Mal_vundog

etan -  
brigittedu62 Messages postés 41 Statut Membre -
Bonjour,
en faisant un antivirus en ligne sur trend micro , celui ci m indique qu un logiciel malveillant( virus, etc....) du nom de mal_vundog est present sur mon pc!!
le soucis est qu il est impossible de le nettoyer par le biais de trend micro ( d habitude ca marche , mais pas là!!), il se trouve dans le system32. j ai fais un scanner avast et il met impossible de scanner certaines zones aussi,,, j ai tout essayer pour chercher dans le system 32 le virus ,rien a faire,,,,
aidez moi svp ,,,,,, merci cordialement
Configuration: Windows XP Internet Explorer 8.0

9 réponses

  1. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    slt

    scan avec malwarebyte , fais un scan minutieux et colle le rapport obtenu et vire ce qui est trouvé:

    https://www.malekal.com/tutoriel-malwarebyte-anti-malware/­

    ______________________

    Télécharge ici :

    http://images.malwareremoval.com/random/RSIT.exe

    random's system information tool (RSIT) par andom/random et sauvegarde-le sur le Bureau.

    Double-clique sur RSIT.exe afin de lancer RSIT.

    Clique Continue à l'écran Disclaimer.

    Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

    Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront.

    Poste le contenu de log.txt (<<qui sera affiché)
    ainsi que de info.txt (<<qui sera réduit dans la Barre des Tâches).

    NB : Les rapports sont sauvegardés dans le dossier C:\rsit
    0
  2. etan
     
    merci pour toutes tes infos , je vais essayer mais ca me parait super complique pour moi!!!
    0
  3. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    tu devrais y arriver

    a plus
    0
  4. etan
     
    re,,
    rien a faire j y arrive pas , il n y auras pas un antivirus en ligne ou un programme moins dur a faire pour m enlever mal_vundog
    svp merci!!!!!!!
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. etan
     
    merci pour ttes infos!!!
    j ai fais autrement , je verrais bien !!!
    sur micro trend , il me dis que le virus est sur C:\WINDOWS\system32\khuaalob.ini
    donc j ai sur ma page d aceuil , j ai fais "exécueter" puis j ai tappe C:\WINDOWS\system32\huaalob.ini
    je suis tombe sur un fichier "bloc note" j ai tout supprimer et j ai refais un "micro trend et rien a part des cookies!!
    le soucis c est que j ai fais un scan avec avast et il m a trouve des virus et il ne peut pas scanner certains fichier!!
    j ai aussi tuneup utulities et quand je fais une reparation,nettoyage sur les disques , il trouve tjrs une erreur
    donc je ne c pas trop , sinon ca marche un peu pres,,,,,,,,,,,,,,
    merci de savoir que ce vous en pensez !! cdlt
    0
  7. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    il faudrait coller un rapport rsit . C'est pas compliqué . Tu lance le logiciel puis tu fais un copier coller du réputat dans ton prochain message et si tu peux colle le rapport de avast
    0
  8. brigitte62
     
    salut

    meme souci avec scan trend micro trouver ce virus mal_vundog dans C:\windows\system32\cbeeg.bak2

    j'ai fait plusieurs scans avec
    malwarebytes :rien
    avast:rien
    bitdefender : rien

    j'ai été dans regedit et j'ai supprime une cle cbeeg.bak2

    je scan a nouveau pour voir je vous tiens au courant
    merci
    0
    1. Utilisateur anonyme
       
      bonjour brigitte62 ,
      Il serait préférable que tu fasses ton message personnel, cela rendra les postes plus compréhensibles et la réponse à ton problème sera plus efficace
      Procède comme ceci :
      *Clique sur ce lien -> http://www.commentcamarche.net/forum/forum 7#ecrire

      *Puis dans l'encadré, en dessous du "bonjour",expose clairement et précisément ton problème ...
      Pour poster ta question sur le forum, tu n'as plus qu'à cliquer sur "Ajouter" ...
      Patiente et un helper finira par te prendre en charge ;)


      @+
      0
      1. brigittedu62 Messages postés 41 Statut Membre > Utilisateur anonyme
         
        bonjour,
        je n'arrive pas a acceder au lien que tu m'as mis
        0
      2. brigittedu62 Messages postés 41 Statut Membre > Utilisateur anonyme
         
        merci
        ,je viens d'utiliser combofix pour voir ,je te mets le rapport
        ComboFix 09-07-25.04 - brigitte 26/07/2009 11:08.1.1 - FAT32x86
        Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.1471.963 [GMT 2:00]
        Running from: c:\documents and settings\brigitte\Mes documents\Téléchargements\ComboFix.exe
        AV: avast! antivirus 4.8.1335 [VPS 090725-0] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}

        WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
        .

        ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
        .

        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\accessories\cup.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\accessories\customer_cup.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\accessories\heart.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\accessories\menu_down.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\accessories\menu_up.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\accessories\plates.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\accessories\ticket.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\accessories\tray.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\music\mainmenumusic.ogg
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_bring_check_1_snd.ogg
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_deliver_food_1_snd.ogg
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_deliver_order_1_snd.ogg
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_diner.ogg
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_dish_dropoff_1_snd.ogg
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_food_ready_1_snd.ogg
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_gain_heart_1.ogg
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_get_drinks_1_snd.ogg
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_party_arrive_1_snd.ogg
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_pencil_write_2.ogg
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_pickup_food_1_snd.ogg
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_rollover_1.ogg
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_seat_people_snd.ogg
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\choosedifficulty.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\credits.jpg
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\flo_lose.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\flo_win.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\help1.jpg
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\help2.jpg
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\highscores.jpg
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\levelintro.jpg
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\levelintro_mask.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\levelover.jpg
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\levelover_mask.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\mainmenu.jpg
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\popup.jpg
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\popup_mask.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\upgradegrid.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\upgradetitle.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\upsell.jpg
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\arrowleft_blue.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\arrowleft_yellow.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\arrowright_blue.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\arrowright_yellow.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\back_blue.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\back_yellow.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\backchalk.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\backchalkup.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\backtomenu_blue.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\backtomenu_yellow.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\cancel.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\cancelup.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\career.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\career_over.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\close.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\closeup.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\continue.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\continueover.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\credits_blue.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\credits_yellow.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\download_blue.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\download_yellow.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\easy.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\easy_over.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\endlessshift.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\endlessshift_over.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\hard.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\hard_over.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\help.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\help_over.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\highscores.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\highscores_over.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\instructions_blue.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\instructions_yellow.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\letsplay.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\letsplayover.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\medium.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\medium_over.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\moreinfo.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\moreinfoup.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\off.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\off_on.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\on.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\on_on.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\pause.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\pauseover.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\quit.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\quitgame.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\quitgameover.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\quitover.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\resumegame.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\resumegameover.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\submit.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\submitup.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\tryagain.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\tryagainover.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\upgrade_over.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\upgrade_up.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\viewglobal.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\viewglobalup.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\viewhighscore.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\viewhighscoreon.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\viewlocal.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\viewlocalup.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\comics\webcomic.jpg
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\config\career.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\config\customer.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\config\endless.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\config\global.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\config\powerups.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\cook\cook.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\cook\cook.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\cook\stove.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\cursor\arrow.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\cursor\click.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\cursor\click2.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\cursor\grab.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\cursor\open.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\anim.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\blue\anim.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\blue\anim.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\blue\sit_legs.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\green\anim.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\green\anim.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\green\sit_legs.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\purple\anim.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\purple\anim.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\purple\sit_legs.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\red\anim.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\red\anim.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\red\sit_legs.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\yellow\anim.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\yellow\anim.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\yellow\sit_legs.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\anim.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\blue\anim.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\blue\anim.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\blue\sit_legs.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\green\anim.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\green\anim.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\green\sit_legs.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\purple\anim.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\purple\anim.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\purple\sit_legs.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\red\anim.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\red\anim.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\red\sit_legs.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\yellow\anim.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\yellow\anim.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\yellow\sit_legs.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\flo\idle.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\flo\idle.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\flo\lower.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\flo\lower.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\flo\upper.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\flo\upper.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\fonts\arial.mvec
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\fonts\komikaaxis.mvec
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\chair.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\chair.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\dirt2top.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\dirt4top.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\dishcart.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\dishcart.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\drinkstation_off.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\drinkstation_on1.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\drinkstation_on2.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\ticketstation.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\ticketstation.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\arrowdown.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\arrowdownon.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\arrowleft.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\arrowlefton.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\arrowright.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\arrowrighton.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\arrowup.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\arrowupon.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\p1icon.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\textedit.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\title.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_1.txt
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_1_a.txt
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_1_b.txt
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_1_c.txt
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_2.txt
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_2_a.txt
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_2_b.txt
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_2_c.txt
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_2_d.txt
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_3.txt
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_3_a.txt
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_3_b.txt
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_3_c.txt
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_3_d.txt
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\fifth_level_diner.txt
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\first_level_diner.txt
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\fourth_level_diner.txt
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\second_level_diner.txt
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\playfirst_logo.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\background.jpg
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\food\food1.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\food\food1.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\food\food2.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\food\food2.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\food\food3.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\food\food3.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\frames\upgrade_0001.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\tables\2top.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\tables\2top.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\tables\4top.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\tables\4top.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\upgrades.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\tableshadow.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\choosedifficulty.lua
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\chooseplayer.lua
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\chooserestaurant.lua
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\credits.lua
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\game.lua
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\gothighscore.lua
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\help.lua
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\help2.lua
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\hiscore.lua
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\hiscoreinfo.lua
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\hiscoresubmit.lua
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\levelintro.lua
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\levelover.lua
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\loading.lua
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\mainloop.lua
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\mainmenu.lua
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\ok.lua
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\pause.lua
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\style.lua
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\tutorialintro.lua
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\upgrade.lua
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\upsell.lua
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\webcomic.lua
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\yesno.lua
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\splash\aol_logo.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\splash\gamelabsplash.jpg
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\splash\playfirst_logo.jpg
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\strings.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\angersmoke.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\angersmoke.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\chairflags.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\chairflags.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\check.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\checkmark.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\clock.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\closed.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\closingtime.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\coinflip.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\coinflip.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\dollar.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\doodles\coffee.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\doodles\tables.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\doodles\wallpaper.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\expert.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\expertscore.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\foodpoof.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\foodpoof.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\fork_timer.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\goalcompleted.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\heartgrow.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\heartgrow.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\jar.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\jar.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\level.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\level_career.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\score.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\sound.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\staroff.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\staron.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\tablenumber.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\tablenumberup.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\traynumber.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\tutorial_character.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\tutorialarrow.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\tutorialbox.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgradeanim.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgradeanim.xml
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgrades\drinks.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgrades\maitred.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgrades\oven.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgrades\select.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgrades\shoes.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgrades\stereo.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgrades\table.png
        c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\dinerdash.exe
        c:\windows\Installer\103379f.msp
        c:\windows\Installer\10337b2.msp
        c:\windows\Installer\10337c5.msp
        c:\windows\Installer\10337df.msp
        c:\windows\Installer\10337e0.msp
        c:\windows\Installer\10337e1.msp
        c:\windows\Installer\10337f5.msp
        c:\windows\Installer\1033808.msp
        c:\windows\Installer\103381b.msp
        c:\windows\Installer\103383f.msp
        c:\windows\Installer\1033840.msp
        c:\windows\Installer\1033853.msp
        c:\windows\Installer\149142.msi
        c:\windows\Installer\1b9ae29.msp
        c:\windows\Installer\1c8e664.msp
        c:\windows\Installer\1c8e665.msp
        c:\windows\Installer\1c8e677.msp
        c:\windows\Installer\2339b3.msp
        c:\windows\Installer\2fe432.msp
        c:\windows\Installer\32f97f.msi
        c:\windows\Installer\4c919.msp
        c:\windows\Installer\508af5.msp
        c:\windows\Installer\508c4d.msp
        c:\windows\Installer\66559.msp
        c:\windows\Installer\7520b.msp
        c:\windows\Installer\7520c.msp
        c:\windows\Installer\945591.msp
        c:\windows\Installer\945592.msp
        c:\windows\Installer\945593.msp
        c:\windows\Installer\945594.msp
        c:\windows\Installer\945595.msp
        c:\windows\Installer\9455aa.msp
        c:\windows\Installer\9455ab.msp
        c:\windows\Installer\9455ac.msp
        c:\windows\Installer\9455ad.msp
        c:\windows\Installer\9455ae.msp
        c:\windows\Installer\9455af.msp
        c:\windows\Installer\9455b0.msp
        c:\windows\Installer\d570f.msp
        c:\windows\Installer\d5710.msp
        c:\windows\Installer\d5723.msp
        c:\windows\Installer\e6c23.msi
        c:\windows\pack.epk
        c:\windows\patch.exe
        c:\windows\system32\autorun.ini
        c:\windows\system32\cbeeg.bak2

        Infected copy of c:\windows\system32\sfcfiles.dll was found and disinfected
        Restored copy from - c:\windows\system32\dllcache\sfcfiles.dll

        .
        ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
        .

        -------\Legacy_BOONTY_GAMES
        -------\Service_Boonty Games


        ((((((((((((((((((((((((( Files Created from 2009-06-26 to 2009-07-26 )))))))))))))))))))))))))))))))
        .

        2009-07-26 08:01 . 2009-07-26 08:01 183356 ----a-w- c:\documents and settings\brigitte\Application Data\HouseCall 6.6\Uninstaller.exe
        2009-07-26 06:33 . 2009-07-26 06:33 -------- d-----w- c:\documents and settings\brigitte\Application Data\HouseCall 6.6
        2009-07-24 10:12 . 2009-07-24 10:12 -------- d-----w- c:\program files\Imikimi
        2009-07-19 08:08 . 2009-07-19 08:08 -------- d-----w- c:\documents and settings\All Users\Application Data\AOL
        2009-07-18 16:16 . 2009-07-18 16:16 -------- d-----w- c:\documents and settings\brigitte\Local Settings\Application Data\TomTom
        2009-07-14 07:26 . 2009-07-14 07:26 -------- d-----w- c:\documents and settings\brigitte\Application Data\vlc

        .
        (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
        .
        2009-07-16 10:53 . 2008-09-21 06:34 3775176 ----a-w- c:\documents and settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe
        2009-07-13 11:36 . 2008-09-21 06:33 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
        2009-07-13 11:36 . 2008-09-21 06:33 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
        2009-06-21 05:49 . 2009-06-21 05:48 -------- d-----w- c:\documents and settings\brigitte\Application Data\LG Electronics
        2009-06-16 14:40 . 2005-10-17 17:13 119808 ----a-w- c:\windows\system32\t2embed.dll
        2009-06-16 14:40 . 2005-10-17 17:13 81920 ----a-w- c:\windows\system32\fontsub.dll
        2009-06-15 04:15 . 2009-01-24 05:02 116944 ----a-w- c:\windows\system32\GDIPFONTCACHEV1.DAT
        2009-06-13 04:17 . 2009-06-13 04:17 -------- d-----w- c:\program files\Microsoft.NET
        2009-06-13 04:13 . 2009-06-13 04:13 -------- d-----w- c:\program files\Microsoft Visual Studio 8
        2009-06-07 07:36 . 2009-05-24 14:47 603904 ----a-w- c:\windows\system32\TUProgSt.exe
        2009-06-07 07:36 . 2009-05-16 09:16 360192 ----a-w- c:\windows\system32\TuneUpDefragService.exe
        2009-06-07 07:27 . 2009-06-07 07:27 604416 ----a-w- c:\windows\system32\TUProgSt(2).exe
        2009-06-03 19:10 . 2005-10-17 17:13 1297408 ----a-w- c:\windows\system32\quartz.dll
        2009-06-03 15:41 . 2005-10-17 17:13 87300 ----a-w- c:\windows\system32\perfc00C.dat
        2009-06-03 15:41 . 2005-10-17 17:13 517764 ----a-w- c:\windows\system32\perfh00C.dat
        2009-05-29 16:44 . 2009-05-29 16:44 -------- d-----w- c:\program files\TuneUp Utilities 2009
        2009-05-14 13:20 . 2009-05-14 15:38 2645832 ----a-w- c:\documents and settings\brigitte\Application Data\Mozilla\Firefox\Profiles\0jirmrj6.default\extensions\{bb628310-0ab7-11db-9cd8-0800200c9a66}\maconfsetup.exe
        2009-05-14 12:56 . 2009-05-14 15:38 402800 ----a-w- c:\documents and settings\brigitte\Application Data\Mozilla\Firefox\Profiles\0jirmrj6.default\extensions\{bb628310-0ab7-11db-9cd8-0800200c9a66}\plugins\nphardwaredetection.dll
        2009-05-13 05:04 . 2005-10-17 17:13 915456 ----a-w- c:\windows\system32\wininet.dll
        2009-05-07 15:33 . 2005-10-17 17:13 348672 ----a-w- c:\windows\system32\localspl.dll
        2007-06-15 17:03 . 2007-04-20 18:12 278528 ----a-w- c:\program files\Fichiers communs\FDEUnInstaller.exe
        2006-07-26 07:19 . 2006-07-26 07:21 774144 ----a-w- c:\program files\RngInterstitial.dll
        2009-07-17 07:45 . 2008-06-19 15:43 137208 ----a-w- c:\program files\mozilla firefox\components\brwsrcmp.dll
        2007-08-29 07:16 . 2007-08-29 07:16 5 --sha-w- c:\windows\system32\ebceabd_g.dll
        .

        ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
        .
        .
        *Note* empty entries & legit default entries are not shown
        REGEDIT4

        [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
        "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
        "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-02-06 3885408]
        "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-08-18 68856]
        "H/PC Connection Agent"="c:\program files\Microsoft ActiveSync\WCESCOMM.EXE" [2005-01-19 405583]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
        "PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 455168]
        "avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-02-05 81000]
        "LVCOMSX"="c:\windows\system32\LVCOMSX.EXE" [2005-07-19 221184]
        "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-09 148888]
        "AGRSMMSG"="AGRSMMSG.exe" - c:\windows\AGRSMMSG.exe [2004-04-13 88363]
        "VTTimer"="VTTimer.exe" - c:\windows\system32\VTTimer.exe [2005-05-13 53248]
        "SoundMan"="SOUNDMAN.EXE" - c:\windows\soundman.exe [2005-07-22 81920]

        [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
        "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

        c:\documents and settings\brigitte\Menu D‚marrer\Programmes\D‚marrage\
        MSN Pictures Displayer.lnk - c:\program files\MSN Pictures Displayer\MSN Pictures Displayer.exe [2008-8-17 4713472]
        Yahoo! Widgets.lnk - c:\program files\Yahoo!\Widgets\YahooWidgets.exe [2007-12-11 3746856]

        [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
        Source= c:\documents and settings\brigitte\Mes documents\Mes images\brigitte\Mo.jpg
        FriendlyName=

        [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\1]
        Source= c:\documents and settings\brigitte\Mes documents\Mes images\brigitte\mc.jpg
        FriendlyName=

        [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\2]
        Source= c:\documents and settings\brigitte\Mes documents\Mes images\brigitte\morgane.jpg
        FriendlyName=

        [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn]
        2008-05-02 00:42 72208 ----a-w- c:\program files\Fichiers communs\Logishrd\Bluetooth\LBTWLgn.dll

        [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
        @=""

        [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Logitech Desktop Messenger.lnk]
        path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Logitech Desktop Messenger.lnk
        backup=c:\windows\pss\Logitech Desktop Messenger.lnkCommon Startup

        [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Logitech SetPoint.lnk]
        path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Logitech SetPoint.lnk
        backup=c:\windows\pss\Logitech SetPoint.lnkCommon Startup

        [HKLM\~\startupfolder\C:^Documents and Settings^brigitte^Menu Démarrer^Programmes^Démarrage^BoontyBox 01net.lnk]
        path=c:\documents and settings\brigitte\Menu Démarrer\Programmes\Démarrage\BoontyBox 01net.lnk
        backup=c:\windows\pss\BoontyBox 01net.lnkStartup
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AOL Fast Start
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AOLDialer
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HostManager
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InCD
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IPHSend
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroNETTrayIcon
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Picasa Media Detector
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Symantec NetDriver Monitor
        HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UVS10 Preload

        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
        "Boonty Games"=3 (0x3)

        [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
        "ctfmon.exe"=c:\windows\system32\ctfmon.exe
        "H/PC Connection Agent"="c:\program files\Microsoft ActiveSync\WCESCOMM.EXE"

        [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
        "MediaSync"=c:\program files\Acer\Acer eConsole\MediaSync.exe
        "MSPY2002"=c:\windows\system32\IME\PINTLGNT\ImScInst.exe /SYNC
        "VTTrayp"=VTtrayp.exe
        "QuickTime Task"="c:\program files\QuickTime\qttask.exe" -atboottime
        "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

        [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
        "EnableFirewall"= 0 (0x0)

        [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
        "%windir%\\system32\\sessmgr.exe"=
        "c:\\Program Files\\eMule\\emule.exe"=
        "c:\\WINDOWS\\System32\\FXSCLNT.exe"=
        "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
        "c:\\Program Files\\Fichiers communs\\AOL\\ACS\\AOLAcsd.exe"=
        "c:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe"=
        "c:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe"=
        "c:\\Program Files\\Real\\RealPlayer\\RealPlay.exe"=
        "c:\\Program Files\\Fichiers communs\\NewTech Infosystems\\LiveUpdate\\LiveUpdate.exe"=
        "c:\\WINDOWS\\System32\\dpvsetup.exe"=
        "c:\\Program Files\\Messenger\\msmsgs.exe"=
        "c:\\WINDOWS\\System32\\LEXPPS.EXE"=
        "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
        "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
        "c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
        "c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=

        R0 ViBus;ViBus;c:\windows\system32\drivers\ViBus.sys [11/09/2008 15:44 16896]
        R0 ViPrt;VIA SATA IDE Device Driver;c:\windows\system32\drivers\ViPrt.sys [11/09/2008 15:44 52224]
        R0 xfilt;VIA SATA IDE Hot-plug Driver;c:\windows\system32\drivers\xfilt.sys [10/09/2008 10:59 17920]
        R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [11/09/2008 16:44 114768]
        R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [11/09/2008 16:44 20560]
        R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\system32\TUProgSt.exe [24/05/2009 16:47 603904]
        S3 k600bus;Sony Ericsson 600i driver (WDM);c:\windows\system32\drivers\k600bus.sys [11/05/2005 13:12 52384]
        S3 k600mdfl;Sony Ericsson 600i USB WMC Modem Filter;c:\windows\system32\drivers\k600mdfl.sys [11/05/2005 13:12 6096]
        S3 k600mdm;Sony Ericsson 600i USB WMC Modem Drivers;c:\windows\system32\drivers\k600mdm.sys [11/05/2005 13:12 87456]
        S3 k600mgmt;Sony Ericsson 600i USB WMC Device Management Drivers;c:\windows\system32\drivers\k600mgmt.sys [11/05/2005 13:12 79248]
        S3 k600obex;Sony Ericsson 600i USB WMC OBEX Interface Drivers;c:\windows\system32\drivers\k600obex.sys [11/05/2005 13:12 77072]
        S3 MEMSWEEP2;MEMSWEEP2;\??\c:\windows\system32\316.tmp --> c:\windows\system32\316.tmp [?]
        S3 viafilter;VIA USB Filter;c:\windows\system32\drivers\viausb1.sys [11/09/2008 15:44 9728]

        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
        UxTuneUp

        [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
        "c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
        .
        Contents of the 'Scheduled Tasks' folder

        2009-07-26 c:\windows\Tasks\Symantec NetDetect.job
        - c:\program files\Symantec\LiveUpdate\NDETECT.EXE [2005-10-17 09:22]

        2009-07-06 c:\windows\Tasks\AppleSoftwareUpdate.job
        - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]

        2009-07-26 c:\windows\Tasks\User_Feed_Synchronization-{F354A875-81EC-49FC-9ED0-EAEE01E46853}.job
        - c:\windows\system32\msfeedssync.exe [2006-10-17 02:31]

        2009-07-26 c:\windows\Tasks\Maintenance en 1 clic.job
        - c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2008-12-12 13:04]
        .
        .
        ------- Supplementary Scan -------
        .
        uSearchMigratedDefaultURL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
        uInternet Connection Wizard,ShellNext = iexplore
        uInternet Settings,ProxyOverride = localhost
        uSearchURL,(Default) = hxxp://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
        IE: E&xporter vers Microsoft Excel
        DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://www.bitdefender.fr/scan8/oscan8.cab
        DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} - hxxp://eu-housecall.trendmicro-europe.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
        DPF: {981D847D-2C06-4FB7-A09C-4F0A48601B2C} - hxxp://techcity.aol.fr/download/img/DiagSetup.cab
        FF - ProfilePath - c:\documents and settings\brigitte\Application Data\Mozilla\Firefox\Profiles\0jirmrj6.default\
        FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
        FF - prefs.js: browser.search.selectedEngine - Yahoo
        FF - prefs.js: browser.startup.homepage - hxxp://my.numericable.fr/
        FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?ei=UTF-8&fr=vmn&type=vendio&p=
        FF - plugin: c:\documents and settings\All Users\Application Data\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll
        FF - plugin: c:\documents and settings\brigitte\Application Data\Mozilla\Firefox\Profiles\0jirmrj6.default\extensions\{bb628310-0ab7-11db-9cd8-0800200c9a66}\plugins\nphardwaredetection.dll
        FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
        FF - plugin: c:\program files\Mozilla Firefox\plugins\npkimi.dll
        FF - plugin: c:\program files\Mozilla Firefox\plugins\npqtplugin8.dll
        FF - plugin: c:\program files\Mozilla Firefox\plugins\npyaxmpb.dll
        FF - plugin: c:\program files\Mozilla Firefox\plugins\npzylomgamesplayer.dll
        FF - plugin: c:\program files\QuickTime\Plugins\npqtplugin8.dll
        FF - plugin: c:\program files\Real\RealArcade\Plugins\Mozilla\npracplug.dll
        FF - plugin: c:\program files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll
        FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
        FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

        ---- FIREFOX POLICIES ----
        FF - user.js: network.http.max-persistent-connections-per-server - 4
        FF - user.js: content.max.tokenizing.time - 1800000
        FF - user.js: content.notify.interval - 600000
        FF - user.js: content.switch.threshold - 600000
        FF - user.js: nglayout.initialpaint.delay - 600
        c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.enforce_same_site_origin", false);
        c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.cache_size", 51200);
        c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.ogg.enabled", true);
        c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.wave.enabled", true);
        c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.autoplay.enabled", true);
        c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true);
        c:\program files\Mozilla Firefox\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess");
        c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.storage.default_quota", 5120);
        c:\program files\Mozilla Firefox\greprefs\all.js - pref("content.sink.event_probe_rate", 3);
        c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.http.prompt-temp-redirect", true);
        c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.dpi", -1);
        c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.devPixelsPerPx", -1);
        c:\program files\Mozilla Firefox\greprefs\all.js - pref("gestures.enable_single_finger_input", true);
        c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.max_chrome_script_run_time", 0);
        c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.tcp.sendbuffer", 131072);
        c:\program files\Mozilla Firefox\greprefs\all.js - pref("geo.enabled", true);
        c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true);
        c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35");
        c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35");
        c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2);
        c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~");
        c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0);
        c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history", true);
        c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata", true);
        c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords", false);
        c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads", true);
        c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies", true);
        c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache", true);
        c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions", true);
        c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false);
        c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false);
        c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.history", true);
        c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.formdata", true);
        c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.passwords", false);
        c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.downloads", true);
        c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cookies", true);
        c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cache", true);
        c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.sessions", true);
        c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps", false);
        c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings", false);
        c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs", false);
        c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2);
        c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror");
        c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false);
        c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false);
        c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json");
        .

        **************************************************************************

        catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
        Rootkit scan 2009-07-26 11:14
        Windows 5.1.2600 Service Pack 3 FAT NTAPI

        scanning hidden processes ...

        scanning hidden autostart entries ...

        scanning hidden files ...

        scan completed successfully
        hidden files: 0

        **************************************************************************

        [HKEY_LOCAL_MACHINE\System\ControlSet002\Services\MEMSWEEP2]
        "ImagePath"="\??\c:\windows\system32\316.tmp"
        .
        --------------------- LOCKED REGISTRY KEYS ---------------------

        [HKEY_USERS\S-1-5-21-1570106061-833509052-641237796-1006\Software\Microsoft\SystemCertificates\AddressBook*]
        @Allowed: (Read) (RestrictedCode)
        @Allowed: (Read) (RestrictedCode)

        [HKEY_USERS\S-1-5-21-1570106061-833509052-641237796-1006\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
        "??"=hex:19,ad,66,20,94,3a,08,57,80,b9,db,18,ff,de,ce,44,eb,57,be,01,93,62,0f,
        f1,fe,b1,01,a1,6b,de,2e,23,13,cd,c0,6a,0f,71,e4,10,f3,5c,eb,5a,ff,62,11,1c,\
        "??"=hex:67,a4,9f,86,7b,12,9b,06,df,77,f5,9e,68,28,3f,e4

        [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø•€|ÿÿÿÿ•€|ù•9~*]
        "C040211900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"

        [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\h–€|ÿÿÿÿ¤•€|ù•9~*]
        "C040211900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
        .
        --------------------- DLLs Loaded Under Running Processes ---------------------

        - - - - - - - > 'winlogon.exe'(848)
        c:\program files\fichiers communs\logishrd\bluetooth\LBTWlgn.dll
        c:\program files\fichiers communs\logishrd\bluetooth\LBTServ.dll

        - - - - - - - > 'explorer.exe'(3428)
        c:\windows\system32\eappprxy.dll
        c:\windows\system32\webcheck.dll
        c:\windows\system32\WPDShServiceObj.dll
        c:\windows\system32\PortableDeviceTypes.dll
        c:\windows\system32\PortableDeviceApi.dll
        .
        ------------------------ Other Running Processes ------------------------
        .
        c:\program files\ALWIL SOFTWARE\AVAST4\ASWUPDSV.EXE
        c:\program files\ALWIL SOFTWARE\AVAST4\ASHSERV.EXE
        c:\windows\SYSTEM32\LEXBCES.EXE
        c:\windows\SYSTEM32\LEXPPS.EXE
        c:\program files\ACER\ACER ECONSOLE\MEDIASERVERSERVICE.EXE
        c:\program files\FICHIERS COMMUNS\AOL\ACS\AOLACSD.EXE
        c:\program files\JAVA\JRE6\BIN\JQS.EXE
        c:\program files\FICHIERS COMMUNS\MICROSOFT SHARED\VS7DEBUG\MDM.EXE
        c:\program files\ALWIL SOFTWARE\AVAST4\ASHDISP.EXE
        c:\program files\CDBurnerXP\NMSAccessU.exe
        c:\program files\CyberLink\Shared Files\RichVideo.exe
        c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
        c:\windows\wanmpsvc.exe
        c:\program files\Messenger\msmsgs.exe
        c:\program files\Alwil Software\Avast4\ashMaiSv.exe
        c:\program files\Alwil Software\Avast4\ashWebSv.exe
        c:\program files\Windows Live\Contacts\wlcomm.exe
        c:\windows\system32\wscntfy.exe
        .
        **************************************************************************
        .
        Completion time: 2009-07-26 11:16 - machine was rebooted
        ComboFix-quarantined-files.txt 2009-07-26 09:16

        Pre-Run: 57 551 716 352 octets libres
        Post-Run: 57 497 124 864 octets libres

        645 --- E O F --- 2009-07-22 05:41
        0
  9. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    si tu colle pas rsit cela sera plus long ....

    puis

    télécharge combofix (par sUBs) ici :

    http://download.bleepingcomputer.com/sUBs/ComboFix.exe

    et enregistre le sur le bureau.

    déconnecte toi d'internet et ferme toutes tes applications.

    désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware)

    double-clique sur combofix.exe et suis les instructions

    à la fin, il va produire un rapport C:\ComboFix.txt

    réactive ton parefeu, ton antivirus, la garde de ton antispyware

    copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse.

    Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.

    Tu as un tutoriel complet ici :

    https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix
    0
    1. brigittedu62 Messages postés 41 Statut Membre
       
      bonjour
      je te mets le rapport de cobifix/
      ComboFix 09-07-25.04 - brigitte 26/07/2009 11:08.1.1 - FAT32x86
      Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.1471.963 [GMT 2:00]
      Running from: c:\documents and settings\brigitte\Mes documents\Téléchargements\ComboFix.exe
      AV: avast! antivirus 4.8.1335 [VPS 090725-0] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}

      WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
      .

      ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
      .

      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\accessories\cup.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\accessories\customer_cup.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\accessories\heart.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\accessories\menu_down.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\accessories\menu_up.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\accessories\plates.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\accessories\ticket.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\accessories\tray.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\music\mainmenumusic.ogg
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_bring_check_1_snd.ogg
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_deliver_food_1_snd.ogg
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_deliver_order_1_snd.ogg
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_diner.ogg
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_dish_dropoff_1_snd.ogg
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_food_ready_1_snd.ogg
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_gain_heart_1.ogg
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_get_drinks_1_snd.ogg
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_party_arrive_1_snd.ogg
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_pencil_write_2.ogg
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_pickup_food_1_snd.ogg
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_rollover_1.ogg
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_seat_people_snd.ogg
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\choosedifficulty.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\credits.jpg
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\flo_lose.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\flo_win.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\help1.jpg
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\help2.jpg
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\highscores.jpg
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\levelintro.jpg
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\levelintro_mask.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\levelover.jpg
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\levelover_mask.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\mainmenu.jpg
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\popup.jpg
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\popup_mask.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\upgradegrid.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\upgradetitle.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\upsell.jpg
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\arrowleft_blue.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\arrowleft_yellow.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\arrowright_blue.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\arrowright_yellow.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\back_blue.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\back_yellow.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\backchalk.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\backchalkup.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\backtomenu_blue.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\backtomenu_yellow.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\cancel.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\cancelup.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\career.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\career_over.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\close.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\closeup.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\continue.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\continueover.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\credits_blue.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\credits_yellow.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\download_blue.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\download_yellow.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\easy.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\easy_over.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\endlessshift.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\endlessshift_over.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\hard.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\hard_over.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\help.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\help_over.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\highscores.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\highscores_over.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\instructions_blue.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\instructions_yellow.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\letsplay.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\letsplayover.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\medium.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\medium_over.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\moreinfo.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\moreinfoup.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\off.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\off_on.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\on.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\on_on.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\pause.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\pauseover.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\quit.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\quitgame.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\quitgameover.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\quitover.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\resumegame.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\resumegameover.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\submit.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\submitup.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\tryagain.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\tryagainover.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\upgrade_over.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\upgrade_up.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\viewglobal.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\viewglobalup.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\viewhighscore.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\viewhighscoreon.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\viewlocal.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\viewlocalup.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\comics\webcomic.jpg
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\config\career.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\config\customer.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\config\endless.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\config\global.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\config\powerups.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\cook\cook.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\cook\cook.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\cook\stove.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\cursor\arrow.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\cursor\click.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\cursor\click2.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\cursor\grab.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\cursor\open.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\anim.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\blue\anim.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\blue\anim.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\blue\sit_legs.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\green\anim.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\green\anim.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\green\sit_legs.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\purple\anim.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\purple\anim.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\purple\sit_legs.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\red\anim.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\red\anim.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\red\sit_legs.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\yellow\anim.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\yellow\anim.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\yellow\sit_legs.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\anim.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\blue\anim.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\blue\anim.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\blue\sit_legs.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\green\anim.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\green\anim.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\green\sit_legs.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\purple\anim.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\purple\anim.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\purple\sit_legs.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\red\anim.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\red\anim.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\red\sit_legs.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\yellow\anim.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\yellow\anim.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\yellow\sit_legs.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\flo\idle.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\flo\idle.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\flo\lower.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\flo\lower.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\flo\upper.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\flo\upper.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\fonts\arial.mvec
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\fonts\komikaaxis.mvec
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\chair.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\chair.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\dirt2top.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\dirt4top.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\dishcart.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\dishcart.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\drinkstation_off.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\drinkstation_on1.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\drinkstation_on2.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\ticketstation.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\ticketstation.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\arrowdown.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\arrowdownon.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\arrowleft.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\arrowlefton.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\arrowright.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\arrowrighton.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\arrowup.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\arrowupon.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\p1icon.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\textedit.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\title.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_1.txt
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_1_a.txt
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_1_b.txt
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_1_c.txt
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_2.txt
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_2_a.txt
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_2_b.txt
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_2_c.txt
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_2_d.txt
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_3.txt
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_3_a.txt
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_3_b.txt
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_3_c.txt
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_3_d.txt
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\fifth_level_diner.txt
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\first_level_diner.txt
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\fourth_level_diner.txt
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\second_level_diner.txt
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\playfirst_logo.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\background.jpg
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\food\food1.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\food\food1.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\food\food2.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\food\food2.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\food\food3.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\food\food3.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\frames\upgrade_0001.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\tables\2top.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\tables\2top.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\tables\4top.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\tables\4top.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\upgrades.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\tableshadow.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\choosedifficulty.lua
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\chooseplayer.lua
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\chooserestaurant.lua
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\credits.lua
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\game.lua
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\gothighscore.lua
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\help.lua
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\help2.lua
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\hiscore.lua
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\hiscoreinfo.lua
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\hiscoresubmit.lua
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\levelintro.lua
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\levelover.lua
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\loading.lua
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\mainloop.lua
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\mainmenu.lua
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\ok.lua
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\pause.lua
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\style.lua
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\tutorialintro.lua
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\upgrade.lua
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\upsell.lua
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\webcomic.lua
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\yesno.lua
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\splash\aol_logo.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\splash\gamelabsplash.jpg
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\splash\playfirst_logo.jpg
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\strings.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\angersmoke.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\angersmoke.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\chairflags.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\chairflags.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\check.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\checkmark.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\clock.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\closed.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\closingtime.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\coinflip.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\coinflip.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\dollar.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\doodles\coffee.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\doodles\tables.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\doodles\wallpaper.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\expert.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\expertscore.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\foodpoof.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\foodpoof.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\fork_timer.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\goalcompleted.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\heartgrow.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\heartgrow.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\jar.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\jar.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\level.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\level_career.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\score.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\sound.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\staroff.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\staron.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\tablenumber.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\tablenumberup.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\traynumber.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\tutorial_character.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\tutorialarrow.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\tutorialbox.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgradeanim.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgradeanim.xml
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgrades\drinks.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgrades\maitred.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgrades\oven.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgrades\select.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgrades\shoes.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgrades\stereo.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgrades\table.png
      c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\dinerdash.exe
      c:\windows\Installer\103379f.msp
      c:\windows\Installer\10337b2.msp
      c:\windows\Installer\10337c5.msp
      c:\windows\Installer\10337df.msp
      c:\windows\Installer\10337e0.msp
      c:\windows\Installer\10337e1.msp
      c:\windows\Installer\10337f5.msp
      c:\windows\Installer\1033808.msp
      c:\windows\Installer\103381b.msp
      c:\windows\Installer\103383f.msp
      c:\windows\Installer\1033840.msp
      c:\windows\Installer\1033853.msp
      c:\windows\Installer\149142.msi
      c:\windows\Installer\1b9ae29.msp
      c:\windows\Installer\1c8e664.msp
      c:\windows\Installer\1c8e665.msp
      c:\windows\Installer\1c8e677.msp
      c:\windows\Installer\2339b3.msp
      c:\windows\Installer\2fe432.msp
      c:\windows\Installer\32f97f.msi
      c:\windows\Installer\4c919.msp
      c:\windows\Installer\508af5.msp
      c:\windows\Installer\508c4d.msp
      c:\windows\Installer\66559.msp
      c:\windows\Installer\7520b.msp
      c:\windows\Installer\7520c.msp
      c:\windows\Installer\945591.msp
      c:\windows\Installer\945592.msp
      c:\windows\Installer\945593.msp
      c:\windows\Installer\945594.msp
      c:\windows\Installer\945595.msp
      c:\windows\Installer\9455aa.msp
      c:\windows\Installer\9455ab.msp
      c:\windows\Installer\9455ac.msp
      c:\windows\Installer\9455ad.msp
      c:\windows\Installer\9455ae.msp
      c:\windows\Installer\9455af.msp
      c:\windows\Installer\9455b0.msp
      c:\windows\Installer\d570f.msp
      c:\windows\Installer\d5710.msp
      c:\windows\Installer\d5723.msp
      c:\windows\Installer\e6c23.msi
      c:\windows\pack.epk
      c:\windows\patch.exe
      c:\windows\system32\autorun.ini
      c:\windows\system32\cbeeg.bak2

      Infected copy of c:\windows\system32\sfcfiles.dll was found and disinfected
      Restored copy from - c:\windows\system32\dllcache\sfcfiles.dll

      .
      ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
      .

      -------\Legacy_BOONTY_GAMES
      -------\Service_Boonty Games


      ((((((((((((((((((((((((( Files Created from 2009-06-26 to 2009-07-26 )))))))))))))))))))))))))))))))
      .

      2009-07-26 08:01 . 2009-07-26 08:01 183356 ----a-w- c:\documents and settings\brigitte\Application Data\HouseCall 6.6\Uninstaller.exe
      2009-07-26 06:33 . 2009-07-26 06:33 -------- d-----w- c:\documents and settings\brigitte\Application Data\HouseCall 6.6
      2009-07-24 10:12 . 2009-07-24 10:12 -------- d-----w- c:\program files\Imikimi
      2009-07-19 08:08 . 2009-07-19 08:08 -------- d-----w- c:\documents and settings\All Users\Application Data\AOL
      2009-07-18 16:16 . 2009-07-18 16:16 -------- d-----w- c:\documents and settings\brigitte\Local Settings\Application Data\TomTom
      2009-07-14 07:26 . 2009-07-14 07:26 -------- d-----w- c:\documents and settings\brigitte\Application Data\vlc

      .
      (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
      .
      2009-07-16 10:53 . 2008-09-21 06:34 3775176 ----a-w- c:\documents and settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe
      2009-07-13 11:36 . 2008-09-21 06:33 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
      2009-07-13 11:36 . 2008-09-21 06:33 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
      2009-06-21 05:49 . 2009-06-21 05:48 -------- d-----w- c:\documents and settings\brigitte\Application Data\LG Electronics
      2009-06-16 14:40 . 2005-10-17 17:13 119808 ----a-w- c:\windows\system32\t2embed.dll
      2009-06-16 14:40 . 2005-10-17 17:13 81920 ----a-w- c:\windows\system32\fontsub.dll
      2009-06-15 04:15 . 2009-01-24 05:02 116944 ----a-w- c:\windows\system32\GDIPFONTCACHEV1.DAT
      2009-06-13 04:17 . 2009-06-13 04:17 -------- d-----w- c:\program files\Microsoft.NET
      2009-06-13 04:13 . 2009-06-13 04:13 -------- d-----w- c:\program files\Microsoft Visual Studio 8
      2009-06-07 07:36 . 2009-05-24 14:47 603904 ----a-w- c:\windows\system32\TUProgSt.exe
      2009-06-07 07:36 . 2009-05-16 09:16 360192 ----a-w- c:\windows\system32\TuneUpDefragService.exe
      2009-06-07 07:27 . 2009-06-07 07:27 604416 ----a-w- c:\windows\system32\TUProgSt(2).exe
      2009-06-03 19:10 . 2005-10-17 17:13 1297408 ----a-w- c:\windows\system32\quartz.dll
      2009-06-03 15:41 . 2005-10-17 17:13 87300 ----a-w- c:\windows\system32\perfc00C.dat
      2009-06-03 15:41 . 2005-10-17 17:13 517764 ----a-w- c:\windows\system32\perfh00C.dat
      2009-05-29 16:44 . 2009-05-29 16:44 -------- d-----w- c:\program files\TuneUp Utilities 2009
      2009-05-14 13:20 . 2009-05-14 15:38 2645832 ----a-w- c:\documents and settings\brigitte\Application Data\Mozilla\Firefox\Profiles\0jirmrj6.default\extensions\{bb628310-0ab7-11db-9cd8-0800200c9a66}\maconfsetup.exe
      2009-05-14 12:56 . 2009-05-14 15:38 402800 ----a-w- c:\documents and settings\brigitte\Application Data\Mozilla\Firefox\Profiles\0jirmrj6.default\extensions\{bb628310-0ab7-11db-9cd8-0800200c9a66}\plugins\nphardwaredetection.dll
      2009-05-13 05:04 . 2005-10-17 17:13 915456 ----a-w- c:\windows\system32\wininet.dll
      2009-05-07 15:33 . 2005-10-17 17:13 348672 ----a-w- c:\windows\system32\localspl.dll
      2007-06-15 17:03 . 2007-04-20 18:12 278528 ----a-w- c:\program files\Fichiers communs\FDEUnInstaller.exe
      2006-07-26 07:19 . 2006-07-26 07:21 774144 ----a-w- c:\program files\RngInterstitial.dll
      2009-07-17 07:45 . 2008-06-19 15:43 137208 ----a-w- c:\program files\mozilla firefox\components\brwsrcmp.dll
      2007-08-29 07:16 . 2007-08-29 07:16 5 --sha-w- c:\windows\system32\ebceabd_g.dll
      .

      ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      *Note* empty entries & legit default entries are not shown
      REGEDIT4

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
      "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-02-06 3885408]
      "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-08-18 68856]
      "H/PC Connection Agent"="c:\program files\Microsoft ActiveSync\WCESCOMM.EXE" [2005-01-19 405583]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 455168]
      "avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-02-05 81000]
      "LVCOMSX"="c:\windows\system32\LVCOMSX.EXE" [2005-07-19 221184]
      "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-09 148888]
      "AGRSMMSG"="AGRSMMSG.exe" - c:\windows\AGRSMMSG.exe [2004-04-13 88363]
      "VTTimer"="VTTimer.exe" - c:\windows\system32\VTTimer.exe [2005-05-13 53248]
      "SoundMan"="SOUNDMAN.EXE" - c:\windows\soundman.exe [2005-07-22 81920]

      [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
      "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

      c:\documents and settings\brigitte\Menu D‚marrer\Programmes\D‚marrage\
      MSN Pictures Displayer.lnk - c:\program files\MSN Pictures Displayer\MSN Pictures Displayer.exe [2008-8-17 4713472]
      Yahoo! Widgets.lnk - c:\program files\Yahoo!\Widgets\YahooWidgets.exe [2007-12-11 3746856]

      [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
      Source= c:\documents and settings\brigitte\Mes documents\Mes images\brigitte\Mo.jpg
      FriendlyName=

      [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\1]
      Source= c:\documents and settings\brigitte\Mes documents\Mes images\brigitte\mc.jpg
      FriendlyName=

      [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\2]
      Source= c:\documents and settings\brigitte\Mes documents\Mes images\brigitte\morgane.jpg
      FriendlyName=

      [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn]
      2008-05-02 00:42 72208 ----a-w- c:\program files\Fichiers communs\Logishrd\Bluetooth\LBTWLgn.dll

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
      @=""

      [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Logitech Desktop Messenger.lnk]
      path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Logitech Desktop Messenger.lnk
      backup=c:\windows\pss\Logitech Desktop Messenger.lnkCommon Startup

      [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Logitech SetPoint.lnk]
      path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Logitech SetPoint.lnk
      backup=c:\windows\pss\Logitech SetPoint.lnkCommon Startup

      [HKLM\~\startupfolder\C:^Documents and Settings^brigitte^Menu Démarrer^Programmes^Démarrage^BoontyBox 01net.lnk]
      path=c:\documents and settings\brigitte\Menu Démarrer\Programmes\Démarrage\BoontyBox 01net.lnk
      backup=c:\windows\pss\BoontyBox 01net.lnkStartup
      HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AOL Fast Start
      HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AOLDialer
      HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}
      HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HostManager
      HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InCD
      HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IPHSend
      HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck
      HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroNETTrayIcon
      HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Picasa Media Detector
      HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched
      HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Symantec NetDriver Monitor
      HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UVS10 Preload

      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
      "Boonty Games"=3 (0x3)

      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
      "ctfmon.exe"=c:\windows\system32\ctfmon.exe
      "H/PC Connection Agent"="c:\program files\Microsoft ActiveSync\WCESCOMM.EXE"

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
      "MediaSync"=c:\program files\Acer\Acer eConsole\MediaSync.exe
      "MSPY2002"=c:\windows\system32\IME\PINTLGNT\ImScInst.exe /SYNC
      "VTTrayp"=VTtrayp.exe
      "QuickTime Task"="c:\program files\QuickTime\qttask.exe" -atboottime
      "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

      [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
      "EnableFirewall"= 0 (0x0)

      [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
      "%windir%\\system32\\sessmgr.exe"=
      "c:\\Program Files\\eMule\\emule.exe"=
      "c:\\WINDOWS\\System32\\FXSCLNT.exe"=
      "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
      "c:\\Program Files\\Fichiers communs\\AOL\\ACS\\AOLAcsd.exe"=
      "c:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe"=
      "c:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe"=
      "c:\\Program Files\\Real\\RealPlayer\\RealPlay.exe"=
      "c:\\Program Files\\Fichiers communs\\NewTech Infosystems\\LiveUpdate\\LiveUpdate.exe"=
      "c:\\WINDOWS\\System32\\dpvsetup.exe"=
      "c:\\Program Files\\Messenger\\msmsgs.exe"=
      "c:\\WINDOWS\\System32\\LEXPPS.EXE"=
      "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
      "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
      "c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
      "c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=

      R0 ViBus;ViBus;c:\windows\system32\drivers\ViBus.sys [11/09/2008 15:44 16896]
      R0 ViPrt;VIA SATA IDE Device Driver;c:\windows\system32\drivers\ViPrt.sys [11/09/2008 15:44 52224]
      R0 xfilt;VIA SATA IDE Hot-plug Driver;c:\windows\system32\drivers\xfilt.sys [10/09/2008 10:59 17920]
      R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [11/09/2008 16:44 114768]
      R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [11/09/2008 16:44 20560]
      R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\system32\TUProgSt.exe [24/05/2009 16:47 603904]
      S3 k600bus;Sony Ericsson 600i driver (WDM);c:\windows\system32\drivers\k600bus.sys [11/05/2005 13:12 52384]
      S3 k600mdfl;Sony Ericsson 600i USB WMC Modem Filter;c:\windows\system32\drivers\k600mdfl.sys [11/05/2005 13:12 6096]
      S3 k600mdm;Sony Ericsson 600i USB WMC Modem Drivers;c:\windows\system32\drivers\k600mdm.sys [11/05/2005 13:12 87456]
      S3 k600mgmt;Sony Ericsson 600i USB WMC Device Management Drivers;c:\windows\system32\drivers\k600mgmt.sys [11/05/2005 13:12 79248]
      S3 k600obex;Sony Ericsson 600i USB WMC OBEX Interface Drivers;c:\windows\system32\drivers\k600obex.sys [11/05/2005 13:12 77072]
      S3 MEMSWEEP2;MEMSWEEP2;\??\c:\windows\system32\316.tmp --> c:\windows\system32\316.tmp [?]
      S3 viafilter;VIA USB Filter;c:\windows\system32\drivers\viausb1.sys [11/09/2008 15:44 9728]

      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
      UxTuneUp

      [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
      "c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
      .
      Contents of the 'Scheduled Tasks' folder

      2009-07-26 c:\windows\Tasks\Symantec NetDetect.job
      - c:\program files\Symantec\LiveUpdate\NDETECT.EXE [2005-10-17 09:22]

      2009-07-06 c:\windows\Tasks\AppleSoftwareUpdate.job
      - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]

      2009-07-26 c:\windows\Tasks\User_Feed_Synchronization-{F354A875-81EC-49FC-9ED0-EAEE01E46853}.job
      - c:\windows\system32\msfeedssync.exe [2006-10-17 02:31]

      2009-07-26 c:\windows\Tasks\Maintenance en 1 clic.job
      - c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2008-12-12 13:04]
      .
      .
      ------- Supplementary Scan -------
      .
      uSearchMigratedDefaultURL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
      uInternet Connection Wizard,ShellNext = iexplore
      uInternet Settings,ProxyOverride = localhost
      uSearchURL,(Default) = hxxp://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
      IE: E&xporter vers Microsoft Excel
      DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://www.bitdefender.fr/scan8/oscan8.cab
      DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} - hxxp://eu-housecall.trendmicro-europe.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
      DPF: {981D847D-2C06-4FB7-A09C-4F0A48601B2C} - hxxp://techcity.aol.fr/download/img/DiagSetup.cab
      FF - ProfilePath - c:\documents and settings\brigitte\Application Data\Mozilla\Firefox\Profiles\0jirmrj6.default\
      FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
      FF - prefs.js: browser.search.selectedEngine - Yahoo
      FF - prefs.js: browser.startup.homepage - hxxp://my.numericable.fr/
      FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?ei=UTF-8&fr=vmn&type=vendio&p=
      FF - plugin: c:\documents and settings\All Users\Application Data\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll
      FF - plugin: c:\documents and settings\brigitte\Application Data\Mozilla\Firefox\Profiles\0jirmrj6.default\extensions\{bb628310-0ab7-11db-9cd8-0800200c9a66}\plugins\nphardwaredetection.dll
      FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
      FF - plugin: c:\program files\Mozilla Firefox\plugins\npkimi.dll
      FF - plugin: c:\program files\Mozilla Firefox\plugins\npqtplugin8.dll
      FF - plugin: c:\program files\Mozilla Firefox\plugins\npyaxmpb.dll
      FF - plugin: c:\program files\Mozilla Firefox\plugins\npzylomgamesplayer.dll
      FF - plugin: c:\program files\QuickTime\Plugins\npqtplugin8.dll
      FF - plugin: c:\program files\Real\RealArcade\Plugins\Mozilla\npracplug.dll
      FF - plugin: c:\program files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll
      FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
      FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

      ---- FIREFOX POLICIES ----
      FF - user.js: network.http.max-persistent-connections-per-server - 4
      FF - user.js: content.max.tokenizing.time - 1800000
      FF - user.js: content.notify.interval - 600000
      FF - user.js: content.switch.threshold - 600000
      FF - user.js: nglayout.initialpaint.delay - 600
      c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.enforce_same_site_origin", false);
      c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.cache_size", 51200);
      c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.ogg.enabled", true);
      c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.wave.enabled", true);
      c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.autoplay.enabled", true);
      c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true);
      c:\program files\Mozilla Firefox\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess");
      c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.storage.default_quota", 5120);
      c:\program files\Mozilla Firefox\greprefs\all.js - pref("content.sink.event_probe_rate", 3);
      c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.http.prompt-temp-redirect", true);
      c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.dpi", -1);
      c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.devPixelsPerPx", -1);
      c:\program files\Mozilla Firefox\greprefs\all.js - pref("gestures.enable_single_finger_input", true);
      c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.max_chrome_script_run_time", 0);
      c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.tcp.sendbuffer", 131072);
      c:\program files\Mozilla Firefox\greprefs\all.js - pref("geo.enabled", true);
      c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true);
      c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35");
      c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35");
      c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2);
      c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~");
      c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0);
      c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history", true);
      c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata", true);
      c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords", false);
      c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads", true);
      c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies", true);
      c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache", true);
      c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions", true);
      c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false);
      c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false);
      c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.history", true);
      c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.formdata", true);
      c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.passwords", false);
      c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.downloads", true);
      c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cookies", true);
      c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cache", true);
      c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.sessions", true);
      c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps", false);
      c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings", false);
      c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs", false);
      c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2);
      c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror");
      c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false);
      c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false);
      c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json");
      .

      **************************************************************************

      catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
      Rootkit scan 2009-07-26 11:14
      Windows 5.1.2600 Service Pack 3 FAT NTAPI

      scanning hidden processes ...

      scanning hidden autostart entries ...

      scanning hidden files ...

      scan completed successfully
      hidden files: 0

      **************************************************************************

      [HKEY_LOCAL_MACHINE\System\ControlSet002\Services\MEMSWEEP2]
      "ImagePath"="\??\c:\windows\system32\316.tmp"
      .
      --------------------- LOCKED REGISTRY KEYS ---------------------

      [HKEY_USERS\S-1-5-21-1570106061-833509052-641237796-1006\Software\Microsoft\SystemCertificates\AddressBook*]
      @Allowed: (Read) (RestrictedCode)
      @Allowed: (Read) (RestrictedCode)

      [HKEY_USERS\S-1-5-21-1570106061-833509052-641237796-1006\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
      "??"=hex:19,ad,66,20,94,3a,08,57,80,b9,db,18,ff,de,ce,44,eb,57,be,01,93,62,0f,
      f1,fe,b1,01,a1,6b,de,2e,23,13,cd,c0,6a,0f,71,e4,10,f3,5c,eb,5a,ff,62,11,1c,\
      "??"=hex:67,a4,9f,86,7b,12,9b,06,df,77,f5,9e,68,28,3f,e4

      [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø•€|ÿÿÿÿ•€|ù•9~*]
      "C040211900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"

      [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\h–€|ÿÿÿÿ¤•€|ù•9~*]
      "C040211900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
      .
      --------------------- DLLs Loaded Under Running Processes ---------------------

      - - - - - - - > 'winlogon.exe'(848)
      c:\program files\fichiers communs\logishrd\bluetooth\LBTWlgn.dll
      c:\program files\fichiers communs\logishrd\bluetooth\LBTServ.dll

      - - - - - - - > 'explorer.exe'(3428)
      c:\windows\system32\eappprxy.dll
      c:\windows\system32\webcheck.dll
      c:\windows\system32\WPDShServiceObj.dll
      c:\windows\system32\PortableDeviceTypes.dll
      c:\windows\system32\PortableDeviceApi.dll
      .
      ------------------------ Other Running Processes ------------------------
      .
      c:\program files\ALWIL SOFTWARE\AVAST4\ASWUPDSV.EXE
      c:\program files\ALWIL SOFTWARE\AVAST4\ASHSERV.EXE
      c:\windows\SYSTEM32\LEXBCES.EXE
      c:\windows\SYSTEM32\LEXPPS.EXE
      c:\program files\ACER\ACER ECONSOLE\MEDIASERVERSERVICE.EXE
      c:\program files\FICHIERS COMMUNS\AOL\ACS\AOLACSD.EXE
      c:\program files\JAVA\JRE6\BIN\JQS.EXE
      c:\program files\FICHIERS COMMUNS\MICROSOFT SHARED\VS7DEBUG\MDM.EXE
      c:\program files\ALWIL SOFTWARE\AVAST4\ASHDISP.EXE
      c:\program files\CDBurnerXP\NMSAccessU.exe
      c:\program files\CyberLink\Shared Files\RichVideo.exe
      c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
      c:\windows\wanmpsvc.exe
      c:\program files\Messenger\msmsgs.exe
      c:\program files\Alwil Software\Avast4\ashMaiSv.exe
      c:\program files\Alwil Software\Avast4\ashWebSv.exe
      c:\program files\Windows Live\Contacts\wlcomm.exe
      c:\windows\system32\wscntfy.exe
      .
      **************************************************************************
      .
      Completion time: 2009-07-26 11:16 - machine was rebooted
      ComboFix-quarantined-files.txt 2009-07-26 09:16

      Pre-Run: 57 551 716 352 octets libres
      Post-Run: 57 497 124 864 octets libres

      645 --- E O F --- 2009-07-22 05:41
      0