Tom's Guide > Forum > Sécurité - Virus > Processus iexplore.exe

Processus iexplore.exe

Forum Sécurité - Virus : Processus iexplore.exe

TomsGuide.com : 800 000 inscrits répondent à toutes vos questions high-tech et informatique. Pour obtenir de l'aide, inscrivez-vous gratuitement !
Mot :    Pseudo :           
 

bonjour,
voila mon problème: mon pc rame depuis 2-3 jours et j'ai constaté que dans mon gestionnaire de tâche il y avait un processus " iexplore.exe" qui pompé toute ma mémoire, je le supprime et il revient, j'avais déjà eu ce problème auparavant, en attente de votre réponse, merci

Liens sponsorisés
Inscrivez-vous ou connectez-vous pour masquer ceci.

Bonjour,

Télécharge Hijackthis (de Trend Micro) sur ton Bureau.

  • Double clique sur HJTInstall.exe pour lancer l'installation.
  • Clique sur Install.
  • Double clique sur le raccourci d'HijackThis qui vient d'être créé pour le lancer. (Clique droit -> lancer en tant qu'admin si sous Vista)
  • Accepte la licence en cliquant sur Yes.
  • Clique sur Do a system scan and save a logfile.
  • Poste ici le rapport généré.


Note : Le rapport se trouve également ici : C:\Program Files\Trend Micro\Hijackthis\Hijackthis.log

Aide : Comment utiliser HijackThis.

Répondre à FanDANGELDARK

Voila le rapport:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:29:54, on 11/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Search Settings\SearchSettings.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Maxou\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Documents and Settings\Maxou\Bureau\µTorrent.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://login.live.com/ppsecure/sha1auth.srf?lc=1036
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb127\Dealio.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb127\Dealio.dll
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [au] C:\Program Files\Dealio\DealioAU.exe
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [close surf mail dupe] C:\Documents and Settings\All Users\Application Data\Tick Find Close Surf\Build Mode.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Maxou\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [audio draw] C:\DOCUME~1\Maxou\APPLIC~1\PLATFO~1\Online face.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Compare Prices with &Dealio - C:\Documents and Settings\Maxou\Application Data\Dealio\kb127\res\DealioSearch.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll
O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

--
End of file - 7232 bytes

Répondre à ishida7

Re,

Télécharge Lop S&D.exe (d’ Eric 71) sur ton Bureau.

  • Double-clique dessus pour lancer l'installation
  • Puis double-clique sur le raccourci Lop S&D présent sur ton bureau (Si tu es sous Vista, clique droit -> exécuter en tant qu'admin)
  • Séléctionne la langue souhaitée , puis choisis l'Option 1 (Recherche)
  • Patiente jusqu'à la fin du scan
  • Poste le rapport généré (C:\lopR.txt)


Si ton bureau ne réapparait pas, fais CTRL+ALT+SUPP pour ouvrir le gestionnaire de tâches.
Puis rends-toi à l'onglet "processus". Clique en haut à gauche sur fichiers et choisis "Nouvelle tâche (exécuter)"
Tapes explorer et valide. Cela te fera apparaitre ton bureau

Répondre à FanDANGELDARK

Voila le rapport, encore merci pour votre aide:


--------------------\\ Lop S&D 4.2.4-9c XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) D CPU 2.80GHz )
BIOS : Award Medallion BIOS v6.00PG
USER : Maxou ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition 8.0.1.30 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:35 Go (Free:21 Go)
D:\ (Local Disk) - NTFS - Total:196 Go (Free:192 Go)

"C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
Option : [1] ( 11/12/2008|23:04 )

--------------------\\ Listing des dossiers dans APPLIC~1

[25/11/2008|21:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[30/11/2008|15:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[25/11/2008|21:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[25/11/2008|21:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[23/11/2008|23:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[24/11/2008|00:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[28/11/2008|09:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[24/11/2008|16:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[23/11/2008|21:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[10/12/2008|22:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[30/11/2008|21:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Tick Find Close Surf
[10/12/2008|21:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[24/11/2008|00:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[24/11/2008|16:00] C:\DOCUME~1\Ben\APPLIC~1\Adobe
[01/12/2008|09:25] C:\DOCUME~1\Ben\APPLIC~1\Dealio
[24/11/2008|01:02] C:\DOCUME~1\Ben\APPLIC~1\Identities
[24/11/2008|16:00] C:\DOCUME~1\Ben\APPLIC~1\Macromedia
[26/11/2008|22:25] C:\DOCUME~1\Ben\APPLIC~1\Microsoft
[24/11/2008|15:58] C:\DOCUME~1\Ben\APPLIC~1\Mozilla
[03/12/2008|15:19] C:\DOCUME~1\Ben\APPLIC~1\Platform Cdrom
[01/12/2008|09:25] C:\DOCUME~1\Ben\APPLIC~1\Search Settings

[06/12/2008|12:06] C:\DOCUME~1\CAMI-L~1\APPLIC~1\Adobe
[03/12/2008|12:09] C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio
[24/11/2008|01:06] C:\DOCUME~1\CAMI-L~1\APPLIC~1\Identities
[25/11/2008|20:42] C:\DOCUME~1\CAMI-L~1\APPLIC~1\Macromedia
[05/12/2008|20:50] C:\DOCUME~1\CAMI-L~1\APPLIC~1\Microsoft
[25/11/2008|20:40] C:\DOCUME~1\CAMI-L~1\APPLIC~1\Mozilla
[03/12/2008|12:04] C:\DOCUME~1\CAMI-L~1\APPLIC~1\Platform Cdrom
[03/12/2008|12:09] C:\DOCUME~1\CAMI-L~1\APPLIC~1\Search Settings

[23/11/2008|20:18] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[26/11/2008|22:05] C:\DOCUME~1\J-F\APPLIC~1\Adobe
[29/11/2008|20:08] C:\DOCUME~1\J-F\APPLIC~1\Dealio
[23/11/2008|20:40] C:\DOCUME~1\J-F\APPLIC~1\Identities
[24/11/2008|00:01] C:\DOCUME~1\J-F\APPLIC~1\Macromedia
[24/11/2008|00:53] C:\DOCUME~1\J-F\APPLIC~1\Malwarebytes
[03/12/2008|20:22] C:\DOCUME~1\J-F\APPLIC~1\Microsoft
[24/11/2008|08:21] C:\DOCUME~1\J-F\APPLIC~1\Mozilla
[23/11/2008|21:04] C:\DOCUME~1\J-F\APPLIC~1\MSN6
[01/12/2008|20:16] C:\DOCUME~1\J-F\APPLIC~1\Platform Cdrom
[29/11/2008|20:08] C:\DOCUME~1\J-F\APPLIC~1\Search Settings
[24/11/2008|00:55] C:\DOCUME~1\J-F\APPLIC~1\uTorrent

[23/11/2008|20:18] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[02/12/2008|18:34] C:\DOCUME~1\Maxou\APPLIC~1\Adobe
[25/11/2008|21:59] C:\DOCUME~1\Maxou\APPLIC~1\Apple Computer
[04/12/2008|18:33] C:\DOCUME~1\Maxou\APPLIC~1\Dealio
[25/11/2008|21:06] C:\DOCUME~1\Maxou\APPLIC~1\DivX
[24/11/2008|01:08] C:\DOCUME~1\Maxou\APPLIC~1\Identities
[25/11/2008|13:26] C:\DOCUME~1\Maxou\APPLIC~1\Macromedia
[25/11/2008|21:03] C:\DOCUME~1\Maxou\APPLIC~1\Malwarebytes
[25/11/2008|21:06] C:\DOCUME~1\Maxou\APPLIC~1\Media Player Classic
[02/12/2008|20:14] C:\DOCUME~1\Maxou\APPLIC~1\Microsoft
[25/11/2008|13:05] C:\DOCUME~1\Maxou\APPLIC~1\Mozilla
[30/11/2008|21:31] C:\DOCUME~1\Maxou\APPLIC~1\Platform Cdrom
[27/11/2008|19:05] C:\DOCUME~1\Maxou\APPLIC~1\Search Settings
[11/12/2008|17:07] C:\DOCUME~1\Maxou\APPLIC~1\Skype
[11/12/2008|17:07] C:\DOCUME~1\Maxou\APPLIC~1\skypePM
[26/11/2008|10:56] C:\DOCUME~1\Maxou\APPLIC~1\teamspeak2
[11/12/2008|19:13] C:\DOCUME~1\Maxou\APPLIC~1\uTorrent

[23/11/2008|20:18] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[11/12/2008 23:00][--ah-----] C:\WINDOWS\tasks\AB599D9791F615FB.job
[11/12/2008 19:53][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskUser.job
[25/11/2008 21:57][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[11/12/2008 22:37][--ah-----] C:\WINDOWS\tasks\SA.DAT
[28/08/2001 15:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

( AB599D9791F615FB.job )=( c:\docume~1\maxou\applic~1\platfo~1\bashextrabait.exe )

--------------------\\ Listing des dossiers dans C:\Program Files

[24/11/2008|00:54] C:\Program Files\7-Zip
[30/11/2008|15:24] C:\Program Files\Adobe
[25/11/2008|21:57] C:\Program Files\Apple Software Update
[23/11/2008|20:45] C:\Program Files\ATI Technologies
[23/11/2008|23:50] C:\Program Files\Avira
[25/11/2008|21:58] C:\Program Files\Bonjour
[10/12/2008|21:57] C:\Program Files\CCleaner
[23/11/2008|20:15] C:\Program Files\ComPlus Applications
[27/11/2008|19:03] C:\Program Files\Dealio
[24/11/2008|00:53] C:\Program Files\Defraggler
[10/12/2008|22:25] C:\Program Files\Fichiers communs
[24/11/2008|00:54] C:\Program Files\Foxit Software
[27/11/2008|19:04] C:\Program Files\Free mp3 Wma Converter
[11/12/2008|15:02] C:\Program Files\GUILD WARS
[23/11/2008|20:51] C:\Program Files\InstallShield Installation Information
[23/11/2008|23:16] C:\Program Files\Intel
[26/11/2008|19:43] C:\Program Files\Internet Explorer
[25/11/2008|21:58] C:\Program Files\iPod
[25/11/2008|22:03] C:\Program Files\iTunes
[24/11/2008|00:54] C:\Program Files\K-Lite Codec Pack
[24/11/2008|00:53] C:\Program Files\Malwarebytes' Anti-Malware
[24/11/2008|16:16] C:\Program Files\Messenger
[23/11/2008|20:18] C:\Program Files\microsoft frontpage
[28/11/2008|15:02] C:\Program Files\Microsoft Money 2005
[24/11/2008|00:47] C:\Program Files\Microsoft Office
[24/11/2008|00:47] C:\Program Files\Microsoft Visual Studio
[24/11/2008|00:47] C:\Program Files\Microsoft Works
[24/11/2008|00:27] C:\Program Files\Movie Maker
[11/12/2008|22:55] C:\Program Files\Mozilla Firefox
[23/11/2008|20:15] C:\Program Files\MSN
[23/11/2008|20:14] C:\Program Files\MSN Gaming Zone
[24/11/2008|00:26] C:\Program Files\NetMeeting
[24/11/2008|00:26] C:\Program Files\Outlook Express
[30/11/2008|21:30] C:\Program Files\Platform Cdrom
[25/11/2008|21:58] C:\Program Files\QuickTime
[23/11/2008|20:51] C:\Program Files\SAGEM
[27/11/2008|19:04] C:\Program Files\Search Settings
[23/11/2008|20:15] C:\Program Files\Services en ligne
[24/11/2008|14:21] C:\Program Files\Sesam
[10/12/2008|22:28] C:\Program Files\Skype
[24/11/2008|14:47] C:\Program Files\SNAL
[26/11/2008|10:56] C:\Program Files\Teamspeak2_RC2
[11/12/2008|18:29] C:\Program Files\Trend Micro
[23/11/2008|20:40] C:\Program Files\Uninstall Information
[24/11/2008|00:55] C:\Program Files\uTorrent
[11/12/2008|22:49] C:\Program Files\Wanadoo
[23/11/2008|23:23] C:\Program Files\Wanadoo Messager
[24/11/2008|00:59] C:\Program Files\Windows Live
[10/12/2008|21:53] C:\Program Files\Windows Media Connect 2
[10/12/2008|21:53] C:\Program Files\Windows Media Player
[24/11/2008|00:26] C:\Program Files\Windows NT
[24/11/2008|00:01] C:\Program Files\WindowsUpdate
[23/11/2008|20:18] C:\Program Files\xerox

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[30/11/2008|15:24] C:\Program Files\Fichiers communs\Adobe
[25/11/2008|21:58] C:\Program Files\Fichiers communs\Apple
[24/11/2008|00:47] C:\Program Files\Fichiers communs\DESIGNER
[23/11/2008|20:48] C:\Program Files\Fichiers communs\InstallShield
[24/11/2008|19:35] C:\Program Files\Fichiers communs\Microsoft Shared
[23/11/2008|20:15] C:\Program Files\Fichiers communs\MSSoap
[23/11/2008|20:06] C:\Program Files\Fichiers communs\ODBC
[23/11/2008|20:16] C:\Program Files\Fichiers communs\Services
[10/12/2008|22:25] C:\Program Files\Fichiers communs\Skype
[23/11/2008|20:05] C:\Program Files\Fichiers communs\SpeechEngines
[24/11/2008|00:45] C:\Program Files\Fichiers communs\System
[24/11/2008|00:59] C:\Program Files\Fichiers communs\WindowsLiveInstaller

--------------------\\ Process

( 58 Processes )

IEXPLORE.EXE ~ [PID:2360]
IEXPLORE.EXE ~ [PID:2364]
IEXPLORE.EXE ~ [PID:1800]
IEXPLORE.EXE ~ [PID:2868]

--------------------\\ Recherche avec S_Lop

C:\DOCUME~1\Maxou\LOCALS~1\Temp\bis21.exe

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Tick Find Close Surf
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Tick Find Close Surf\Build Mode.exe
C:\DOCUME~1\Ben\APPLIC~1\platfo~1
C:\DOCUME~1\Ben\APPLIC~1\platfo~1\Online face.exe
C:\DOCUME~1\CAMI-L~1\APPLIC~1\platfo~1
C:\DOCUME~1\CAMI-L~1\APPLIC~1\platfo~1\Online face.exe
C:\DOCUME~1\J-F\APPLIC~1\platfo~1
C:\DOCUME~1\J-F\APPLIC~1\platfo~1\Online face.exe
C:\DOCUME~1\Maxou\APPLIC~1\platfo~1
C:\DOCUME~1\Maxou\APPLIC~1\platfo~1\acid date free deaf.exe
C:\DOCUME~1\Maxou\APPLIC~1\platfo~1\bash extra bait.exe
C:\DOCUME~1\Maxou\APPLIC~1\platfo~1\kwwdseym.exe
C:\DOCUME~1\Maxou\APPLIC~1\platfo~1\Online face.exe
C:\Program Files\platfo~1
C:\DOCUME~1\Maxou\LOCALS~1\Temp\msgpl_c055.tmp
C:\WINDOWS\Tasks\AB599D9791F615FB.job

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"audio draw"="C:\\DOCUME~1\\Maxou\\APPLIC~1\\PLATFO~1\\Online face.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"close surf mail dupe"="C:\\Documents and Settings\\All Users\\Application Data\\Tick Find Close Surf\\Build Mode.exe"

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-11 23:06:32
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 3

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:416][D:9]-> C:\DOCUME~1\Maxou\LOCALS~1\Temp
[F:1][D:0]-> C:\DOCUME~1\Maxou\Cookies
[F:2][D:0]-> C:\DOCUME~1\Maxou\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 11/12/2008|23:07 - Option : [1]

--------------------\\ Fin du rapport a 23:07:40

Répondre à ishida7

Re,

1) Relance Lop S&D.

  • Choisis cette fois ci l'Option 2 (Suppression)

! Ne ferme pas la fenêtre lors de la suppression !

  • Poste le rapport généré (C:\lopR.txt)


Si ton bureau ne réapparait pas, fais CTRL+ALT+SUPP pour ouvrir le gestionnaire de tâches.
Puis rends-toi à l'onglet "processus". Clique en haut à gauche sur fichiers et choisis "Nouvelle tâche (exécuter)"
Tapes explorer et valide. Cela te fera apparaitre ton bureau


2) Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.

  • Lance l'installation du programme en exécutant le fichier téléchargé.
  • Double-clique maintenant sur le raccourci de Toolbar-S&D.
  • Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
  • Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
  • Poste le rapport généré. (C:\TB.txt)

Répondre à FanDANGELDARK

voila le rapport Lop S&D:


--------------------\\ Lop S&D 4.2.4-9c XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) D CPU 2.80GHz )
BIOS : Award Medallion BIOS v6.00PG
USER : Maxou ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition 8.0.1.30 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:35 Go (Free:20 Go)
D:\ (Local Disk) - NTFS - Total:196 Go (Free:192 Go)

"C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
Option : [2] ( 12/12/2008|11:13 )


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Tick Find Close Surf\Build Mode.exe
Supprime! - C:\DOCUME~1\Ben\APPLIC~1\platfo~1\Online face.exe
Supprime! - C:\DOCUME~1\CAMI-L~1\APPLIC~1\platfo~1\Online face.exe
Supprime! - C:\DOCUME~1\J-F\APPLIC~1\platfo~1\Online face.exe
Supprime! - C:\DOCUME~1\Maxou\APPLIC~1\platfo~1\acid date free deaf.exe
Supprime! - C:\DOCUME~1\Maxou\APPLIC~1\platfo~1\bash extra bait.exe
Supprime! - C:\DOCUME~1\Maxou\APPLIC~1\platfo~1\kwwdseym.exe
Supprime! - C:\DOCUME~1\Maxou\APPLIC~1\platfo~1\Online face.exe
Supprime! - C:\DOCUME~1\Maxou\LOCALS~1\Temp\msgpl_c055.tmp
Supprime! - C:\WINDOWS\Tasks\AB599D9791F615FB.job
Supprime! - C:\DOCUME~1\Maxou\LOCALS~1\Temp\bis21.exe
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Tick Find Close Surf
Supprime! - C:\DOCUME~1\Ben\APPLIC~1\platfo~1
Supprime! - C:\DOCUME~1\CAMI-L~1\APPLIC~1\platfo~1
Supprime! - C:\DOCUME~1\J-F\APPLIC~1\platfo~1
Supprime! - C:\DOCUME~1\Maxou\APPLIC~1\platfo~1
Supprime! - C:\Program Files\platfo~1

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing des dossiers dans APPLIC~1

[25/11/2008|21:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[30/11/2008|15:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[25/11/2008|21:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[25/11/2008|21:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[23/11/2008|23:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[24/11/2008|00:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[28/11/2008|09:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[12/12/2008|00:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[23/11/2008|21:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
[10/12/2008|22:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[10/12/2008|21:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[24/11/2008|00:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[24/11/2008|16:00] C:\DOCUME~1\Ben\APPLIC~1\Adobe
[01/12/2008|09:25] C:\DOCUME~1\Ben\APPLIC~1\Dealio
[24/11/2008|01:02] C:\DOCUME~1\Ben\APPLIC~1\Identities
[24/11/2008|16:00] C:\DOCUME~1\Ben\APPLIC~1\Macromedia
[26/11/2008|22:25] C:\DOCUME~1\Ben\APPLIC~1\Microsoft
[24/11/2008|15:58] C:\DOCUME~1\Ben\APPLIC~1\Mozilla
[01/12/2008|09:25] C:\DOCUME~1\Ben\APPLIC~1\Search Settings

[06/12/2008|12:06] C:\DOCUME~1\CAMI-L~1\APPLIC~1\Adobe
[03/12/2008|12:09] C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio
[24/11/2008|01:06] C:\DOCUME~1\CAMI-L~1\APPLIC~1\Identities
[25/11/2008|20:42] C:\DOCUME~1\CAMI-L~1\APPLIC~1\Macromedia
[05/12/2008|20:50] C:\DOCUME~1\CAMI-L~1\APPLIC~1\Microsoft
[25/11/2008|20:40] C:\DOCUME~1\CAMI-L~1\APPLIC~1\Mozilla
[03/12/2008|12:09] C:\DOCUME~1\CAMI-L~1\APPLIC~1\Search Settings

[23/11/2008|20:18] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[26/11/2008|22:05] C:\DOCUME~1\J-F\APPLIC~1\Adobe
[29/11/2008|20:08] C:\DOCUME~1\J-F\APPLIC~1\Dealio
[23/11/2008|20:40] C:\DOCUME~1\J-F\APPLIC~1\Identities
[24/11/2008|00:01] C:\DOCUME~1\J-F\APPLIC~1\Macromedia
[24/11/2008|00:53] C:\DOCUME~1\J-F\APPLIC~1\Malwarebytes
[03/12/2008|20:22] C:\DOCUME~1\J-F\APPLIC~1\Microsoft
[24/11/2008|08:21] C:\DOCUME~1\J-F\APPLIC~1\Mozilla
[23/11/2008|21:04] C:\DOCUME~1\J-F\APPLIC~1\MSN6
[29/11/2008|20:08] C:\DOCUME~1\J-F\APPLIC~1\Search Settings
[24/11/2008|00:55] C:\DOCUME~1\J-F\APPLIC~1\uTorrent

[23/11/2008|20:18] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[02/12/2008|18:34] C:\DOCUME~1\Maxou\APPLIC~1\Adobe
[25/11/2008|21:59] C:\DOCUME~1\Maxou\APPLIC~1\Apple Computer
[04/12/2008|18:33] C:\DOCUME~1\Maxou\APPLIC~1\Dealio
[25/11/2008|21:06] C:\DOCUME~1\Maxou\APPLIC~1\DivX
[24/11/2008|01:08] C:\DOCUME~1\Maxou\APPLIC~1\Identities
[25/11/2008|13:26] C:\DOCUME~1\Maxou\APPLIC~1\Macromedia
[25/11/2008|21:03] C:\DOCUME~1\Maxou\APPLIC~1\Malwarebytes
[25/11/2008|21:06] C:\DOCUME~1\Maxou\APPLIC~1\Media Player Classic
[02/12/2008|20:14] C:\DOCUME~1\Maxou\APPLIC~1\Microsoft
[25/11/2008|13:05] C:\DOCUME~1\Maxou\APPLIC~1\Mozilla
[27/11/2008|19:05] C:\DOCUME~1\Maxou\APPLIC~1\Search Settings
[12/12/2008|10:49] C:\DOCUME~1\Maxou\APPLIC~1\Skype
[11/12/2008|17:07] C:\DOCUME~1\Maxou\APPLIC~1\skypePM
[26/11/2008|10:56] C:\DOCUME~1\Maxou\APPLIC~1\teamspeak2
[11/12/2008|19:13] C:\DOCUME~1\Maxou\APPLIC~1\uTorrent

[23/11/2008|20:18] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[12/12/2008 10:01][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskUser.job
[25/11/2008 21:57][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[12/12/2008 09:49][--ah-----] C:\WINDOWS\tasks\SA.DAT
[28/08/2001 15:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[24/11/2008|00:54] C:\Program Files\7-Zip
[30/11/2008|15:24] C:\Program Files\Adobe
[25/11/2008|21:57] C:\Program Files\Apple Software Update
[23/11/2008|20:45] C:\Program Files\ATI Technologies
[23/11/2008|23:50] C:\Program Files\Avira
[25/11/2008|21:58] C:\Program Files\Bonjour
[10/12/2008|21:57] C:\Program Files\CCleaner
[23/11/2008|20:15] C:\Program Files\ComPlus Applications
[27/11/2008|19:03] C:\Program Files\Dealio
[24/11/2008|00:53] C:\Program Files\Defraggler
[10/12/2008|22:25] C:\Program Files\Fichiers communs
[24/11/2008|00:54] C:\Program Files\Foxit Software
[27/11/2008|19:04] C:\Program Files\Free mp3 Wma Converter
[11/12/2008|15:02] C:\Program Files\GUILD WARS
[23/11/2008|20:51] C:\Program Files\InstallShield Installation Information
[23/11/2008|23:16] C:\Program Files\Intel
[12/12/2008|00:20] C:\Program Files\Internet Explorer
[25/11/2008|21:58] C:\Program Files\iPod
[25/11/2008|22:03] C:\Program Files\iTunes
[24/11/2008|00:54] C:\Program Files\K-Lite Codec Pack
[24/11/2008|00:53] C:\Program Files\Malwarebytes' Anti-Malware
[24/11/2008|16:16] C:\Program Files\Messenger
[23/11/2008|20:18] C:\Program Files\microsoft frontpage
[28/11/2008|15:02] C:\Program Files\Microsoft Money 2005
[24/11/2008|00:47] C:\Program Files\Microsoft Office
[24/11/2008|00:47] C:\Program Files\Microsoft Visual Studio
[24/11/2008|00:47] C:\Program Files\Microsoft Works
[24/11/2008|00:27] C:\Program Files\Movie Maker
[12/12/2008|11:12] C:\Program Files\Mozilla Firefox
[23/11/2008|20:15] C:\Program Files\MSN
[23/11/2008|20:14] C:\Program Files\MSN Gaming Zone
[24/11/2008|00:26] C:\Program Files\NetMeeting
[24/11/2008|00:26] C:\Program Files\Outlook Express
[25/11/2008|21:58] C:\Program Files\QuickTime
[23/11/2008|20:51] C:\Program Files\SAGEM
[27/11/2008|19:04] C:\Program Files\Search Settings
[23/11/2008|20:15] C:\Program Files\Services en ligne
[24/11/2008|14:21] C:\Program Files\Sesam
[10/12/2008|22:28] C:\Program Files\Skype
[24/11/2008|14:47] C:\Program Files\SNAL
[26/11/2008|10:56] C:\Program Files\Teamspeak2_RC2
[11/12/2008|18:29] C:\Program Files\Trend Micro
[23/11/2008|20:40] C:\Program Files\Uninstall Information
[24/11/2008|00:55] C:\Program Files\uTorrent
[12/12/2008|09:49] C:\Program Files\Wanadoo
[23/11/2008|23:23] C:\Program Files\Wanadoo Messager
[24/11/2008|00:59] C:\Program Files\Windows Live
[10/12/2008|21:53] C:\Program Files\Windows Media Connect 2
[10/12/2008|21:53] C:\Program Files\Windows Media Player
[24/11/2008|00:26] C:\Program Files\Windows NT
[24/11/2008|00:01] C:\Program Files\WindowsUpdate
[23/11/2008|20:18] C:\Program Files\xerox

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[30/11/2008|15:24] C:\Program Files\Fichiers communs\Adobe
[25/11/2008|21:58] C:\Program Files\Fichiers communs\Apple
[24/11/2008|00:47] C:\Program Files\Fichiers communs\DESIGNER
[23/11/2008|20:48] C:\Program Files\Fichiers communs\InstallShield
[24/11/2008|19:35] C:\Program Files\Fichiers communs\Microsoft Shared
[23/11/2008|20:15] C:\Program Files\Fichiers communs\MSSoap
[23/11/2008|20:06] C:\Program Files\Fichiers communs\ODBC
[23/11/2008|20:16] C:\Program Files\Fichiers communs\Services
[10/12/2008|22:25] C:\Program Files\Fichiers communs\Skype
[23/11/2008|20:05] C:\Program Files\Fichiers communs\SpeechEngines
[24/11/2008|00:45] C:\Program Files\Fichiers communs\System
[24/11/2008|00:59] C:\Program Files\Fichiers communs\WindowsLiveInstaller

--------------------\\ Process

( 36 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\Maxou\Cookies\maxou@banner.casinoking[2].txt
C:\DOCUME~1\Maxou\Cookies\maxou@casinoking[1].txt

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-12 11:16:38
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
C:\DOCUME~1\Maxou\LOCALS~1\APPLIC~1\Mozilla\Firefox\Profiles\f6fmbyg2.default\urlclassifier3.sqlite-journal 3406836 bytes
scan completed successfully
hidden processes: 0
hidden files: 4

--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !

[F:414][D:10]-> C:\DOCUME~1\Maxou\LOCALS~1\Temp
[F:5][D:0]-> C:\DOCUME~1\Maxou\Cookies
[F:22][D:4]-> C:\DOCUME~1\Maxou\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 11/12/2008|23:07 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 12/12/2008|11:17 - Option : [2]

--------------------\\ Fin du rapport a 11:17:57



Voila le rapport Toolbar-S&D:



-----------\\ ToolBar S&D 1.2.6 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) D CPU 2.80GHz )
BIOS : Award Medallion BIOS v6.00PG
USER : Maxou ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition 8.0.1.30 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:35 Go (Free:20 Go)
D:\ (Local Disk) - NTFS - Total:196 Go (Free:192 Go)

"C:\ToolBar SD" ( MAJ : 04-12-2008|20:40 )
Option : [1] ( 12/12/2008|11:22 )

-----------\\ Recherche de Fichiers / Dossiers ...

C:\DOCUME~1\Ben\APPLIC~1\Dealio
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\res
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\temp
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\res\alerts.gif
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\res\alerts_over.gif
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\res\alerts_rec.gif
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\res\alerts_rec_over.gif
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\res\chevron-small.gif
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\res\DealioSearch.html
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\res\deals-leftcap.gif
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\res\deal_report.jpg
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\res\ebay_login.jpg
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\res\err_mainwindow.html
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\res\err_toolbar.html
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\res\global_scripts.js
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\res\headerbgthin.jpg
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\res\highlight-bg.png
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\res\logo.gif
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\res\logo_over.gif
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\res\man_toolbar.css
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\res\man_toolbar.html
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\res\man_toolbar.js
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\res\man_toolbarl.js
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\res\post-this-deal.gif
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\res\post-this-deal_over.gif
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\res\scripts.js
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\res\scroller.js
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\res\search-chevron.gif
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\res\search-chevron_over.gif
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\res\search_bg_blink.gif
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\res\separator.gif
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\res\settings.gif
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\res\settings_over.gif
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\res\yahoo-search.png
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\index.76.35
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.10.76
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.109.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.110.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.12.52
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.13.58
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.130.58
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.135.50
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.153.44
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.155.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.156.49
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.16.60
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.161.52
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.178.66
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.184.55
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.188.52
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.189.45
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.196.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.198.56
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.199.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.200.53
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.201.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.202.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.203.71
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.205.62
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.213.71
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.214.49
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.215.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.216.67
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.217.67
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.218.52
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.219.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.220.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.221.57
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.222.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.223.68
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.226.68
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.227.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.228.62
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.229.76
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.23.63
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.239.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.24.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.240.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.241.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.242.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.243.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.244.63
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.245.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.247.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.248.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.249.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.250.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.251.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.252.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.253.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.254.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.255.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.256.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.257.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.279.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.28.58
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.282.75
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.283.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.284.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.289.67
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.290.62
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.291.61
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.296.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.297.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.304.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.307.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.308.75
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.31.47
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.310.46
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.311.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.315.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.316.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.317.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.318.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.319.49
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.32.48
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.334.44
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.335.60
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.336.44
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.337.44
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.338.75
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.339.47
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.34.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.340.47
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.341.47
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.349.50
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.35.48
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.350.50
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.351.51
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.352.54
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.353.51
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.354.51
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.357.62
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.358.52
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.359.52
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.360.53
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.361.54
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.362.68
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.363.58
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.364.54
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.365.53
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.367.56
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.368.58
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.369.55
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.370.56
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.371.56
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.372.57
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.373.55
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.375.56
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.376.57
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.377.55
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.378.65
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.384.58
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.386.71
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.387.59
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.388.59
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.389.59
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.390.60
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.391.60
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.392.60
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.393.60
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.394.60
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.396.61
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.397.61
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.398.60
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.399.60
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.403.61
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.404.63
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.405.61
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.406.61
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.407.76
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.408.63
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.409.61
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.412.62
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.413.62
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.414.62
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.415.62
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.416.62
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.417.62
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.418.62
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.419.62
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.420.62
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.421.62
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.423.63
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.424.63
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.425.63
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.426.63
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.427.63
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.428.65
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.429.63
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.430.63
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.432.65
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.433.64
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.434.65
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.435.64
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.436.76
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.437.64
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.438.71
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.439.71
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.440.75
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.442.73
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.443.73
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.444.73
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.445.68
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.446.69
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.450.67
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.451.67
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.452.68
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.453.68
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.454.69
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.456.69
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.457.75
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.458.70
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.459.70
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.460.69
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.462.74
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.463.69
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.464.70
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.465.68
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.468.70
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.469.70
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.470.70
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.471.73
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.472.70
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.478.74
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.479.73
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.480.68
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.481.71
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.482.74
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.49.67
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.50.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.500.71
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.501.74
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.502.71
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.51.69
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.52.72
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.520.76
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.521.76
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.522.76
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.53.51
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.531.76
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.532.75
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.534.75
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.54.47
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.55.45
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.56.69
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.57.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.58.47
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.593.76
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.595.76
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.63.57
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.66.47
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.70.75
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\rules\rules.1.71.43
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\temp\dealio-14222.log
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\temp\dod_cache.xml
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_1224_932_3.html
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_156_528_3.html
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_1604_2376_3.html
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2228_2340_3.html
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2600_1084_3.html
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2916_2960_3.html
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2920_2932_3.html
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3012_3092_3.html
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3084_3144_3.html
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3168_3112_3.html
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3604_1844_3.html
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3672_3724_3.html
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4080_212_3.html
C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_508_1040_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\res
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\res\alerts.gif
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\res\alerts_over.gif
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\res\alerts_rec.gif
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\res\alerts_rec_over.gif
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\res\chevron-small.gif
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\res\DealioSearch.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\res\deals-leftcap.gif
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\res\deal_report.jpg
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\res\ebay_login.jpg
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\res\err_mainwindow.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\res\err_toolbar.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\res\global_scripts.js
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\res\headerbgthin.jpg
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\res\highlight-bg.png
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\res\logo.gif
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\res\logo_over.gif
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\res\man_toolbar.css
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\res\man_toolbar.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\res\man_toolbar.js
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\res\man_toolbarl.js
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\res\post-this-deal.gif
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\res\post-this-deal_over.gif
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\res\scripts.js
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\res\scroller.js
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\res\search-chevron.gif
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\res\search-chevron_over.gif
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\res\search_bg_blink.gif
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\res\separator.gif
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\res\settings.gif
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\res\settings_over.gif
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\res\yahoo-search.png
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\index.76.35
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.10.76
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.109.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.110.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.12.52
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.13.58
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.130.58
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.135.50
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.153.44
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.155.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.156.49
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.16.60
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.161.52
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.178.66
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.184.55
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.188.52
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.189.45
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.196.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.198.56
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.199.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.200.53
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.201.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.202.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.203.71
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.205.62
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.213.71
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.214.49
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.215.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.216.67
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.217.67
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.218.52
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.219.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.220.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.221.57
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.222.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.223.68
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.226.68
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.227.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.228.62
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.229.76
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.23.63
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.239.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.24.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.240.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.241.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.242.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.243.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.244.63
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.245.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.247.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.248.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.249.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.250.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.251.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.252.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.253.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.254.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.255.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.256.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.257.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.279.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.28.58
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.282.75
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.283.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.284.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.289.67
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.290.62
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.291.61
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.296.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.297.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.304.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.307.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.308.75
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.31.47
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.310.46
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.311.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.315.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.316.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.317.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.318.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.319.49
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.32.48
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.334.44
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.335.60
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.336.44
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.337.44
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.338.75
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.339.47
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.34.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.340.47
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.341.47
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.349.50
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.35.48
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.350.50
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.351.51
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.352.54
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.353.51
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.354.51
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.357.62
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.358.52
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.359.52
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.360.53
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.361.54
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.362.68
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.363.58
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.364.54
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.365.53
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.367.56
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.368.58
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.369.55
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.370.56
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.371.56
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.372.57
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.373.55
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.375.56
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.376.57
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.377.55
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.378.65
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.384.58
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.386.71
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.387.59
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.388.59
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.389.59
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.390.60
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.391.60
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.392.60
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.393.60
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.394.60
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.396.61
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.397.61
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.398.60
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.399.60
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.403.61
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.404.63
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.405.61
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.406.61
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.407.76
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.408.63
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.409.61
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.412.62
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.413.62
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.414.62
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.415.62
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.416.62
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.417.62
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.418.62
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.419.62
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.420.62
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.421.62
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.423.63
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.424.63
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.425.63
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.426.63
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.427.63
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.428.65
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.429.63
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.430.63
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.432.65
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.433.64
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.434.65
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.435.64
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.436.76
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.437.64
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.438.71
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.439.71
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.440.75
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.442.73
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.443.73
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.444.73
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.445.68
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.446.69
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.450.67
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.451.67
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.452.68
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.453.68
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.454.69
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.456.69
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.457.75
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.458.70
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.459.70
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.460.69
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.462.74
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.463.69
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.464.70
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.465.68
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.468.70
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.469.70
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.470.70
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.471.73
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.472.70
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.478.74
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.479.73
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.480.68
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.481.71
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.482.74
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.49.67
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.50.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.500.71
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.501.74
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.502.71
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.51.69
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.52.72
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.520.76
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.521.76
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.522.76
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.53.51
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.531.76
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.532.75
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.534.75
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.54.47
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.55.45
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.56.69
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.57.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.58.47
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.593.76
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.595.76
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.63.57
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.66.47
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.70.75
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\rules\rules.1.71.43
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\dealio-14219.log
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\dealio-14221.log
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\dealio-14222.log
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\dod_cache.xml
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_108_2560_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_1232_1776_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_1372_972_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_1732_2456_1.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_1732_2456_2.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_1772_2076_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2168_2288_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2200_2824_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2248_1552_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2264_2316_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2276_300_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2300_544_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2368_2296_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_236_396_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2540_3048_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2700_2784_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2736_3772_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2796_1344_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2876_2956_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2876_3228_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_296_2508_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_296_3820_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_2976_3572_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3044_2368_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3108_3160_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3132_3164_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_316_744_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3196_2472_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_320_516_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3232_3244_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3312_2728_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_332_3128_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3340_3268_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3344_3492_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3368_3416_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3720_3760_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3736_3844_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3896_3924_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3908_4016_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_3920_3980_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4052_196_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_4084_3940_3.html
C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127\temp\_toolbar_tmp_872_2100_3.html
C:\DOCUME~1\J-F\APPLIC~1\Dealio
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\res
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\temp
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\res\alerts.gif
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\res\alerts_over.gif
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\res\alerts_rec.gif
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\res\alerts_rec_over.gif
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\res\chevron-small.gif
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\res\DealioSearch.html
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\res\deals-leftcap.gif
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\res\deal_report.jpg
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\res\ebay_login.jpg
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\res\err_mainwindow.html
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\res\err_toolbar.html
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\res\global_scripts.js
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\res\headerbgthin.jpg
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\res\highlight-bg.png
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\res\logo.gif
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\res\logo_over.gif
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\res\man_toolbar.css
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\res\man_toolbar.html
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\res\man_toolbar.js
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\res\man_toolbarl.js
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\res\post-this-deal.gif
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\res\post-this-deal_over.gif
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\res\scripts.js
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\res\scroller.js
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\res\search-chevron.gif
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\res\search-chevron_over.gif
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\res\search_bg_blink.gif
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\res\separator.gif
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\res\settings.gif
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\res\settings_over.gif
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\res\yahoo-search.png
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\index.76.35
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.10.76
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.109.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.110.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.12.52
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.13.58
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.130.58
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.135.50
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.153.44
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.155.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.156.49
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.16.60
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.161.52
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.178.66
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.184.55
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.188.52
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.189.45
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.196.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.198.56
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.199.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.200.53
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.201.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.202.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.203.71
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.205.62
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.213.71
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.214.49
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.215.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.216.67
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.217.67
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.218.52
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.219.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.220.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.221.57
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.222.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.223.68
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.226.68
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.227.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.228.62
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.229.76
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.23.63
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.239.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.24.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.240.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.241.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.242.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.243.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.244.63
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.245.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.247.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.248.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.249.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.250.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.251.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.252.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.253.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.254.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.255.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.256.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.257.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.279.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.28.58
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.282.75
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.283.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.284.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.289.67
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.290.62
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.291.61
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.296.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.297.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.304.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.307.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.308.75
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.31.47
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.310.46
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.311.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.315.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.316.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.317.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.318.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.319.49
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.32.48
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.334.44
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.335.60
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.336.44
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.337.44
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.338.75
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.339.47
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.34.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.340.47
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.341.47
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.349.50
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.35.48
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.350.50
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.351.51
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.352.54
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.353.51
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.354.51
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.357.62
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.358.52
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.359.52
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.360.53
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.361.54
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.362.68
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.363.58
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.364.54
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.365.53
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.367.56
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.368.58
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.369.55
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.370.56
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.371.56
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.372.57
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.373.55
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.375.56
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.376.57
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.377.55
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.378.65
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.384.58
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.386.71
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.387.59
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.388.59
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.389.59
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.390.60
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.391.60
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.392.60
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.393.60
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.394.60
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.396.61
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.397.61
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.398.60
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.399.60
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.403.61
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.404.63
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.405.61
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.406.61
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.407.76
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.408.63
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.409.61
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.412.62
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.413.62
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.414.62
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.415.62
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.416.62
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.417.62
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.418.62
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.419.62
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.420.62
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.421.62
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.423.63
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.424.63
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.425.63
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.426.63
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.427.63
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.428.65
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.429.63
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.430.63
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.432.65
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.433.64
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.434.65
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.435.64
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.436.76
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.437.64
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.438.71
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.439.71
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.440.75
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.442.73
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.443.73
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.444.73
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.445.68
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.446.69
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.450.67
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.451.67
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.452.68
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.453.68
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.454.69
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.456.69
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.457.75
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.458.70
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.459.70
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.460.69
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.462.74
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.463.69
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.464.70
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.465.68
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.468.70
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.469.70
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.470.70
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.471.73
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.472.70
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.478.74
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.479.73
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.480.68
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.481.71
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.482.74
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.49.67
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.50.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.500.71
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.501.74
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.502.71
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.51.69
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.52.72
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.520.76
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.521.76
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.522.76
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.53.51
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.531.76
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.532.75
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.534.75
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.54.47
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.55.45
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.56.69
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.57.43
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.58.47
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.593.76
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.595.76
C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127\rules\rules.1.63.57

Répondre à ishida7

Re,

Relance Toolbar-S&D en double-cliquant sur le raccourci.

  • Choisis cette fois l'option 2 puis valide en appuyant sur Entrée.

! Ne ferme pas la fenêtre lors de la suppression !

  • Un rapport sera généré, poste son contenu ici, puis un nouveau rapport HijackThis.


Si ton bureau ne réapparait pas, fais CTRL+ALT+SUPP pour ouvrir le gestionnaire de tâches.
Puis rends-toi à l'onglet "processus". Clique en haut à gauche sur fichiers et choisis "Nouvelle tâche (exécuter)"
Tapes explorer et valide. Cela te fera apparaitre ton bureau

Répondre à FanDANGELDARK

re,
Voila le rapport Toolbar:


-----------\\ ToolBar S&D 1.2.6 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) D CPU 2.80GHz )
BIOS : Award Medallion BIOS v6.00PG
USER : Maxou ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition 8.0.1.30 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:35 Go (Free:21 Go)
D:\ (Local Disk) - NTFS - Total:196 Go (Free:192 Go)

"C:\ToolBar SD" ( MAJ : 04-12-2008|20:40 )
Option : [2] ( 12/12/2008|20:14 )

-----------\\ SUPPRESSION

Supprime! - C:\DOCUME~1\Ben\APPLIC~1\Dealio\kb127
Supprime! - C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio\kb127
Supprime! - C:\DOCUME~1\J-F\APPLIC~1\Dealio\kb127
Supprime! - C:\DOCUME~1\Maxou\APPLIC~1\Dealio\dinstallhelper.8C3B56E450564CC2BB5D35042ACB1969.dll
Supprime! - C:\DOCUME~1\Maxou\APPLIC~1\Dealio\dinstallhelper.9BA76ACC131940DC8AF752D7DAFA20C1.dll
Supprime! - C:\DOCUME~1\Maxou\APPLIC~1\Dealio\kb127
Supprime! - C:\Program Files\Dealio\DealioAU.exe
Supprime! - C:\Program Files\Dealio\kb127
Supprime! - C:\Program Files\Dealio\SearchSettingsKit.exe
Supprime! - C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Dealio
Supprime! - C:\DOCUME~1\Ben\APPLIC~1\Search Settings\kb127
Supprime! - C:\DOCUME~1\CAMI-L~1\APPLIC~1\Search Settings\kb127
Supprime! - C:\DOCUME~1\J-F\APPLIC~1\Search Settings\kb127
Supprime! - C:\DOCUME~1\Maxou\APPLIC~1\Search Settings\kb127
Supprime! - C:\Program Files\Search Settings\kb127
Supprime! - C:\Program Files\Search Settings\SearchSettings.exe
Supprime! - C:\DOCUME~1\Ben\APPLIC~1\Dealio
Supprime! - C:\DOCUME~1\CAMI-L~1\APPLIC~1\Dealio
Supprime! - C:\DOCUME~1\J-F\APPLIC~1\Dealio
Supprime! - C:\DOCUME~1\Maxou\APPLIC~1\Dealio
Supprime! - C:\Program Files\Dealio
Supprime! - C:\DOCUME~1\Ben\APPLIC~1\Search Settings
Supprime! - C:\DOCUME~1\CAMI-L~1\APPLIC~1\Search Settings
Supprime! - C:\DOCUME~1\J-F\APPLIC~1\Search Settings
Supprime! - C:\DOCUME~1\Maxou\APPLIC~1\Search Settings
Supprime! - C:\Program Files\Search Settings

-----------\\ Recherche de Fichiers / Dossiers ...


-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://www.msn.com/"


--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !


1 - "C:\ToolBar SD\TB_1.txt" - 12/12/2008|11:23 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 12/12/2008|20:15 - Option : [2]

-----------\\ Fin du rapport a 20:15:46,54






Rapport Hijack this:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:16:49, on 12/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Maxou\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://login.live.com/ppsecure/sha1auth.srf?lc=1036
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Maxou\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

--
End of file - 5687 bytes

Répondre à ishida7

Re,

Bientôt fini :)

Télécharge MalwareByte's Anti-Malware sur ton Bureau.

  • Installe-le en double-cliquant sur le fichier Download_mbam-setup.exe.

Une fois l'installation et la mise à jour effectuées :

  • Fais redémarrer ton ordinateur en mode sans échec

- Au démarrage, après le chargement du bios, appuie successivement sur la touche F8 (ou F5) de ton clavier jusqu'à l'apparition d'un menu sur fond noir. Une fois arrivé à ce stade, sélectionne à l'aide du clavier Mode sans Echec.
-- Dans ce mode, tu n'as pas accès à Internet, et tu te retrouves avec une configuration visuelle différente (pas de fond d'écran, icônes très grosses). Ne sois donc pas étonné.
--- C'est pour ces différentes raisons que je t'invite à imprimer, noter, ou enregistrer dans un document texte les informations suivantes afin de ne pas être perdu.
---- ! Ne fais pas démarrer ton ordinateur en mode sans échec via MSConfig ! Pourquoi ? Certaines infections cassent les clefs du mode sans échec, ce qui ferait crasher ton ordinateur.

  • Exécute maintenant MalwareByte's Anti-Malware. Si cela n'est pas déjà fait, sélectionne "Exécuter un examen complet".
  • Afin de lancer la recherche, clic sur"Rechercher".
  • Une fois le scan terminé, une fenêtre s'ouvre, clic sur OK. Deux possibilités s'offrent à toi :


~ Si le programme n'a rien trouvé, appuie sur OK. Un rapport va apparaître, ferme-le.
~~ Si des infections sont présentes, clic sur "Afficher les résultats" puis sur "Supprimer la sélection". Enregistre le rapport sur ton Bureau.
~~~~ Fais redémarrer ton ordinateur normalement et poste le rapport dans ta prochaine réponse.

REMARQUE : Si MalwareByte's Anti-Malware a besoin de redémarrer pour terminer la suppression, accepte en cliquant sur Ok.

Note : Si tu ne parviens à télécharger MBAM à part de MajorGeeks, tu peux le télécharger ici!

Aide :

Répondre à FanDANGELDARK

Re, voila le rapport MBAM :

Malwarebytes' Anti-Malware 1.31
Database version: 1497
Windows 5.1.2600 Service Pack 3

13/12/2008 22:54:43
mbam-log-2008-12-13 (22-54-43).txt

Scan type: Full Scan (C:\|D:\|)
Objects scanned: 104825
Time elapsed: 2 hour(s), 41 minute(s), 49 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

Répondre à ishida7

Oki,

Poste un nouveau rapport HijackThis ;)

Répondre à FanDANGELDARK

Re, encore merci pour les explication, super site!!:
Voila le rapport:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:40:28, on 14/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Maxou\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Belkin\Logiciel Bluetooth\bin\btwdins.exe
C:\Program Files\Belkin\Logiciel Bluetooth\BTTray.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://login.live.com/ppsecure/sha1auth.srf?lc=1036
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Maxou\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer à &Bluetooth - C:\Program Files\Belkin\Logiciel Bluetooth\btsendto_ie_ctx.htm
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Belkin\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Belkin\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\Belkin\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

--
End of file - 6532 bytes

Répondre à ishida7

Re,

De rien ;)

Relance Hijackthis (clique droit -> lancer en tant qu'adminstrateur sous Vista), do a system scan only, coche ces lignes (si toujours présentes) :

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"


Ferme toutes les applications en cours (particulièrement ton navigateur Internet).
Puis Fix Checked !

Prévention :

- Nettoyage des fichiers temporaires :

Télécharge Ccleaner sur ton Bureau.

  • Clique sur "download the latest version"
  • Installe-le en laissant seulement les options suivantes cochées :

- Ajouter un raccourci sur le Bureau
- Contrôler automatiquement les mises à jour de CCleaner

  • Lance le Nettoyage
  • Clique sur Chercher des erreurs et sauvegarde si tu le souhaites.


Aide : Comment utiliser CCleaner.


Telecharge ATFcleaner sur ton Bureau.

  • Double-clique sur l'exécutable téléchargé.
  • Dans l'onglet Main, coche simplement la case Select All (toutes les cases vont se cocher) puis sur le bouton Empty Selected.
  • Si tu possèdes Firefox ou Opera comme navigateur, pense à choisir ton navigateur en haut a gauche avant de sélectionner Select All puis Empty Selected.
  • Puis réponds Non au message qui s'affiche, si tu ne souhaites pas perdre tes mots de passe.


Aide : Comment utiliser AFTCleaner.

-- Restauration Système :

Désactive-Réactive la restauration système.

Méthode XP :
Clique sur Démarrer, fais un clique droit sur le Poste de travail puis clique sur Propiétés. Sélectionne l'onglet Restauration du Système.
Dans cet onglet, coche la case Désactiver la Restauration du système sur tous les lecteurs.
Un message de confirmation va apparaître. Clique sur Oui, puis OK. Fais redémarrer ton ordinateur pour que les changements soient bien pris en compte.
Pour réactiver la restauration système, il suffit de décocher cette même case et de faire redémarrer ton ordinateur (en ayant suivi les mêmes étapes).

Méthode Vista :
Clique sur Démarrer, fais un clique droit sur Ordinateur, puis clique sur Propriétés. Clique à gauche sur Paramètres système avancés. Sélectionne l'onglet Protection du Système.
Dans cet onglet, décoche (une par une) tes partitions, un message de confirmation va apparaître, clique sur Désactiver la protection du système, Clique sur Appliquer, puis OK.
Fais redémarrer ton ordinateur pour que les changements soient bien pris en compte.
Pour réactiver la restauration système, il suffit de décocher cette même case et de faire redémarrer ton ordinateur (en ayant suivi les mêmes étapes).

Aide : Comment Désactiver-Réactiver la Restauration Système.

--- Affichage normal des fichiers :

Clique sur le menu Demarrer /Panneau de configuration/Options des dossiers/ puis dans l'onglet Affichage
- Décoche Afficher les fichiers et dossiers cachés
- Coche Masquer les fichiers protégés du système d'exploitation (recommandé)
clique sur Appliquer, puis OK.

---- Suppression des outils installés :

Télécharge ToolsCleaner2 (de A.Rothstein)

  • Installe le sur ton Bureau.
  • Clique sur Recherche pour lancer le scan.
  • Clique sur Supprimer pour nettoyer les outils utilisés.
  • Clique sur Quitter.
  • Supprime maintenant ToolsCleaner.


----- Remise en place des protections, protection du système avec les Mises à Jour ! :

Je t'invite maintenant à (ré)activer toutes tes protections résidentes (Antivirus, Antispyware, Firewall..).
Tu dois avoir accès à tes protections dans la zone systray à côté de la barre des tâches. Si tu as des difficultés, n'hésite pas à me questionner !
Si ce n'est pas fait, assure-toi que les Mises à jour Automatiques Windows soient activées !
Mets tes Softwares correctement à jour (Java, Adobe, Flash ..) grâce à Sotware Inspector (chez Secunia)

Un petit mot à propos de Java :

Une fois la nouvelle version téléchargée, installe-la et fais redémarrer ton ordinateur.
Hélas, les anciennes version de Java (qui contiennent des failles, donc dangereuses !) sont toujours présentes !
C'est donc très important que tu désinstalles les anciennes versions de Java.

  • Va dans Démarrer, Panneau de Configuration, Ajout/Suppression de Programmes
  • Déinstalles toutes les versions de Java exceptée la plus récente.


Aide : Comment utiliser Secunia Software Inspector.

------ Ton infection, tu la dénonces ? :

Tu n'es pas obligé mais ce serait bien que tu rapportes ton infection sur Malware Complaints

  • Ton(tes) infection(s) : LOP, Toolbars indésirables.
  • Si tu ne la trouves pas dans la liste, poste dans Autres infections.


Aide : Comment dénoncer mon infection sur Malware Complaints.

Je t'invite maintenant à regarder ces dossiers très instructifs en terme de prévention !

- Sécurité/Prévention
- Conséquences de la multi-protection
- Toolbars : Inutilité et ralentissements

Bonne journée/soirée :)

Répondre à FanDANGELDARK
Tom's Guide > Forum > Sécurité - Virus > Processus iexplore.exe
Aller à :

Il y a 2339 utilisateurs connus et inconnus. Pour voir la liste des connectés connus, cliquez ici.

Attention

Vous allez répondre sur un sujet resté inactif pendant plus de 6 mois.
Assurez-vous d'apporter des éléments nouveaux à la discussion avant de poursuivre.

Répondre Annuler
Liens