Trojan "TR/Crypt.ULPM.Gen"

Aguero10 · le 28 janvier 2009

Bonjour à tous!!

Alors voilà je suis depuis peu infecté par un trojan qui m'ouvre sans cesse Avira Antivir pour me dire que je suis infecté.

Lorsque j'ouvre Avira Antivir je vais dans Overview puis Events, ensuite je double clic sur un des fichiers detectés et il me met ça:

"Virus or unwanted program 'TR/Crypt.ULPM.Gen [trojan]'

detected in file 'C:\Documents and Settings\Elise\Local Settings\Temporary Internet Files\Content.IE5\MREJMTUR\aw3[1].exe.

Action performed: Deny access"

Voici mon analyse HijackThis:

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 20:26:14, on 28/01/2009

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\COMODO\Firewall\cfp.exe

C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe

C:\Program Files\MarkAny\ContentSafer\MAAgent.exe

C:\WINDOWS\RTHDCPL.EXE

C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe

C:\Program Files\PowerISO\PWRISOVM.EXE

C:\Program Files\QuickTime\qttask.exe

C:\Program Files\Search Settings\SearchSettings.exe

C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe

C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe

C:\Program Files\OpenOffice.org 3\program\soffice.exe

C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe

C:\Program Files\OpenOffice.org 3\program\soffice.bin

C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE

C:\Program Files\COMODO\Firewall\cmdagent.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe

C:\WINDOWS\system32\wbem\wmiapsrv.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Documents and Settings\Elise\Mes documents\Aurél\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb127\Dealio.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb127\Dealio.dll

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [skyTel] SkyTel.EXE

O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\COMODO\Firewall\cfp.exe" -h

O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe

O4 - HKLM\..\Run: [hpfsched] C:\WINDOWS\hpfsched.exe

O4 - HKLM\..\Run: [sMSTray] C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe

O4 - HKLM\..\Run: [MAAgent] C:\Program Files\MarkAny\ContentSafer\MAAgent.exe

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min

O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe" /OM

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\Firewall\cfp.exe" -h

O4 - HKLM\..\Run: [au] C:\Program Files\Dealio\DealioAU.exe

O4 - HKLM\..\Run: [searchSettings] C:\Program Files\Search Settings\SearchSettings.exe

O4 - HKLM\..\Run: [hp Update 3300C] C:\Documents and Settings\Elise\Mes documents\scanner\hpupdate.exe 3300C+

O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe"

O4 - HKCU\..\Run: [sVCHOST.EXE] C:\WINDOWS\system32\drivers\svchost.exe

O4 - HKCU\..\Run: [wixpo] "C:\Documents and Settings\Elise\Application Data\Google\mupd1_2_645698.exe"

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe

O8 - Extra context menu item: Compare Prices with &Dealio - C:\Documents and Settings\Elise\Application Data\Dealio\kb127\res\DealioSearch.html

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll

O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll

O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE

O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - Unknown owner - C:\Program Files\COMODO\Firewall\cmdagent.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe

O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe

O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe

O23 - Service: SonicStage Back-End Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SsBeSvc.exe

O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe

O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe

--

End of file - 9132 bytes

Comme c'est la première fois que ça m'arrive je ne sais pas trop quoi en déduire de ce rapport...

Est-ce que quelqu'un peut m'aider à me débarrasser de ce trojan ???

Merci d'avance

Falkra · le 28 janvier 2009

Bonjour, il y a plusieurs infections.

Messages : 1

Si jamais tu as besoin de quelques infos :

Comment participer à un forum

Retrouver ses messages

On y va !

Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.

Double-clique maintenant sur le fichier téléchargé.
Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
Choisis maintenant l'option (Recherche). Patiente jusqu'à la fin de la recherche.
Poste le rapport généré. (C:\TB.txt)

canon1 · le 29 janvier 2009

slt toi bon je peux essaier de te dire plus ou moin comment faire

dans un 1er temps tu suprime definitivement ton avira antis vire

puis tu installe un autre antis virus a toi de trouvee se quil te semblera le mieux

personellement javais deja mis avant anti vire mais il netais po tres fiable voire meme po du tout

sa ma meme foutu tout mon disque dur en laire lol

attention verifie si tu as tres bien desinstaller ton antis vire il nest po tres facille a enlevee car il conserve parfois des fichiers encore cachee

donc voila a la limite tu redemare ton pc et tu le met en mode sent echec via mozilla

et tu reinstalle un nvx antis virus et tu refais un scan complet et apret quent est fini ben tu valide tout tu redemare ton pc et cette fois ci comme tu fais dhabitude et le tour est jouee

voilaaaaaa sest tout se que je sais essaie et tu verras bien

Modifié le 29 janvier 2009 par angelique
Merveilleux /!\ , seuls les membres sécurité sont habilités à intervenir dans l'espace anlyse|rapport HJT

Aguero10 · le 29 janvier 2009

Voilà voilà désolé pour le retard ^^

-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3

X86-based PC ( Multiprocessor Free : AMD Athlon 64 X2 Dual Core Processor 4800+ )

BIOS : Award Modular BIOS v6.00PG

USER : Elise ( Administrator )

BOOT : Normal boot

Antivirus : Avira AntiVir PersonalEdition 8.0.1.30 (Activated)

Firewall : COMODO Firewall 3.5 (Activated)

A:\ (USB)

C:\ (Local Disk) - NTFS - Total:97 Go (Free:14 Go)

D:\ (Local Disk) - NTFS - Total:149 Go (Free:110 Go)

E:\ (Local Disk) - NTFS - Total:200 Go (Free:42 Go)

F:\ (CD or DVD)

G:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )

Option : [1] ( 29/01/2009|11:27 )

-----------\\ Recherche de Fichiers / Dossiers ...

C:\DOCUME~1\Elise\APPLIC~1\Dealio

C:\DOCUME~1\Elise\APPLIC~1\Dealio\dinstallhelper.F799B337B9AB43F1A3D31445543B356B.dll

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\res

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\temp

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\res\alerts.gif

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\res\alerts_over.gif

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\res\alerts_rec.gif

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\res\alerts_rec_over.gif

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\res\chevron-small.gif

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\res\DealioSearch.html

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\res\deals-leftcap.gif

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\res\deal_report.jpg

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\res\ebay_login.jpg

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\res\err_mainwindow.html

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\res\err_toolbar.html

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\res\global_scripts.js

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\res\headerbgthin.jpg

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\res\highlight-bg.png

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\res\logo.gif

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\res\logo_over.gif

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\res\man_toolbar.css

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\res\man_toolbar.html

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\res\man_toolbar.js

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\res\man_toolbarl.js

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\res\post-this-deal.gif

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\res\post-this-deal_over.gif

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\res\scripts.js

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\res\scroller.js

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\res\search-chevron.gif

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\res\search-chevron_over.gif

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\res\search_bg_blink.gif

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\res\separator.gif

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\res\settings.gif

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\res\settings_over.gif

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\res\yahoo-search.png

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\index.76.35

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.10.76

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.109.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.110.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.12.52

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.13.58

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.130.58

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.135.50

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.153.44

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.155.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.156.49

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.16.60

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.161.52

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.178.66

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.184.55

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.188.52

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.189.45

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.196.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.198.56

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.199.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.200.53

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.201.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.202.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.203.71

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.205.62

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.213.71

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.214.49

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.215.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.216.67

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.217.67

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.218.52

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.219.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.220.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.221.57

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.222.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.223.68

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.226.68

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.227.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.228.62

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.229.76

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.23.63

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.239.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.24.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.240.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.241.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.242.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.243.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.244.63

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.245.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.247.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.248.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.249.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.250.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.251.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.252.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.253.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.254.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.255.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.256.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.257.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.279.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.28.58

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.282.75

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.283.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.284.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.289.67

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.290.62

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.291.61

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.296.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.297.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.304.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.307.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.308.75

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.31.47

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.310.46

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.311.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.315.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.316.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.317.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.318.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.319.49

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.32.48

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.334.44

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.335.60

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.336.44

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.337.44

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.338.75

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.339.47

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.34.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.340.47

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.341.47

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.349.50

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.35.48

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.350.50

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.351.51

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.352.54

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.353.51

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.354.51

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.357.62

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.358.52

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.359.52

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.360.53

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.361.54

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.362.68

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.363.58

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.364.54

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.365.53

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.367.56

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.368.58

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.369.55

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.370.56

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.371.56

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.372.57

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.373.55

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.375.56

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.376.57

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.377.55

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.378.65

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.384.58

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.386.71

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.387.59

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.388.59

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.389.59

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.390.60

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.391.60

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.392.60

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.393.60

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.394.60

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.396.61

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.397.61

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.398.60

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.399.60

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.403.61

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.404.63

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.405.61

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.406.61

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.407.76

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.408.63

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.409.61

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.412.62

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.413.62

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.414.62

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.415.62

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.416.62

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.417.62

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.418.62

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.419.62

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.420.62

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.421.62

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.423.63

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.424.63

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.425.63

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.426.63

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.427.63

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.428.65

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.429.63

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.430.63

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.432.65

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.433.64

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.434.65

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.435.64

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.436.76

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.437.64

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.438.71

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.439.71

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.440.75

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.442.73

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.443.73

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.444.73

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.445.68

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.446.69

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.450.67

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.451.67

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.452.68

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.453.68

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.454.69

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.456.69

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.457.75

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.458.70

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.459.70

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.460.69

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.462.74

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.463.69

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.464.70

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.465.68

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.468.70

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.469.70

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.470.70

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.471.73

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.472.70

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.478.74

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.479.73

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.480.68

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.481.71

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.482.74

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.49.67

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.50.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.500.71

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.501.74

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.502.71

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.51.69

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.52.72

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.520.76

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.521.76

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.522.76

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.53.51

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.531.76

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.532.75

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.534.75

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.54.47

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.55.45

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.56.69

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.57.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.58.47

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.593.76

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.595.76

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.63.57

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.66.47

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.70.75

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\rules\rules.1.71.43

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\temp\dealio-14254.log

C:\DOCUME~1\Elise\APPLIC~1\Dealio\kb127\temp\dod_cache.xml

C:\Program Files\Dealio

C:\Program Files\Dealio\DealioAU.exe

C:\Program Files\Dealio\kb127

C:\Program Files\Dealio\SearchSettingsKit.exe

C:\Program Files\Dealio\kb127\Dealio Deskbar.exe

C:\Program Files\Dealio\kb127\Dealio.dll

C:\Program Files\Dealio\kb127\DealioRes409.dll

C:\Program Files\Dealio\kb127\res

C:\Program Files\Dealio\kb127\resDN

C:\Program Files\Dealio\kb127\rules

C:\Program Files\Dealio\kb127\temp

C:\Program Files\Dealio\kb127\res\alerts.gif

C:\Program Files\Dealio\kb127\res\alerts_over.gif

C:\Program Files\Dealio\kb127\res\alerts_rec.gif

C:\Program Files\Dealio\kb127\res\alerts_rec_over.gif

C:\Program Files\Dealio\kb127\res\chevron-small.gif

C:\Program Files\Dealio\kb127\res\DealioSearch.html

C:\Program Files\Dealio\kb127\res\deals-leftcap.gif

C:\Program Files\Dealio\kb127\res\deal_report.jpg

C:\Program Files\Dealio\kb127\res\ebay_login.jpg

C:\Program Files\Dealio\kb127\res\err_mainwindow.html

C:\Program Files\Dealio\kb127\res\err_toolbar.html

C:\Program Files\Dealio\kb127\res\global_scripts.js

C:\Program Files\Dealio\kb127\res\headerbgthin.jpg

C:\Program Files\Dealio\kb127\res\highlight-bg.png

C:\Program Files\Dealio\kb127\res\logo.gif

C:\Program Files\Dealio\kb127\res\logo_over.gif

C:\Program Files\Dealio\kb127\res\man_toolbar.css

C:\Program Files\Dealio\kb127\res\man_toolbar.html

C:\Program Files\Dealio\kb127\res\man_toolbar.js

C:\Program Files\Dealio\kb127\res\man_toolbarl.js

C:\Program Files\Dealio\kb127\res\post-this-deal.gif

C:\Program Files\Dealio\kb127\res\post-this-deal_over.gif

C:\Program Files\Dealio\kb127\res\scripts.js

C:\Program Files\Dealio\kb127\res\scroller.js

C:\Program Files\Dealio\kb127\res\search-chevron.gif

C:\Program Files\Dealio\kb127\res\search-chevron_over.gif

C:\Program Files\Dealio\kb127\res\search_bg_blink.gif

C:\Program Files\Dealio\kb127\res\separator.gif

C:\Program Files\Dealio\kb127\res\settings.gif

C:\Program Files\Dealio\kb127\res\settings_over.gif

C:\Program Files\Dealio\kb127\res\yahoo-search.png

C:\Program Files\Dealio\kb127\resDN\bottom.gif

C:\Program Files\Dealio\kb127\resDN\chevron_down.gif

C:\Program Files\Dealio\kb127\resDN\chevron_up.gif

C:\Program Files\Dealio\kb127\resDN\close.gif

C:\Program Files\Dealio\kb127\resDN\deskbar.css

C:\Program Files\Dealio\kb127\resDN\deskbar.js

C:\Program Files\Dealio\kb127\resDN\dispatch_helper.js

C:\Program Files\Dealio\kb127\resDN\ebay_compatible.jpg

C:\Program Files\Dealio\kb127\resDN\logo.gif

C:\Program Files\Dealio\kb127\resDN\logo_chevron_bkg.gif

C:\Program Files\Dealio\kb127\resDN\losing.gif

C:\Program Files\Dealio\kb127\resDN\lost.gif

C:\Program Files\Dealio\kb127\resDN\man_deskbar.html

C:\Program Files\Dealio\kb127\resDN\menu_arrow.gif

C:\Program Files\Dealio\kb127\resDN\menu_check.gif

C:\Program Files\Dealio\kb127\resDN\no_image.gif

C:\Program Files\Dealio\kb127\resDN\prod_img.gif

C:\Program Files\Dealio\kb127\resDN\search_chevron.gif

C:\Program Files\Dealio\kb127\resDN\spacer.gif

C:\Program Files\Dealio\kb127\resDN\textfield_bkg.gif

C:\Program Files\Dealio\kb127\resDN\top.gif

C:\Program Files\Dealio\kb127\resDN\unknown.gif

C:\Program Files\Dealio\kb127\resDN\winning.gif

C:\Program Files\Dealio\kb127\resDN\won.gif

C:\Program Files\Dealio\kb127\rules\index.76.35

C:\Program Files\Dealio\kb127\rules\rules.1.10.76

C:\Program Files\Dealio\kb127\rules\rules.1.109.43

C:\Program Files\Dealio\kb127\rules\rules.1.110.43

C:\Program Files\Dealio\kb127\rules\rules.1.12.52

C:\Program Files\Dealio\kb127\rules\rules.1.13.58

C:\Program Files\Dealio\kb127\rules\rules.1.130.58

C:\Program Files\Dealio\kb127\rules\rules.1.135.50

C:\Program Files\Dealio\kb127\rules\rules.1.153.44

C:\Program Files\Dealio\kb127\rules\rules.1.155.43

C:\Program Files\Dealio\kb127\rules\rules.1.156.49

C:\Program Files\Dealio\kb127\rules\rules.1.16.60

C:\Program Files\Dealio\kb127\rules\rules.1.161.52

C:\Program Files\Dealio\kb127\rules\rules.1.178.66

C:\Program Files\Dealio\kb127\rules\rules.1.184.55

C:\Program Files\Dealio\kb127\rules\rules.1.188.52

C:\Program Files\Dealio\kb127\rules\rules.1.189.45

C:\Program Files\Dealio\kb127\rules\rules.1.196.43

C:\Program Files\Dealio\kb127\rules\rules.1.198.56

C:\Program Files\Dealio\kb127\rules\rules.1.199.43

C:\Program Files\Dealio\kb127\rules\rules.1.200.53

C:\Program Files\Dealio\kb127\rules\rules.1.201.43

C:\Program Files\Dealio\kb127\rules\rules.1.202.43

C:\Program Files\Dealio\kb127\rules\rules.1.203.71

C:\Program Files\Dealio\kb127\rules\rules.1.205.62

C:\Program Files\Dealio\kb127\rules\rules.1.213.71

C:\Program Files\Dealio\kb127\rules\rules.1.214.49

C:\Program Files\Dealio\kb127\rules\rules.1.215.43

C:\Program Files\Dealio\kb127\rules\rules.1.216.67

C:\Program Files\Dealio\kb127\rules\rules.1.217.67

C:\Program Files\Dealio\kb127\rules\rules.1.218.52

C:\Program Files\Dealio\kb127\rules\rules.1.219.43

C:\Program Files\Dealio\kb127\rules\rules.1.220.43

C:\Program Files\Dealio\kb127\rules\rules.1.221.57

C:\Program Files\Dealio\kb127\rules\rules.1.222.43

C:\Program Files\Dealio\kb127\rules\rules.1.223.68

C:\Program Files\Dealio\kb127\rules\rules.1.226.68

C:\Program Files\Dealio\kb127\rules\rules.1.227.43

C:\Program Files\Dealio\kb127\rules\rules.1.228.62

C:\Program Files\Dealio\kb127\rules\rules.1.229.76

C:\Program Files\Dealio\kb127\rules\rules.1.23.63

C:\Program Files\Dealio\kb127\rules\rules.1.239.43

C:\Program Files\Dealio\kb127\rules\rules.1.24.43

C:\Program Files\Dealio\kb127\rules\rules.1.240.43

C:\Program Files\Dealio\kb127\rules\rules.1.241.43

C:\Program Files\Dealio\kb127\rules\rules.1.242.43

C:\Program Files\Dealio\kb127\rules\rules.1.243.43

C:\Program Files\Dealio\kb127\rules\rules.1.244.63

C:\Program Files\Dealio\kb127\rules\rules.1.245.43

C:\Program Files\Dealio\kb127\rules\rules.1.247.43

C:\Program Files\Dealio\kb127\rules\rules.1.248.43

C:\Program Files\Dealio\kb127\rules\rules.1.249.43

C:\Program Files\Dealio\kb127\rules\rules.1.250.43

C:\Program Files\Dealio\kb127\rules\rules.1.251.43

C:\Program Files\Dealio\kb127\rules\rules.1.252.43

C:\Program Files\Dealio\kb127\rules\rules.1.253.43

C:\Program Files\Dealio\kb127\rules\rules.1.254.43

C:\Program Files\Dealio\kb127\rules\rules.1.255.43

C:\Program Files\Dealio\kb127\rules\rules.1.256.43

C:\Program Files\Dealio\kb127\rules\rules.1.257.43

C:\Program Files\Dealio\kb127\rules\rules.1.279.43

C:\Program Files\Dealio\kb127\rules\rules.1.28.58

C:\Program Files\Dealio\kb127\rules\rules.1.282.75

C:\Program Files\Dealio\kb127\rules\rules.1.283.43

C:\Program Files\Dealio\kb127\rules\rules.1.284.43

C:\Program Files\Dealio\kb127\rules\rules.1.289.67

C:\Program Files\Dealio\kb127\rules\rules.1.290.62

C:\Program Files\Dealio\kb127\rules\rules.1.291.61

C:\Program Files\Dealio\kb127\rules\rules.1.296.43

C:\Program Files\Dealio\kb127\rules\rules.1.297.43

C:\Program Files\Dealio\kb127\rules\rules.1.304.43

C:\Program Files\Dealio\kb127\rules\rules.1.307.43

C:\Program Files\Dealio\kb127\rules\rules.1.308.75

C:\Program Files\Dealio\kb127\rules\rules.1.31.47

C:\Program Files\Dealio\kb127\rules\rules.1.310.46

C:\Program Files\Dealio\kb127\rules\rules.1.311.43

C:\Program Files\Dealio\kb127\rules\rules.1.315.43

C:\Program Files\Dealio\kb127\rules\rules.1.316.43

C:\Program Files\Dealio\kb127\rules\rules.1.317.43

C:\Program Files\Dealio\kb127\rules\rules.1.318.43

C:\Program Files\Dealio\kb127\rules\rules.1.319.49

C:\Program Files\Dealio\kb127\rules\rules.1.32.48

C:\Program Files\Dealio\kb127\rules\rules.1.334.44

C:\Program Files\Dealio\kb127\rules\rules.1.335.60

C:\Program Files\Dealio\kb127\rules\rules.1.336.44

C:\Program Files\Dealio\kb127\rules\rules.1.337.44

C:\Program Files\Dealio\kb127\rules\rules.1.338.75

C:\Program Files\Dealio\kb127\rules\rules.1.339.47

C:\Program Files\Dealio\kb127\rules\rules.1.34.43

C:\Program Files\Dealio\kb127\rules\rules.1.340.47

C:\Program Files\Dealio\kb127\rules\rules.1.341.47

C:\Program Files\Dealio\kb127\rules\rules.1.349.50

C:\Program Files\Dealio\kb127\rules\rules.1.35.48

C:\Program Files\Dealio\kb127\rules\rules.1.350.50

C:\Program Files\Dealio\kb127\rules\rules.1.351.51

C:\Program Files\Dealio\kb127\rules\rules.1.352.54

C:\Program Files\Dealio\kb127\rules\rules.1.353.51

C:\Program Files\Dealio\kb127\rules\rules.1.354.51

C:\Program Files\Dealio\kb127\rules\rules.1.357.62

C:\Program Files\Dealio\kb127\rules\rules.1.358.52

C:\Program Files\Dealio\kb127\rules\rules.1.359.52

C:\Program Files\Dealio\kb127\rules\rules.1.360.53

C:\Program Files\Dealio\kb127\rules\rules.1.361.54

C:\Program Files\Dealio\kb127\rules\rules.1.362.68

C:\Program Files\Dealio\kb127\rules\rules.1.363.58

C:\Program Files\Dealio\kb127\rules\rules.1.364.54

C:\Program Files\Dealio\kb127\rules\rules.1.365.53

C:\Program Files\Dealio\kb127\rules\rules.1.367.56

C:\Program Files\Dealio\kb127\rules\rules.1.368.58

C:\Program Files\Dealio\kb127\rules\rules.1.369.55

C:\Program Files\Dealio\kb127\rules\rules.1.370.56

C:\Program Files\Dealio\kb127\rules\rules.1.371.56

C:\Program Files\Dealio\kb127\rules\rules.1.372.57

C:\Program Files\Dealio\kb127\rules\rules.1.373.55

C:\Program Files\Dealio\kb127\rules\rules.1.375.56

C:\Program Files\Dealio\kb127\rules\rules.1.376.57

C:\Program Files\Dealio\kb127\rules\rules.1.377.55

C:\Program Files\Dealio\kb127\rules\rules.1.378.65

C:\Program Files\Dealio\kb127\rules\rules.1.384.58

C:\Program Files\Dealio\kb127\rules\rules.1.386.71

C:\Program Files\Dealio\kb127\rules\rules.1.387.59

C:\Program Files\Dealio\kb127\rules\rules.1.388.59

C:\Program Files\Dealio\kb127\rules\rules.1.389.59

C:\Program Files\Dealio\kb127\rules\rules.1.390.60

C:\Program Files\Dealio\kb127\rules\rules.1.391.60

C:\Program Files\Dealio\kb127\rules\rules.1.392.60

C:\Program Files\Dealio\kb127\rules\rules.1.393.60

C:\Program Files\Dealio\kb127\rules\rules.1.394.60

C:\Program Files\Dealio\kb127\rules\rules.1.396.61

C:\Program Files\Dealio\kb127\rules\rules.1.397.61

C:\Program Files\Dealio\kb127\rules\rules.1.398.60

C:\Program Files\Dealio\kb127\rules\rules.1.399.60

C:\Program Files\Dealio\kb127\rules\rules.1.403.61

C:\Program Files\Dealio\kb127\rules\rules.1.404.63

C:\Program Files\Dealio\kb127\rules\rules.1.405.61

C:\Program Files\Dealio\kb127\rules\rules.1.406.61

C:\Program Files\Dealio\kb127\rules\rules.1.407.76

C:\Program Files\Dealio\kb127\rules\rules.1.408.63

C:\Program Files\Dealio\kb127\rules\rules.1.409.61

C:\Program Files\Dealio\kb127\rules\rules.1.412.62

C:\Program Files\Dealio\kb127\rules\rules.1.413.62

C:\Program Files\Dealio\kb127\rules\rules.1.414.62

C:\Program Files\Dealio\kb127\rules\rules.1.415.62

C:\Program Files\Dealio\kb127\rules\rules.1.416.62

C:\Program Files\Dealio\kb127\rules\rules.1.417.62

C:\Program Files\Dealio\kb127\rules\rules.1.418.62

C:\Program Files\Dealio\kb127\rules\rules.1.419.62

C:\Program Files\Dealio\kb127\rules\rules.1.420.62

C:\Program Files\Dealio\kb127\rules\rules.1.421.62

C:\Program Files\Dealio\kb127\rules\rules.1.423.63

C:\Program Files\Dealio\kb127\rules\rules.1.424.63

C:\Program Files\Dealio\kb127\rules\rules.1.425.63

C:\Program Files\Dealio\kb127\rules\rules.1.426.63

C:\Program Files\Dealio\kb127\rules\rules.1.427.63

C:\Program Files\Dealio\kb127\rules\rules.1.428.65

C:\Program Files\Dealio\kb127\rules\rules.1.429.63

C:\Program Files\Dealio\kb127\rules\rules.1.430.63

C:\Program Files\Dealio\kb127\rules\rules.1.432.65

C:\Program Files\Dealio\kb127\rules\rules.1.433.64

C:\Program Files\Dealio\kb127\rules\rules.1.434.65

C:\Program Files\Dealio\kb127\rules\rules.1.435.64

C:\Program Files\Dealio\kb127\rules\rules.1.436.76

C:\Program Files\Dealio\kb127\rules\rules.1.437.64

C:\Program Files\Dealio\kb127\rules\rules.1.438.71

C:\Program Files\Dealio\kb127\rules\rules.1.439.71

C:\Program Files\Dealio\kb127\rules\rules.1.440.75

C:\Program Files\Dealio\kb127\rules\rules.1.442.73

C:\Program Files\Dealio\kb127\rules\rules.1.443.73

C:\Program Files\Dealio\kb127\rules\rules.1.444.73

C:\Program Files\Dealio\kb127\rules\rules.1.445.68

C:\Program Files\Dealio\kb127\rules\rules.1.446.69

C:\Program Files\Dealio\kb127\rules\rules.1.450.67

C:\Program Files\Dealio\kb127\rules\rules.1.451.67

C:\Program Files\Dealio\kb127\rules\rules.1.452.68

C:\Program Files\Dealio\kb127\rules\rules.1.453.68

C:\Program Files\Dealio\kb127\rules\rules.1.454.69

C:\Program Files\Dealio\kb127\rules\rules.1.456.69

C:\Program Files\Dealio\kb127\rules\rules.1.457.75

C:\Program Files\Dealio\kb127\rules\rules.1.458.70

C:\Program Files\Dealio\kb127\rules\rules.1.459.70

C:\Program Files\Dealio\kb127\rules\rules.1.460.69

C:\Program Files\Dealio\kb127\rules\rules.1.462.74

C:\Program Files\Dealio\kb127\rules\rules.1.463.69

C:\Program Files\Dealio\kb127\rules\rules.1.464.70

C:\Program Files\Dealio\kb127\rules\rules.1.465.68

C:\Program Files\Dealio\kb127\rules\rules.1.468.70

C:\Program Files\Dealio\kb127\rules\rules.1.469.70

C:\Program Files\Dealio\kb127\rules\rules.1.470.70

C:\Program Files\Dealio\kb127\rules\rules.1.471.73

C:\Program Files\Dealio\kb127\rules\rules.1.472.70

C:\Program Files\Dealio\kb127\rules\rules.1.478.74

C:\Program Files\Dealio\kb127\rules\rules.1.479.73

C:\Program Files\Dealio\kb127\rules\rules.1.480.68

C:\Program Files\Dealio\kb127\rules\rules.1.481.71

C:\Program Files\Dealio\kb127\rules\rules.1.482.74

C:\Program Files\Dealio\kb127\rules\rules.1.49.67

C:\Program Files\Dealio\kb127\rules\rules.1.50.43

C:\Program Files\Dealio\kb127\rules\rules.1.500.71

C:\Program Files\Dealio\kb127\rules\rules.1.501.74

C:\Program Files\Dealio\kb127\rules\rules.1.502.71

C:\Program Files\Dealio\kb127\rules\rules.1.51.69

C:\Program Files\Dealio\kb127\rules\rules.1.52.72

C:\Program Files\Dealio\kb127\rules\rules.1.520.76

C:\Program Files\Dealio\kb127\rules\rules.1.521.76

C:\Program Files\Dealio\kb127\rules\rules.1.522.76

C:\Program Files\Dealio\kb127\rules\rules.1.53.51

C:\Program Files\Dealio\kb127\rules\rules.1.531.76

C:\Program Files\Dealio\kb127\rules\rules.1.532.75

C:\Program Files\Dealio\kb127\rules\rules.1.534.75

C:\Program Files\Dealio\kb127\rules\rules.1.54.47

C:\Program Files\Dealio\kb127\rules\rules.1.55.45

C:\Program Files\Dealio\kb127\rules\rules.1.56.69

C:\Program Files\Dealio\kb127\rules\rules.1.57.43

C:\Program Files\Dealio\kb127\rules\rules.1.58.47

C:\Program Files\Dealio\kb127\rules\rules.1.593.76

C:\Program Files\Dealio\kb127\rules\rules.1.595.76

C:\Program Files\Dealio\kb127\rules\rules.1.63.57

C:\Program Files\Dealio\kb127\rules\rules.1.66.47

C:\Program Files\Dealio\kb127\rules\rules.1.70.75

C:\Program Files\Dealio\kb127\rules\rules.1.71.43

C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Dealio

C:\DOCUME~1\Elise\APPLIC~1\Search Settings

C:\DOCUME~1\Elise\APPLIC~1\Search Settings\kb127

C:\DOCUME~1\Elise\APPLIC~1\Search Settings\kb127\res

C:\DOCUME~1\Elise\APPLIC~1\Search Settings\kb127\temp

C:\DOCUME~1\Elise\APPLIC~1\Search Settings\kb127\temp\ws-14270.log

C:\DOCUME~1\Elise\APPLIC~1\Search Settings\kb127\temp\ws-14271.log

C:\DOCUME~1\Elise\APPLIC~1\Search Settings\kb127\temp\ws-14272.log

C:\DOCUME~1\Elise\APPLIC~1\Search Settings\kb127\temp\ws-14273.log

C:\Program Files\Search Settings

C:\Program Files\Search Settings\kb127

C:\Program Files\Search Settings\SearchSettings.exe

C:\Program Files\Search Settings\kb127\res

C:\Program Files\Search Settings\kb127\SearchSettings.dll

C:\Program Files\Search Settings\kb127\SearchSettingsRes409.dll

C:\Program Files\Search Settings\kb127\temp

-----------\\ Extensions

(Elise) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Local Page"="C:\\WINDOWS\\system32\\blank.htm"

"Start Page"="http://www.google.fr/"

"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"'>http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"'>http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"'>http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

"Search Bar"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]

"Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"

"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"

"Search Bar"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\Elise\Application Data\uTorrent\Age of empire 2 + Expantion FR + Crack.torrent

C:\DOCUME~1\Elise\Application Data\uTorrent\Age of Empires 2 - Crack.zip.torrent

C:\DOCUME~1\Elise\Mes documents\Aur‚l\Jeux\Age of Empire 2 crack

C:\DOCUME~1\Elise\Mes documents\Aur‚l\Jeux\Crack

C:\DOCUME~1\Elise\Mes documents\Aur‚l\Jeux\Age of Empire 2 crack\empires2.exe

C:\DOCUME~1\Elise\Mes documents\Aur‚l\Jeux\Age of Empire 2 crack\SETUPREG.EXE

C:\DOCUME~1\Elise\Mes documents\Aur‚l\Jeux\Crack\save

C:\DOCUME~1\Elise\Mes documents\Aur‚l\Jeux\Crack\save\age2_x1.exe

C:\DOCUME~1\Elise\Mes documents\Aur‚l\Jeux\goblins 1\crack.doc

C:\DOCUME~1\Elise\Mes documents\Aur‚l\Jeux\goblins 1\crack.txt

C:\DOCUME~1\Elise\Mes documents\Aur‚l\Jeux\Patchs\Crack

C:\DOCUME~1\Elise\Mes documents\Aur‚l\Jeux\Patchs\PES\Crack

C:\DOCUME~1\Elise\Mes documents\Aur‚l\Jeux\Patchs\PES\Crack\PES2008.exe

C:\DOCUME~1\Elise\Mes documents\Downloads\Football.Manager.2009.PC\CRACK

C:\DOCUME~1\Elise\Mes documents\Downloads\Football.Manager.2009.PC\CRACK\fm2009-crack&patch.r00

C:\DOCUME~1\Elise\Mes documents\Downloads\Football.Manager.2009.PC\CRACK\fm2009-crack&patch.r01

C:\DOCUME~1\Elise\Mes documents\Downloads\Football.Manager.2009.PC\CRACK\fm2009-crack&patch.r02

C:\DOCUME~1\Elise\Mes documents\Downloads\Football.Manager.2009.PC\CRACK\fm2009-crack&patch.r03

C:\DOCUME~1\Elise\Mes documents\Downloads\Football.Manager.2009.PC\CRACK\fm2009-crack&patch.r04

C:\DOCUME~1\Elise\Mes documents\Downloads\Football.Manager.2009.PC\CRACK\fm2009-crack&patch.r05

C:\DOCUME~1\Elise\Mes documents\Downloads\Football.Manager.2009.PC\CRACK\fm2009-crack&patch.r06

C:\DOCUME~1\Elise\Mes documents\Downloads\Football.Manager.2009.PC\CRACK\fm2009-crack&patch.r07

C:\DOCUME~1\Elise\Mes documents\Downloads\Football.Manager.2009.PC\CRACK\fm2009-crack&patch.r08

C:\DOCUME~1\Elise\Mes documents\Downloads\Football.Manager.2009.PC\CRACK\fm2009-crack&patch.r09

C:\DOCUME~1\Elise\Mes documents\Downloads\Football.Manager.2009.PC\CRACK\fm2009-crack&patch.r10

C:\DOCUME~1\Elise\Mes documents\Downloads\Football.Manager.2009.PC\CRACK\fm2009-crack&patch.rar

C:\DOCUME~1\Elise\Mes documents\Downloads\Football.Manager.2009.PC\CRACK\fm2009-crack&patch.sfv

C:\DOCUME~1\Elise\Mes documents\Downloads\Football.Manager.2009.PC\CRACK\FM2009_v9.1.0_Patch.exe

C:\DOCUME~1\Elise\Mes documents\Downloads\Football.Manager.2009.PC\CRACK\fm91_t1.exe

1 - "C:\ToolBar SD\TB_1.txt" - 29/01/2009|11:28 - Option : [1]

-----------\\ Fin du rapport a 11:28:06,89

Aguero10 · le 29 janvier 2009

Euuuuh... et ensuite ?

Aguero10 · le 29 janvier 2009

-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3

X86-based PC ( Multiprocessor Free : AMD Athlon 64 X2 Dual Core Processor 4800+ )

BIOS : Award Modular BIOS v6.00PG

USER : Elise ( Administrator )

BOOT : Normal boot

Antivirus : Avira AntiVir PersonalEdition 8.0.1.30 (Activated)

Firewall : COMODO Firewall 3.5 (Activated)

A:\ (USB)

C:\ (Local Disk) - NTFS - Total:97 Go (Free:23 Go)

D:\ (Local Disk) - NTFS - Total:149 Go (Free:110 Go)

E:\ (Local Disk) - NTFS - Total:200 Go (Free:38 Go)

F:\ (CD or DVD)

G:\ (CD or DVD)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )

Option : [1] ( 29/01/2009|20:42 )