Y'a t-il un informaticien pour sauver le pc ?
Résolu
MiMiKael
Messages postés
2
Statut
Membre
-
mykley -
mykley -
Bonjour,
Depuis hier soir, rien ne vas plus ! ^^
Mon centre de sécurité s'affole en me mettant sous le nez des "mot de passe voleur", des "troyan compte goutte" et des "Inet-ver" que je ne pourrais, soit disant, effacer que grace à "Save&Keep" qui me propose bien entendu de m'en débarasser pour quelques 50$ ^^'
Aprés avoir visité, un sujet qui ressemble étrangement au mien, et effectué les méthodes demandées (Ad-Aware + SpyBot + CleanUp40 + vider la corbeille), je me retrouve toujours avec les mêmes Windows Alertes de Sécurité et deux fenêtres qui s'ouvrent des deux côtés de l'écran, ainsi qu'un message qui s'affiche aléatoirement sur internet : "Internet Activité anxieuse. La menace d'attaque virale."
Sinon je possède uniquement (pas bien =x) le pare feu windows et Avast comme sécurité (Avant Avira mais remplacé par Avast).
Si vous avez des suggestions, aides ou lien d'aides, ils seraient les bienvenus :p
Merci d'avance.
Depuis hier soir, rien ne vas plus ! ^^
Mon centre de sécurité s'affole en me mettant sous le nez des "mot de passe voleur", des "troyan compte goutte" et des "Inet-ver" que je ne pourrais, soit disant, effacer que grace à "Save&Keep" qui me propose bien entendu de m'en débarasser pour quelques 50$ ^^'
Aprés avoir visité, un sujet qui ressemble étrangement au mien, et effectué les méthodes demandées (Ad-Aware + SpyBot + CleanUp40 + vider la corbeille), je me retrouve toujours avec les mêmes Windows Alertes de Sécurité et deux fenêtres qui s'ouvrent des deux côtés de l'écran, ainsi qu'un message qui s'affiche aléatoirement sur internet : "Internet Activité anxieuse. La menace d'attaque virale."
Sinon je possède uniquement (pas bien =x) le pare feu windows et Avast comme sécurité (Avant Avira mais remplacé par Avast).
Si vous avez des suggestions, aides ou lien d'aides, ils seraient les bienvenus :p
Merci d'avance.
A voir également:
- Y'a t-il un informaticien pour sauver le pc ?
- Réinitialiser un pc - Guide
- Telecharger downloader pour pc - Télécharger - Téléchargement & Transfert
- Zuma pour pc - Télécharger - Jeux vidéo
- Pc lent - Guide
- Test performance pc - Guide
70 réponses
__________________________________________________________
=>/!\ ATTENTION /!\ Le script qui suit a été écrit spécialement cet ordinateur,<=
=>il est fort déconseillé de le transposer sur un autre ordinateur !<=====|
---------------------------------------------------------------
Toujours avec toutes les protections désactivées, fais ceci :
▶ Ouvre le bloc-notes (Menu démarrer --> programmes --> accessoires --> bloc-notes)
▶ Copie/colle dans le bloc-notes ce qui entre les lignes ci dessous (sans les lignes) :
----------------------------------------------------------
Extra::[4]
C:\Qoobox
File::
c:\documents and settings\Makawouel\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\fpupdateax\fpupdateax.exe
c:\windows\7hacktoo959z.bin
C:\Program Files\Delete.exe
C:\Program Files\SetAttrib.exe
------------------------------------------------------------------
▶ Enregistre ce fichier sur ton Bureau (et pas ailleurs !) sous le nom CFScript.txt
▶ Quitte le Bloc Notes
▶ Fais un glisser/déposer de ce fichier CFScript sur le fichier C-Fix.exe (combofix) Comme ceci
▶ Patiente le temps du scan. Le Bureau va disparaître à plusieurs reprises : c'est normal ! Ne touche à rien tant que le scan n'est pas terminé.
▶ Une fois le scan achevé, un rapport va s'afficher: poste son contenu.
▶ Si le fichier ne s'ouvre pas, il se trouve ici => C:\ComboFix.txt
J'ai fait une recherche manuelle et une autre par la "recherche" accessible depuis "démarrer" et le fichier est introuvable.
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
Voilà je l'ai mis à sa place. J'ai redémarré, pas d'amélioration au premier abord. Pas d'internet, ça rame au démarrage.
C'est dommage hier soir ça allait déjà mieux :p
C'est dommage hier soir ça allait déjà mieux :p
Pardon pour le double post, mais j'ai oublié de préciser qu'au démarrage, spybot m'a averti plusieurs fois : "Un élément important du Registre a été modifié. "nom du fichier" => autoriser la mod, refuser la modif"
Bète et discipliné j'ai cliqué à chaque fois sur "refuser" ... =x
Je ne sais pas si ça pourras plus t'aider
Bète et discipliné j'ai cliqué à chaque fois sur "refuser" ... =x
Je ne sais pas si ça pourras plus t'aider
Puisqu'une image vaut mieux que des mots :
http://nsa08.casimages.com/img/2009/08/17/090817090239891369.png
Y'en a eu d'autre mais je n'ai eu le réflexe du screen que pour celui là =x
http://nsa08.casimages.com/img/2009/08/17/090817090239891369.png
Y'en a eu d'autre mais je n'ai eu le réflexe du screen que pour celui là =x
Tu as bien fait d'accepter
a tout hasard......tu as utilisé combofix sans desactiver le resident de spybot ?
a tout hasard......tu as utilisé combofix sans desactiver le resident de spybot ?
Oui il était apparement toujours en application.
J'ai eu beau le fermer j'ai l'impression qu'il se réactive à chaque fois.
J'ai eu beau le fermer j'ai l'impression qu'il se réactive à chaque fois.
Imprime ces instructions car il faudra fermer toutes les fenêtres et applications lors de l'installation et de l'analyse.
▶ Télécharge :
Malwarebytes
ou :
Malwarebytes
▶ Installe le ( choisis bien "francais" ; ne modifie pas les paramètres d'installe ) et mets le à jour .
(NB : Si tu as un message d'erreur t'indiquant qu'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharge le ici : COMCTL32.OCX
▶ Potasses le Tuto pour te familiariser avec le prg :
( cela dit, il est très simple d'utilisation ).
relance malwarebytes en suivant scrupuleusement ces consignes :
! Déconnecte toi et ferme toutes applications en cours !
▶ Lance Malwarebyte's .
Fais un examen dit "Complet" .
▶ Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
▶ à la fin tu cliques sur "résultat" .
▶ Vérifie que tous les objets infectés soient validés, puis clique sur " suppression " .
▶ Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !
▶ Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwarebytes, le dernier en date)
▶ Télécharge :
Malwarebytes
ou :
Malwarebytes
▶ Installe le ( choisis bien "francais" ; ne modifie pas les paramètres d'installe ) et mets le à jour .
(NB : Si tu as un message d'erreur t'indiquant qu'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharge le ici : COMCTL32.OCX
▶ Potasses le Tuto pour te familiariser avec le prg :
( cela dit, il est très simple d'utilisation ).
relance malwarebytes en suivant scrupuleusement ces consignes :
! Déconnecte toi et ferme toutes applications en cours !
▶ Lance Malwarebyte's .
Fais un examen dit "Complet" .
▶ Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
▶ à la fin tu cliques sur "résultat" .
▶ Vérifie que tous les objets infectés soient validés, puis clique sur " suppression " .
▶ Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !
▶ Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwarebytes, le dernier en date)
Le voilà :
http://www.cijoint.fr/cjlink.php?file=cj200908/cijo0ql6um.txt
Sinon, comctl32.ocx faut le placer dans C:/WINDOWS/system32 ?
http://www.cijoint.fr/cjlink.php?file=cj200908/cijo0ql6um.txt
Sinon, comctl32.ocx faut le placer dans C:/WINDOWS/system32 ?
▶ Télécharge Ad-remover ( de C_XX ) sur ton bureau :
▶ Déconnecte toi et ferme toutes applications en cours !
▶ Double clique sur "Ad-R.exe" pour lancer l'installation et laisse les paramètres d'installation par défaut .
▶ Double-clique sur le raccourci Ad-remover qui est sur ton bureau pour lancer l'outil .
▶ Au menu principal choisis l'option "L" et tape sur [entrée] .
▶ Laisse travailler l'outil et ne touche à rien ...
▶ Poste le rapport qui apparait à la fin , sur le forum ...
( Le rapport est sauvegardé aussi sous C:\Ad-report.log )
( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )
▶ Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
▶ Déconnecte toi et ferme toutes applications en cours !
▶ Double clique sur "Ad-R.exe" pour lancer l'installation et laisse les paramètres d'installation par défaut .
▶ Double-clique sur le raccourci Ad-remover qui est sur ton bureau pour lancer l'outil .
▶ Au menu principal choisis l'option "L" et tape sur [entrée] .
▶ Laisse travailler l'outil et ne touche à rien ...
▶ Poste le rapport qui apparait à la fin , sur le forum ...
( Le rapport est sauvegardé aussi sous C:\Ad-report.log )
( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )
▶ Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
Voilà le rapport :
.
======= RAPPORT D'AD-REMOVER 1.1.4.5_O | UNIQUEMENT XP/VISTA/SEVEN =======
.
Mit à jour par C_XX le 24/06/2009 à 7:10 PM
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 8:25:49, 18/08/2009 | Mode Normal | Option: CLEAN
Exécuté de: C:\Program Files\Ad-remover\
Système d'exploitation: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
Nom du PC: NOM-EB85C523610 | Utilisateur actuel: Makawouel
.
Administrateur: Administrateur
N'est pas administrateur: HelpAssistant *Desactive*
Administrateur: HP_Propriétaire
N'est pas administrateur: Invité *Desactive*
Administrateur: Makawouel
N'est pas administrateur: SUPPORT_388945a0 *Desactive*
N'est pas administrateur: SUPPORT_fddfa904 *Desactive*
.
============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
.
.
HKCR\CLSID\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKCR\EoRezoBHO.EoBho
HKCR\EoRezoBHO.EoBho.1
HKCR\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}
HKCR\Typelib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F}
HKCU\Software\EoRezo
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKLM\Software\Trymedia Systems
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Eoengine
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Eoweather
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Eosudoku
.
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\cmhost.cyp
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\ConfMedia.cyp
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\ConfMedia.cyp.old
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\eoDesktop
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather.cfg
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\host.cyp
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\user.cyp
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\1.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\10.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\11.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\12.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\13.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\14.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\16.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\17.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\18.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\19.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\2.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\3.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\33.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\4.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\5.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\6.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\7.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\8.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\9.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\cat.cyp
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\cat.nfo
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\eoDesktop\config.xml
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\eoDesktop\eoDesktop.html
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\eoDesktop\userConfig.xml
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\grids_difficile_20060701.sud
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\grids_difficile_20060702.sud
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\grids_facile_20060701.sud
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\grids_facile_20060702.sud
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\grids_moyen_20060701.sud
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\grids_moyen_20060702.sud
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\scores.sud
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\aide.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\aidePressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\autoverifno.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\autoverifyes.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\back.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\background3.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\backPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\blank21_19.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\blank25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\correct21_19.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\correct25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\ecran.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\ecranReflet.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\fermer.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\fermerPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\grey25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\iluminated21_19.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\iluminated25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\iluminateno.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\iluminateyes.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\incorrect25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\keypad.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\keypadreflet.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\masquer.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\masquerPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\minimise.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\minimisepressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\new.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\newPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\next.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\nextPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\print.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\save.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\savepressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\Thumbs.db
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\verificationcell.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\verificationcellPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\aide.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\aidePressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\autoverifno.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\autoverifyes.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\back.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\background3.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\backPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\blank21_19.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\blank25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\correct21_19.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\correct25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\ecran.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\ecranReflet.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\fermer.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\fermerPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\grey25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\iluminated21_19.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\iluminated25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\iluminateno.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\iluminateyes.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\incorrect25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\keypad.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\keypadreflet.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\masquer.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\masquerPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\minimise.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\minimisepressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\new.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\newPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\next.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\nextPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\print.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\save.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\savepressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\Thumbs.db
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\verificationcell.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\verificationcellPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\aide.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\aidePressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\autoverifno.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\autoverifyes.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\back.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\background3.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\backPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\blank21_19.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\blank25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\correct21_19.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\correct25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\ecran.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\ecranReflet.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\fermer.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\fermerPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\grey25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\iluminated21_19.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\iluminated25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\iluminateno.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\iluminateyes.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\incorrect25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\keypad.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\keypadreflet.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\masquer.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\masquerPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\minimise.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\minimisepressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\new.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\newPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\next.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\nextPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\print.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\save.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\savepressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\Thumbs.db
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\verificationcell.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\verificationcellPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\aide.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\aidePressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\autoverifno.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\autoverifyes.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\back.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\background3.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\backgroundreflet.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\backPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\blank21_19.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\blank25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\correct21_19.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\correct25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\ecran.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\ecranReflet.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\fermer.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\fermerPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\grey25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\iluminated21_19.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\iluminated25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\iluminateno.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\iluminateyes.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\incorrect25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\keypad.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\keypadreflet.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\masquer.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\masquerPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\minimise.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\minimisepressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\new.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\newPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\next.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\nextPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\save.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\savepressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\Thumbs.db
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\verificationcell.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\verificationcellPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\EoWeather.cfg
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\67_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\67_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\69_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\69_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\70_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\70_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\78_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\78_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\82_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\82_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\83_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\83_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\84_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\84_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\85_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\85_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\89_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\89_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\back.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\background.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\background_1.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\background_1days.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\background_2days.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\background_7days.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\backPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\band.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\band_small.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\close.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\closePressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\dayPrevisionBackground.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\dayPrevisionClose.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\earth.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\fonds_‚cran.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\help.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\helpPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\minimise.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\minimisePressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\next.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\nextPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\option.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\optionPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\reflet_ecran.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\small_background.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\Thumbs.db
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\67_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\67_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\69_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\69_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\70_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\70_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\78_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\78_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\82_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\82_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\83_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\83_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\84_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\84_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\85_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\85_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\89_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\89_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\about.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\back.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\background.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\background_1.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\background_1days.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\background_2days.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\background_7days.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\backPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\close.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\closePressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\dayPrevisionBackground.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\dayPrevisionClose.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\earth.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\fonds_‚cran.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\help.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\helpPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\minimise.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\minimisePressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\next.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\nextPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\option.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\optionPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\reflet_ecran.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\Thumbs.db
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\txt_14x13.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo
C:\DOCUME~1\MAKAWO~1\APPLIC~1\ItsLabel\ItsTV2D
C:\DOCUME~1\MAKAWO~1\APPLIC~1\ItsLabel\ItsTV2D\ItsTV2D.xml
C:\DOCUME~1\MAKAWO~1\APPLIC~1\ItsLabel
C:\Program Files\EoRezo\cmhost.cyp
C:\Program Files\EoRezo\EoAdv
C:\Program Files\EoRezo\EoMultiLanguage.dll
C:\Program Files\EoRezo\EoRezoImg_16.dll
C:\Program Files\EoRezo\EoRezoImg_17.dll
C:\Program Files\EoRezo\EoRezoImg_18.dll
C:\Program Files\EoRezo\EoRezoImg_9.dll
C:\Program Files\EoRezo\EoRezoTools_16.dll
C:\Program Files\EoRezo\EoRezoTools_17.dll
C:\Program Files\EoRezo\EoRezoTools_18.dll
C:\Program Files\EoRezo\EoRezoTools_9.dll
C:\Program Files\EoRezo\EoAdv\eoAdv.url
C:\Program Files\EoRezo\EoAdv\EoRezoBho.old
C:\Program Files\EoRezo\EoAdv\tmp
C:\Program Files\EoRezo\EoAdv\tmp\eoRezoBho.dll.5694
C:\Program Files\EoRezo
C:\Program Files\ItsLabel\ItsMedia.url
C:\Program Files\ItsLabel
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\cmhost.cyp
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\ConfMedia.cyp
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\ConfMedia.cyp.old
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\eoDesktop
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather.cfg
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\host.cyp
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\user.cyp
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\1.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\10.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\11.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\12.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\13.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\14.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\16.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\17.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\18.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\19.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\2.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\3.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\33.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\4.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\5.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\6.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\7.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\8.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\9.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\cat.cyp
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\cat.nfo
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\eoDesktop\config.xml
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\eoDesktop\eoDesktop.html
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\eoDesktop\userConfig.xml
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\aide.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\aidePressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\autoverifno.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\autoverifyes.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\back.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\background3.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\backPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\blank21_19.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\blank25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\correct21_19.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\correct25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\ecran.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\ecranReflet.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\fermer.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\fermerPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\grey25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\iluminated21_19.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\iluminated25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\iluminateno.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\iluminateyes.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\incorrect25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\keypad.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\keypadreflet.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\masquer.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\masquerPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\minimise.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\minimisepressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\new.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\newPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\next.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\nextPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\print.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\save.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\savepressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\Thumbs.db
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\verificationcell.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\verificationcellPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\aide.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\aidePressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\autoverifno.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\autoverifyes.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\back.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\background3.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\backPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\blank21_19.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\blank25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\correct21_19.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\correct25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\ecran.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\ecranReflet.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\fermer.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\fermerPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\grey25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\iluminated21_19.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\iluminated25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\iluminateno.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\iluminateyes.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\incorrect25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\keypad.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\keypadreflet.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\masquer.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\masquerPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\minimise.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\minimisepressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\new.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\newPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\next.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\nextPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\print.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\save.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\savepressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\Thumbs.db
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\verificationcell.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\verificationcellPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\aide.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\aidePressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\autoverifno.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\autoverifyes.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\back.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\background3.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\backPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\blank21_19.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\blank25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\correct21_19.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\correct25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\ecran.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\ecranReflet.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\fermer.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\fermerPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\grey25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\iluminated21_19.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\iluminated25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\iluminateno.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\iluminateyes.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\incorrect25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\keypad.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\keypadreflet.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\masquer.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\masquerPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\minimise.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\minimisepressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\new.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\newPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\next.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\nextPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\print.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\save.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\savepressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\Thumbs.db
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\verificationcell.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\verificationcellPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\aide.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\aidePressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\autoverifno.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\autoverifyes.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\back.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\background3.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\backgroundreflet.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\backPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\blank21_19.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\blank25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\correct21_19.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\correct25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\ecran.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\ecranReflet.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\fermer.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\fermerPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\grey25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\iluminated21_19.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\iluminated25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\iluminateno.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\iluminateyes.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\incorrect25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\keypad.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\keypadreflet.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\masquer.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\masquerPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\minimise.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\minimisepressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\new.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\newPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\next.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\nextPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\save.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\savepressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\Thumbs.db
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\verificationcell.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\verificationcellPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\EoWeather.cfg
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\67_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\67_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\69_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\69_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\70_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\70_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\78_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\78_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\82_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\82_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\83_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\83_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\84_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\84_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\85_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\85_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\89_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\89_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\back.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\background.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\background_1.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\background_1days.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\background_2days.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\background_7days.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\backPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\band.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\band_small.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\close.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\closePressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\dayPrevisionBackground.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\dayPrevisionClose.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\earth.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\fonds_‚cran.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\help.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\helpPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\minimise.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\minimisePressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\next.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\nextPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\option.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\optionPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\reflet_ecran.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\small_background.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\Thumbs.db
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\67_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\67_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\69_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\69_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\70_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\70_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\78_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\78_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\82_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\82_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\83_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\83_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\84_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\84_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\85_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\85_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\89_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\89_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\about.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\back.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\background.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\background_1.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\background_1days.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\background_2days.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\background_7days.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\backPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\close.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\closePressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\dayPrevisionBackground.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\dayPrevisionClose.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\earth.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\fonds_‚cran.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\help.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\helpPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\minimise.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\minimisePressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\next.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\nextPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\option.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\optionPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\reflet_ecran.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\Thumbs.db
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\txt_14x13.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo
(!) -- Fichiers temporaires supprimés.
.
============== Scan additionnel ==============
.
.
.
* Internet Explorer Version 8.0.6001.18702 *
[HKEY_CURRENT_USER\..\Internet Explorer\Main]
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/
[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
Tabs: res://ieframe.dll/tabswelcome.htm
============== Suspect (Cracks, Serials ... ) ==============
.
C:\Documents and Settings\Makawouel\Mes documents\client V5\Fairy Tales Patcher.exe
C:\Documents and Settings\Makawouel\Mes documents\Porte-document\Download\PatcherV4.rar
.
===================================
.
55545 Octet(s) - C:\Ad-Report-CLEAN.log
.
1 Fichier(s) - C:\DOCUME~1\MAKAWO~1\LOCALS~1\Temp
2 Fichier(s) - C:\WINDOWS\Temp
.
17 Fichier(s) - C:\Program Files\Ad-remover\BACKUP
81 Fichier(s) - C:\Program Files\Ad-remover\QUARANTINE
.
Fin à: 8:45:07 | 18/08/2009
.
============== E.O.F ==============
.
Je précise une nouvelle fois, que je me sert de mon ordi portable avec accés wifi pour poster ces messages car depuis hier matin l'accés internet est impossible sur le pc à problème ^^'
.
======= RAPPORT D'AD-REMOVER 1.1.4.5_O | UNIQUEMENT XP/VISTA/SEVEN =======
.
Mit à jour par C_XX le 24/06/2009 à 7:10 PM
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 8:25:49, 18/08/2009 | Mode Normal | Option: CLEAN
Exécuté de: C:\Program Files\Ad-remover\
Système d'exploitation: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
Nom du PC: NOM-EB85C523610 | Utilisateur actuel: Makawouel
.
Administrateur: Administrateur
N'est pas administrateur: HelpAssistant *Desactive*
Administrateur: HP_Propriétaire
N'est pas administrateur: Invité *Desactive*
Administrateur: Makawouel
N'est pas administrateur: SUPPORT_388945a0 *Desactive*
N'est pas administrateur: SUPPORT_fddfa904 *Desactive*
.
============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
.
.
HKCR\CLSID\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKCR\EoRezoBHO.EoBho
HKCR\EoRezoBHO.EoBho.1
HKCR\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}
HKCR\Typelib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F}
HKCU\Software\EoRezo
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKLM\Software\Trymedia Systems
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Eoengine
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Eoweather
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Eosudoku
.
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\cmhost.cyp
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\ConfMedia.cyp
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\ConfMedia.cyp.old
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\eoDesktop
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather.cfg
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\host.cyp
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\user.cyp
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\1.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\10.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\11.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\12.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\13.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\14.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\16.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\17.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\18.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\19.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\2.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\3.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\33.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\4.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\5.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\6.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\7.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\8.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\9.txt
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\cat.cyp
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\db\cat.nfo
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\eoDesktop\config.xml
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\eoDesktop\eoDesktop.html
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\eoDesktop\userConfig.xml
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\grids_difficile_20060701.sud
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\grids_difficile_20060702.sud
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\grids_facile_20060701.sud
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\grids_facile_20060702.sud
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\grids_moyen_20060701.sud
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\grids_moyen_20060702.sud
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\scores.sud
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\aide.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\aidePressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\autoverifno.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\autoverifyes.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\back.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\background3.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\backPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\blank21_19.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\blank25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\correct21_19.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\correct25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\ecran.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\ecranReflet.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\fermer.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\fermerPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\grey25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\iluminated21_19.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\iluminated25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\iluminateno.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\iluminateyes.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\incorrect25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\keypad.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\keypadreflet.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\masquer.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\masquerPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\minimise.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\minimisepressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\new.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\newPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\next.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\nextPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\print.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\save.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\savepressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\Thumbs.db
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\verificationcell.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_mauve\verificationcellPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\aide.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\aidePressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\autoverifno.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\autoverifyes.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\back.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\background3.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\backPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\blank21_19.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\blank25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\correct21_19.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\correct25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\ecran.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\ecranReflet.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\fermer.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\fermerPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\grey25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\iluminated21_19.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\iluminated25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\iluminateno.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\iluminateyes.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\incorrect25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\keypad.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\keypadreflet.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\masquer.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\masquerPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\minimise.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\minimisepressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\new.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\newPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\next.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\nextPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\print.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\save.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\savepressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\Thumbs.db
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\verificationcell.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_noir\verificationcellPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\aide.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\aidePressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\autoverifno.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\autoverifyes.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\back.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\background3.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\backPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\blank21_19.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\blank25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\correct21_19.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\correct25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\ecran.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\ecranReflet.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\fermer.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\fermerPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\grey25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\iluminated21_19.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\iluminated25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\iluminateno.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\iluminateyes.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\incorrect25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\keypad.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\keypadreflet.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\masquer.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\masquerPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\minimise.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\minimisepressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\new.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\newPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\next.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\nextPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\print.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\save.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\savepressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\Thumbs.db
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\verificationcell.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_rouge\verificationcellPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\aide.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\aidePressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\autoverifno.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\autoverifyes.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\back.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\background3.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\backgroundreflet.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\backPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\blank21_19.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\blank25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\correct21_19.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\correct25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\ecran.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\ecranReflet.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\fermer.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\fermerPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\grey25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\iluminated21_19.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\iluminated25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\iluminateno.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\iluminateyes.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\incorrect25.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\keypad.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\keypadreflet.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\masquer.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\masquerPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\minimise.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\minimisepressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\new.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\newPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\next.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\nextPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\save.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\savepressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\Thumbs.db
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\verificationcell.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoSudoku\images_classic_vert\verificationcellPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\EoWeather.cfg
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\67_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\67_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\69_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\69_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\70_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\70_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\78_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\78_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\82_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\82_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\83_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\83_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\84_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\84_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\85_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\85_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\89_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\89_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\back.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\background.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\background_1.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\background_1days.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\background_2days.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\background_7days.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\backPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\band.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\band_small.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\close.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\closePressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\dayPrevisionBackground.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\dayPrevisionClose.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\earth.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\fonds_‚cran.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\help.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\helpPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\minimise.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\minimisePressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\next.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\nextPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\option.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\optionPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\reflet_ecran.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\small_background.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_classic\Thumbs.db
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\67_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\67_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\69_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\69_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\70_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\70_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\78_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\78_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\82_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\82_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\83_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\83_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\84_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\84_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\85_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\85_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\89_day.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\89_night.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\about.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\back.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\background.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\background_1.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\background_1days.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\background_2days.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\background_7days.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\backPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\close.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\closePressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\dayPrevisionBackground.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\dayPrevisionClose.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\earth.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\fonds_‚cran.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\help.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\helpPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\minimise.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\minimisePressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\next.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\nextPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\option.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\optionPressed.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\reflet_ecran.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\Thumbs.db
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo\EoWeather\images_station_meteo\txt_14x13.png
C:\DOCUME~1\MAKAWO~1\APPLIC~1\EoRezo
C:\DOCUME~1\MAKAWO~1\APPLIC~1\ItsLabel\ItsTV2D
C:\DOCUME~1\MAKAWO~1\APPLIC~1\ItsLabel\ItsTV2D\ItsTV2D.xml
C:\DOCUME~1\MAKAWO~1\APPLIC~1\ItsLabel
C:\Program Files\EoRezo\cmhost.cyp
C:\Program Files\EoRezo\EoAdv
C:\Program Files\EoRezo\EoMultiLanguage.dll
C:\Program Files\EoRezo\EoRezoImg_16.dll
C:\Program Files\EoRezo\EoRezoImg_17.dll
C:\Program Files\EoRezo\EoRezoImg_18.dll
C:\Program Files\EoRezo\EoRezoImg_9.dll
C:\Program Files\EoRezo\EoRezoTools_16.dll
C:\Program Files\EoRezo\EoRezoTools_17.dll
C:\Program Files\EoRezo\EoRezoTools_18.dll
C:\Program Files\EoRezo\EoRezoTools_9.dll
C:\Program Files\EoRezo\EoAdv\eoAdv.url
C:\Program Files\EoRezo\EoAdv\EoRezoBho.old
C:\Program Files\EoRezo\EoAdv\tmp
C:\Program Files\EoRezo\EoAdv\tmp\eoRezoBho.dll.5694
C:\Program Files\EoRezo
C:\Program Files\ItsLabel\ItsMedia.url
C:\Program Files\ItsLabel
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\cmhost.cyp
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\ConfMedia.cyp
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\ConfMedia.cyp.old
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\eoDesktop
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather.cfg
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\host.cyp
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\user.cyp
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\1.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\10.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\11.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\12.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\13.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\14.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\16.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\17.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\18.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\19.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\2.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\3.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\33.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\4.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\5.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\6.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\7.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\8.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\9.txt
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\cat.cyp
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\db\cat.nfo
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\eoDesktop\config.xml
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\eoDesktop\eoDesktop.html
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\eoDesktop\userConfig.xml
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\aide.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\aidePressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\autoverifno.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\autoverifyes.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\back.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\background3.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\backPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\blank21_19.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\blank25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\correct21_19.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\correct25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\ecran.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\ecranReflet.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\fermer.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\fermerPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\grey25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\iluminated21_19.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\iluminated25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\iluminateno.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\iluminateyes.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\incorrect25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\keypad.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\keypadreflet.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\masquer.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\masquerPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\minimise.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\minimisepressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\new.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\newPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\next.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\nextPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\print.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\save.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\savepressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\Thumbs.db
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\verificationcell.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_mauve\verificationcellPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\aide.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\aidePressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\autoverifno.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\autoverifyes.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\back.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\background3.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\backPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\blank21_19.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\blank25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\correct21_19.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\correct25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\ecran.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\ecranReflet.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\fermer.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\fermerPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\grey25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\iluminated21_19.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\iluminated25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\iluminateno.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\iluminateyes.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\incorrect25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\keypad.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\keypadreflet.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\masquer.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\masquerPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\minimise.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\minimisepressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\new.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\newPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\next.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\nextPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\print.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\save.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\savepressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\Thumbs.db
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\verificationcell.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_noir\verificationcellPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\aide.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\aidePressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\autoverifno.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\autoverifyes.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\back.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\background3.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\backPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\blank21_19.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\blank25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\correct21_19.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\correct25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\ecran.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\ecranReflet.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\fermer.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\fermerPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\grey25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\iluminated21_19.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\iluminated25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\iluminateno.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\iluminateyes.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\incorrect25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\keypad.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\keypadreflet.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\masquer.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\masquerPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\minimise.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\minimisepressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\new.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\newPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\next.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\nextPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\print.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\save.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\savepressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\Thumbs.db
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\verificationcell.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_rouge\verificationcellPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\aide.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\aidePressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\autoverifno.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\autoverifyes.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\back.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\background3.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\backgroundreflet.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\backPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\blank21_19.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\blank25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\correct21_19.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\correct25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\ecran.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\ecranReflet.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\fermer.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\fermerPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\grey25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\iluminated21_19.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\iluminated25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\iluminateno.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\iluminateyes.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\incorrect25.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\keypad.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\keypadreflet.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\masquer.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\masquerPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\minimise.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\minimisepressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\new.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\newPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\next.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\nextPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\save.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\savepressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\Thumbs.db
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\verificationcell.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoSudoku\images_classic_vert\verificationcellPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\EoWeather.cfg
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\67_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\67_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\69_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\69_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\70_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\70_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\78_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\78_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\82_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\82_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\83_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\83_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\84_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\84_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\85_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\85_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\89_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\89_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\back.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\background.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\background_1.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\background_1days.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\background_2days.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\background_7days.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\backPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\band.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\band_small.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\close.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\closePressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\dayPrevisionBackground.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\dayPrevisionClose.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\earth.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\fonds_‚cran.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\help.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\helpPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\minimise.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\minimisePressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\next.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\nextPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\option.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\optionPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\reflet_ecran.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\small_background.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_classic\Thumbs.db
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\67_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\67_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\69_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\69_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\70_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\70_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\78_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\78_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\82_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\82_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\83_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\83_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\84_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\84_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\85_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\85_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\89_day.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\89_night.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\about.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\back.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\background.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\background_1.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\background_1days.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\background_2days.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\background_7days.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\backPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\close.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\closePressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\dayPrevisionBackground.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\dayPrevisionClose.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\earth.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\fonds_‚cran.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\help.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\helpPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\minimise.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\minimisePressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\next.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\nextPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\option.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\optionPressed.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\reflet_ecran.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\Thumbs.db
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo\EoWeather\images_station_meteo\txt_14x13.png
C:\Documents and Settings\HP_Propri‚taire\Application Data\Eorezo
(!) -- Fichiers temporaires supprimés.
.
============== Scan additionnel ==============
.
.
.
* Internet Explorer Version 8.0.6001.18702 *
[HKEY_CURRENT_USER\..\Internet Explorer\Main]
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/
[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
Tabs: res://ieframe.dll/tabswelcome.htm
============== Suspect (Cracks, Serials ... ) ==============
.
C:\Documents and Settings\Makawouel\Mes documents\client V5\Fairy Tales Patcher.exe
C:\Documents and Settings\Makawouel\Mes documents\Porte-document\Download\PatcherV4.rar
.
===================================
.
55545 Octet(s) - C:\Ad-Report-CLEAN.log
.
1 Fichier(s) - C:\DOCUME~1\MAKAWO~1\LOCALS~1\Temp
2 Fichier(s) - C:\WINDOWS\Temp
.
17 Fichier(s) - C:\Program Files\Ad-remover\BACKUP
81 Fichier(s) - C:\Program Files\Ad-remover\QUARANTINE
.
Fin à: 8:45:07 | 18/08/2009
.
============== E.O.F ==============
.
Je précise une nouvelle fois, que je me sert de mon ordi portable avec accés wifi pour poster ces messages car depuis hier matin l'accés internet est impossible sur le pc à problème ^^'
j'ai relu :
tu n'as pas desactivé le resident de spybot pour l'utilisation de combofix comme c'etait indiqué
tu n'as pas desactivé le resident de spybot pour l'utilisation de combofix comme c'etait indiqué
Oui il me semblait avoir fait "clique droit => fermer le résident" mais apparement non =x
Est ce que je dois aller au point de résu avant la dernière utilisation de comboFix et bien tout arrêter avant de le relancer ?
Ou alors tu as une autre solution ? =x
Est ce que je dois aller au point de résu avant la dernière utilisation de comboFix et bien tout arrêter avant de le relancer ?
Ou alors tu as une autre solution ? =x
Voilà le rapport :
http://www.cijoint.fr/cjlink.php?file=cj200908/cija4YttCa.txt
Spybot a bien été désinstallé et tout les programmes fermés avant utilisation.
C'est la mauvaise utilisation de ComboFix qui peut avoir détraqué la connection internet ?
http://www.cijoint.fr/cjlink.php?file=cj200908/cija4YttCa.txt
Spybot a bien été désinstallé et tout les programmes fermés avant utilisation.
C'est la mauvaise utilisation de ComboFix qui peut avoir détraqué la connection internet ?
Etat : "connection limitée ou inexistante".
Dans le diagnostic de la configuration IP : "Error : Erreur lors de la libération de l'adresse IP actuelle. Le serveur RPC n'est pas disponible."
J'ai suivi les indications du mode d'emploi de Combofix pour réparer sa connection, et le clique droit => réparer la connection ne fonctionne pas : "Problème de renouvellement d'adresse IP"
Sinon le rapport :
_____________________________________
ComboFix 09-08-10.06 - Makawouel 17/08/2009 10:50.3.2 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.959.499 [GMT 2:00]
Running from: c:\documents and settings\Makawouel\Bureau\Mikael.exe
Command switches used :: c:\documents and settings\Makawouel\Bureau\CFScript.txt
AV: avast! antivirus 4.8.1335 [VPS 090816-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: Norton Internet Worm Protection *disabled* {990F9400-4CEE-43EA-A83A-D013ADD8EA6E}
FILE ::
"c:\documents and settings\Makawouel\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\fpupdateax\fpupdateax.exe"
"c:\program files\Delete.exe"
"c:\program files\SetAttrib.exe"
"c:\windows\7hacktoo959z.bin"
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\Makawouel\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\fpupdateax\fpupdateax.exe
c:\program files\Delete.exe
c:\program files\SetAttrib.exe
c:\windows\7hacktoo959z.bin
c:\windows\system32\sfcfiles.dll
.
((((((((((((((((((((((((( Files Created from 2009-07-17 to 2009-08-17 )))))))))))))))))))))))))))))))
.
2009-08-16 13:56 . 2009-08-16 13:56 -------- d-----w- C:\Listem
2009-08-16 12:44 . 2009-08-16 13:38 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-08-16 12:44 . 2009-08-16 12:44 -------- d-----w- c:\program files\Spybot - Search & Destroy
2009-08-16 12:33 . 2009-08-16 12:33 -------- d-----w- c:\program files\CleanUp!
2009-08-16 12:31 . 2009-08-16 18:18 -------- dc-h--w- c:\documents and settings\All Users\Application Data\{83C91755-2546-441D-AC40-9A6B4B860800}
2009-08-16 12:31 . 2009-08-16 12:38 -------- d-----w- c:\documents and settings\All Users\Application Data\Lavasoft
2009-08-16 12:31 . 2009-08-16 12:31 -------- d-----w- c:\program files\Lavasoft
2009-08-16 11:13 . 2009-08-16 11:13 1885088 ----a-w- C:\SmitfraudFix.exe
2009-08-16 09:50 . 2009-02-05 20:06 23152 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2009-08-16 09:50 . 2009-02-05 20:06 51376 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2009-08-16 09:50 . 2009-02-05 20:05 26944 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2009-08-16 09:50 . 2009-02-05 20:04 97480 ----a-w- c:\windows\system32\AvastSS.scr
2009-08-16 09:50 . 2009-02-05 20:08 93296 ----a-w- c:\windows\system32\drivers\aswmon.sys
2009-08-16 09:50 . 2009-02-05 20:08 94032 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2009-08-16 09:50 . 2009-02-05 20:07 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2009-08-16 09:50 . 2009-02-05 20:07 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2009-08-16 09:50 . 2009-02-05 20:11 1256296 ----a-w- c:\windows\system32\aswBoot.exe
2009-08-16 09:50 . 2009-08-16 09:50 -------- d-----w- c:\program files\CCleaner
2009-08-12 09:13 . 2009-07-10 13:27 1315328 ------w- c:\windows\system32\dllcache\msoe.dll
2009-08-05 09:00 . 2009-08-05 09:00 205312 ------w- c:\windows\system32\dllcache\mswebdvd.dll
2009-07-25 14:14 . 2009-07-25 14:14 -------- d-sh--w- c:\documents and settings\LocalService\IETldCache
2009-07-22 13:39 . 2009-07-25 03:23 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-07-22 13:39 . 2009-07-22 13:39 152576 ----a-w- c:\documents and settings\Makawouel\Application Data\Sun\Java\jre1.6.0_13\lzma.dll
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-08-17 09:05 . 2008-04-22 19:19 -------- d-----w- c:\documents and settings\All Users\Application Data\Google Updater
2009-08-09 12:32 . 2009-06-05 08:08 -------- d-----w- c:\program files\Fichiers communs\Adobe AIR
2009-08-09 12:32 . 2009-06-15 17:21 38208 ----a-w- c:\documents and settings\Makawouel\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
2009-08-07 07:02 . 2006-06-05 19:36 -------- d-----w- c:\program files\Java
2009-08-05 09:00 . 2004-08-05 04:00 205312 ----a-w- c:\windows\system32\mswebdvd.dll
2009-07-31 20:32 . 2009-01-06 18:21 -------- d-----w- c:\program files\Microsoft Silverlight
2009-07-17 19:03 . 2004-08-05 04:00 58880 ----a-w- c:\windows\system32\atl.dll
2009-07-13 21:43 . 2004-08-05 04:00 286208 ----a-w- c:\windows\system32\wmpdxm.dll
2009-07-04 15:47 . 2009-07-04 15:47 -------- d-----w- c:\program files\SFR
2009-07-03 16:57 . 2004-08-05 04:00 915456 ----a-w- c:\windows\system32\wininet.dll
2009-07-02 17:13 . 2006-10-22 09:38 43520 ----a-w- c:\windows\system32\CmdLineExt03.dll
2009-07-02 09:30 . 2006-10-06 19:40 -------- d-----w- c:\program files\Diablo II
2009-07-01 11:06 . 2006-10-26 11:28 -------- d-----w- c:\program files\Philips
2009-07-01 11:06 . 2006-06-05 19:48 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-07-01 10:56 . 2006-10-21 11:41 62088 ----a-w- c:\documents and settings\Makawouel\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-07-01 10:48 . 2006-06-05 20:06 -------- d-----w- c:\program files\Fichiers communs\Real
2009-07-01 10:46 . 2006-12-27 18:21 -------- d-----w- c:\program files\GameShadow
2009-07-01 10:45 . 2007-04-27 14:59 -------- d-----w- c:\program files\DivX
2009-07-01 10:41 . 2006-06-05 20:06 -------- d-----w- c:\program files\Sonic
2009-07-01 10:35 . 2006-06-05 19:52 -------- d-----w- c:\program files\Fichiers communs\HP
2009-06-27 16:22 . 2006-06-05 20:27 -------- d-----w- c:\documents and settings\All Users\Application Data\Symantec
2009-06-27 16:22 . 2006-06-05 20:27 -------- d-----w- c:\program files\Fichiers communs\Symantec Shared
2009-06-18 22:48 . 2006-10-24 10:13 20502 ----a-w- c:\documents and settings\Makawouel\Application Data\wklnhst.dat
2009-06-18 22:35 . 2007-04-10 09:34 -------- d-----r- c:\program files\Skype
2009-06-16 14:40 . 2004-08-05 04:00 119808 ----a-w- c:\windows\system32\t2embed.dll
2009-06-16 14:40 . 2004-08-04 21:00 81920 ----a-w- c:\windows\system32\fontsub.dll
2009-06-15 10:44 . 2004-08-05 04:00 78848 ----a-w- c:\windows\system32\telnet.exe
2009-06-10 14:14 . 2004-08-05 04:00 85504 ----a-w- c:\windows\system32\avifil32.dll
2009-06-10 07:21 . 2004-08-05 04:00 2066432 ----a-w- c:\windows\system32\mstscax.dll
2009-06-10 06:15 . 2004-08-05 04:00 132096 ----a-w- c:\windows\system32\wkssvc.dll
2009-06-03 19:10 . 2004-08-05 04:00 1297408 ----a-w- c:\windows\system32\quartz.dll
.
------- Sigcheck -------
[-] 2004-08-05 04:00 14336 1BD6C2F707A275CB7C16FD99FE0F31CA c:\windows\$NtServicePackUninstall$\svchost.exe
[-] 2008-04-14 02:34 14336 E4BDF223CD75478BF44567B4D5C2634D c:\windows\ServicePackFiles\i386\svchost.exe
[-] 2008-04-14 02:34 14336 E4BDF223CD75478BF44567B4D5C2634D c:\windows\system32\svchost.exe
[-] 2008-04-14 02:34 14336 E4BDF223CD75478BF44567B4D5C2634D c:\windows\system32\dllcache\cache\svchost.exe
[-] 2005-03-02 18:20 578048 C34920EB988CE98910BD6B0417F334EB c:\windows\$hf_mig$\KB890859\SP2QFE\user32.dll
[-] 2007-03-08 15:50 579072 4D88AAF39ADABFE45958EA1384E2C4FF c:\windows\$hf_mig$\KB925902\SP2QFE\user32.dll
[-] 2007-03-08 15:37 578560 753354F594809A9B96F73999B435A533 c:\windows\$NtServicePackUninstall$\user32.dll
[-] 2004-08-05 04:00 578048 E46FB493E3B33704F0715020CF52106B c:\windows\$NtUninstallKB890859$\user32.dll
[-] 2005-03-02 18:10 578048 0DF75FB73F705B011630159A43D7C354 c:\windows\$NtUninstallKB925902$\user32.dll
[-] 2008-04-14 02:33 579584 E853F84D3CE2FAA2A802E33CF89AC023 c:\windows\ServicePackFiles\i386\user32.dll
[-] 2008-04-14 02:33 579584 E853F84D3CE2FAA2A802E33CF89AC023 c:\windows\system32\user32.dll
[-] 2008-04-14 02:33 579584 E853F84D3CE2FAA2A802E33CF89AC023 c:\windows\system32\dllcache\cache\user32.dll
[-] 2004-08-05 04:00 82944 BC41F51A39D3B255805FDB759B7814AE c:\windows\$NtServicePackUninstall$\ws2_32.dll
[-] 2008-04-14 02:33 82432 FB836F9E62D82904C983AD21296A5D9C c:\windows\ServicePackFiles\i386\ws2_32.dll
[-] 2008-04-14 02:33 82432 FB836F9E62D82904C983AD21296A5D9C c:\windows\system32\ws2_32.dll
[-] 2008-04-14 02:33 82432 FB836F9E62D82904C983AD21296A5D9C c:\windows\system32\dllcache\cache\ws2_32.dll
[-] 2005-10-21 03:39 665600 D327378CEEF9A141C7352691FC30A0DA c:\windows\$hf_mig$\KB905915\SP2QFE\wininet.dll
[-] 2007-03-23 09:29 823296 375B58A68A016546535A84060092325C c:\windows\$hf_mig$\KB931768-IE7\SP2QFE\wininet.dll
[-] 2007-04-25 08:26 823808 47DDAD237F60729DEA2B9E0E2382B58F c:\windows\$hf_mig$\KB933566-IE7\SP2QFE\wininet.dll
[-] 2007-06-27 14:14 824320 7201D19B81883B57D5FFE8EBB5A83E8B c:\windows\$hf_mig$\KB937143-IE7\SP2QFE\wininet.dll
[-] 2007-08-20 09:49 825344 2DD1B0F579C80562EDCB8848FF7EA9F6 c:\windows\$hf_mig$\KB939653-IE7\SP2QFE\wininet.dll
[-] 2007-10-10 23:22 825344 871AE10D6AE8877E9636AE5017953D52 c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\wininet.dll
[-] 2007-12-07 01:42 825344 F4FD487241D3AC291046A22CEBD2CF71 c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\wininet.dll
[-] 2008-03-01 12:34 827392 5A0093F59B505C008ED0CEE615563C72 c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\wininet.dll
[-] 2008-04-23 07:19 827392 78D3D2B0BE6AD3E6D82CCB115CF74310 c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\wininet.dll
[-] 2008-06-23 15:40 827904 52589BAE67DD9859724287372668690B c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\wininet.dll
[-] 2008-08-26 09:10 827904 4B0E70D44297877A313045BD059770E1 c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\wininet.dll
[-] 2008-10-16 19:33 827904 37D1A1BFE3D9904F2C3D11592456F9C0 c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\wininet.dll
[-] 2008-12-20 23:47 827904 4E192082A5FCE9EF19198A24CDEA3442 c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\wininet.dll
[-] 2009-03-03 00:15 828416 39F71B559A97ED722F939A0EA7235323 c:\windows\$hf_mig$\KB963027-IE7\SP3QFE\wininet.dll
[-] 2009-04-29 04:37 828928 754097815B575A721AB58B1C55476805 c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\wininet.dll
[-] 2009-05-13 05:08 915456 722E8ABB39238BAD1B1E13D97C49DB4D c:\windows\$hf_mig$\KB969897-IE8\SP3QFE\wininet.dll
[-] 2009-07-03 17:01 915456 B0249F1B9F68E55CB7D2656339D13323 c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\wininet.dll
[-] 2004-08-05 04:00 660480 58FE94EF42E074F4CAD8BF02E70E6478 c:\windows\$NtUninstallKB905915$\wininet.dll
[-] 2005-10-21 03:41 662528 E41E8FDF62CF20F2E2B16D800D96EB51 c:\windows\$NtUninstallKB912945$\wininet.dll
[-] 2006-01-09 18:02 666112 5404E2EAD19D7E2A5C4086015062343C c:\windows\$NtUninstallKB918899$\wininet.dll
[-] 2006-06-23 11:25 668672 582953780721AC5D38F98CAB229EC7B9 c:\windows\$NtUninstallKB922760$\wininet.dll
[-] 2006-09-14 08:38 668672 B8B6F05885A6F42724E8D6BFEDE6BD3F c:\windows\ie7\wininet.dll
[-] 2006-11-07 20:03 818688 92995334F993E6E49C25C6D02EC04401 c:\windows\ie7updates\KB928090-IE7\wininet.dll
[-] 2007-01-12 08:27 822784 BE43D00D802C92F01C8CC952C6F483F8 c:\windows\ie7updates\KB931768-IE7\wininet.dll
[-] 2007-02-27 13:26 822784 75DE73E328E300CAED5965FAEA2F5D3F c:\windows\ie7updates\KB933566-IE7\wininet.dll
[-] 2007-04-25 07:40 822784 2C138AB59E2FFA06E8952AE656E443C5 c:\windows\ie7updates\KB937143-IE7\wininet.dll
[-] 2007-06-27 13:24 823808 2274862267D7445E7010D9AF826E89C3 c:\windows\ie7updates\KB939653-IE7\wininet.dll
[-] 2007-08-20 09:59 824832 F6DFCEED3A7AA4C9EEB966D3F1ADC70A c:\windows\ie7updates\KB942615-IE7\wininet.dll
[-] 2007-10-10 23:49 824832 BC5119C53BDD48DABC628D448A3BDCCB c:\windows\ie7updates\KB944533-IE7\wininet.dll
[-] 2007-12-07 02:08 824832 4FC90BECE54FAC81B0090B94E27BFB6B c:\windows\ie7updates\KB947864-IE7\wininet.dll
[-] 2008-03-01 12:58 826368 8E027981DDFFA690D456FE18B37415A0 c:\windows\ie7updates\KB950759-IE7\wininet.dll
[-] 2008-04-23 04:16 826368 02D6AABD5F5A32C61478B5CDFE50E4A8 c:\windows\ie7updates\KB953838-IE7\wininet.dll
[-] 2008-06-23 16:28 826368 AC0BD61DC2C64906FBFE50E005FEFA2C c:\windows\ie7updates\KB956390-IE7\wininet.dll
[-] 2008-08-26 08:11 826368 E30CACD98479B36A3DBFA3267BF62DD0 c:\windows\ie7updates\KB958215-IE7\wininet.dll
[-] 2008-10-16 20:18 826368 CFBFA47415E85018E2CDC509E5E3D011 c:\windows\ie7updates\KB961260-IE7\wininet.dll
[-] 2008-12-20 22:47 826368 0551C946E305CEE0A79BA744DC141BFC c:\windows\ie7updates\KB963027-IE7\wininet.dll
[-] 2009-03-03 00:13 826368 68A2567FDD62AE7E31D8A885C5173EF9 c:\windows\ie7updates\KB969897-IE7\wininet.dll
[-] 2009-04-29 04:45 827392 08EFECB3F17F38F23F14148D374ACBC9 c:\windows\ie8\wininet.dll
[-] 2009-03-08 02:34 914944 6CE32F7778061CCC5814D5E0F282D369 c:\windows\ie8updates\KB969897-IE8\wininet.dll
[-] 2009-05-13 05:04 915456 FEADC209186574B0471D694FF5634F70 c:\windows\ie8updates\KB972260-IE8\wininet.dll
[-] 2008-04-14 02:33 670208 4A6E04EA20F48D750D9BFED8600D516B c:\windows\ServicePackFiles\i386\wininet.dll
[-] 2009-05-13 05:04 915456 FEADC209186574B0471D694FF5634F70 c:\windows\SoftwareDistribution\Download\40bc3e8679e1bad2a30cd389d408d57e\SP3GDR\wininet.dll
[-] 2009-05-13 05:08 915456 722E8ABB39238BAD1B1E13D97C49DB4D c:\windows\SoftwareDistribution\Download\40bc3e8679e1bad2a30cd389d408d57e\SP3QFE\wininet.dll
[-] 2009-07-03 16:57 915456 995E2754D7FB0203A45351A1376836ED c:\windows\system32\wininet.dll
[-] 2009-07-03 16:57 915456 995E2754D7FB0203A45351A1376836ED c:\windows\system32\dllcache\wininet.dll
[-] 2009-07-03 16:57 915456 995E2754D7FB0203A45351A1376836ED c:\windows\system32\dllcache\cache\wininet.dll
[-] 2005-03-14 01:17 359936 6129E70F3D2F1E60860C930EBEAF92C2 c:\windows\$hf_mig$\KB893066\SP2QFE\tcpip.sys
[-] 2006-04-20 12:18 360576 B2220C618B42A2212A59D91EBD6FC4B4 c:\windows\$hf_mig$\KB917953\SP2QFE\tcpip.sys
[-] 2007-10-30 16:53 360832 64798ECFA43D78C7178375FCDD16D8C8 c:\windows\$hf_mig$\KB941644\SP2QFE\tcpip.sys
[-] 2008-06-20 10:44 360960 744E57C99232201AE98C49168B918F48 c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[-] 2008-06-20 11:51 361600 9AEFA14BD6B182D61E3119FA5F436D3D c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[-] 2008-06-20 11:59 361600 AD978A1B783B5719720CFF204B666C8E c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[-] 2008-06-20 10:45 360320 2A5554FC5B1E04E131230E3CE035C3F9 c:\windows\$NtServicePackUninstall$\tcpip.sys
[-] 2004-08-05 04:00 359040 9F4B36614A0FC234525BA224957DE55C c:\windows\$NtUninstallKB893066$\tcpip.sys
[-] 2005-03-14 00:55 359808 0E66B538096A6529D1AC66E78EB0D5C8 c:\windows\$NtUninstallKB917953$\tcpip.sys
[-] 2006-04-20 11:51 359808 1DBF125862891817F374F407626967F4 c:\windows\$NtUninstallKB941644$\tcpip.sys
[-] 2008-04-13 19:20 361344 93EA8D04EC73A85DB02EB8805988F733 c:\windows\$NtUninstallKB951748$\tcpip.sys
[-] 2007-10-30 17:20 360064 90CAFF4B094573449A0872A0F919B178 c:\windows\$NtUninstallKB951748_0$\tcpip.sys
[-] 2008-04-13 19:20 361344 93EA8D04EC73A85DB02EB8805988F733 c:\windows\ServicePackFiles\i386\tcpip.sys
[-] 2008-06-20 11:51 361600 9AEFA14BD6B182D61E3119FA5F436D3D c:\windows\system32\dllcache\tcpip.sys
[-] 2008-06-20 11:51 361600 9AEFA14BD6B182D61E3119FA5F436D3D c:\windows\system32\dllcache\cache\tcpip.sys
[-] 2008-06-20 11:51 361600 9AEFA14BD6B182D61E3119FA5F436D3D c:\windows\system32\drivers\tcpip.sys
[-] 2004-08-05 04:00 506368 D2DE785AEAB0BB8CA4C14A8A199DBE4E c:\windows\$NtServicePackUninstall$\winlogon.exe
[-] 2008-04-14 02:34 512000 DD73D6B9F6B4CB630CF35B438B540174 c:\windows\ServicePackFiles\i386\winlogon.exe
[-] 2008-04-14 02:34 512000 DD73D6B9F6B4CB630CF35B438B540174 c:\windows\system32\winlogon.exe
[-] 2008-04-14 02:34 512000 DD73D6B9F6B4CB630CF35B438B540174 c:\windows\system32\dllcache\cache\winlogon.exe
[-] 2004-08-05 04:00 182912 558635D3AF1C7546D26067D5D9B6959E c:\windows\$NtServicePackUninstall$\ndis.sys
[-] 2008-04-13 19:20 182656 1DF7F42665C94B825322FAE71721130D c:\windows\ServicePackFiles\i386\ndis.sys
[-] 2008-04-13 19:20 182656 1DF7F42665C94B825322FAE71721130D c:\windows\system32\dllcache\cache\ndis.sys
[-] 2008-04-13 19:20 182656 1DF7F42665C94B825322FAE71721130D c:\windows\system32\drivers\ndis.sys
[-] 2004-08-05 04:00 29056 4448006B6BC60E6C027932CFC38D6855 c:\windows\$NtServicePackUninstall$\ip6fw.sys
[-] 2008-04-13 18:53 36608 3BB22519A194418D5FEC05D800A19AD0 c:\windows\ServicePackFiles\i386\ip6fw.sys
[-] 2008-04-13 18:53 36608 3BB22519A194418D5FEC05D800A19AD0 c:\windows\system32\dllcache\cache\ip6fw.sys
[-] 2008-04-13 18:53 36608 3BB22519A194418D5FEC05D800A19AD0 c:\windows\system32\drivers\ip6fw.sys
[-] 2005-03-02 18:13 2059008 5311776074B6C13F983DC75BAEAC9C0C c:\windows\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe
[-] 2006-12-19 18:45 2061440 8B039EFBE4C9AA23F152FFA0E238B8FA c:\windows\$hf_mig$\KB929338\SP2QFE\ntkrnlpa.exe
[-] 2007-02-28 16:08 2061440 7A56A64EB50399613587E90292DD2AAB c:\windows\$hf_mig$\KB931784\SP2QFE\ntkrnlpa.exe
[-] 2009-02-09 11:17 2068224 ED5E20AE4AC5A63A4FF43FFE704A5153 c:\windows\$hf_mig$\KB956572\SP3QFE\ntkrnlpa.exe
[-] 2008-08-14 17:26 2068096 755B50949D0DBC0F0136B0DB58765331 c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlpa.exe
[-] 2007-02-28 16:02 2017792 11C942F6519575079BAA9F14AEE35E88 c:\windows\$NtServicePackUninstall$\ntkrnlpa.exe
[-] 2004-08-03 22:49 2017280 35567C8C50986C2BC5C3EFD79CB045E4 c:\windows\$NtUninstallKB890859$\ntkrnlpa.exe
[-] 2005-03-02 18:08 2017280 50B3A210B6FA8D3089A36A32E7D8B21F c:\windows\$NtUninstallKB929338$\ntkrnlpa.exe
[-] 2006-12-19 18:22 2017792 2F8266048EEE98D49B8E41C4C630E42A c:\windows\$NtUninstallKB931784$\ntkrnlpa.exe
[-] 2008-08-14 13:23 2025984 F2DEC52ED964AD57220B1F5AA32B5C61 c:\windows\$NtUninstallKB956572$\ntkrnlpa.exe
[-] 2008-04-14 02:07 2025984 92E82482CDB39929CF7B541A9648AFAE c:\windows\$NtUninstallKB956841$\ntkrnlpa.exe
[-] 2009-02-10 17:06 2068096 F751E041E682F53EAF34F7FAEA78994D c:\windows\Driver Cache\i386\ntkrnlpa.exe
[-] 2008-04-14 02:07 2067968 B71A8F101CEFAF82FC5EC16130A54A3F c:\windows\ServicePackFiles\i386\ntkrnlpa.exe
[-] 2009-02-09 11:23 2025984 C9E530E1258352CC8689173AEFD3A3CF c:\windows\system32\ntkrnlpa.exe
[-] 2009-02-10 17:06 2068096 F751E041E682F53EAF34F7FAEA78994D c:\windows\system32\dllcache\ntkrnlpa.exe
[-] 2009-02-09 11:23 2025984 C9E530E1258352CC8689173AEFD3A3CF c:\windows\system32\dllcache\cache\ntkrnlpa.exe
[-] 2005-03-02 18:13 2181632 3E2A0A4A0C0B19FC113618A9562A3B2A c:\windows\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe
[-] 2006-12-19 18:45 2184064 1F3FA2065E6E043A1D82A487B5DA309C c:\windows\$hf_mig$\KB929338\SP2QFE\ntoskrnl.exe
[-] 2007-02-28 16:08 2184192 8E244108562E0E452EB68DFF64CB08A9 c:\windows\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe
[-] 2009-02-10 17:16 2191232 BEF458B8424553279E95E250D1E0CE7E c:\windows\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe
[-] 2008-08-14 17:26 2191232 D79210549BBF09B7638E860440504299 c:\windows\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe
[-] 2007-02-28 16:02 2138112 C7A39C47C064AE50417A944B60F37B6A c:\windows\$NtServicePackUninstall$\ntoskrnl.exe
[-] 2004-08-03 22:48 2150400 36F32A5A83DF734E022734D93860A9A4 c:\windows\$NtUninstallKB890859$\ntoskrnl.exe
[-] 2005-03-02 18:07 2137600 E75F7AA5A33479F29C636FD0890F5762 c:\windows\$NtUninstallKB929338$\ntoskrnl.exe
[-] 2006-12-19 18:22 2138112 E2316621E46A445ACAFFE3D5640167DC c:\windows\$NtUninstallKB931784$\ntoskrnl.exe
[-] 2008-08-14 13:23 2147328 E422F0930804A5D6E697E5D7DBFD9863 c:\windows\$NtUninstallKB956572$\ntoskrnl.exe
[-] 2008-04-14 02:07 2147328 B10C36956EB7A8B1586DBE3B43875280 c:\windows\$NtUninstallKB956841$\ntoskrnl.exe
[-] 2009-02-09 11:24 2191104 AB896577F35CF5FED7A9F87D3C3205ED c:\windows\Driver Cache\i386\ntoskrnl.exe
[-] 2008-04-14 02:08 2191104 099D639DA1EF6968D4E41795BB507E6B c:\windows\ServicePackFiles\i386\ntoskrnl.exe
[-] 2009-02-09 11:23 2147328 907C6FCD8D5FB812D74C204060911EA6 c:\windows\system32\ntoskrnl.exe
[-] 2009-02-09 11:24 2191104 AB896577F35CF5FED7A9F87D3C3205ED c:\windows\system32\dllcache\ntoskrnl.exe
[-] 2009-02-09 11:23 2147328 907C6FCD8D5FB812D74C204060911EA6 c:\windows\system32\dllcache\cache\ntoskrnl.exe
[-] 2008-04-14 02:34 1037824 F2317622D29F9FF0F88AEECD5F60F0DD c:\windows\explorer.exe
[-] 2007-06-13 13:10 1037312 B795475444D6D57A572C14B9E1A29839 c:\windows\$hf_mig$\KB938828\SP2QFE\explorer.exe
[-] 2007-06-13 13:22 1037312 D0288319660EDCFED07C7E74C4EA38A5 c:\windows\$NtServicePackUninstall$\explorer.exe
[-] 2004-08-05 04:00 1036288 4C33E5B9A6197B6ED215F6CFBA0A2DAA c:\windows\$NtUninstallKB938828$\explorer.exe
[-] 2008-04-14 02:34 1037824 F2317622D29F9FF0F88AEECD5F60F0DD c:\windows\ServicePackFiles\i386\explorer.exe
[-] 2008-04-14 02:34 1037824 F2317622D29F9FF0F88AEECD5F60F0DD c:\windows\system32\dllcache\cache\explorer.exe
[-] 2009-02-09 11:16 111104 62789101F9C2401ED598AA2CDE7450C0 c:\windows\$hf_mig$\KB956572\SP3QFE\services.exe
[-] 2004-08-05 04:00 108544 732E0B1ABAACE15D80EC19056B0A2AF9 c:\windows\$NtServicePackUninstall$\services.exe
[-] 2008-04-14 02:34 109056 54CB50058851D95E56EC70D09F70857F c:\windows\$NtUninstallKB956572$\services.exe
[-] 2008-04-14 02:34 109056 54CB50058851D95E56EC70D09F70857F c:\windows\ServicePackFiles\i386\services.exe
[-] 2009-02-09 11:23 111104 C3FB1D70CB88722267949694BA51759E c:\windows\system32\services.exe
[-] 2009-02-09 11:23 111104 C3FB1D70CB88722267949694BA51759E c:\windows\system32\dllcache\services.exe
[-] 2009-02-09 11:23 111104 C3FB1D70CB88722267949694BA51759E c:\windows\system32\dllcache\cache\services.exe
[-] 2004-08-05 04:00 13312 9F3744A5C6F49291A7A685040A013399 c:\windows\$NtServicePackUninstall$\lsass.exe
[-] 2008-04-14 02:34 13312 91E6024D6D4DCDECDB36C43ECF9BBECB c:\windows\ServicePackFiles\i386\lsass.exe
[-] 2008-04-14 02:34 13312 91E6024D6D4DCDECDB36C43ECF9BBECB c:\windows\system32\lsass.exe
[-] 2008-04-14 02:34 13312 91E6024D6D4DCDECDB36C43ECF9BBECB c:\windows\system32\dllcache\cache\lsass.exe
[-] 2004-08-05 04:00 15360 5584247B568C2E53934873F4B655FE6A c:\windows\$NtServicePackUninstall$\ctfmon.exe
[-] 2008-04-14 02:33 15360 59DC5BB82E4C8E0B3EADCFDBC44BA6E4 c:\windows\ServicePackFiles\i386\ctfmon.exe
[-] 2008-04-14 02:33 15360 59DC5BB82E4C8E0B3EADCFDBC44BA6E4 c:\windows\system32\ctfmon.exe
[-] 2008-04-14 02:33 15360 59DC5BB82E4C8E0B3EADCFDBC44BA6E4 c:\windows\system32\dllcache\cache\ctfmon.exe
[-] 2005-06-11 00:17 57856 AD3D9D191AEA7B5445FE1D82FFBB4788 c:\windows\$hf_mig$\KB896423\SP2QFE\spoolsv.exe
[-] 2005-06-10 23:53 57856 DA81EC57ACD4CDC3D4C51CF3D409AF9F c:\windows\$NtServicePackUninstall$\spoolsv.exe
[-] 2004-08-05 04:00 57856 B4EF928E4FAD79364A80ACBA6D999934 c:\windows\$NtUninstallKB896423$\spoolsv.exe
[-] 2008-04-14 02:34 57856 460E4CE148BD07218DA0B6A3D31885A9 c:\windows\ServicePackFiles\i386\spoolsv.exe
[-] 2008-04-14 02:34 57856 460E4CE148BD07218DA0B6A3D31885A9 c:\windows\system32\spoolsv.exe
[-] 2008-04-14 02:34 57856 460E4CE148BD07218DA0B6A3D31885A9 c:\windows\system32\dllcache\cache\spoolsv.exe
[-] 2004-08-05 04:00 25088 D6D65EA32B190401B57EDB6706F29669 c:\windows\$NtServicePackUninstall$\userinit.exe
[-] 2008-04-14 02:34 26624 E74DDB12188C2FF57A78624DBF7332FC c:\windows\ServicePackFiles\i386\userinit.exe
[-] 2008-04-14 02:34 26624 E74DDB12188C2FF57A78624DBF7332FC c:\windows\system32\userinit.exe
[-] 2008-04-14 02:34 26624 E74DDB12188C2FF57A78624DBF7332FC c:\windows\system32\dllcache\cache\userinit.exe
[-] 2004-08-05 04:00 297984 7D521B8CF926459E270D18C559323815 c:\windows\$NtServicePackUninstall$\termsrv.dll
[-] 2008-04-14 02:33 297984 710BC85A8C22626EE094439E3EA0D38C c:\windows\ServicePackFiles\i386\termsrv.dll
[-] 2008-04-14 02:33 297984 710BC85A8C22626EE094439E3EA0D38C c:\windows\system32\termsrv.dll
[-] 2008-04-14 02:33 297984 710BC85A8C22626EE094439E3EA0D38C c:\windows\system32\dllcache\cache\termsrv.dll
[-] 2006-07-05 10:58 1050112 FB85EF2A6713E3A58A497E093626B93C c:\windows\$hf_mig$\KB917422\SP2QFE\kernel32.dll
[-] 2007-04-16 16:11 1051136 62E3F0E9ABFCBCEE62C51546F622C455 c:\windows\$hf_mig$\KB935839\SP2QFE\kernel32.dll
[-] 2009-03-21 14:00 1056768 C3AF0EEE26B59484E674673E3016AAB7 c:\windows\$hf_mig$\KB959426\SP3QFE\kernel32.dll
[-] 2007-04-16 15:53 1049600 6F1FE2AE7B22EB9CED1BFF533C9455EA c:\windows\$NtServicePackUninstall$\kernel32.dll
[-] 2004-08-05 04:00 1048576 7830E20C74611281B1BDAE5888CD50F5 c:\windows\$NtUninstallKB917422$\kernel32.dll
[-] 2006-07-05 10:56 1049088 CE4AF1FA47A29ADF97CB107775CE395C c:\windows\$NtUninstallKB935839$\kernel32.dll
[-] 2008-04-14 02:33 1054720 3AC8886DFA5AB641417DF4D3B7F5512E c:\windows\$NtUninstallKB959426$\kernel32.dll
[-] 2008-04-14 02:33 1054720 3AC8886DFA5AB641417DF4D3B7F5512E c:\windows\ServicePackFiles\i386\kernel32.dll
[-] 2009-03-21 14:07 1054720 98F08549604D090B6B2514AF845F329F c:\windows\system32\kernel32.dll
[-] 2009-03-21 14:07 1054720 98F08549604D090B6B2514AF845F329F c:\windows\system32\dllcache\kernel32.dll
[-] 2009-03-21 14:07 1054720 98F08549604D090B6B2514AF845F329F c:\windows\system32\dllcache\cache\kernel32.dll
[-] 2004-08-05 04:00 17408 B02E4DDBE0E98F42F3B61292DDB3A104 c:\windows\$NtServicePackUninstall$\powrprof.dll
[-] 2008-04-14 02:33 17408 9F2C862E39BF8E8FC51C3F6A6BCEB415 c:\windows\ServicePackFiles\i386\powrprof.dll
[-] 2008-04-14 02:33 17408 9F2C862E39BF8E8FC51C3F6A6BCEB415 c:\windows\system32\powrprof.dll
[-] 2008-04-14 02:33 17408 9F2C862E39BF8E8FC51C3F6A6BCEB415 c:\windows\system32\dllcache\cache\powrprof.dll
[-] 2004-08-05 04:00 110080 39EE5FAF56260EBB8D77A08F525EBBB4 c:\windows\$NtServicePackUninstall$\imm32.dll
[-] 2008-04-14 02:33 110080 0469B73DB32E5520F342C5E163AA3CCA c:\windows\ServicePackFiles\i386\imm32.dll
[-] 2008-04-14 02:33 110080 0469B73DB32E5520F342C5E163AA3CCA c:\windows\system32\imm32.dll
[-] 2008-04-14 02:33 110080 0469B73DB32E5520F342C5E163AA3CCA c:\windows\system32\dllcache\cache\imm32.dll
[-] 2005-11-23 13:52 3016192 6D215267660530629AE04032B7FFC610 c:\windows\$hf_mig$\KB905915\SP2QFE\mshtml.dll
[-] 2007-03-23 01:29 3582976 0CF276F7C5D51F2BB92CCEF4A770EA30 c:\windows\$hf_mig$\KB931768-IE7\SP2QFE\mshtml.dll
[-] 2007-05-08 09:04 3584000 B672A6772187AE5E63762A1B4EAAF2CA c:\windows\$hf_mig$\KB933566-IE7\SP2QFE\mshtml.dll
[-] 2007-07-18 20:58 3584000 CD3ED432FE932AFBB9AC55A57ADFE0D0 c:\windows\$hf_mig$\KB937143-IE7\SP2QFE\mshtml.dll
[-] 2007-08-20 09:49 3592192 D9481E937D5BE0B2D5DBCD87745E925A c:\windows\$hf_mig$\KB939653-IE7\SP2QFE\mshtml.dll
[-] 2007-10-30 23:40 3593216 EB4E53C96D5FB4A9A3F1EAEB782D8862 c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\mshtml.dll
[-] 2007-12-07 01:42 3593216 906D0EC58033A9475BF8C7F885B7ED45 c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\mshtml.dll
[-] 2008-03-01 12:34 3593216 B22EC9AE82E19818077E286FF1B82B72 c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\mshtml.dll
[-] 2008-04-23 07:19 3593728 EBF0440323874DDF97EF0CEC2D6DC9F4 c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\mshtml.dll
[-] 2008-06-23 15:40 3594240 A01EF08ACFF24D6E4987804BFD306AA4 c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mshtml.dll
[-] 2008-08-26 09:10 3594752 0F345A2FE55C3DC9693AAAF2E983F4AD c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtml.dll
[-] 2008-10-16 19:33 3595264 EB75C0C66C633D0EFD0176450F8857F8 c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mshtml.dll
[-] 2008-12-13 06:27 3594752 CB7922B3AD4BC5BBEDA130F6C9E0656A c:\windows\$hf_mig$\KB960714-IE7\SP2QFE\mshtml.dll
[-] 2009-01-16 16:20 3596288 F386435C5E0A5D86E9F90B659D4F6075 c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\mshtml.dll
[-] 2009-02-21 06:48 3596800 D79AEC545A98057155099FB69BB3C4D3 c:\windows\$hf_mig$\KB963027-IE7\SP3QFE\mshtml.dll
[-] 2009-04-29 04:37 3598336 246F148CD2E4F5AE164C1890D0A06420 c:\windows\$hf_mig$\KB969897-IE7\SP3QFE\mshtml.dll
[-] 2009-05-13 05:07 5936128 C153CCC6BA78182DFA3CD23086EA5BDB c:\windows\$hf_mig$\KB969897-IE8\SP3QFE\mshtml.dll
[-] 2009-07-19 13:06 5938176 19C9FC84B91467171674D76EB0224D48 c:\windows\$hf_mig$\KB972260-IE8\SP3QFE\mshtml.dll
[-] 2004-08-05 04:00 3003392 3FE8D0C4C2F3B928192BD06DCEE34B32 c:\windows\$NtUninstallKB905915$\mshtml.dll
[-] 2005-11-24 00:08 3013632 2976260E57E506A162D8BBA87B520961 c:\windows\$NtUninstallKB912945$\mshtml.dll
[-] 2006-02-01 02:54 3035648 1138DFC763E237BEC92AE086AC5FED2D c:\windows\$NtUninstallKB918899$\mshtml.dll
[-] 2006-07-28 11:30 3079168 DC9A660A7E39F90903B79E893B121FC9 c:\windows\$NtUninstallKB922760$\mshtml.dll
[-] 2006-09-14 08:38 3079680 DDF783ED4C24E7126E3FF25AD07CB25A c:\windows\ie7\mshtml.dll
[-] 2006-11-07 20:03 3577856 CBF04597F9CF7739E572276A2698FDD3 c:\windows\ie7updates\KB928090-IE7\mshtml.dll
[-] 2007-01-12 08:27 3580416 5D45318804A30CE9D6EA83066E84B4A7 c:\windows\ie7updates\KB931768-IE7\mshtml.dll
[-] 2007-02-27 13:25 3581952 FC38B18A1AD106289BF4FEFC2670A9B5 c:\windows\ie7updates\KB933566-IE7\mshtml.dll
[-] 2007-05-08 08:59 3583488 919232D791120960D3DA5F5880CC261C c:\windows\ie7updates\KB937143-IE7\mshtml.dll
[-] 2007-07-19 06:58 3583488 5CA5101D0606245574D84B0520CFE780 c:\windows\ie7updates\KB939653-IE7\mshtml.dll
[-] 2007-08-20 09:59 3584512 12357B36CB76D754FB9AE7822A64A03D c:\windows\ie7updates\KB942615-IE7\mshtml.dll
[-] 2007-10-30 23:23 3590656 89397AFC934A509580FF089035E71DA8 c:\windows\ie7updates\KB944533-IE7\mshtml.dll
[-] 2007-12-08 05:08 3592192 DA88BCD1CA467FE0464E896D01110E5A c:\windows\ie7updates\KB947864-IE7\mshtml.dll
[-] 2008-03-01 16:28 3591680 F745B291067B273909D87D9D84857F4D c:\windows\ie7updates\KB950759-IE7\mshtml.dll
[-] 2008-04-23 20:16 3591680 D7A36FCE62649BD7146053C5E982EBF3 c:\windows\ie7updates\KB953838-IE7\mshtml.dll
[-] 2008-06-24 08:28 3592192 03F74B51CC156B0E78D998DDF0EF31C1 c:\windows\ie7updates\KB956390-IE7\mshtml.dll
[-] 2008-08-27 09:11 3593216 3CCDB836BBAB800FDED3181AF7EED38F c:\windows\ie7updates\KB958215-IE7\mshtml.dll
[-] 2008-10-17 00:48 3593216 74BF6087086364FA96BF047DA7C9EB38 c:\windows\ie7updates\KB960714-IE7\mshtml.dll
[-] 2008-12-13 06:37 3593216 0AFB982529328ABAF64EFC6C85E0F09C c:\windows\ie7updates\KB961260-IE7\mshtml.dll
[-] 2009-01-16 20:15 3594752 0975BFBBCF2639C8BB5C0790F020DE6C c:\windows\ie7updates\KB963027-IE7\mshtml.dll
[-] 2009-02-20 17:10 3595264 78068F040272D5EEF5198B3C75DD4D99 c:\windows\ie7updates\KB969897-IE7\mshtml.dll
[-] 2009-04-29 04:45 3596288 9B6478E6F9E83A04B6DA76FA61BB1FA7 c:\windows\ie8\mshtml.dll
[-] 2009-03-08 02:41 5937152 D469A0EBA2EF5C6BEE8065B7E3196E5E c:\windows\ie8updates\KB969897-IE8\mshtml.dll
[-] 2009-05-13 05:04 5936128 F73E32A6674F1D59D6D88C88D2536BAC c:\windows\ie8updates\KB972260-IE8\mshtml.dll
[-] 2008-04-14 02:33 3066880 C4153F037157C7BE7C54FD88887F027D c:\windows\ServicePackFiles\i386\mshtml.dll
[-] 2009-05-13 05:04 5936128 F73E32A6674F1D59D6D88C88D2536BAC c:\windows\SoftwareDistribution\Download\40bc3e8679e1bad2a30cd389d408d57e\SP3GDR\mshtml.dll
[-] 2009-05-13 05:07 5936128 C153CCC6BA78182DFA3CD23086EA5BDB c:\windows\SoftwareDistribution\Download\40bc3e8679e1bad2a30cd389d408d57e\SP3QFE\mshtml.dll
[-] 2009-07-19 13:15 5937152 29AA8EA1DAA83DBEC54916669BF09077 c:\windows\system32\mshtml.dll
[-] 2009-07-19 13:15 5937152 29AA8EA1DAA83DBEC54916669BF09077 c:\windows\system32\dllcache\mshtml.dll
[-] 2009-07-19 13:15 5937152 29AA8EA1DAA83DBEC54916669BF09077 c:\windows\system32\dllcache\cache\mshtml.dll
[-] 2004-08-03 22:45 25216 E798705E8DC7FAB596EF6BFDF167E007 c:\windows\$NtServicePackUninstall$\kbdclass.sys
[-] 2008-04-14 02:05 25216 16813155807C6881F4BFBF6657424659 c:\windows\ServicePackFiles\i386\kbdclass.sys
[-] 2008-04-14 02:05 25216 16813155807C6881F4BFBF6657424659 c:\windows\system32\dllcache\kbdclass.sys
[-] 2008-04-14 02:05 25216 16813155807C6881F4BFBF6657424659 c:\windows\system32\dllcache\cache\kbdclass.sys
[-] 2008-04-14 02:05 25216 16813155807C6881F4BFBF6657424659 c:\windows\system32\drivers\kbdclass.sys
[-] 2008-04-14 02:05 25216 16813155807C6881F4BFBF6657424659 c:\windows\system32\ReinstallBackups\0003\DriverFiles\i386\kbdclass.sys
[-] 2004-08-05 04:00 851968 19428638D8F4440F67519BD03A623BBB c:\windows\$NtServicePackUninstall$\comres.dll
[-] 2008-04-14 02:33 851968 F4B7146C7EED6C4E158DCD9B5266C25A c:\windows\ServicePackFiles\i386\comres.dll
[-] 2008-04-14 02:33 851968 F4B7146C7EED6C4E158DCD9B5266C25A c:\windows\system32\comres.dll
[-] 2008-04-14 02:33 851968 F4B7146C7EED6C4E158DCD9B5266C25A c:\windows\system32\dllcache\cache\comres.dll
[-] 2004-08-05 04:00 22016 8C97E0E3DAA99659D4F4B44CC1F282A6 c:\windows\$NtServicePackUninstall$\lpk.dll
[-] 2008-04-14 02:33 22016 982B2C204337C3B12211E1E1D9BA8C9C c:\windows\ServicePackFiles\i386\lpk.dll
[-] 2008-04-14 02:33 22016 982B2C204337C3B12211E1E1D9BA8C9C c:\windows\system32\lpk.dll
[-] 2008-04-14 02:33 22016 982B2C204337C3B12211E1E1D9BA8C9C c:\windows\system32\dllcache\cache\lpk.dll
[-] 2004-08-04 21:00 4224 DA1F27D85E0D1525F6621372E7B685E9 c:\windows\system32\dllcache\beep.sys
[-] 2004-08-04 21:00 4224 DA1F27D85E0D1525F6621372E7B685E9 c:\windows\system32\dllcache\cache\beep.sys
[-] 2004-08-04 21:00 4224 DA1F27D85E0D1525F6621372E7B685E9 c:\windows\system32\drivers\beep.sys
[-] 2004-08-04 21:00 2944 73C1E1F395918BC2C6DD67AF7591A3AD c:\windows\system32\dllcache\null.sys
[-] 2004-08-04 21:00 2944 73C1E1F395918BC2C6DD67AF7591A3AD c:\windows\system32\dllcache\cache\null.sys
[-] 2004-08-04 21:00 2944 73C1E1F395918BC2C6DD67AF7591A3AD c:\windows\system32\drivers\null.sys
[-] 2006-02-15 00:30 142464 1EE7B434BA961EF845DE136224C30FEC c:\windows\$hf_mig$\KB900485\SP2QFE\aec.sys
[-] 2006-02-15 00:22 142464 1EE7B434BA961EF845DE136224C30FEC c:\windows\$NtServicePackUninstall$\aec.sys
[-] 2004-08-03 20:39 142464 841F385C6CFAF66B58FBD898722BB4F0 c:\windows\$NtUninstallKB900485$\aec.sys
[-] 2008-04-13 16:39 142592 8BED39E3C35D6A489438B8141717A557 c:\windows\ServicePackFiles\i386\aec.sys
[-] 2008-04-13 16:39 142592 8BED39E3C35D6A489438B8141717A557 c:\windows\system32\dllcache\cache\aec.sys
[-] 2008-04-13 16:39 142592 8BED39E3C35D6A489438B8141717A557 c:\windows\system32\drivers\aec.sys
[-] 2006-11-01 19:18 927504 FCD58951B3B2392007E0EE34D2CF944F c:\windows\$NtServicePackUninstall$\mfc40u.dll
[-] 2004-08-04 21:00 924432 E1A34560BF6CE7C703BB67EC4FA70F43 c:\windows\$NtUninstallKB924667$\mfc40u.dll
[-] 2008-04-14 02:33 927504 CE21FE79AD3B913A79E0C742BED6BF85 c:\windows\ServicePackFiles\i386\mfc40u.dll
[-] 2008-04-14 02:33 927504 CE21FE79AD3B913A79E0C742BED6BF85 c:\windows\system32\mfc40u.dll
[-] 2008-04-14 02:33 927504 CE21FE79AD3B913A79E0C742BED6BF85 c:\windows\system32\dllcache\cache\mfc40u.dll
[-] 2005-07-26 04:29 398336 B38D431ACE730452CD1FEE4FB7ECD6E2 c:\windows\$hf_mig$\KB902400\SP2QFE\rpcss.dll
[-] 2009-02-09 10:56 401408 F83B964469D230F445613C44DF9FE25D c:\windows\$hf_mig$\KB956572\SP3QFE\rpcss.dll
[-] 2005-07-26 04:40 397824 CB7D37602638369A516757E994CBB31D c:\windows\$NtServicePackUninstall$\rpcss.dll
[-] 2004-08-05 04:00 395776 2477917B158327410E615C582A3A4C0B c:\windows\$NtUninstallKB902400$\rpcss.dll
[-] 2008-04-14 02:33 399360 3D65EB82E1FA6DB15A33E024C9E03CAB c:\windows\$NtUninstallKB956572$\rpcss.dll
[-] 2008-04-14 02:33 399360 3D65EB82E1FA6DB15A33E024C9E03CAB c:\windows\ServicePackFiles\i386\rpcss.dll
[-] 2009-02-09 10:53 401408 0203B1AAD358F206CB0A3C1F93CCE17A c:\windows\system32\rpcss.dll
[-] 2009-02-09 10:53 401408 0203B1AAD358F206CB0A3C1F93CCE17A c:\windows\system32\dllcache\rpcss.dll
[-] 2009-02-09 10:53 401408 0203B1AAD358F206CB0A3C1F93CCE17A c:\windows\system32\dllcache\cache\rpcss.dll
[-] 2004-08-05 04:00 33792 97939358ED4487CBB4A0D743CE958266 c:\windows\$NtServicePackUninstall$\msgsvc.dll
[-] 2008-04-14 02:33 33792 E67A66A3781C1A483F0F8992664CBE0D c:\windows\ServicePackFiles\i386\msgsvc.dll
[-] 2008-04-14 02:33 33792 E67A66A3781C1A483F0F8992664CBE0D c:\windows\system32\msgsvc.dll
[-] 2008-04-14 02:33 33792 E67A66A3781C1A483F0F8992664CBE0D c:\windows\system32\dllcache\cache\msgsvc.dll
[-] 2006-08-25 15:51 617472 5BBCD65CFD7610F36BCA96B72BBAED4B c:\windows\$NtServicePackUninstall$\comctl32.dll
[-] 2004-08-05 04:00 611328 A53B48B5AB9A5DA76ED247D61B0B0ADD c:\windows\$NtUninstallKB923191$\comctl32.dll
[-] 2004-08-04 21:00 921088 AEF3D788DBF40C7C4D204EA45EB0C505 c:\windows\I386\ASMS\6000\MSFT\WINDOWS\COMMON\CONTROLS\COMCTL32.DLL
[-] 2008-04-14 02:33 617472 B4AA331468315B6A174C3F0D5B3BC135 c:\windows\ServicePackFiles\i386\comctl32.dll
[-] 2008-04-14 02:33 617472 B4AA331468315B6A174C3F0D5B3BC135 c:\windows\system32\comctl32.dll
[-] 2008-04-14 02:33 617472 B4AA331468315B6A174C3F0D5B3BC135 c:\windows\system32\dllcache\cache\comctl32.dll
[-] 2004-08-05 04:00 921088 AEF3D788DBF40C7C4D204EA45EB0C505 c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll
[-] 2004-08-05 04:00 1050624 97668958194B82F5B88EABC88ACA5AE1 c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
[-] 2006-08-25 15:51 1054208 47ABF878B9AEC81B23BA5F89DE597B3A c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
[-] 2008-04-14 02:30 1054208 F92E6BEA9349D49341383F8403B4DFE5 c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
[-] 2004-08-04 21:00 12032 E4ABC1212B70BB03D35E60681C447210 c:\windows\system32\dllcache\cache\acpiec.sys
[-] 2004-08-04 21:00 12032 E4ABC1212B70BB03D35E60681C447210 c:\windows\system32\drivers\acpiec.sys
[-] 2004-08-05 04:00 5120 94559DE281DADCB58E6A3919C7EAC0B4 c:\windows\$NtServicePackUninstall$\sfc.dll
[-] 2008-04-14 02:33 5120 9A4E7ECBB5B7FB86F3B926AB039F4FEC c:\windows\ServicePackFiles\i386\sfc.dll
[-] 2008-04-14 02:33 5120 9A4E7ECBB5B7FB86F3B926AB039F4FEC c:\windows\system32\sfc.dll
[-] 2008-04-14 02:33 5120 9A4E7ECBB5B7FB86F3B926AB039F4FEC c:\windows\system32\dllcache\cache\sfc.dll
[-] 2004-08-05 04:00 407040 FAF07FDCDE76000621A28D19F8E2E8EB c:\windows\$NtServicePackUninstall$\netlogon.dll
[-] 2008-04-14 02:33 407040 04821179C3171554C1BD1F9888A113E2 c:\windows\ServicePackFiles\i386\netlogon.dll
[-] 2008-04-14 02:33 407040 04821179C3171554C1BD1F9888A113E2 c:\windows\system32\netlogon.dll
[-] 2008-04-14 02:33 407040 04821179C3171554C1BD1F9888A113E2 c:\windows\system32\dllcache\cache\netlogon.dll
[-] 2004-08-05 04:00 382464 87424817F82CF6A7F55DAC01A20111A3 c:\windows\$NtServicePackUninstall$\qmgr.dll
[-] 2008-04-14 02:33 409088 BAA0B6E647C1AD593E9BAE5CC31BCFFB c:\windows\ServicePackFiles\i386\qmgr.dll
[-] 2008-04-14 02:33 409088 BAA0B6E647C1AD593E9BAE5CC31BCFFB c:\windows\system32\qmgr.dll
[-] 2008-04-14 02:33 409088 BAA0B6E647C1AD593E9BAE5CC31BCFFB c:\windows\system32\bits\qmgr.dll
[-] 2008-04-14 02:33 409088 BAA0B6E647C1AD593E9BAE5CC31BCFFB c:\windows\system32\dllcache\cache\qmgr.dll
[-] 2004-08-05 04:00 186368 DEC0397F35D027874804EC72979D03CC c:\windows\$NtServicePackUninstall$\scecli.dll
[-] 2008-04-14 02:33 187392 973B36634C544948C663E8269AA1B3A3 c:\windows\ServicePackFiles\i386\scecli.dll
[-] 2008-04-14 02:33 187392 973B36634C544948C663E8269AA1B3A3 c:\windows\system32\scecli.dll
[-] 2008-04-14 02:33 187392 973B36634C544948C663E8269AA1B3A3 c:\windows\system32\dllcache\cache\scecli.dll
[-] 2004-08-05 04:00 14336 02000ABF34AF4C218C35D257024807D6 c:\windows\$NtServicePackUninstall$\asyncmac.sys
[-] 2008-04-13 18:57 14336 B153AFFAC761E7F5FCFA822B9C4E97BC c:\windows\ServicePackFiles\i386\asyncmac.sys
[-] 2008-04-13 18:57 14336 B153AFFAC761E7F5FCFA822B9C4E97BC c:\windows\system32\dllcache\cache\asyncmac.sys
[-] 2008-04-13 18:57 14336 B153AFFAC761E7F5FCFA822B9C4E97BC c:\windows\system32\drivers\asyncmac.sys
[-] 2007-02-09 11:23 574976 05AB81909514BFD69CBB1F2C147CF6B9 c:\windows\$hf_mig$\KB930916\SP2QFE\ntfs.sys
[-] 2007-02-09 11:10 574464 19A811EF5F1ED5C926A028CE107FF1AF c:\windows\$NtServicePackUninstall$\ntfs.sys
[-] 2004-08-05 04:00 574592 B78BE402C3F63DD55521F73876951CDD c:\windows\$NtUninstallKB930916$\ntfs.sys
[-] 2004-08-04 21:00 574592 B78BE402C3F63DD55521F73876951CDD c:\windows\I386\NTFS.SYS
[-] 2008-04-13 19:15 574976 78A08DD6A8D65E697C18E1DB01C5CDCA c:\windows\ServicePackFiles\i386\ntfs.sys
[-] 2008-04-13 19:15 574976 78A08DD6A8D65E697C18E1DB01C5CDCA c:\windows\system32\dllcache\cache\ntfs.sys
[-] 2008-04-13 19:15 574976 78A08DD6A8D65E697C18E1DB01C5CDCA c:\windows\system32\drivers\ntfs.sys
[-] 2004-08-05 04:00 171008 6469C53F4D16FA6055CCA265BC03DB66 c:\windows\$NtServicePackUninstall$\srsvc.dll
[-] 2008-04-14 02:33 171520 6ED29124A1C83BD0CF6B26BD01CA6F6F c:\windows\ServicePackFiles\i386\srsvc.dll
[-] 2008-04-14 02:33 171520 6ED29124A1C83BD0CF6B26BD01CA6F6F c:\windows\system32\srsvc.dll
[-] 2008-04-14 02:33 171520 6ED29124A1C83BD0CF6B26BD01CA6F6F c:\windows\system32\dllcache\cache\srsvc.dll
[-] 2004-08-05 04:00 13824 54CDDAD404557ED98433D6ECBFC92691 c:\windows\$NtServicePackUninstall$\wscntfy.exe
[-] 2008-04-14 02:34 13824 02DA31AB433A6C1110A736C85701DECA c:\windows\ServicePackFiles\i386\wscntfy.exe
[-] 2008-04-14 02:34 13824 02DA31AB433A6C1110A736C85701DECA c:\windows\system32\wscntfy.exe
[-] 2008-04-14 02:34 13824 02DA31AB433A6C1110A736C85701DECA c:\windows\system32\dllcache\cache\wscntfy.exe
c:\windows\system32\appmgmts.dll ... is missing !!
.
((((((((((((((((((((((((((((( SnapShot@2009-08-16_16.32.30 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-08-17 08:57 . 2009-08-17 08:57 16384 c:\windows\Temp\Perflib_Perfdata_504.dat
- 2009-08-16 16:31 . 2009-08-16 16:31 16384 c:\windows\Temp\Perflib_Perfdata_504.dat
+ 2009-08-17 08:59 . 2009-08-17 08:59 16384 c:\windows\Temp\Perflib_Perfdata_1ac.dat
+ 2009-08-16 18:20 . 2009-08-16 18:20 8192 c:\windows\ERDNT\subs\Users\00000004\UsrClass.dat
- 2009-08-16 16:29 . 2009-08-16 16:29 8192 c:\windows\ERDNT\subs\Users\00000004\UsrClass.dat
- 2009-08-16 16:29 . 2009-08-16 16:29 8192 c:\windows\ERDNT\subs\Users\00000002\UsrClass.dat
+ 2009-08-16 18:20 . 2009-08-16 18:20 8192 c:\windows\ERDNT\subs\Users\00000002\UsrClass.dat
+ 2009-08-16 18:20 . 2009-08-16 18:20 966656 c:\windows\ERDNT\subs\Users\00000006\UsrClass.dat
+ 2009-08-16 18:20 . 2009-08-16 18:20 237568 c:\windows\ERDNT\subs\Users\00000003\NTUSER.DAT
- 2009-08-16 16:29 . 2009-08-16 16:29 237568 c:\windows\ERDNT\subs\Users\00000003\NTUSER.DAT
+ 2009-08-16 18:20 . 2009-08-16 18:20 237568 c:\windows\ERDNT\subs\Users\00000001\NTUSER.DAT
- 2009-08-16 16:29 . 2009-08-16 16:29 237568 c:\windows\ERDNT\subs\Users\00000001\NTUSER.DAT
+ 2004-08-05 04:00 . 2008-04-14 02:33 1571840 c:\windows\system32\dllcache\sfcfiles.dll
- 2009-08-16 16:29 . 2009-08-16 16:29 6209536 c:\windows\ERDNT\subs\Users\00000005\ntuser.dat
+ 2009-08-16 18:20 . 2009-08-16 18:20 6209536 c:\windows\ERDNT\subs\Users\00000005\ntuser.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-09-20 68856]
"SandboxieControl"="c:\program files\Sandboxie\SbieCtrl.exe" [2009-04-22 365568]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-02-06 3885408]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Recguard"="c:\windows\SMINST\RECGUARD.EXE" [2005-07-22 237568]
"HPBootOp"="c:\program files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" [2006-02-15 249856]
"HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb10.exe" [2004-03-04 172032]
"HP Component Manager"="c:\program files\HP\hpcoretech\hpcmpmgr.exe" [2003-12-22 241664]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"LVCOMSX"="c:\windows\system32\LVCOMSX.EXE" [2005-01-19 221184]
"LogitechVideoRepair"="c:\program files\Logitech\Video\ISStart.exe" [2005-01-19 458752]
"LogitechVideoTray"="c:\program files\Logitech\Video\LogiTray.exe" [2005-01-19 217088]
"ATICCC"="c:\program files\ATI Technologies\ATI.ACE\CLIStart.exe" [2006-05-10 90112]
"KBD"="c:\hp\KBD\KBD.EXE" [2005-02-02 61440]
"AppleSyncNotifier"="c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2009-03-26 177472]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-01-05 413696]
"fssui"="c:\program files\Windows Live\Family Safety\fsui.exe" [2009-02-06 454000]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-04-02 342312]
"CANAL+ CANALSAT A LA DEMANDE"="c:\program files\Canal+\CANAL+ CANALSAT A LA DEMANDE\Launcher.exe" [2009-04-28 170072]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-07-25 149280]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-02-05 81000]
"Ad-Watch"="c:\program files\Lavasoft\Ad-Aware\AAWTray.exe" [2009-08-16 520024]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.EXE [2006-03-08 16010240]
"AdslTaskBar"="stmctrl.dll" - c:\windows\system32\stmctrl.dll [2004-06-04 151552]
c:\documents and settings\Makawouel\Menu D‚marrer\Programmes\D‚marrage\
Pin.lnk - c:\hp\bin\CLOAKER.EXE [2006-6-5 27136]
wkcalrem.LNK - c:\program files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe [2004-7-11 15360]
c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2005-12-15 282624]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"= %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019
"%windir%\\Network Diagnostic\\xpnetdiag.exe"= %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= c:\program files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"= c:\program files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
"DoNotAllowExceptions"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"= %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"= c:\program files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"= c:\program files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"= c:\program files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"= c:\program files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"= c:\program files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"= c:\program files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"= c:\program files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"= c:\program files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"= c:\program files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"= c:\program files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"= c:\program files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"= c:\program files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"= c:\program files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"= c:\program files\HP\Digital Imaging\bin\hpqnrs08.exe:*:Enabled:hpqnrs08.exe
"c:\\Program Files\\Messenger\\msmsgs.exe"= c:\program files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger
"%windir%\\Network Diagnostic\\xpnetdiag.exe"= %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= c:\program files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"= c:\program files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync
"c:\\Program Files\\iTunes\\iTunes.exe"= c:\program files\iTunes\iTunes.exe:*:Enabled:iTunes
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP"= 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP"= 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [16/08/2009 14:38 64160]
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [16/08/2009 11:50 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [16/08/2009 11:50 20560]
R2 CanalPlus.VOD;CanalPlus.VOD;c:\program files\Canal+\CANAL+ CANALSAT A LA DEMANDE\VOD\CanalPlus.VOD.exe [28/04/2009 17:33 188416]
R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [06/01/2009 20:21 55136]
R2 fsssvc;Windows Live Contrôle parental;c:\program files\Windows Live\Family Safety\fsssvc.exe [06/02/2009 19:08 533360]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [18/01/2009 23:34 1029456]
R3 SbieDrv;SbieDrv;c:\program files\Sandboxie\SbieDrv.sys [22/04/2009 16:22 108032]
R3 Stmatm;ATM/ADSL miniport;c:\windows\system32\drivers\stmatm.sys [04/10/2006 10:19 60255]
S3 TaurusUsb;ADSL Modem USB Service;c:\windows\system32\drivers\torususb.sys [04/10/2006 10:19 541090]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService
Alerter
LmHosts
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Contents of the 'Scheduled Tasks' folder
2009-08-16 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-01-18 12:38]
2009-08-17 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-02-01 09:13]
.
.
------- Supplementary Scan -------
.
uInternet Connection Wizard,ShellNext = iexplore
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-08-17 11:02
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10b.exe,-101"
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10b.exe"
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\CLSID\{1171A62F-05D2-11D1-83FC-00A0C9089C5A}]
@Denied: (A 2) (Everyone)
@="FlashProp Class"
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\CLSID\{1171A62F-05D2-11D1-83FC-00A0C9089C5A}\InprocServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\Flash9b.ocx"
"ThreadingModel"="Apartment"
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10c.exe"
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\CLSID\{8D8763AB-E93B-4812-964E-F04E0008FD50}\Version]
@Denied: (A) (Everyone)
"{21701DD0-9D7E-43f7-A1B2-E92ED6E90A51}"=hex:fb,5e,a6,f8,69,65,5c,21,d0,b7,2a,
7a,d5,7b,27,0a,77,ec,5c,13,60,bf,eb,c9,b6,1e,c7,01
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\Flash10c.ocx, 1"
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\Flash10c.ocx, 1"
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}]
@Denied: (A 2) (Everyone)
@="IFlashBroker2"
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}]
@Denied: (A 2) (Everyone)
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0]
@="Shockwave Flash"
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}]
@Denied: (A 2) (Everyone)
@=""
[HKEY_LOCAL_MACHINE\softwareSoftware\Classes\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0]
@="FlashBroker"
.
--------------------- DLLs Loaded Under Running Processes ---------------------
- - - - - - - > 'winlogon.exe'(616)
c:\windows\system32\Ati2evxx.dll
- - - - - - - > 'explorer.exe'(1444)
c:\windows\system32\eappprxy.dll
c:\windows\system32\webcheck.dll <