Mal_vundog

etan -  
Bonjour,
en faisant un antivirus en ligne sur trend micro , celui ci m indique qu un logiciel malveillant( virus, etc....) du nom de mal_vundog est present sur mon pc!!
le soucis est qu il est impossible de le nettoyer par le biais de trend micro ( d habitude ca marche , mais pas là!!), il se trouve dans le system32. j ai fais un scanner avast et il met impossible de scanner certaines zones aussi,,, j ai tout essayer pour chercher dans le system 32 le virus ,rien a faire,,,,
aidez moi svp ,,,,,, merci cordialement
Configuration: Windows XP Internet Explorer 8.0

9 réponses

  • Votes
  • Date
  • Date décroissante
  1. jlpjlp Contributeur sécurité
    slt

    scan avec malwarebyte , fais un scan minutieux et colle le rapport obtenu et vire ce qui est trouvé:

    https://www.malekal.com/tutoriel-malwarebyte-anti-malware/­

    ______________________

    Télécharge ici :

    http://images.malwareremoval.com/random/RSIT.exe

    random's system information tool (RSIT) par andom/random et sauvegarde-le sur le Bureau.

    Double-clique sur RSIT.exe afin de lancer RSIT.

    Clique Continue à l'écran Disclaimer.

    Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

    Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront.

    Poste le contenu de log.txt (<<qui sera affiché)
    ainsi que de info.txt (<<qui sera réduit dans la Barre des Tâches).

    NB : Les rapports sont sauvegardés dans le dossier C:\rsit
    1. etan
      merci pour toutes tes infos , je vais essayer mais ca me parait super complique pour moi!!!
      2. etan
        re,,
        rien a faire j y arrive pas , il n y auras pas un antivirus en ligne ou un programme moins dur a faire pour m enlever mal_vundog
        svp merci!!!!!!!
        3. etan
          merci pour ttes infos!!!
          j ai fais autrement , je verrais bien !!!
          sur micro trend , il me dis que le virus est sur C:\WINDOWS\system32\khuaalob.ini
          donc j ai sur ma page d aceuil , j ai fais "exécueter" puis j ai tappe C:\WINDOWS\system32\huaalob.ini
          je suis tombe sur un fichier "bloc note" j ai tout supprimer et j ai refais un "micro trend et rien a part des cookies!!
          le soucis c est que j ai fais un scan avec avast et il m a trouve des virus et il ne peut pas scanner certains fichier!!
          j ai aussi tuneup utulities et quand je fais une reparation,nettoyage sur les disques , il trouve tjrs une erreur
          donc je ne c pas trop , sinon ca marche un peu pres,,,,,,,,,,,,,,
          merci de savoir que ce vous en pensez !! cdlt
          1. jlpjlp Contributeur sécurité
            il faudrait coller un rapport rsit . C'est pas compliqué . Tu lance le logiciel puis tu fais un copier coller du réputat dans ton prochain message et si tu peux colle le rapport de avast
            1. brigitte62
              salut

              meme souci avec scan trend micro trouver ce virus mal_vundog dans C:\windows\system32\cbeeg.bak2

              j'ai fait plusieurs scans avec
              malwarebytes :rien
              avast:rien
              bitdefender : rien

              j'ai été dans regedit et j'ai supprime une cle cbeeg.bak2

              je scan a nouveau pour voir je vous tiens au courant
              merci
              1. Utilisateur anonyme
                bonjour brigitte62 ,
                Il serait préférable que tu fasses ton message personnel, cela rendra les postes plus compréhensibles et la réponse à ton problème sera plus efficace
                Procède comme ceci :
                *Clique sur ce lien -> http://www.commentcamarche.net/forum/forum 7#ecrire

                *Puis dans l'encadré, en dessous du "bonjour",expose clairement et précisément ton problème ...
                Pour poster ta question sur le forum, tu n'as plus qu'à cliquer sur "Ajouter" ...
                Patiente et un helper finira par te prendre en charge ;)

                @+
              4. brigittedu62
                @Utilisateur anonymemerci
                ,je viens d'utiliser combofix pour voir ,je te mets le rapport
                ComboFix 09-07-25.04 - brigitte 26/07/2009 11:08.1.1 - FAT32x86
                Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.1471.963 [GMT 2:00]
                Running from: c:\documents and settings\brigitte\Mes documents\Téléchargements\ComboFix.exe
                AV: avast! antivirus 4.8.1335 [VPS 090725-0] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}

                WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
                .

                ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
                .

                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\accessories\cup.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\accessories\customer_cup.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\accessories\heart.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\accessories\menu_down.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\accessories\menu_up.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\accessories\plates.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\accessories\ticket.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\accessories\tray.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\music\mainmenumusic.ogg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_bring_check_1_snd.ogg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_deliver_food_1_snd.ogg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_deliver_order_1_snd.ogg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_diner.ogg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_dish_dropoff_1_snd.ogg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_food_ready_1_snd.ogg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_gain_heart_1.ogg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_get_drinks_1_snd.ogg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_party_arrive_1_snd.ogg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_pencil_write_2.ogg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_pickup_food_1_snd.ogg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_rollover_1.ogg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_seat_people_snd.ogg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\choosedifficulty.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\credits.jpg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\flo_lose.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\flo_win.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\help1.jpg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\help2.jpg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\highscores.jpg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\levelintro.jpg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\levelintro_mask.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\levelover.jpg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\levelover_mask.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\mainmenu.jpg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\popup.jpg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\popup_mask.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\upgradegrid.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\upgradetitle.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\upsell.jpg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\arrowleft_blue.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\arrowleft_yellow.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\arrowright_blue.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\arrowright_yellow.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\back_blue.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\back_yellow.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\backchalk.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\backchalkup.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\backtomenu_blue.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\backtomenu_yellow.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\cancel.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\cancelup.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\career.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\career_over.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\close.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\closeup.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\continue.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\continueover.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\credits_blue.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\credits_yellow.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\download_blue.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\download_yellow.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\easy.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\easy_over.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\endlessshift.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\endlessshift_over.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\hard.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\hard_over.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\help.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\help_over.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\highscores.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\highscores_over.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\instructions_blue.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\instructions_yellow.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\letsplay.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\letsplayover.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\medium.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\medium_over.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\moreinfo.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\moreinfoup.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\off.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\off_on.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\on.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\on_on.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\pause.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\pauseover.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\quit.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\quitgame.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\quitgameover.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\quitover.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\resumegame.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\resumegameover.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\submit.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\submitup.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\tryagain.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\tryagainover.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\upgrade_over.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\upgrade_up.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\viewglobal.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\viewglobalup.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\viewhighscore.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\viewhighscoreon.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\viewlocal.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\viewlocalup.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\comics\webcomic.jpg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\config\career.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\config\customer.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\config\endless.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\config\global.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\config\powerups.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\cook\cook.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\cook\cook.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\cook\stove.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\cursor\arrow.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\cursor\click.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\cursor\click2.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\cursor\grab.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\cursor\open.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\anim.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\blue\anim.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\blue\anim.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\blue\sit_legs.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\green\anim.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\green\anim.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\green\sit_legs.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\purple\anim.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\purple\anim.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\purple\sit_legs.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\red\anim.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\red\anim.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\red\sit_legs.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\yellow\anim.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\yellow\anim.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\yellow\sit_legs.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\anim.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\blue\anim.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\blue\anim.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\blue\sit_legs.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\green\anim.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\green\anim.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\green\sit_legs.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\purple\anim.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\purple\anim.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\purple\sit_legs.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\red\anim.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\red\anim.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\red\sit_legs.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\yellow\anim.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\yellow\anim.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\yellow\sit_legs.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\flo\idle.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\flo\idle.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\flo\lower.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\flo\lower.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\flo\upper.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\flo\upper.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\fonts\arial.mvec
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\fonts\komikaaxis.mvec
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\chair.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\chair.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\dirt2top.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\dirt4top.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\dishcart.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\dishcart.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\drinkstation_off.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\drinkstation_on1.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\drinkstation_on2.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\ticketstation.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\ticketstation.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\arrowdown.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\arrowdownon.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\arrowleft.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\arrowlefton.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\arrowright.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\arrowrighton.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\arrowup.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\arrowupon.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\p1icon.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\textedit.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\title.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_1.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_1_a.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_1_b.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_1_c.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_2.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_2_a.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_2_b.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_2_c.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_2_d.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_3.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_3_a.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_3_b.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_3_c.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_3_d.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\fifth_level_diner.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\first_level_diner.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\fourth_level_diner.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\second_level_diner.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\playfirst_logo.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\background.jpg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\food\food1.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\food\food1.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\food\food2.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\food\food2.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\food\food3.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\food\food3.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\frames\upgrade_0001.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\tables\2top.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\tables\2top.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\tables\4top.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\tables\4top.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\upgrades.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\tableshadow.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\choosedifficulty.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\chooseplayer.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\chooserestaurant.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\credits.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\game.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\gothighscore.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\help.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\help2.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\hiscore.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\hiscoreinfo.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\hiscoresubmit.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\levelintro.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\levelover.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\loading.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\mainloop.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\mainmenu.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\ok.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\pause.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\style.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\tutorialintro.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\upgrade.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\upsell.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\webcomic.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\yesno.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\splash\aol_logo.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\splash\gamelabsplash.jpg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\splash\playfirst_logo.jpg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\strings.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\angersmoke.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\angersmoke.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\chairflags.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\chairflags.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\check.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\checkmark.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\clock.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\closed.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\closingtime.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\coinflip.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\coinflip.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\dollar.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\doodles\coffee.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\doodles\tables.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\doodles\wallpaper.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\expert.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\expertscore.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\foodpoof.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\foodpoof.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\fork_timer.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\goalcompleted.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\heartgrow.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\heartgrow.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\jar.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\jar.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\level.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\level_career.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\score.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\sound.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\staroff.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\staron.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\tablenumber.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\tablenumberup.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\traynumber.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\tutorial_character.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\tutorialarrow.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\tutorialbox.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgradeanim.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgradeanim.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgrades\drinks.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgrades\maitred.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgrades\oven.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgrades\select.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgrades\shoes.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgrades\stereo.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgrades\table.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\dinerdash.exe
                c:\windows\Installer\103379f.msp
                c:\windows\Installer\10337b2.msp
                c:\windows\Installer\10337c5.msp
                c:\windows\Installer\10337df.msp
                c:\windows\Installer\10337e0.msp
                c:\windows\Installer\10337e1.msp
                c:\windows\Installer\10337f5.msp
                c:\windows\Installer\1033808.msp
                c:\windows\Installer\103381b.msp
                c:\windows\Installer\103383f.msp
                c:\windows\Installer\1033840.msp
                c:\windows\Installer\1033853.msp
                c:\windows\Installer\149142.msi
                c:\windows\Installer\1b9ae29.msp
                c:\windows\Installer\1c8e664.msp
                c:\windows\Installer\1c8e665.msp
                c:\windows\Installer\1c8e677.msp
                c:\windows\Installer\2339b3.msp
                c:\windows\Installer\2fe432.msp
                c:\windows\Installer\32f97f.msi
                c:\windows\Installer\4c919.msp
                c:\windows\Installer\508af5.msp
                c:\windows\Installer\508c4d.msp
                c:\windows\Installer\66559.msp
                c:\windows\Installer\7520b.msp
                c:\windows\Installer\7520c.msp
                c:\windows\Installer\945591.msp
                c:\windows\Installer\945592.msp
                c:\windows\Installer\945593.msp
                c:\windows\Installer\945594.msp
                c:\windows\Installer\945595.msp
                c:\windows\Installer\9455aa.msp
                c:\windows\Installer\9455ab.msp
                c:\windows\Installer\9455ac.msp
                c:\windows\Installer\9455ad.msp
                c:\windows\Installer\9455ae.msp
                c:\windows\Installer\9455af.msp
                c:\windows\Installer\9455b0.msp
                c:\windows\Installer\d570f.msp
                c:\windows\Installer\d5710.msp
                c:\windows\Installer\d5723.msp
                c:\windows\Installer\e6c23.msi
                c:\windows\pack.epk
                c:\windows\patch.exe
                c:\windows\system32\autorun.ini
                c:\windows\system32\cbeeg.bak2

                Infected copy of c:\windows\system32\sfcfiles.dll was found and disinfected
                Restored copy from - c:\windows\system32\dllcache\sfcfiles.dll

                .
                ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
                .

                -------\Legacy_BOONTY_GAMES
                -------\Service_Boonty Games

                ((((((((((((((((((((((((( Files Created from 2009-06-26 to 2009-07-26 )))))))))))))))))))))))))))))))
                .

                2009-07-26 08:01 . 2009-07-26 08:01 183356 ----a-w- c:\documents and settings\brigitte\Application Data\HouseCall 6.6\Uninstaller.exe
                2009-07-26 06:33 . 2009-07-26 06:33 -------- d-----w- c:\documents and settings\brigitte\Application Data\HouseCall 6.6
                2009-07-24 10:12 . 2009-07-24 10:12 -------- d-----w- c:\program files\Imikimi
                2009-07-19 08:08 . 2009-07-19 08:08 -------- d-----w- c:\documents and settings\All Users\Application Data\AOL
                2009-07-18 16:16 . 2009-07-18 16:16 -------- d-----w- c:\documents and settings\brigitte\Local Settings\Application Data\TomTom
                2009-07-14 07:26 . 2009-07-14 07:26 -------- d-----w- c:\documents and settings\brigitte\Application Data\vlc

                .
                (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
                .
                2009-07-16 10:53 . 2008-09-21 06:34 3775176 ----a-w- c:\documents and settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe
                2009-07-13 11:36 . 2008-09-21 06:33 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
                2009-07-13 11:36 . 2008-09-21 06:33 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
                2009-06-21 05:49 . 2009-06-21 05:48 -------- d-----w- c:\documents and settings\brigitte\Application Data\LG Electronics
                2009-06-16 14:40 . 2005-10-17 17:13 119808 ----a-w- c:\windows\system32\t2embed.dll
                2009-06-16 14:40 . 2005-10-17 17:13 81920 ----a-w- c:\windows\system32\fontsub.dll
                2009-06-15 04:15 . 2009-01-24 05:02 116944 ----a-w- c:\windows\system32\GDIPFONTCACHEV1.DAT
                2009-06-13 04:17 . 2009-06-13 04:17 -------- d-----w- c:\program files\Microsoft.NET
                2009-06-13 04:13 . 2009-06-13 04:13 -------- d-----w- c:\program files\Microsoft Visual Studio 8
                2009-06-07 07:36 . 2009-05-24 14:47 603904 ----a-w- c:\windows\system32\TUProgSt.exe
                2009-06-07 07:36 . 2009-05-16 09:16 360192 ----a-w- c:\windows\system32\TuneUpDefragService.exe
                2009-06-07 07:27 . 2009-06-07 07:27 604416 ----a-w- c:\windows\system32\TUProgSt(2).exe
                2009-06-03 19:10 . 2005-10-17 17:13 1297408 ----a-w- c:\windows\system32\quartz.dll
                2009-06-03 15:41 . 2005-10-17 17:13 87300 ----a-w- c:\windows\system32\perfc00C.dat
                2009-06-03 15:41 . 2005-10-17 17:13 517764 ----a-w- c:\windows\system32\perfh00C.dat
                2009-05-29 16:44 . 2009-05-29 16:44 -------- d-----w- c:\program files\TuneUp Utilities 2009
                2009-05-14 13:20 . 2009-05-14 15:38 2645832 ----a-w- c:\documents and settings\brigitte\Application Data\Mozilla\Firefox\Profiles\0jirmrj6.default\extensions\{bb628310-0ab7-11db-9cd8-0800200c9a66}\maconfsetup.exe
                2009-05-14 12:56 . 2009-05-14 15:38 402800 ----a-w- c:\documents and settings\brigitte\Application Data\Mozilla\Firefox\Profiles\0jirmrj6.default\extensions\{bb628310-0ab7-11db-9cd8-0800200c9a66}\plugins\nphardwaredetection.dll
                2009-05-13 05:04 . 2005-10-17 17:13 915456 ----a-w- c:\windows\system32\wininet.dll
                2009-05-07 15:33 . 2005-10-17 17:13 348672 ----a-w- c:\windows\system32\localspl.dll
                2007-06-15 17:03 . 2007-04-20 18:12 278528 ----a-w- c:\program files\Fichiers communs\FDEUnInstaller.exe
                2006-07-26 07:19 . 2006-07-26 07:21 774144 ----a-w- c:\program files\RngInterstitial.dll
                2009-07-17 07:45 . 2008-06-19 15:43 137208 ----a-w- c:\program files\mozilla firefox\components\brwsrcmp.dll
                2007-08-29 07:16 . 2007-08-29 07:16 5 --sha-w- c:\windows\system32\ebceabd_g.dll
                .

                ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
                .
                .
                *Note* empty entries & legit default entries are not shown
                REGEDIT4

                [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
                "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-02-06 3885408]
                "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-08-18 68856]
                "H/PC Connection Agent"="c:\program files\Microsoft ActiveSync\WCESCOMM.EXE" [2005-01-19 405583]

                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                "PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 455168]
                "avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-02-05 81000]
                "LVCOMSX"="c:\windows\system32\LVCOMSX.EXE" [2005-07-19 221184]
                "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-09 148888]
                "AGRSMMSG"="AGRSMMSG.exe" - c:\windows\AGRSMMSG.exe [2004-04-13 88363]
                "VTTimer"="VTTimer.exe" - c:\windows\system32\VTTimer.exe [2005-05-13 53248]
                "SoundMan"="SOUNDMAN.EXE" - c:\windows\soundman.exe [2005-07-22 81920]

                [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
                "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

                c:\documents and settings\brigitte\Menu D‚marrer\Programmes\D‚marrage\
                MSN Pictures Displayer.lnk - c:\program files\MSN Pictures Displayer\MSN Pictures Displayer.exe [2008-8-17 4713472]
                Yahoo! Widgets.lnk - c:\program files\Yahoo!\Widgets\YahooWidgets.exe [2007-12-11 3746856]

                [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
                Source= c:\documents and settings\brigitte\Mes documents\Mes images\brigitte\Mo.jpg
                FriendlyName=

                [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\1]
                Source= c:\documents and settings\brigitte\Mes documents\Mes images\brigitte\mc.jpg
                FriendlyName=

                [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\2]
                Source= c:\documents and settings\brigitte\Mes documents\Mes images\brigitte\morgane.jpg
                FriendlyName=

                [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn]
                2008-05-02 00:42 72208 ----a-w- c:\program files\Fichiers communs\Logishrd\Bluetooth\LBTWLgn.dll

                [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
                @=""

                [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Logitech Desktop Messenger.lnk]
                path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Logitech Desktop Messenger.lnk
                backup=c:\windows\pss\Logitech Desktop Messenger.lnkCommon Startup

                [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Logitech SetPoint.lnk]
                path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Logitech SetPoint.lnk
                backup=c:\windows\pss\Logitech SetPoint.lnkCommon Startup

                [HKLM\~\startupfolder\C:^Documents and Settings^brigitte^Menu Démarrer^Programmes^Démarrage^BoontyBox 01net.lnk]
                path=c:\documents and settings\brigitte\Menu Démarrer\Programmes\Démarrage\BoontyBox 01net.lnk
                backup=c:\windows\pss\BoontyBox 01net.lnkStartup
                HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AOL Fast Start
                HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AOLDialer
                HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}
                HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HostManager
                HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InCD
                HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IPHSend
                HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck
                HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroNETTrayIcon
                HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Picasa Media Detector
                HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched
                HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Symantec NetDriver Monitor
                HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UVS10 Preload

                [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
                "Boonty Games"=3 (0x3)

                [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
                "ctfmon.exe"=c:\windows\system32\ctfmon.exe
                "H/PC Connection Agent"="c:\program files\Microsoft ActiveSync\WCESCOMM.EXE"

                [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
                "MediaSync"=c:\program files\Acer\Acer eConsole\MediaSync.exe
                "MSPY2002"=c:\windows\system32\IME\PINTLGNT\ImScInst.exe /SYNC
                "VTTrayp"=VTtrayp.exe
                "QuickTime Task"="c:\program files\QuickTime\qttask.exe" -atboottime
                "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

                [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
                "EnableFirewall"= 0 (0x0)

                [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
                "%windir%\\system32\\sessmgr.exe"=
                "c:\\Program Files\\eMule\\emule.exe"=
                "c:\\WINDOWS\\System32\\FXSCLNT.exe"=
                "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
                "c:\\Program Files\\Fichiers communs\\AOL\\ACS\\AOLAcsd.exe"=
                "c:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe"=
                "c:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe"=
                "c:\\Program Files\\Real\\RealPlayer\\RealPlay.exe"=
                "c:\\Program Files\\Fichiers communs\\NewTech Infosystems\\LiveUpdate\\LiveUpdate.exe"=
                "c:\\WINDOWS\\System32\\dpvsetup.exe"=
                "c:\\Program Files\\Messenger\\msmsgs.exe"=
                "c:\\WINDOWS\\System32\\LEXPPS.EXE"=
                "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
                "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
                "c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
                "c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=

                R0 ViBus;ViBus;c:\windows\system32\drivers\ViBus.sys [11/09/2008 15:44 16896]
                R0 ViPrt;VIA SATA IDE Device Driver;c:\windows\system32\drivers\ViPrt.sys [11/09/2008 15:44 52224]
                R0 xfilt;VIA SATA IDE Hot-plug Driver;c:\windows\system32\drivers\xfilt.sys [10/09/2008 10:59 17920]
                R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [11/09/2008 16:44 114768]
                R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [11/09/2008 16:44 20560]
                R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\system32\TUProgSt.exe [24/05/2009 16:47 603904]
                S3 k600bus;Sony Ericsson 600i driver (WDM);c:\windows\system32\drivers\k600bus.sys [11/05/2005 13:12 52384]
                S3 k600mdfl;Sony Ericsson 600i USB WMC Modem Filter;c:\windows\system32\drivers\k600mdfl.sys [11/05/2005 13:12 6096]
                S3 k600mdm;Sony Ericsson 600i USB WMC Modem Drivers;c:\windows\system32\drivers\k600mdm.sys [11/05/2005 13:12 87456]
                S3 k600mgmt;Sony Ericsson 600i USB WMC Device Management Drivers;c:\windows\system32\drivers\k600mgmt.sys [11/05/2005 13:12 79248]
                S3 k600obex;Sony Ericsson 600i USB WMC OBEX Interface Drivers;c:\windows\system32\drivers\k600obex.sys [11/05/2005 13:12 77072]
                S3 MEMSWEEP2;MEMSWEEP2;\??\c:\windows\system32\316.tmp --> c:\windows\system32\316.tmp [?]
                S3 viafilter;VIA USB Filter;c:\windows\system32\drivers\viausb1.sys [11/09/2008 15:44 9728]

                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
                UxTuneUp

                [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
                "c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
                .
                Contents of the 'Scheduled Tasks' folder

                2009-07-26 c:\windows\Tasks\Symantec NetDetect.job
                - c:\program files\Symantec\LiveUpdate\NDETECT.EXE [2005-10-17 09:22]

                2009-07-06 c:\windows\Tasks\AppleSoftwareUpdate.job
                - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]

                2009-07-26 c:\windows\Tasks\User_Feed_Synchronization-{F354A875-81EC-49FC-9ED0-EAEE01E46853}.job
                - c:\windows\system32\msfeedssync.exe [2006-10-17 02:31]

                2009-07-26 c:\windows\Tasks\Maintenance en 1 clic.job
                - c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2008-12-12 13:04]
                .
                .
                ------- Supplementary Scan -------
                .
                uSearchMigratedDefaultURL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
                uInternet Connection Wizard,ShellNext = iexplore
                uInternet Settings,ProxyOverride = localhost
                uSearchURL,(Default) = hxxp://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
                IE: E&xporter vers Microsoft Excel
                DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://www.bitdefender.fr/scan8/oscan8.cab
                DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} - hxxp://eu-housecall.trendmicro-europe.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
                DPF: {981D847D-2C06-4FB7-A09C-4F0A48601B2C} - hxxp://techcity.aol.fr/download/img/DiagSetup.cab
                FF - ProfilePath - c:\documents and settings\brigitte\Application Data\Mozilla\Firefox\Profiles\0jirmrj6.default\
                FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
                FF - prefs.js: browser.search.selectedEngine - Yahoo
                FF - prefs.js: browser.startup.homepage - hxxp://my.numericable.fr/
                FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?ei=UTF-8&fr=vmn&type=vendio&p=
                FF - plugin: c:\documents and settings\All Users\Application Data\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll
                FF - plugin: c:\documents and settings\brigitte\Application Data\Mozilla\Firefox\Profiles\0jirmrj6.default\extensions\{bb628310-0ab7-11db-9cd8-0800200c9a66}\plugins\nphardwaredetection.dll
                FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
                FF - plugin: c:\program files\Mozilla Firefox\plugins\npkimi.dll
                FF - plugin: c:\program files\Mozilla Firefox\plugins\npqtplugin8.dll
                FF - plugin: c:\program files\Mozilla Firefox\plugins\npyaxmpb.dll
                FF - plugin: c:\program files\Mozilla Firefox\plugins\npzylomgamesplayer.dll
                FF - plugin: c:\program files\QuickTime\Plugins\npqtplugin8.dll
                FF - plugin: c:\program files\Real\RealArcade\Plugins\Mozilla\npracplug.dll
                FF - plugin: c:\program files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll
                FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
                FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

                ---- FIREFOX POLICIES ----
                FF - user.js: network.http.max-persistent-connections-per-server - 4
                FF - user.js: content.max.tokenizing.time - 1800000
                FF - user.js: content.notify.interval - 600000
                FF - user.js: content.switch.threshold - 600000
                FF - user.js: nglayout.initialpaint.delay - 600
                c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.enforce_same_site_origin", false);
                c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.cache_size", 51200);
                c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.ogg.enabled", true);
                c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.wave.enabled", true);
                c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.autoplay.enabled", true);
                c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true);
                c:\program files\Mozilla Firefox\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess");
                c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.storage.default_quota", 5120);
                c:\program files\Mozilla Firefox\greprefs\all.js - pref("content.sink.event_probe_rate", 3);
                c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.http.prompt-temp-redirect", true);
                c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.dpi", -1);
                c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.devPixelsPerPx", -1);
                c:\program files\Mozilla Firefox\greprefs\all.js - pref("gestures.enable_single_finger_input", true);
                c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.max_chrome_script_run_time", 0);
                c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.tcp.sendbuffer", 131072);
                c:\program files\Mozilla Firefox\greprefs\all.js - pref("geo.enabled", true);
                c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true);
                c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35");
                c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35");
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~");
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history", true);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata", true);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords", false);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads", true);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies", true);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache", true);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions", true);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.history", true);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.formdata", true);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.passwords", false);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.downloads", true);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cookies", true);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cache", true);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.sessions", true);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps", false);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings", false);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs", false);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror");
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json");
                .

                **************************************************************************

                catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                Rootkit scan 2009-07-26 11:14
                Windows 5.1.2600 Service Pack 3 FAT NTAPI

                scanning hidden processes ...

                scanning hidden autostart entries ...

                scanning hidden files ...

                scan completed successfully
                hidden files: 0

                **************************************************************************

                [HKEY_LOCAL_MACHINE\System\ControlSet002\Services\MEMSWEEP2]
                "ImagePath"="\??\c:\windows\system32\316.tmp"
                .
                --------------------- LOCKED REGISTRY KEYS ---------------------

                [HKEY_USERS\S-1-5-21-1570106061-833509052-641237796-1006\Software\Microsoft\SystemCertificates\AddressBook*]
                @Allowed: (Read) (RestrictedCode)
                @Allowed: (Read) (RestrictedCode)

                [HKEY_USERS\S-1-5-21-1570106061-833509052-641237796-1006\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
                "??"=hex:19,ad,66,20,94,3a,08,57,80,b9,db,18,ff,de,ce,44,eb,57,be,01,93,62,0f,
                f1,fe,b1,01,a1,6b,de,2e,23,13,cd,c0,6a,0f,71,e4,10,f3,5c,eb,5a,ff,62,11,1c,\
                "??"=hex:67,a4,9f,86,7b,12,9b,06,df,77,f5,9e,68,28,3f,e4

                [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø•€|ÿÿÿÿ•€|ù•9~*]
                "C040211900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"

                [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\h–€|ÿÿÿÿ¤•€|ù•9~*]
                "C040211900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
                .
                --------------------- DLLs Loaded Under Running Processes ---------------------

                - - - - - - - > 'winlogon.exe'(848)
                c:\program files\fichiers communs\logishrd\bluetooth\LBTWlgn.dll
                c:\program files\fichiers communs\logishrd\bluetooth\LBTServ.dll

                - - - - - - - > 'explorer.exe'(3428)
                c:\windows\system32\eappprxy.dll
                c:\windows\system32\webcheck.dll
                c:\windows\system32\WPDShServiceObj.dll
                c:\windows\system32\PortableDeviceTypes.dll
                c:\windows\system32\PortableDeviceApi.dll
                .
                ------------------------ Other Running Processes ------------------------
                .
                c:\program files\ALWIL SOFTWARE\AVAST4\ASWUPDSV.EXE
                c:\program files\ALWIL SOFTWARE\AVAST4\ASHSERV.EXE
                c:\windows\SYSTEM32\LEXBCES.EXE
                c:\windows\SYSTEM32\LEXPPS.EXE
                c:\program files\ACER\ACER ECONSOLE\MEDIASERVERSERVICE.EXE
                c:\program files\FICHIERS COMMUNS\AOL\ACS\AOLACSD.EXE
                c:\program files\JAVA\JRE6\BIN\JQS.EXE
                c:\program files\FICHIERS COMMUNS\MICROSOFT SHARED\VS7DEBUG\MDM.EXE
                c:\program files\ALWIL SOFTWARE\AVAST4\ASHDISP.EXE
                c:\program files\CDBurnerXP\NMSAccessU.exe
                c:\program files\CyberLink\Shared Files\RichVideo.exe
                c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
                c:\windows\wanmpsvc.exe
                c:\program files\Messenger\msmsgs.exe
                c:\program files\Alwil Software\Avast4\ashMaiSv.exe
                c:\program files\Alwil Software\Avast4\ashWebSv.exe
                c:\program files\Windows Live\Contacts\wlcomm.exe
                c:\windows\system32\wscntfy.exe
                .
                **************************************************************************
                .
                Completion time: 2009-07-26 11:16 - machine was rebooted
                ComboFix-quarantined-files.txt 2009-07-26 09:16

                Pre-Run: 57 551 716 352 octets libres
                Post-Run: 57 497 124 864 octets libres

                645 --- E O F --- 2009-07-22 05:41
            2. jlpjlp Contributeur sécurité
              si tu colle pas rsit cela sera plus long ....

              puis

              télécharge combofix (par sUBs) ici :

              http://download.bleepingcomputer.com/sUBs/ComboFix.exe

              et enregistre le sur le bureau.

              déconnecte toi d'internet et ferme toutes tes applications.

              désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware)

              double-clique sur combofix.exe et suis les instructions

              à la fin, il va produire un rapport C:\ComboFix.txt

              réactive ton parefeu, ton antivirus, la garde de ton antispyware

              copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse.

              Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.

              Tu as un tutoriel complet ici :

              https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix
              1. brigittedu62
                bonjour
                je te mets le rapport de cobifix/
                ComboFix 09-07-25.04 - brigitte 26/07/2009 11:08.1.1 - FAT32x86
                Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.1471.963 [GMT 2:00]
                Running from: c:\documents and settings\brigitte\Mes documents\Téléchargements\ComboFix.exe
                AV: avast! antivirus 4.8.1335 [VPS 090725-0] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}

                WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
                .

                ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
                .

                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\accessories\cup.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\accessories\customer_cup.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\accessories\heart.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\accessories\menu_down.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\accessories\menu_up.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\accessories\plates.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\accessories\ticket.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\accessories\tray.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\music\mainmenumusic.ogg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_bring_check_1_snd.ogg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_deliver_food_1_snd.ogg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_deliver_order_1_snd.ogg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_diner.ogg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_dish_dropoff_1_snd.ogg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_food_ready_1_snd.ogg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_gain_heart_1.ogg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_get_drinks_1_snd.ogg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_party_arrive_1_snd.ogg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_pencil_write_2.ogg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_pickup_food_1_snd.ogg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_rollover_1.ogg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\audio\sfx\sfx_seat_people_snd.ogg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\choosedifficulty.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\credits.jpg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\flo_lose.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\flo_win.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\help1.jpg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\help2.jpg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\highscores.jpg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\levelintro.jpg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\levelintro_mask.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\levelover.jpg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\levelover_mask.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\mainmenu.jpg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\popup.jpg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\popup_mask.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\upgradegrid.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\upgradetitle.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\backgrounds\upsell.jpg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\arrowleft_blue.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\arrowleft_yellow.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\arrowright_blue.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\arrowright_yellow.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\back_blue.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\back_yellow.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\backchalk.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\backchalkup.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\backtomenu_blue.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\backtomenu_yellow.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\cancel.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\cancelup.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\career.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\career_over.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\close.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\closeup.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\continue.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\continueover.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\credits_blue.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\credits_yellow.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\download_blue.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\download_yellow.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\easy.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\easy_over.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\endlessshift.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\endlessshift_over.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\hard.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\hard_over.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\help.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\help_over.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\highscores.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\highscores_over.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\instructions_blue.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\instructions_yellow.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\letsplay.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\letsplayover.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\medium.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\medium_over.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\moreinfo.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\moreinfoup.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\off.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\off_on.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\on.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\on_on.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\pause.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\pauseover.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\quit.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\quitgame.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\quitgameover.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\quitover.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\resumegame.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\resumegameover.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\submit.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\submitup.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\tryagain.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\tryagainover.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\upgrade_over.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\upgrade_up.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\viewglobal.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\viewglobalup.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\viewhighscore.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\viewhighscoreon.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\viewlocal.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\buttons\viewlocalup.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\comics\webcomic.jpg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\config\career.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\config\customer.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\config\endless.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\config\global.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\config\powerups.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\cook\cook.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\cook\cook.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\cook\stove.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\cursor\arrow.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\cursor\click.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\cursor\click2.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\cursor\grab.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\cursor\open.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\anim.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\blue\anim.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\blue\anim.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\blue\sit_legs.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\green\anim.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\green\anim.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\green\sit_legs.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\purple\anim.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\purple\anim.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\purple\sit_legs.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\red\anim.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\red\anim.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\red\sit_legs.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\yellow\anim.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\yellow\anim.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\old_male\yellow\sit_legs.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\anim.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\blue\anim.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\blue\anim.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\blue\sit_legs.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\green\anim.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\green\anim.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\green\sit_legs.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\purple\anim.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\purple\anim.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\purple\sit_legs.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\red\anim.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\red\anim.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\red\sit_legs.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\yellow\anim.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\yellow\anim.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\customers\young_female\yellow\sit_legs.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\flo\idle.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\flo\idle.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\flo\lower.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\flo\lower.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\flo\upper.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\flo\upper.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\fonts\arial.mvec
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\fonts\komikaaxis.mvec
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\chair.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\chair.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\dirt2top.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\dirt4top.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\dishcart.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\dishcart.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\drinkstation_off.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\drinkstation_on1.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\drinkstation_on2.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\ticketstation.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\furniture\ticketstation.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\arrowdown.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\arrowdownon.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\arrowleft.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\arrowlefton.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\arrowright.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\arrowrighton.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\arrowup.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\arrowupon.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\p1icon.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\textedit.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\hiscore\title.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_1.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_1_a.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_1_b.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_1_c.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_2.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_2_a.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_2_b.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_2_c.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_2_d.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_3.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_3_a.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_3_b.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_3_c.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\endless_1_3_d.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\fifth_level_diner.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\first_level_diner.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\fourth_level_diner.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\layouts\second_level_diner.txt
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\playfirst_logo.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\background.jpg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\food\food1.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\food\food1.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\food\food2.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\food\food2.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\food\food3.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\food\food3.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\frames\upgrade_0001.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\tables\2top.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\tables\2top.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\tables\4top.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\tables\4top.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\diner\upgrades.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\restaurants\tableshadow.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\choosedifficulty.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\chooseplayer.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\chooserestaurant.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\credits.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\game.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\gothighscore.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\help.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\help2.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\hiscore.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\hiscoreinfo.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\hiscoresubmit.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\levelintro.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\levelover.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\loading.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\mainloop.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\mainmenu.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\ok.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\pause.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\style.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\tutorialintro.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\upgrade.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\upsell.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\webcomic.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\scripts\yesno.lua
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\splash\aol_logo.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\splash\gamelabsplash.jpg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\splash\playfirst_logo.jpg
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\strings.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\angersmoke.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\angersmoke.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\chairflags.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\chairflags.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\check.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\checkmark.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\clock.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\closed.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\closingtime.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\coinflip.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\coinflip.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\dollar.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\doodles\coffee.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\doodles\tables.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\doodles\wallpaper.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\expert.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\expertscore.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\foodpoof.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\foodpoof.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\fork_timer.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\goalcompleted.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\heartgrow.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\heartgrow.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\jar.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\jar.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\level.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\level_career.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\score.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\sound.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\staroff.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\staron.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\tablenumber.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\tablenumberup.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\traynumber.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\tutorial_character.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\tutorialarrow.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\tutorialbox.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgradeanim.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgradeanim.xml
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgrades\drinks.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgrades\maitred.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgrades\oven.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgrades\select.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgrades\shoes.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgrades\stereo.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\assets\ui\upgrades\table.png
                c:\windows\Downloaded Program Files\DinerDash.1.0.0.80\dinerdash.exe
                c:\windows\Installer\103379f.msp
                c:\windows\Installer\10337b2.msp
                c:\windows\Installer\10337c5.msp
                c:\windows\Installer\10337df.msp
                c:\windows\Installer\10337e0.msp
                c:\windows\Installer\10337e1.msp
                c:\windows\Installer\10337f5.msp
                c:\windows\Installer\1033808.msp
                c:\windows\Installer\103381b.msp
                c:\windows\Installer\103383f.msp
                c:\windows\Installer\1033840.msp
                c:\windows\Installer\1033853.msp
                c:\windows\Installer\149142.msi
                c:\windows\Installer\1b9ae29.msp
                c:\windows\Installer\1c8e664.msp
                c:\windows\Installer\1c8e665.msp
                c:\windows\Installer\1c8e677.msp
                c:\windows\Installer\2339b3.msp
                c:\windows\Installer\2fe432.msp
                c:\windows\Installer\32f97f.msi
                c:\windows\Installer\4c919.msp
                c:\windows\Installer\508af5.msp
                c:\windows\Installer\508c4d.msp
                c:\windows\Installer\66559.msp
                c:\windows\Installer\7520b.msp
                c:\windows\Installer\7520c.msp
                c:\windows\Installer\945591.msp
                c:\windows\Installer\945592.msp
                c:\windows\Installer\945593.msp
                c:\windows\Installer\945594.msp
                c:\windows\Installer\945595.msp
                c:\windows\Installer\9455aa.msp
                c:\windows\Installer\9455ab.msp
                c:\windows\Installer\9455ac.msp
                c:\windows\Installer\9455ad.msp
                c:\windows\Installer\9455ae.msp
                c:\windows\Installer\9455af.msp
                c:\windows\Installer\9455b0.msp
                c:\windows\Installer\d570f.msp
                c:\windows\Installer\d5710.msp
                c:\windows\Installer\d5723.msp
                c:\windows\Installer\e6c23.msi
                c:\windows\pack.epk
                c:\windows\patch.exe
                c:\windows\system32\autorun.ini
                c:\windows\system32\cbeeg.bak2

                Infected copy of c:\windows\system32\sfcfiles.dll was found and disinfected
                Restored copy from - c:\windows\system32\dllcache\sfcfiles.dll

                .
                ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
                .

                -------\Legacy_BOONTY_GAMES
                -------\Service_Boonty Games

                ((((((((((((((((((((((((( Files Created from 2009-06-26 to 2009-07-26 )))))))))))))))))))))))))))))))
                .

                2009-07-26 08:01 . 2009-07-26 08:01 183356 ----a-w- c:\documents and settings\brigitte\Application Data\HouseCall 6.6\Uninstaller.exe
                2009-07-26 06:33 . 2009-07-26 06:33 -------- d-----w- c:\documents and settings\brigitte\Application Data\HouseCall 6.6
                2009-07-24 10:12 . 2009-07-24 10:12 -------- d-----w- c:\program files\Imikimi
                2009-07-19 08:08 . 2009-07-19 08:08 -------- d-----w- c:\documents and settings\All Users\Application Data\AOL
                2009-07-18 16:16 . 2009-07-18 16:16 -------- d-----w- c:\documents and settings\brigitte\Local Settings\Application Data\TomTom
                2009-07-14 07:26 . 2009-07-14 07:26 -------- d-----w- c:\documents and settings\brigitte\Application Data\vlc

                .
                (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
                .
                2009-07-16 10:53 . 2008-09-21 06:34 3775176 ----a-w- c:\documents and settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe
                2009-07-13 11:36 . 2008-09-21 06:33 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
                2009-07-13 11:36 . 2008-09-21 06:33 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
                2009-06-21 05:49 . 2009-06-21 05:48 -------- d-----w- c:\documents and settings\brigitte\Application Data\LG Electronics
                2009-06-16 14:40 . 2005-10-17 17:13 119808 ----a-w- c:\windows\system32\t2embed.dll
                2009-06-16 14:40 . 2005-10-17 17:13 81920 ----a-w- c:\windows\system32\fontsub.dll
                2009-06-15 04:15 . 2009-01-24 05:02 116944 ----a-w- c:\windows\system32\GDIPFONTCACHEV1.DAT
                2009-06-13 04:17 . 2009-06-13 04:17 -------- d-----w- c:\program files\Microsoft.NET
                2009-06-13 04:13 . 2009-06-13 04:13 -------- d-----w- c:\program files\Microsoft Visual Studio 8
                2009-06-07 07:36 . 2009-05-24 14:47 603904 ----a-w- c:\windows\system32\TUProgSt.exe
                2009-06-07 07:36 . 2009-05-16 09:16 360192 ----a-w- c:\windows\system32\TuneUpDefragService.exe
                2009-06-07 07:27 . 2009-06-07 07:27 604416 ----a-w- c:\windows\system32\TUProgSt(2).exe
                2009-06-03 19:10 . 2005-10-17 17:13 1297408 ----a-w- c:\windows\system32\quartz.dll
                2009-06-03 15:41 . 2005-10-17 17:13 87300 ----a-w- c:\windows\system32\perfc00C.dat
                2009-06-03 15:41 . 2005-10-17 17:13 517764 ----a-w- c:\windows\system32\perfh00C.dat
                2009-05-29 16:44 . 2009-05-29 16:44 -------- d-----w- c:\program files\TuneUp Utilities 2009
                2009-05-14 13:20 . 2009-05-14 15:38 2645832 ----a-w- c:\documents and settings\brigitte\Application Data\Mozilla\Firefox\Profiles\0jirmrj6.default\extensions\{bb628310-0ab7-11db-9cd8-0800200c9a66}\maconfsetup.exe
                2009-05-14 12:56 . 2009-05-14 15:38 402800 ----a-w- c:\documents and settings\brigitte\Application Data\Mozilla\Firefox\Profiles\0jirmrj6.default\extensions\{bb628310-0ab7-11db-9cd8-0800200c9a66}\plugins\nphardwaredetection.dll
                2009-05-13 05:04 . 2005-10-17 17:13 915456 ----a-w- c:\windows\system32\wininet.dll
                2009-05-07 15:33 . 2005-10-17 17:13 348672 ----a-w- c:\windows\system32\localspl.dll
                2007-06-15 17:03 . 2007-04-20 18:12 278528 ----a-w- c:\program files\Fichiers communs\FDEUnInstaller.exe
                2006-07-26 07:19 . 2006-07-26 07:21 774144 ----a-w- c:\program files\RngInterstitial.dll
                2009-07-17 07:45 . 2008-06-19 15:43 137208 ----a-w- c:\program files\mozilla firefox\components\brwsrcmp.dll
                2007-08-29 07:16 . 2007-08-29 07:16 5 --sha-w- c:\windows\system32\ebceabd_g.dll
                .

                ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
                .
                .
                *Note* empty entries & legit default entries are not shown
                REGEDIT4

                [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
                "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-02-06 3885408]
                "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-08-18 68856]
                "H/PC Connection Agent"="c:\program files\Microsoft ActiveSync\WCESCOMM.EXE" [2005-01-19 405583]

                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                "PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 455168]
                "avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-02-05 81000]
                "LVCOMSX"="c:\windows\system32\LVCOMSX.EXE" [2005-07-19 221184]
                "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-09 148888]
                "AGRSMMSG"="AGRSMMSG.exe" - c:\windows\AGRSMMSG.exe [2004-04-13 88363]
                "VTTimer"="VTTimer.exe" - c:\windows\system32\VTTimer.exe [2005-05-13 53248]
                "SoundMan"="SOUNDMAN.EXE" - c:\windows\soundman.exe [2005-07-22 81920]

                [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
                "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

                c:\documents and settings\brigitte\Menu D‚marrer\Programmes\D‚marrage\
                MSN Pictures Displayer.lnk - c:\program files\MSN Pictures Displayer\MSN Pictures Displayer.exe [2008-8-17 4713472]
                Yahoo! Widgets.lnk - c:\program files\Yahoo!\Widgets\YahooWidgets.exe [2007-12-11 3746856]

                [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
                Source= c:\documents and settings\brigitte\Mes documents\Mes images\brigitte\Mo.jpg
                FriendlyName=

                [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\1]
                Source= c:\documents and settings\brigitte\Mes documents\Mes images\brigitte\mc.jpg
                FriendlyName=

                [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\2]
                Source= c:\documents and settings\brigitte\Mes documents\Mes images\brigitte\morgane.jpg
                FriendlyName=

                [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn]
                2008-05-02 00:42 72208 ----a-w- c:\program files\Fichiers communs\Logishrd\Bluetooth\LBTWLgn.dll

                [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
                @=""

                [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Logitech Desktop Messenger.lnk]
                path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Logitech Desktop Messenger.lnk
                backup=c:\windows\pss\Logitech Desktop Messenger.lnkCommon Startup

                [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Logitech SetPoint.lnk]
                path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Logitech SetPoint.lnk
                backup=c:\windows\pss\Logitech SetPoint.lnkCommon Startup

                [HKLM\~\startupfolder\C:^Documents and Settings^brigitte^Menu Démarrer^Programmes^Démarrage^BoontyBox 01net.lnk]
                path=c:\documents and settings\brigitte\Menu Démarrer\Programmes\Démarrage\BoontyBox 01net.lnk
                backup=c:\windows\pss\BoontyBox 01net.lnkStartup
                HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AOL Fast Start
                HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AOLDialer
                HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}
                HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HostManager
                HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InCD
                HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IPHSend
                HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck
                HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroNETTrayIcon
                HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Picasa Media Detector
                HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched
                HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Symantec NetDriver Monitor
                HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UVS10 Preload

                [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
                "Boonty Games"=3 (0x3)

                [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
                "ctfmon.exe"=c:\windows\system32\ctfmon.exe
                "H/PC Connection Agent"="c:\program files\Microsoft ActiveSync\WCESCOMM.EXE"

                [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
                "MediaSync"=c:\program files\Acer\Acer eConsole\MediaSync.exe
                "MSPY2002"=c:\windows\system32\IME\PINTLGNT\ImScInst.exe /SYNC
                "VTTrayp"=VTtrayp.exe
                "QuickTime Task"="c:\program files\QuickTime\qttask.exe" -atboottime
                "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

                [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
                "EnableFirewall"= 0 (0x0)

                [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
                "%windir%\\system32\\sessmgr.exe"=
                "c:\\Program Files\\eMule\\emule.exe"=
                "c:\\WINDOWS\\System32\\FXSCLNT.exe"=
                "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
                "c:\\Program Files\\Fichiers communs\\AOL\\ACS\\AOLAcsd.exe"=
                "c:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe"=
                "c:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe"=
                "c:\\Program Files\\Real\\RealPlayer\\RealPlay.exe"=
                "c:\\Program Files\\Fichiers communs\\NewTech Infosystems\\LiveUpdate\\LiveUpdate.exe"=
                "c:\\WINDOWS\\System32\\dpvsetup.exe"=
                "c:\\Program Files\\Messenger\\msmsgs.exe"=
                "c:\\WINDOWS\\System32\\LEXPPS.EXE"=
                "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
                "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
                "c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
                "c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=

                R0 ViBus;ViBus;c:\windows\system32\drivers\ViBus.sys [11/09/2008 15:44 16896]
                R0 ViPrt;VIA SATA IDE Device Driver;c:\windows\system32\drivers\ViPrt.sys [11/09/2008 15:44 52224]
                R0 xfilt;VIA SATA IDE Hot-plug Driver;c:\windows\system32\drivers\xfilt.sys [10/09/2008 10:59 17920]
                R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [11/09/2008 16:44 114768]
                R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [11/09/2008 16:44 20560]
                R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\system32\TUProgSt.exe [24/05/2009 16:47 603904]
                S3 k600bus;Sony Ericsson 600i driver (WDM);c:\windows\system32\drivers\k600bus.sys [11/05/2005 13:12 52384]
                S3 k600mdfl;Sony Ericsson 600i USB WMC Modem Filter;c:\windows\system32\drivers\k600mdfl.sys [11/05/2005 13:12 6096]
                S3 k600mdm;Sony Ericsson 600i USB WMC Modem Drivers;c:\windows\system32\drivers\k600mdm.sys [11/05/2005 13:12 87456]
                S3 k600mgmt;Sony Ericsson 600i USB WMC Device Management Drivers;c:\windows\system32\drivers\k600mgmt.sys [11/05/2005 13:12 79248]
                S3 k600obex;Sony Ericsson 600i USB WMC OBEX Interface Drivers;c:\windows\system32\drivers\k600obex.sys [11/05/2005 13:12 77072]
                S3 MEMSWEEP2;MEMSWEEP2;\??\c:\windows\system32\316.tmp --> c:\windows\system32\316.tmp [?]
                S3 viafilter;VIA USB Filter;c:\windows\system32\drivers\viausb1.sys [11/09/2008 15:44 9728]

                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
                UxTuneUp

                [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
                "c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
                .
                Contents of the 'Scheduled Tasks' folder

                2009-07-26 c:\windows\Tasks\Symantec NetDetect.job
                - c:\program files\Symantec\LiveUpdate\NDETECT.EXE [2005-10-17 09:22]

                2009-07-06 c:\windows\Tasks\AppleSoftwareUpdate.job
                - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]

                2009-07-26 c:\windows\Tasks\User_Feed_Synchronization-{F354A875-81EC-49FC-9ED0-EAEE01E46853}.job
                - c:\windows\system32\msfeedssync.exe [2006-10-17 02:31]

                2009-07-26 c:\windows\Tasks\Maintenance en 1 clic.job
                - c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2008-12-12 13:04]
                .
                .
                ------- Supplementary Scan -------
                .
                uSearchMigratedDefaultURL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
                uInternet Connection Wizard,ShellNext = iexplore
                uInternet Settings,ProxyOverride = localhost
                uSearchURL,(Default) = hxxp://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
                IE: E&xporter vers Microsoft Excel
                DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://www.bitdefender.fr/scan8/oscan8.cab
                DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} - hxxp://eu-housecall.trendmicro-europe.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
                DPF: {981D847D-2C06-4FB7-A09C-4F0A48601B2C} - hxxp://techcity.aol.fr/download/img/DiagSetup.cab
                FF - ProfilePath - c:\documents and settings\brigitte\Application Data\Mozilla\Firefox\Profiles\0jirmrj6.default\
                FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
                FF - prefs.js: browser.search.selectedEngine - Yahoo
                FF - prefs.js: browser.startup.homepage - hxxp://my.numericable.fr/
                FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?ei=UTF-8&fr=vmn&type=vendio&p=
                FF - plugin: c:\documents and settings\All Users\Application Data\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll
                FF - plugin: c:\documents and settings\brigitte\Application Data\Mozilla\Firefox\Profiles\0jirmrj6.default\extensions\{bb628310-0ab7-11db-9cd8-0800200c9a66}\plugins\nphardwaredetection.dll
                FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
                FF - plugin: c:\program files\Mozilla Firefox\plugins\npkimi.dll
                FF - plugin: c:\program files\Mozilla Firefox\plugins\npqtplugin8.dll
                FF - plugin: c:\program files\Mozilla Firefox\plugins\npyaxmpb.dll
                FF - plugin: c:\program files\Mozilla Firefox\plugins\npzylomgamesplayer.dll
                FF - plugin: c:\program files\QuickTime\Plugins\npqtplugin8.dll
                FF - plugin: c:\program files\Real\RealArcade\Plugins\Mozilla\npracplug.dll
                FF - plugin: c:\program files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll
                FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
                FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

                ---- FIREFOX POLICIES ----
                FF - user.js: network.http.max-persistent-connections-per-server - 4
                FF - user.js: content.max.tokenizing.time - 1800000
                FF - user.js: content.notify.interval - 600000
                FF - user.js: content.switch.threshold - 600000
                FF - user.js: nglayout.initialpaint.delay - 600
                c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.enforce_same_site_origin", false);
                c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.cache_size", 51200);
                c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.ogg.enabled", true);
                c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.wave.enabled", true);
                c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.autoplay.enabled", true);
                c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true);
                c:\program files\Mozilla Firefox\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess");
                c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.storage.default_quota", 5120);
                c:\program files\Mozilla Firefox\greprefs\all.js - pref("content.sink.event_probe_rate", 3);
                c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.http.prompt-temp-redirect", true);
                c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.dpi", -1);
                c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.devPixelsPerPx", -1);
                c:\program files\Mozilla Firefox\greprefs\all.js - pref("gestures.enable_single_finger_input", true);
                c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.max_chrome_script_run_time", 0);
                c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.tcp.sendbuffer", 131072);
                c:\program files\Mozilla Firefox\greprefs\all.js - pref("geo.enabled", true);
                c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true);
                c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35");
                c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35");
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~");
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history", true);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata", true);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords", false);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads", true);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies", true);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache", true);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions", true);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.history", true);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.formdata", true);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.passwords", false);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.downloads", true);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cookies", true);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cache", true);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.sessions", true);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps", false);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings", false);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs", false);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror");
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false);
                c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json");
                .

                **************************************************************************

                catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                Rootkit scan 2009-07-26 11:14
                Windows 5.1.2600 Service Pack 3 FAT NTAPI

                scanning hidden processes ...

                scanning hidden autostart entries ...

                scanning hidden files ...

                scan completed successfully
                hidden files: 0

                **************************************************************************

                [HKEY_LOCAL_MACHINE\System\ControlSet002\Services\MEMSWEEP2]
                "ImagePath"="\??\c:\windows\system32\316.tmp"
                .
                --------------------- LOCKED REGISTRY KEYS ---------------------

                [HKEY_USERS\S-1-5-21-1570106061-833509052-641237796-1006\Software\Microsoft\SystemCertificates\AddressBook*]
                @Allowed: (Read) (RestrictedCode)
                @Allowed: (Read) (RestrictedCode)

                [HKEY_USERS\S-1-5-21-1570106061-833509052-641237796-1006\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
                "??"=hex:19,ad,66,20,94,3a,08,57,80,b9,db,18,ff,de,ce,44,eb,57,be,01,93,62,0f,
                f1,fe,b1,01,a1,6b,de,2e,23,13,cd,c0,6a,0f,71,e4,10,f3,5c,eb,5a,ff,62,11,1c,\
                "??"=hex:67,a4,9f,86,7b,12,9b,06,df,77,f5,9e,68,28,3f,e4

                [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø•€|ÿÿÿÿ•€|ù•9~*]
                "C040211900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"

                [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\h–€|ÿÿÿÿ¤•€|ù•9~*]
                "C040211900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
                .
                --------------------- DLLs Loaded Under Running Processes ---------------------

                - - - - - - - > 'winlogon.exe'(848)
                c:\program files\fichiers communs\logishrd\bluetooth\LBTWlgn.dll
                c:\program files\fichiers communs\logishrd\bluetooth\LBTServ.dll

                - - - - - - - > 'explorer.exe'(3428)
                c:\windows\system32\eappprxy.dll
                c:\windows\system32\webcheck.dll
                c:\windows\system32\WPDShServiceObj.dll
                c:\windows\system32\PortableDeviceTypes.dll
                c:\windows\system32\PortableDeviceApi.dll
                .
                ------------------------ Other Running Processes ------------------------
                .
                c:\program files\ALWIL SOFTWARE\AVAST4\ASWUPDSV.EXE
                c:\program files\ALWIL SOFTWARE\AVAST4\ASHSERV.EXE
                c:\windows\SYSTEM32\LEXBCES.EXE
                c:\windows\SYSTEM32\LEXPPS.EXE
                c:\program files\ACER\ACER ECONSOLE\MEDIASERVERSERVICE.EXE
                c:\program files\FICHIERS COMMUNS\AOL\ACS\AOLACSD.EXE
                c:\program files\JAVA\JRE6\BIN\JQS.EXE
                c:\program files\FICHIERS COMMUNS\MICROSOFT SHARED\VS7DEBUG\MDM.EXE
                c:\program files\ALWIL SOFTWARE\AVAST4\ASHDISP.EXE
                c:\program files\CDBurnerXP\NMSAccessU.exe
                c:\program files\CyberLink\Shared Files\RichVideo.exe
                c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
                c:\windows\wanmpsvc.exe
                c:\program files\Messenger\msmsgs.exe
                c:\program files\Alwil Software\Avast4\ashMaiSv.exe
                c:\program files\Alwil Software\Avast4\ashWebSv.exe
                c:\program files\Windows Live\Contacts\wlcomm.exe
                c:\windows\system32\wscntfy.exe
                .
                **************************************************************************
                .
                Completion time: 2009-07-26 11:16 - machine was rebooted
                ComboFix-quarantined-files.txt 2009-07-26 09:16

                Pre-Run: 57 551 716 352 octets libres
                Post-Run: 57 497 124 864 octets libres

                645 --- E O F --- 2009-07-22 05:41