Petit problème à grandes conséquences !

Lenalee -  
Bonjour,

Bon j'ignore si c'est le bon emplacement pour ce genre de problème mais j'espère avoir une réponse.

Voilà, il y a de cela un an, une fille a décidé de pirater des comptes msn à des amies et moi. De ce fait, elle peut lire nos conversations, avoir accès à nos mails et elle s'invite dans des conversations à plusieurs pour divulguer ce qu'on peut raconter à l'une ou l'autre mais qu'on ne veut pas forcément que les autres sachent. En bref, je suis désolée du terme que je vais utiliser, elle fout la merde et cela commence à être agaçant !

Dernièrement, elle pirate carrément nos adresses, se connectant dessus (chose qu'elle ne faisait pas auparavant).

Je ne demande pas comment pirater une adresse msn (je ne m'abaisserai aucunement à son niveau) mais j'aimerai savoir comment la stopper... définitivement.

Si quelqu'un a une solution (bien entendu, je me doute que vous n'êtes pas Superman ou un autre mais sait-on jamais), je suis preneuse.

Merci.
Configuration: Windows XP Internet Explorer 7.0

26 réponses

  1.  pimprenelle27 Contributeur sécurité
    As tu fais malware? pour l'antivirus on verra après car on va le changer.
    0
    1. Lenalee
      Bonsoir.

      J'ai un petit problème (encore) avec l'antivirus... mon ordinateur m'a alerté qu'il était périmé... sauf que je ne vois pas (comme dans avast) comment le réactiver...

      Merci de votre aide (je continuerai la désinfection).
      0
      1. pimprenelle27 Contributeur sécurité
        ok fais moi ceci maintenant :

        ▶ Télécharge malwarebyte's anti-malware

        ▶ Un tutoriel sera à ta disposition pour l'installer et l'utiliser correctement.

        ▶ Fais la mise à jour du logiciel (elle se fait normalement à l'installation)

        ▶ Lance une analyse complète en cliquant sur "Exécuter un examen complet"

        ▶ Sélectionnes les disques que tu veux analyser et cliques sur "Lancer l'examen"

        ▶ L'analyse peut durer un bon moment.....

        ▶ Une fois l'analyse terminée, cliques sur "OK" puis sur "Afficher les résultats"

        ▶ Vérifies que tout est bien coché et cliques sur "Supprimer la sélection" => et ensuite sur "OK"

        ▶ Un rapport va s'ouvrir dans le bloc note... Fais un copié/collé du rapport dans ta prochaine réponse sur le forum

        * Il se pourrait que certains fichiers devront être supprimés au redémarrage du PC... Faites le en cliquant sur "oui" à la question posée
        0
        1. Lenalee
          ça y est :

          All processes killed
          ========== REGISTRY ==========
          Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\activecdrom deleted successfully.
          ========== FILES ==========
          File/Folder c:\docume~1\m1374~1.mol\applic~1\waysta~1\mpeg play.exe not found.
          File/Folder d:\install.exe not found.
          C:\WINDOWS\system32\tmp.txt moved successfully.
          File/Folder C:\WINDOWS\autoupd\autoupd.exe not found.
          ========== COMMANDS ==========

          [EMPTYTEMP]

          User: All Users

          User: Default User
          ->Temp folder emptied: 0 bytes
          ->Temporary Internet Files folder emptied: 33170 bytes

          User: Invité
          ->Temp folder emptied: 16384 bytes
          ->Temporary Internet Files folder emptied: 33170 bytes

          User: LocalService
          ->Temp folder emptied: 66016 bytes
          ->Temporary Internet Files folder emptied: 7152013 bytes

          User: M.MOLLICA
          ->Temp folder emptied: 800388068 bytes
          ->Temporary Internet Files folder emptied: 504903448 bytes
          ->Java cache emptied: 41179875 bytes
          ->FireFox cache emptied: 94266904 bytes
          ->Opera cache emptied: 40665306 bytes

          User: M1374~1~MOL

          User: NetworkService
          ->Temp folder emptied: 0 bytes
          ->Temporary Internet Files folder emptied: 33170 bytes

          User: Papa et Maman
          ->Temp folder emptied: 53968476 bytes
          ->Temporary Internet Files folder emptied: 12241721 bytes

          User: Romain
          ->Temp folder emptied: 13556595 bytes
          ->Temporary Internet Files folder emptied: 278471109 bytes
          ->FireFox cache emptied: 3314135 bytes
          ->Google Chrome cache emptied: 280934574 bytes

          User: Rosy
          ->Temp folder emptied: 172132538 bytes
          ->Temporary Internet Files folder emptied: 135192808 bytes
          ->Opera cache emptied: 361613 bytes

          %systemdrive% .tmp files removed: 0 bytes
          %systemroot% .tmp files removed: 2134506 bytes
          %systemroot%\System32 .tmp files removed: 3072 bytes
          Windows Temp folder emptied: 57722312 bytes
          RecycleBin emptied: 4546092 bytes

          Total Files Cleaned = -1708,65 mb

          OTM by OldTimer - Version 3.0.0.6 log created on 09102009_175507

          Files moved on Reboot...

          Registry entries deleted on Reboot...
          0
          2. pimprenelle27 Contributeur sécurité
            ▶ Télécharge OTM (de Old_Timer) sur ton Bureau

            ▶ Double-clique sur OTM.exe pour le lancer.

            ▶ Assure toi que la case Unregister Dll's and Ocx's soit bien cochée.

            ▶ Copie la liste qui se trouve en gras dans la citation ci-dessous et colle-la dans le cadre de gauche de OTM sous "Paste instructions for item to be moved".

            -----------------------------------------------------------------------------

            :Processes

            :services

            :reg
            [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
            "activecdrom"=-

            :files
            c:\docume~1\m1374~1.mol\applic~1\waysta~1\mpeg play.exe
            d:\install.exe
            C:\WINDOWS\system32\tmp.txt
            C:\WINDOWS\autoupd\autoupd.exe

            :Commands
            [purity]
            [emptytemp]
            [Reboot]

            -----------------------------------------------------------------------------

            ▶ clique sur MoveIt! pour lancer la suppression.

            ▶ Le résultat apparaitra dans le cadre "Results".

            ▶ Clique sur Exit pour fermer.

            ▶ Poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

            ▶ Il te sera peut-être demandé de redémarrer le pc pour achever la suppression. Si c'est le cas accepte par Yes.
            0
            1. Lenalee
              Rapport de RSIT => http://cjoint.com/data/jfo40ypJEt.htm
              0
              1. pimprenelle27 Contributeur sécurité
                Bonjour,

                tu peux me refais un rapport RSIT à jour hiastoire d'y voir plus clair dans les infections qui resteraient.
                0
                1. Lenalee
                  Suppression faite ! Je poste le rapport :

                  "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
                  Option : [2] ( 05/09/2009|14:27 )

                  \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

                  Supprime! - C:\DOCUME~1\M1374~1.MOL\LOCALS~1\Temp\msgpl_155c.exe
                  Supprime! - C:\DOCUME~1\M1374~1.MOL\LOCALS~1\Temp\nshF.tmp
                  Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@advertstream[1].txt
                  Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@imagevenue.advertserve[2].txt
                  Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@www.adserver5[1].txt
                  Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@adultfriendfinder[2].txt
                  Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@advertising[2].txt
                  Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@advertising[3].txt
                  Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@adin.bigpoint[2].txt
                  Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@bigpoint[2].txt
                  Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@fr1.darkorbit.bigpoint[2].txt
                  Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@fr1.seafight.bigpoint[1].txt
                  Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@banner.casinoking[2].txt
                  Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@casinoking[1].txt
                  Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@cotedazurpalace[2].txt
                  Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@adopt.euroclick[2].txt
                  Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@euroclick[2].txt
                  Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@pacificpoker[2].txt
                  Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@partygaming.122.2o7[1].txt
                  Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@partypoker[2].txt
                  Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@32vegas[2].txt
                  Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@banner.32vegas[2].txt
                  Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@cachewww.32vegas[2].txt
                  Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@vegasred[2].txt
                  Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@www.vegasred[2].txt
                  Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@www.lop[1].txt
                  Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@2xmoinscher[1].txt
                  Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@cc.2xmoinscher[2].txt
                  Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@www.2xmoinscher[1].txt
                  Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@888[1].txt
                  Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@888[2].txt
                  Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grid Blue Memo Site
                  -
                  [ Fichier Hosts ] .. Restaure!

                  \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

                  --------------------\\ Listing des dossiers dans APPLIC~1

                  [16/03/2008|16:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
                  [27/11/2006|18:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\America Online
                  [19/08/2009|10:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
                  [24/09/2007|17:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Bluetooth
                  [06/03/2007|12:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CanonBJ
                  [24/02/2006|14:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ciel
                  [24/02/2006|14:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
                  [04/06/2009|18:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Electronic Arts
                  [18/04/2008|13:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\F-Secure
                  [11/02/2008|12:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\fssg
                  [25/12/2008|11:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
                  [06/03/2007|12:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
                  [18/01/2008|23:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
                  [04/06/2009|18:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
                  [06/11/2006|19:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
                  [06/03/2007|12:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
                  [15/04/2007|13:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Corporation
                  [08/03/2009|14:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
                  [25/12/2007|19:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
                  [01/08/2009|20:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

                  [24/02/2006|14:02] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

                  [26/02/2006|12:08] C:\DOCUME~1\INVIT~1\APPLIC~1\Identities
                  [26/02/2006|12:08] C:\DOCUME~1\INVIT~1\APPLIC~1\Microsoft

                  [25/12/2007|19:39] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

                  [25/09/2008|18:42] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Adobe
                  [12/03/2008|13:34] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\AdobeUM
                  [08/03/2007|22:16] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\ArcSoft
                  [16/03/2007|19:21] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Canon
                  [04/03/2006|21:52] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\CyberLink
                  [04/06/2009|17:41] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Desperate Housewives
                  [19/01/2008|21:30] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\F-Secure
                  [07/03/2008|22:44] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Google
                  [13/03/2006|20:09] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Help
                  [24/02/2006|14:06] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Identities
                  [09/04/2008|17:46] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Jasc
                  [29/12/2006|14:42] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\La Bataille pour la Terre du Milieu
                  [12/06/2008|21:10] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Leadertech
                  [08/01/2009|17:16] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\LimeWire
                  [24/02/2006|14:39] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Macromedia
                  [31/01/2007|19:17] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Media Player Classic
                  [04/06/2009|18:49] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Microsoft
                  [21/07/2009|16:23] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Mozilla
                  [18/01/2008|18:34] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\MSNInstaller
                  [09/12/2008|18:27] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\My Stitch
                  [03/07/2009|19:48] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\OFFICE One v6
                  [01/03/2009|12:03] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\OpenOffice.org
                  [22/06/2009|19:47] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Opera
                  [06/03/2007|12:42] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\ScanSoft
                  [22/09/2008|17:06] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Sun
                  [08/03/2009|14:13] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Ulead Systems
                  [03/09/2009|20:32] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\uTorrent
                  [18/05/2009|09:29] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\vlc
                  [23/09/2008|18:07] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Way start fork
                  [05/08/2008|10:53] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Yahoo!

                  [24/02/2006|14:04] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

                  [26/09/2008|16:59] C:\DOCUME~1\PAPAET~1\APPLIC~1\Adobe
                  [05/05/2008|18:30] C:\DOCUME~1\PAPAET~1\APPLIC~1\Google
                  [24/02/2006|20:23] C:\DOCUME~1\PAPAET~1\APPLIC~1\Identities
                  [11/06/2008|15:26] C:\DOCUME~1\PAPAET~1\APPLIC~1\InstallShield
                  [29/01/2008|19:55] C:\DOCUME~1\PAPAET~1\APPLIC~1\Macromedia
                  [28/05/2008|17:08] C:\DOCUME~1\PAPAET~1\APPLIC~1\Microsoft
                  [23/09/2008|18:34] C:\DOCUME~1\PAPAET~1\APPLIC~1\Way start fork

                  [24/11/2008|19:59] C:\DOCUME~1\Romain\APPLIC~1\Adobe
                  [06/08/2009|16:14] C:\DOCUME~1\Romain\APPLIC~1\Canon
                  [08/06/2008|16:18] C:\DOCUME~1\Romain\APPLIC~1\Google
                  [15/06/2006|17:16] C:\DOCUME~1\Romain\APPLIC~1\Identities
                  [03/02/2008|00:15] C:\DOCUME~1\Romain\APPLIC~1\Macromedia
                  [13/08/2009|11:45] C:\DOCUME~1\Romain\APPLIC~1\Microsoft
                  [10/08/2009|22:47] C:\DOCUME~1\Romain\APPLIC~1\Mozilla
                  [07/04/2009|15:12] C:\DOCUME~1\Romain\APPLIC~1\OpenOffice.org
                  [28/08/2008|14:06] C:\DOCUME~1\Romain\APPLIC~1\Yahoo!

                  [25/09/2008|23:57] C:\DOCUME~1\Rosy\APPLIC~1\Adobe
                  [15/03/2006|16:59] C:\DOCUME~1\Rosy\APPLIC~1\ArcSoft
                  [31/05/2006|21:04] C:\DOCUME~1\Rosy\APPLIC~1\CyberLink
                  [11/03/2008|23:11] C:\DOCUME~1\Rosy\APPLIC~1\Google
                  [27/02/2006|17:52] C:\DOCUME~1\Rosy\APPLIC~1\Identities
                  [01/05/2008|17:18] C:\DOCUME~1\Rosy\APPLIC~1\Macromedia
                  [26/07/2007|22:32] C:\DOCUME~1\Rosy\APPLIC~1\Media Player Classic
                  [01/05/2008|09:40] C:\DOCUME~1\Rosy\APPLIC~1\Microsoft
                  [06/03/2009|09:19] C:\DOCUME~1\Rosy\APPLIC~1\OpenOffice.org
                  [19/07/2009|09:14] C:\DOCUME~1\Rosy\APPLIC~1\Opera
                  [30/08/2009|06:42] C:\DOCUME~1\Rosy\APPLIC~1\Search Settings
                  [31/05/2009|18:30] C:\DOCUME~1\Rosy\APPLIC~1\vlc
                  [23/09/2008|18:36] C:\DOCUME~1\Rosy\APPLIC~1\Way start fork
                  [09/08/2008|07:23] C:\DOCUME~1\Rosy\APPLIC~1\Yahoo!

                  --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

                  [05/09/2009 13:41][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-117609710-1960408961-725345543-1008UA.job
                  [05/09/2009 13:41][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-117609710-1960408961-725345543-1008Core.job
                  [05/09/2009 11:42][--ah-----] C:\WINDOWS\tasks\User_Feed_Synchronization-{6200B771-E16A-4F11-A3EF-C5759A382D35}.job
                  [05/09/2009 11:39][--ah-----] C:\WINDOWS\tasks\SA.DAT
                  [05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

                  --------------------\\ Listing des dossiers dans C:\Program Files

                  [03/05/2009|16:07] C:\Program Files\Adobe
                  [24/02/2006|14:23] C:\Program Files\Ahead
                  [19/08/2009|10:47] C:\Program Files\Alwil Software
                  [19/08/2009|10:45] C:\Program Files\AntivirusFirewall
                  [06/03/2007|12:41] C:\Program Files\ArcSoft
                  [19/08/2009|10:35] C:\Program Files\Avira
                  [24/02/2006|14:14] C:\Program Files\AvRack
                  [29/12/2006|14:55] C:\Program Files\Buena Vista Games
                  [06/03/2007|12:44] C:\Program Files\Canon
                  [06/03/2007|12:38] C:\Program Files\CanonBJ
                  [24/02/2006|14:32] C:\Program Files\Ciel
                  [25/12/2007|19:31] C:\Program Files\Common Files
                  [24/02/2006|13:59] C:\Program Files\ComPlus Applications
                  [24/02/2006|14:17] C:\Program Files\CyberLink
                  [08/08/2009|21:54] C:\Program Files\DivX
                  [28/01/2007|11:49] C:\Program Files\EA GAMES
                  [04/06/2009|18:49] C:\Program Files\Electronic Arts
                  [19/07/2009|21:30] C:\Program Files\Fichiers communs
                  [02/09/2009|19:09] C:\Program Files\Free Video Converter
                  [25/12/2008|18:10] C:\Program Files\Google
                  [08/03/2007|20:42] C:\Program Files\Imprimante
                  [04/06/2009|18:33] C:\Program Files\InstallShield Installation Information
                  [02/02/2007|18:54] C:\Program Files\Intel
                  [11/01/2008|18:52] C:\Program Files\InterActual
                  [23/08/2009|00:18] C:\Program Files\Internet Explorer
                  [24/02/2006|14:35] C:\Program Files\ISSENDIS
                  [24/09/2007|17:11] C:\Program Files\IVT Corporation
                  [09/04/2008|17:35] C:\Program Files\Jasc Software Inc
                  [03/05/2009|10:56] C:\Program Files\Java
                  [24/02/2006|14:35] C:\Program Files\Kaspersky Lab
                  [31/01/2007|19:16] C:\Program Files\K-Lite Codec Pack
                  [27/02/2007|21:14] C:\Program Files\Maxis
                  [20/11/2008|19:03] C:\Program Files\Messenger
                  [01/08/2009|20:51] C:\Program Files\Messenger Plus! Live
                  [24/03/2009|18:12] C:\Program Files\MessengerPlus! 3
                  [19/01/2008|11:23] C:\Program Files\Microsoft CAPICOM 2.1.0.2
                  [24/02/2006|14:02] C:\Program Files\microsoft frontpage
                  [22/12/2006|21:14] C:\Program Files\Microsoft Office
                  [14/03/2007|19:55] C:\Program Files\Microsoft R‚f‚rence
                  [01/08/2009|11:21] C:\Program Files\Microsoft Silverlight
                  [01/08/2009|20:34] C:\Program Files\Microsoft SQL Server Compact Edition
                  [04/06/2009|18:49] C:\Program Files\Microsoft WSE
                  [22/12/2006|21:16] C:\Program Files\Microsoft.NET
                  [02/02/2009|11:25] C:\Program Files\Movie Maker
                  [03/09/2009|11:10] C:\Program Files\Mozilla Firefox
                  [23/08/2009|00:21] C:\Program Files\MSBuild
                  [02/03/2006|14:11] C:\Program Files\MSN
                  [24/02/2006|13:58] C:\Program Files\MSN Gaming Zone
                  [19/01/2008|00:27] C:\Program Files\MSXML 4.0
                  [07/10/2008|15:18] C:\Program Files\NetMeeting
                  [04/07/2009|14:20] C:\Program Files\OFFICE One6.5
                  [24/02/2006|13:58] C:\Program Files\Online Services
                  [01/03/2009|12:00] C:\Program Files\OpenOffice.org 3
                  [01/03/2009|11:58] C:\Program Files\OpenOffice.org 3.0 (fr) Installation Files
                  [18/07/2009|20:34] C:\Program Files\Orange HSS
                  [13/08/2009|13:46] C:\Program Files\Outlook Express
                  [18/06/2008|18:00] C:\Program Files\PhotoFiltre Studio
                  [04/04/2009|13:52] C:\Program Files\PhotoScape
                  [17/10/2007|13:14] C:\Program Files\Picasa2
                  [14/03/2007|20:05] C:\Program Files\QuickTime
                  [27/11/2006|18:34] C:\Program Files\Real
                  [08/02/2007|20:03] C:\Program Files\Realtek Sound Manager
                  [23/08/2009|00:21] C:\Program Files\Reference Assemblies
                  [18/01/2008|18:20] C:\Program Files\SAGEM
                  [06/03/2007|12:42] C:\Program Files\ScanSoft
                  [04/09/2008|18:17] C:\Program Files\Seagrand
                  [18/07/2009|20:32] C:\Program Files\Securitoo
                  [24/02/2006|14:00] C:\Program Files\Services en ligne
                  [02/07/2006|18:05] C:\Program Files\SigmaTel
                  [25/12/2007|21:55] C:\Program Files\Sony
                  [18/08/2009|18:58] C:\Program Files\trend micro
                  [24/02/2006|19:26] C:\Program Files\Trust
                  [29/07/2009|23:02] C:\Program Files\Ulead Systems
                  [13/06/2008|22:40] C:\Program Files\UnFREEz
                  [24/02/2006|14:06] C:\Program Files\Uninstall Information
                  [02/02/2009|10:35] C:\Program Files\uTorrent
                  [05/12/2008|14:51] C:\Program Files\Veoh Networks
                  [18/05/2009|09:28] C:\Program Files\VideoLAN
                  [17/07/2008|17:33] C:\Program Files\Way start fork
                  [02/08/2009|22:52] C:\Program Files\Windows Live
                  [24/03/2009|17:46] C:\Program Files\Windows Live SkyDrive
                  [20/11/2008|19:03] C:\Program Files\Windows Media Connect 2
                  [07/10/2008|15:18] C:\Program Files\Windows Media Player
                  [07/10/2008|15:18] C:\Program Files\Windows NT
                  [24/02/2006|14:00] C:\Program Files\WindowsUpdate
                  [24/02/2006|14:02] C:\Program Files\xerox
                  [02/02/2007|18:52] C:\Program Files\XviD
                  [04/06/2009|17:44] C:\Program Files\Yahoo!

                  --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

                  [16/03/2008|16:14] C:\Program Files\Fichiers communs\Adobe
                  [24/02/2006|14:22] C:\Program Files\Fichiers communs\Ahead
                  [24/02/2006|19:19] C:\Program Files\Fichiers communs\ArcSoft
                  [24/02/2006|14:33] C:\Program Files\Fichiers communs\Borland Shared
                  [24/02/2006|14:32] C:\Program Files\Fichiers communs\Ciel
                  [22/12/2006|21:16] C:\Program Files\Fichiers communs\DESIGNER
                  [19/07/2009|21:30] C:\Program Files\Fichiers communs\DivX Shared
                  [18/01/2008|18:24] C:\Program Files\Fichiers communs\France Telecom
                  [02/02/2007|18:48] C:\Program Files\Fichiers communs\InstallShield
                  [22/09/2008|17:04] C:\Program Files\Fichiers communs\Java
                  [04/06/2009|18:49] C:\Program Files\Fichiers communs\Microsoft Shared
                  [24/02/2006|14:00] C:\Program Files\Fichiers communs\MSSoap
                  [24/02/2006|14:24] C:\Program Files\Fichiers communs\Nero
                  [24/02/2006|21:09] C:\Program Files\Fichiers communs\ODBC
                  [24/02/2006|19:26] C:\Program Files\Fichiers communs\PCCamera
                  [27/11/2006|18:34] C:\Program Files\Fichiers communs\Real
                  [06/03/2007|12:42] C:\Program Files\Fichiers communs\ScanSoft Shared
                  [24/02/2006|14:00] C:\Program Files\Fichiers communs\Services
                  [15/04/2007|13:26] C:\Program Files\Fichiers communs\Sony Shared
                  [24/02/2006|21:09] C:\Program Files\Fichiers communs\SpeechEngines
                  [07/10/2008|15:18] C:\Program Files\Fichiers communs\System
                  [29/07/2007|13:53] C:\Program Files\Fichiers communs\Ulead Systems
                  [24/03/2009|17:40] C:\Program Files\Fichiers communs\Windows Live
                  [18/01/2008|19:01] C:\Program Files\Fichiers communs\WindowsLiveInstaller

                  --------------------\\ Process

                  ( 55 Processes )

                  ... OK !

                  --------------------\\ Recherche avec S_Lop

                  Aucun fichier / dossier Lop trouvé !

                  --------------------\\ Recherche de Fichiers / Dossiers Lop

                  C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@d2.advertserve[1].txt

                  --------------------\\ Verification du Registre

                  ..... OK !

                  --------------------\\ Verification du fichier Hosts

                  Fichier Hosts PROPRE

                  --------------------\\ Recherche de fichiers avec Catchme

                  catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                  Rootkit scan 2009-09-05 14:29:56
                  Windows 5.1.2600 Service Pack 3 NTFS
                  scanning hidden processes ...
                  scanning hidden files ...
                  scan completed successfully
                  hidden processes: 0
                  hidden files: 694

                  --------------------\\ Recherche d'autres infections

                  Aucune autre infection trouvée !

                  [F:3198][D:137]-> C:\DOCUME~1\M1374~1.MOL\LOCALS~1\Temp
                  [F:5246][D:0]-> C:\DOCUME~1\M1374~1.MOL\Cookies
                  [F:15236][D:113]-> C:\DOCUME~1\M1374~1.MOL\LOCALS~1\TEMPOR~1\content.IE5

                  1 - "C:\Lop SD\LopR_1.txt" - 03/09/2009|10:46 - Option : [1]
                  2 - "C:\Lop SD\LopR_2.txt" - 05/09/2009|14:32 - Option : [2]

                  --------------------\\ Fin du rapport a 14:32:12
                  0
                  1. pimprenelle27 Contributeur sécurité
                    bonjour,

                    alors dans l'ordre :

                    en 1er :

                    Télécharge HostsXpert sur ton Bureau :

                    ---> Décompresse-le (Clic droit >> Extraire ici)

                    ---> Double-clique sur HostsXpert pour le lancer

                    ---> clique sur le bouton "Restore MS Hosts File" puis ferme le programme

                    PS : Avant de cliquer sur le bouton "Restore MS Hosts File", vérifie que le cadenas en haut à gauche est ouvert sinon tu vas avoir un message d'erreur.

                    Pour ceux qui ont vista, ne pas oublier de désactiver Le contrôle des comptes utilisateurs

                    En 2ème :

                    ▶ Relance Lop S&D

                    ▶ Choisis cette fois-ci l'option 2 (Suppression)

                    ▶ Ne ferme pas la fenêtre lors de la suppression !

                    ▶ Poste le rapport généré (C:\lopR.txt)

                    * (Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)
                    0
                    1. Lenalee
                      Le rapport après la recherche :

                      "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
                      Option : [1] ( 03/09/2009|10:42 )

                      --------------------\\ Listing des dossiers dans APPLIC~1

                      [16/03/2008|16:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
                      [27/11/2006|18:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\America Online
                      [19/08/2009|10:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
                      [24/09/2007|17:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Bluetooth
                      [06/03/2007|12:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CanonBJ
                      [24/02/2006|14:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ciel
                      [24/02/2006|14:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
                      [04/06/2009|18:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Electronic Arts
                      [18/04/2008|13:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\F-Secure
                      [11/02/2008|12:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\fssg
                      [25/12/2008|11:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
                      [23/09/2008|18:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grid Blue Memo Site
                      [06/03/2007|12:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
                      [18/01/2008|23:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
                      [04/06/2009|18:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
                      [06/11/2006|19:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
                      [06/03/2007|12:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
                      [15/04/2007|13:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Corporation
                      [08/03/2009|14:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
                      [25/12/2007|19:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
                      [01/08/2009|20:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

                      [24/02/2006|14:02] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

                      [26/02/2006|12:08] C:\DOCUME~1\INVIT~1\APPLIC~1\Identities
                      [26/02/2006|12:08] C:\DOCUME~1\INVIT~1\APPLIC~1\Microsoft

                      [25/12/2007|19:39] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

                      [25/09/2008|18:42] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Adobe
                      [12/03/2008|13:34] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\AdobeUM
                      [08/03/2007|22:16] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\ArcSoft
                      [16/03/2007|19:21] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Canon
                      [04/03/2006|21:52] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\CyberLink
                      [04/06/2009|17:41] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Desperate Housewives
                      [19/01/2008|21:30] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\F-Secure
                      [07/03/2008|22:44] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Google
                      [13/03/2006|20:09] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Help
                      [24/02/2006|14:06] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Identities
                      [09/04/2008|17:46] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Jasc
                      [29/12/2006|14:42] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\La Bataille pour la Terre du Milieu
                      [12/06/2008|21:10] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Leadertech
                      [08/01/2009|17:16] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\LimeWire
                      [24/02/2006|14:39] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Macromedia
                      [31/01/2007|19:17] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Media Player Classic
                      [04/06/2009|18:49] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Microsoft
                      [21/07/2009|16:23] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Mozilla
                      [18/01/2008|18:34] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\MSNInstaller
                      [09/12/2008|18:27] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\My Stitch
                      [03/07/2009|19:48] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\OFFICE One v6
                      [01/03/2009|12:03] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\OpenOffice.org
                      [22/06/2009|19:47] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Opera
                      [06/03/2007|12:42] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\ScanSoft
                      [22/09/2008|17:06] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Sun
                      [08/03/2009|14:13] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Ulead Systems
                      [02/09/2009|19:03] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\uTorrent
                      [18/05/2009|09:29] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\vlc
                      [23/09/2008|18:07] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Way start fork
                      [05/08/2008|10:53] C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Yahoo!

                      [24/02/2006|14:04] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

                      [26/09/2008|16:59] C:\DOCUME~1\PAPAET~1\APPLIC~1\Adobe
                      [05/05/2008|18:30] C:\DOCUME~1\PAPAET~1\APPLIC~1\Google
                      [24/02/2006|20:23] C:\DOCUME~1\PAPAET~1\APPLIC~1\Identities
                      [11/06/2008|15:26] C:\DOCUME~1\PAPAET~1\APPLIC~1\InstallShield
                      [29/01/2008|19:55] C:\DOCUME~1\PAPAET~1\APPLIC~1\Macromedia
                      [28/05/2008|17:08] C:\DOCUME~1\PAPAET~1\APPLIC~1\Microsoft
                      [23/09/2008|18:34] C:\DOCUME~1\PAPAET~1\APPLIC~1\Way start fork

                      [24/11/2008|19:59] C:\DOCUME~1\Romain\APPLIC~1\Adobe
                      [06/08/2009|16:14] C:\DOCUME~1\Romain\APPLIC~1\Canon
                      [08/06/2008|16:18] C:\DOCUME~1\Romain\APPLIC~1\Google
                      [15/06/2006|17:16] C:\DOCUME~1\Romain\APPLIC~1\Identities
                      [03/02/2008|00:15] C:\DOCUME~1\Romain\APPLIC~1\Macromedia
                      [13/08/2009|11:45] C:\DOCUME~1\Romain\APPLIC~1\Microsoft
                      [10/08/2009|22:47] C:\DOCUME~1\Romain\APPLIC~1\Mozilla
                      [07/04/2009|15:12] C:\DOCUME~1\Romain\APPLIC~1\OpenOffice.org
                      [28/08/2008|14:06] C:\DOCUME~1\Romain\APPLIC~1\Yahoo!

                      [25/09/2008|23:57] C:\DOCUME~1\Rosy\APPLIC~1\Adobe
                      [15/03/2006|16:59] C:\DOCUME~1\Rosy\APPLIC~1\ArcSoft
                      [31/05/2006|21:04] C:\DOCUME~1\Rosy\APPLIC~1\CyberLink
                      [11/03/2008|23:11] C:\DOCUME~1\Rosy\APPLIC~1\Google
                      [27/02/2006|17:52] C:\DOCUME~1\Rosy\APPLIC~1\Identities
                      [01/05/2008|17:18] C:\DOCUME~1\Rosy\APPLIC~1\Macromedia
                      [26/07/2007|22:32] C:\DOCUME~1\Rosy\APPLIC~1\Media Player Classic
                      [01/05/2008|09:40] C:\DOCUME~1\Rosy\APPLIC~1\Microsoft
                      [06/03/2009|09:19] C:\DOCUME~1\Rosy\APPLIC~1\OpenOffice.org
                      [19/07/2009|09:14] C:\DOCUME~1\Rosy\APPLIC~1\Opera
                      [30/08/2009|06:42] C:\DOCUME~1\Rosy\APPLIC~1\Search Settings
                      [31/05/2009|18:30] C:\DOCUME~1\Rosy\APPLIC~1\vlc
                      [23/09/2008|18:36] C:\DOCUME~1\Rosy\APPLIC~1\Way start fork
                      [09/08/2008|07:23] C:\DOCUME~1\Rosy\APPLIC~1\Yahoo!

                      --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

                      [03/09/2009 10:41][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-117609710-1960408961-725345543-1008UA.job
                      [01/09/2009 13:41][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-117609710-1960408961-725345543-1008Core.job
                      [03/09/2009 10:30][--ah-----] C:\WINDOWS\tasks\User_Feed_Synchronization-{6200B771-E16A-4F11-A3EF-C5759A382D35}.job
                      [03/09/2009 10:26][--ah-----] C:\WINDOWS\tasks\SA.DAT
                      [05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

                      --------------------\\ Listing des dossiers dans C:\Program Files

                      [03/05/2009|16:07] C:\Program Files\Adobe
                      [24/02/2006|14:23] C:\Program Files\Ahead
                      [19/08/2009|10:47] C:\Program Files\Alwil Software
                      [19/08/2009|10:45] C:\Program Files\AntivirusFirewall
                      [06/03/2007|12:41] C:\Program Files\ArcSoft
                      [19/08/2009|10:35] C:\Program Files\Avira
                      [24/02/2006|14:14] C:\Program Files\AvRack
                      [29/12/2006|14:55] C:\Program Files\Buena Vista Games
                      [06/03/2007|12:44] C:\Program Files\Canon
                      [06/03/2007|12:38] C:\Program Files\CanonBJ
                      [24/02/2006|14:32] C:\Program Files\Ciel
                      [25/12/2007|19:31] C:\Program Files\Common Files
                      [24/02/2006|13:59] C:\Program Files\ComPlus Applications
                      [24/02/2006|14:17] C:\Program Files\CyberLink
                      [08/08/2009|21:54] C:\Program Files\DivX
                      [28/01/2007|11:49] C:\Program Files\EA GAMES
                      [04/06/2009|18:49] C:\Program Files\Electronic Arts
                      [19/07/2009|21:30] C:\Program Files\Fichiers communs
                      [02/09/2009|19:09] C:\Program Files\Free Video Converter
                      [25/12/2008|18:10] C:\Program Files\Google
                      [08/03/2007|20:42] C:\Program Files\Imprimante
                      [04/06/2009|18:33] C:\Program Files\InstallShield Installation Information
                      [02/02/2007|18:54] C:\Program Files\Intel
                      [11/01/2008|18:52] C:\Program Files\InterActual
                      [23/08/2009|00:18] C:\Program Files\Internet Explorer
                      [24/02/2006|14:35] C:\Program Files\ISSENDIS
                      [24/09/2007|17:11] C:\Program Files\IVT Corporation
                      [09/04/2008|17:35] C:\Program Files\Jasc Software Inc
                      [03/05/2009|10:56] C:\Program Files\Java
                      [24/02/2006|14:35] C:\Program Files\Kaspersky Lab
                      [31/01/2007|19:16] C:\Program Files\K-Lite Codec Pack
                      [27/02/2007|21:14] C:\Program Files\Maxis
                      [20/11/2008|19:03] C:\Program Files\Messenger
                      [01/08/2009|20:51] C:\Program Files\Messenger Plus! Live
                      [24/03/2009|18:12] C:\Program Files\MessengerPlus! 3
                      [19/01/2008|11:23] C:\Program Files\Microsoft CAPICOM 2.1.0.2
                      [24/02/2006|14:02] C:\Program Files\microsoft frontpage
                      [22/12/2006|21:14] C:\Program Files\Microsoft Office
                      [14/03/2007|19:55] C:\Program Files\Microsoft R‚f‚rence
                      [01/08/2009|11:21] C:\Program Files\Microsoft Silverlight
                      [01/08/2009|20:34] C:\Program Files\Microsoft SQL Server Compact Edition
                      [04/06/2009|18:49] C:\Program Files\Microsoft WSE
                      [22/12/2006|21:16] C:\Program Files\Microsoft.NET
                      [02/02/2009|11:25] C:\Program Files\Movie Maker
                      [01/09/2009|19:04] C:\Program Files\Mozilla Firefox
                      [23/08/2009|00:21] C:\Program Files\MSBuild
                      [02/03/2006|14:11] C:\Program Files\MSN
                      [24/02/2006|13:58] C:\Program Files\MSN Gaming Zone
                      [19/01/2008|00:27] C:\Program Files\MSXML 4.0
                      [07/10/2008|15:18] C:\Program Files\NetMeeting
                      [04/07/2009|14:20] C:\Program Files\OFFICE One6.5
                      [24/02/2006|13:58] C:\Program Files\Online Services
                      [01/03/2009|12:00] C:\Program Files\OpenOffice.org 3
                      [01/03/2009|11:58] C:\Program Files\OpenOffice.org 3.0 (fr) Installation Files
                      [18/07/2009|20:34] C:\Program Files\Orange HSS
                      [13/08/2009|13:46] C:\Program Files\Outlook Express
                      [18/06/2008|18:00] C:\Program Files\PhotoFiltre Studio
                      [04/04/2009|13:52] C:\Program Files\PhotoScape
                      [17/10/2007|13:14] C:\Program Files\Picasa2
                      [14/03/2007|20:05] C:\Program Files\QuickTime
                      [27/11/2006|18:34] C:\Program Files\Real
                      [08/02/2007|20:03] C:\Program Files\Realtek Sound Manager
                      [23/08/2009|00:21] C:\Program Files\Reference Assemblies
                      [18/01/2008|18:20] C:\Program Files\SAGEM
                      [06/03/2007|12:42] C:\Program Files\ScanSoft
                      [04/09/2008|18:17] C:\Program Files\Seagrand
                      [18/07/2009|20:32] C:\Program Files\Securitoo
                      [24/02/2006|14:00] C:\Program Files\Services en ligne
                      [02/07/2006|18:05] C:\Program Files\SigmaTel
                      [25/12/2007|21:55] C:\Program Files\Sony
                      [18/08/2009|18:58] C:\Program Files\trend micro
                      [24/02/2006|19:26] C:\Program Files\Trust
                      [29/07/2009|23:02] C:\Program Files\Ulead Systems
                      [13/06/2008|22:40] C:\Program Files\UnFREEz
                      [24/02/2006|14:06] C:\Program Files\Uninstall Information
                      [02/02/2009|10:35] C:\Program Files\uTorrent
                      [05/12/2008|14:51] C:\Program Files\Veoh Networks
                      [18/05/2009|09:28] C:\Program Files\VideoLAN
                      [17/07/2008|17:33] C:\Program Files\Way start fork
                      [02/08/2009|22:52] C:\Program Files\Windows Live
                      [24/03/2009|17:46] C:\Program Files\Windows Live SkyDrive
                      [20/11/2008|19:03] C:\Program Files\Windows Media Connect 2
                      [07/10/2008|15:18] C:\Program Files\Windows Media Player
                      [07/10/2008|15:18] C:\Program Files\Windows NT
                      [24/02/2006|14:00] C:\Program Files\WindowsUpdate
                      [24/02/2006|14:02] C:\Program Files\xerox
                      [02/02/2007|18:52] C:\Program Files\XviD
                      [04/06/2009|17:44] C:\Program Files\Yahoo!

                      --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

                      [16/03/2008|16:14] C:\Program Files\Fichiers communs\Adobe
                      [24/02/2006|14:22] C:\Program Files\Fichiers communs\Ahead
                      [24/02/2006|19:19] C:\Program Files\Fichiers communs\ArcSoft
                      [24/02/2006|14:33] C:\Program Files\Fichiers communs\Borland Shared
                      [24/02/2006|14:32] C:\Program Files\Fichiers communs\Ciel
                      [22/12/2006|21:16] C:\Program Files\Fichiers communs\DESIGNER
                      [19/07/2009|21:30] C:\Program Files\Fichiers communs\DivX Shared
                      [18/01/2008|18:24] C:\Program Files\Fichiers communs\France Telecom
                      [02/02/2007|18:48] C:\Program Files\Fichiers communs\InstallShield
                      [22/09/2008|17:04] C:\Program Files\Fichiers communs\Java
                      [04/06/2009|18:49] C:\Program Files\Fichiers communs\Microsoft Shared
                      [24/02/2006|14:00] C:\Program Files\Fichiers communs\MSSoap
                      [24/02/2006|14:24] C:\Program Files\Fichiers communs\Nero
                      [24/02/2006|21:09] C:\Program Files\Fichiers communs\ODBC
                      [24/02/2006|19:26] C:\Program Files\Fichiers communs\PCCamera
                      [27/11/2006|18:34] C:\Program Files\Fichiers communs\Real
                      [06/03/2007|12:42] C:\Program Files\Fichiers communs\ScanSoft Shared
                      [24/02/2006|14:00] C:\Program Files\Fichiers communs\Services
                      [15/04/2007|13:26] C:\Program Files\Fichiers communs\Sony Shared
                      [24/02/2006|21:09] C:\Program Files\Fichiers communs\SpeechEngines
                      [07/10/2008|15:18] C:\Program Files\Fichiers communs\System
                      [29/07/2007|13:53] C:\Program Files\Fichiers communs\Ulead Systems
                      [24/03/2009|17:40] C:\Program Files\Fichiers communs\Windows Live
                      [18/01/2008|19:01] C:\Program Files\Fichiers communs\WindowsLiveInstaller

                      --------------------\\ Process

                      ( 60 Processes )

                      IEXPLORE.EXE ~ [PID:1216]
                      IEXPLORE.EXE ~ [PID:1584]

                      --------------------\\ Recherche avec S_Lop

                      Aucun fichier / dossier Lop trouvé !

                      --------------------\\ Recherche de Fichiers / Dossiers Lop

                      C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grid Blue Memo Site
                      C:\DOCUME~1\M1374~1.MOL\LOCALS~1\Temp\msgpl_155c.exe
                      C:\DOCUME~1\M1374~1.MOL\LOCALS~1\Temp\nshF.tmp
                      C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@advertstream[1].txt
                      C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@imagevenue.advertserve[2].txt
                      C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@www.adserver5[1].txt
                      C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@adultfriendfinder[2].txt
                      C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@advertising[2].txt
                      C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@advertising[3].txt
                      C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@adin.bigpoint[2].txt
                      C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@bigpoint[2].txt
                      C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@fr1.darkorbit.bigpoint[2].txt
                      C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@fr1.seafight.bigpoint[1].txt
                      C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@banner.casinoking[2].txt
                      C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@casinoking[1].txt
                      C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@cotedazurpalace[2].txt
                      C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@adopt.euroclick[2].txt
                      C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@euroclick[2].txt
                      C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@pacificpoker[2].txt
                      C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@partygaming.122.2o7[1].txt
                      C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@partypoker[2].txt
                      C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@fr1.seafight.bigpoint[1].txt
                      C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@32vegas[2].txt
                      C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@banner.32vegas[2].txt
                      C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@cachewww.32vegas[2].txt
                      C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@vegasred[2].txt
                      C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@www.vegasred[2].txt
                      C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@www.lop[1].txt
                      C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@2xmoinscher[1].txt
                      C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@cc.2xmoinscher[2].txt
                      C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@www.2xmoinscher[1].txt
                      C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@888[1].txt
                      C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@888[2].txt

                      --------------------\\ Verification du Registre

                      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

                      ..... OK !

                      --------------------\\ Verification du fichier Hosts

                      Fichier Hosts MODIFIE

                      127.0.0.1 bin.errorprotector.com ## added by CiD
                      127.0.0.1 br.errorsafe.com ## added by CiD
                      127.0.0.1 br.winantivirus.com ## added by CiD
                      127.0.0.1 br.winfixer.com ## added by CiD
                      127.0.0.1 cdn.drivecleaner.com ## added by CiD
                      127.0.0.1 cdn.errorsafe.com ## added by CiD
                      127.0.0.1 cdn.winsoftware.com ## added by CiD
                      127.0.0.1 de.errorsafe.com ## added by CiD
                      127.0.0.1 de.winantivirus.com ## added by CiD
                      127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
                      127.0.0.1 download.cdn.errorsafe.com ## added by CiD
                      127.0.0.1 download.cdn.winsoftware.com ## added by CiD
                      127.0.0.1 download.errorsafe.com ## added by CiD
                      127.0.0.1 download.systemdoctor.com ## added by CiD
                      127.0.0.1 download.winantispyware.com ## added by CiD
                      127.0.0.1 download.windrivecleaner.com ## added by CiD
                      127.0.0.1 download.winfixer.com ## added by CiD
                      127.0.0.1 drivecleaner.com ## added by CiD
                      127.0.0.1 dynamique.drivecleaner.com ## added by CiD
                      127.0.0.1 errorprotector.com ## added by CiD
                      127.0.0.1 errorsafe.com ## added by CiD
                      127.0.0.1 es.winantivirus.com ## added by CiD
                      127.0.0.1 fr.winantivirus.com ## added by CiD
                      127.0.0.1 fr.winfixer.com ## added by CiD
                      127.0.0.1 go.drivecleaner.com ## added by CiD
                      127.0.0.1 go.errorsafe.com ## added by CiD
                      127.0.0.1 go.winantispyware.com ## added by CiD
                      127.0.0.1 go.winantivirus.com ## added by CiD
                      127.0.0.1 hk.winantivirus.com ## added by CiD
                      127.0.0.1 instlog.errorsafe.com ## added by CiD
                      127.0.0.1 instlog.winantivirus.com ## added by CiD
                      127.0.0.1 instlog.winfixer.com ## added by CiD
                      127.0.0.1 jsp.drivecleaner.com ## added by CiD
                      127.0.0.1 kb.errorsafe.com ## added by CiD
                      127.0.0.1 kb.winantivirus.com ## added by CiD
                      127.0.0.1 nl.errorsafe.com ## added by CiD
                      127.0.0.1 se.errorsafe.com ## added by CiD
                      127.0.0.1 secure.drivecleaner.com ## added by CiD
                      127.0.0.1 secure.errorsafe.com ## added by CiD
                      127.0.0.1 secure.winantispam.com ## added by CiD
                      127.0.0.1 secure.winantispy.com ## added by CiD
                      127.0.0.1 secure.winantivirus.com ## added by CiD
                      127.0.0.1 support.winantivirus.com ## added by CiD
                      127.0.0.1 trial.updates.winsoftware.com ## added by CiD
                      127.0.0.1 ulog.winantivirus.com ## added by CiD
                      127.0.0.1 utils.errorsafe.com ## added by CiD
                      127.0.0.1 utils.winantivirus.com ## added by CiD
                      127.0.0.1 utils.winfixer.com ## added by CiD
                      127.0.0.1 winantispyware.com ## added by CiD
                      127.0.0.1 winantivirus.com ## added by CiD
                      127.0.0.1 winfixer.com ## added by CiD
                      127.0.0.1 winfixer2006.com ## added by CiD
                      127.0.0.1 winsoftware.com ## added by CiD
                      127.0.0.1 [i]ww/iw.drivecleaner.com ## added by CiD
                      127.0.0.1 [i]ww/iw.errorprotector.com ## added by CiD
                      127.0.0.1 [i]ww/iw.errorsafe.com ## added by CiD
                      127.0.0.1 [i]ww/iw.systemdoctor.com ## added by CiD
                      127.0.0.1 [i]ww/iw.utils.winfixer.com ## added by CiD
                      127.0.0.1 [i]ww/iw.win-anti-virus-pro.com ## added by CiD
                      127.0.0.1 [i]ww/iw.win-virus-pro.com ## added by CiD
                      127.0.0.1 [i]ww/iw.winantispam.com ## added by CiD
                      127.0.0.1 [i]ww/iw.winantispy.com ## added by CiD
                      127.0.0.1 [i]ww/iw.winantispyware.com ## added by CiD
                      127.0.0.1 [i]ww/iw.winantivirus.com ## added by CiD
                      127.0.0.1 [i]ww/iw.winantiviruspro.com ## added by CiD
                      127.0.0.1 [i]ww/iw.windrivecleaner.com ## added by CiD
                      127.0.0.1 [i]ww/iw.windrivesafe.com ## added by CiD
                      127.0.0.1 [i]ww/iw.winfixer.com ## added by CiD
                      127.0.0.1 [i]ww/iw.winfixer2006.com ## added by CiD
                      127.0.0.1 [i]ww/iw.winsoftware.com ## added by CiD

                      -> 72 [ 70 ## added by CiD ]

                      --------------------\\ Recherche de fichiers avec Catchme

                      catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                      Rootkit scan 2009-09-03 10:43:26
                      Windows 5.1.2600 Service Pack 3 NTFS
                      scanning hidden processes ...
                      scanning hidden files ...
                      scan completed successfully
                      hidden processes: 0
                      hidden files: 694

                      --------------------\\ Recherche d'autres infections

                      Aucune autre infection trouvée !

                      [F:3442][D:137]-> C:\DOCUME~1\M1374~1.MOL\LOCALS~1\Temp
                      [F:5248][D:0]-> C:\DOCUME~1\M1374~1.MOL\Cookies
                      [F:14780][D:113]-> C:\DOCUME~1\M1374~1.MOL\LOCALS~1\TEMPOR~1\content.IE5

                      1 - "C:\Lop SD\LopR_1.txt" - 03/09/2009|10:46 - Option : [1]

                      --------------------\\ Fin du rapport a 10:46:51
                      0
                      1. pimprenelle27 Contributeur sécurité
                        Ensuite ceci afin de voir l'infection cid qui me semble bizarre :

                        Il y a des infections LOP dans ton PC.
                        Elles s'installent via certains programmes, dont ceux-ci :

                        ● Le sponsor de Messenger Plus!
                        ● Bittorent
                        ● BitDownload
                        ● BitGrabber
                        ● NetPumper
                        ● BitRoll
                        ● TorrentQ
                        ● Torrent101

                        /!\ Fais attention de ne pas faire la même erreur, donc évite ces programmes /!\

                        ▶ Télécharger et enregistrer lopSD sur le Bureau

                        ▶ Double-clic Lop S&D

                        ▶ Faire l'installation

                        ▶ Fermer toutes les applications

                        ▶ Le lancer par un double-clic sur le raccourci qui est sur le bureau

                        ▶ Avec VISTA => clic-droit et => Exécuter en tant qu'administrateur

                        ▶ Taper F pour français , puis presser entrée

                        ▶ Taper 1

                        ▶ Presser Entrée

                        ▶ Le PC va redémarrer

                        * Note : si l'antivirus annonce une infection dans TEMP , l'ignorer

                        ▶ Attendre l'apparition du rapport

                        ▶ Copier le rapport et le coller dans la réponse

                        * le rapport se trouve aussi à C:\lopR

                        0
                        1. Lenalee
                          Alors ça va ^.^
                          Suppression faite, voici le rapport :

                          -----------\\ ToolBar S&D 1.2.9 XP/Vista

                          Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
                          X86-based PC ( Uniprocessor Free : AMD Sempron(tm) Processor 3100+ )
                          BIOS : Default System BIOS
                          USER : M.MOLLICA ( Administrator )
                          BOOT : Normal boot
                          Antivirus : AntiVir Desktop 9.0.1.32 (Activated)
                          A:\ (USB)
                          C:\ (Local Disk) - NTFS - Total:152 Go (Free:58 Go)
                          D:\ (CD or DVD)
                          E:\ (CD or DVD)
                          F:\ (USB)
                          G:\ (USB)
                          H:\ (USB)
                          I:\ (USB)

                          "C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
                          Option : [2] ( 23/08/2009|16:36 )

                          -----------\\ SUPPRESSION

                          Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@bananalotto[2].txt
                          Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@www.bananalotto[1].txt
                          Supprime! - C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\dinstallhelper.88B2094DB6DC4EF5A9EF42E6845596E5.dll
                          Supprime! - C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\dinstallhelper.8F2DC070BA2F4E47B79E80B7CBF84210.dll
                          Supprime! - C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\dinstallhelper.9009441506D5431686DD5ED90DDC5AB7.dll
                          Supprime! - C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\dinstallhelper.A33FB413DDF5450AA7E2AEB2A364A79C.dll
                          Supprime! - C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\dinstallhelper.A7A369EFE9924DC39D88CA05318E40AC.dll
                          Supprime! - C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\dinstallhelper.A841B74133124EF294387AEBA8301F10.dll
                          Supprime! - C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\dinstallhelper.C8F5A7B3F77944DC887986FC80A4FBCB.dll
                          Supprime! - C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127
                          Supprime! - C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127
                          Supprime! - C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127
                          Supprime! - C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Dealio
                          Supprime! - C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@hosted.platrium[2].txt
                          Supprime! - C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Search Settings\kb127
                          Supprime! - C:\DOCUME~1\Romain\APPLIC~1\Search Settings\kb127
                          Supprime! - C:\DOCUME~1\Rosy\APPLIC~1\Search Settings\kb127
                          Supprime! - C:\Program Files\Search Settings\kb127
                          Supprime! - C:\Program Files\Search Settings\SearchSettings.exe
                          Supprime! - C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio
                          Supprime! - C:\DOCUME~1\Romain\APPLIC~1\Dealio
                          Supprime! - C:\DOCUME~1\Rosy\APPLIC~1\Dealio
                          Supprime! - C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Search Settings
                          Supprime! - C:\DOCUME~1\Romain\APPLIC~1\Search Settings
                          Supprime! - C:\DOCUME~1\Rosy\APPLIC~1\Search Settings
                          Supprime! - C:\Program Files\Search Settings

                          -----------\\ Recherche de Fichiers / Dossiers ...

                          -----------\\ Extensions

                          (M.MOLLICA) - {64161300-e22b-11db-8314-0800200c9a66} => speeddial

                          -----------\\ [..\Internet Explorer\Main]

                          [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
                          "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
                          "Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"
                          "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
                          "SearchMigratedDefaultURL"="https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&src={referrer:source?}"
                          "Start Page Redirect Cache"="https://www.msn.com/fr-fr?ocid=iehp"

                          [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
                          "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
                          "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
                          "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
                          "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
                          "Start Page"="https://www.msn.com/fr-fr/"

                          --------------------\\ Recherche d'autres infections

                          Aucune autre infection trouvée !

                          1 - "C:\ToolBar SD\TB_1.txt" - 23/08/2009|13:02 - Option : [1]
                          2 - "C:\ToolBar SD\TB_2.txt" - 23/08/2009|16:41 - Option : [2]

                          -----------\\ Fin du rapport a 16:41:34,87
                          0
                          1. pimprenelle27 Contributeur sécurité
                            non ça ne supprime que les virus ne t'inquiète pas.
                            0
                            1. Lenalee
                              J'ai quand même une question : est-ce qu'il y a des risques que ça supprime des dossiers de photos ou autres ?
                              0
                              1. pimprenelle27 Contributeur sécurité
                                alors Madmind tu dis plus rien là en voyant toute ces infections :

                                Lenalee il en a trouvé des choses tool bar, maintenant option de suppression de tool bar :

                                ▶ Relance Toolbar-S&D.

                                ▶ Tape sur "2" puis valide en appuyant sur "Entrée".

                                /!\ Ne ferme pas la fenêtre lors de la suppression /!\

                                ▶ Un rapport sera généré, poste son contenu ici.

                                NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.
                                Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."
                                Tape explorer puis valide.

                                Ce qu'il faut savoir sur les toolbars (barres d'outils)
                                0
                                1. Lenalee
                                  Voilà 2e étape finie, je mets le rapport :

                                  "C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
                                  Option : [1] ( 23/08/2009|12:59 )

                                  -----------\\ Recherche de Fichiers / Dossiers ...

                                  C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@bananalotto[2].txt
                                  C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@www.bananalotto[1].txt
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\dinstallhelper.88B2094DB6DC4EF5A9EF42E6845596E5.dll
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\dinstallhelper.8F2DC070BA2F4E47B79E80B7CBF84210.dll
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\dinstallhelper.9009441506D5431686DD5ED90DDC5AB7.dll
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\dinstallhelper.A33FB413DDF5450AA7E2AEB2A364A79C.dll
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\dinstallhelper.A7A369EFE9924DC39D88CA05318E40AC.dll
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\dinstallhelper.A841B74133124EF294387AEBA8301F10.dll
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\dinstallhelper.C8F5A7B3F77944DC887986FC80A4FBCB.dll
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\temp
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\alerts.gif
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\alerts_over.gif
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\alerts_rec.gif
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\alerts_rec_over.gif
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\chevron-small.gif
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\DealioSearch.html
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\deals-leftcap.gif
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\deal_report.jpg
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\ebay_login.jpg
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\err_mainwindow.html
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\err_toolbar.html
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\global_scripts.js
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\headerbgthin.jpg
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\highlight-bg.png
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\logo.gif
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\logo_over.gif
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\man_toolbar.css
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\man_toolbar.html
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\man_toolbar.js
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\man_toolbarl.js
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\post-this-deal.gif
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\post-this-deal_over.gif
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\scripts.js
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\scroller.js
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\search-chevron.gif
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\search-chevron_over.gif
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\search_bg_blink.gif
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\separator.gif
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\settings.gif
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\settings_over.gif
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\res\yahoo-search.png
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\index.76.35
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.10.76
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.109.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.110.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.12.52
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.13.58
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.130.58
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.135.50
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.153.44
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.155.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.156.49
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.16.60
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.161.52
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.178.66
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.184.55
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.188.52
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.189.45
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.196.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.198.56
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.199.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.200.53
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.201.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.202.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.203.71
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.205.62
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.213.71
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.214.49
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.215.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.216.67
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.217.67
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.218.52
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.219.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.220.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.221.57
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.222.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.223.68
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.226.68
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.227.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.228.62
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.229.76
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.23.63
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.239.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.24.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.240.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.241.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.242.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.243.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.244.63
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.245.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.247.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.248.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.249.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.250.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.251.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.252.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.253.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.254.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.255.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.256.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.257.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.279.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.28.58
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.282.75
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.283.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.284.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.289.67
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.290.62
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.291.61
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.296.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.297.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.304.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.307.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.308.75
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.31.47
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.310.46
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.311.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.315.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.316.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.317.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.318.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.319.49
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.32.48
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.334.44
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.335.60
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.336.44
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.337.44
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.338.75
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.339.47
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.34.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.340.47
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.341.47
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.349.50
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.35.48
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.350.50
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.351.51
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.352.54
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.353.51
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.354.51
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.357.62
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.358.52
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.359.52
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.360.53
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.361.54
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.362.68
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.363.58
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.364.54
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.365.53
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.367.56
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.368.58
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.369.55
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.370.56
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.371.56
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.372.57
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.373.55
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.375.56
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.376.57
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.377.55
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.378.65
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.384.58
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.386.71
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.387.59
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.388.59
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.389.59
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.390.60
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.391.60
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.392.60
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.393.60
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.394.60
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.396.61
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.397.61
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.398.60
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.399.60
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.403.61
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.404.63
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.405.61
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.406.61
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.407.76
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.408.63
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.409.61
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.412.62
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.413.62
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.414.62
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.415.62
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.416.62
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.417.62
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.418.62
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.419.62
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.420.62
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.421.62
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.423.63
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.424.63
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.425.63
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.426.63
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.427.63
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.428.65
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.429.63
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.430.63
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.432.65
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.433.64
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.434.65
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.435.64
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.436.76
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.437.64
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.438.71
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.439.71
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.440.75
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.442.73
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.443.73
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.444.73
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.445.68
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.446.69
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.450.67
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.451.67
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.452.68
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.453.68
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.454.69
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.456.69
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.457.75
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.458.70
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.459.70
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.460.69
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.462.74
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.463.69
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.464.70
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.465.68
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.468.70
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.469.70
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.470.70
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.471.73
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.472.70
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.478.74
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.479.73
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.480.68
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.481.71
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.482.74
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.49.67
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.50.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.500.71
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.501.74
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.502.71
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.51.69
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.52.72
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.520.76
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.521.76
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.522.76
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.53.51
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.531.76
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.532.75
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.534.75
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.54.47
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.55.45
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.56.69
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.57.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.58.47
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.593.76
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.595.76
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.63.57
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.66.47
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.70.75
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\rules\rules.1.71.43
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Dealio\kb127\temp\dod_cache.xml
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\temp
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\alerts.gif
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\alerts_over.gif
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\alerts_rec.gif
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\alerts_rec_over.gif
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\chevron-small.gif
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\DealioSearch.html
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\deals-leftcap.gif
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\deal_report.jpg
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\ebay_login.jpg
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\err_mainwindow.html
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\err_toolbar.html
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\global_scripts.js
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\headerbgthin.jpg
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\highlight-bg.png
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\logo.gif
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\logo_over.gif
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\man_toolbar.css
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\man_toolbar.html
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\man_toolbar.js
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\man_toolbarl.js
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\post-this-deal.gif
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\post-this-deal_over.gif
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\scripts.js
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\scroller.js
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\search-chevron.gif
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\search-chevron_over.gif
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\search_bg_blink.gif
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\separator.gif
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\settings.gif
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\settings_over.gif
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\res\yahoo-search.png
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\index.76.35
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.10.76
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.109.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.110.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.12.52
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.13.58
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.130.58
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.135.50
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.153.44
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.155.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.156.49
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.16.60
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.161.52
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.178.66
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.184.55
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.188.52
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.189.45
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.196.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.198.56
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.199.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.200.53
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.201.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.202.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.203.71
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.205.62
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.213.71
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.214.49
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.215.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.216.67
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.217.67
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.218.52
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.219.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.220.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.221.57
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.222.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.223.68
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.226.68
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.227.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.228.62
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.229.76
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.23.63
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.239.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.24.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.240.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.241.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.242.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.243.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.244.63
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.245.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.247.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.248.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.249.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.250.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.251.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.252.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.253.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.254.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.255.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.256.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.257.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.279.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.28.58
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.282.75
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.283.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.284.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.289.67
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.290.62
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.291.61
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.296.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.297.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.304.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.307.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.308.75
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.31.47
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.310.46
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.311.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.315.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.316.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.317.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.318.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.319.49
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.32.48
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.334.44
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.335.60
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.336.44
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.337.44
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.338.75
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.339.47
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.34.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.340.47
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.341.47
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.349.50
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.35.48
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.350.50
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.351.51
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.352.54
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.353.51
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.354.51
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.357.62
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.358.52
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.359.52
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.360.53
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.361.54
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.362.68
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.363.58
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.364.54
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.365.53
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.367.56
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.368.58
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.369.55
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.370.56
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.371.56
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.372.57
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.373.55
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.375.56
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.376.57
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.377.55
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.378.65
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.384.58
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.386.71
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.387.59
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.388.59
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.389.59
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.390.60
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.391.60
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.392.60
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.393.60
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.394.60
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.396.61
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.397.61
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.398.60
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.399.60
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.403.61
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.404.63
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.405.61
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.406.61
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.407.76
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.408.63
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.409.61
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.412.62
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.413.62
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.414.62
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.415.62
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.416.62
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.417.62
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.418.62
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.419.62
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.420.62
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.421.62
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.423.63
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.424.63
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.425.63
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.426.63
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.427.63
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.428.65
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.429.63
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.430.63
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.432.65
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.433.64
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.434.65
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.435.64
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.436.76
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.437.64
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.438.71
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.439.71
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.440.75
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.442.73
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.443.73
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.444.73
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.445.68
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.446.69
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.450.67
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.451.67
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.452.68
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.453.68
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.454.69
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.456.69
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.457.75
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.458.70
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.459.70
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.460.69
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.462.74
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.463.69
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.464.70
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.465.68
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.468.70
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.469.70
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.470.70
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.471.73
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.472.70
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.478.74
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.479.73
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.480.68
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.481.71
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.482.74
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.49.67
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.50.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.500.71
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.501.74
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.502.71
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.51.69
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.52.72
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.520.76
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.521.76
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.522.76
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.53.51
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.531.76
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.532.75
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.534.75
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.54.47
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.55.45
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.56.69
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.57.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.58.47
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.593.76
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.595.76
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.63.57
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.66.47
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.70.75
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\rules\rules.1.71.43
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\temp\dealio-14376.log
                                  C:\DOCUME~1\Romain\APPLIC~1\Dealio\kb127\temp\dod_cache.xml
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\temp
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\alerts.gif
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\alerts_over.gif
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\alerts_rec.gif
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\alerts_rec_over.gif
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\chevron-small.gif
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\DealioSearch.html
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\deals-leftcap.gif
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\deal_report.jpg
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\ebay_login.jpg
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\err_mainwindow.html
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\err_toolbar.html
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\global_scripts.js
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\headerbgthin.jpg
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\highlight-bg.png
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\logo.gif
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\logo_over.gif
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\man_toolbar.css
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\man_toolbar.html
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\man_toolbar.js
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\man_toolbarl.js
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\post-this-deal.gif
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\post-this-deal_over.gif
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\scripts.js
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\scroller.js
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\search-chevron.gif
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\search-chevron_over.gif
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\search_bg_blink.gif
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\separator.gif
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\settings.gif
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\settings_over.gif
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\res\yahoo-search.png
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\index.76.35
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.10.76
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.109.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.110.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.12.52
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.13.58
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.130.58
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.135.50
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.153.44
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.155.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.156.49
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.16.60
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.161.52
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.178.66
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.184.55
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.188.52
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.189.45
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.196.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.198.56
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.199.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.200.53
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.201.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.202.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.203.71
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.205.62
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.213.71
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.214.49
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.215.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.216.67
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.217.67
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.218.52
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.219.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.220.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.221.57
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.222.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.223.68
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.226.68
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.227.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.228.62
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.229.76
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.23.63
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.239.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.24.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.240.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.241.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.242.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.243.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.244.63
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.245.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.247.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.248.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.249.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.250.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.251.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.252.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.253.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.254.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.255.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.256.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.257.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.279.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.28.58
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.282.75
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.283.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.284.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.289.67
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.290.62
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.291.61
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.296.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.297.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.304.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.307.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.308.75
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.31.47
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.310.46
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.311.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.315.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.316.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.317.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.318.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.319.49
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.32.48
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.334.44
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.335.60
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.336.44
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.337.44
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.338.75
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.339.47
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.34.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.340.47
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.341.47
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.349.50
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.35.48
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.350.50
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.351.51
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.352.54
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.353.51
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.354.51
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.357.62
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.358.52
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.359.52
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.360.53
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.361.54
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.362.68
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.363.58
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.364.54
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.365.53
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.367.56
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.368.58
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.369.55
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.370.56
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.371.56
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.372.57
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.373.55
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.375.56
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.376.57
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.377.55
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.378.65
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.384.58
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.386.71
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.387.59
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.388.59
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.389.59
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.390.60
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.391.60
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.392.60
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.393.60
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.394.60
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.396.61
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.397.61
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.398.60
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.399.60
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.403.61
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.404.63
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.405.61
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.406.61
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.407.76
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.408.63
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.409.61
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.412.62
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.413.62
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.414.62
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.415.62
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.416.62
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.417.62
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.418.62
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.419.62
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.420.62
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.421.62
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.423.63
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.424.63
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.425.63
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.426.63
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.427.63
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.428.65
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.429.63
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.430.63
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.432.65
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.433.64
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.434.65
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.435.64
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.436.76
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.437.64
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.438.71
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.439.71
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.440.75
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.442.73
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.443.73
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.444.73
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.445.68
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.446.69
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.450.67
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.451.67
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.452.68
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.453.68
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.454.69
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.456.69
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.457.75
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.458.70
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.459.70
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.460.69
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.462.74
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.463.69
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.464.70
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.465.68
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.468.70
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.469.70
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.470.70
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.471.73
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.472.70
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.478.74
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.479.73
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.480.68
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.481.71
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.482.74
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.49.67
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.50.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.500.71
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.501.74
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.502.71
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.51.69
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.52.72
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.520.76
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.521.76
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.522.76
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.53.51
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.531.76
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.532.75
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.534.75
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.54.47
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.55.45
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.56.69
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.57.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.58.47
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.593.76
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.595.76
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.63.57
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.66.47
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.70.75
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\rules\rules.1.71.43
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\temp\dealio-14420.log
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\temp\dod_cache.xml
                                  C:\DOCUME~1\Rosy\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3716_772_3.html
                                  C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Dealio
                                  C:\DOCUME~1\M1374~1.MOL\Cookies\m.mollica@hosted.platrium[2].txt
                                  C:\WINDOWS\Prefetch\SEARCHSETTINGS.EXE-253CB611.pf
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Search Settings
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Search Settings\kb127
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Search Settings\kb127\res
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Search Settings\kb127\temp
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Search Settings\kb127\temp\ws-14476.log
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Search Settings\kb127\temp\ws-14477.log
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Search Settings\kb127\temp\ws-14478.log
                                  C:\DOCUME~1\M1374~1.MOL\APPLIC~1\Search Settings\kb127\temp\ws-14479.log
                                  C:\DOCUME~1\Romain\APPLIC~1\Search Settings
                                  C:\DOCUME~1\Romain\APPLIC~1\Search Settings\kb127
                                  C:\DOCUME~1\Romain\APPLIC~1\Search Settings\kb127\res
                                  C:\DOCUME~1\Romain\APPLIC~1\Search Settings\kb127\temp
                                  C:\DOCUME~1\Romain\APPLIC~1\Search Settings\kb127\temp\ws-14466.log
                                  C:\DOCUME~1\Romain\APPLIC~1\Search Settings\kb127\temp\ws-14467.log
                                  C:\DOCUME~1\Romain\APPLIC~1\Search Settings\kb127\temp\ws-14468.log
                                  C:\DOCUME~1\Romain\APPLIC~1\Search Settings\kb127\temp\ws-14469.log
                                  C:\DOCUME~1\Rosy\APPLIC~1\Search Settings
                                  C:\DOCUME~1\Rosy\APPLIC~1\Search Settings\kb127
                                  C:\DOCUME~1\Rosy\APPLIC~1\Search Settings\kb127\res
                                  C:\DOCUME~1\Rosy\APPLIC~1\Search Settings\kb127\temp
                                  C:\DOCUME~1\Rosy\APPLIC~1\Search Settings\kb127\temp\ws-14474.log
                                  C:\DOCUME~1\Rosy\APPLIC~1\Search Settings\kb127\temp\ws-14476.log
                                  C:\Program Files\Search Settings
                                  C:\Program Files\Search Settings\kb127
                                  C:\Program Files\Search Settings\SearchSettings.exe
                                  C:\Program Files\Search Settings\kb127\res
                                  C:\Program Files\Search Settings\kb127\SearchSettings.dll
                                  C:\Program Files\Search Settings\kb127\SearchSettingsRes409.dll
                                  C:\Program Files\Search Settings\kb127\temp

                                  -----------\\ Extensions

                                  (M.MOLLICA) - {64161300-e22b-11db-8314-0800200c9a66} => speeddial

                                  -----------\\ [..\Internet Explorer\Main]

                                  [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
                                  "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
                                  "Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"
                                  "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
                                  "SearchMigratedDefaultURL"="https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&src={referrer:source?}"
                                  "Start Page Redirect Cache"="https://www.msn.com/fr-fr?ocid=iehp"

                                  [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
                                  "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
                                  "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
                                  "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
                                  "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
                                  "Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"

                                  --------------------\\ Recherche d'autres infections

                                  Aucune autre infection trouvée !

                                  1 - "C:\ToolBar SD\TB_1.txt" - 23/08/2009|13:02 - Option : [1]

                                  -----------\\ Fin du rapport a 13:02:52,81
                                  0
                                  1. pimprenelle27 Contributeur sécurité
                                    Madmind, désolé je sais ce que je fais pas besoin de toi pour savoir que avast ceest pareil que norton une vrai passoire, même à jour, ba il laisse passer les virus comme norton.

                                    Et puis tu doit mal voir, car dans son rapport il y tout ça comme infection : faut savoir lire : https://www.cjoint.com/?ixm57KVySV

                                    Lenalee ne pas faire attention au message de Madmind et me faire la suite tool bar.
                                    0
                                    1. Madmind
                                      Avast, une vraie passoire ? Si tu met ta BDD a jour régulièrement, il n y a jamais la moindre infection qui passe...

                                      Ensuite, perso, je vois rien de choquant dans son rapport HT, mis a part le truc "Blue Soleil", il faudrait un bon nettoyage la dedans mais mis a part mettre un temps fou à démarrer ca n'engage à rien. En tout cas moi, je ne vois pas la trace d'un KeyLogger.

                                      Une petite astuce serait de saisir un nouveau mot de passe à partir du clavier virtuel de windows voir, si tu veux encore etre plus sur, le faire chez un ami par exemple ainsi, même si un keylogger se cache sur ton ordi pas de risque qu'il intercepte ton mot de passe msn ainsi.

                                      Dernier conseil, change tes questions secrètes, 99% des vols de compte sur MSN sont à cause de questions secrètes trop simple.

                                      Quand à la sécurité, un petit démarrage en mode sans échec, un coup d'Adware, un scan AV, redémarrge de l'ordi et un coup de bitdefender en ligne. Tu sera tranquille pour un moment !
                                      0
                                      1. Lenalee
                                        J'ai fait l'option 1 pour le moment, je vous envoie le rapport pour commencer :

                                        SmitFraudFix v2.423

                                        Rapport fait à 11:13:49,14, 23/08/2009
                                        Executé à partir de C:\Documents and Settings\M.MOLLICA\Bureau\SmitfraudFix
                                        OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
                                        Le type du système de fichiers est NTFS
                                        Fix executé en mode normal

                                        »»»»»»»»»»»»»»»»»»»»»»»» Process

                                        C:\WINDOWS\System32\smss.exe
                                        C:\WINDOWS\system32\winlogon.exe
                                        C:\WINDOWS\system32\services.exe
                                        C:\WINDOWS\system32\lsass.exe
                                        C:\WINDOWS\system32\svchost.exe
                                        C:\WINDOWS\System32\svchost.exe
                                        C:\WINDOWS\system32\svchost.exe
                                        C:\WINDOWS\system32\spoolsv.exe
                                        C:\Program Files\Avira\AntiVir Desktop\sched.exe
                                        C:\WINDOWS\Explorer.EXE
                                        C:\WINDOWS\system32\nvraidservice.exe
                                        C:\Program Files\QuickTime\qttask.exe
                                        C:\Program Files\Real\RealPlayer\RealPlay.exe
                                        C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
                                        C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
                                        C:\Program Files\Search Settings\SearchSettings.exe
                                        C:\Program Files\Java\jre6\bin\jusched.exe
                                        C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
                                        C:\WINDOWS\system32\ctfmon.exe
                                        C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
                                        C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
                                        C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                                        C:\Program Files\Electronic Arts\EADM\Core.exe
                                        C:\Program Files\Orange HSS\Launcher\Launcher.exe
                                        C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe
                                        C:\Program Files\OFFICE One6.5\OFFICE One Notes\oonotesv65.exe
                                        C:\Program Files\OpenOffice.org 3\program\soffice.exe
                                        C:\Program Files\OpenOffice.org 3\program\soffice.bin
                                        C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\1\AlertModule.exe
                                        C:\Program Files\Orange HSS\systray\systrayapp.exe
                                        C:\Program Files\Orange HSS\Deskboard\deskboard.exe
                                        C:\Program Files\Orange HSS\connectivity\connectivitymanager.exe
                                        C:\Program Files\Orange HSS\connectivity\CoreCom\CoreCom.exe
                                        C:\WINDOWS\system32\PackethSvc.exe
                                        C:\Program Files\Avira\AntiVir Desktop\avguard.exe
                                        C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
                                        C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
                                        C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\1\FTRTSVC.exe
                                        C:\Program Files\Java\jre6\bin\jqs.exe
                                        C:\WINDOWS\System32\PAStiSvc.exe
                                        C:\WINDOWS\system32\svchost.exe
                                        C:\Program Files\Orange HSS\connectivity\CoreCom\OraConfigRecover.exe
                                        C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\1\FTCOMModule.exe
                                        C:\WINDOWS\system32\wbem\unsecapp.exe
                                        C:\WINDOWS\system32\wuauclt.exe
                                        C:\Program Files\Windows Live\Messenger\usnsvc.exe
                                        C:\Program Files\Internet Explorer\IEXPLORE.EXE
                                        C:\Program Files\Internet Explorer\IEXPLORE.EXE
                                        C:\Documents and Settings\M.MOLLICA\Bureau\SmitfraudFix\Policies.exe
                                        C:\WINDOWS\system32\cmd.exe

                                        »»»»»»»»»»»»»»»»»»»»»»»» hosts

                                        »»»»»»»»»»»»»»»»»»»»»»»» C:\

                                        »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

                                        »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

                                        »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

                                        »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

                                        »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles

                                        »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\M.MOLLICA

                                        »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\M1374~1.MOL\LOCALS~1\Temp

                                        »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\M.MOLLICA\Application Data

                                        »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

                                        »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\M1374~1.MOL\Favoris

                                        »»»»»»»»»»»»»»»»»»»»»»»» Bureau

                                        »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

                                        »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

                                        »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

                                        [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
                                        "Source"="About:Home"
                                        "SubscribedURL"="About:Home"
                                        "FriendlyName"="Ma page d'accueil"

                                        »»»»»»»»»»»»»»»»»»»»»»»» o4Patch
                                        !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                                        o4Patch
                                        Credits: Malware Analysis & Diagnostic
                                        Code: S!Ri

                                        »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
                                        !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                                        IEDFix
                                        Credits: Malware Analysis & Diagnostic
                                        Code: S!Ri

                                        »»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix
                                        !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                                        Agent.OMZ.Fix
                                        Credits: Malware Analysis & Diagnostic
                                        Code: S!Ri

                                        »»»»»»»»»»»»»»»»»»»»»»»» VACFix
                                        !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                                        VACFix
                                        Credits: Malware Analysis & Diagnostic
                                        Code: S!Ri

                                        »»»»»»»»»»»»»»»»»»»»»»»» 404Fix
                                        !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                                        404Fix
                                        Credits: Malware Analysis & Diagnostic
                                        Code: S!Ri

                                        »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
                                        !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                                        SrchSTS.exe by S!Ri
                                        Search SharedTaskScheduler's .dll

                                        »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
                                        !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                                        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
                                        "AppInit_DLLs"=""

                                        »»»»»»»»»»»»»»»»»»»»»»»» Winlogon
                                        !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                                        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
                                        "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"

                                        »»»»»»»»»»»»»»»»»»»»»»»» RK

                                        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
                                        "System"=""

                                        »»»»»»»»»»»»»»»»»»»»»»»» DNS

                                        Description: NVIDIA nForce Networking Controller - Miniport d'ordonnancement de paquets
                                        DNS Server Search Order: 192.168.1.1
                                        DNS Server Search Order: 192.168.1.1

                                        HKLM\SYSTEM\CCS\Services\Tcpip\..\{EF27B533-9239-407D-8AF3-15C70CFC9E34}: DhcpNameServer=192.168.1.1 192.168.1.1
                                        HKLM\SYSTEM\CS1\Services\Tcpip\..\{EF27B533-9239-407D-8AF3-15C70CFC9E34}: DhcpNameServer=192.168.1.1 192.168.1.1
                                        HKLM\SYSTEM\CS3\Services\Tcpip\..\{EF27B533-9239-407D-8AF3-15C70CFC9E34}: DhcpNameServer=192.168.1.1 192.168.1.1
                                        HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 192.168.1.1
                                        HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 192.168.1.1

                                        »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

                                        »»»»»»»»»»»»»»»»»»»»»»»» Fin

                                        Voilà... je continue tout de suite avec la 2e chose à faire ?
                                        0
                                        1. pimprenelle27 Contributeur sécurité
                                          Parfais maintenant on peut commencer la désinfection :

                                          1ère chose à faire :

                                          Sous Vista : ▶ Désactive le contrôle des comptes utilisateurs (tu le réactiveras après ta désinfection):

                                          ▶ Clique sur Démarrer puis sur panneau de configuration
                                          ▶ Double Clique sur l'icône "Comptes d'utilisateurs"
                                          ▶ Clique ensuite sur désactiver et valide.
                                          ▶ Redémarre le PC.

                                          Option 1 - Recherche :

                                          ▶ télécharge smitfraudfix et enregistre le sur le bureau

                                          ▶ Sous XP : Double clique sur smitfraudfix puis exécuter

                                          ▶ sous vista : Clic-droit sur SmitfraudFix présent sur le bureau et choisis "Exécuter en tant qu'administrateur"

                                          ▶ Sélectionner 1 pour créer un rapport des fichiers responsables de l'infection.

                                          (attention : N utilises pas l option 2 si je ne te l ai pas demandé !!)

                                          ▶ copier/coller le rapport dans la réponse.

                                          Voici un tutoriel sonore et animé en cas de problème d'utilisation

                                          (Attention : "process.exe", un composant de l'outil, est détecté par certains antivirus comme étant un "RiskTool".
                                          Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. Mis entre de mauvaises mains,
                                          cet utilitaire pourrait arrêter des logiciels de sécurité.)

                                          2ème chose à faire :

                                          ▶ Télécharge Toolbar-S&D (de Team IDN) sur ton Bureau

                                          ▶ Lance l'installation du programme en exécutant le fichier téléchargé.

                                          ▶ Sous XP : Double-clique sur le raccourci de Toolbar-S&D.

                                          ▶ Sous Vista : Fais un clic droit sur ToolbarSD et sélectionne "Exécuter en tant qu'administrateur".

                                          ▶ Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.

                                          ▶ Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.

                                          ▶ Poste le rapport généré. (C:\TB.txt)
                                          0
                                          • 1
                                          • 2

                                          Discussions similaires

                                          Dimensions L x l x H : comment lire ces infos ?
                                          Miss-Curieuse

                                          8 réponses
                                          comment écrire des petits chiffres ?
                                          Elisa-x3

                                          9 réponses
                                          [Ecrire Exposant 12] 10² ou 10³ ok mais...
                                          tessai

                                          43 réponses
                                          Comment écrire un chiffre en petit caractè
                                          Essegnon

                                          5 réponses
                                          Snapchat que veux dire le petit point vert
                                          Anna_6260

                                          2 réponses