Help virus!!!!!
lofriena
Messages postés
3
Statut
Membre
-
lofriena Messages postés 3 Statut Membre -
lofriena Messages postés 3 Statut Membre -
Bonjour,
depuis quelque temp avast me dit qu'il a détecter un cheval de troie, je ne peut le mettre en quarantaine car il ne trouve pas le fichier infecter qui est dans c:/windows/system32/prdvr.exe. en plus des pubs s'affiche tous le temps en connexion et meme hors connexion.j'ai fait un scan avec spypot qui a trouvé les infections il me dit avoir désinfecter mais sa ne fait rien. plus le temp passe et plus j'ai de fichier infecter. je suis perdu je ne suis pas trés forte en info alors si quelqu'un peu m'aider merci beaucoup. voici le rapport hijackthis, j'ai lu que ca pouvait aider.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:48:19, on 22/05/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\EoRezo\EoEngine.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Documents and Settings\terrier\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\HiYo\bin\HiYo.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\9\AlertModule.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Iminent\IMBooster\imbooster.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\LSHPRN.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Documents and Settings\terrier\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Ares\Ares.exe
C:\Documents and Settings\All Users\Application Data\Skype\Plugins\Plugins\9E0D937F462E4362A83B254A9F8AB3F8\InnerPassFileSharing.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Netlog Music Tool\NetlogMusicTool.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Documents and Settings\terrier\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\OrangeHSS\systray\systrayapp.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\OrangeHSS\Launcher\Launcher.exe
C:\Program Files\OrangeHSS\connectivity\connectivitymanager.exe
C:\Program Files\OrangeHSS\connectivity\CoreCom\CoreCom.exe
C:\Program Files\OrangeHSS\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
c:\program files\winamp toolbar\WinampTbServer.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.orange.fr/portail?kw=
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.orange.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Iminent.LinkToContent - {A6E9BAAF-53CD-4575-967B-2AF710A7D21F} - C:\Program Files\Iminent\IMBooster\Iminent.LinkToContent.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: EoBHO - {C7B76B90-3455-4AE6-A752-EAC4D19689E5} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\EoRezo\EoEngine.exe"
O4 - HKLM\..\Run: [SoftwareHelper] C:\Documents and Settings\terrier\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [Hiyo] C:\Program Files\HiYo\bin\HiYo.exe /RunFromStartup
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [IMBooster] C:\Program Files\Iminent\IMBooster\imbooster.exe /warmup
O4 - HKLM\..\Run: [PrinterSecurityLayer] C:\WINDOWS\system32\LSHPRN.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\terrier\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [Innerpass] C:\Documents and Settings\All Users\Application Data\Skype\Plugins\Plugins\9E0D937F462E4362A83B254A9F8AB3F8\InnerPassFileSharing.exe autostart
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Netlog Music Tool] "C:\Program Files\Netlog Music Tool\NetlogMusicTool.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\terrier\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://*.mappy.com
O15 - Trusted Zone: http://*.orange.fr
O15 - Trusted Zone: http://rw.search.ke.voila.fr
O15 - Trusted Zone: http://orange.weborama.fr
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase5483.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Boonty Games - Unknown owner - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Service Google Update (gupdate1c9bc4fc1bfcf82) (gupdate1c9bc4fc1bfcf82) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
--
End of file - 15903 bytes
depuis quelque temp avast me dit qu'il a détecter un cheval de troie, je ne peut le mettre en quarantaine car il ne trouve pas le fichier infecter qui est dans c:/windows/system32/prdvr.exe. en plus des pubs s'affiche tous le temps en connexion et meme hors connexion.j'ai fait un scan avec spypot qui a trouvé les infections il me dit avoir désinfecter mais sa ne fait rien. plus le temp passe et plus j'ai de fichier infecter. je suis perdu je ne suis pas trés forte en info alors si quelqu'un peu m'aider merci beaucoup. voici le rapport hijackthis, j'ai lu que ca pouvait aider.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:48:19, on 22/05/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\EoRezo\EoEngine.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Documents and Settings\terrier\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\HiYo\bin\HiYo.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\9\AlertModule.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Iminent\IMBooster\imbooster.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\LSHPRN.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Documents and Settings\terrier\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Ares\Ares.exe
C:\Documents and Settings\All Users\Application Data\Skype\Plugins\Plugins\9E0D937F462E4362A83B254A9F8AB3F8\InnerPassFileSharing.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Netlog Music Tool\NetlogMusicTool.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Documents and Settings\terrier\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\OrangeHSS\systray\systrayapp.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\OrangeHSS\Launcher\Launcher.exe
C:\Program Files\OrangeHSS\connectivity\connectivitymanager.exe
C:\Program Files\OrangeHSS\connectivity\CoreCom\CoreCom.exe
C:\Program Files\OrangeHSS\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
c:\program files\winamp toolbar\WinampTbServer.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.orange.fr/portail?kw=
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.orange.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Iminent.LinkToContent - {A6E9BAAF-53CD-4575-967B-2AF710A7D21F} - C:\Program Files\Iminent\IMBooster\Iminent.LinkToContent.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: EoBHO - {C7B76B90-3455-4AE6-A752-EAC4D19689E5} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\EoRezo\EoEngine.exe"
O4 - HKLM\..\Run: [SoftwareHelper] C:\Documents and Settings\terrier\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [Hiyo] C:\Program Files\HiYo\bin\HiYo.exe /RunFromStartup
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [IMBooster] C:\Program Files\Iminent\IMBooster\imbooster.exe /warmup
O4 - HKLM\..\Run: [PrinterSecurityLayer] C:\WINDOWS\system32\LSHPRN.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\terrier\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [Innerpass] C:\Documents and Settings\All Users\Application Data\Skype\Plugins\Plugins\9E0D937F462E4362A83B254A9F8AB3F8\InnerPassFileSharing.exe autostart
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Netlog Music Tool] "C:\Program Files\Netlog Music Tool\NetlogMusicTool.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\terrier\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://*.mappy.com
O15 - Trusted Zone: http://*.orange.fr
O15 - Trusted Zone: http://rw.search.ke.voila.fr
O15 - Trusted Zone: http://orange.weborama.fr
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase5483.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Boonty Games - Unknown owner - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Service Google Update (gupdate1c9bc4fc1bfcf82) (gupdate1c9bc4fc1bfcf82) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
--
End of file - 15903 bytes
Configuration: Windows XP Internet Explorer 7.0
3 réponses
-
Bonjour
Télécharge AD-Remover de Cyrildu17 / C_XX) sur ton Bureau.
http://sd-1.archive-host.com/membres/up/16506160323759868/AD-R.exe
/!\ Déconnecte-toi et ferme toutes applications en cours /!\
- Double-clique sur le programme d'installation, installe-le dans son emplacement par défaut (C:\Program files).
- Double-clique sur l'icône Ad-remover située sur ton Bureau.
- Au menu principal, choisis l'option "A".
- Poste le rapport qui apparaît à la fin.
(Le rapport est sauvegardé aussi sous C:\Ad-report(date).log)
(CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)
Note :
"Process.exe", une composante de l'outil, est détectée par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus. -
voila le rapport
------- LOGFILE OF AD-REMOVER 1.1.4.2 | ONLY XP/VISTA -------
Updated By C_XX On 22/05/2009 At 10:00
Contact: AdRemover.contact@gmail.com
WebSite: http://pagesperso-orange.fr/NosTools/ad_remover.html
Started At: 22:32:45, 22/05/2009 | Normal boot
Executed From: C:\Program Files\Ad-remover\
Operating System: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
Computer Name: TERRIER-A2705C2
Current User: terrier - Administrator
.
============== ELEMENTS REMOVED ==============
.
.
HKCR\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}
HKCR\AppID\EoRezoBHO.DLL
HKCR\CLSID\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
HKCR\EoRezoBHO.EoBho
HKCR\EoRezoBHO.EoBho.1
HKCR\Typelib\{B6ACB3F1-6A83-432C-B854-3E1056F87F4E}
HKCU\Software\AppDataLow\HavingFunOnline
HKCU\Software\EoRezo
HKCU\Software\PartyGaming
HKLM\Software\Conduit
HKLM\Software\EoRezo
HKLM\Software\Microsoft\Internet Explorer\Extensions\{B7FE5D70-9AA2-40F1-9C6B-12A255F085E1}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\eoEngine_is1
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdate_is1
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Eoengine
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Softwarehelper
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8E2328C5-E79E-4EBA-B1F7-F65000C7A908}
.
C:\Documents and Settings\terrier\Application Data\EoRezo\cmhost.cyp
C:\Documents and Settings\terrier\Application Data\EoRezo\ConfMedia.cyp
C:\Documents and Settings\terrier\Application Data\EoRezo\db
C:\Documents and Settings\terrier\Application Data\EoRezo\eoDesktop
C:\Documents and Settings\terrier\Application Data\EoRezo\eoStats
C:\Documents and Settings\terrier\Application Data\EoRezo\host.cyp
C:\Documents and Settings\terrier\Application Data\EoRezo\SoftwareUpdate
C:\Documents and Settings\terrier\Application Data\EoRezo\user.cyp
C:\Documents and Settings\terrier\Application Data\EoRezo\eoDesktop\config.xml
C:\Documents and Settings\terrier\Application Data\EoRezo\eoDesktop\eoDesktop.html
C:\Documents and Settings\terrier\Application Data\EoRezo\eoDesktop\userConfig.xml
C:\Documents and Settings\terrier\Application Data\EoRezo\eoStats\eoStats.txt
C:\Documents and Settings\terrier\Application Data\EoRezo\SoftwareUpdate\Download
C:\Documents and Settings\terrier\Application Data\EoRezo\SoftwareUpdate\help_config.cyp
C:\Documents and Settings\terrier\Application Data\EoRezo\SoftwareUpdate\Software
C:\Documents and Settings\terrier\Application Data\EoRezo\SoftwareUpdate\SoftwareUpdate.exe
C:\Documents and Settings\terrier\Application Data\EoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
C:\Documents and Settings\terrier\Application Data\EoRezo\SoftwareUpdate\unins000.dat
C:\Documents and Settings\terrier\Application Data\EoRezo\SoftwareUpdate\unins000.exe
C:\Documents and Settings\terrier\Application Data\EoRezo\SoftwareUpdate\user_config.cyp
C:\Documents and Settings\terrier\Application Data\EoRezo\SoftwareUpdate\user_profil.cyp
C:\Documents and Settings\terrier\Application Data\EoRezo\SoftwareUpdate\Software\eobrowserpub
C:\Documents and Settings\terrier\Application Data\EoRezo\SoftwareUpdate\Software\eoengine
C:\Documents and Settings\terrier\Application Data\EoRezo\SoftwareUpdate\Software\eoweather
C:\Documents and Settings\terrier\Application Data\EoRezo\SoftwareUpdate\Software\itsTV
C:\Documents and Settings\terrier\Application Data\EoRezo\SoftwareUpdate\Software\eobrowserpub\1.0.0.1
C:\Documents and Settings\terrier\Application Data\EoRezo\SoftwareUpdate\Software\eoengine\9.1.0.0
C:\Documents and Settings\terrier\Application Data\EoRezo\SoftwareUpdate\Software\eoweather\6.0.0.0
C:\Documents and Settings\terrier\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.0.1
C:\Documents and Settings\terrier\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.0.2
C:\Documents and Settings\terrier\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.0.3
C:\Documents and Settings\terrier\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.0.4
C:\Documents and Settings\terrier\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.0.2\itstv.exe
C:\Documents and Settings\terrier\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.0.3\itstv.exe
C:\Documents and Settings\terrier\Application Data\EoRezo\SoftwareUpdate\Software\itsTV\3.0.0.4\itstv.exe
C:\Documents and Settings\terrier\Application Data\EoRezo
C:\Program Files\EoRezo\ConfMedia.cyp
C:\Program Files\EoRezo\EoAdv
C:\Program Files\EoRezo\EoEngine.exe
C:\Program Files\EoRezo\eoEngine.url
C:\Program Files\EoRezo\EoMultiLanguage.dll
C:\Program Files\EoRezo\EoRezoComm.dll
C:\Program Files\EoRezo\EoRezoImg_17.dll
C:\Program Files\EoRezo\EoRezoImg_19.dll
C:\Program Files\EoRezo\EoRezoImg_20.dll
C:\Program Files\EoRezo\EoRezoImg_21.dll
C:\Program Files\EoRezo\EoRezoImg_22.dll
C:\Program Files\EoRezo\EoRezoImg_23.dll
C:\Program Files\EoRezo\EoRezoTools_16.dll
C:\Program Files\EoRezo\EoRezoTools_17.dll
C:\Program Files\EoRezo\EoRezoTools_18.dll
C:\Program Files\EoRezo\EoRezoTools_20.dll
C:\Program Files\EoRezo\EoRezoTools_21.dll
C:\Program Files\EoRezo\EoRezoTools_26.dll
C:\Program Files\EoRezo\EoRezoTools_27.dll
C:\Program Files\EoRezo\EoRezoTools_28.dll
C:\Program Files\EoRezo\EoRezoTools_29.dll
C:\Program Files\EoRezo\EoRezoTools_30.dll
C:\Program Files\EoRezo\FreeImage.dll
C:\Program Files\EoRezo\Host.cyp
C:\Program Files\EoRezo\lang
C:\Program Files\EoRezo\MngInstaller.dll
C:\Program Files\EoRezo\unins000.dat
C:\Program Files\EoRezo\unins000.exe
C:\Program Files\EoRezo\user.cyp
C:\Program Files\EoRezo\EoAdv\atl90.dll
C:\Program Files\EoRezo\EoAdv\EoAdv.dll
C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll
C:\Program Files\EoRezo\EoAdv\mfc90.dll
C:\Program Files\EoRezo\EoAdv\Microsoft.VC90.ATL.manifest
C:\Program Files\EoRezo\EoAdv\Microsoft.VC90.CRT.manifest
C:\Program Files\EoRezo\EoAdv\Microsoft.VC90.MFC.manifest
C:\Program Files\EoRezo\EoAdv\msvcr90.dll
C:\Program Files\EoRezo\lang\ihm_eoclock.xml
C:\Program Files\EoRezo\lang\ihm_eoengine.xml
C:\Program Files\EoRezo\lang\ihm_eonet.xml
C:\Program Files\EoRezo\lang\ihm_eorezotools.xml
C:\Program Files\EoRezo\lang\ihm_eosudoku.xml
C:\Program Files\EoRezo\lang\ihm_eoweather.xml
C:\Program Files\EoRezo\lang\lang_en.xml
C:\Program Files\EoRezo\lang\lang_es.xml
C:\Program Files\EoRezo\lang\lang_fr.xml
C:\Program Files\EoRezo\lang\lang_it.xml
C:\Program Files\EoRezo
C:\Program Files\PartyGaming\announce.txt
C:\Program Files\PartyGaming\PartyCasino
C:\Program Files\PartyGaming\PartyPoker
C:\Program Files\PartyGaming\PartyCasino\format.ini
C:\Program Files\PartyGaming\PartyCasino\GRA.ini
C:\Program Files\PartyGaming\PartyCasino\language
C:\Program Files\PartyGaming\PartyCasino\LHN.txt
C:\Program Files\PartyGaming\PartyCasino\lobby.xml
C:\Program Files\PartyGaming\PartyCasino\lobbyconfig.txt
C:\Program Files\PartyGaming\PartyCasino\PartyCasino.dll
C:\Program Files\PartyGaming\PartyCasino\pc_uninstall.bat
C:\Program Files\PartyGaming\PartyCasino\ProductVersion.txt
C:\Program Files\PartyGaming\PartyCasino\sys.ini
C:\Program Files\PartyGaming\PartyCasino\Temp
C:\Program Files\PartyGaming\PartyCasino\version.txt
C:\Program Files\PartyGaming\PartyCasino\language\allLangVersion.txt
C:\Program Files\PartyGaming\PartyCasino\language\en_US
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR
C:\Program Files\PartyGaming\PartyCasino\language\version.txt
C:\Program Files\PartyGaming\PartyCasino\language\en_US\articles
C:\Program Files\PartyGaming\PartyCasino\language\en_US\lang_pack_en_US.txt
C:\Program Files\PartyGaming\PartyCasino\language\en_US\version.txt
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\Articles
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\lang_pack_fr_FR.txt
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\version.txt
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\Articles\167058.html
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\Articles\170102.html
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\Articles\170538.atc
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\Articles\170540.atc
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\Articles\170680.atc
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\Articles\170782.atc
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\Articles\170994.atc
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\account_but_newacocunt.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\allversion.txt
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\BB-Numbers-comma.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\BB-Numbers-dot.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\bonus-icon.gif
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\bottom-banners-left-buttons.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\bottom-banners-right-buttons.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\but.bmp
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\but.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\but.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\but_account.bmp
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\but_skin.gif
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\but_skin.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\but_skin_account.gif
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\but_skin_sliver.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\client_bottom.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\client_bottom_right.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\client_bottom_seperator.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\client_gradient.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\client_top.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\client_top_header.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\client_top_left.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\Common_background.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\Common_background_minimised.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\Common_buttons_380x23.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\Common_CloseContainer_black.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\Common_CloseContainer_white.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\create_account.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\down_arrow.gif
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\down_arrow_o.gif
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\icon_three.gif
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\icon_ticked.gif
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\left_bottom.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\LHN-sub-menu.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_account.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_account_background.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_account_collapse.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_account_divider.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_ani_refresh.gif
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_background.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_badbeat_jackpot.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_bar_jackpot_numbers.gif
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_bar_jackpot_numbers.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_bar_jackpot_numbers_small.gif
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_bar_jackpot_numbers_small.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_bar_news.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_but_cashout.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_but_deposit.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_but_deposit_large.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_but_options.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_but_redeem.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_but_refresh.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_but_reload_play.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_but_status.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_cashier.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_cashier_collapse.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_casino.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_casino_collapse.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_collapse.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_details_open.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_expand.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_gammon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_gammon_collapse.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_link_arrow.gif
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_poker.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_poker_collapse.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_preferences.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_preferences_collapse.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_separator.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_separator_collapse.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_separator_collapse.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_sub_nav.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_support.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_support_collapse.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lhn_tab_background.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\loading.gif
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\LobbyClock.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lobby_but.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\lobby_skin.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\Main-area-top-bg.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\Mainarea-Collapse-button.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\Mainarea-Expand-button.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\MAT-bg.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\MAT-collapse-close-buttons.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\MAT-collapse-open-buttons.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\MAT-deposit-buttons.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\MAT-minimised-bg.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\MAT-refresh-icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\MAT-slider-bg.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\MAT-slider-green.gif
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\Message-icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\new-mail-icon.gif
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\no-mail-icon.gif
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\PartyCasino.ico
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\pokerLobby_bonusBack.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\pokerLobby_depositButtonLarge.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\pokerLobby_leftHandIconPoker.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\popup_login_bottom.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\popup_login_top.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\popup_register_bottomleft.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\popup_register_top.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\sign_up.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\skin.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\skin_account.bmp
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\spacer.gif
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\splash_screen_bg.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\star_icon.gif
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\system_but_bets.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\system_but_bets_collapse.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\system_but_bingo.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\system_but_bingo_collapse.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\system_but_casino-27.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\system_but_casino.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\system_but_casino_collapse.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\system_but_connected.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\system_but_connected_good.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\system_but_connected_poor.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\system_but_disconnected.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\system_but_gammon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\system_but_gammon_collapse.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\system_but_poker.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\system_but_poker_collapse.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\system_but_security.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\system_but_security.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\ticker_bg.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\up_arrow.gif
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\up_arrow_o.gif
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\version.txt
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\vip.gif
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\vip_elite.gif
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\cardgames
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\FCPeer.dll
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\roulette
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\version.txt
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\cardgames\blackjack
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\cardgames\version.txt
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\cardgames\blackjack\multiplayerblackjack
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\cardgames\blackjack\version.txt
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\cardgames\blackjack\multiplayerblackjack\Chip1.swf
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\cardgames\blackjack\multiplayerblackjack\Chip100.swf
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\cardgames\blackjack\multiplayerblackjack\Chip25.swf
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\cardgames\blackjack\multiplayerblackjack\Chip5.swf
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\cardgames\blackjack\multiplayerblackjack\Chip500.swf
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\cardgames\blackjack\multiplayerblackjack\en_US.zip
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\cardgames\blackjack\multiplayerblackjack\fr_FR.zip
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\cardgames\blackjack\multiplayerblackjack\Game_product_assets.swf
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\cardgames\blackjack\multiplayerblackjack\game_skins.swf
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\cardgames\blackjack\multiplayerblackjack\GRA.ini
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\cardgames\blackjack\multiplayerblackjack\MultiHandBJ.swf
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\cardgames\blackjack\multiplayerblackjack\party_assets.swf
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\cardgames\blackjack\multiplayerblackjack\party_Cards.swf
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\cardgames\blackjack\multiplayerblackjack\Sys.ini
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\cardgames\blackjack\multiplayerblackjack\version.txt
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\roulette\europeanroulette
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\roulette\version.txt
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\roulette\europeanroulette\Chip0_5.swf
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\roulette\europeanroulette\Chip1.swf
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\roulette\europeanroulette\Chip10.swf
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\roulette\europeanroulette\Chip100.swf
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\roulette\europeanroulette\Chip100k.swf
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\roulette\europeanroulette\Chip10k.swf
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\roulette\europeanroulette\Chip1k.swf
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\roulette\europeanroulette\Chip25.swf
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\roulette\europeanroulette\Chip250.swf
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\roulette\europeanroulette\Chip25k.swf
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\roulette\europeanroulette\Chip2_5k.swf
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\roulette\europeanroulette\Chip5.swf
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\roulette\europeanroulette\Chip50.swf
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\roulette\europeanroulette\Chip500.swf
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\roulette\europeanroulette\Chip500k.swf
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\roulette\europeanroulette\Chip50k.swf
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\roulette\europeanroulette\Chip5k.swf
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\roulette\europeanroulette\en_US.zip
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\roulette\europeanroulette\fr_FR.zip
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\roulette\europeanroulette\Game_product_assets.swf
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\roulette\europeanroulette\game_skins.swf
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\roulette\europeanroulette\GRA.ini
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\roulette\europeanroulette\Roulette.swf
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\roulette\europeanroulette\RouletteSounds.swf
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\roulette\europeanroulette\Sys.ini
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\fcgames\roulette\europeanroulette\version.txt
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\addplaymoney_button.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\aud.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\autospincancel_button.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\autospinoptions_background.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\autospinstart_button.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\balance_strip.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\bottombar_logo_net.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\bottombar_net.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\bottombar_net_big.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\bottombar_net_medium.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\BuyInConfig.ini
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\buyin_botbg.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\buyin_cancelbutton.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\buyin_cashierbutton.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\buyin_midbg.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\buyin_okbutton.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\buyin_topbg.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cad.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cashier_button.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cashout_midbg.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cent_strip.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\chf.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\chips.wav
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\czk.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\dkk.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\eur.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\exit_button.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\format.ini
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\gamelogs_button.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\game_topbar_pff.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\gbp.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\gp_slt_terminator.gif
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\hkd.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\huf.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\ils.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\inr.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\jpy.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\krw.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\myr.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\nok.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\nzd.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\php.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\pln.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\popup_but_cancel.gif
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\popup_but_cashier.gif
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\popup_but_ok.gif
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\popup_buyin_but_all.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\popup_buyin_tab.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\PushBut.wav
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\quickdeposit_button.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\ron.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\rur.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\sek.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\sgd.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\skk.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\status_dlg.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\system_but_close.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\system_but_inactive_close.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\system_but_inactive_minimise.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\system_but_minimise.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\sys_icons.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\table_logo_com.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\table_logo_net.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\thb.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\trny_buyin_botbg.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\try.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\twd.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\usd.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\version.txt
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\version_button.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\win.wav
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\zar.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\6_bigcardback.bmp
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\c0_5.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\c1.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\c10.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\c100.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\c100k.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\c10k.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\c1k.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\c25.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\c250.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\c25k.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\c2_5k.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\c5.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\c50.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\c500.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\c500k.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\c50k.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\c5k.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\Card.wav
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\CardFlip.wav
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\card_deck.bmp
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\FRU_6_bigcardback.bmp
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\number_circle.gif
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\pointer_R.gif
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\qd_cashier_button.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\qd_exit_button.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\qd_gamelogs_button.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\qd_version_button.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rc0_5.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rc1.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rc10.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rc100.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rc100k.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rc10k.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rc1k.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rc25.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rc250.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rc25k.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rc2_5k.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rc5.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rc50.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rc500.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rc500k.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rc50k.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rc5k.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\Rr.bmp
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rules_button.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\version.txt
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_americanroulette_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_baccarat_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_bjbonuspairs_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_bjhighlimit_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_bjsingledeck_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_boardbabe_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_cashcruise_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_casinowar_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_coolbanana_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_deuceswild_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_europeanroulette_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_firedrake_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_flamingo_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_fruitparty_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_goannagold_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_goldenoasis_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_graveyardbash_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_hotjokerpoker_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_hotroller_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_job_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_junglerumble_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_kangacash_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_kookakeno_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_lir_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_logo_cover.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_magicman_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_mhvp_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_paigow_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_pcp_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_pc_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_piggypayback_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_predator_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_reddog_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_safecrackerkeno_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_sfw_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_silvercity_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_superjoker_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_supermystic_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_superstar_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_sweethawaii_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_tcp_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_tod_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_vegasclub_icon.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bj_check.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\blackjack
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\BlackJack.dll
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\blackjack.wav
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\chip_pointer_R.gif
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\clear_button.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\deal_button.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\double_button.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\hit_button.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\insurance.wav
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\insure_button.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\number_circle.gif
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\pointer_R.gif
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\push.wav
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\repeatbet_button.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\result_bj.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\result_bust.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\result_insure.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\result_lost.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\result_push.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\result_won.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\split.wav
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\split_button.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\stand_button.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\surrender_button.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\version.txt
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\blackjack\bj_table.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\blackjack\Config.ini
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\blackjack\version.txt
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\action_button.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\action_pending_panel.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\autostand.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\away_button.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\backcard.bmp
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\bj_check.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\blackjack.wav
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\card_pointer.gif
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\check_box.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\chip_pointer.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\clear_button.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\CommonConfig.ini
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\deal_button.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\double_button.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\first_hand.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\FRU_backcard.bmp
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\game_topbar_pff.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\hit_button.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\iam_back_button.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\insurance.wav
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\leave_seat_button.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\looser.rgn
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\looser_popup.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\mhbj_clear_btn.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\mhbj_deal_btn.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\mhbj_double_bets_btn.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\mhbj_double_btn.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\mhbj_hit_btn.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\mhbj_repeatbet_btn.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\mhbj_split_btn.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\mhbj_stand_btn.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\mhbj_surrender_btn.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\mpbj_deck.bmp
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\MultiHandBJConfig.ini
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\MultiHandBJTrnyConfig.ini
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\multiplayerbj.dll
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\multiplayerblackjack
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\number_circle.gif
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\player_area.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\push.wav
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\repeatbet_button.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\result_bj.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\result_bust.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\result_push.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\result_won.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\sittingout_button.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\skip_button.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\split.wav
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\split_button.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\stand_button.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\surrender_button.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\take_seat_button.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\trny_player_area.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\trny_watcher_area.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\version.txt
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\watcher_area.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\winner.rgn
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\winners_closebutton.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\winners_popup.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\win_glow.png
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\multiplayerblackjack\mpbj_table.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\multiplayerblackjack\mpbj_trny_table.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\multiplayerblackjack\sp_mpbj_table.jpg
C:\Program Files\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\multiplayerblackjack\version.txt
C:\Program Files\PartyGaming\PartyPoker\Language
C:\Program Files\PartyGaming\PartyPoker\Notes.txt
C:\Program Files\PartyGaming\PartyPoker\pp_dingding883_c-o-i.txt
C:\Program Files\PartyGaming\PartyPoker\pp_dingding883_pst_flts.txt
C:\Program Files\PartyGaming\PartyPoker\Uninstall.exe
C:\Program Files\PartyGaming\PartyPoker\usertab1.txt
C:\Program Files\PartyGaming\PartyPoker\usertab2.txt
C:\Program Files\PartyGaming\PartyPoker\WatchList.txt
C:\Program Files\PartyGaming\PartyPoker\Language\en_US
C:\Program Files\PartyGaming\PartyPoker\Language\fr_FR
C:\Program Files\PartyGaming\PartyPoker\Language\en_US\articles
C:\Program Files\PartyGaming\PartyPoker\Language\fr_FR\Articles
C:\Program Files\PartyGaming\PartyPoker\Language\fr_FR\Articles\167056.html
C:\Program Files\PartyGaming\PartyPoker\Language\fr_FR\Articles\170004.html
C:\Program Files\PartyGaming\PartyPoker\Language\fr_FR\Articles\170040.html
C:\Program Files\PartyGaming\PartyPoker\Language\fr_FR\Articles\170098.html
C:\Program Files\PartyGaming\PartyPoker\Language\fr_FR\Articles\170374.atc
C:\Program Files\PartyGaming\PartyPoker\Language\fr_FR\Articles\170428.atc
C:\Program Files\PartyGaming\PartyPoker\Language\fr_FR\Articles\170678.atc
C:\Program Files\PartyGaming\PartyPoker\Language\fr_FR\Articles\170682.atc
C:\Program Files\PartyGaming\PartyPoker\Language\fr_FR\Articles\170962.atc
C:\Program Files\PartyGaming\PartyPoker\Language\fr_FR\Articles\71023.html
C:\Program Files\PartyGaming\PartyPoker\Language\fr_FR\Articles\71697.atc
C:\Program Files\PartyGaming\PartyPoker\Language\fr_FR\Articles\74225.html
C:\Program Files\PartyGaming\PartyPoker\Language\fr_FR\Articles\74245.html
C:\Program Files\PartyGaming\PartyPoker\Language\fr_FR\Articles\74271.html
C:\Program Files\PartyGaming\PartyPoker\Language\fr_FR\Articles\74453.atc
C:\Program Files\PartyGaming\PartyPoker\Language\fr_FR\Articles\74455.atc
C:\Program Files\PartyGaming\PartyPoker\Language\fr_FR\Articles\74457.atc
C:\Program Files\PartyGaming\PartyPoker\Language\fr_FR\Articles\74459.atc
C:\Program Files\PartyGaming\PartyPoker\Language\fr_FR\Articles\74707.atc
C:\Program Files\PartyGaming
C:\DOCUME~1\terrier\LOCALS~1\Temp\3B00UMDE\pPokerSetup\presetup
C:\DOCUME~1\terrier\LOCALS~1\Temp\3B00UMDE\pPokerSetup\presetup\ShowUrl1.exe
C:\DOCUME~1\terrier\LOCALS~1\Temp\3B00UMDE\pPokerSetup
C:\DOCUME~1\terrier\LOCALS~1\Temp\is-A90UM.tmp\EoRezo
C:\DOCUME~1\terrier\LOCALS~1\Temp\is-CQ85H.tmp\EoRezo
C:\DOCUME~1\terrier\LOCALS~1\Temp\is-EIPAO.tmp\EoRezo
C:\DOCUME~1\terrier\LOCALS~1\Temp\tmp535A.tmp
C:\DOCUME~1\terrier\LOCALS~1\Temp\tmp622C.tmp
C:\DOCUME~1\terrier\LOCALS~1\Temp\tmp665E.tmp
C:\WINDOWS\Prefetch\ITSTV.EXE-2145C247.pf
C:\WINDOWS\Prefetch\SOFTWAREUPDATEHP.EXE-1FB66394.pf
C:\Documents and Settings\terrier\Cookies\terrier@ads.eorezo[2].txt
C:\Documents and Settings\terrier\Cookies\terrier@dl.eorezo[1].txt
C:\Documents and Settings\terrier\Cookies\terrier@eorezo[2].txt
C:\Documents and Settings\terrier\Cookies\terrier@partypoker[2].txt
C:\Documents and Settings\terrier\Cookies\terrier@www.riverbelle[1].txt
(!) -- Temp files deleted.
.
+-----------------| Added Scan:
.
.
.
---- Internet Explorer Version 7.0.5730.13 ----
[HKEY_CURRENT_USER\..\Internet Explorer\Main]
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/
[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
Tabs: hxxp://ieframe.dll/tabswelcome.htm
=========== Suspect (Cracks, Serials ... ) ==========
.
C:\Documents and Settings\terrier\Local Settings\Temp\Patcher\Patcher2148\RTPatch\patch.exe
[34816 Octet(s)|--a------|18/04/2009 21:56|HashMD5: d91d34c1826491777c2442baee3745e7 |CRC32: b5c60adf]
C:\Documents and Settings\terrier\Local Settings\Temp\Patcher\Patcher2272\RTPatch\patch.exe
[34816 Octet(s)|--a------|03/04/2009 11:27|HashMD5: d91d34c1826491777c2442baee3745e7 |CRC32: b5c60adf]
C:\Documents and Settings\terrier\Local Settings\Temp\Patcher\Patcher4248\RTPatch\patch.exe
[34816 Octet(s)|--a------|18/04/2009 21:59|HashMD5: d91d34c1826491777c2442baee3745e7 |CRC32: b5c60adf]
C:\Documents and Settings\terrier\Local Settings\Temp\Patcher\Patcher5632\RTPatch\patch.exe
[34816 Octet(s)|--a------|18/04/2009 21:58|HashMD5: d91d34c1826491777c2442baee3745e7 |CRC32: b5c60adf]
C:\Documents and Settings\terrier\Local Settings\Temp\Patcher\Patcher5836\RTPatch\patch.exe
[34816 Octet(s)|--a------|03/04/2009 11:27|HashMD5: d91d34c1826491777c2442baee3745e7 |CRC32: b5c60adf]
C:\Documents and Settings\terrier\Local Settings\Temp\Patcher\Patcher6076\RTPatch\patch.exe
[34816 Octet(s)|--a------|18/04/2009 21:59|HashMD5: d91d34c1826491777c2442baee3745e7 |CRC32: b5c60adf]
C:\Documents and Settings\terrier\Local Settings\Temp\Patcher\Patcher6136\RTPatch\patch.exe
[34816 Octet(s)|--a------|18/04/2009 22:00|HashMD5: d91d34c1826491777c2442baee3745e7 |CRC32: b5c60adf]
+---------------------------------------------------------------------------+
17 File(s) - C:\Program Files\Ad-remover\BACKUP
84 File(s) - C:\Program Files\Ad-remover\QUARANTINE
End at: 22:45:44 | 22/05/2009
.
+-----------------| E.O.F
. -
Excellent nettoyage !
Fais un nouvel Hijackthis stp.-
bonsoir
alors voila le nouveau rapport, (je pense que c bon ni avast ni avira ne met de message)Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:37:10, on 23/05/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\OrangeHSS\Launcher\Launcher.exe
C:\Program Files\HiYo\bin\HiYo.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Iminent\IMBooster\imbooster.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\9\AlertModule.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\terrier\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Ares\Ares.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Documents and Settings\All Users\Application Data\Skype\Plugins\Plugins\9E0D937F462E4362A83B254A9F8AB3F8\InnerPassFileSharing.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Netlog Music Tool\NetlogMusicTool.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Documents and Settings\terrier\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\OrangeHSS\systray\systrayapp.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\OrangeHSS\Deskboard\deskboard.exe
C:\Program Files\OrangeHSS\connectivity\connectivitymanager.exe
C:\Program Files\OrangeHSS\connectivity\CoreCom\CoreCom.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\OrangeHSS\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
c:\program files\winamp toolbar\WinampTbServer.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Iminent.LinkToContent - {A6E9BAAF-53CD-4575-967B-2AF710A7D21F} - C:\Program Files\Iminent\IMBooster\Iminent.LinkToContent.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [Hiyo] C:\Program Files\HiYo\bin\HiYo.exe /RunFromStartup
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [IMBooster] C:\Program Files\Iminent\IMBooster\imbooster.exe /warmup
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\terrier\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [Innerpass] C:\Documents and Settings\All Users\Application Data\Skype\Plugins\Plugins\9E0D937F462E4362A83B254A9F8AB3F8\InnerPassFileSharing.exe autostart
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Netlog Music Tool] "C:\Program Files\Netlog Music Tool\NetlogMusicTool.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Documents and Settings\terrier\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://*.mappy.com
O15 - Trusted Zone: http://*.orange.fr
O15 - Trusted Zone: http://rw.search.ke.voila.fr
O15 - Trusted Zone: http://orange.weborama.fr
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase5483.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Boonty Games - Unknown owner - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Service Google Update (gupdate1c9bc4fc1bfcf82) (gupdate1c9bc4fc1bfcf82) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
-
