rapport d'analyse hijack aide !!! Résolu

Question

Bonjour,
suite a mon analyse je ne sais pas quoi supprimé si je pourai avoir un petit coup de main
merci

voici les details du rapport d'annalyse

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:57:02, on 23/05/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Safe mode

Running processes:
C:\Windows\Explorer.EXE
C:\Windows\helppane.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Users\hp\Downloads\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.fluo.com/?m=*flavia-andre*
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: (no name) - {0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Ask Search Assistant BHO - {0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ISUSPM Startup] c:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Default user')
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Download with ImTOO Download YouTube Video - C:\Program Files\ImTOO\Download YouTube Video\upod_link.HTM
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: Europa Casino - {4C826F10-D34B-4ba8-B609-1FB8C6482A05} - C:\Casino\Europa Casino\casino.exe (file missing)
O9 - Extra 'Tools' menuitem: Europa Casino - {4C826F10-D34B-4ba8-B609-1FB8C6482A05} - C:\Casino\Europa Casino\casino.exe (file missing)
O9 - Extra button: Golden Riviera Poker - {85BFB6E0-96F9-4424-8819-1D67E9F78D33} - C:\Microgaming\Poker\goldenrivieraMPP\MPPoker.exe (file missing)
O9 - Extra button: CDPoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - C:\Poker\CDPoker\casino.exe (file missing)
O9 - Extra 'Tools' menuitem: CDPoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - C:\Poker\CDPoker\casino.exe (file missing)
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: Fair Poker - {E49E0804-28BE-49ce-9E5F-AA6059B6DC7B} - C:\Poker\Fair Poker\casino.exe (file missing)
O9 - Extra 'Tools' menuitem: Fair Poker - {E49E0804-28BE-49ce-9E5F-AA6059B6DC7B} - C:\Poker\Fair Poker\casino.exe (file missing)
O9 - Extra button: Pokers DNA - {e7cf1d98-4aea-4719-99c6-f6824e4ef25a} - C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokers DNA\Pokers DNA.lnk (HKCU)
O13 - Gopher Prefix: 
O17 - HKLM\System\CCS\Services\Tcpip\..\{5A55D696-39E1-422E-9A21-5F1B00ACBCA5}: NameServer = 198.162.1.1
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Roxio\Roxio MyDVD Basic v9\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32
vvsvc.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Windows\System32\TuneUpDefragService.exe
O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\Windows\System32\TUProgSt.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

stpcfree · Accepted Answer

bonjour

utilise plutot malwarebytes c'est moins compliqué

Utilisateur anonyme · Answer

bonsoir,
je vois que tu as ad award, spaybot, un produit symantec, je suppose que c'est norton, 

je découpe ton rapport : 

C:\Casino\Europa Casino\casino.exe (file missing) 
O9 - Extra 'Tools' menuitem: Europa Casino - {4C826F10-D34B-4ba8-B609-1FB8C6482A05} - C:\Casino\Europa Casino\casino.exe (file missing) 
O9 - Extra button: Golden Riviera Poker - {85BFB6E0-96F9-4424-8819-1D67E9F78D33} - C:\Microgaming\Poker\goldenrivieraMPP\MPPoker.exe (file missing) 
O9 - Extra button: CDPoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - C:\Poker\CDPoker\casino.exe (file missing) 
O9 - Extra 'Tools' menuitem: CDPoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - C:\Poker\CDPoker\casino.exe (file missing) 
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe (file missing) 
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra button: Fair Poker - {E49E0804-28BE-49ce-9E5F-AA6059B6DC7B} - C:\Poker\Fair Poker\casino.exe (file missing) 
O9 - Extra 'Tools' menuitem: Fair Poker - {E49E0804-28BE-49ce-9E5F-AA6059B6DC7B} - C:\Poker\Fair Poker\casino.exe (file missing)


pas mal d'applications sur wifi et surtout google toolbar.

Il y a des fichier manquants d'europa casino (poker) qui manque: c'est a nettoyer, 
reste à voir si tu utilises un produit symantec et son comptabilité avec spaybot.
tu aurais besoin d'un bon coup de nettoyage avec ad remover:

http://www.softcities.com/ad-remover/telechargement/1.htm

tuto : 
https://commentcestfait.kanak.fr/

Utilisateur anonyme · Answer

Bonsoir,
J'ai vu ton rapport, 
adaward, un produit symantec, spaybot ...
Sutout casino eurpe (poker) qu'il faut viré

Je pense qu'avec ccliner, on peut s'en sortir
Sinon, il faut essayer avec ad remover.

tuto: 

https://commentcestfait.kanak.fr/

anthony3300 · Answer

merci je vais essayer

^^Marie^^ · Answer

Bonjour

Ton log est mal fait ;)
Pourquoi ?
Nathandre va me répondre

++

^^Marie^^ · Answer

oui

stpcfree · Answer

qui ne tente rien n'a rien

anthony3300 · Answer

je dois recommencer mon analyse et le mettre hijack sur le bureau ?

Utilisateur anonyme · Answer

Hello tlm, juste en coup de vent,

tu aurais besoin d'un bon coup de nettoyage avec ad remover:

http://www.softcities.com/ad-remover/telechargement/1.htm

1/ Ce lien ne mène pas à Ad-R.
2/ Le SEUL lien officiel et valide est celui ci.

Bonne continuation
+

anthony3300 · Answer

rend Micro HijackThis v2.0.2
Scan saved at 13:16:50, on 24/05/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32	askeng.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\conime.exe
C:\Users\hp\Desktop\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.fluo.com/?m=*flavia-andre*
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: (no name) - {0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Ask Search Assistant BHO - {0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ISUSPM Startup] c:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Default user')
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Download with ImTOO Download YouTube Video - C:\Program Files\ImTOO\Download YouTube Video\upod_link.HTM
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: Europa Casino - {4C826F10-D34B-4ba8-B609-1FB8C6482A05} - C:\Casino\Europa Casino\casino.exe (file missing)
O9 - Extra 'Tools' menuitem: Europa Casino - {4C826F10-D34B-4ba8-B609-1FB8C6482A05} - C:\Casino\Europa Casino\casino.exe (file missing)
O9 - Extra button: Golden Riviera Poker - {85BFB6E0-96F9-4424-8819-1D67E9F78D33} - C:\Microgaming\Poker\goldenrivieraMPP\MPPoker.exe (file missing)
O9 - Extra button: CDPoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - C:\Poker\CDPoker\casino.exe (file missing)
O9 - Extra 'Tools' menuitem: CDPoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - C:\Poker\CDPoker\casino.exe (file missing)
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: Fair Poker - {E49E0804-28BE-49ce-9E5F-AA6059B6DC7B} - C:\Poker\Fair Poker\casino.exe (file missing)
O9 - Extra 'Tools' menuitem: Fair Poker - {E49E0804-28BE-49ce-9E5F-AA6059B6DC7B} - C:\Poker\Fair Poker\casino.exe (file missing)
O9 - Extra button: Pokers DNA - {e7cf1d98-4aea-4719-99c6-f6824e4ef25a} - C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokers DNA\Pokers DNA.lnk (HKCU)
O13 - Gopher Prefix: 
O17 - HKLM\System\CCS\Services\Tcpip\..\{5A55D696-39E1-422E-9A21-5F1B00ACBCA5}: NameServer = 198.162.1.1
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Roxio\Roxio MyDVD Basic v9\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32
vvsvc.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Windows\System32\TuneUpDefragService.exe
O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\Windows\System32\TUProgSt.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

anthony3300 · Answer

voici mon rapport en espérant qu'il soit bon,mon antivirus est nod 32

Utilisateur anonyme · Answer

je vais essayer de décourer ton rapport pour les parties qui ne vont pas, ça prend un peu de temps mais j'ajouterai mon message vite

anthony3300 · Answer

d'accord merci bien

Utilisateur anonyme · Answer

R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll 
R3 - URLSearchHook: (no name) - {0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} - (no file) 
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll 
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll 
O9 - Extra button: Europa Casino - {4C826F10-D34B-4ba8-B609-1FB8C6482A05} - C:\Casino\Europa Casino\casino.exe (file missing) 
O9 - Extra 'Tools' menuitem: Europa Casino - {4C826F10-D34B-4ba8-B609-1FB8C6482A05} - C:\Casino\Europa Casino\casino.exe (file missing) 
O9 - Extra button: Golden Riviera Poker - {85BFB6E0-96F9-4424-8819-1D67E9F78D33} - C:\Microgaming\Poker\goldenrivieraMPP\MPPoker.exe (file missing) 
O9 - Extra button: CDPoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - C:\Poker\CDPoker\casino.exe (file missing) 
O9 - Extra 'Tools' menuitem: CDPoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - C:\Poker\CDPoker\casino.exe (file missing) 
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe (file missing) 
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe (file missing) 
O9 - Extra button: Fair Poker - {E49E0804-28BE-49ce-9E5F-AA6059B6DC7B} - C:\Poker\Fair Poker\casino.exe (file missing) 
O9 - Extra 'Tools' menuitem: Fair Poker - {E49E0804-28BE-49ce-9E5F-AA6059B6DC7B} - C:\Poker\Fair Poker\casino.exe (file missing) 
O9 - Extra button: Pokers DNA - {e7cf1d98-4aea-4719-99c6-f6824e4ef25a} - C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokers DNA\Pokers DNA.lnk (HKCU) 
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe 

O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe  , je ne sais pas à quoi correspond, peut etre parue vendu....

O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE 
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing) 
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe 

O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Windows\System32\TuneUpDefragService.exe Nettoyeur de registre

sur celà, j'ai rien trouvé mais suspect :

O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\Windows\System32\TUProgSt.exe

anthony3300 · Answer

que puis je faire alors ? lorsque j'efface avec hijack sa ne fonctionne pas ,sur l'analyse suivante c'est toujours pareil

Utilisateur anonyme · Answer

ce que je pense, c'est qu'il faut nettoyer déjà europa casion et les autres pocker, désinstaller le produit symantec, puis que tu utilises un autre antivirus, virer le toolbar de yahoo à cause de companion, vider les fichiers temporaires d'internet explorer et ta corbeille, et refaire un log hijacjthis

anthony3300 · Answer

merci je vais essayer

anthony3300 · Answer

comment les nettoyer ils ne sont pas dans programme desinstaller , ccleaner fait ad aware fait spybot aussi et tune up.

anthony3300 · Answer

merci pour les reponses

anthony3300 · Answer

pour symantec il y a ecrit que cela peut endommager plusieur programme
!!

anthony3300 · Answer

live update

Utilisateur anonyme · Answer

je réctifie, laisse le et on verra, une fois tout fini, vide la corbeillle et les fichiers temporaires d'internet et repasse un log de hijack this

anthony3300 · Answer

je pensai que vous en sauriez plus que moi ,c'est pour l'anti virus windows update se serait pour les mises a jour 
j'ai vu sa sur le net

anthony3300 · Answer

c'est pour norton

Utilisateur anonyme · Answer

tu t'en sers pas puisque tu as un autre antivirus, tu peux le désinstaller
de même pour spaybot et ad award tu en gardes un seul,c'est suffisant
au pire tu laisses et passe un log hijack

anthony3300 · Answer

yes

anthony3300 · Answer

yes

Utilisateur anonyme · Answer

passe un autre log de hijackthis et mets ton rapport ici stp

anthony3300 · Answer

ok mais pour symentec acces au dossier refusé

anthony3300 · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:42:41, on 24/05/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32	askeng.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Windows\system32\conime.exe
C:\Users\hp\Desktop\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.fluo.com/?m=*flavia-andre*
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
R3 - URLSearchHook: (no name) - {0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O2 - BHO: Ask Search Assistant BHO - {0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ISUSPM Startup] c:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Default user')
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Download with ImTOO Download YouTube Video - C:\Program Files\ImTOO\Download YouTube Video\upod_link.HTM
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: Europa Casino - {4C826F10-D34B-4ba8-B609-1FB8C6482A05} - C:\Casino\Europa Casino\casino.exe (file missing)
O9 - Extra 'Tools' menuitem: Europa Casino - {4C826F10-D34B-4ba8-B609-1FB8C6482A05} - C:\Casino\Europa Casino\casino.exe (file missing)
O9 - Extra button: Golden Riviera Poker - {85BFB6E0-96F9-4424-8819-1D67E9F78D33} - C:\Microgaming\Poker\goldenrivieraMPP\MPPoker.exe (file missing)
O9 - Extra button: CDPoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - C:\Poker\CDPoker\casino.exe (file missing)
O9 - Extra 'Tools' menuitem: CDPoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - C:\Poker\CDPoker\casino.exe (file missing)
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: Fair Poker - {E49E0804-28BE-49ce-9E5F-AA6059B6DC7B} - C:\Poker\Fair Poker\casino.exe (file missing)
O9 - Extra 'Tools' menuitem: Fair Poker - {E49E0804-28BE-49ce-9E5F-AA6059B6DC7B} - C:\Poker\Fair Poker\casino.exe (file missing)
O9 - Extra button: Pokers DNA - {e7cf1d98-4aea-4719-99c6-f6824e4ef25a} - C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokers DNA\Pokers DNA.lnk (HKCU)
O13 - Gopher Prefix: 
O17 - HKLM\System\CCS\Services\Tcpip\..\{5A55D696-39E1-422E-9A21-5F1B00ACBCA5}: NameServer = 198.162.1.1
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Roxio\Roxio MyDVD Basic v9\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32
vvsvc.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Windows\System32\TuneUpDefragService.exe
O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\Windows\System32\TUProgSt.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

anthony3300 · Answer

oui

^^Marie^^ · Answer

Re

Pour désinstaller Norton
http://service1.symantec.com/support/inter/tsgeninfointl.nsf/fr_docid/20050414110429924?OpenDocument&seg=hm&lg=fr&ct=fr

Un complément
https://www.01net.com/telecharger/windows/Utilitaire/manipulation_de_fichier/fiches/32585.html


Ad-Aware &#9658; poubelle

anthony3300 · Answer

d'accord merci

^^Marie^^ · Answer

Télécharge de AD-Remover Cyrildu17 / C_XX) sur ton Bureau. 

http://sd-1.archive-host.com/membres/up/16506160323759868/AD-R.exe 

/!\ Déconnecte-toi et ferme toutes applications en cours /!\ 

- Double-clique sur le programme d'installation, installe-le dans son emplacement par défaut (C:\Program files). 
- Double-clique sur l'icône Ad-remover située sur ton Bureau. 
- Au menu principal, choisis l'option "A". 
- Poste le rapport qui apparaît à la fin. 

(Le rapport est sauvegardé aussi sous C:\Ad-report(date).log) 

(CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller) 

Note : 

"Process.exe", une composante de l'outil, est détectée par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool. 
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. 
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

Utilisateur anonyme · Answer

j'ai posté un message n°59, mais je ne le vois pas : (

anthony3300 · Answer

je peus le desinstaller mais le probleme est  qu'il me demande de le reinstallé apres ,mais  il etait deja installé sur mon ordi a l'achat

anthony3300 · Answer

moi non plus

anthony3300 · Answer

non j'ouvre ad remover et franchement je suis pas très rassuré par ce qu'ils me disent (il y a des risques ),est-ce que mon ordi risque quelque chose ?

^^Marie^^ · Answer

Pas de soucis continue.

Utilisateur anonyme · Answer

Anthony, fait le post 62

anthony3300 · Answer

je ne vois pas non plus tes messages car il y a des numéro manquant

^^Marie^^ · Answer

Faut tourner les pages un peu ;))

Utilisateur anonyme · Answer

me revoilà , 
ce logiciel a fait ses preuves, on s'en sert tout le temps mais ils prennent des précautions pour l'utilisation, t'inquiette pas

Utilisateur anonyme · Answer

on attend anthony maintenant

anthony3300 · Answer

le voici

Utilisateur anonyme · Answer

alors?
des fichiers trouvés par ad mouver?
tu as pu les supprimer?

anthony3300 · Answer

j'essaye de le posté mais ca ne marche pas, voici le resultat :  
84054 Octet(s) - C:\Ad-Report-24.05.2009.log

18 Fichier(s) - C:\Program Files\Ad-remover\BACKUP
231 Fichier(s) - C:\Program Files\Ad-remover\QUARANTINE

Fin à: 16:38:08 | 24/05/2009
.
+-----------------| E.O.F   je vais réessayer

anthony3300 · Answer

après il faut les supprimer dans le programme sur program files ?

anthony3300 · Answer

pardon du programme dans program files
 ?

anthony3300 · Answer

d'accord

anthony3300 · Answer

------- RAPPORT D'AD-REMOVER 1.1.4.3 | UNIQUEMENT XP/VISTA -------

Mit à jour part C_XX le 24/05/2009 à 15:20
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html

Lancé à: 16:15:16, 24/05/2009 | Mode Normal
Exécuté de: C:\Program Files\Ad-remover\
Système d'exploitation: Microsoft® Windows Vista™ Home Premium Service Pack 1 v6.0.6001
Nom du PC: PC-DE-HP
Utilisateur actuel: hp - Administrator

.
============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
.
.
HKCR\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}
HKCU\Software\EoRezo
HKCU\Software\Europa Casino
HKCU\Software\Fair Poker
HKCU\Software\ItsLabel
HKCU\Software\MGS\Thumper\Casino\GoldenRiviera
HKCU\Software\MGS\Thumper\Casino\prime
HKCU\Software\MicroGaming\Thumper\Casino\GoldenRiviera
HKCU\Software\MicroGaming\Thumper\Casino\prime
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
HKCU\Software\pacificpoker
HKCU\Software\PartyGaming
HKCU\Software\Poker 770
HKCU\Software\pokerinstaller
HKCU\Software\Titan Poker
HKLM\Software\EoRezo
HKLM\Software\Europa Casino
HKLM\Software\Fair Poker
HKLM\Software\Microsoft\Internet Explorer\Extensions\{4C826F10-D34B-4ba8-B609-1FB8C6482A05}
HKLM\Software\Microsoft\Internet Explorer\Extensions\{B7FE5D70-9AA2-40F1-9C6B-12A255F085E1}
HKLM\Software\Microsoft\Internet Explorer\Extensions\{E49E0804-28BE-49ce-9E5F-AA6059B6DC7B}
HKLM\Software\Poker 770
HKLM\Software\Titan Poker
HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\Registry\User\S-1-5-21-3183464099-3479215151-3981459160-1000\Software\Sweetim
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\{0579B4B6-0293-4D73-B02D-5EBB0BA0F0A2}
HKLM\Software\Classes\CLSID\{0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2}
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\1AC67655DD68F8240B2860F2D511EBD8
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\34EDDB1BFB3A2D448845F3EFD0F15A43
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\351716A953E21214898904032EAE2E81
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\427EA997C413D1D47907CBFC7B2DB432
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\4318DF19719275242801CBE292063A4C
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\5D19F074C042AD34BAB463D4175A062E
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\A189D17A469616C4688D23E192996267
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\DB59FDB786388EA4D897F3EE715683AC
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\E1C820A74ED67374BA048B52CB3C3804
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\E337925F629CF4C4FB08F3D9674DD839
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\EC65F200D112357449C8B1BC3CFA03D0
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\F327D0C73C0973644A21E8CC852267A0
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9
.
C:\Users\hp\AppData\Roaming\EoRezo\cmhost.cyp 
C:\Users\hp\AppData\Roaming\EoRezo\ConfMedia.cyp 
C:\Users\hp\AppData\Roaming\EoRezo\db 
C:\Users\hp\AppData\Roaming\EoRezo\eoDesktop 
C:\Users\hp\AppData\Roaming\EoRezo\host.cyp 
C:\Users\hp\AppData\Roaming\EoRezo\user.cyp 
C:\Users\hp\AppData\Roaming\EoRezo\db\cat.cyp 
C:\Users\hp\AppData\Roaming\EoRezo\eoDesktop\config.xml 
C:\Users\hp\AppData\Roaming\EoRezo\eoDesktop\eoDesktop.html 
C:\Users\hp\AppData\Roaming\EoRezo\eoDesktop\userConfig.xml 
C:\Users\hp\AppData\Roaming\EoRezo 
C:\Users\hp\AppData\Roaming\ItsLabel\ItsTV 
C:\Users\hp\AppData\Roaming\ItsLabel\ItsTV\itsTV.xml 
C:\Users\hp\AppData\Roaming\ItsLabel 
C:\Users\hp\AppData\Roaming\PacificPoker\Cash 
C:\Users\hp\AppData\Roaming\PacificPoker\casinopoker 
C:\Users\hp\AppData\Roaming\PacificPoker\Chat 
C:\Users\hp\AppData\Roaming\PacificPoker\Config 
C:\Users\hp\AppData\Roaming\PacificPoker\Help_Support 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization 
C:\Users\hp\AppData\Roaming\PacificPoker\Login 
C:\Users\hp\AppData\Roaming\PacificPoker\media 
C:\Users\hp\AppData\Roaming\PacificPoker\NoFlash 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby 
C:\Users\hp\AppData\Roaming\PacificPoker\Update 
C:\Users\hp\AppData\Roaming\PacificPoker\Utils 
C:\Users\hp\AppData\Roaming\PacificPoker\Cash\media 
C:\Users\hp\AppData\Roaming\PacificPoker\Cash\media\888logo_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Cash\media\back_lobby_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Cash\media\back_lobby_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Cash\media\back_lobby_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Cash\media\Bankroll.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Cash\media\bonus_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Cash\media\bonus_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Cash\media\bonus_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Cash\media\CashBgr.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Cash\media\cashierbg.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Cash\media\cash_out_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Cash\media\cash_out_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Cash\media\cash_out_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Cash\media\convert_disable.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Cash\media\convert_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Cash\media\convert_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Cash\media\convert_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Cash\media\dep888logo0.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Cash\media\Depfont0.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Cash\media\Depfont1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Cash\media\depositby.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Cash\media\deposit_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Cash\media\deposit_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Cash\media\deposit_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Cash\media\lobby_disabled.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Cash\media\lobby_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Cash\media\lobby_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Cash\media\lobby_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Cash\media\Pnt888logo_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\casinopoker\Logs 
C:\Users\hp\AppData\Roaming\PacificPoker\Chat\Bold_alt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Chat\Bold_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Chat\chat_alt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Chat\chat_bg.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Chat\chat_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Chat\chat_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Chat\close_chat_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Chat\close_chat_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Chat\dealerOff_alt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Chat\dealerOff_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Chat\Italic_alt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Chat\Italic_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Chat\Notes_alt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Chat\Notes_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Chat\Notes_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Chat\open_chat_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Chat\open_chat_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Chat\Reset_alt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Chat\Reset_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Chat\Reset_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Chat\Send_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Chat\Send_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Chat\Send_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Chat\Stats_alt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Chat\Stats_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Chat\Stats_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Chat\TourInfo_alt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Chat\TourInfo_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Chat\TourInfo_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\BlindLevelDlg.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\CashierScreen.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\CashTmp.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\ChatObj.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\ChooseAmmountDlg.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\Currencies.pxml 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\FieldTipDlg.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\FlashInstallDlg.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\ForgotPass.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\GameInfoLobby.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\GameInfoNotesDlg.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\GamePage.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\GdiManagerResourses.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\HandHistoryOptionsDlg.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\HandRankDlg.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\HelpDlg.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\History.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\LobbyWebBrowser.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\LoginDlg.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\MainLobby.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\MediaSets.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\MemberVerification.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\MyTournamentsDlg.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\PlayerNoteDlg.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\PointPage.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\PokerGui.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\PokerOldGui.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\PrefDlg.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\PrizeTableDlg.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\Prog.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\QuickSeatPage.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\RegistrationObj.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\RegLoginValidator.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\RingGamePage.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\RSErrDlg.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\RsWornDlg.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\SettingsDlg.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\SettingsDlgEx.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\SettingsParams.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\SitAndGoPage.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\TableInfoDlg.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\TableViewEx.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\TournamentDlg.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\TournamentPage.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\TournamentPasswordDlg.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\UserMsgObjDlg.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Config\WinNotificationDlg.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Help_Support\media 
C:\Users\hp\AppData\Roaming\PacificPoker\Help_Support\media\help_bg.jpg 
C:\Users\hp\AppData\Roaming\PacificPoker\Help_Support\media\ocx_bg.jpg 
C:\Users\hp\AppData\Roaming\PacificPoker\Help_Support\media	ab_content_alt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Help_Support\media	ab_content_disable.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Help_Support\media	ab_content_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Help_Support\media	ab_content_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Help_Support\media	ab_ContUs_alt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Help_Support\media	ab_ContUs_disable.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Help_Support\media	ab_ContUs_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Help_Support\media	ab_ContUs_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Help_Support\media	ab_faq_alt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Help_Support\media	ab_faq_disable.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Help_Support\media	ab_faq_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Help_Support\media	ab_faq_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Help_Support\media	ab_forums_alt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Help_Support\media	ab_forums_disable.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Help_Support\media	ab_forums_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Help_Support\media	ab_forums_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Help_Support\media	ab_ps_alt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Help_Support\media	ab_ps_disable.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Help_Support\media	ab_ps_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Help_Support\media	ab_ps_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\BlindLevelDlgText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\CashierScreenText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\ChatObjText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\ChooseAmmountDlgText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\FlashInstallDlgText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\ForgotPassText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\GameInfoLobbyText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\GameInfoNotesDlgText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\GamePageText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\HandHistoryOptionsDlgText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\HandRankDlgText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\HelpDlgText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\HistoryText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\LinksText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\LoginDlgText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\MainLobbyText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\MemberVerificationObjText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\MyTournamentsDlgText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\PKTText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\PlayerNoteDlgText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\PointPageText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\PokerGUIText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\PokerTrackerDictionaryText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\PrefDlgText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\PrizeTableDlgText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\QuickSeatText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\RegistrationObjText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\RingGamePageText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\RSErrText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\ServersText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\SettingsDlgText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\TableViewExText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\TournamentDlgText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\TournamentPageText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\UMsgDlgText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Localization\WinNotificationDlgText.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\1rec.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\2.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\2rec.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\3.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\3rec.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\4.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\4rec.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\5.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\5rec.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\888LogoPre_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\back_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\back_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\back_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\cancel_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\cancel_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\cancel_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\checkAlt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\checkdown.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\checkup.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\continue_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\continue_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\continue_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\error_btn.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\help_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\help_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\help_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\info_btn.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\LoginRealBkgr.jpg 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\login_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\login_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\login_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\MemberVerificationBkgr.jpg 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media
ewAcc_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\ok_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\ok_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\ok_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\passRemBkgr.jpg 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\progbgr.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\progbgr_adj.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\progbgr_recon.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\RadioAlt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\RadioDown.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\RadioUp.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\RealBkgr.jpg 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\submit_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\submit_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\submit_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Login\media\SuggestedUsernames.jpg 
C:\Users\hp\AppData\Roaming\PacificPoker\media\888logo_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\backcard0.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\buttonOK_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\buttonOK_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\buttonOK_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\cancel_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\cancel_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\cancel_over.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\cancel_PL_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\cancel_PL_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\cancel_PL_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\cancel_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\cashier_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\cashier_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\cashier_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\ChooseBkgrd.jpg 
C:\Users\hp\AppData\Roaming\PacificPoker\media\Continue0.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\Continue1.bmp

anthony3300 · Answer

C:\Users\hp\AppData\Roaming\PacificPoker\media\Continue2.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\CoolScrollSkin.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\exit_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\exit_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\exit_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\forgotCancel0.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\forgotCancel1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\forgotCancel2.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\ForgotSubmit0.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\ForgotSubmit1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\ForgotSubmit2.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\Globalwinpub.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\join_later_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\join_later_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\join_later_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\JP_01.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\JP_02.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\Large_cancel_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\Large_cancel_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\Large_cancel_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\Large_ok_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\Large_ok_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\Large_ok_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\loader.swf 
C:\Users\hp\AppData\Roaming\PacificPoker\media\Lobby_JP_cyphers.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media
ame_font.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media
ext.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media
ext_light.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media
ext_pressed.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media
otes_bg.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\No_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\No_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\No_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\ok_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\ok_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\ok_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\PN888logo_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\Print_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\Print_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\Print_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\RemoveMe_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\RemoveMe_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\RemoveMe_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\mediaestore_Down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\mediaestore_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\mediaestore_Up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\save_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\save_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\save_Up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\SeatMe0.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\SeatMe1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\SeatMe2.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\SeatMe_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\SeatMe_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\SeatMe_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\Slider.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\SmallCheck0.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\SmallCheck1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\SmallCheck2.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\SmallCheck_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\SmallCheck_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\SmallCheck_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\SmallFold_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\SmallFold_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\SmallFold_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\SmallNo_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\SmallNo_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\SmallNo_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\SmallYes_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\SmallYes_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\SmallYes_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\Strip2b.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\StripBig.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\StripSmall.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\Update.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\UserMsg.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\userwinpri.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\Yes_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\Yes_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\media\Yes_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\NoFlash\Cancel_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\NoFlash\Cancel_Hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\NoFlash\Cancel_Up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\NoFlash\Download_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\NoFlash\Download_Hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\NoFlash\Download_Up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\NoFlash\FlashBtn.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\AddOn.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\AddOn_light.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\AddOn_pressed.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\BackCardSmall0_1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\BackCardSmall0_10.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\BackCardSmall0_2.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\BackCardSmall0_3.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\BackCardSmall0_4.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\BackCardSmall0_5.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\BackCardSmall0_6.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\BackCardSmall0_7.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\BackCardSmall0_8.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\BackCardSmall0_9.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\BackToHist.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\BackToHist_light.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\BackToHist_pressed.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\bar.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\best_hand_plate.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Bet_button_Disable.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Bet_button_Hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Bet_button_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\BlackJack_game.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\BlackJack_game_disabled.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\BlackJack_game_light.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\BlackJack_game_pressed.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\blinker_green.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\blinker_red.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Bottom_window.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\buyin.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\buyin_light.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\buyin_pressed.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\cardHighlightHalfYellow.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\cardHighlightYellow.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\casino_game.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\casino_game_disabled.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\casino_game_light.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\casino_game_Pressed.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chat_Off_small.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\checkalt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\checkbox_Blank.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\checkbox_Blank_Checked.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\checked.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\checkedRadio.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\ClassicViewGame.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\ClassicViewGame_disabled.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\ClassicViewGame_light.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\ClassicViewGame_Pressed.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Congratulations11.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\dealermark.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Deck0.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Deck1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\deck2.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Deck3.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Deck4.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Deck5.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Deck6.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\DeckBW0.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\DeckBW1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\deckBW2.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\DeckBW3.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\DeckBW4.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\DeckBW5.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\DeckBW6.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\disabledradio.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\ExtraBet.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\ExtraBet_Over.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\ExtraBet_pressed.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\FF_STEP.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\FF_STEP_disabled.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\FF_STEP_light.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\FF_STEP_pressed.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\first_person_view.swf 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\folded_big.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\FW.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\FW_disabled.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\FW_light.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\FW_pressed.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\game_button.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\game_button_action.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\game_button_action_F5.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\game_button_action_F5_light.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\game_button_action_F5_pressed.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\game_button_action_F6.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\game_button_action_F6_light.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\game_button_action_F6_pressed.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\game_button_action_F7.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\game_button_action_F7_light.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\game_button_action_F7_pressed.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\game_button_action_light.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\game_button_action_pressed.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\game_button_light.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\game_button_pressed.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\green.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\history_patch.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\icon0.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Icon1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Icon2.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Icon3.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Icon4.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Icon5.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Icon6.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Icon7.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\leavetable.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\leavetable_disabled.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\leavetable_light.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\leavetable_pressed.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Lobby_JP_cyphers.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\MenuItem_button.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\MenuItem_button_Light.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\menu_view.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\menu_view_disabled.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\menu_view_light.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\menu_view_pressed.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\MyPlate_lit.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media
ame_plate_arrow.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Notes_Small.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Pause.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Pause_disabled.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Pause_light.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Pause_pressed.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\place_JP_BG.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Plate.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Plate_Light.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Plate_me.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Play.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Play_disabled.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Play_light.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Play_pressed.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\PracticeRegular.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\processing.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\processing_.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\ReBuy.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\ReBuy_light.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\ReBuy_pressed.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\mediaeserved.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\RR_STEP.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\RR_STEP_disabled.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\RR_STEP_light.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\RR_STEP_pressed.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\RW.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\RW_disabled.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\RW_light.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\RW_pressed.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\settings.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\settings_disabled.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\settings_light.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\settings_pressed.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\SitDown.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Stop.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Stop_disabled.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Stop_light.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Stop_pressed.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media	able10_1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media	able10_5.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media	able8_1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media	able8_5.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar0_1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar0_10.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar0_2.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar0_3.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar0_4.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar0_5.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar0_6.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar0_7.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar0_8.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar0_9.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar1_1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar1_10.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar1_2.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar1_3.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar1_4.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar1_5.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar1_6.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar1_7.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar1_8.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar1_9.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar2_1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar2_10.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar2_2.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar2_3.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar2_4.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar2_5.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar2_6.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar2_7.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar2_8.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar2_9.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar3_1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar3_10.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar3_2.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar3_3.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar3_4.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar3_5.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar3_6.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar3_7.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar3_8.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar3_9.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar4_1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar4_10.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar4_2.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar4_3.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar4_4.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar4_5.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar4_6.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar4_7.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar4_8.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar4_9.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar5_1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar5_10.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar5_2.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar5_3.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar5_4.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar5_5.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar5_6.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar5_7.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar5_8.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar5_9.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar6_1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar6_10.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar6_2.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar6_3.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar6_4.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar6_5.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar6_6.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar6_7.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar6_8.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar6_9.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar7_1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar7_10.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar7_2.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar7_3.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar7_4.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar7_5.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar7_6.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar7_7.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar7_8.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar7_9.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar8_1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar8_10.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar8_2.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar8_3.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar8_4.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar8_5.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar8_6.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar8_7.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar8_8.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar8_9.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar9_1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar9_10.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar9_2.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar9_3.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar9_4.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar9_5.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar9_6.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar9_7.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar9_8.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TableAvatar9_9.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Table_JP.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Table_JP_cyphers.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\ThreeDViewGame.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\ThreeDViewGame_disabled.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\ThreeDViewGame_light.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\ThreeDViewGame_Pressed.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TimeBank.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TimeBank_disabled.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TimeBank_light.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TimeBank_pressed.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TimeLineBar_Black.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TimeLineBar_Black_UP.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TimeLineBar_Orange.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\TimeLineBar_Orange_UP.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\unchecked.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\uncheckedRadio.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Viewlobby.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Viewlobby_disabled.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Viewlobby_light.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Viewlobby_pressed.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\View_menu_ButLight.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\View_menu_ButUp.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\_menu_But_Chat.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\_menu_But_Chat_Alter.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\_menu_But_Chat_Disabled.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\_menu_But_Chat_Light.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\_menu_But_WriteNotes.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\_menu_But_WriteNotes2.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\_menu_But_WriteNotes2_disabled.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\0 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\1 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\2 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\3 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\4 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\5 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\6 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\0\1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\0\100.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\0\100k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\0\1c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\0\1k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\0\25.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\0\25c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\0\25k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\0\5.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\0\500.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\0\5c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\0\5k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\1\1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\1\100.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\1\100k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\1\1c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\1\1k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\1\25.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\1\25c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\1\25k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\1\5.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\1\500.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\1\5c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\1\5k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\2\1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\2\100.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\2\100k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\2\1c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\2\1k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\2\25.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\2\25c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\2\25k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\2\5.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\2\500.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\2\5c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\2\5k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\3\1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\3\100.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\3\100k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\3\1c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\3\1k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\3\25.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\3\25c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\3\25k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\3\5.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\3\500.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\3\5c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\3\5k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\4\1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\4\100.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\4\100k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\4\1c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\4\1k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\4\25.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\4\25c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\4\25k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\4\5.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\4\500.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\4\5c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\4\5k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\5\1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\5\100.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\5\100k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\5\1c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\5\1k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\5\25.bmp

anthony3300 · Answer

C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\5\25c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\5\25k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\5\5.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\5\500.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\5\5c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\5\5k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\6\1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\6\100.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\6\100k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\6\1c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\6\1k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\6\25.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\6\25c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\6\25K.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\6\5.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\6\500.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\6\5c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\media\Chips\6\5k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\BackCardSmall0_1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\BackCardSmall0_10.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\BackCardSmall0_2.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\BackCardSmall0_3.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\BackCardSmall0_4.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\BackCardSmall0_5.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\BackCardSmall0_6.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\BackCardSmall0_7.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\BackCardSmall0_8.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\BackCardSmall0_9.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\bar.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\dealermark.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\green.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\history_patch.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\PracticeOld.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia	able10_1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia	able8_1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\TimeLineBar_Black.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\TimeLineBar_Black_UP.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\TimeLineBar_Orange.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\TimeLineBar_Orange_UP.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\0 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\1 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\2 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\3 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\4 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\5 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\6 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\0\1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\0\100.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\0\100k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\0\1c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\0\1k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\0\25.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\0\25c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\0\25k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\0\5.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\0\500.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\0\5c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\0\5k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\1\1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\1\100.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\1\100k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\1\1c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\1\1k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\1\25.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\1\25c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\1\25k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\1\5.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\1\500.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\1\5c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\1\5k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\2\1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\2\100.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\2\100k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\2\1c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\2\1k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\2\25.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\2\25c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\2\25k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\2\5.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\2\500.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\2\5c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\2\5k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\3\1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\3\100.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\3\100k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\3\1c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\3\1k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\3\25.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\3\25c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\3\25k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\3\5.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\3\500.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\3\5c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\3\5k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\4\1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\4\100.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\4\100k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\4\1c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\4\1k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\4\25.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\4\25c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\4\25k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\4\5.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\4\500.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\4\5c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\4\5k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\5\1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\5\100.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\5\100k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\5\1c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\5\1k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\5\25.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\5\25c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\5\25k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\5\5.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\5\500.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\5\5c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\5\5k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\6\1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\6\100.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\6\100k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\6\1c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\6\1k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\6\25.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\6\25c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\6\25K.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\6\5.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\6\500.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\6\5c.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Poker\OldMedia\Chips\6\5k.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\888logo_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\arrow_left_disable.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\arrow_left_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\arrow_left_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\arrow_left_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\arrow_right_disable.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\arrow_right_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\arrow_right_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\arrow_right_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\backgammon_disable.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\backgammon_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\backgammon_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\BackTolobby_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\BackTolobby_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\BackTolobby_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\blackjack_disable.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\blackjack_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\blackjack_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\blank.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\but_Menu_Beginers_alt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\but_Menu_Beginers_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\but_Menu_Beginers_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\but_Menu_Beginers_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\but_Menu_Help_alt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\but_Menu_Help_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\but_Menu_Help_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\but_Menu_Help_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\but_Menu_NewsEvents_alt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\but_Menu_NewsEvents_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\but_Menu_NewsEvents_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\but_Menu_NewsEvents_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\but_Menu_OnlineGames_alt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\but_Menu_OnlineGames_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\but_Menu_OnlineGames_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\but_Menu_OnlineGames_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\but_Menu_Options_alt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\but_Menu_Options_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\but_Menu_Options_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\but_Menu_Options_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\but_Menu_Profile_alt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\but_Menu_Profile_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\but_Menu_Profile_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\but_Menu_Profile_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\but_MyTournaments_disable.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\but_MyTournaments_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\but_MyTournaments_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\but_MyTournaments_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\Cashier_disable.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\Cashier_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\Cashier_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\Cashier_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\casino_games_disable.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\casino_games_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\casino_games_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\checkalt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\checkdisable.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\checkdown.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\checkup.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\clear_filter_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\clear_filter_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\close_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\close_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\close_icon_disable.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\close_icon_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\close_icon_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\close_icon_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\close_over.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\close_pressed.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\close_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\CountryFlags.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\EditTbl_888logo_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\edit_table_bg.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\enter_tournlobby_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\enter_tournlobby_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\enter_tournlobby_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\icon0.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\Icon1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\Icon2.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\Icon3.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\Icon4.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\Icon5.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\Icon6.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\Icon7.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\join_disable.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\join_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\join_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\Join_Tournament_disable.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\Join_Tournament_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\Join_Tournament_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\Join_Tournament_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\join_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\left-top.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\Lobby_JP.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\Lobby_JP_cyphers.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\Login_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\Login_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\Login_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\MAIN_LOBBY_ICON.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\mt_888Logo_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\my_tournaments_BG.jpg 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media
ewPlayer_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media
ewPlayer_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media
ewPlayer_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\News_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\News_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\News_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media
otes_bg.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\ok_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\ok_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\ok_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\playBtn_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\playBtn_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\playBtn_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\player_info_disable.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\player_info_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\player_info_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\player_info_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\Player_Notes.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\poker_lobby.jpg 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\practice_play.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\Prize1.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\Prize2.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\Prize3.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\quickSeat_bg.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\RadioDown.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\RadioUp.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\SeatMe_disable.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\SeatMe_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\SeatMe_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\SeatMe_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\sport_disable.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\sport_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\sport_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	ab_Demo_alt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	ab_Demo_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	ab_holdem_alt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	ab_holdem_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	ab_jackpots_alt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	ab_jackpots_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	ab_omaha_alt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	ab_omaha_HL_alt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	ab_omaha_HL_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	ab_omaha_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	ab_quickSeat_alt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	ab_quickSeat_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	ab_Real_alt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	ab_Real_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	ab_ring_tables_alt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	ab_ring_tables_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	ab_seven_alt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	ab_seven_HL_alt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	ab_seven_HL_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	ab_seven_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	ab_sitandgo_alt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	ab_sitandgo_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	ab_tournaments_alt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	ab_tournaments_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	itle.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	l_backgammon_disable.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	l_backgammon_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	l_backgammon_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	l_blackjack_disable.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	l_blackjack_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	l_blackjack_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	l_casino_games_disable.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	l_casino_games_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	l_casino_games_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	l_Sport_disable.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	l_Sport_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media	l_Sport_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\Tournament_Lobby.jpg 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\Tour_tab_alt.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\Tour_tab_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\UnjoinTour_disable.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\UnjoinTour_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\UnjoinTour_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\UnjoinTour_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\unjoin_disable.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\unjoin_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\unjoin_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\unjoin_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\view_table_disable.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\view_table_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\view_table_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\view_table_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\waiting_list_disable.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\waiting_list_down.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\waiting_list_hover.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\PokerLobby\Media\waiting_list_up.bmp 
C:\Users\hp\AppData\Roaming\PacificPoker\Utils\version.cxm 
C:\Users\hp\AppData\Roaming\PacificPoker 
C:\Users\hp\Appdata\LocalLow\SweetIM\Toolbars 
C:\Users\hp\Appdata\LocalLow\SweetIM\Toolbars\Internet Explorer 
C:\Users\hp\Appdata\LocalLow\SweetIM\Toolbars\Internet Explorer\cache 
C:\Users\hp\Appdata\LocalLow\SweetIM\Toolbars\Internet Explorer\cache\7ecfc800b3946bda26c32bca50a3f4eb.games.bmp 
C:\Users\hp\Appdata\LocalLow\SweetIM\Toolbars\Internet Explorer\cache\f64a71f602d078aa84829e36b8992194.toolbar31.xml 
C:\Users\hp\Appdata\LocalLow\SweetIM 
C:\Program Files\PacificPoker\bin 
C:\Program Files\PacificPoker\EULA.fra 
C:\Program Files\PacificPoker\INSTALL.LOG 
C:\Program Files\PacificPoker\ProcessList.txt 
C:\Program Files\PacificPoker\bin\BrandConf.cxm 
C:\Program Files\PacificPoker\bin\casinopoker 
C:\Program Files\PacificPoker\bin\casinopoker\bin 
C:\Program Files\PacificPoker\bin\casinopoker\bin\BrandConf.cxm 
C:\Program Files\PacificPoker 
C:\Users\hp\AppData\Roaming\Microsoft\Windows\Startm~1\Programs\Pacific Poker 
C:\Windows\Installer\189a695.msi 
C:\Windows\Installer\189a69b.msi 
C:\Windows\Prefetch\POKER.EXE-87FB4C9A.pf 

(!) -- Fichiers temporaires supprimés.

.
+-----------------| Scan additionnel:
.
.
. 

---- Internet Explorer Version 8.0.6001.18702 ----

[HKEY_CURRENT_USER\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://www.google.com
Start Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/

[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

   Tabs: res://ieframe.dll/tabswelcome.htm

=========== Suspect (Cracks, Serials ... ) ==========

.

+---------------------------------------------------------------------------+

84054 Octet(s) - C:\Ad-Report-24.05.2009.log

18 Fichier(s) - C:\Program Files\Ad-remover\BACKUP
231 Fichier(s) - C:\Program Files\Ad-remover\QUARANTINE

Fin à: 16:38:08 | 24/05/2009
.
+-----------------| E.O.F
.

^^Marie^^ · Answer

M'étonne pas que cela ne passe pas ;))

anthony3300 · Answer

oui

Utilisateur anonyme · Answer

eh bin, tous ça !!!
S'il te plait anthony, à l'avenir, ne joue surtout pas au poker ; )
Bref, il y en a qui ont été supprimés, d'autres en quarentaine, mais il faut peut etre repasser un autre log hijackthis pour voir s'il y a des résidus restant si tout le mode est d'accord.

anthony3300 · Answer

les fichiers mis en quarantaine je devrai les supprimer ?

^^Marie^^ · Answer

Relance "Ad-remover" : au menu principal choisi l'option "L" . 


http://pagesperso-orange.fr/NosTools/canned_ad_r.html

anthony3300 · Answer

------- RAPPORT D'AD-REMOVER 1.1.4.3 | UNIQUEMENT XP/VISTA -------

Mit à jour part C_XX le 24/05/2009 à 15:20
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html

Lancé à: 17:35:36, 24/05/2009 | Mode Normal
Exécuté de: C:\Program Files\Ad-remover\
Système d'exploitation: Microsoft® Windows Vista™ Home Premium Service Pack 1 v6.0.6001
Nom du PC: PC-DE-HP
Utilisateur actuel: hp - Administrator

.
============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
.
.
.

(!) -- Fichiers temporaires supprimés.

.
+-----------------| Scan additionnel:
.
.
. 

---- Internet Explorer Version 8.0.6001.18702 ----

[HKEY_CURRENT_USER\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://www.google.com
Start Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/

[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

   Tabs: res://ieframe.dll/tabswelcome.htm

=========== Suspect (Cracks, Serials ... ) ==========

.

+---------------------------------------------------------------------------+

1684 Octet(s) - C:\Ad-Report-24.05.2009.log

19 Fichier(s) - C:\Program Files\Ad-remover\BACKUP
231 Fichier(s) - C:\Program Files\Ad-remover\QUARANTINE

Fin à: 17:44:58 | 24/05/2009
.
+-----------------| E.O.F
.

anthony3300 · Answer

le rapport à l'air bon ?

^^Marie^^ · Answer

Serait mieux un RSTI

)

anthony3300 · Answer

ok se sera hijack

anthony3300 · Answer

je n'ai pas enlevé l'uac
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:40:45, on 24/05/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32	askeng.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Users\hp\Desktop\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ISUSPM Startup] c:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Default user')
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Download with ImTOO Download YouTube Video - C:\Program Files\ImTOO\Download YouTube Video\upod_link.HTM
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: Golden Riviera Poker - {85BFB6E0-96F9-4424-8819-1D67E9F78D33} - C:\Microgaming\Poker\goldenrivieraMPP\MPPoker.exe (file missing)
O9 - Extra button: CDPoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - C:\Poker\CDPoker\casino.exe (file missing)
O9 - Extra 'Tools' menuitem: CDPoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - C:\Poker\CDPoker\casino.exe (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: Pokers DNA - {e7cf1d98-4aea-4719-99c6-f6824e4ef25a} - C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokers DNA\Pokers DNA.lnk (HKCU)
O13 - Gopher Prefix: 
O17 - HKLM\System\CCS\Services\Tcpip\..\{5A55D696-39E1-422E-9A21-5F1B00ACBCA5}: NameServer = 198.162.1.1
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Roxio\Roxio MyDVD Basic v9\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32
vvsvc.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Windows\System32\TuneUpDefragService.exe
O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\Windows\System32\TUProgSt.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

anthony3300 · Answer

et je n'ai pas réglé le probleme de symentec mais bon il y a déjà eu une bonne partie

Utilisateur anonyme · Answer

C'est pas mal du tout mais il y a encore des trucs bizzars en plus de norton:

O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe 
O9 - Extra button: Golden Riviera Poker - {85BFB6E0-96F9-4424-8819-1D67E9F78D33} - C:\Microgaming\Poker\goldenrivieraMPP\MPPoker.exe (file missing) 
O9 - Extra button: CDPoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - C:\Poker\CDPoker\casino.exe (file missing) 
O9 - Extra 'Tools' menuitem: CDPoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - C:\Poker\CDPoker\casino.exe (file missing) 
Tu peux passer un RSTI s'il te plait aussi?
Merci

anthony3300 · Answer

merci a tous pour votre attention , votre aide et vos conseil

anthony3300 · Answer

je ne sais pas ce que c"est un RSTI

^^Marie^^ · Answer

> Télécharge random's system information tool (RSIT) : http://images.malwareremoval.com/random/RSIT.exe 
- Enregistre le programme sur ton bureau. 

- Double clique sur RSIT.exe 

- A l'écran "Disclaimer" choisis "1 months" dans le menu déroulant puis clique sur <continue>. 

- Si HiJackThis n'est pas détecté sur ton PC, RSIT le téléchargera ; accepte alors la licence. 

- Une fois le scanne terminé tu obtiendras un rapport log.txt. Poste le sur le forum. 

NB : Il se peut que tu obtiennes un second rapport nommé info.txt. Dans ce cas poste le aussi.

anthony3300 · Answer

je le post de suite

anthony3300 · Answer

Logfile of random's system information tool 1.06 (written by random/random)
Run by hp at 2009-05-24 19:24:20
Microsoft® Windows Vista™ Édition Familiale Premium  Service Pack 1
System drive C: has 28 GB (25%) free of 109 GB
Total RAM: 958 MB (28% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:25:23, on 24/05/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32	askeng.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\hp\Desktop\autre programme\RSIT.exe
C:\Users\hp\Desktop\hp.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ISUSPM Startup] c:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Default user')
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Download with ImTOO Download YouTube Video - C:\Program Files\ImTOO\Download YouTube Video\upod_link.HTM
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: Golden Riviera Poker - {85BFB6E0-96F9-4424-8819-1D67E9F78D33} - C:\Microgaming\Poker\goldenrivieraMPP\MPPoker.exe (file missing)
O9 - Extra button: CDPoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - C:\Poker\CDPoker\casino.exe (file missing)
O9 - Extra 'Tools' menuitem: CDPoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - C:\Poker\CDPoker\casino.exe (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: Pokers DNA - {e7cf1d98-4aea-4719-99c6-f6824e4ef25a} - C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokers DNA\Pokers DNA.lnk (HKCU)
O13 - Gopher Prefix: 
O17 - HKLM\System\CCS\Services\Tcpip\..\{5A55D696-39E1-422E-9A21-5F1B00ACBCA5}: NameServer = 198.162.1.1
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Roxio\Roxio MyDVD Basic v9\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32
vvsvc.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Windows\System32\TuneUpDefragService.exe
O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\Windows\System32\TUProgSt.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

^^Marie^^ · Answer

Télécharge UsbFix de chiquitine29 sur ton bureau 

http://sd-1.archive-host.com/membres/up/127028005715545653/UsbFix.exe 


--> Lance l installation avec les paramètres par défaut 

Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) suceptible d avoir été infectés sans les ouvrir 

--> Double clic sur le raccourci UsbFix sur ton bureau 

--> Choisis l’option 1 (nettoyage) 

--> Le PC va redémarrer 

-->Après redémarrage poste le rapport UsbFix.txt 

Note : le rapport UsbFix.txt est sauvegardé a la racine du disque 

Note : Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet "Fichier" , "Nouvelle tâche" , tapes explorer.exe et valides

anthony3300 · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:25:23, on 24/05/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32	askeng.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\hp\Desktop\autre programme\RSIT.exe
C:\Users\hp\Desktop\hp.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ISUSPM Startup] c:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Default user')
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: Download with ImTOO Download YouTube Video - C:\Program Files\ImTOO\Download YouTube Video\upod_link.HTM
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: Golden Riviera Poker - {85BFB6E0-96F9-4424-8819-1D67E9F78D33} - C:\Microgaming\Poker\goldenrivieraMPP\MPPoker.exe (file missing)
O9 - Extra button: CDPoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - C:\Poker\CDPoker\casino.exe (file missing)
O9 - Extra 'Tools' menuitem: CDPoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - C:\Poker\CDPoker\casino.exe (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: Pokers DNA - {e7cf1d98-4aea-4719-99c6-f6824e4ef25a} - C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokers DNA\Pokers DNA.lnk (HKCU)
O13 - Gopher Prefix: 
O17 - HKLM\System\CCS\Services\Tcpip\..\{5A55D696-39E1-422E-9A21-5F1B00ACBCA5}: NameServer = 198.162.1.1
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Roxio\Roxio MyDVD Basic v9\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32
vvsvc.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Windows\System32\TuneUpDefragService.exe
O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\Windows\System32\TUProgSt.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

anthony3300 · Answer

voici le rapport usbfix




############################## [ UsbFix V3.025 | Scan ]

# User : hp (Administrateurs) # PC-DE-HP
# Update on 22/05/09 by Chiquitine29, C_XX & Chimay8
# WebSite : http://pagesperso-orange.fr/NosTools/usbfix.html
# Start at: 19:37:24 | 24/05/2009

# AMD Turion(tm) 64 X2 Mobile Technology TL-50
# Microsoft® Windows Vista™ Édition Familiale Premium  (6.0.6001 32-bit) # Service Pack 1
# Internet Explorer 8.0.6001.18702
# Windows Firewall Status : Disabled

# C:\ # Disque fixe local # 106,42 Go (27,09 Go free) # NTFS
# D:\ # Disque fixe local # 5,37 Go (1,31 Go free) [HP_RECOVERY] # NTFS
# E:\ # Disque CD-ROM

############################## [ Processus actifs ]

C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32
vvsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32undll32.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32	askeng.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Windows\system32\svchost.exe
C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Windows Live\Family Safety\fsssvc.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\TUProgSt.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\DRIVERS\xaudio.exe
C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32	askeng.exe
C:\Windows\system32\conime.exe
C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32	askeng.exe
C:\Windows\system32\wbem\wmiprvse.exe

################## [  Registre Startup ]

HKCU_Main:   "Local Page"="C:\Windows\system32\blank.htm" 
HKCU_Main:   "Search Page"="https://www.google.com/?gws_rd=ssl" 
HKCU_Main:   "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome" 
HKCU_Main:   "Window Title"="" 
HKLM_logon:  "Userinit"="C:\Windows\system32\userinit.exe," 
HKLM_logon:  "LegalNoticeCaption"="" 
HKLM_logon:  "LegalNoticeText"="" 
HKLM_Run:    egui="C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice 
HKLM_Run:    HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversionun\OptionalComponents= 
HKCU_Run:    msnmsgr="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background  
HKCU_Run:    ISUSPM Startup=c:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup  

################## [ Fichiers # Dossiers infectieux ]


################## [ Registre # Clés Run infectieuses ]

Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options	askmgr.exe    

################## [ Registre # Mountpoints2 ]

HKCU\...\Explorer\MountPoints2\{505df357-1753-11dd-81a4-001e68367608}\Shell\AutoRun\Command  
HKCU\...\Explorer\MountPoints2\{968844fb-831a-11dd-bca6-001e68367608}\Shell\AutoRun\Command  
HKCU\...\Explorer\MountPoints2\{9cfb7c53-07d8-11dd-bae8-001636e87e1b}\Shell\AutoRun\Command  
HKCU\...\Explorer\MountPoints2\{f3ed0644-1901-11dd-8f06-001e68367608}\Shell\AutoRun\Command  
HKCU\...\Explorer\MountPoints2\{f3ed0644-1901-11dd-8f06-001e68367608}\Shell\explore\Command  
HKCU\...\Explorer\MountPoints2\{f3ed0644-1901-11dd-8f06-001e68367608}\Shell\open\Command  
HKCU\...\Explorer\MountPoints2\{fff63733-2f50-11dd-b89c-001e68367608}\Shell\AutoRun\Command  

################## [ Informations # Fichier Suspect ]


################## [ Cracks # Keygens # Serials ]

# -> Nothing found !  

################## [ ! Fin du rapport # UsbFix V3.025 ! ]

Utilisateur anonyme · Answer

je ne vois que 3 bricoles du message posté 117:

C:\Microgaming\Poker\goldenrivieraMPP\MPPoker.exe (file missing) 
O9 - Extra button: CDPoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - C:\Poker\CDPoker\casino.exe (file missing) 
O9 - Extra 'Tools' menuitem: CDPoker - {A68FC757-51CF-4f3c-B13A-BFB8CA69BB99} - C:\Poker\CDPoker\casino.exe (file missing) 
Toujouts les fichiers de pocker
En suite:
encore et toujours norton présent:
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing) 
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing) 
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe 

C'est nettement mieux que le debut, mais il faut que tu puisses te débarasser de norton à tout prix et virer les fichiers résiduels de pocker

anthony3300 · Answer

ceci je pourrai le supprimé moi meme ?

eHKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options	askmgr.exe

anthony3300 · Answer

oui je vais essayer

^^Marie^^ · Answer

Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d avoir été infectés sans les ouvrir 

# Double clic sur le raccourci UsbFix présent sur ton bureau 

# choisi l’option 2 ( Suppression ) 

# Ton bureau disparaitra et le pc redémarrera . 

# Au redémarrage , UsbFix scannera ton pc , laisse travailler l’outil. 

# Ensuite poste le rapport UsbFix.txt qui apparaitra avec le bureau . 

# Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque.( C:\UsbFix.txt ) 

( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )

anthony3300 · Answer

ok

anthony3300 · Answer

############################## [ UsbFix V3.025 | Cleaning ]

# User : hp (Administrateurs) # PC-DE-HP
# Update on 22/05/09 by Chiquitine29, C_XX & Chimay8
# WebSite : http://pagesperso-orange.fr/NosTools/usbfix.html
# Start at: 19:54:53 | 24/05/2009

# AMD Turion(tm) 64 X2 Mobile Technology TL-50
# Microsoft® Windows Vista™ Édition Familiale Premium  (6.0.6001 32-bit) # Service Pack 1
# Internet Explorer 8.0.6001.18702
# Windows Firewall Status : Disabled

# C:\ # Disque fixe local # 106,42 Go (27,11 Go free) # NTFS
# D:\ # Disque fixe local # 5,37 Go (1,31 Go free) [HP_RECOVERY] # NTFS
# E:\ # Disque CD-ROM

############################## [ Processus actifs ]

C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32
vvsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32undll32.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\Windows\system32unonce.exe
C:\Windows\system32\conime.exe
C:\Windows\system32	askeng.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Windows\system32\svchost.exe
C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Windows Live\Family Safety\fsssvc.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\TUProgSt.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\DRIVERS\xaudio.exe
C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\PresentationSettings.exe
C:\Windows\system32undll32.exe

################## [ Fichiers # Dossiers infectieux ]


################## [ Registre # Clés Run infectieuses ]

Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options	askmgr.exe    

################## [ Registre # Mountpoints2 ]

Deleted ! HKCU\...\Explorer\MountPoints2\{505df357-1753-11dd-81a4-001e68367608}\Shell\AutoRun\Command  
Deleted ! HKCU\...\Explorer\MountPoints2\{968844fb-831a-11dd-bca6-001e68367608}\Shell\AutoRun\Command  
Deleted ! HKCU\...\Explorer\MountPoints2\{9cfb7c53-07d8-11dd-bae8-001636e87e1b}\Shell\AutoRun\Command  
Deleted ! HKCU\...\Explorer\MountPoints2\{f3ed0644-1901-11dd-8f06-001e68367608}\Shell\AutoRun\Command  
Deleted ! HKCU\...\Explorer\MountPoints2\{fff63733-2f50-11dd-b89c-001e68367608}\Shell\AutoRun\Command  

################## [ Listing des fichiers présent ]

[24/05/2009 19:53|--a------|220] - C:\aaw7boot.log
[18/09/2006 23:43|--a------|24] - C:\autoexec.bat
[19/01/2008 09:45|-rahs----|333203] - C:\bootmgr
[18/09/2006 23:43|--a------|10] - C:\config.sys
[17/06/2008 01:05|-rahs----|0] - C:\IO.SYS
[17/06/2008 01:05|-rahs----|0] - C:\MSDOS.SYS
[?|?|?] - C:\pagefile.sys
[24/05/2009 19:58|--a------|3896] - C:\UsbFix.txt
[11/09/2005 17:18|--ahs----|340] - D:\AUTOMODE
[07/04/2008 10:53|---hs----|13] - D:\BLOCK.RIN
[04/10/2006 01:02|---hs----|438328] - D:\bootmgr
[03/11/2006 21:43|---hs----|117] - D:\Desktop.ini
[10/09/2002 18:14|---hs----|8134] - D:\Folder.htt
[19/12/2006 02:36|---hs----|698] - D:\MASTER.LOG
[28/04/2008 21:11|-ra------|528] - D:\MediaID.bin
[03/11/2005 17:19|---hs----|181736] - D:\protect.ed

################## [ Vaccination ]

# C:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.  
# D:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.  

################## [ Informations # Fichier Suspect ]


################## [ Cracks # Keygens # Serials ]

# -> Nothing found !  

################## [ ! Fin du rapport # UsbFix V3.025 ! ]

^^Marie^^ · Answer

OK

Un dernier Hijackthis pour conclure

anthony3300 · Answer

je pense que sa doit etre bon ,à part symantec  car je n'ai pas le cd pour après la desinstallation d'après se que j'ai cru comprendre

anthony3300 · Answer

je posterai un autre sujet (symantec) sur le forum dans la soiré

^^Marie^^ · Answer

Non
N'ouvre pas une discussion par ça ;((

http://www.commentcamarche.net/forum/affich 12580679 rapport d analyse hijack aide?page=2#55

Utilisateur anonyme · Answer

Voir rappel poste 134

anthony3300 · Answer

après la desinstallation il demande de mettre le cd norton mais je ne l'ai pas ,pui-je le faire quand meme

Rapport d'analyse hijack aide !!!

85 réponses

Votre réponse

Discussions similaires

Newsletters