gros pb de virus sur Windows Résolu

Question

Bonjour,

j'ai un virus sur Windows, il est présent dès le démarrage de windows
que faire svp pour l'enlever?
merci pour votre retour
Cédric

Sloubi76 · Answer

Cédric,

Télécharge HijackThis ici :

-> http://www.trendsecure.com/portal/en-US/_download/HiJackThis.exe

Démo : (Merci a Balltrap34 pour cette réalisation)
http://www.tutoriaux-excalibur.com/hijackthis.htm
https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html

Renomer Hijackthis, pour contrer une éventuelle infection de Vundo.

ex:Renomme le fichier HijackThis.exe en CCM.exe pour cela, fais un clic droit sur le fichier HijackThis.exe et choisis renommer dans la liste

Ensuite avec Explorer créer un dossier c:\hijackthis
Décompresser Hijackthis dans ce dossier.
C'est important pour les sauvegardes.
 
Lance Hitjack this
Do a system scan and save a log file

Post le rapport généré ici stp...

cedricpenard · Answer

Sloubi as tu eu mon message? peux tu m'aider?

cedricpenard · Answer

super, merci !

cedricpenard · Answer

Voici le rapport généré : 


   -----------\  ToolBar S&D 1.2.6   XP/Vista

   Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 1
   X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP )
   BIOS : Version 1.00
   USER : coco ( Administrator )
   BOOT : Normal boot
   Antivirus : avast! antivirus 4.8.1296 [VPS 081204-0] 4.8.1296 (Activated)
   Firewall  : Sygate Personal Firewall 4.6 (Activated)
   A:\ (USB)
   C:\ (Local Disk) - NTFS - Total:49 Go (Free:34 Go)
   D:\ (Local Disk) - NTFS - Total:19 Go (Free:19 Go)
   E:\ (Local Disk) - NTFS - Total:62 Go (Free:30 Go)
   F:\ (Local Disk) - NTFS - Total:18 Go (Free:0 Go)
   G:\ (CD or DVD)
   H:\ (CD or DVD)
   I:\ (Local Disk) - FAT32 - Total:149 Go (Free:30 Go)

   "C:\ToolBar SD" ( MAJ : 04-12-2008|20:40 )
   Option : [1] ( 06/12/2008|16:16 )

   -----------\  Recherche de Fichiers / Dossiers ...

   C:\DOCUME~1\coco\APPLIC~1\Dealio
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127es
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ules
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127	emp
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127es\alerts.gif
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127es\alerts_over.gif
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127es\alerts_rec.gif
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127es\alerts_rec_over.gif
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127es\chevron-small.gif
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127es\DealioSearch.html
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127es\deals-leftcap.gif
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127es\deal_report.jpg
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127es\ebay_login.jpg
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127es\err_mainwindow.html
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127es\err_toolbar.html
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127es\global_scripts.js
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127es\headerbgthin.jpg
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127es\highlight-bg.png
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127es\logo.gif
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127es\logo_over.gif
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127es\man_toolbar.css
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127es\man_toolbar.html
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127es\man_toolbar.js
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127es\man_toolbarl.js
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127es\post-this-deal.gif
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127es\post-this-deal_over.gif
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127es\scripts.js
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127es\scroller.js
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127es\search-chevron.gif
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127es\search-chevron_over.gif
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127es\search_bg_blink.gif
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127es\separator.gif
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127es\settings.gif
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127es\settings_over.gif
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127es\yahoo-search.png
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ules\index.76.35
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.10.76
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.109.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.110.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.12.52
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.13.58
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.130.58
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.135.50
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.153.44
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.155.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.156.49
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.16.60
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.161.52
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.178.66
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.184.55
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.188.52
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.189.45
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.196.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.198.56
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.199.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.200.53
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.201.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.202.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.203.71
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.205.62
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.213.71
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.214.49
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.215.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.216.67
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.217.67
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.218.52
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.219.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.220.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.221.57
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.222.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.223.68
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.226.68
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.227.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.228.62
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.229.76
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.23.63
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.239.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.24.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.240.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.241.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.242.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.243.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.244.63
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.245.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.247.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.248.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.249.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.250.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.251.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.252.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.253.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.254.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.255.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.256.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.257.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.279.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.28.58
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.282.75
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.283.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.284.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.289.67
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.290.62
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.291.61
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.296.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.297.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.304.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.307.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.308.75
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.31.47
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.310.46
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.311.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.315.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.316.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.317.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.318.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.319.49
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.32.48
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.334.44
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.335.60
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.336.44
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.337.44
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.338.75
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.339.47
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.34.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.340.47
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.341.47
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.349.50
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.35.48
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.350.50
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.351.51
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.352.54
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.353.51
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.354.51
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.357.62
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.358.52
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.359.52
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.360.53
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.361.54
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.362.68
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.363.58
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.364.54
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.365.53
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.367.56
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.368.58
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.369.55
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.370.56
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.371.56
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.372.57
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.373.55
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.375.56
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.376.57
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.377.55
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.378.65
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.384.58
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.386.71
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.387.59
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.388.59
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.389.59
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.390.60
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.391.60
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.392.60
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.393.60
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.394.60
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.396.61
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.397.61
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.398.60
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.399.60
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.403.61
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.404.63
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.405.61
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.406.61
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.407.76
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.408.63
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.409.61
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.412.62
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.413.62
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.414.62
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.415.62
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.416.62
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.417.62
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.418.62
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.419.62
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.420.62
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.421.62
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.423.63
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.424.63
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.425.63
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.426.63
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.427.63
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.428.65
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.429.63
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.430.63
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.432.65
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.433.64
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.434.65
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.435.64
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.436.76
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.437.64
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.438.71
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.439.71
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.440.75
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.442.73
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.443.73
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.444.73
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.445.68
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.446.69
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.450.67
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.451.67
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.452.68
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.453.68
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.454.69
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.456.69
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.457.75
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.458.70
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.459.70
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.460.69
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.462.74
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.463.69
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.464.70
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.465.68
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.468.70
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.469.70
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.470.70
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.471.73
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.472.70
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.478.74
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.479.73
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.480.68
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.481.71
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.482.74
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.49.67
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.50.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.500.71
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.501.74
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.502.71
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.51.69
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.52.72
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.520.76
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.521.76
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.522.76
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.53.51
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.531.76
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.532.75
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.534.75
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.54.47
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.55.45
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.56.69
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.57.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.58.47
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.593.76
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.595.76
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.63.57
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.66.47
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.70.75
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127ulesules.1.71.43
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127	emp\dealio-14219.log
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127	emp\dod_cache.xml
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127	emp\_toolbar_tmp_1008_3400_1.html
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127	emp\_toolbar_tmp_1008_3400_2.html
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127	emp\_toolbar_tmp_2216_804_3.html
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127	emp\_toolbar_tmp_2456_3096_3.html
   C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127	emp\_toolbar_tmp_3772_2920_3.html
   C:\Program Files\Dealio
   C:\Program Files\Dealio\DealioAU.exe
   C:\Program Files\Dealio\kb127
   C:\Program Files\Dealio\SearchSettingsKit.exe
   C:\Program Files\Dealio\kb127\Dealio Deskbar.exe
   C:\Program Files\Dealio\kb127\Dealio.dll
   C:\Program Files\Dealio\kb127\DealioRes409.dll
   C:\Program Files\Dealio\kb127es
   C:\Program Files\Dealio\kb127esDN
   C:\Program Files\Dealio\kb127ules
   C:\Program Files\Dealio\kb127	emp
   C:\Program Files\Dealio\kb127es\alerts.gif
   C:\Program Files\Dealio\kb127es\alerts_over.gif
   C:\Program Files\Dealio\kb127es\alerts_rec.gif
   C:\Program Files\Dealio\kb127es\alerts_rec_over.gif
   C:\Program Files\Dealio\kb127es\chevron-small.gif
   C:\Program Files\Dealio\kb127es\DealioSearch.html
   C:\Program Files\Dealio\kb127es\deals-leftcap.gif
   C:\Program Files\Dealio\kb127es\deal_report.jpg
   C:\Program Files\Dealio\kb127es\ebay_login.jpg
   C:\Program Files\Dealio\kb127es\err_mainwindow.html
   C:\Program Files\Dealio\kb127es\err_toolbar.html
   C:\Program Files\Dealio\kb127es\global_scripts.js
   C:\Program Files\Dealio\kb127es\headerbgthin.jpg
   C:\Program Files\Dealio\kb127es\highlight-bg.png
   C:\Program Files\Dealio\kb127es\logo.gif
   C:\Program Files\Dealio\kb127es\logo_over.gif
   C:\Program Files\Dealio\kb127es\man_toolbar.css
   C:\Program Files\Dealio\kb127es\man_toolbar.html
   C:\Program Files\Dealio\kb127es\man_toolbar.js
   C:\Program Files\Dealio\kb127es\man_toolbarl.js
   C:\Program Files\Dealio\kb127es\post-this-deal.gif
   C:\Program Files\Dealio\kb127es\post-this-deal_over.gif
   C:\Program Files\Dealio\kb127es\scripts.js
   C:\Program Files\Dealio\kb127es\scroller.js
   C:\Program Files\Dealio\kb127es\search-chevron.gif
   C:\Program Files\Dealio\kb127es\search-chevron_over.gif
   C:\Program Files\Dealio\kb127es\search_bg_blink.gif
   C:\Program Files\Dealio\kb127es\separator.gif
   C:\Program Files\Dealio\kb127es\settings.gif
   C:\Program Files\Dealio\kb127es\settings_over.gif
   C:\Program Files\Dealio\kb127es\yahoo-search.png
   C:\Program Files\Dealio\kb127esDN\bottom.gif
   C:\Program Files\Dealio\kb127esDN\chevron_down.gif
   C:\Program Files\Dealio\kb127esDN\chevron_up.gif
   C:\Program Files\Dealio\kb127esDN\close.gif
   C:\Program Files\Dealio\kb127esDN\deskbar.css
   C:\Program Files\Dealio\kb127esDN\deskbar.js
   C:\Program Files\Dealio\kb127esDN\dispatch_helper.js
   C:\Program Files\Dealio\kb127esDN\ebay_compatible.jpg
   C:\Program Files\Dealio\kb127esDN\logo.gif
   C:\Program Files\Dealio\kb127esDN\logo_chevron_bkg.gif
   C:\Program Files\Dealio\kb127esDN\losing.gif
   C:\Program Files\Dealio\kb127esDN\lost.gif
   C:\Program Files\Dealio\kb127esDN\man_deskbar.html
   C:\Program Files\Dealio\kb127esDN\menu_arrow.gif
   C:\Program Files\Dealio\kb127esDN\menu_check.gif
   C:\Program Files\Dealio\kb127esDN
o_image.gif
   C:\Program Files\Dealio\kb127esDN\prod_img.gif
   C:\Program Files\Dealio\kb127esDN\search_chevron.gif
   C:\Program Files\Dealio\kb127esDN\spacer.gif
   C:\Program Files\Dealio\kb127esDN	extfield_bkg.gif
   C:\Program Files\Dealio\kb127esDN	op.gif
   C:\Program Files\Dealio\kb127esDN\unknown.gif
   C:\Program Files\Dealio\kb127esDN\winning.gif
   C:\Program Files\Dealio\kb127esDN\won.gif
   C:\Program Files\Dealio\kb127ules\index.76.35
   C:\Program Files\Dealio\kb127ulesules.1.10.76
   C:\Program Files\Dealio\kb127ulesules.1.109.43
   C:\Program Files\Dealio\kb127ulesules.1.110.43
   C:\Program Files\Dealio\kb127ulesules.1.12.52
   C:\Program Files\Dealio\kb127ulesules.1.13.58
   C:\Program Files\Dealio\kb127ulesules.1.130.58
   C:\Program Files\Dealio\kb127ulesules.1.135.50
   C:\Program Files\Dealio\kb127ulesules.1.153.44
   C:\Program Files\Dealio\kb127ulesules.1.155.43
   C:\Program Files\Dealio\kb127ulesules.1.156.49
   C:\Program Files\Dealio\kb127ulesules.1.16.60
   C:\Program Files\Dealio\kb127ulesules.1.161.52
   C:\Program Files\Dealio\kb127ulesules.1.178.66
   C:\Program Files\Dealio\kb127ulesules.1.184.55
   C:\Program Files\Dealio\kb127ulesules.1.188.52
   C:\Program Files\Dealio\kb127ulesules.1.189.45
   C:\Program Files\Dealio\kb127ulesules.1.196.43
   C:\Program Files\Dealio\kb127ulesules.1.198.56
   C:\Program Files\Dealio\kb127ulesules.1.199.43
   C:\Program Files\Dealio\kb127ulesules.1.200.53
   C:\Program Files\Dealio\kb127ulesules.1.201.43
   C:\Program Files\Dealio\kb127ulesules.1.202.43
   C:\Program Files\Dealio\kb127ulesules.1.203.71
   C:\Program Files\Dealio\kb127ulesules.1.205.62
   C:\Program Files\Dealio\kb127ulesules.1.213.71
   C:\Program Files\Dealio\kb127ulesules.1.214.49
   C:\Program Files\Dealio\kb127ulesules.1.215.43
   C:\Program Files\Dealio\kb127ulesules.1.216.67
   C:\Program Files\Dealio\kb127ulesules.1.217.67
   C:\Program Files\Dealio\kb127ulesules.1.218.52
   C:\Program Files\Dealio\kb127ulesules.1.219.43
   C:\Program Files\Dealio\kb127ulesules.1.220.43
   C:\Program Files\Dealio\kb127ulesules.1.221.57
   C:\Program Files\Dealio\kb127ulesules.1.222.43
   C:\Program Files\Dealio\kb127ulesules.1.223.68
   C:\Program Files\Dealio\kb127ulesules.1.226.68
   C:\Program Files\Dealio\kb127ulesules.1.227.43
   C:\Program Files\Dealio\kb127ulesules.1.228.62
   C:\Program Files\Dealio\kb127ulesules.1.229.76
   C:\Program Files\Dealio\kb127ulesules.1.23.63
   C:\Program Files\Dealio\kb127ulesules.1.239.43
   C:\Program Files\Dealio\kb127ulesules.1.24.43
   C:\Program Files\Dealio\kb127ulesules.1.240.43
   C:\Program Files\Dealio\kb127ulesules.1.241.43
   C:\Program Files\Dealio\kb127ulesules.1.242.43
   C:\Program Files\Dealio\kb127ulesules.1.243.43
   C:\Program Files\Dealio\kb127ulesules.1.244.63
   C:\Program Files\Dealio\kb127ulesules.1.245.43
   C:\Program Files\Dealio\kb127ulesules.1.247.43
   C:\Program Files\Dealio\kb127ulesules.1.248.43
   C:\Program Files\Dealio\kb127ulesules.1.249.43
   C:\Program Files\Dealio\kb127ulesules.1.250.43
   C:\Program Files\Dealio\kb127ulesules.1.251.43
   C:\Program Files\Dealio\kb127ulesules.1.252.43
   C:\Program Files\Dealio\kb127ulesules.1.253.43
   C:\Program Files\Dealio\kb127ulesules.1.254.43
   C:\Program Files\Dealio\kb127ulesules.1.255.43
   C:\Program Files\Dealio\kb127ulesules.1.256.43
   C:\Program Files\Dealio\kb127ulesules.1.257.43
   C:\Program Files\Dealio\kb127ulesules.1.279.43
   C:\Program Files\Dealio\kb127ulesules.1.28.58
   C:\Program Files\Dealio\kb127ulesules.1.282.75
   C:\Program Files\Dealio\kb127ulesules.1.283.43
   C:\Program Files\Dealio\kb127ulesules.1.284.43
   C:\Program Files\Dealio\kb127ulesules.1.289.67
   C:\Program Files\Dealio\kb127ulesules.1.290.62
   C:\Program Files\Dealio\kb127ulesules.1.291.61
   C:\Program Files\Dealio\kb127ulesules.1.296.43
   C:\Program Files\Dealio\kb127ulesules.1.297.43
   C:\Program Files\Dealio\kb127ulesules.1.304.43
   C:\Program Files\Dealio\kb127ulesules.1.307.43
   C:\Program Files\Dealio\kb127ulesules.1.308.75
   C:\Program Files\Dealio\kb127ulesules.1.31.47
   C:\Program Files\Dealio\kb127ulesules.1.310.46
   C:\Program Files\Dealio\kb127ulesules.1.311.43
   C:\Program Files\Dealio\kb127ulesules.1.315.43
   C:\Program Files\Dealio\kb127ulesules.1.316.43
   C:\Program Files\Dealio\kb127ulesules.1.317.43
   C:\Program Files\Dealio\kb127ulesules.1.318.43
   C:\Program Files\Dealio\kb127ulesules.1.319.49
   C:\Program Files\Dealio\kb127ulesules.1.32.48
   C:\Program Files\Dealio\kb127ulesules.1.334.44
   C:\Program Files\Dealio\kb127ulesules.1.335.60
   C:\Program Files\Dealio\kb127ulesules.1.336.44
   C:\Program Files\Dealio\kb127ulesules.1.337.44
   C:\Program Files\Dealio\kb127ulesules.1.338.75
   C:\Program Files\Dealio\kb127ulesules.1.339.47
   C:\Program Files\Dealio\kb127ulesules.1.34.43
   C:\Program Files\Dealio\kb127ulesules.1.340.47
   C:\Program Files\Dealio\kb127ulesules.1.341.47
   C:\Program Files\Dealio\kb127ulesules.1.349.50
   C:\Program Files\Dealio\kb127ulesules.1.35.48
   C:\Program Files\Dealio\kb127ulesules.1.350.50
   C:\Program Files\Dealio\kb127ulesules.1.351.51
   C:\Program Files\Dealio\kb127ulesules.1.352.54
   C:\Program Files\Dealio\kb127ulesules.1.353.51
   C:\Program Files\Dealio\kb127ulesules.1.354.51
   C:\Program Files\Dealio\kb127ulesules.1.357.62
   C:\Program Files\Dealio\kb127ulesules.1.358.52
   C:\Program Files\Dealio\kb127ulesules.1.359.52
   C:\Program Files\Dealio\kb127ulesules.1.360.53
   C:\Program Files\Dealio\kb127ulesules.1.361.54
   C:\Program Files\Dealio\kb127ulesules.1.362.68
   C:\Program Files\Dealio\kb127ulesules.1.363.58
   C:\Program Files\Dealio\kb127ulesules.1.364.54
   C:\Program Files\Dealio\kb127ulesules.1.365.53
   C:\Program Files\Dealio\kb127ulesules.1.367.56
   C:\Program Files\Dealio\kb127ulesules.1.368.58
   C:\Program Files\Dealio\kb127ulesules.1.369.55
   C:\Program Files\Dealio\kb127ulesules.1.370.56
   C:\Program Files\Dealio\kb127ulesules.1.371.56
   C:\Program Files\Dealio\kb127ulesules.1.372.57
   C:\Program Files\Dealio\kb127ulesules.1.373.55
   C:\Program Files\Dealio\kb127ulesules.1.375.56
   C:\Program Files\Dealio\kb127ulesules.1.376.57
   C:\Program Files\Dealio\kb127ulesules.1.377.55
   C:\Program Files\Dealio\kb127ulesules.1.378.65
   C:\Program Files\Dealio\kb127ulesules.1.384.58
   C:\Program Files\Dealio\kb127ulesules.1.386.71
   C:\Program Files\Dealio\kb127ulesules.1.387.59
   C:\Program Files\Dealio\kb127ulesules.1.388.59
   C:\Program Files\Dealio\kb127ulesules.1.389.59
   C:\Program Files\Dealio\kb127ulesules.1.390.60
   C:\Program Files\Dealio\kb127ulesules.1.391.60
   C:\Program Files\Dealio\kb127ulesules.1.392.60
   C:\Program Files\Dealio\kb127ulesules.1.393.60
   C:\Program Files\Dealio\kb127ulesules.1.394.60
   C:\Program Files\Dealio\kb127ulesules.1.396.61
   C:\Program Files\Dealio\kb127ulesules.1.397.61
   C:\Program Files\Dealio\kb127ulesules.1.398.60
   C:\Program Files\Dealio\kb127ulesules.1.399.60
   C:\Program Files\Dealio\kb127ulesules.1.403.61
   C:\Program Files\Dealio\kb127ulesules.1.404.63
   C:\Program Files\Dealio\kb127ulesules.1.405.61
   C:\Program Files\Dealio\kb127ulesules.1.406.61
   C:\Program Files\Dealio\kb127ulesules.1.407.76
   C:\Program Files\Dealio\kb127ulesules.1.408.63
   C:\Program Files\Dealio\kb127ulesules.1.409.61
   C:\Program Files\Dealio\kb127ulesules.1.412.62
   C:\Program Files\Dealio\kb127ulesules.1.413.62
   C:\Program Files\Dealio\kb127ulesules.1.414.62
   C:\Program Files\Dealio\kb127ulesules.1.415.62
   C:\Program Files\Dealio\kb127ulesules.1.416.62
   C:\Program Files\Dealio\kb127ulesules.1.417.62
   C:\Program Files\Dealio\kb127ulesules.1.418.62
   C:\Program Files\Dealio\kb127ulesules.1.419.62
   C:\Program Files\Dealio\kb127ulesules.1.420.62
   C:\Program Files\Dealio\kb127ulesules.1.421.62
   C:\Program Files\Dealio\kb127ulesules.1.423.63
   C:\Program Files\Dealio\kb127ulesules.1.424.63
   C:\Program Files\Dealio\kb127ulesules.1.425.63
   C:\Program Files\Dealio\kb127ulesules.1.426.63
   C:\Program Files\Dealio\kb127ulesules.1.427.63
   C:\Program Files\Dealio\kb127ulesules.1.428.65
   C:\Program Files\Dealio\kb127ulesules.1.429.63
   C:\Program Files\Dealio\kb127ulesules.1.430.63
   C:\Program Files\Dealio\kb127ulesules.1.432.65
   C:\Program Files\Dealio\kb127ulesules.1.433.64
   C:\Program Files\Dealio\kb127ulesules.1.434.65
   C:\Program Files\Dealio\kb127ulesules.1.435.64
   C:\Program Files\Dealio\kb127ulesules.1.436.76
   C:\Program Files\Dealio\kb127ulesules.1.437.64
   C:\Program Files\Dealio\kb127ulesules.1.438.71
   C:\Program Files\Dealio\kb127ulesules.1.439.71
   C:\Program Files\Dealio\kb127ulesules.1.440.75
   C:\Program Files\Dealio\kb127ulesules.1.442.73
   C:\Program Files\Dealio\kb127ulesules.1.443.73
   C:\Program Files\Dealio\kb127ulesules.1.444.73
   C:\Program Files\Dealio\kb127ulesules.1.445.68
   C:\Program Files\Dealio\kb127ulesules.1.446.69
   C:\Program Files\Dealio\kb127ulesules.1.450.67
   C:\Program Files\Dealio\kb127ulesules.1.451.67
   C:\Program Files\Dealio\kb127ulesules.1.452.68
   C:\Program Files\Dealio\kb127ulesules.1.453.68
   C:\Program Files\Dealio\kb127ulesules.1.454.69
   C:\Program Files\Dealio\kb127ulesules.1.456.69
   C:\Program Files\Dealio\kb127ulesules.1.457.75
   C:\Program Files\Dealio\kb127ulesules.1.458.70
   C:\Program Files\Dealio\kb127ulesules.1.459.70
   C:\Program Files\Dealio\kb127ulesules.1.460.69
   C:\Program Files\Dealio\kb127ulesules.1.462.74
   C:\Program Files\Dealio\kb127ulesules.1.463.69
   C:\Program Files\Dealio\kb127ulesules.1.464.70
   C:\Program Files\Dealio\kb127ulesules.1.465.68
   C:\Program Files\Dealio\kb127ulesules.1.468.70
   C:\Program Files\Dealio\kb127ulesules.1.469.70
   C:\Program Files\Dealio\kb127ulesules.1.470.70
   C:\Program Files\Dealio\kb127ulesules.1.471.73
   C:\Program Files\Dealio\kb127ulesules.1.472.70
   C:\Program Files\Dealio\kb127ulesules.1.478.74
   C:\Program Files\Dealio\kb127ulesules.1.479.73
   C:\Program Files\Dealio\kb127ulesules.1.480.68
   C:\Program Files\Dealio\kb127ulesules.1.481.71
   C:\Program Files\Dealio\kb127ulesules.1.482.74
   C:\Program Files\Dealio\kb127ulesules.1.49.67
   C:\Program Files\Dealio\kb127ulesules.1.50.43
   C:\Program Files\Dealio\kb127ulesules.1.500.71
   C:\Program Files\Dealio\kb127ulesules.1.501.74
   C:\Program Files\Dealio\kb127ulesules.1.502.71
   C:\Program Files\Dealio\kb127ulesules.1.51.69
   C:\Program Files\Dealio\kb127ulesules.1.52.72
   C:\Program Files\Dealio\kb127ulesules.1.520.76
   C:\Program Files\Dealio\kb127ulesules.1.521.76
   C:\Program Files\Dealio\kb127ulesules.1.522.76
   C:\Program Files\Dealio\kb127ulesules.1.53.51
   C:\Program Files\Dealio\kb127ulesules.1.531.76
   C:\Program Files\Dealio\kb127ulesules.1.532.75
   C:\Program Files\Dealio\kb127ulesules.1.534.75
   C:\Program Files\Dealio\kb127ulesules.1.54.47
   C:\Program Files\Dealio\kb127ulesules.1.55.45
   C:\Program Files\Dealio\kb127ulesules.1.56.69
   C:\Program Files\Dealio\kb127ulesules.1.57.43
   C:\Program Files\Dealio\kb127ulesules.1.58.47
   C:\Program Files\Dealio\kb127ulesules.1.593.76
   C:\Program Files\Dealio\kb127ulesules.1.595.76
   C:\Program Files\Dealio\kb127ulesules.1.63.57
   C:\Program Files\Dealio\kb127ulesules.1.66.47
   C:\Program Files\Dealio\kb127ulesules.1.70.75
   C:\Program Files\Dealio\kb127ulesules.1.71.43
   C:\WINDOWS\Prefetch\DEALIOAU.EXE-32C4A05D.pf
   C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Dealio
   C:\WINDOWS\Prefetch\SEARCHSETTINGS.EXE-253CB611.pf
   C:\DOCUME~1\coco\APPLIC~1\Search Settings
   C:\DOCUME~1\coco\APPLIC~1\Search Settings\kb127
   C:\DOCUME~1\coco\APPLIC~1\Search Settings\kb127es
   C:\DOCUME~1\coco\APPLIC~1\Search Settings\kb127	emp
   C:\DOCUME~1\coco\APPLIC~1\Search Settings\kb127	emp\ws-14216.log
   C:\DOCUME~1\coco\APPLIC~1\Search Settings\kb127	emp\ws-14217.log
   C:\DOCUME~1\coco\APPLIC~1\Search Settings\kb127	emp\ws-14218.log
   C:\DOCUME~1\coco\APPLIC~1\Search Settings\kb127	emp\ws-14219.log
   C:\Program Files\Search Settings
   C:\Program Files\Search Settings\kb127
   C:\Program Files\Search Settings\SearchSettings.exe
   C:\Program Files\Search Settings\kb127es
   C:\Program Files\Search Settings\kb127\SearchSettings.dll
   C:\Program Files\Search Settings\kb127\SearchSettingsRes409.dll
   C:\Program Files\Search Settings\kb127	emp

   -----------\  Extensions

   (coco) - {22119944-ED35-4ab1-910B-E619EA06A115} => roboform


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Local Page"="C:\WINDOWS\system32\blank.htm"
   "Start Page"="https://www.google.fr/?gws_rd=ssl"
   "Search Page"="https://www.google.com/?gws_rd=ssl"
   "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"
   "SearchMigratedDefaultURL"="https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&src={referrer:source?}"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
   "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"


   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\coco\Recent\Abbyy Fine Reader 8.0 Keygen.lnk



   1 - "C:\ToolBar SD\TB_1.txt" - 06/12/2008|16:17 - Option : [1]

   -----------\  Fin du rapport a 16:17:35,09

cedricpenard · Answer

voici le rapport tolbar : 


   -----------\  ToolBar S&D 1.2.6   XP/Vista

   Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 1
   X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP )
   BIOS : Version 1.00
   USER : coco ( Administrator )
   BOOT : Normal boot
   Antivirus : avast! antivirus 4.8.1296 [VPS 081204-0] 4.8.1296 (Activated)
   Firewall  : Sygate Personal Firewall 4.6 (Activated)
   A:\ (USB)
   C:\ (Local Disk) - NTFS - Total:49 Go (Free:34 Go)
   D:\ (Local Disk) - NTFS - Total:19 Go (Free:19 Go)
   E:\ (Local Disk) - NTFS - Total:62 Go (Free:30 Go)
   F:\ (Local Disk) - NTFS - Total:18 Go (Free:0 Go)
   G:\ (CD or DVD)
   H:\ (CD or DVD)
   I:\ (Local Disk) - FAT32 - Total:149 Go (Free:30 Go)

   "C:\ToolBar SD" ( MAJ : 04-12-2008|20:40 )
   Option : [2] ( 06/12/2008|17:42 )

   -----------\ SUPPRESSION

   Supprime! - C:\DOCUME~1\coco\APPLIC~1\Dealio\kb127
   Supprime! - C:\Program Files\Dealio\DealioAU.exe
   Supprime! - C:\Program Files\Dealio\kb127
   Supprime! - C:\Program Files\Dealio\SearchSettingsKit.exe
   Supprime! - C:\WINDOWS\Prefetch\DEALIOAU.EXE-32C4A05D.pf
   Supprime! - C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Dealio
   Supprime! - C:\WINDOWS\Prefetch\SEARCHSETTINGS.EXE-253CB611.pf
   Supprime! - C:\DOCUME~1\coco\APPLIC~1\Search Settings\kb127
   Supprime! - C:\Program Files\Search Settings\kb127
   Supprime! - C:\Program Files\Search Settings\SearchSettings.exe
   Supprime! - C:\DOCUME~1\coco\APPLIC~1\Dealio
   Supprime! - C:\Program Files\Dealio
   Supprime! - C:\DOCUME~1\coco\APPLIC~1\Search Settings
   Supprime! - C:\Program Files\Search Settings

   -----------\  Recherche de Fichiers / Dossiers ...


   -----------\  Extensions

   (coco) - {22119944-ED35-4ab1-910B-E619EA06A115} => roboform


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Local Page"="C:\WINDOWS\system32\blank.htm"
   "Start Page"="https://www.google.fr/?gws_rd=ssl"
   "Search Page"="https://www.google.com/?gws_rd=ssl"
   "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"
   "SearchMigratedDefaultURL"="https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&src={referrer:source?}"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
   "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Start Page"="https://www.msn.com/fr-fr/"


   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\coco\Recent\Abbyy Fine Reader 8.0 Keygen.lnk



   1 - "C:\ToolBar SD\TB_1.txt" - 06/12/2008|16:17 - Option : [1]
   2 - "C:\ToolBar SD\TB_2.txt" - 06/12/2008|17:43 - Option : [2]

   -----------\  Fin du rapport a 17:43:27,53


voici le rapport HijackThis : 

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:46:14, on 06/12/2008
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\System32\RunDll32.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\wpabaln.exe
C:\WINDOWS\System32\cmd.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Hijackthis\CCM.exe.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;*.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\webelated.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\webelated.htm
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe

cedricpenard · Answer

pas d'amélioration
windows met 3 plombes à démarrer 
une fois que le PC est démarré, quand je mets mozilla, çà finit par planter et la fenêtre se ferme toute seule
de plus une message de spybot apparait tout le temps disant qu'un élément important su registre a été modifié et il demande si j'accepte ou refuse cette modification; je n'ai rien fait

que faire?!

cedricpenard · Answer

j'ai supprimé tout ce qui concerne abbyy
je n'ai pas réussi à installer IE7
j'ai fait CCleaner et ai réparé de nombreuses erreurs

par contre il y a toujours une lenteur pour le démarrage de windows : lors du démarrage la fenetre bleue de windows avec " windows est en cours de démarrage" doit bien rester telle quelle pendant au moins 1 à 2 min;
de plus les fenetres mozilla et IE finissent toujours par se fermer

bref je pense qu'on avance mais qu'il reste malheureusement du pain sur la planche... désolé...

merci pour ton retour

cedricpenard · Answer

j'ai aussi un problème au niveau de l'affichage : la résolution couleur est très faible (4 bits) de même que la résolution écran bloqué à 800*600 pixels; je ne peux rien changer!
il n'y a plus d'apparition de fenetre spybot

cedricpenard · Answer

voici le rapport Highjack :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:37:36, on 07/12/2008
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\System32\RunDll32.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Hijackthis\CCM.exe.exe
C:\Program Files\Alwil Software\Avast4\setup\avast.setup
C:\WINDOWS\System32\wuauclt.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;*.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {6A87B991-A31F-4130-AE72-6D0C294BF082} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe

cedricpenard · Answer

je ne peux pas installer IE7 car je ne sais pas comment c'est arrivé mais ma version crackée de windows XP ne peux pas être mise à jour et Windows a détecté que j'avais une version crackée
bref je suis dans la mouise

concernant l'affichage j'avais déjà fait ce que tu as dit mais çà ne donne absolument rien, je ne peux pas changer la config affichage

cedricpenard · Answer

je peux pas mettre la version XP SP 2 à partir du site 
http://update.microsoft.com/microsoftupdate/v6/default.aspx?­ln=fr 
ni en passant par l'icône mise à jour dans le panneau de configuration 

je vais formater le disque dur avec windows et l'ensemble des logiciels pour tout réinstaller.
je te tiens au courant et je te remercie du temps que tu as consacré au problème
bonne soirée
Cédric

cedricpenard · Answer

comment çà la clé d'activation est gratuite?
la licence windows est payante, non?

cedricpenard · Answer

OK merci pour toute ton aide
@+

Gros pb de virus sur Windows

13 réponses

Votre réponse

Newsletters