Analyse hikackthis et navilog
chris
-
Utilisateur anonyme -
Utilisateur anonyme -
Bonjour,
pouvez vous m'aider svp
mon pc se bloque regulierement , est ce un virus ?
j'ai pourtant spybot et nod32
voici un scan hijackthis et navilog
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:45:52, on 08/02/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal
Running processes:
C:\WINDOWSA\System32\smss.exe
C:\WINDOWSA\system32\winlogon.exe
C:\WINDOWSA\system32\services.exe
C:\WINDOWSA\system32\lsass.exe
C:\WINDOWSA\system32\svchost.exe
C:\WINDOWSA\System32\svchost.exe
C:\WINDOWSA\system32\spoolsv.exe
C:\WINDOWSA\Explorer.EXE
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWSA\System32\nvsvc32.exe
C:\WINDOWSA\system32\IoctlSvc.exe
C:\WINDOWSA\system32\spupdsvc.exe
C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
C:\WINDOWSA\System32\svchost.exe
C:\WINDOWSA\TBPanel.exe
C:\WINDOWSA\system32\RUNDLL32.EXE
C:\WINDOWSA\RTHDCPL.EXE
C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWSA\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Sitecom Wireless Network Card Setup\RtWLan.exe
C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
C:\WINDOWSA\system32\cmd.exe
C:\WINDOWSA\System32\svchost.exe
C:\Program Files\VideoLAN\VLC\vlc.exe
C:\PROGRA~1\Mozilla Firefox\firefox.exe
C:\Documents and Settings\chris\Bureau\HiJackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - (no file)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [Gainward] C:\WINDOWSA\TBPanel.exe /A
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWSA\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWSA\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWSA\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 52\axcmd.exe" /automount
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWSA\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWSA\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWSA\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWSA\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Sitecom Wireless Utility.lnk = ?
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: CDPoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - C:\Poker\CDPoker\casino.exe
O9 - Extra 'Tools' menuitem: CDPoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - C:\Poker\CDPoker\casino.exe
O9 - Extra button: PartyCasino - {B4B52284-A248-4c51-9F7C-F0A0C67FCC9D} - C:\Program Files\PartyGaming\PartyCasino\RunApp.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyCasino - {B4B52284-A248-4c51-9F7C-F0A0C67FCC9D} - C:\Program Files\PartyGaming\PartyCasino\RunApp.exe (file missing)
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWSA\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWSA\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Crazy Vegas Poker - {00000000-0000-0000-0000-000000000000} - C:\MicroGaming\Poker\crazyvegasMPP\MPPoker.exe (file missing) (HKCU)
O9 - Extra button: Absolute Poker - {13C1DBF6-7535-495c-91F6-8C13714ED485} - C:\Documents and Settings\chris\Menu Démarrer\Programmes\Absolute Poker\Absolute Poker.lnk (HKCU)
O9 - Extra 'Tools' menuitem: Absolute Poker - {13C1DBF6-7535-495c-91F6-8C13714ED485} - C:\Documents and Settings\chris\Menu Démarrer\Programmes\Absolute Poker\Absolute Poker.lnk (HKCU)
O9 - Extra button: CarbonPoker - {e4e8c758-34b4-44bb-8ef9-1f0786e81d2d} - C:\Documents and Settings\chris\Menu Démarrer\Programmes\CarbonPoker\CarbonPoker.lnk (HKCU)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} -
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://signin3.valueactive.com/Register/Branding/olr3313/OCX/v1018/flashax.cab
O16 - DPF: {F7EDBBEA-1AD2-4EBF-AA07-D453CC29EE65} (Flash Casino Helper Object) - https://bellerock.microgaming.com/freeplayfrench/FlashAX2.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{DE6C15D1-5CD2-43C7-830A-92B2D1B5C6B6}: NameServer = 80.10.246.2,80.10.246.129
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWSA\System32\nvsvc32.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWSA\system32\IoctlSvc.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
--
End of file - 8139 bytes
scan navilog
Search Navipromo version 3.7.2 commencé le 08/02/2009 à 14:50:22,39
!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!
Outil exécuté depuis C:\Program Files\navilog1
Mise à jour le 07.02.2009 à 10h00 par IL-MAFIOSO
Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU E6750 @ 2.66GHz )
BIOS : BIOS Date: 10/30/07 20:44:12 Ver: 08.00.12
USER : chris ( Administrator )
BOOT : Normal boot
Antivirus : ESET NOD32 antivirus system 2.70 2.70 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:76 Go (Free:2 Go)
D:\ (CD or DVD) - CDFS - Total:3 Go (Free:0 Go)
E:\ (CD or DVD)
Recherche executé en mode normal
*** Recherche Programmes installés ***
*** Recherche dossiers dans "C:\WINDOWSA" ***
*** Recherche dossiers dans "C:\Program Files" ***
*** Recherche dossiers dans "C:\Documents and Settings\All Users.WINDOWSA\menudm~1\progra~1" ***
*** Recherche dossiers dans "C:\Documents and Settings\All Users.WINDOWSA\menudm~1" ***
*** Recherche dossiers dans "c:\docume~1\alluse~1.win\applic~1" ***
*** Recherche dossiers dans "C:\Documents and Settings\chris\applic~1" ***
*** Recherche dossiers dans "C:\DOCUME~1\Default\applic~1" ***
*** Recherche dossiers dans "C:\Documents and Settings\chris\locals~1\applic~1" ***
*** Recherche dossiers dans "C:\DOCUME~1\Default\locals~1\applic~1" ***
*** Recherche dossiers dans "C:\Documents and Settings\chris\menudm~1\progra~1" ***
*** Recherche dossiers dans "C:\DOCUME~1\Default\menudm~1\progra~1" ***
*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!
* Recherche dans "C:\WINDOWSA\system32" *
* Recherche dans "C:\Documents and Settings\chris\locals~1\applic~1" *
*** Recherche fichiers ***
*** Recherche clés spécifiques dans le Registre ***
!! Les clés trouvées ne sont pas forcément infectées !!
*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)
1)Recherche nouveaux fichiers Instant Access :
2)Recherche Heuristique :
* Dans "C:\WINDOWSA\system32" :
* Dans "C:\Documents and Settings\chris\locals~1\applic~1" :
* Dans "C:\DOCUME~1\Default\locals~1\applic~1" :
3)Recherche Certificats :
Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat Montorgueil absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltd absent !
4)Recherche autres dossiers et fichiers connus :
*** Analyse terminée le 08/02/2009 à 14:50:59,60 ***
merci d'avance
pouvez vous m'aider svp
mon pc se bloque regulierement , est ce un virus ?
j'ai pourtant spybot et nod32
voici un scan hijackthis et navilog
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:45:52, on 08/02/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal
Running processes:
C:\WINDOWSA\System32\smss.exe
C:\WINDOWSA\system32\winlogon.exe
C:\WINDOWSA\system32\services.exe
C:\WINDOWSA\system32\lsass.exe
C:\WINDOWSA\system32\svchost.exe
C:\WINDOWSA\System32\svchost.exe
C:\WINDOWSA\system32\spoolsv.exe
C:\WINDOWSA\Explorer.EXE
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWSA\System32\nvsvc32.exe
C:\WINDOWSA\system32\IoctlSvc.exe
C:\WINDOWSA\system32\spupdsvc.exe
C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
C:\WINDOWSA\System32\svchost.exe
C:\WINDOWSA\TBPanel.exe
C:\WINDOWSA\system32\RUNDLL32.EXE
C:\WINDOWSA\RTHDCPL.EXE
C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWSA\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Sitecom Wireless Network Card Setup\RtWLan.exe
C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
C:\WINDOWSA\system32\cmd.exe
C:\WINDOWSA\System32\svchost.exe
C:\Program Files\VideoLAN\VLC\vlc.exe
C:\PROGRA~1\Mozilla Firefox\firefox.exe
C:\Documents and Settings\chris\Bureau\HiJackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - (no file)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [Gainward] C:\WINDOWSA\TBPanel.exe /A
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWSA\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWSA\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWSA\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 52\axcmd.exe" /automount
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWSA\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWSA\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWSA\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWSA\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Sitecom Wireless Utility.lnk = ?
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: CDPoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - C:\Poker\CDPoker\casino.exe
O9 - Extra 'Tools' menuitem: CDPoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - C:\Poker\CDPoker\casino.exe
O9 - Extra button: PartyCasino - {B4B52284-A248-4c51-9F7C-F0A0C67FCC9D} - C:\Program Files\PartyGaming\PartyCasino\RunApp.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyCasino - {B4B52284-A248-4c51-9F7C-F0A0C67FCC9D} - C:\Program Files\PartyGaming\PartyCasino\RunApp.exe (file missing)
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWSA\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWSA\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Crazy Vegas Poker - {00000000-0000-0000-0000-000000000000} - C:\MicroGaming\Poker\crazyvegasMPP\MPPoker.exe (file missing) (HKCU)
O9 - Extra button: Absolute Poker - {13C1DBF6-7535-495c-91F6-8C13714ED485} - C:\Documents and Settings\chris\Menu Démarrer\Programmes\Absolute Poker\Absolute Poker.lnk (HKCU)
O9 - Extra 'Tools' menuitem: Absolute Poker - {13C1DBF6-7535-495c-91F6-8C13714ED485} - C:\Documents and Settings\chris\Menu Démarrer\Programmes\Absolute Poker\Absolute Poker.lnk (HKCU)
O9 - Extra button: CarbonPoker - {e4e8c758-34b4-44bb-8ef9-1f0786e81d2d} - C:\Documents and Settings\chris\Menu Démarrer\Programmes\CarbonPoker\CarbonPoker.lnk (HKCU)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} -
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://signin3.valueactive.com/Register/Branding/olr3313/OCX/v1018/flashax.cab
O16 - DPF: {F7EDBBEA-1AD2-4EBF-AA07-D453CC29EE65} (Flash Casino Helper Object) - https://bellerock.microgaming.com/freeplayfrench/FlashAX2.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{DE6C15D1-5CD2-43C7-830A-92B2D1B5C6B6}: NameServer = 80.10.246.2,80.10.246.129
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWSA\System32\nvsvc32.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWSA\system32\IoctlSvc.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
--
End of file - 8139 bytes
scan navilog
Search Navipromo version 3.7.2 commencé le 08/02/2009 à 14:50:22,39
!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!
Outil exécuté depuis C:\Program Files\navilog1
Mise à jour le 07.02.2009 à 10h00 par IL-MAFIOSO
Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU E6750 @ 2.66GHz )
BIOS : BIOS Date: 10/30/07 20:44:12 Ver: 08.00.12
USER : chris ( Administrator )
BOOT : Normal boot
Antivirus : ESET NOD32 antivirus system 2.70 2.70 (Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:76 Go (Free:2 Go)
D:\ (CD or DVD) - CDFS - Total:3 Go (Free:0 Go)
E:\ (CD or DVD)
Recherche executé en mode normal
*** Recherche Programmes installés ***
*** Recherche dossiers dans "C:\WINDOWSA" ***
*** Recherche dossiers dans "C:\Program Files" ***
*** Recherche dossiers dans "C:\Documents and Settings\All Users.WINDOWSA\menudm~1\progra~1" ***
*** Recherche dossiers dans "C:\Documents and Settings\All Users.WINDOWSA\menudm~1" ***
*** Recherche dossiers dans "c:\docume~1\alluse~1.win\applic~1" ***
*** Recherche dossiers dans "C:\Documents and Settings\chris\applic~1" ***
*** Recherche dossiers dans "C:\DOCUME~1\Default\applic~1" ***
*** Recherche dossiers dans "C:\Documents and Settings\chris\locals~1\applic~1" ***
*** Recherche dossiers dans "C:\DOCUME~1\Default\locals~1\applic~1" ***
*** Recherche dossiers dans "C:\Documents and Settings\chris\menudm~1\progra~1" ***
*** Recherche dossiers dans "C:\DOCUME~1\Default\menudm~1\progra~1" ***
*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!
* Recherche dans "C:\WINDOWSA\system32" *
* Recherche dans "C:\Documents and Settings\chris\locals~1\applic~1" *
*** Recherche fichiers ***
*** Recherche clés spécifiques dans le Registre ***
!! Les clés trouvées ne sont pas forcément infectées !!
*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)
1)Recherche nouveaux fichiers Instant Access :
2)Recherche Heuristique :
* Dans "C:\WINDOWSA\system32" :
* Dans "C:\Documents and Settings\chris\locals~1\applic~1" :
* Dans "C:\DOCUME~1\Default\locals~1\applic~1" :
3)Recherche Certificats :
Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat Montorgueil absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltd absent !
4)Recherche autres dossiers et fichiers connus :
*** Analyse terminée le 08/02/2009 à 14:50:59,60 ***
merci d'avance
Configuration: Windows XP Firefox 2.0.0.20
4 réponses
-
-
Hello
Doucement avec les programmes de Poker ...
Tu peux désinstaller Navilog.
Télécharges AD-Remover sur ton bureau :
/!\ Déconnectes toi et fermes toutes applications en cours
● Double clique sur le programme d'installation , et installe le dans son emplacement par défaut. ( C:\Program files )
● Double clique sur l'icône Ad-remover située sur ton bureau
● Au menu principal choisi l'option "A"
● Postes le rapport qui apparait à la fin .
( le rapport est sauvegardé sous C:\Ad-report(date).log )
(CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )
Note :
"Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
++-
bonjour à toi
lol pour les applications de poker
voila le rapport
------- LOGFILE OF AD-REMOVER 1.1.0.9 | ONLY XP/VISTA -------
Updated by C_XX on 07/02/2009 at 14:30
Start at: 15:20:16 | Dim 08/02/2009 | Microsoft® Windows XP™ SP3 (V5.1.2600)
Boot mode: Normal
Option: SCAN | Executed from: C:\Program Files\Ad-remover\Ad-remover.bat
Pc: CHRIS-S6U9VLDLW | User: chris ( Current user is an administrator)
Drive(s):
- C:\ (File System: NTFS)
- D:\ (File System: CDFS)
System Drive: C:\
Windows Directory: C:\WINDOWSA\
System Directory: C:\WINDOWSA\System32\
--- Running Processes: 43
+--------------------| Boonty/Boonty Games Elements Found:
.
.
+--------------------| Eorezo Elements Found:
.
+--------------------| Infected Poker Softwares Elements Found:
HKCU\Software\pacificpoker
HKCU\Software\PartyGaming
HKCU\Software\Poker 770
HKCU\Software\pokerinstaller
HKCU\Software\Titan Poker
HKLM\Software\Poker 770
HKLM\Software\Titan Poker
HKLM\Software\Microsoft\Internet Explorer\Extensions\{B7FE5D70-9AA2-40F1-9C6B-12A255F085E1}
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pacific Poker
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\PartyPoker
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Poker 770
HKU\S-1-5-21-1004336348-1770027372-839522115-1004\Software\Titan Poker
.
C:\Poker\Poker 770
C:\Poker\Poker 770\data
C:\Poker\Poker 770\History
C:\Poker\Poker 770\data\blackjack
C:\Poker\Poker 770\data\casinowar
C:\Poker\Poker 770\data\craps
C:\Poker\Poker 770\data\keno
C:\Poker\Poker 770\data\lobby
C:\Poker\Poker 770\data\poker_caribbean
C:\Poker\Poker 770\data\poker_holdem
C:\Poker\Poker 770\data\roulette
C:\Poker\Poker 770\data\shared
C:\Poker\Poker 770\data\slots_cinerama5reel
C:\Poker\Poker 770\data\slots_desert20line
C:\Poker\Poker 770\data\slots_gold8line
C:\Poker\Poker 770\data\slots_lotto20line
C:\Poker\Poker 770\data\slots_lovemore20line
C:\Poker\Poker 770\data\table
C:\Poker\Poker 770\data\videopoker_4jacks
C:\Poker\Poker 770\data\videopoker_jacks
C:\Poker\Poker 770\data\videopoker_joker
C:\Poker\Poker 770\data\craps\3d
C:\Poker\Poker 770\data\keno\3d
C:\Poker\Poker 770\data\keno\buttons
C:\Poker\Poker 770\data\keno\sounds
C:\Poker\Poker 770\data\lobby\buttons
C:\Poker\Poker 770\data\lobby\dialogs
C:\Poker\Poker 770\data\lobby\login
C:\Poker\Poker 770\data\lobby\sidegames
C:\Poker\Poker 770\data\lobby\tables
C:\Poker\Poker 770\data\lobby\waitinglist
C:\Poker\Poker 770\data\roulette\3d
C:\Poker\Poker 770\data\roulette\buttons
C:\Poker\Poker 770\data\roulette\sounds
C:\Poker\Poker 770\data\roulette\zoom
C:\Poker\Poker 770\data\shared\3d
C:\Poker\Poker 770\data\shared\9line
C:\Poker\Poker 770\data\shared\blackjack
C:\Poker\Poker 770\data\shared\buttons
C:\Poker\Poker 770\data\shared\cards
C:\Poker\Poker 770\data\shared\coins
C:\Poker\Poker 770\data\shared\dollarball
C:\Poker\Poker 770\data\shared\doublescreen
C:\Poker\Poker 770\data\shared\fonts
C:\Poker\Poker 770\data\shared\history
C:\Poker\Poker 770\data\shared\html
C:\Poker\Poker 770\data\shared\interface
C:\Poker\Poker 770\data\shared\options
C:\Poker\Poker 770\data\shared\sounds
C:\Poker\Poker 770\data\shared\tablegames
C:\Poker\Poker 770\data\shared\tablesigns
C:\Poker\Poker 770\data\shared\ui
C:\Poker\Poker 770\data\shared\videopoker_4line
C:\Poker\Poker 770\data\shared\videopoker_jacks
C:\Poker\Poker 770\data\shared\cards\poker
C:\Poker\Poker 770\data\shared\cards\textures
C:\Poker\Poker 770\data\shared\coins\tablecoins
C:\Poker\Poker 770\data\shared\dollarball\sounds
C:\Poker\Poker 770\data\shared\history\cards
C:\Poker\Poker 770\data\shared\html\chat
C:\Poker\Poker 770\data\shared\html\chat\emoticons
C:\Poker\Poker 770\data\shared\interface\chat
C:\Poker\Poker 770\data\shared\sounds\dealervoices
C:\Poker\Poker 770\data\shared\sounds\playersounds
C:\Poker\Poker 770\data\shared\sounds\dealervoices\numbers
C:\Poker\Poker 770\data\shared\sounds\playersounds\baseballer
C:\Poker\Poker 770\data\shared\sounds\playersounds\blackdude
C:\Poker\Poker 770\data\shared\sounds\playersounds\bond
C:\Poker\Poker 770\data\shared\sounds\playersounds\cowboy
C:\Poker\Poker 770\data\shared\sounds\playersounds\frenchgirl
C:\Poker\Poker 770\data\shared\sounds\playersounds\frenchman
C:\Poker\Poker 770\data\shared\sounds\playersounds\mafiaguy
C:\Poker\Poker 770\data\shared\sounds\playersounds\olderbusinesswoman
C:\Poker\Poker 770\data\shared\sounds\playersounds\oldtourist
C:\Poker\Poker 770\data\shared\sounds\playersounds\valleygirl
C:\Poker\Poker 770\data\shared\tablegames\gold_dark
C:\Poker\Poker 770\data\shared\videopoker_4line\buttons
C:\Poker\Poker 770\data\slots_cinerama5reel\bonus
C:\Poker\Poker 770\data\slots_cinerama5reel\bonus2
C:\Poker\Poker 770\data\slots_cinerama5reel\sounds
C:\Poker\Poker 770\data\slots_cinerama5reel\wintable
C:\Poker\Poker 770\data\slots_cinerama5reel\bonus\select
C:\Poker\Poker 770\data\slots_cinerama5reel\bonus2\select
C:\Poker\Poker 770\data\slots_desert20line\bonusgame
C:\Poker\Poker 770\data\slots_desert20line\sounds
C:\Poker\Poker 770\data\slots_desert20line\wintable
C:\Poker\Poker 770\data\slots_gold8line\bonus
C:\Poker\Poker 770\data\slots_gold8line\fonts
C:\Poker\Poker 770\data\slots_gold8line\sounds
C:\Poker\Poker 770\data\slots_gold8line\wintable
C:\Poker\Poker 770\data\slots_gold8line\bonus\screen
C:\Poker\Poker 770\data\slots_lotto20line\animation
C:\Poker\Poker 770\data\slots_lotto20line\bonusgame
C:\Poker\Poker 770\data\slots_lotto20line\fonts
C:\Poker\Poker 770\data\slots_lotto20line\sounds
C:\Poker\Poker 770\data\slots_lotto20line\wintable
C:\Poker\Poker 770\data\slots_lovemore20line\dollarball
C:\Poker\Poker 770\data\slots_lovemore20line\sounds
C:\Poker\Poker 770\data\slots_lovemore20line\wintable
C:\Poker\Poker 770\data\table\3d
C:\Poker\Poker 770\data\table\anim
C:\Poker\Poker 770\data\table\chat
C:\Poker\Poker 770\data\table\smallview
C:\Poker\Poker 770\data\table\topview
C:\Poker\Poker 770\data\table\chat\cards
C:\Poker\Poker 770\data\table\smallview\anim
C:\Poker\Poker 770\data\table\smallview\buttons
C:\Poker\Poker 770\data\table\smallview\chat
C:\Poker\Poker 770\data\table\smallview\coins
C:\Poker\Poker 770\data\table\smallview\chat\chat_bottom
C:\Poker\Poker 770\data\table\topview\anim
C:\Poker\Poker 770\data\table\topview\avatars
C:\Poker\Poker 770\data\table\topview\buttons
C:\Poker\Poker 770\data\table\topview\cards
C:\Poker\Poker 770\data\table\topview\chat
C:\Poker\Poker 770\data\table\topview\coins
C:\Poker\Poker 770\data\table\topview\dialogs
C:\Poker\Poker 770\data\table\topview\history
C:\Poker\Poker 770\data\table\topview\chat\chat_bottom
C:\Poker\Poker 770\data\table\topview\chat\chat_side
C:\Poker\Poker 770\data\videopoker_joker\animation
C:\Poker\Poker 770\History\DEF620
C:\Poker\Poker 770\History\DEF620\Table
C:\Poker\Poker 770\History\DEF620\Tournament
C:\Program Files\PacificPoker
C:\Program Files\PacificPoker\bin
C:\Program Files\PacificPoker\bin\casinopoker
C:\Program Files\PacificPoker\bin\casinopoker\bin
C:\Program Files\PartyGaming
C:\Program Files\PartyGaming\images
C:\Program Files\PartyGaming\Language
C:\Program Files\PartyGaming\PartyCasino
C:\Program Files\PartyGaming\PartyPoker
C:\Program Files\PartyGaming\tmpUpgrade
C:\Program Files\PartyGaming\Language\en_US
C:\Program Files\PartyGaming\Language\fr_FR
C:\Program Files\PartyGaming\Language\en_US\temp
C:\Program Files\PartyGaming\Language\fr_FR\temp
C:\Program Files\PartyGaming\PartyCasino\language
C:\Program Files\PartyGaming\PartyCasino\Temp
C:\Program Files\PartyGaming\PartyCasino\language\en_US
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR
C:\Program Files\PartyGaming\PartyCasino\language\en_US\articles
C:\Program Files\PartyGaming\PartyCasino\language\en_US\images
C:\Program Files\PartyGaming\PartyCasino\language\en_US\images\games
C:\Program Files\PartyGaming\PartyCasino\language\en_US\images\games\cardgames
C:\Program Files\PartyGaming\PartyCasino\language\en_US\images\games\cardgames\blackjack
C:\Program Files\PartyGaming\PartyCasino\language\en_US\images\games\cardgames\multiplayerbj
C:\Program Files\PartyGaming\PartyCasino\language\en_US\images\games\cardgames\blackjack\blackjack
C:\Program Files\PartyGaming\PartyCasino\language\en_US\images\games\cardgames\multiplayerbj\multiplayerblackjack
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\Articles
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lobby
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\keno
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\multilineslots
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\roulette
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\slots
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\baccarat
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\casinowar
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\poker
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\videopoker
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\baccarat\baccarat
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\blackjack
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bonuspairsblackjack
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\highlimitblackjack
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\singledeckblackjack
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\casinowar\casinowar
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\multiplayerblackjack
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\texasholdempoker
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\poker\letitride
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\poker\paigowpoker
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\poker\reddog
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\poker\studcaribbeanpoker
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\poker\threecardpoker
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\videopoker\deuceswild
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\videopoker\flamingo
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\videopoker\jacksorbetter
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\videopoker\jacksorbettermhvp
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\videopoker\jokerpoker
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\videopoker\junglerumble
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\videopoker\kangacash
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\videopoker\kookakeno
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\videopoker\vegasclub
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\keno\safecrackerkeno
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\multilineslots\bustdasafe
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\multilineslots\fruitparty
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\multilineslots\graveyardbash
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\multilineslots\kingtutsfortune
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\roulette\americanroulette
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\roulette\europeanroulette
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\slots\boardbabe
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\slots\bullseye
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\slots\cashcruise
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\slots\coolbananas
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\slots\firedrake
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\slots\goannagold
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\slots\godfather
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\slots\goldeneagle
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\slots\goldengopher
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\slots\goldenoasis
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\slots\hotroller
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\slots\magicman
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\slots\megafortunewheel
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\slots\metropolis
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\slots\missionimpossible
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\slots\piggypayback
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\slots\predator
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\slots\saturdaynightfever
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\slots\shipwreck
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\slots\silvercity
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\slots\superfortunewheel
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\slots\superjoker
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\slots\supermystic
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\slots\superstar
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\slots\sweethawaii
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\slots\tod
C:\Program Files\PartyGaming\PartyPoker\HandHistory
C:\Program Files\PartyGaming\PartyPoker\Images
C:\Program Files\PartyGaming\PartyPoker\Language
C:\Program Files\PartyGaming\PartyPoker\NewSounds
C:\Program Files\PartyGaming\PartyPoker\tmpUpgrade
C:\Program Files\PartyGaming\PartyPoker\HandHistory\def620
C:\Program Files\PartyGaming\PartyPoker\Images\NewGameTable
C:\Program Files\PartyGaming\PartyPoker\Language\en_US
C:\Program Files\PartyGaming\PartyPoker\Language\fr_FR
C:\Program Files\PartyGaming\PartyPoker\Language\en_US\articles
C:\Program Files\PartyGaming\PartyPoker\Language\en_US\temp
C:\Program Files\PartyGaming\PartyPoker\Language\fr_FR\Articles
C:\Program Files\PartyGaming\PartyPoker\Language\fr_FR\images
C:\Program Files\PartyGaming\PartyPoker\Language\fr_FR\temp
C:\Program Files\PartyGaming\PartyPoker\Language\fr_FR\images\NewGameTable
C:\Documents and Settings\chris\Application Data\Microsoft\Internet Explorer\Quick Launch\Pacific Poker.lnk
C:\Documents and Settings\chris\Application Data\Microsoft\Internet Explorer\Quick Launch\PartyPoker.lnk
C:\Documents and Settings\chris\Application Data\PacificPoker
C:\Documents and Settings\chris\Application Data\PacificPoker\Cash
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker
C:\Documents and Settings\chris\Application Data\PacificPoker\Chat
C:\Documents and Settings\chris\Application Data\PacificPoker\Config
C:\Documents and Settings\chris\Application Data\PacificPoker\GameHist
C:\Documents and Settings\chris\Application Data\PacificPoker\Help_Support
C:\Documents and Settings\chris\Application Data\PacificPoker\Icons
C:\Documents and Settings\chris\Application Data\PacificPoker\Localization
C:\Documents and Settings\chris\Application Data\PacificPoker\Login
C:\Documents and Settings\chris\Application Data\PacificPoker\media
C:\Documents and Settings\chris\Application Data\PacificPoker\NoFlash
C:\Documents and Settings\chris\Application Data\PacificPoker\Poker
C:\Documents and Settings\chris\Application Data\PacificPoker\Pokerex
C:\Documents and Settings\chris\Application Data\PacificPoker\PokerLobby
C:\Documents and Settings\chris\Application Data\PacificPoker\Settings
C:\Documents and Settings\chris\Application Data\PacificPoker\Update
C:\Documents and Settings\chris\Application Data\PacificPoker\Utils
C:\Documents and Settings\chris\Application Data\PacificPoker\Cash\media
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\Arena
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\Baccarat
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\Bj
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\CaribPoker
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\Cash
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\Craps
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\FlashGames
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\GameHist
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\keno
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\Login
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\Logs
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\media
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\PGP
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\PVP
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\roulette
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\SlotsMedia
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\Update
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\Utils
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VP
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\Arena\ArCommon
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\Arena\bj
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\Arena\Favorite
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\Arena\FlashGamesArena
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\Arena\lobby
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\Arena\slot
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\Arena\TableAndCard
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\Arena\vp
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\Arena\vs
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\Arena\Favorite\FavPick
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\Baccarat\media
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\Bj\media
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\Bj\media\Crazy
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\CaribPoker\media
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\Cash\media
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\Craps\media
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\FlashGames\001FG
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\FlashGames\002FG
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\GameHist\media
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\GameHist\media\depCash
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\GameHist\media\PowerPokerRes
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\GameHist\media\VS
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\GameHist\media\VS\007
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\GameHist\media\VS\008
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\GameHist\media\VS\009
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\GameHist\media\VS\010
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\GameHist\media\VS\011
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\GameHist\media\VS\012
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\GameHist\media\VS\014
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\GameHist\media\VS\015
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\GameHist\media\VS\016
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\GameHist\media\VS\017
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\keno\media
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\Login\media
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\Login\media\ChatPage
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\media\AutoPlay
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\media\Caption
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\media\FieldBox
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\media\GoTo
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\media\Limit
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\media\NoShock
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\media\SoundsEx
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\media\Toolbar
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\PGP\media
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\PVP\PVPAcesAndFaces
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\PVP\PVPArena
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\PVP\PVPBonusPoker
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\PVP\PVPCommon
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\PVP\PVPDeucesWild
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\PVP\PVPJackOrBetter
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\PVP\PVPJokerWild
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\PVP\PVPMachine2
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\PVP\PVPRoyalDiamondJP
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\PVP\PVPAcesAndFaces\media
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\PVP\PVPBonusPoker\media
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\PVP\PVPCommon\media
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\PVP\PVPCommon\media\CounterStripes
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\PVP\PVPCommon\media\Sounds
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\PVP\PVPDeucesWild\media
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\PVP\PVPJackOrBetter\media
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\PVP\PVPJokerWild\media
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\PVP\PVPMachine2\media
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\PVP\PVPRoyalDiamondJP\media
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\roulette\media
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\SlotsMedia\10TimesWild
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\SlotsMedia\2TimesExtraWild
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\SlotsMedia\2TimesWild
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\SlotsMedia\5TimesWild
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\SlotsMedia\GoldAndGreen
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\SlotsMedia\Knockout
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\SlotsMedia\lying slot
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\SlotsMedia\MegaGoldAndGreen
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\SlotsMedia\MillionaireMaker
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\SlotsMedia\OleGlory
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\SlotsMedia\Pachislo
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\SlotsMedia\PyramidsTreasure
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\SlotsMedia\Shared
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\SlotsMedia\SlotsAhoy
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\SlotsMedia\Slots_Arena
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\SlotsMedia\standing slot
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\SlotsMedia\SuperThundering888
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\SlotsMedia\Thundering888
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\SlotsMedia\TreasureTwirl
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\SlotsMedia\WildSpider
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\SlotsMedia\Pachislo\results
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\SlotsMedia\Shared\results
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\SlotsMedia\TreasureTwirl\Lying_spins
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\SlotsMedia\TreasureTwirl\Standing_spins
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\001VS
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\002VS
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\003VS
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\004VS
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\005VS
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\006VS
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\007VS
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\008VS
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\009VS
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\010VS
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\011VS
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\012VS
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\014VS
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\015VS
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\016VS
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\017VS
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\001VS\bg
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\001VS\buttons
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\001VS\Freespins
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\001VS\Icons
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\001VS\payLine
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\001VS\payTable
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\001VS\sounds
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\002VS\bg
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\002VS\buttons
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\002VS\Icons
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\002VS\payLine
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\002VS\payTable
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\002VS\sounds
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\002VS\bg\TakeOrDrop
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\002VS\bg\X_OF_Many
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\003VS\bg
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\003VS\buttons
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\003VS\Freespins
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\003VS\Icons
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\003VS\payLine
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\003VS\payTable
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\003VS\sounds
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\004VS\bg
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\004VS\buttons
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\004VS\Icons
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\004VS\payLine
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\004VS\payTable
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\004VS\sounds
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\005VS\bg
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\005VS\buttons
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\005VS\Freespins
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\005VS\Icons
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\005VS\payLine
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\005VS\payTable
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\005VS\sounds
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\006VS\bg
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\006VS\buttons
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\006VS\Freespins
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\006VS\Icons
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\006VS\payLine
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\006VS\payTable
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\006VS\sounds
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\007VS\bg
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\007VS\buttons
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\007VS\Freespins
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\007VS\Icons
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\007VS\payLine
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\007VS\payTable
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\007VS\sounds
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\008VS\bg
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\008VS\buttons
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\008VS\Freespins
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\008VS\Icons
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\008VS\payLine
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\008VS\payTable
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\008VS\sounds
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\009VS\bg
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\009VS\buttons
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\009VS\Icons
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\009VS\payLine
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\009VS\payTable
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\009VS\sounds
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\010VS\bg
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\010VS\buttons
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\010VS\Freespins
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\010VS\Icons
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\010VS\payLine
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\010VS\payTable
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\010VS\sounds
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\011VS\bg
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\011VS\buttons
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\011VS\Icons
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\011VS\payLine
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\011VS\payTable
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\011VS\sounds
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\012VS\bg
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\012VS\buttons
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\012VS\Freespins
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\012VS\Icons
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\012VS\payLine
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\012VS\payTable
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\012VS\sounds
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\014VS\bg
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\014VS\buttons
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\014VS\Freespins
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\014VS\Icons
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\014VS\payLine
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\014VS\payTable
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\014VS\sounds
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\015VS\bg
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\015VS\buttons
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\015VS\Freespins
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\015VS\Icons
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\015VS\payLine
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\015VS\payTable
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\015VS\sounds
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\016VS\bg
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\016VS\buttons
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\016VS\Freespins
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\016VS\Icons
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\016VS\payLine
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\016VS\payTable
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\016VS\sounds
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\017VS\bg
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\017VS\buttons
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\017VS\Freespins
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\017VS\Icons
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\017VS\payLine
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\017VS\payTable
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VideoSlot\017VS\sounds
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VP\VPAcesAndFaces
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VP\VPBonusPoker
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VP\VPCommon
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VP\VPDeucesWild
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VP\VPJackOrBetter
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VP\VPJokerWild
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VP\VPMachine1
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VP\VPMachine2
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VP\VPRoyalDiamondJP
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VP\VPAcesAndFaces\media
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VP\VPBonusPoker\media
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VP\VPCommon\Arena
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VP\VPCommon\media
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VP\VPDeucesWild\media
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VP\VPJackOrBetter\media
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VP\VPJokerWild\media
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VP\VPMachine1\media
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VP\VPMachine2\media
C:\Documents and Settings\chris\Application Data\PacificPoker\casinopoker\VP\VPRoyalDiamondJP\media
C:\Documents and Settings\chris\Application Data\PacificPoker\GameHist\media
C:\Documents and Settings\chris\Application Data\PacificPoker\Help_Support\media
C:\Documents and Settings\chris\Application Data\PacificPoker\Login\media
C:\Documents and Settings\chris\Application Data\PacificPoker\Poker\media
C:\Documents and Settings\chris\Application Data\PacificPoker\Poker\OldMedia
C:\Documents and Settings\chris\Application Data\PacificPoker\Pokerex\media
C:\Documents and Settings\chris\Application Data\PacificPoker\PokerLobby\Media
C:\Documents and Settings\chris\Application Data\PacificPoker\Settings\Media
C:\Documents and Settings\chris\Menudm~1\Progra~1\Pacific Poker
C:\Documents and Settings\chris\Menudm~1\Progra~1\PartyPoker
C:\Documents and Settings\chris\Menudm~1\Pacific Poker.lnk
C:\Documents and Settings\All Users.WINDOWSA\Menudm~1\Progra~1\Poker 770
C:\Documents and Settings\chris\Bureau\Pacific Poker.lnk
C:\Documents and Settings\All Users.WINDOWSA\Bureau\Poker 770.lnk
C:\WINDOWSA\Prefetch\CASINO.EXE-04850605.pf
+--------------------| FunWebProducts/MyWay/MyWebSearch/MyGlobalSearch Elements Found:
.
.
+--------------------| It's TV Elements Found:
.
+--------------------| Sweetim Elements Found:
.
C:\Program Files\SweetIM
C:\Program Files\SweetIM\Messenger
C:\Program Files\SweetIM\Toolbars
C:\Program Files\SweetIM\Messenger\resources
C:\Program Files\SweetIM\Messenger\resources\images
C:\Program Files\SweetIM\Toolbars\Internet Explorer
C:\Program Files\SweetIM\Toolbars\Internet Explorer\conf
C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources
+--------------------| Added Scan:
---- Mozilla FireFox Version 2.0.0.20 ----
ProfilePath: p42nniuh.default
.
Prefs.js: Browser.Search.DefaultEngineName: "Google"
Prefs.js: Browser.Search.SelectedEngine: "Google"
Prefs.js: Browser.Search.DefaultUrl: "hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q="
.
.
.
.
.
---- Internet Explorer Version 7.0.5730.13 ----
+-[HKEY_CURRENT_USER\..\Internet Explorer\Main]
Search Page: hxxp:/www.microsoft.com
Start page: hxxp:/www.microsoft.com
+-[HKEY_USERS\S-1-5-21-1004336348-1770027372-839522115-1004\..\Internet Explorer\Main]
Search Page: hxxp:/www.microsoft.com
Start page: hxxp:/www.microsoft.com
+-[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
Default_Page_URL: hxxp:/go.microsoft.com
Default_Search_URL: hxxp:/go.microsoft.com
Search Page: hxxp:/go.microsoft.com
Start page: hxxp:/go.microsoft.com
+-[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
Tabs: hxxp:/ieframe.dll
+---------------------------------------------------------------------------+
[~44006 Bytes] - "C:\Ad-Report-Scan-08.02.2009.log"
-
End at: 15:21:13 | 08/02/2009
.
+--------------------| E.O.F - 598 Lines
.
-
-
Re,
Faut pas s'étonner que ça aille pas ... ^^
Nettoyage AD-Remover :
! Déconnectes toi et fermes toutes applications en cours !
● Relances "Ad-remover" : au menu principal choisi l'option "B" .
● Coche à l'écran de sélèction :
3- Suppression Programmes de poker infectés
6- Suppression Sweetim
● Puis choisi "S" , le programme va travailler,
● Postes le rapport qui apparait à la fin.
( le rapport est sauvegardé sous C:\Ad-report(date).log )
(CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )
/!\ Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet "Fichier" , "Nouvelle tâche" , tapes explorer.exe et valides)
************************************************************
● Télécharge et installe MalwareByte's Anti-Malware :http://www.malwarebytes.org/mbam/program/mbam-setup.exe
● Mets le à jour
● Double clique sur le raccourci de MalwareByte's Anti-Malware qui est sur le bureau.
● Sélectionne Exécuter un examen RAPIDE si ce n'est pas déjà fait
● clique sur Rechercher
● Une fois le scan terminé, une fenêtre s'ouvre, clique sur sur Ok
● Si MalwareByte's n'a rien détecté, clique sur Ok Un rapport va apparaître ferme-le.
● Si MalwareByte's a détecté des infections, clique sur Afficher les résultats ensuite sur Supprimer la sélection
● Enregistre le rapport sur ton Bureau comme cela il sera plus facile à retrouver, poste ensuite ce rapport.
Note : Si MalwareByte's a besoin de redémarrer pour terminer la suppression, accepte en cliquant sur Ok
Tutorial : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
++ -
Re,
Ben oui, il faut taper d'abord 3 => Valider par entrée , puis 6 => valider par entrée puis S . ..
C'est marqué au menu principal.
++
