Infection

François-Joseph · le 23 mars 2009

Bonjour,

J'aurais besoin de votre aide ou avis éclairé selon le rapport ZHPLil faudrait éliminer certaines lignes.

Ainsi je me réfère à vous pour le nettoyage. Ci-joint mon log

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 16:10:50, on 23/03/2009

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16791)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\ZoneLabs\vsmon.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Avira\AntiVir PersonalEdition Premium\sched.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Avira\AntiVir PersonalEdition Premium\avguard.exe

C:\Program Files\Avira\AntiVir PersonalEdition Premium\avesvc.exe

C:\WINDOWS\system32\cisvc.exe

C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe

C:\WINDOWS\System32\nvsvc32.exe

C:\WINDOWS\system32\slserv.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Raxco\PerfectDisk\PDSched.exe

C:\Program Files\Avira\AntiVir PersonalEdition Premium\avmailc.exe

C:\Program Files\Avira\AntiVir PersonalEdition Premium\AVWEBGRD.EXE

C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe

C:\Program Files\Avira\AntiVir PersonalEdition Premium\avgnt.exe

C:\Program Files\Stardock\CursorFX\CursorFX.exe

C:\WINDOWS\system32\ctfmon.exe

C:\WINDOWS\System32\TuneUpDefragService.exe

C:\WINDOWS\system32\cidaemon.exe

D:\Téléchargements\Outils\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.fr/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: (no name) - {6A87B991-A31F-4130-AE72-6D0C294BF082} - (no file)

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Tunebite_WebRipPlugin Class - {AA102584-3B97-47e7-B9BC-75D54C110A7D} - C:\Program Files\RapidSolution\Tunebite\plugins\IE\TB_WebRipIePlugin.dll

O2 - BHO: (no name) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - (no file)

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O3 - Toolbar: (no name) - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - (no file)

O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Premium\avgnt.exe" /min

O4 - HKCU\..\Run: [CursorFX] "C:\Program Files\Stardock\CursorFX\CursorFX.exe"

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')

O8 - Extra context menu item: Compare Prices with &Dealio - C:\Documents and Settings\F-J\Application Data\Dealio\kb127\res\DealioSearch.html

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\WINDOWS\system32\shdocvw.dll

O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\WINDOWS\system32\shdocvw.dll

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1171042786343

O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - http://www.touslesdrivers.com/fichiers/har...on.cab?version=

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{1D66FAE5-E1DD-4E11-A712-E3E4B9CC79FF}: NameServer = 212.27.53.252,212.27.54.252

O17 - HKLM\System\CS1\Services\Tcpip\..\{1D66FAE5-E1DD-4E11-A712-E3E4B9CC79FF}: NameServer = 212.27.53.252,212.27.54.252

O23 - Service: a-squared Free Service (a2free) - Unknown owner - D:\APPLICATION\a-squared Free\a2service.exe (file missing)

O23 - Service: Avira AntiVir Premium MailGuard (AntiVirMailService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\avmailc.exe

O23 - Service: Planificateur Avira AntiVir Premium (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\sched.exe

O23 - Service: Avira AntiVir Premium Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\avguard.exe

O23 - Service: Avira AntiVir Premium WebGuard (antivirwebservice) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\AVWEBGRD.EXE

O23 - Service: Service d'assistance Avira AntiVir Premium MailGuard (AVEService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Premium\avesvc.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: Service de l'iPod (iPod Service) - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe

O23 - Service: PDScheduler (PDSched) - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDSched.exe

O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe

O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/F-J/LOCALS~1/Temp/msohtml1/01/clip_image002.gif

--

End of file - 8464 bytes

Merci de vous pencher sur mon problème. FJZ

pear · le 23 mars 2009

Bonsoir,

color=#0000FF]

Téléchargez Toolbar-S&D sur le Bureau.

Si vous utilisez Spybot

Pour désactiver TeaTimer qui ne sert à rien et peut faire échouer une désinfection:!

Afficher d'abord le Mode Avancé dans SpyBot

->Options Avancées :

- >menu Mode, Mode Avancé.

Une colonne de menus apparaît dans la partie gauche :

- >cliquer sur Outils,

- >cliquer sur Résident,

Dans Résident :

- >décocher Résident "TeaTimer" pour le désactiver.

Lancez l'installation du programme en exécutant le fichier téléchargé.

Redémarrez en mode sans échec

Double-cliquez sur le raccourci de Toolbar-S&D.

Sélectionnez la langue souhaitée en tapant la lettre de votre choix puis en validant avec la touche Entrée.

Choisisssez l'option 1 (Recherche).

Patientez jusqu'à la fin de la recherche.

Postez le rapport généré. (C:\TB.txt)

Relancez Toolbar-S&D en double-cliquant sur le raccourci. Tapez sur "2" et validez par"Entrée".

Ne fermez pas la fenêtre lors de la suppression !

Un rapport sera généré,

postez son contenu ici.

NOTE : Si le Bureau ne réapparait pas, appuyer simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.

Allez à l'onglet "Processus". Cliquez en haut à gauche sur Fichier ->"Exécuter..."

Tapez explorer et validez.

[/color]

François-Joseph · le 23 mars 2009

Bonsoir,

color=#0000FF]

Téléchargez Toolbar-S&D sur le Bureau.

Si vous utilisez Spybot

Pour désactiver TeaTimer qui ne sert à rien et peut faire échouer une désinfection:!

Afficher d'abord le Mode Avancé dans SpyBot

->Options Avancées :

- >menu Mode, Mode Avancé.

Une colonne de menus apparaît dans la partie gauche :

- >cliquer sur Outils,

- >cliquer sur Résident,

Dans Résident :

- >décocher Résident "TeaTimer" pour le désactiver.

Lancez l'installation du programme en exécutant le fichier téléchargé.

Redémarrez en mode sans échec

Double-cliquez sur le raccourci de Toolbar-S&D.

Sélectionnez la langue souhaitée en tapant la lettre de votre choix puis en validant avec la touche Entrée.

Choisisssez l'option 1 (Recherche).

Patientez jusqu'à la fin de la recherche.

Postez le rapport généré. (C:\TB.txt)

Relancez Toolbar-S&D en double-cliquant sur le raccourci. Tapez sur "2" et validez par"Entrée".

Ne fermez pas la fenêtre lors de la suppression !

Un rapport sera généré,

postez son contenu ici.

NOTE : Si le Bureau ne réapparait pas, appuyer simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.

Allez à l'onglet "Processus". Cliquez en haut à gauche sur Fichier ->"Exécuter..."

Tapez explorer et validez.

[/color]

Merci Pear,

Je joins les deux résultats

-----------\\ ToolBar S&D 1.2.8 XP/Vista

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )

Option : [1] ( 23/03/2009|19:33 )

-----------\\ Recherche de Fichiers / Dossiers ...

C:\DOCUME~1\F-J\APPLIC~1\Dealio

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\res

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\temp

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\res\alerts.gif

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\res\alerts_over.gif

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\res\alerts_rec.gif

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\res\alerts_rec_over.gif

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\res\chevron-small.gif

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\res\DealioSearch.html

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\res\deals-leftcap.gif

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\res\deal_report.jpg

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\res\ebay_login.jpg

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\res\err_mainwindow.html

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\res\err_toolbar.html

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\res\global_scripts.js

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\res\headerbgthin.jpg

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\res\highlight-bg.png

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\res\logo.gif

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\res\logo_over.gif

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\res\man_toolbar.css

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\res\man_toolbar.html

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\res\man_toolbar.js

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\res\man_toolbarl.js

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\res\post-this-deal.gif

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\res\post-this-deal_over.gif

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\res\scripts.js

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\res\scroller.js

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\res\search-chevron.gif

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\res\search-chevron_over.gif

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\res\search_bg_blink.gif

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\res\separator.gif

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\res\settings.gif

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\res\settings_over.gif

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\res\yahoo-search.png

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\index.76.35

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.10.76

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.109.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.110.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.12.52

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.13.58

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.130.58

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.135.50

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.153.44

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.155.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.156.49

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.16.60

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.161.52

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.178.66

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.184.55

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.188.52

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.189.45

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.196.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.198.56

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.199.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.200.53

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.201.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.202.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.203.71

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.205.62

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.213.71

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.214.49

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.215.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.216.67

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.217.67

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.218.52

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.219.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.220.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.221.57

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.222.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.223.68

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.226.68

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.227.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.228.62

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.229.76

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.23.63

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.239.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.24.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.240.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.241.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.242.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.243.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.244.63

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.245.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.247.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.248.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.249.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.250.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.251.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.252.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.253.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.254.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.255.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.256.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.257.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.279.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.28.58

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.282.75

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.283.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.284.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.289.67

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.290.62

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.291.61

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.296.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.297.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.304.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.307.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.308.75

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.31.47

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.310.46

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.311.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.315.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.316.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.317.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.318.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.319.49

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.32.48

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.334.44

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.335.60

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.336.44

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.337.44

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.338.75

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.339.47

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.34.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.340.47

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.341.47

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.349.50

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.35.48

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.350.50

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.351.51

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.352.54

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.353.51

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.354.51

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.357.62

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.358.52

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.359.52

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.360.53

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.361.54

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.362.68

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.363.58

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.364.54

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.365.53

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.367.56

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.368.58

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.369.55

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.370.56

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.371.56

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.372.57

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.373.55

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.375.56

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.376.57

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.377.55

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.378.65

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.384.58

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.386.71

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.387.59

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.388.59

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.389.59

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.390.60

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.391.60

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.392.60

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.393.60

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.394.60

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.396.61

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.397.61

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.398.60

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.399.60

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.403.61

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.404.63

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.405.61

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.406.61

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.407.76

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.408.63

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.409.61

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.412.62

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.413.62

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.414.62

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.415.62

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.416.62

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.417.62

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.418.62

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.419.62

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.420.62

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.421.62

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.423.63

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.424.63

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.425.63

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.426.63

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.427.63

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.428.65

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.429.63

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.430.63

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.432.65

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.433.64

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.434.65

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.435.64

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.436.76

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.437.64

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.438.71

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.439.71

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.440.75

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.442.73

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.443.73

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.444.73

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.445.68

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.446.69

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.450.67

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.451.67

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.452.68

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.453.68

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.454.69

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.456.69

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.457.75

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.458.70

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.459.70

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.460.69

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.462.74

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.463.69

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.464.70

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.465.68

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.468.70

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.469.70

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.470.70

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.471.73

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.472.70

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.478.74

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.479.73

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.480.68

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.481.71

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.482.74

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.49.67

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.50.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.500.71

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.501.74

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.502.71

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.51.69

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.52.72

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.520.76

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.521.76

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.522.76

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.53.51

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.531.76

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.532.75

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.534.75

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.54.47

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.55.45

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.56.69

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.57.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.58.47

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.593.76

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.595.76

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.63.57

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.66.47

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.70.75

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\rules\rules.1.71.43

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\temp\dealio-14315.log

C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127\temp\dod_cache.xml

C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Dealio

C:\DOCUME~1\F-J\APPLIC~1\Search Settings

C:\DOCUME~1\F-J\APPLIC~1\Search Settings\kb127

C:\DOCUME~1\F-J\APPLIC~1\Search Settings\kb127\res

C:\DOCUME~1\F-J\APPLIC~1\Search Settings\kb127\temp

C:\Program Files\Search Settings

C:\Program Files\Search Settings\kb127

C:\Program Files\Search Settings\SearchSettings.exe

C:\Program Files\Search Settings\kb127\res

C:\Program Files\Search Settings\kb127\SearchSettings.dll

C:\Program Files\Search Settings\kb127\SearchSettingsRes409.dll

C:\Program Files\Search Settings\kb127\temp

-----------\\ Extensions

(F-J) - {0b457cAA-602d-484a-8fe7-c1d894a011ba} => fireshot

(F-J) - {1A2D0EC4-75F5-4c91-89C4-3656F6E44B68} => imagezoom

(F-J) - {b9db16a4-6edc-47ec-a1f4-b86292ed211d} => dwhelper

(F-J) - {247042CB-2281-483B-AC2D-230B2F3774CB} => littlebird

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-ca

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-cs

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-da

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-de

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-en-US

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-es-AR

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-es-ES

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-eu

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-fr

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-ga-IE

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-hu

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-is

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-it

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-ja-JP-mac

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-ja

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-ka

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-ko

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-lt

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-nb-NO

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-nl

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-nn-NO

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-pl

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-pt-BR

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-pt-PT

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-ro

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-ru

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-sk

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-sl

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-sv-SE

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-uk

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-zh-CN

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar-zh-TW

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => calendar

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-ca

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-cs

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-da

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-de

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-en-US

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-es-AR

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-es-ES

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-eu

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-fr

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-ga-IE

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-hu

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-is

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-it

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-ja-JP-mac

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-ja

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-ka

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-ko

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-lt

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-nb-NO

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-nl

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-nn-NO

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-pl

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-pt-BR

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-pt-PT

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-ro

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-ru

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-sk

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-sl

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-sv-SE

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-uk

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-zh-CN

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning-zh-TW

(F-J) - {e2fda1a4-762b-4020-b5ad-a41df1933103} => lightning

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Local Page"="C:\\WINDOWS\\system32\\blank.htm"

"Start Page"="http://google.fr/"'>http://google.fr/"

"Search Page"="http://www.google.com"'>http://www.google.com"

"Search Bar"="http://www.google.com/ie"'>http://www.google.com/ie"'>http://www.google.com/ie"'>http://www.google.com/ie"

"SearchMigratedDefaultURL"="http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"'>http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"

"Default_Search_URL"="http://www.google.com/ie"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]

"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"'>http://go.microsoft.com/fwlink/?LinkId=69157"'>http://go.microsoft.com/fwlink/?LinkId=69157"

"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"'>http://go.microsoft.com/fwlink/?LinkId=54896"'>http://go.microsoft.com/fwlink/?LinkId=54896"'>http://go.microsoft.com/fwlink/?LinkId=54896"

"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"

"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

--------------------\\ Recherche d'autres infections

Aucune autre infection trouvée !

1 - "C:\ToolBar SD\TB_1.txt" - 23/03/2009|19:33 - Option : [1]

-----------\\ Fin du rapport a 19:33:58,34

-----------\\ ToolBar S&D 1.2.8 XP/Vista

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )

Option : [2] ( 23/03/2009|19:36 )

-----------\\ SUPPRESSION

Supprime! - C:\DOCUME~1\F-J\APPLIC~1\Dealio\kb127

Supprime! - C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Dealio

Supprime! - C:\DOCUME~1\F-J\APPLIC~1\Search Settings\kb127

Supprime! - C:\Program Files\Search Settings\kb127

Supprime! - C:\Program Files\Search Settings\SearchSettings.exe

Supprime! - C:\DOCUME~1\F-J\APPLIC~1\Dealio

Supprime! - C:\DOCUME~1\F-J\APPLIC~1\Search Settings

Supprime! - C:\Program Files\Search Settings