 2 antivirus sur le même ordi ça fait pas bon ménage ça fait conflit. après je te donnerais la marche à suivre.

Réponse 4 / 26

Lenalee

J'utilise avast.

Réponse 5 / 26

pimprenelle27 Messages postés 20857 Date d'inscription Statut Contributeur sécurité Dernière intervention 2 502

Donc pas bon Avast c'est une vrai passoire.

Désinstalle complètement fsecure de ton ordi.

désinqtalle avast avec ceci : https://www.avast.com/fr-fr/uninstall-utility

Ensuite installe avira qui l'un des meilleurs en gratuit :

Télécharge AVIRA/ANTIVR Le meilleurs antivirus dans les gratuit.

Tuto de configuration en vidéo (Merci Nico)

Ensuite tu reviens je te donne la suite.

Réponse 6 / 26

Lenalee

Tout est désinstallé (enfin pour f-secure j'ai eu quelques difficultés mais je pense être arrivée à le désinstaller) et j'ai installé Avira !

Réponse 7 / 26

pimprenelle27 Messages postés 20857 Date d'inscription Statut Contributeur sécurité Dernière intervention 2 502

Parfais maintenant on peut commencer la désinfection :

1ère chose à faire :

Sous Vista : ▶ Désactive le contrôle des comptes utilisateurs (tu le réactiveras après ta désinfection):

▶ Clique sur Démarrer puis sur panneau de configuration
▶ Double Clique sur l'icône "Comptes d'utilisateurs"
▶ Clique ensuite sur désactiver et valide.
▶ Redémarre le PC.

Option 1 - Recherche :

▶ télécharge smitfraudfix et enregistre le sur le bureau

▶ Sous XP : Double clique sur smitfraudfix puis exécuter

▶ sous vista : Clic-droit sur SmitfraudFix présent sur le bureau et choisis "Exécuter en tant qu'administrateur"

▶ Sélectionner 1 pour créer un rapport des fichiers responsables de l'infection.

(attention : N utilises pas l option 2 si je ne te l ai pas demandé !!)

▶ copier/coller le rapport dans la réponse.

Voici un tutoriel sonore et animé en cas de problème d'utilisation

(Attention : "process.exe", un composant de l'outil, est détecté par certains antivirus comme étant un "RiskTool".
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. Mis entre de mauvaises mains,
cet utilitaire pourrait arrêter des logiciels de sécurité.)

2ème chose à faire :

▶ Télécharge Toolbar-S&D (de Team IDN) sur ton Bureau

▶ Lance l'installation du programme en exécutant le fichier téléchargé.

▶ Sous XP : Double-clique sur le raccourci de Toolbar-S&D.

▶ Sous Vista : Fais un clic droit sur ToolbarSD et sélectionne "Exécuter en tant qu'administrateur".

▶ Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.

▶ Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.

▶ Poste le rapport généré. (C:\TB.txt)

Réponse 8 / 26

Lenalee

J'ai fait l'option 1 pour le moment, je vous envoie le rapport pour commencer :

SmitFraudFix v2.423

Rapport fait à 11:13:49,14, 23/08/2009
Executé à partir de C:\Documents and Settings\M.MOLLICA\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\nvraidservice.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
C:\Program Files\Search Settings\SearchSettings.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Electronic Arts\EADM\Core.exe
C:\Program Files\Orange HSS\Launcher\Launcher.exe
C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe
C:\Program Files\OFFICE One6.5\OFFICE One Notes\oonotesv65.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\1\AlertModule.exe
C:\Program Files\Orange HSS\systray\systrayapp.exe
C:\Program Files\Orange HSS\Deskboard\deskboard.exe
C:\Program Files\Orange HSS\connectivity\connectivitymanager.exe
C:\Program Files\Orange HSS\connectivity\CoreCom\CoreCom.exe
C:\WINDOWS\system32\PackethSvc.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\1\FTRTSVC.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Orange HSS\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\1\FTCOMModule.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\M.MOLLICA\Bureau\SmitfraudFix\Policies.exe
C:\WINDOWS\system32\cmd.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts

»»»»»»»»»»»»»»»»»»»»»»»» C:\

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\M.MOLLICA

»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\M1374~1.MOL\LOCALS~1\Temp

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\M.MOLLICA\Application Data

»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\M1374~1.MOL\Favoris

»»»»»»»»»»»»»»»»»»»»»»»» Bureau

»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"

»»»»»»»»»»»»»»»»»»»»»»»» o4Patch
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

o4Patch
Credits: Malware Analysis & Diagnostic
Code: S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

Agent.OMZ.Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» 404Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""

»»»»»»»»»»»»»»»»»»»»»»»» Winlogon
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"

»»»»»»»»»»»»»»»»»»»»»»»» RK

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""

»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: NVIDIA nForce Networking Controller - Miniport d'ordonnancement de paquets
DNS Server Search Order: 192.168.1.1
DNS Server Search Order: 192.168.1.1

HKLM\SYSTEM\CCS\Services\Tcpip\..\{EF27B533-9239-407D-8AF3-15C70CFC9E34}: DhcpNameServer=192.168.1.1 192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{EF27B533-9239-407D-8AF3-15C70CFC9E34}: DhcpNameServer=192.168.1.1 192.168.1.1
HKLM\SYSTEM\CS3\Services\Tcpip\..\{EF27B533-9239-407D-8AF3-15C70CFC9E34}: DhcpNameServer=192.168.1.1 192.168.1.1
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 192.168.1.1

»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

»»»»»»»»»»»»»»»»»»»»»»»» Fin

Voilà... je continue tout de suite avec la 2e chose à faire ?

Réponse 9 / 26

Madmind

Avast, une vraie passoire ? Si tu met ta BDD a jour régulièrement, il n y a jamais la moindre infection qui passe...

Ensuite, perso, je vois rien de choquant dans son rapport HT, mis a part le truc "Blue Soleil", il faudrait un bon nettoyage la dedans mais mis a part mettre un temps fou à démarrer ca n'engage à rien. En tout cas moi, je ne vois pas la trace d'un KeyLogger.

Une petite astuce serait de saisir un nouveau mot de passe à partir du clavier virtuel de windows voir, si tu veux encore etre plus sur, le faire chez un ami par exemple ainsi, même si un keylogger se cache sur ton ordi pas de risque qu'il intercepte ton mot de passe msn ainsi.

Dernier conseil, change tes questions secrètes, 99% des vols de compte sur MSN sont à cause de questions secrètes trop simple.

Quand à la sécurité, un petit démarrage en mode sans échec, un coup d'Adware, un scan AV, redémarrge de l'ordi et un coup de bitdefender en ligne. Tu sera tranquille pour un moment !

Réponse 10 / 26

pimprenelle27 Messages postés 20857 Date d'inscription Statut Contributeur sécurité Dernière intervention 2 502

Madmind, désolé je sais ce que je fais pas besoin de toi pour savoir que avast ceest pareil que norton une vrai passoire, même à jour, ba il laisse passer les virus comme norton.

Et puis tu doit mal voir, car dans son rapport il y tout ça comme infection : faut savoir lire : https://www.cjoint.com/?ixm57KVySV

Lenalee ne pas faire attention au message de Madmind et me faire la suite tool bar.

Réponse 11 / 26

Lenalee

Voilà 2e étape finie, je mets le rapport :

"C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
Option : [1] ( 23/08/2009|12:59 )

-----------\\ Recherche de Fichiers / Dossiers ...

C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@bananalotto[2].txt
C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@www.bananalotto[1].txt
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\dinstallhelper.88B2094DB6DC4EF5A9EF42E6845596E5.dll
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\dinstallhelper.8F2DC070BA2F4E47B79E80B7CBF84210.dll
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\dinstallhelper.9009441506D5431686DD5ED90DDC5AB7.dll
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\dinstallhelper.A33FB413DDF5450AA7E2AEB2A364A79C.dll
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\dinstallhelper.A7A369EFE9924DC39D88CA05318E40AC.dll
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\dinstallhelper.A841B74133124EF294387AEBA8301F10.dll
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\dinstallhelper.C8F5A7B3F77944DC887986FC80A4FBCB.dll
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\temp
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\alerts.gif
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\alerts_over.gif
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\alerts_rec.gif
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\alerts_rec_over.gif
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\chevron-small.gif
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\DealioSearch.html
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\deals-leftcap.gif
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\deal_report.jpg
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\ebay_login.jpg
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\err_mainwindow.html
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\err_toolbar.html
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\global_scripts.js
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\headerbgthin.jpg
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\highlight-bg.png
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\logo.gif
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\logo_over.gif
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\man_toolbar.css
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\man_toolbar.html
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\man_toolbar.js
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\man_toolbarl.js
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\post-this-deal.gif
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\post-this-deal_over.gif
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\scripts.js
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\scroller.js
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\search-chevron.gif
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\search-chevron_over.gif
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\search_bg_blink.gif
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\separator.gif
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\settings.gif
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\settings_over.gif
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\yahoo-search.png
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\index.76.35
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.10.76
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.109.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.110.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.12.52
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.13.58
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.130.58
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.135.50
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.153.44
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.155.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.156.49
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.16.60
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.161.52
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.178.66
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.184.55
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.188.52
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.189.45
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.196.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.198.56
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.199.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.200.53
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.201.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.202.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.203.71
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.205.62
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.213.71
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.214.49
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.215.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.216.67
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.217.67
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.218.52
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.219.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.220.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.221.57
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.222.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.223.68
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.226.68
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.227.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.228.62
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.229.76
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.23.63
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.239.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.24.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.240.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.241.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.242.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.243.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.244.63
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.245.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.247.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.248.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.249.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.250.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.251.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.252.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.253.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.254.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.255.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.256.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.257.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.279.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.28.58
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.282.75
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.283.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.284.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.289.67
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.290.62
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.291.61
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.296.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.297.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.304.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.307.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.308.75
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.31.47
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.310.46
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.311.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.315.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.316.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.317.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.318.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.319.49
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.32.48
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.334.44
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.335.60
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.336.44
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.337.44
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.338.75
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.339.47
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.34.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.340.47
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.341.47
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.349.50
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.35.48
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.350.50
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.351.51
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.352.54
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.353.51
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.354.51
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.357.62
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.358.52
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.359.52
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.360.53
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.361.54
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.362.68
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.363.58
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.364.54
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.365.53
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.367.56
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.368.58
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.369.55
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.370.56
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.371.56
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.372.57
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.373.55
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.375.56
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.376.57
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.377.55
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.378.65
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.384.58
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.386.71
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.387.59
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.388.59
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.389.59
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.390.60
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.391.60
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.392.60
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.393.60
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.394.60
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.396.61
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.397.61
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.398.60
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.399.60
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.403.61
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.404.63
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.405.61
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.406.61
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.407.76
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.408.63
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.409.61
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.412.62
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.413.62
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.414.62
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.415.62
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.416.62
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.417.62
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.418.62
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.419.62
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.420.62
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.421.62
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.423.63
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.424.63
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.425.63
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.426.63
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.427.63
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.428.65
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.429.63
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.430.63
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.432.65
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.433.64
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.434.65
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.435.64
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.436.76
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.437.64
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.438.71
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.439.71
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.440.75
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.442.73
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.443.73
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.444.73
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.445.68
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.446.69
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.450.67
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.451.67
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.452.68
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.453.68
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.454.69
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.456.69
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.457.75
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.458.70
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.459.70
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.460.69
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.462.74
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.463.69
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.464.70
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.465.68
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.468.70
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.469.70
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.470.70
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.471.73
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.472.70
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.478.74
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.479.73
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.480.68
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.481.71
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.482.74
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.49.67
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.50.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.500.71
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.501.74
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.502.71
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.51.69
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.52.72
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.520.76
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.521.76
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.522.76
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.53.51
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.531.76
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.532.75
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.534.75
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.54.47
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.55.45
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.56.69
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.57.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.58.47
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.593.76
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.595.76
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.63.57
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.66.47
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.70.75
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.71.43
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\temp\dod_cache.xml
C:\DOCUME~1\Romain\APPLIC~1\Dealio
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\temp
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\alerts.gif
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\alerts_over.gif
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\alerts_rec.gif
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\alerts_rec_over.gif
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\chevron-small.gif
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\DealioSearch.html
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\deals-leftcap.gif
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\deal_report.jpg
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\ebay_login.jpg
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\err_mainwindow.html
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\err_toolbar.html
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\global_scripts.js
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\headerbgthin.jpg
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\highlight-bg.png
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\logo.gif
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\logo_over.gif
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\man_toolbar.css
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\man_toolbar.html
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\man_toolbar.js
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\man_toolbarl.js
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\post-this-deal.gif
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\post-this-deal_over.gif
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\scripts.js
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\scroller.js
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\search-chevron.gif
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\search-chevron_over.gif
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\search_bg_blink.gif
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\separator.gif
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\settings.gif
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\settings_over.gif
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\yahoo-search.png
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\index.76.35
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.10.76
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.109.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.110.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.12.52
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.13.58
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.130.58
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.135.50
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.153.44
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.155.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.156.49
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.16.60
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.161.52
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.178.66
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.184.55
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.188.52
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.189.45
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.196.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.198.56
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.199.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.200.53
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.201.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.202.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.203.71
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.205.62
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.213.71
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.214.49
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.215.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.216.67
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.217.67
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.218.52
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.219.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.220.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.221.57
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.222.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.223.68
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.226.68
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.227.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.228.62
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.229.76
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.23.63
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.239.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.24.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.240.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.241.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.242.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.243.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.244.63
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.245.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.247.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.248.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.249.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.250.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.251.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.252.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.253.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.254.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.255.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.256.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.257.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.279.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.28.58
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.282.75
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.283.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.284.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.289.67
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.290.62
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.291.61
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.296.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.297.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.304.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.307.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.308.75
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.31.47
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.310.46
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.311.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.315.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.316.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.317.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.318.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.319.49
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.32.48
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.334.44
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.335.60
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.336.44
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.337.44
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.338.75
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.339.47
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.34.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.340.47
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.341.47
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.349.50
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.35.48
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.350.50
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.351.51
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.352.54
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.353.51
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.354.51
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.357.62
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.358.52
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.359.52
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.360.53
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.361.54
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.362.68
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.363.58
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.364.54
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.365.53
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.367.56
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.368.58
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.369.55
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.370.56
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.371.56
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.372.57
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.373.55
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.375.56
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.376.57
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.377.55
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.378.65
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.384.58
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.386.71
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.387.59
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.388.59
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.389.59
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.390.60
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.391.60
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.392.60
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.393.60
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.394.60
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.396.61
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.397.61
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.398.60
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.399.60
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.403.61
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.404.63
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.405.61
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.406.61
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.407.76
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.408.63
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.409.61
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.412.62
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.413.62
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.414.62
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.415.62
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.416.62
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.417.62
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.418.62
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.419.62
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.420.62
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.421.62
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.423.63
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.424.63
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.425.63
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.426.63
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.427.63
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.428.65
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.429.63
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.430.63
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.432.65
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.433.64
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.434.65
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.435.64
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.436.76
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.437.64
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.438.71
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.439.71
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.440.75
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.442.73
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.443.73
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.444.73
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.445.68
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.446.69
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.450.67
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.451.67
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.452.68
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.453.68
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.454.69
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.456.69
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.457.75
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.458.70
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.459.70
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.460.69
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.462.74
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.463.69
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.464.70
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.465.68
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.468.70
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.469.70
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.470.70
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.471.73
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.472.70
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.478.74
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.479.73
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.480.68
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.481.71
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.482.74
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.49.67
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.50.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.500.71
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.501.74
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.502.71
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.51.69
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.52.72
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.520.76
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.521.76
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.522.76
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.53.51
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.531.76
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.532.75
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.534.75
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.54.47
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.55.45
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.56.69
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.57.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.58.47
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.593.76
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.595.76
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.63.57
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.66.47
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.70.75
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.71.43
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\temp\dealio-14376.log
C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\temp\dod_cache.xml
C:\DOCUME~1\Rosy\APPLIC~1\Dealio
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\temp
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\alerts.gif
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\alerts_over.gif
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\alerts_rec.gif
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\alerts_rec_over.gif
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\chevron-small.gif
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\DealioSearch.html
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\deals-leftcap.gif
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\deal_report.jpg
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\ebay_login.jpg
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\err_mainwindow.html
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\err_toolbar.html
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\global_scripts.js
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\headerbgthin.jpg
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\highlight-bg.png
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\logo.gif
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\logo_over.gif
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\man_toolbar.css
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\man_toolbar.html
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\man_toolbar.js
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\man_toolbarl.js
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\post-this-deal.gif
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\post-this-deal_over.gif
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\scripts.js
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\scroller.js
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\search-chevron.gif
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\search-chevron_over.gif
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\search_bg_blink.gif
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\separator.gif
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\settings.gif
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\settings_over.gif
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\yahoo-search.png
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\index.76.35
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.10.76
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.109.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.110.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.12.52
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.13.58
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.130.58
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.135.50
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.153.44
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.155.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.156.49
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.16.60
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.161.52
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.178.66
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.184.55
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.188.52
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.189.45
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.196.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.198.56
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.199.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.200.53
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.201.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.202.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.203.71
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.205.62
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.213.71
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.214.49
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.215.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.216.67
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.217.67
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.218.52
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.219.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.220.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.221.57
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.222.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.223.68
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.226.68
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.227.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.228.62
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.229.76
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.23.63
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.239.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.24.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.240.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.241.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.242.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.243.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.244.63
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.245.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.247.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.248.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.249.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.250.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.251.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.252.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.253.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.254.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.255.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.256.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.257.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.279.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.28.58
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.282.75
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.283.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.284.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.289.67
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.290.62
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.291.61
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.296.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.297.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.304.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.307.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.308.75
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.31.47
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.310.46
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.311.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.315.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.316.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.317.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.318.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.319.49
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.32.48
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.334.44
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.335.60
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.336.44
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.337.44
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.338.75
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.339.47
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.34.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.340.47
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.341.47
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.349.50
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.35.48
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.350.50
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.351.51
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.352.54
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.353.51
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.354.51
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.357.62
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.358.52
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.359.52
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.360.53
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.361.54
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.362.68
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.363.58
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.364.54
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.365.53
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.367.56
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.368.58
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.369.55
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.370.56
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.371.56
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.372.57
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.373.55
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.375.56
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.376.57
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.377.55
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.378.65
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.384.58
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.386.71
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.387.59
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.388.59
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.389.59
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.390.60
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.391.60
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.392.60
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.393.60
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.394.60
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.396.61
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.397.61
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.398.60
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.399.60
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.403.61
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.404.63
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.405.61
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.406.61
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.407.76
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.408.63
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.409.61
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.412.62
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.413.62
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.414.62
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.415.62
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.416.62
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.417.62
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.418.62
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.419.62
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.420.62
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.421.62
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.423.63
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.424.63
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.425.63
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.426.63
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.427.63
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.428.65
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.429.63
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.430.63
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.432.65
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.433.64
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.434.65
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.435.64
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.436.76
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.437.64
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.438.71
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.439.71
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.440.75
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.442.73
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.443.73
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.444.73
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.445.68
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.446.69
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.450.67
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.451.67
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.452.68
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.453.68
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.454.69
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.456.69
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.457.75
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.458.70
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.459.70
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.460.69
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.462.74
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.463.69
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.464.70
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.465.68
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.468.70
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.469.70
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.470.70
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.471.73
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.472.70
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.478.74
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.479.73
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.480.68
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.481.71
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.482.74
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.49.67
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.50.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.500.71
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.501.74
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.502.71
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.51.69
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.52.72
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.520.76
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.521.76
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.522.76
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.53.51
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.531.76
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.532.75
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.534.75
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.54.47
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.55.45
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.56.69
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.57.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.58.47
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.593.76
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.595.76
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.63.57
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.66.47
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.70.75
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.71.43
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\temp\dealio-14420.log
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\temp\dod_cache.xml
C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3716_772_3.html
C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Dealio
C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@hosted.platrium[2].txt
C:\WINDOWS\Prefetch\SEARCHSETTINGS.EXE-253CB611.pf
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Search Settings
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Search Settings\kb127
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Search Settings\kb127\res
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Search Settings\kb127\temp
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Search Settings\kb127\temp\ws-14476.log
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Search Settings\kb127\temp\ws-14477.log
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Search Settings\kb127\temp\ws-14478.log
C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Search Settings\kb127\temp\ws-14479.log
C:\DOCUME~1\Romain\APPLIC~1\Search Settings
C:\DOCUME~1\Romain\APPLIC~1\Search Settings\kb127
C:\DOCUME~1\Romain\APPLIC~1\Search Settings\kb127\res
C:\DOCUME~1\Romain\APPLIC~1\Search Settings\kb127\temp
C:\DOCUME~1\Romain\APPLIC~1\Search Settings\kb127\temp\ws-14466.log
C:\DOCUME~1\Romain\APPLIC~1\Search Settings\kb127\temp\ws-14467.log
C:\DOCUME~1\Romain\APPLIC~1\Search Settings\kb127\temp\ws-14468.log
C:\DOCUME~1\Romain\APPLIC~1\Search Settings\kb127\temp\ws-14469.log
C:\DOCUME~1\Rosy\APPLIC~1\Search Settings
C:\DOCUME~1\Rosy\APPLIC~1\Search Settings\kb127
C:\DOCUME~1\Rosy\APPLIC~1\Search Settings\kb127\res
C:\DOCUME~1\Rosy\APPLIC~1\Search Settings\kb127\temp
C:\DOCUME~1\Rosy\APPLIC~1\Search Settings\kb127\temp\ws-14474.log
C:\DOCUME~1\Rosy\APPLIC~1\Search Settings\kb127\temp\ws-14476.log
C:\Program Files\Search Settings
C:\Program Files\Search Settings\kb127
C:\Program Files\Search Settings\SearchSettings.exe
C:\Program Files\Search Settings\kb127\res
C:\Program Files\Search Settings\kb127\SearchSettings.dll
C:\Program Files\Search Settings\kb127\SearchSettingsRes409.dll
C:\Program Files\Search Settings\kb127\temp

-----------\\ Extensions

(M.MOLLICA) - {64161300-e22b-11db-8314-0800200c9a66} => speeddial

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"SearchMigratedDefaultURL"="https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&src={referrer:source?}"
"Start Page Redirect Cache"="https://www.msn.com/fr-fr?ocid=iehp"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"

--------------------\\ Recherche d'autres infections

Aucune autre infection trouvée !

1 - "C:\ToolBar SD\TB_1.txt" - 23/08/2009|13:02 - Option : [1]

-----------\\ Fin du rapport a 13:02:52,81

Réponse 12 / 26

pimprenelle27 Messages postés 20857 Date d'inscription Statut Contributeur sécurité Dernière intervention 2 502

alors Madmind tu dis plus rien là en voyant toute ces infections :

Lenalee il en a trouvé des choses tool bar, maintenant option de suppression de tool bar :

▶ Relance Toolbar-S&D.

▶ Tape sur "2" puis valide en appuyant sur "Entrée".

/!\ Ne ferme pas la fenêtre lors de la suppression /!\

▶ Un rapport sera généré, poste son contenu ici.

NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.
Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."
Tape explorer puis valide.

Ce qu'il faut savoir sur les toolbars (barres d'outils)

Réponse 13 / 26

Lenalee

J'ai quand même une question : est-ce qu'il y a des risques que ça supprime des dossiers de photos ou autres ?

Réponse 14 / 26

pimprenelle27 Messages postés 20857 Date d'inscription Statut Contributeur sécurité Dernière intervention 2 502

non ça ne supprime que les virus ne t'inquiète pas.

Réponse 15 / 26

Lenalee

Alors ça va ^.^
Suppression faite, voici le rapport :

-----------\\ ToolBar S&D 1.2.9 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Sempron(tm) Processor 3100+ )
BIOS : Default System BIOS
USER : M.MOLLICA ( Administrator )
BOOT : Normal boot
Antivirus : AntiVir Desktop 9.0.1.32 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:152 Go (Free:58 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)

"C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
Option : [2] ( 23/08/2009|16:36 )

-----------\\ SUPPRESSION

Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@bananalotto[2].txt
Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@www.bananalotto[1].txt
Supprime! - C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\dinstallhelper.88B2094DB6DC4EF5A9EF42E6845596E5.dll
Supprime! - C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\dinstallhelper.8F2DC070BA2F4E47B79E80B7CBF84210.dll
Supprime! - C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\dinstallhelper.9009441506D5431686DD5ED90DDC5AB7.dll
Supprime! - C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\dinstallhelper.A33FB413DDF5450AA7E2AEB2A364A79C.dll
Supprime! - C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\dinstallhelper.A7A369EFE9924DC39D88CA05318E40AC.dll
Supprime! - C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\dinstallhelper.A841B74133124EF294387AEBA8301F10.dll
Supprime! - C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\dinstallhelper.C8F5A7B3F77944DC887986FC80A4FBCB.dll
Supprime! - C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127
Supprime! - C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127
Supprime! - C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127
Supprime! - C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Dealio
Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@hosted.platrium[2].txt
Supprime! - C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Search Settings\kb127
Supprime! - C:\DOCUME~1\Romain\APPLIC~1\Search Settings\kb127
Supprime! - C:\DOCUME~1\Rosy\APPLIC~1\Search Settings\kb127
Supprime! - C:\Program Files\Search Settings\kb127
Supprime! - C:\Program Files\Search Settings\SearchSettings.exe
Supprime! - C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio
Supprime! - C:\DOCUME~1\Romain\APPLIC~1\Dealio
Supprime! - C:\DOCUME~1\Rosy\APPLIC~1\Dealio
Supprime! - C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Search Settings
Supprime! - C:\DOCUME~1\Romain\APPLIC~1\Search Settings
Supprime! - C:\DOCUME~1\Rosy\APPLIC~1\Search Settings
Supprime! - C:\Program Files\Search Settings

-----------\\ Recherche de Fichiers / Dossiers ...

-----------\\ Extensions

(M.MOLLICA) - {64161300-e22b-11db-8314-0800200c9a66} => speeddial

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"SearchMigratedDefaultURL"="https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&src={referrer:source?}"
"Start Page Redirect Cache"="https://www.msn.com/fr-fr?ocid=iehp"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="https://www.msn.com/fr-fr/"

--------------------\\ Recherche d'autres infections

Aucune autre infection trouvée !

1 - "C:\ToolBar SD\TB_1.txt" - 23/08/2009|13:02 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 23/08/2009|16:41 - Option : [2]

-----------\\ Fin du rapport a 16:41:34,87

Réponse 16 / 26

pimprenelle27 Messages postés 20857 Date d'inscription Statut Contributeur sécurité Dernière intervention 2 502

Ensuite ceci afin de voir l'infection cid qui me semble bizarre :

Il y a des infections LOP dans ton PC.
Elles s'installent via certains programmes, dont ceux-ci :

● Le sponsor de Messenger Plus!
● Bittorent
● BitDownload
● BitGrabber
● NetPumper
● BitRoll
● TorrentQ
● Torrent101

/!\ Fais attention de ne pas faire la même erreur, donc évite ces programmes /!\

▶ Télécharger et enregistrer lopSD sur le Bureau

▶ Double-clic Lop S&D

▶ Faire l'installation

▶ Fermer toutes les applications

▶ Le lancer par un double-clic sur le raccourci qui est sur le bureau

▶ Avec VISTA => clic-droit et => Exécuter en tant qu'administrateur

▶ Taper F pour français , puis presser entrée

▶ Taper 1

▶ Presser Entrée

▶ Le PC va redémarrer

* Note : si l'antivirus annonce une infection dans TEMP , l'ignorer

▶ Attendre l'apparition du rapport

▶ Copier le rapport et le coller dans la réponse

* le rapport se trouve aussi à C:\lopR

Réponse 17 / 26

Lenalee

Le rapport après la recherche :

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 03/09/2009|10:42 )

--------------------\\ Listing des dossiers dans APPLIC~1

[16/03/2008|16:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[27/11/2006|18:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\America Online
[19/08/2009|10:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[24/09/2007|17:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Bluetooth
[06/03/2007|12:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CanonBJ
[24/02/2006|14:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ciel
[24/02/2006|14:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[04/06/2009|18:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Electronic Arts
[18/04/2008|13:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\F-Secure
[11/02/2008|12:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\fssg
[25/12/2008|11:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[23/09/2008|18:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grid Blue Memo Site
[06/03/2007|12:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[18/01/2008|23:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[04/06/2009|18:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[06/11/2006|19:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[06/03/2007|12:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
[15/04/2007|13:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Corporation
[08/03/2009|14:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
[25/12/2007|19:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[01/08/2009|20:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[24/02/2006|14:02] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[26/02/2006|12:08] C:\DOCUME~1\INVIT~1\APPLIC~1\Identities
[26/02/2006|12:08] C:\DOCUME~1\INVIT~1\APPLIC~1\Microsoft

[25/12/2007|19:39] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[25/09/2008|18:42] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Adobe
[12/03/2008|13:34] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\AdobeUM
[08/03/2007|22:16] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\ArcSoft
[16/03/2007|19:21] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Canon
[04/03/2006|21:52] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\CyberLink
[04/06/2009|17:41] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Desperate Housewives
[19/01/2008|21:30] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\F-Secure
[07/03/2008|22:44] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Google
[13/03/2006|20:09] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Help
[24/02/2006|14:06] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Identities
[09/04/2008|17:46] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Jasc
[29/12/2006|14:42] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\La Bataille pour la Terre du Milieu
[12/06/2008|21:10] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Leadertech
[08/01/2009|17:16] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\LimeWire
[24/02/2006|14:39] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Macromedia
[31/01/2007|19:17] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Media Player Classic
[04/06/2009|18:49] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Microsoft
[21/07/2009|16:23] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Mozilla
[18/01/2008|18:34] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\MSNInstaller
[09/12/2008|18:27] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\My Stitch
[03/07/2009|19:48] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\OFFICE One v6
[01/03/2009|12:03] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\OpenOffice.org
[22/06/2009|19:47] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Opera
[06/03/2007|12:42] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\ScanSoft
[22/09/2008|17:06] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Sun
[08/03/2009|14:13] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Ulead Systems
[02/09/2009|19:03] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\uTorrent
[18/05/2009|09:29] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\vlc
[23/09/2008|18:07] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Way start fork
[05/08/2008|10:53] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Yahoo!

[24/02/2006|14:04] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[26/09/2008|16:59] C:\DOCUME~1\PAPAET~1\APPLIC~1\Adobe
[05/05/2008|18:30] C:\DOCUME~1\PAPAET~1\APPLIC~1\Google
[24/02/2006|20:23] C:\DOCUME~1\PAPAET~1\APPLIC~1\Identities
[11/06/2008|15:26] C:\DOCUME~1\PAPAET~1\APPLIC~1\InstallShield
[29/01/2008|19:55] C:\DOCUME~1\PAPAET~1\APPLIC~1\Macromedia
[28/05/2008|17:08] C:\DOCUME~1\PAPAET~1\APPLIC~1\Microsoft
[23/09/2008|18:34] C:\DOCUME~1\PAPAET~1\APPLIC~1\Way start fork

[24/11/2008|19:59] C:\DOCUME~1\Romain\APPLIC~1\Adobe
[06/08/2009|16:14] C:\DOCUME~1\Romain\APPLIC~1\Canon
[08/06/2008|16:18] C:\DOCUME~1\Romain\APPLIC~1\Google
[15/06/2006|17:16] C:\DOCUME~1\Romain\APPLIC~1\Identities
[03/02/2008|00:15] C:\DOCUME~1\Romain\APPLIC~1\Macromedia
[13/08/2009|11:45] C:\DOCUME~1\Romain\APPLIC~1\Microsoft
[10/08/2009|22:47] C:\DOCUME~1\Romain\APPLIC~1\Mozilla
[07/04/2009|15:12] C:\DOCUME~1\Romain\APPLIC~1\OpenOffice.org
[28/08/2008|14:06] C:\DOCUME~1\Romain\APPLIC~1\Yahoo!

[25/09/2008|23:57] C:\DOCUME~1\Rosy\APPLIC~1\Adobe
[15/03/2006|16:59] C:\DOCUME~1\Rosy\APPLIC~1\ArcSoft
[31/05/2006|21:04] C:\DOCUME~1\Rosy\APPLIC~1\CyberLink
[11/03/2008|23:11] C:\DOCUME~1\Rosy\APPLIC~1\Google
[27/02/2006|17:52] C:\DOCUME~1\Rosy\APPLIC~1\Identities
[01/05/2008|17:18] C:\DOCUME~1\Rosy\APPLIC~1\Macromedia
[26/07/2007|22:32] C:\DOCUME~1\Rosy\APPLIC~1\Media Player Classic
[01/05/2008|09:40] C:\DOCUME~1\Rosy\APPLIC~1\Microsoft
[06/03/2009|09:19] C:\DOCUME~1\Rosy\APPLIC~1\OpenOffice.org
[19/07/2009|09:14] C:\DOCUME~1\Rosy\APPLIC~1\Opera
[30/08/2009|06:42] C:\DOCUME~1\Rosy\APPLIC~1\Search Settings
[31/05/2009|18:30] C:\DOCUME~1\Rosy\APPLIC~1\vlc
[23/09/2008|18:36] C:\DOCUME~1\Rosy\APPLIC~1\Way start fork
[09/08/2008|07:23] C:\DOCUME~1\Rosy\APPLIC~1\Yahoo!

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[03/09/2009 10:41][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-117609710-1960408961-725345543-1008UA.job
[01/09/2009 13:41][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-117609710-1960408961-725345543-1008Core.job
[03/09/2009 10:30][--ah-----] C:\WINDOWS\tasks\User_Feed_Synchronization-{6200B771-E16A-4F11-A3EF-C5759A382D35}.job
[03/09/2009 10:26][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[03/05/2009|16:07] C:\Program Files\Adobe
[24/02/2006|14:23] C:\Program Files\Ahead
[19/08/2009|10:47] C:\Program Files\Alwil Software
[19/08/2009|10:45] C:\Program Files\AntivirusFirewall
[06/03/2007|12:41] C:\Program Files\ArcSoft
[19/08/2009|10:35] C:\Program Files\Avira
[24/02/2006|14:14] C:\Program Files\AvRack
[29/12/2006|14:55] C:\Program Files\Buena Vista Games
[06/03/2007|12:44] C:\Program Files\Canon
[06/03/2007|12:38] C:\Program Files\CanonBJ
[24/02/2006|14:32] C:\Program Files\Ciel
[25/12/2007|19:31] C:\Program Files\Common Files
[24/02/2006|13:59] C:\Program Files\ComPlus Applications
[24/02/2006|14:17] C:\Program Files\CyberLink
[08/08/2009|21:54] C:\Program Files\DivX
[28/01/2007|11:49] C:\Program Files\EA GAMES
[04/06/2009|18:49] C:\Program Files\Electronic Arts
[19/07/2009|21:30] C:\Program Files\Fichiers communs
[02/09/2009|19:09] C:\Program Files\Free Video Converter
[25/12/2008|18:10] C:\Program Files\Google
[08/03/2007|20:42] C:\Program Files\Imprimante
[04/06/2009|18:33] C:\Program Files\InstallShield Installation Information
[02/02/2007|18:54] C:\Program Files\Intel
[11/01/2008|18:52] C:\Program Files\InterActual
[23/08/2009|00:18] C:\Program Files\Internet Explorer
[24/02/2006|14:35] C:\Program Files\ISSENDIS
[24/09/2007|17:11] C:\Program Files\IVT Corporation
[09/04/2008|17:35] C:\Program Files\Jasc Software Inc
[03/05/2009|10:56] C:\Program Files\Java
[24/02/2006|14:35] C:\Program Files\Kaspersky Lab
[31/01/2007|19:16] C:\Program Files\K-Lite Codec Pack
[27/02/2007|21:14] C:\Program Files\Maxis
[20/11/2008|19:03] C:\Program Files\Messenger
[01/08/2009|20:51] C:\Program Files\Messenger Plus! Live
[24/03/2009|18:12] C:\Program Files\MessengerPlus! 3
[19/01/2008|11:23] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[24/02/2006|14:02] C:\Program Files\microsoft frontpage
[22/12/2006|21:14] C:\Program Files\Microsoft Office
[14/03/2007|19:55] C:\Program Files\Microsoft R‚f‚rence
[01/08/2009|11:21] C:\Program Files\Microsoft Silverlight
[01/08/2009|20:34] C:\Program Files\Microsoft SQL Server Compact Edition
[04/06/2009|18:49] C:\Program Files\Microsoft WSE
[22/12/2006|21:16] C:\Program Files\Microsoft.NET
[02/02/2009|11:25] C:\Program Files\Movie Maker
[01/09/2009|19:04] C:\Program Files\Mozilla Firefox
[23/08/2009|00:21] C:\Program Files\MSBuild
[02/03/2006|14:11] C:\Program Files\MSN
[24/02/2006|13:58] C:\Program Files\MSN Gaming Zone
[19/01/2008|00:27] C:\Program Files\MSXML 4.0
[07/10/2008|15:18] C:\Program Files\NetMeeting
[04/07/2009|14:20] C:\Program Files\OFFICE One6.5
[24/02/2006|13:58] C:\Program Files\Online Services
[01/03/2009|12:00] C:\Program Files\OpenOffice.org 3
[01/03/2009|11:58] C:\Program Files\OpenOffice.org 3.0 (fr) Installation Files
[18/07/2009|20:34] C:\Program Files\Orange HSS
[13/08/2009|13:46] C:\Program Files\Outlook Express
[18/06/2008|18:00] C:\Program Files\PhotoFiltre Studio
[04/04/2009|13:52] C:\Program Files\PhotoScape
[17/10/2007|13:14] C:\Program Files\Picasa2
[14/03/2007|20:05] C:\Program Files\QuickTime
[27/11/2006|18:34] C:\Program Files\Real
[08/02/2007|20:03] C:\Program Files\Realtek Sound Manager
[23/08/2009|00:21] C:\Program Files\Reference Assemblies
[18/01/2008|18:20] C:\Program Files\SAGEM
[06/03/2007|12:42] C:\Program Files\ScanSoft
[04/09/2008|18:17] C:\Program Files\Seagrand
[18/07/2009|20:32] C:\Program Files\Securitoo
[24/02/2006|14:00] C:\Program Files\Services en ligne
[02/07/2006|18:05] C:\Program Files\SigmaTel
[25/12/2007|21:55] C:\Program Files\Sony
[18/08/2009|18:58] C:\Program Files\trend micro
[24/02/2006|19:26] C:\Program Files\Trust
[29/07/2009|23:02] C:\Program Files\Ulead Systems
[13/06/2008|22:40] C:\Program Files\UnFREEz
[24/02/2006|14:06] C:\Program Files\Uninstall Information
[02/02/2009|10:35] C:\Program Files\uTorrent
[05/12/2008|14:51] C:\Program Files\Veoh Networks
[18/05/2009|09:28] C:\Program Files\VideoLAN
[17/07/2008|17:33] C:\Program Files\Way start fork
[02/08/2009|22:52] C:\Program Files\Windows Live
[24/03/2009|17:46] C:\Program Files\Windows Live SkyDrive
[20/11/2008|19:03] C:\Program Files\Windows Media Connect 2
[07/10/2008|15:18] C:\Program Files\Windows Media Player
[07/10/2008|15:18] C:\Program Files\Windows NT
[24/02/2006|14:00] C:\Program Files\WindowsUpdate
[24/02/2006|14:02] C:\Program Files\xerox
[02/02/2007|18:52] C:\Program Files\XviD
[04/06/2009|17:44] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[16/03/2008|16:14] C:\Program Files\Fichiers communs\Adobe
[24/02/2006|14:22] C:\Program Files\Fichiers communs\Ahead
[24/02/2006|19:19] C:\Program Files\Fichiers communs\ArcSoft
[24/02/2006|14:33] C:\Program Files\Fichiers communs\Borland Shared
[24/02/2006|14:32] C:\Program Files\Fichiers communs\Ciel
[22/12/2006|21:16] C:\Program Files\Fichiers communs\DESIGNER
[19/07/2009|21:30] C:\Program Files\Fichiers communs\DivX Shared
[18/01/2008|18:24] C:\Program Files\Fichiers communs\France Telecom
[02/02/2007|18:48] C:\Program Files\Fichiers communs\InstallShield
[22/09/2008|17:04] C:\Program Files\Fichiers communs\Java
[04/06/2009|18:49] C:\Program Files\Fichiers communs\Microsoft Shared
[24/02/2006|14:00] C:\Program Files\Fichiers communs\MSSoap
[24/02/2006|14:24] C:\Program Files\Fichiers communs\Nero
[24/02/2006|21:09] C:\Program Files\Fichiers communs\ODBC
[24/02/2006|19:26] C:\Program Files\Fichiers communs\PCCamera
[27/11/2006|18:34] C:\Program Files\Fichiers communs\Real
[06/03/2007|12:42] C:\Program Files\Fichiers communs\ScanSoft Shared
[24/02/2006|14:00] C:\Program Files\Fichiers communs\Services
[15/04/2007|13:26] C:\Program Files\Fichiers communs\Sony Shared
[24/02/2006|21:09] C:\Program Files\Fichiers communs\SpeechEngines
[07/10/2008|15:18] C:\Program Files\Fichiers communs\System
[29/07/2007|13:53] C:\Program Files\Fichiers communs\Ulead Systems
[24/03/2009|17:40] C:\Program Files\Fichiers communs\Windows Live
[18/01/2008|19:01] C:\Program Files\Fichiers communs\WindowsLiveInstaller

--------------------\\ Process

( 60 Processes )

IEXPLORE.EXE ~ [PID:1216]
IEXPLORE.EXE ~ [PID:1584]

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grid Blue Memo Site
C:\DOCUME~1\M1374~1.MOL\LOCALS~1\Temp\msgpl_155c.exe
C:\DOCUME~1\M1374~1.MOL\LOCALS~1\Temp\nshF.tmp
C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@advertstream[1].txt
C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@imagevenue.advertserve[2].txt
C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@www.adserver5[1].txt
C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@adultfriendfinder[2].txt
C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@advertising[2].txt
C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@advertising[3].txt
C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@adin.bigpoint[2].txt
C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@bigpoint[2].txt
C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@fr1.darkorbit.bigpoint[2].txt
C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@fr1.seafight.bigpoint[1].txt
C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@banner.casinoking[2].txt
C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@casinoking[1].txt
C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@cotedazurpalace[2].txt
C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@adopt.euroclick[2].txt
C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@euroclick[2].txt
C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@pacificpoker[2].txt
C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@partygaming.122.2o7[1].txt
C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@partypoker[2].txt
C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@fr1.seafight.bigpoint[1].txt
C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@32vegas[2].txt
C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@banner.32vegas[2].txt
C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@cachewww.32vegas[2].txt
C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@vegasred[2].txt
C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@www.vegasred[2].txt
C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@www.lop[1].txt
C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@2xmoinscher[1].txt
C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@cc.2xmoinscher[2].txt
C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@www.2xmoinscher[1].txt
C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@888[1].txt
C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@888[2].txt

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts MODIFIE

127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1 [i]ww/iw.drivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.errorprotector.com ## added by CiD
127.0.0.1 [i]ww/iw.errorsafe.com ## added by CiD
127.0.0.1 [i]ww/iw.systemdoctor.com ## added by CiD
127.0.0.1 [i]ww/iw.utils.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.win-anti-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.win-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispam.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispy.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispyware.com ## added by CiD
127.0.0.1 [i]ww/iw.winantivirus.com ## added by CiD
127.0.0.1 [i]ww/iw.winantiviruspro.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivesafe.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer2006.com ## added by CiD
127.0.0.1 [i]ww/iw.winsoftware.com ## added by CiD

-> 72 [ 70 ## added by CiD ]

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-03 10:43:26
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 694

--------------------\\ Recherche d'autres infections

Aucune autre infection trouvée !

[F:3442][D:137]-> C:\DOCUME~1\M1374~1.MOL\LOCALS~1\Temp
[F:5248][D:0]-> C:\DOCUME~1\M1374~1.MOL\Cookies
[F:14780][D:113]-> C:\DOCUME~1\M1374~1.MOL\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 03/09/2009|10:46 - Option : [1]

--------------------\\ Fin du rapport a 10:46:51

Réponse 18 / 26

pimprenelle27 Messages postés 20857 Date d'inscription Statut Contributeur sécurité Dernière intervention 2 502

bonjour,

alors dans l'ordre :

en 1er :

Télécharge HostsXpert sur ton Bureau :

---> Décompresse-le (Clic droit >> Extraire ici)

---> Double-clique sur HostsXpert pour le lancer

---> clique sur le bouton "Restore MS Hosts File" puis ferme le programme

PS : Avant de cliquer sur le bouton "Restore MS Hosts File", vérifie que le cadenas en haut à gauche est ouvert sinon tu vas avoir un message d'erreur.

Pour ceux qui ont vista, ne pas oublier de désactiver Le contrôle des comptes utilisateurs

En 2ème :

▶ Relance Lop S&D

▶ Choisis cette fois-ci l'option 2 (Suppression)

▶ Ne ferme pas la fenêtre lors de la suppression !

▶ Poste le rapport généré (C:\lopR.txt)

* (Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)

Réponse 19 / 26

Lenalee

Suppression faite ! Je poste le rapport :

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 05/09/2009|14:27 )

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\DOCUME~1\M1374~1.MOL\LOCALS~1\Temp\msgpl_155c.exe
Supprime! - C:\DOCUME~1\M1374~1.MOL\LOCALS~1\Temp\nshF.tmp
Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@advertstream[1].txt
Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@imagevenue.advertserve[2].txt
Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@www.adserver5[1].txt
Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@adultfriendfinder[2].txt
Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@advertising[2].txt
Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@advertising[3].txt
Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@adin.bigpoint[2].txt
Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@bigpoint[2].txt
Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@fr1.darkorbit.bigpoint[2].txt
Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@fr1.seafight.bigpoint[1].txt
Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@banner.casinoking[2].txt
Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@casinoking[1].txt
Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@cotedazurpalace[2].txt
Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@adopt.euroclick[2].txt
Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@euroclick[2].txt
Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@pacificpoker[2].txt
Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@partygaming.122.2o7[1].txt
Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@partypoker[2].txt
Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@32vegas[2].txt
Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@banner.32vegas[2].txt
Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@cachewww.32vegas[2].txt
Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@vegasred[2].txt
Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@www.vegasred[2].txt
Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@www.lop[1].txt
Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@2xmoinscher[1].txt
Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@cc.2xmoinscher[2].txt
Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@www.2xmoinscher[1].txt
Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@888[1].txt
Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@888[2].txt
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grid Blue Memo Site
-
[ Fichier Hosts ] .. Restaure!

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

--------------------\\ Listing des dossiers dans APPLIC~1

[16/03/2008|16:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[27/11/2006|18:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\America Online
[19/08/2009|10:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[24/09/2007|17:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Bluetooth
[06/03/2007|12:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CanonBJ
[24/02/2006|14:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ciel
[24/02/2006|14:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[04/06/2009|18:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Electronic Arts
[18/04/2008|13:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\F-Secure
[11/02/2008|12:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\fssg
[25/12/2008|11:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[06/03/2007|12:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[18/01/2008|23:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
[04/06/2009|18:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[06/11/2006|19:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[06/03/2007|12:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
[15/04/2007|13:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Corporation
[08/03/2009|14:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
[25/12/2007|19:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[01/08/2009|20:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[24/02/2006|14:02] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[26/02/2006|12:08] C:\DOCUME~1\INVIT~1\APPLIC~1\Identities
[26/02/2006|12:08] C:\DOCUME~1\INVIT~1\APPLIC~1\Microsoft

[25/12/2007|19:39] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[25/09/2008|18:42] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Adobe
[12/03/2008|13:34] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\AdobeUM
[08/03/2007|22:16] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\ArcSoft
[16/03/2007|19:21] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Canon
[04/03/2006|21:52] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\CyberLink
[04/06/2009|17:41] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Desperate Housewives
[19/01/2008|21:30] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\F-Secure
[07/03/2008|22:44] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Google
[13/03/2006|20:09] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Help
[24/02/2006|14:06] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Identities
[09/04/2008|17:46] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Jasc
[29/12/2006|14:42] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\La Bataille pour la Terre du Milieu
[12/06/2008|21:10] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Leadertech
[08/01/2009|17:16] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\LimeWire
[24/02/2006|14:39] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Macromedia
[31/01/2007|19:17] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Media Player Classic
[04/06/2009|18:49] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Microsoft
[21/07/2009|16:23] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Mozilla
[18/01/2008|18:34] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\MSNInstaller
[09/12/2008|18:27] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\My Stitch
[03/07/2009|19:48] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\OFFICE One v6
[01/03/2009|12:03] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\OpenOffice.org
[22/06/2009|19:47] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Opera
[06/03/2007|12:42] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\ScanSoft
[22/09/2008|17:06] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Sun
[08/03/2009|14:13] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Ulead Systems
[03/09/2009|20:32] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\uTorrent
[18/05/2009|09:29] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\vlc
[23/09/2008|18:07] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Way start fork
[05/08/2008|10:53] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Yahoo!

[24/02/2006|14:04] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[26/09/2008|16:59] C:\DOCUME~1\PAPAET~1\APPLIC~1\Adobe
[05/05/2008|18:30] C:\DOCUME~1\PAPAET~1\APPLIC~1\Google
[24/02/2006|20:23] C:\DOCUME~1\PAPAET~1\APPLIC~1\Identities
[11/06/2008|15:26] C:\DOCUME~1\PAPAET~1\APPLIC~1\InstallShield
[29/01/2008|19:55] C:\DOCUME~1\PAPAET~1\APPLIC~1\Macromedia
[28/05/2008|17:08] C:\DOCUME~1\PAPAET~1\APPLIC~1\Microsoft
[23/09/2008|18:34] C:\DOCUME~1\PAPAET~1\APPLIC~1\Way start fork

[24/11/2008|19:59] C:\DOCUME~1\Romain\APPLIC~1\Adobe
[06/08/2009|16:14] C:\DOCUME~1\Romain\APPLIC~1\Canon
[08/06/2008|16:18] C:\DOCUME~1\Romain\APPLIC~1\Google
[15/06/2006|17:16] C:\DOCUME~1\Romain\APPLIC~1\Identities
[03/02/2008|00:15] C:\DOCUME~1\Romain\APPLIC~1\Macromedia
[13/08/2009|11:45] C:\DOCUME~1\Romain\APPLIC~1\Microsoft
[10/08/2009|22:47] C:\DOCUME~1\Romain\APPLIC~1\Mozilla
[07/04/2009|15:12] C:\DOCUME~1\Romain\APPLIC~1\OpenOffice.org
[28/08/2008|14:06] C:\DOCUME~1\Romain\APPLIC~1\Yahoo!

[25/09/2008|23:57] C:\DOCUME~1\Rosy\APPLIC~1\Adobe
[15/03/2006|16:59] C:\DOCUME~1\Rosy\APPLIC~1\ArcSoft
[31/05/2006|21:04] C:\DOCUME~1\Rosy\APPLIC~1\CyberLink
[11/03/2008|23:11] C:\DOCUME~1\Rosy\APPLIC~1\Google
[27/02/2006|17:52] C:\DOCUME~1\Rosy\APPLIC~1\Identities
[01/05/2008|17:18] C:\DOCUME~1\Rosy\APPLIC~1\Macromedia
[26/07/2007|22:32] C:\DOCUME~1\Rosy\APPLIC~1\Media Player Classic
[01/05/2008|09:40] C:\DOCUME~1\Rosy\APPLIC~1\Microsoft
[06/03/2009|09:19] C:\DOCUME~1\Rosy\APPLIC~1\OpenOffice.org
[19/07/2009|09:14] C:\DOCUME~1\Rosy\APPLIC~1\Opera
[30/08/2009|06:42] C:\DOCUME~1\Rosy\APPLIC~1\Search Settings
[31/05/2009|18:30] C:\DOCUME~1\Rosy\APPLIC~1\vlc
[23/09/2008|18:36] C:\DOCUME~1\Rosy\APPLIC~1\Way start fork
[09/08/2008|07:23] C:\DOCUME~1\Rosy\APPLIC~1\Yahoo!

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[05/09/2009 13:41][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-117609710-1960408961-725345543-1008UA.job
[05/09/2009 13:41][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-117609710-1960408961-725345543-1008Core.job
[05/09/2009 11:42][--ah-----] C:\WINDOWS\tasks\User_Feed_Synchronization-{6200B771-E16A-4F11-A3EF-C5759A382D35}.job
[05/09/2009 11:39][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[03/05/2009|16:07] C:\Program Files\Adobe
[24/02/2006|14:23] C:\Program Files\Ahead
[19/08/2009|10:47] C:\Program Files\Alwil Software
[19/08/2009|10:45] C:\Program Files\AntivirusFirewall
[06/03/2007|12:41] C:\Program Files\ArcSoft
[19/08/2009|10:35] C:\Program Files\Avira
[24/02/2006|14:14] C:\Program Files\AvRack
[29/12/2006|14:55] C:\Program Files\Buena Vista Games
[06/03/2007|12:44] C:\Program Files\Canon
[06/03/2007|12:38] C:\Program Files\CanonBJ
[24/02/2006|14:32] C:\Program Files\Ciel
[25/12/2007|19:31] C:\Program Files\Common Files
[24/02/2006|13:59] C:\Program Files\ComPlus Applications
[24/02/2006|14:17] C:\Program Files\CyberLink
[08/08/2009|21:54] C:\Program Files\DivX
[28/01/2007|11:49] C:\Program Files\EA GAMES
[04/06/2009|18:49] C:\Program Files\Electronic Arts
[19/07/2009|21:30] C:\Program Files\Fichiers communs
[02/09/2009|19:09] C:\Program Files\Free Video Converter
[25/12/2008|18:10] C:\Program Files\Google
[08/03/2007|20:42] C:\Program Files\Imprimante
[04/06/2009|18:33] C:\Program Files\InstallShield Installation Information
[02/02/2007|18:54] C:\Program Files\Intel
[11/01/2008|18:52] C:\Program Files\InterActual
[23/08/2009|00:18] C:\Program Files\Internet Explorer
[24/02/2006|14:35] C:\Program Files\ISSENDIS
[24/09/2007|17:11] C:\Program Files\IVT Corporation
[09/04/2008|17:35] C:\Program Files\Jasc Software Inc
[03/05/2009|10:56] C:\Program Files\Java
[24/02/2006|14:35] C:\Program Files\Kaspersky Lab
[31/01/2007|19:16] C:\Program Files\K-Lite Codec Pack
[27/02/2007|21:14] C:\Program Files\Maxis
[20/11/2008|19:03] C:\Program Files\Messenger
[01/08/2009|20:51] C:\Program Files\Messenger Plus! Live
[24/03/2009|18:12] C:\Program Files\MessengerPlus! 3
[19/01/2008|11:23] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[24/02/2006|14:02] C:\Program Files\microsoft frontpage
[22/12/2006|21:14] C:\Program Files\Microsoft Office
[14/03/2007|19:55] C:\Program Files\Microsoft R‚f‚rence
[01/08/2009|11:21] C:\Program Files\Microsoft Silverlight
[01/08/2009|20:34] C:\Program Files\Microsoft SQL Server Compact Edition
[04/06/2009|18:49] C:\Program Files\Microsoft WSE
[22/12/2006|21:16] C:\Program Files\Microsoft.NET
[02/02/2009|11:25] C:\Program Files\Movie Maker
[03/09/2009|11:10] C:\Program Files\Mozilla Firefox
[23/08/2009|00:21] C:\Program Files\MSBuild
[02/03/2006|14:11] C:\Program Files\MSN
[24/02/2006|13:58] C:\Program Files\MSN Gaming Zone
[19/01/2008|00:27] C:\Program Files\MSXML 4.0
[07/10/2008|15:18] C:\Program Files\NetMeeting
[04/07/2009|14:20] C:\Program Files\OFFICE One6.5
[24/02/2006|13:58] C:\Program Files\Online Services
[01/03/2009|12:00] C:\Program Files\OpenOffice.org 3
[01/03/2009|11:58] C:\Program Files\OpenOffice.org 3.0 (fr) Installation Files
[18/07/2009|20:34] C:\Program Files\Orange HSS
[13/08/2009|13:46] C:\Program Files\Outlook Express
[18/06/2008|18:00] C:\Program Files\PhotoFiltre Studio
[04/04/2009|13:52] C:\Program Files\PhotoScape
[17/10/2007|13:14] C:\Program Files\Picasa2
[14/03/2007|20:05] C:\Program Files\QuickTime
[27/11/2006|18:34] C:\Program Files\Real
[08/02/2007|20:03] C:\Program Files\Realtek Sound Manager
[23/08/2009|00:21] C:\Program Files\Reference Assemblies
[18/01/2008|18:20] C:\Program Files\SAGEM
[06/03/2007|12:42] C:\Program Files\ScanSoft
[04/09/2008|18:17] C:\Program Files\Seagrand
[18/07/2009|20:32] C:\Program Files\Securitoo
[24/02/2006|14:00] C:\Program Files\Services en ligne
[02/07/2006|18:05] C:\Program Files\SigmaTel
[25/12/2007|21:55] C:\Program Files\Sony
[18/08/2009|18:58] C:\Program Files\trend micro
[24/02/2006|19:26] C:\Program Files\Trust
[29/07/2009|23:02] C:\Program Files\Ulead Systems
[13/06/2008|22:40] C:\Program Files\UnFREEz
[24/02/2006|14:06] C:\Program Files\Uninstall Information
[02/02/2009|10:35] C:\Program Files\uTorrent
[05/12/2008|14:51] C:\Program Files\Veoh Networks
[18/05/2009|09:28] C:\Program Files\VideoLAN
[17/07/2008|17:33] C:\Program Files\Way start fork
[02/08/2009|22:52] C:\Program Files\Windows Live
[24/03/2009|17:46] C:\Program Files\Windows Live SkyDrive
[20/11/2008|19:03] C:\Program Files\Windows Media Connect 2
[07/10/2008|15:18] C:\Program Files\Windows Media Player
[07/10/2008|15:18] C:\Program Files\Windows NT
[24/02/2006|14:00] C:\Program Files\WindowsUpdate
[24/02/2006|14:02] C:\Program Files\xerox
[02/02/2007|18:52] C:\Program Files\XviD
[04/06/2009|17:44] C:\Program Files\Yahoo!

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[16/03/2008|16:14] C:\Program Files\Fichiers communs\Adobe
[24/02/2006|14:22] C:\Program Files\Fichiers communs\Ahead
[24/02/2006|19:19] C:\Program Files\Fichiers communs\ArcSoft
[24/02/2006|14:33] C:\Program Files\Fichiers communs\Borland Shared
[24/02/2006|14:32] C:\Program Files\Fichiers communs\Ciel
[22/12/2006|21:16] C:\Program Files\Fichiers communs\DESIGNER
[19/07/2009|21:30] C:\Program Files\Fichiers communs\DivX Shared
[18/01/2008|18:24] C:\Program Files\Fichiers communs\France Telecom
[02/02/2007|18:48] C:\Program Files\Fichiers communs\InstallShield
[22/09/2008|17:04] C:\Program Files\Fichiers communs\Java
[04/06/2009|18:49] C:\Program Files\Fichiers communs\Microsoft Shared
[24/02/2006|14:00] C:\Program Files\Fichiers communs\MSSoap
[24/02/2006|14:24] C:\Program Files\Fichiers communs\Nero
[24/02/2006|21:09] C:\Program Files\Fichiers communs\ODBC
[24/02/2006|19:26] C:\Program Files\Fichiers communs\PCCamera
[27/11/2006|18:34] C:\Program Files\Fichiers communs\Real
[06/03/2007|12:42] C:\Program Files\Fichiers communs\ScanSoft Shared
[24/02/2006|14:00] C:\Program Files\Fichiers communs\Services
[15/04/2007|13:26] C:\Program Files\Fichiers communs\Sony Shared
[24/02/2006|21:09] C:\Program Files\Fichiers communs\SpeechEngines
[07/10/2008|15:18] C:\Program Files\Fichiers communs\System
[29/07/2007|13:53] C:\Program Files\Fichiers communs\Ulead Systems
[24/03/2009|17:40] C:\Program Files\Fichiers communs\Windows Live
[18/01/2008|19:01] C:\Program Files\Fichiers communs\WindowsLiveInstaller

--------------------\\ Process

( 55 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@d2.advertserve[1].txt

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-05 14:29:56
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 694

--------------------\\ Recherche d'autres infections

Aucune autre infection trouvée !

[F:3198][D:137]-> C:\DOCUME~1\M1374~1.MOL\LOCALS~1\Temp
[F:5246][D:0]-> C:\DOCUME~1\M1374~1.MOL\Cookies
[F:15236][D:113]-> C:\DOCUME~1\M1374~1.MOL\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 03/09/2009|10:46 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 05/09/2009|14:32 - Option : [2]

--------------------\\ Fin du rapport a 14:32:12

Réponse 20 / 26

pimprenelle27 Messages postés 20857 Date d'inscription Statut Contributeur sécurité Dernière intervention 2 502

Bonjour,

tu peux me refais un rapport RSIT à jour hiastoire d'y voir plus clair dans les infections qui resteraient.

Petit problème à grandes conséquences !

26 réponses

Votre réponse

Discussions similaires