Virus warning you're in danger.

tista91 -  
Bonjour,

Voila, je ne sais pas comment (peut-être après avoir pris des fotos sur une clé vérolée) mon fond d'écran est passé tout bleu avec ecrit en gros "warning you're in danger" et tout une page d'écriture. Après avoir cherché un peu sur les forums (puisquil à l'air connu), j'ai fait tourné smitfraudfix en mode sans échec. Mon fond d'ecran est redevenu comme avant mais je sens que mon ordi est encore verolé, des fenêtres internet qui bloquent par exemple.
Est ce que qqun pourrait m'aider ou me conseiller ?

En vous remerciant par avance, à très vite.

24 réponses

  1.  juju666 Contributeur sécurité
    salut smitfraudfix n est plus utilisé il n'est plus à jour ;)

    je pense que tu as attrapé un rogue, un faux logiciel de sécurité qui te harcèle pour acheter leur merde

    ▶ Télécharge sur le bureau RogueKiller (par tigzy)

    ▶ ▶ (Sous Vista/Seven, clique droit, lancer en tant qu'administrateur )

    ▶ Quitte tous tes programmes en cours
    ▶ Lance RogueKiller.exe.
    ▶ Un scan se lance, puis tu verra d'indiqué dans la fenêtre
    ▶ ▶ 1. Scan (écrit en vert)
    ▶ ▶ 2. Delete (écrit en rouge)
    ▶ ▶ 3. Hosts RAZ (écrit en rouge)
    ▶ ▶ 4. Proxy RAZ (écrit en rouge)
    ▶ ▶ 5. DNS RAZ (écrit en rouge)
    ▶ A ce moment tape 2 et valide
    Note: s'il te demande de supprimer le proxy, tape 1
    ▶ Un rapport (RKreport1.txt) a du se créer à côté de l'exécutable, colle son contenu dans la réponse
    ▶ Si le programme a été bloqué, ne pas hésiter à essayer plusieurs fois ou a changer son nom en winlogon.exe

    ▶ Télécharge Malwarebytes' Anti-Malware et enregistre le sur ton bureau.

    ▶ ▶ Miroir 1 si inaccessible
    ▶ ▶ Miroir 2 si inaccessible

    ▶ ▶ /!\ Utilisateur de Vista et Windows 7 : Clique droit sur le logo de Malwarebytes' Anti-Malware, « exécuter en tant qu'Administrateur »

    ▶ Double clique sur le fichier téléchargé pour lancer le processus d'installation.
    ▶ Dans l'onglet "mise à jour", clique sur le bouton Recherche de mise à jour
    ▶ si le pare-feu demande l'autorisation de se connecter pour Malwarebytes, accepte
    ▶ Une fois la mise à jour terminée
    ▶ rends-toi dans l'onglet Recherche
    ▶ Sélectionne Exécuter un examen complet
    ▶ Clique sur Rechercher
    ▶ ▶ Le scan démarre.
    ▶ A la fin de l'analyse, un message s'affiche : L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.
    ▶ Clique sur Ok pour poursuivre.
    ▶ Si des malwares ont été détectés, cliques sur Afficher les résultats
    ▶ Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection . Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
    ▶ Malwarebytes va ouvrir le bloc-notes et y copier le rapport d'analyse. Copie/colle le ici (ctrl+a pour tout sélectionner, ctrl+c pour copier, ctrl+v pour coller)

    ▶ ▶ Il se peut que MBAM ait besoin de redémarrer le pc pour finaliser la suppression, donc pas de panique, redémarre ton pc !!!
    ▶ Une fois le PC redémarré, rends toi dans l'onglet rapport/log
    ▶ Tu clique dessus pour l'afficher, une fois affiché
    ▶ Copie/colle le ici (ctrl+a pour tout sélectionner, ctrl+c pour copier, ctrl+v pour coller)

    Si tu as besoin d'aide regarde ce tutoriel :
    https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

    @+
    0
    1. tista91 Auteur
      Merci pour cette réponse très complète :) Je lance tout et reviens aux nouvelles.
      0
      1. tista91 Auteur
        1er rapport :

        RogueKiller V4.3.1 par Tigzy
        contact sur https://www.luanagames.com/index.fr.html
        mail: tigzyRK<at>gmail<dot>com
        Remontees: https://www.luanagames.com/index.fr.html

        Systeme d'exploitation: Windows 7 (6.1.7600 ) 32 bits version
        Demarrage : Mode normal
        Utilisateur: Baptiste [Droits d'admin]
        Mode: Suppression -- Date : 14/03/2011 20:10:46

        Processus malicieux: 0

        Entrees de registre: 1
        [APPDT/TMP/DESKTOP] HKCU\[...]\Run : Microsoft Firewall 2.9 (C:\Users\Baptiste\AppData\Roaming\FW-332070391.exe /s) -> DELETED

        Fichier HOSTS:

        Termine : << RKreport[1].txt >>
        RKreport[1].txt
        0
        1. juju666 Contributeur sécurité
          ok vu, tu peux passer à malwarebytes ;)
          0
          2. tista91 Auteur
            desolé j'ai du couper hier malwarbyte puisque c'etait trop long et je devais dormir... je relance la et le laisserait tourner dans la nuit si necessaire
            0
            1. tista91 Auteur
              Re bonsoir Juju666,

              Voici le rapport malwarebytes :

              Malwarebytes' Anti-Malware 1.50.1.1100
              www.malwarebytes.org

              Version de la base de données: 6056

              Windows 6.1.7600
              Internet Explorer 8.0.7600.16385

              15/03/2011 21:39:29
              mbam-log-2011-03-15 (21-39-29).txt

              Type d'examen: Examen complet (C:\|D:\|)
              Elément(s) analysé(s): 350156
              Temps écoulé: 1 heure(s), 3 minute(s), 21 seconde(s)

              Processus mémoire infecté(s): 0
              Module(s) mémoire infecté(s): 0
              Clé(s) du Registre infectée(s): 0
              Valeur(s) du Registre infectée(s): 0
              Elément(s) de données du Registre infecté(s): 0
              Dossier(s) infecté(s): 0
              Fichier(s) infecté(s): 1

              Processus mémoire infecté(s):
              (Aucun élément nuisible détecté)

              Module(s) mémoire infecté(s):
              (Aucun élément nuisible détecté)

              Clé(s) du Registre infectée(s):
              (Aucun élément nuisible détecté)

              Valeur(s) du Registre infectée(s):
              (Aucun élément nuisible détecté)

              Elément(s) de données du Registre infecté(s):
              (Aucun élément nuisible détecté)

              Dossier(s) infecté(s):
              (Aucun élément nuisible détecté)

              Fichier(s) infecté(s):
              c:\programdata\okolfeh06504\okolfeh06504.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
              0
              1. tista91 Auteur
                Pardon, trop vite en besogne, le voici apres redémarrage :

                Malwarebytes' Anti-Malware 1.50.1.1100
                www.malwarebytes.org

                Version de la base de données: 6056

                Windows 6.1.7600
                Internet Explorer 8.0.7600.16385

                15/03/2011 21:39:29
                mbam-log-2011-03-15 (21-39-29).txt

                Type d'examen: Examen complet (C:\|D:\|)
                Elément(s) analysé(s): 350156
                Temps écoulé: 1 heure(s), 3 minute(s), 21 seconde(s)

                Processus mémoire infecté(s): 0
                Module(s) mémoire infecté(s): 0
                Clé(s) du Registre infectée(s): 0
                Valeur(s) du Registre infectée(s): 0
                Elément(s) de données du Registre infecté(s): 0
                Dossier(s) infecté(s): 0
                Fichier(s) infecté(s): 1

                Processus mémoire infecté(s):
                (Aucun élément nuisible détecté)

                Module(s) mémoire infecté(s):
                (Aucun élément nuisible détecté)

                Clé(s) du Registre infectée(s):
                (Aucun élément nuisible détecté)

                Valeur(s) du Registre infectée(s):
                (Aucun élément nuisible détecté)

                Elément(s) de données du Registre infecté(s):
                (Aucun élément nuisible détecté)

                Dossier(s) infecté(s):
                (Aucun élément nuisible détecté)

                Fichier(s) infecté(s):
                c:\programdata\okolfeh06504\okolfeh06504.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
                0
                1. juju666 Contributeur sécurité
                  Coucou ^^

                  Ah il se la joue chiantos =] ça va être cool :P

                  Attention, avant de commencer, lit attentivement la procédure, et imprime la

                  /!\ Ne pas utiliser ce logiciel en dehors du cadre de cette désinfection : DANGEUREUX /!\
                  tutoriel combofix

                  ▶ Fais un clic droit sur le lien ci dessous, choisi "Enregistrer la cible du lien sous", comme destination : ton Bureau, change son nom (ton_pseudo.exe par exemple) :

                  http://download.bleepingcomputer.com/sUBs/ComboFix.exe

                  ▶ /!\ Déconnecte-toi du net et ARRÊTE TES LOGICIELS DE PROTECTION /!\

                  ▶ Double-clique sur ComboFix.exe
                  Un "pop-up" va apparaître qui dit que ComboFix est utilisé à vos risques et avec aucune garantie... Clique sur oui pour accepter

                  ▶ ▶ SURTOUT INSTALLES LA CONSOLE DE RECUPERATION
                  (si il te propose de l'installer remets internet)

                  ▶ Mets-le en langue française F

                  ▶ Tape sur la touche 1 (Yes) pour démarrer le scan.


                  ▶ Ne touche à rien(souris, clavier) tant que le scan n'est pas terminé, car tu risques de planter ton PC

                  ▶En fin de scan, il est possible que ComboFix ait besoin de redémarrer le PC pour finaliser la désinfection, laisse-le faire.

                  ▶ Une fois le scan achevé, un rapport va s'afficher : Poste son contenu

                  ▶ ▶ /!\ Réactive la protection en temps réel de ton antivirus et de ton antispyware avant de te reconnecter à Internet. /!\

                  ▶ Note : Le rapport se trouve également là : C:\ComboFix.txt

                  @+
                  0
                  1. tista91 Auteur
                    ca fait 3 fois que je poste mais des que je reviens, il n'y a plus mon msg...

                    ComboFix 11-03-16.06 - Baptiste 17/03/2011 22:51:51.1.2 - x86
                    Microsoft Windows 7 Édition Intégrale 6.1.7600.0.1252.33.1036.18.3062.1982 [GMT 1:00]
                    Lancé depuis: c:\users\Baptiste\Desktop\tista91.exe
                    AV: AntiVir Desktop *Disabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
                    SP: AntiVir Desktop *Disabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
                    SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
                    .
                    .
                    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
                    .
                    .
                    c:\users\Baptiste\AppData\Local\Temp\BFF5.tmp
                    c:\users\Baptiste\AppData\Roaming\desktop.ini
                    c:\windows\7Loader.TAG
                    c:\windows\system32\404Fix.exe
                    c:\windows\system32\Agent.OMZ.Fix.exe
                    c:\windows\system32\dumphive.exe
                    c:\windows\system32\IEDFix.C.exe
                    c:\windows\system32\IEDFix.exe
                    c:\windows\system32\o4Patch.exe
                    c:\windows\system32\Process.exe
                    c:\windows\system32\SrchSTS.exe
                    c:\windows\system32\tmp.reg
                    c:\windows\system32\VACFix.exe
                    c:\windows\system32\VCCLSID.exe
                    c:\windows\system32\WS2Fix.exe
                    .
                    .
                    ((((((((((((((((((((((((((((( Fichiers créés du 2011-02-17 au 2011-03-17 ))))))))))))))))))))))))))))))))))))
                    .
                    .
                    2011-03-17 21:57 . 2011-03-17 21:57 -------- d-----w- c:\users\Default\AppData\Local\temp
                    2011-03-14 18:30 . 2011-03-14 18:30 -------- d-----w- c:\programdata\WEBREG
                    2011-03-14 18:30 . 2011-03-14 18:30 -------- d-----w- c:\users\Baptiste\AppData\Roaming\HP
                    2011-03-14 18:30 . 2011-03-14 18:30 -------- d-----w- c:\users\Baptiste\AppData\Local\HP
                    2011-03-14 18:29 . 2009-04-16 11:42 315904 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\hpfpp70w.dll
                    2011-03-14 18:26 . 2011-03-14 18:26 -------- d-----w- c:\users\Baptiste\AppData\Roaming\Yahoo!
                    2011-03-14 18:26 . 2011-03-14 18:26 -------- d-----w- c:\programdata\Yahoo! Companion
                    2011-03-14 18:26 . 2011-03-14 18:26 -------- d-----w- c:\program files\Yahoo!
                    2011-03-14 18:24 . 2011-03-14 18:24 -------- d-----w- c:\programdata\HP Product Assistant
                    2011-03-14 18:22 . 2011-03-14 18:22 -------- d-----w- c:\program files\Common Files\HP
                    2011-03-14 18:22 . 2011-03-14 18:22 -------- d-----w- c:\program files\Common Files\Hewlett-Packard
                    2011-03-14 18:20 . 2009-04-15 21:53 452408 ----a-w- c:\windows\system32\hpzids01.dll
                    2011-03-14 18:20 . 2009-04-16 11:42 123904 ----a-w- c:\windows\system32\hpf3l70w.dll
                    2011-03-14 18:20 . 2009-03-31 16:21 713728 ----a-w- c:\windows\system32\hposwia_d02d.dll
                    2011-03-14 18:20 . 2009-03-31 16:21 589824 ----a-w- c:\windows\system32\hpost_d02d.dll
                    2011-03-14 18:20 . 2009-03-31 16:21 315392 ----a-w- c:\windows\system32\hposc_d02a.dll
                    2011-03-14 18:14 . 2011-03-14 18:25 -------- d-----w- c:\program files\HP
                    2011-03-14 18:13 . 2011-03-14 18:30 -------- d-----w- c:\programdata\HP
                    2011-03-13 19:18 . 2011-03-13 19:18 -------- d-----w- c:\program files\Enigma Software Group
                    2011-03-13 19:16 . 2011-03-14 18:11 -------- d-----w- c:\windows\8713EF96D15042F19318B4AF40FD9053.TMP
                    2011-03-13 19:16 . 2011-03-13 19:16 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
                    2011-03-13 18:56 . 2011-03-13 18:56 691 ----a-w- c:\users\Baptiste\AppData\Roaming\GetValue.vbs
                    2011-03-13 18:56 . 2011-03-13 18:56 35 ----a-w- c:\users\Baptiste\AppData\Roaming\SetValue.bat
                    2011-03-13 16:35 . 2011-03-15 20:00 -------- d-----w- c:\programdata\oKoLfEh06504
                    2011-03-09 08:22 . 2010-12-23 05:28 850432 ----a-w- c:\windows\system32\sbe.dll
                    2011-03-09 08:22 . 2010-12-23 05:28 642048 ----a-w- c:\windows\system32\CPFilters.dll
                    2011-03-09 08:22 . 2010-12-23 05:28 534528 ----a-w- c:\windows\system32\EncDec.dll
                    2011-03-09 08:22 . 2010-12-23 05:24 199680 ----a-w- c:\windows\system32\mpg2splt.ax
                    2011-03-09 08:22 . 2010-12-18 05:30 2690560 ----a-w- c:\windows\system32\mstscax.dll
                    2011-03-09 08:22 . 2010-12-18 05:26 1034240 ----a-w- c:\windows\system32\mstsc.exe
                    2011-03-06 18:54 . 2011-02-11 06:54 5943120 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{3A8947BC-1C0B-4193-841F-DDFABAB25322}\mpengine.dll
                    .
                    .
                    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
                    .
                    2011-01-07 07:27 . 2011-02-08 20:12 34304 ----a-w- c:\windows\system32\atmlib.dll
                    2011-01-07 05:33 . 2011-02-08 20:12 294400 ----a-w- c:\windows\system32\atmfd.dll
                    2011-01-05 05:37 . 2011-02-08 20:12 428032 ----a-w- c:\windows\system32\vbscript.dll
                    2011-01-05 03:37 . 2011-02-08 20:12 2329088 ----a-w- c:\windows\system32\win32k.sys
                    2010-12-20 17:09 . 2010-05-10 23:32 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
                    2010-12-20 17:08 . 2010-05-10 23:32 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
                    2010-12-18 05:32 . 2011-02-08 20:12 981504 ----a-w- c:\windows\system32\wininet.dll
                    2010-12-18 05:29 . 2011-02-08 20:12 44544 ----a-w- c:\windows\system32\licmgr10.dll
                    2010-12-18 05:29 . 2011-02-08 20:12 541184 ----a-w- c:\windows\system32\kerberos.dll
                    2010-12-18 04:20 . 2011-02-08 20:12 386048 ----a-w- c:\windows\system32\html.iec
                    2010-12-18 03:47 . 2011-02-08 20:12 1638912 ----a-w- c:\windows\system32\mshtml.tlb
                    2010-07-22 21:40 . 2010-09-22 19:24 2944904 ----a-w- c:\program files\Common Files\AskToolbarInstaller.exe
                    .
                    .
                    ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
                    .
                    .
                    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
                    REGEDIT4
                    .
                    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                    "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]
                    "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-05-10 39408]
                    "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-06 149040]
                    .
                    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                    "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-06-20 35760]
                    "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832]
                    "avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
                    "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-01-12 827392]
                    "NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-15 153136]
                    "Microsoft Default Manager"="c:\program files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" [2010-05-10 439568]
                    "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-01-11 246504]
                    "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-11-29 421888]
                    "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-12-13 421160]
                    "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
                    "Malwarebytes' Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-12-20 963976]
                    .
                    c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
                    HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2009-5-21 275768]
                    WinZip Quick Pick.lnk - c:\program files\WinZip\WZQKPICK.EXE [2010-5-11 118784]
                    .
                    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
                    "ConsentPromptBehaviorAdmin"= 5 (0x5)
                    "ConsentPromptBehaviorUser"= 3 (0x3)
                    "EnableUIADesktopToggle"= 0 (0x0)
                    .
                    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
                    "aux"=wdmaud.drv
                    .
                    R2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-05-10 135664]
                    R3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
                    R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2010-07-27 1343400]
                    S1 HWiNFO32;HWiNFO32 Kernel Driver;c:\installation\HWINFO332\HWiNFO32.SYS [2009-07-16 19064]
                    S2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [2010-05-10 108289]
                    S3 netw5v32;Pilote de carte de liaison WiFi sans fil Intel(R) 5000 Series pour Windows Vista 32 bits;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
                    S3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-13 207360]
                    S3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-13 980992]
                    S3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-13 661504]
                    .
                    .
                    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
                    HPService REG_MULTI_SZ HPSLPSVC
                    HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
                    hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
                    .
                    Contenu du dossier 'Tâches planifiées'
                    .
                    2011-03-17 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
                    - c:\program files\Google\Update\GoogleUpdate.exe [2010-05-10 23:09]
                    .
                    2011-03-17 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
                    - c:\program files\Google\Update\GoogleUpdate.exe [2010-05-10 23:09]
                    .
                    .
                    ------- Examen supplémentaire -------
                    .
                    uStart Page = hxxp://www.google.fr/
                    uInternet Settings,ProxyOverride = *.local
                    IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
                    IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
                    IE: Liens de téléchargement avec Mega Manager... - c:\program files\Megaupload\Mega Manager\mm_file.htm
                    IE: {{90EAE591-7E7E-434a-8E28-ECFD00071806} - c:\program files\PokerStars.FR\PokerStarsUpdate.exe
                    .
                    - - - - ORPHELINS SUPPRIMES - - - -
                    .
                    WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
                    .
                    .
                    .
                    --------------------- CLES DE REGISTRE BLOQUEES ---------------------
                    .
                    [HKEY_USERS\S-1-5-21-836634276-2264066331-3125555827-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
                    @Denied: (2) (LocalSystem)
                    "Progid"="WindowsLiveMail.Email.1"
                    .
                    [HKEY_USERS\S-1-5-21-836634276-2264066331-3125555827-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
                    @Denied: (2) (LocalSystem)
                    "Progid"="WindowsLiveMail.VCard.1"
                    .
                    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
                    @Denied: (A) (Users)
                    @Denied: (A) (Everyone)
                    @Allowed: (B 1 2 3 4 5) (S-1-5-20)
                    "BlindDial"=dword:00000000
                    .
                    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
                    @Denied: (Full) (Everyone)
                    .
                    Heure de fin: 2011-03-17 22:59:25
                    ComboFix-quarantined-files.txt 2011-03-17 21:59
                    .
                    Avant-CF: 63 900 499 968 octets libres
                    Après-CF: 63 785 308 160 octets libres
                    .
                    - - End Of File - - 366592EEA5D5F31A8C08037B3623DCFE
                    0
                    1. juju666 Contributeur sécurité
                      coucou :)

                      arf fallait le dire que le robot bouffait ton message, on l'aurait restauré plus tôt =/

                      1//
                      ▶ ▶ DÉSACTIVE TES PROTECTIONS DURANT LA PROCÉDURE

                      ▶ Crée un nouveau document texte : clic droit de souris sur le bureau > Nouveau > Document Texte, et copie dedans les lignes suivantes : 

                      
KillAll::

DirLook::
c:\programdata\oKoLfEh06504 

File::
c:\program files\Common Files\AskToolbarInstaller.exe 

Folder::
c:\program files\PokerStars.FR


                      ▶ Enregistre ce fichier sous le nom CFScript

                      ▶ Fait un glisser/déposer de ce fichier CFScript sur le fichier ComboFix.exe comme sur la capture :http://i261.photobucket.com/albums/ii49/Malekal_morte/CFScript-2.gif

                      ▶ Combofix se lance, laisse toi guider..

                      ▶ Patiente le temps du scan. Le bureau va disparaître à plusieurs reprises: c'est normal!
                      Ne touche à rien tant que le scan n'est pas terminé.
                      ▶ Une fois le scan achevé, un rapport va s'afficher: poste son contenu, en précisant où en sont tes soucis

                      ▶ Si le fichier ne s'ouvre pas, il se trouve ici > C:\ComboFix.txt

                      Ensuite:

                      2//
                      ▶ Rentre dans ton panneau de configuration....
                      ▶ Apparence et personnalisation...
                      ▶ Option des dossiers...(double cliquer dessus)
                      ▶ Dans l'onglet affichage un peu plus bas où il est indiqué "Afficher les dossiers et fichiers cachés": Coche cette option
                      ▶ Encore plus bas : Masquer les fichiers protégés du système d'exploitation (recommandé) : à décocher.

                      ▶ ▶ ensuite rends toi sur ce lien:
                      https://www.virustotal.com/gui/

                      (si virustotal ne fonctionne pas: https://virusscan.jotti.org/fr

                      ▶ Là où il est indiqué "envoyer le fichier", Clique sur "parcourir"
                      recherche les entrées suivante dans ton disque : 

                      c:\users\Baptiste\AppData\Roaming\GetValue.vbs 
c:\users\Baptiste\AppData\Roaming\SetValue.bat


                      ▶ Si une fenêtre apparait disant, "Le fichier à déjà été Analysé", Alors clique sur Réanalyser le fichier maintenant

                      ▶ Copie et colle le lien de ta barre d'adresse ici, après que l'analyse soit terminée

                      Pour terminer :

                      3//

                      Nous allons effectuer un diagnostic de ton PC:
                      ▶ Télécharge ZHPDiag sur ton bureau :

                      https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html
                      ou :
                      http://www.premiumorange.com/zeb-help-process/zhpdiag.html
                      ou :
                      https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/

                      ▶ Laisse toi guider lors de l'installation,coche "Ajouter une icône sur le bureau" et décoche la case "Exécuter ZHPDiag"

                      /!\Utilisateur de Vista et Seven : Clique droit sur le logo de ZHPdiag, « exécuter en tant qu'Administrateur »

                      ▶ Clique sur l'icône représentant une loupe (« Lancer le diagnostic »)
                      ▶ Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette
                      ▶ Héberge le rapport ZHPDiag.txt sur un des sites ci dessous, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum :
                      http://pjjoint.malekal.com/

                      Si indispo:
                      http://www.cijoint.fr/
                      ou :
                      http://ww38.toofiles.com/fr/documents-upload.html
                      ou :
                      https://www.cjoint.com/
                      ou :
                      https://www.casimages.com/

                      ▶ Tuto zhpdiag :
                      http://www.premiumorange.com/zeb-help-process/zhpdiag.html

                      Hébergement de rapport sur pjjoint.malekal.com

                      ▶ Rends toi sur pjjoint.malekal.com
                      ▶ Clique sur le bouton Parcourir
                      ▶ Sélectionne le fichier que tu veux heberger et clique sur Ouvrir
                      ▶ Clique sur le bouton Envoyer
                      ▶ Un message de confirmation s'affiche (L'upload a réussi ! - Le lien à transmettre à vos correspondant pour visualiser le fichier est : https://pjjoint.malekal.com/files.php?id=df5ea299241015 Copie le lien dans ta prochaine réponse.

                      Bonne journée
                      0
                      1. tista91 Auteur
                        Tous mes messages se font bouffer
                        0
                        1. tista91 Auteur
                          ComboFix 11-03-22.01 - Baptiste 22/03/2011 21:14:43.2.2 - x86
                          Microsoft Windows 7 Édition Intégrale 6.1.7600.0.1252.33.1036.18.3062.2163 [GMT 1:00]
                          Lancé depuis: c:\users\Baptiste\Desktop\tista91.exe
                          Commutateurs utilisés :: c:\users\Baptiste\Desktop\CFScript.txt
                          AV: AntiVir Desktop *Disabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
                          SP: AntiVir Desktop *Disabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
                          SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
                          .
                          FILE ::
                          "c:\program files\Common Files\AskToolbarInstaller.exe"
                          .
                          .
                          (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
                          .
                          .
                          c:\program files\Common Files\AskToolbarInstaller.exe
                          c:\program files\PokerStars.FR
                          c:\program files\PokerStars.FR\_update2black.dat
                          c:\program files\PokerStars.FR\_update2default.dat
                          c:\program files\PokerStars.FR\_update2g.dat
                          c:\program files\PokerStars.FR\_update2gcd.dat
                          c:\program files\PokerStars.FR\_update2oldblack.dat
                          c:\program files\PokerStars.FR\_update2rare.dat
                          c:\program files\PokerStars.FR\_update2s.dat
                          c:\program files\PokerStars.FR\_update2simple.dat
                          c:\program files\PokerStars.FR\_update2skyrock.dat
                          c:\program files\PokerStars.FR\_update2techno.dat
                          c:\program files\PokerStars.FR\_update2xblack.dat
                          c:\program files\PokerStars.FR\backup\gx\cashierpaysystem.jpg
                          c:\program files\PokerStars.FR\backup\gx\ctrls\bracket-header-curr.png
                          c:\program files\PokerStars.FR\backup\gx\fg-active.png
                          c:\program files\PokerStars.FR\backup\gx\home\banner.jpg
                          c:\program files\PokerStars.FR\backup\gx\home\lobby-button.png
                          c:\program files\PokerStars.FR\backup\gx\home\tourn-logo.png
                          c:\program files\PokerStars.FR\backup\gx\home\welcome.png
                          c:\program files\PokerStars.FR\backup\gx\templates\browser.css
                          c:\program files\PokerStars.FR\backup\gx\templates\dialog.css
                          c:\program files\PokerStars.FR\backup\gx\templates\dialog.html
                          c:\program files\PokerStars.FR\backup\gx\templates\help.html
                          c:\program files\PokerStars.FR\backup\gx\templates\menu.xml
                          c:\program files\PokerStars.FR\backup\i18n.msg_cli.txt
                          c:\program files\PokerStars.FR\backup\PokerStars.exe
                          c:\program files\PokerStars.FR\backup\themes\&default\gx.ini
                          c:\program files\PokerStars.FR\backup\themes\black\gx.ini
                          c:\program files\PokerStars.FR\backup\themes\black\home\c-hdr-b.png
                          c:\program files\PokerStars.FR\backup\themes\black\home\welcome.png
                          c:\program files\PokerStars.FR\backup\themes\black\templates\dialog.html
                          c:\program files\PokerStars.FR\backup\update.ini
                          c:\program files\PokerStars.FR\fw.ini
                          c:\program files\PokerStars.FR\gx\arr.a.bmp
                          c:\program files\PokerStars.FR\gx\arr.bmp
                          c:\program files\PokerStars.FR\gx\bg.jpg
                          c:\program files\PokerStars.FR\gx\bg.png
                          c:\program files\PokerStars.FR\gx\blt.a.bmp
                          c:\program files\PokerStars.FR\gx\blt.bmp
                          c:\program files\PokerStars.FR\gx\cashierpaysystem.a.bmp
                          c:\program files\PokerStars.FR\gx\cashierpaysystem.bmp
                          c:\program files\PokerStars.FR\gx\cashierpaysystem.jpg
                          c:\program files\PokerStars.FR\gx\cheque.jpg
                          c:\program files\PokerStars.FR\gx\chequeCA.jpg
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip-d.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip-d.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip000001.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip000001.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip000005.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip000005.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip000025.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip000025.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip0001.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip0001.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip0005.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip0005.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip0025.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip0025.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip0100.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip0100.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip0500.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip0500.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip1000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip1000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip100000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip100000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip1000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip1000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip100000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip100000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip25000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip25000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip25000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip25000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip5000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip5000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip500000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip500000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip5000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip5000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip500000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip500000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chipone.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chipone.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip-d.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip-d.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip000001.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip000001.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip000005.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip000005.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip000025.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip000025.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip0001.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip0001.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip0005.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip0005.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip0025.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip0025.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip0100.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip0100.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip0500.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip0500.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip1000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip1000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip100000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip100000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip1000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip1000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip100000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip100000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip25000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip25000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip25000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip25000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip5000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip5000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip500000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip500000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip5000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip5000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip500000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip500000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip-d.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip-d.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip000001.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip000001.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip000005.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip000005.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip000025.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip000025.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip0001.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip0001.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip0005.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip0005.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip0025.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip0025.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip0100.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip0100.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip0500.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip0500.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip1000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip1000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip100000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip100000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip1000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip1000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip100000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip100000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip25000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip25000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip25000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip25000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip5000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip5000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip500000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip500000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip5000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip5000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip500000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip500000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip-d.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip-d.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip000001.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip000001.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip000005.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip000005.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip000025.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip000025.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip0001.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip0001.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip0005.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip0005.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip0025.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip0025.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip0100.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip0100.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip0500.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip0500.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip1000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip1000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip100000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip100000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip1000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip1000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip100000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip100000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip25000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip25000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip25000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip25000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip5000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip5000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip500000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip500000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip5000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip5000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip500000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip500000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip-d.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip-d.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip000001.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip000001.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip000005.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip000005.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip000025.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip000025.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip0001.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip0001.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip0005.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip0005.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip0025.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip0025.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip0100.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip0100.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip0500.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip0500.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip1000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip1000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip100000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip100000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip1000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip1000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip100000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip100000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip25000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip25000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip25000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip25000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip5000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip5000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip500000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip500000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip5000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip5000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip500000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip500000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip-d.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip-d.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip000001.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip000001.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip000005.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip000005.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip000025.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip000025.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip0001.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip0001.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip0005.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip0005.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip0025.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip0025.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip0100.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip0100.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip0500.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip0500.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip1000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip1000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip100000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip100000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip1000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip1000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip100000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip100000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip25000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip25000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip25000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip25000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip5000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip5000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip500000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip500000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip5000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip5000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip500000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip500000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip-d.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip-d.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip000001.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip000001.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip000005.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip000005.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip000025.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip000025.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip0001.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip0001.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip0005.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip0005.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip0025.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip0025.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip0100.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip0100.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip0500.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip0500.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip1000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip1000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip100000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip100000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip1000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip1000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip100000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip100000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip25000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip25000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip25000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip25000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip5000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip5000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip500000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip500000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip5000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip5000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip500000000.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip500000000.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\0\cardbase.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\0\cardbase.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\0\cardface.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\0\cardface.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\0\cardrank.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\0\cardsuit.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\1\cardbase.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\1\cardbase.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\1\cardface.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\1\cardface.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\2\cardbase.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\2\cardbase.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\2\cardface.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\2\cardface.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\2\cardrank.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\2\cardsuit.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\3\cardbase.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\3\cardbase.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\3\cardface.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\3\cardface.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\3\cardrank.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\3\cardsuit.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\4\cardbase.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\4\cardbase.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\4\cardface.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\4\cardface.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\4\cardrank.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\4\cardsuit.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\5\cardbase.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\5\cardbase.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\5\cardface.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\5\cardface.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\5\cardrank.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\5\cardsuit.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\6\cardbase.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\6\cardbase.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\6\cardface.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\6\cardface.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\6\cardrank.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\6\cardsuit.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\back.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\cardfade.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\cardfade.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\deck.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\smback.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\default\smback.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\0\cardbase.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\0\cardbase.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\0\cardrank.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\0\cardsuit.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\0\cardsuit.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\1\cardbase.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\1\cardbase.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\1\cardrank.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\1\cardsuit.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\1\cardsuit.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\2\cardbase.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\2\cardbase.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\2\cardrank.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\2\cardsuit.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\2\cardsuit.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\3\cardbase.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\3\cardbase.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\3\cardrank.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\3\cardsuit.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\3\cardsuit.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\4\cardbase.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\4\cardbase.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\4\cardrank.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\4\cardsuit.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\4\cardsuit.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\5\cardbase.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\5\cardbase.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\5\cardrank.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\5\cardsuit.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\5\cardsuit.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\6\cardbase.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\6\cardbase.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\6\cardrank.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\6\cardsuit.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\6\cardsuit.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\cardrank.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\cardsuit.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\large\cardsuit.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\0\cardbase.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\0\cardbase.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\0\cardrank.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\0\cardrank.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\0\cardsuit.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\0\cardsuit.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\0\deck.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\0\deck.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\1\cardbase.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\1\cardbase.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\1\cardrank.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\1\cardrank.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\1\cardsuit.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\1\cardsuit.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\1\deck.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\1\deck.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\2\cardbase.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\2\cardbase.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\2\cardrank.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\2\cardrank.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\2\cardsuit.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\2\cardsuit.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\2\deck.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\2\deck.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\3\cardbase.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\3\cardbase.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\3\cardrank.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\3\cardrank.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\3\cardsuit.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\3\cardsuit.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\3\deck.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\3\deck.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\4\cardbase.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\4\cardbase.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\4\cardrank.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\4\cardrank.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\4\cardsuit.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\4\cardsuit.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\4\deck.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\4\deck.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\5\cardbase.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\5\cardbase.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\5\cardrank.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\5\cardrank.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\5\cardsuit.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\5\cardsuit.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\5\deck.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\5\deck.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\6\cardbase.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\6\cardbase.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\6\cardrank.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\6\cardrank.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\6\cardsuit.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\6\cardsuit.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\6\deck.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\6\deck.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\back.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\back.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\cardfade.a.bmp
                          c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\cardfade.bmp
                          c:\program files\PokerStars.FR\gx\close.a.bmp
                          c:\program files\PokerStars.FR\gx\close.bmp
                          c:\program files\PokerStars.FR\gx\ctep.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\bb.a.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\bb.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\bracket-bg.jpg
                          c:\program files\PokerStars.FR\gx\ctrls\bracket-bg.png
                          c:\program files\PokerStars.FR\gx\ctrls\bracket-bye.png
                          c:\program files\PokerStars.FR\gx\ctrls\bracket-header-curr.png
                          c:\program files\PokerStars.FR\gx\ctrls\bracket-header-final.png
                          c:\program files\PokerStars.FR\gx\ctrls\bracket-header.png
                          c:\program files\PokerStars.FR\gx\ctrls\bracket-logo.png
                          c:\program files\PokerStars.FR\gx\ctrls\bracket-player-adv.png
                          c:\program files\PokerStars.FR\gx\ctrls\bracket-player-in.png
                          c:\program files\PokerStars.FR\gx\ctrls\bracket-player-out.png
                          c:\program files\PokerStars.FR\gx\ctrls\bracket-player-won.png
                          c:\program files\PokerStars.FR\gx\ctrls\bracket-spacer.png
                          c:\program files\PokerStars.FR\gx\ctrls\bracket-spade-b.png
                          c:\program files\PokerStars.FR\gx\ctrls\bracket-spade-t.png
                          c:\program files\PokerStars.FR\gx\ctrls\btn.a.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\btn.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\cashierb.a.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\cashierb.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\cashiergb.a.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\cashiergb.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\cashierrb.a.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\cashierrb.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\cb.a.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\cb.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\cb2.a.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\cb2.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\cbtn.a.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\cbtn.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\detach.a.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\detach.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\disclose.a.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\disclose.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\drag-btn.a.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\drag-btn.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\gblk.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\gear-icon.png
                          c:\program files\PokerStars.FR\gx\ctrls\helper-bar.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\helper-bg.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\helper-collapse.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\helper-lock.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\helper-refresh.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\helper-reset.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\helper-size.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\lb.a.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\lb.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\note-icon.png
                          c:\program files\PokerStars.FR\gx\ctrls\progress-b.png
                          c:\program files\PokerStars.FR\gx\ctrls\progress-red.png
                          c:\program files\PokerStars.FR\gx\ctrls\progress.png
                          c:\program files\PokerStars.FR\gx\ctrls\rblk.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\rbtn.a.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\rbtn.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\s-btn-both.a.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\s-btn-both.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\s-btn-pause.a.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\s-btn-pause.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\s-btn-play.a.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\s-btn-play.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\sizebox.a.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\sizebox.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\slider-grip.a.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\slider-grip.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\slider.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\ss-btn.a.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\ss-btn.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\stb.a.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\stb.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\stellar-bar.png
                          c:\program files\PokerStars.FR\gx\ctrls\tabs.a.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\tabs.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\tourn-link.a.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\tourn-link.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\tta-back.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\tta-border.a.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\tta-border.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\wb.a.bmp
                          c:\program files\PokerStars.FR\gx\ctrls\wb.bmp
                          c:\program files\PokerStars.FR\gx\cvn.jpg
                          c:\program files\PokerStars.FR\gx\cvn_astro.jpg
                          c:\program files\PokerStars.FR\gx\dialog.a.bmp
                          c:\program files\PokerStars.FR\gx\dialog.bmp
                          c:\program files\PokerStars.FR\gx\fg-active.png
                          c:\program files\PokerStars.FR\gx\fg-inactive.png
                          c:\program files\PokerStars.FR\gx\fg-on.a.bmp
                          c:\program files\PokerStars.FR\gx\fg-on.bmp
                          c:\program files\PokerStars.FR\gx\fg.a.bmp
                          c:\program files\PokerStars.FR\gx\fg.b.bmp
                          c:\program files\PokerStars.FR\gx\fg.bmp
                          c:\program files\PokerStars.FR\gx\fg.png
                          c:\program files\PokerStars.FR\gx\fg10.png
                          c:\program files\PokerStars.FR\gx\fg2.png
                          c:\program files\PokerStars.FR\gx\fg4.png
                          c:\program files\PokerStars.FR\gx\fg6.png
                          c:\program files\PokerStars.FR\gx\fg7.png
                          c:\program files\PokerStars.FR\gx\fg8.png
                          c:\program files\PokerStars.FR\gx\fg9.png
                          c:\program files\PokerStars.FR\gx\filter-ico.a.bmp
                          c:\program files\PokerStars.FR\gx\filter-ico.bmp
                          c:\program files\PokerStars.FR\gx\filter.a.bmp
                          c:\program files\PokerStars.FR\gx\filter.bmp
                          c:\program files\PokerStars.FR\gx\filterb.bmp
                          c:\program files\PokerStars.FR\gx\fonts\ar08.bmp
                          c:\program files\PokerStars.FR\gx\fonts\ar08.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\ar08.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\ar08.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\ar08.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\ar08.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\ar08.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\ar08.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\ar08.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\ar08.pff
                          c:\program files\PokerStars.FR\gx\fonts\ar09.bmp
                          c:\program files\PokerStars.FR\gx\fonts\ar09.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\ar09.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\ar09.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\ar09.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\ar09.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\ar09.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\ar09.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\ar09.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\ar09.pff
                          c:\program files\PokerStars.FR\gx\fonts\ar10.bmp
                          c:\program files\PokerStars.FR\gx\fonts\ar10.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\ar10.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\ar10.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\ar10.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\ar10.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\ar10.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\ar10.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\ar10.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\ar10.pff
                          c:\program files\PokerStars.FR\gx\fonts\arb08.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb08.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb08.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb08.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb08.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb08.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb08.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb08.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb08.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb08.pff
                          c:\program files\PokerStars.FR\gx\fonts\arb09.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb09.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb09.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb09.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb09.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb09.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb09.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb09.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb09.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb09.pff
                          c:\program files\PokerStars.FR\gx\fonts\arb10.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb10.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb10.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb10.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb10.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb10.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb10.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb10.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb10.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb10.pff
                          c:\program files\PokerStars.FR\gx\fonts\arb11.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb11.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb11.cp1250i.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb11.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb11.cp1251i.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb11.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb11.cp1252i.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb11.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb11.cp1253i.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb11.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb11.cp1254i.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb11.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb11.cp1255i.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb11.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb11.cp1256i.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb11.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb11.cp1257i.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb11.pff
                          c:\program files\PokerStars.FR\gx\fonts\arb11i.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb12.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb12.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb12.cp1250i.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb12.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb12.cp1251i.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb12.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb12.cp1252i.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb12.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb12.cp1253i.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb12.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb12.cp1254i.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb12.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb12.cp1255i.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb12.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb12.cp1256i.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb12.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb12.cp1257i.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb12.pff
                          c:\program files\PokerStars.FR\gx\fonts\arb12i.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb14.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb14.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb14.cp1250i.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb14.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb14.cp1251i.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb14.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb14.cp1252i.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb14.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb14.cp1253i.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb14.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb14.cp1254i.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb14.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb14.cp1255i.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb14.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb14.cp1256i.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb14.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb14.cp1257i.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arb14.pff
                          c:\program files\PokerStars.FR\gx\fonts\arb14i.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arbu09.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arbu09.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arbu09.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arbu09.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arbu09.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arbu09.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arbu09.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arbu09.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arbu09.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arbu09.pff
                          c:\program files\PokerStars.FR\gx\fonts\arbu10.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arbu10.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arbu10.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arbu10.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arbu10.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arbu10.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arbu10.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arbu10.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arbu10.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arbu10.pff
                          c:\program files\PokerStars.FR\gx\fonts\arbu12.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arbu12.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arbu12.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arbu12.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arbu12.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arbu12.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arbu12.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arbu12.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arbu12.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\arbu12.pff
                          c:\program files\PokerStars.FR\gx\fonts\aru08.bmp
                          c:\program files\PokerStars.FR\gx\fonts\aru08.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\aru08.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\aru08.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\aru08.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\aru08.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\aru08.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\aru08.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\aru08.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\aru08.pff
                          c:\program files\PokerStars.FR\gx\fonts\gmb075.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb075.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb075.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb075.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb075.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb075.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb075.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb075.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb075.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb075.pff
                          c:\program files\PokerStars.FR\gx\fonts\gmb08.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb08.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb08.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb08.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb08.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb08.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb08.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb08.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb08.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb08.pff
                          c:\program files\PokerStars.FR\gx\fonts\gmb09.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb09.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb09.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb09.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb09.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb09.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb09.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb09.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb09.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb09.pff
                          c:\program files\PokerStars.FR\gx\fonts\gmb10.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb10.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb10.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb10.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb10.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb10.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb10.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb10.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb10.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb10.pff
                          c:\program files\PokerStars.FR\gx\fonts\gmb11.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb11.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb11.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb11.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb11.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb11.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb11.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb11.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb11.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb11.pff
                          c:\program files\PokerStars.FR\gx\fonts\gmb12.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb12.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb12.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb12.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb12.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb12.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb12.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb12.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb12.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb12.pff
                          c:\program files\PokerStars.FR\gx\fonts\gmb14.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb14.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb14.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb14.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb14.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb14.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb14.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb14.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb14.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb14.pff
                          c:\program files\PokerStars.FR\gx\fonts\gmb16.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb16.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb16.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb16.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb16.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb16.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb16.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb16.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb16.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb16.pff
                          c:\program files\PokerStars.FR\gx\fonts\gmb18.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb18.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb18.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb18.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb18.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb18.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb18.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb18.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb18.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb18.pff
                          c:\program files\PokerStars.FR\gx\fonts\gmb20.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb20.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb20.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb20.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb20.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb20.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb20.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb20.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb20.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\gmb20.pff
                          c:\program files\PokerStars.FR\gx\fonts\lg08.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lg08.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lg08.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lg08.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lg08.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lg08.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lg08.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lg08.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lg08.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lg08.pff
                          c:\program files\PokerStars.FR\gx\fonts\lg09.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lg09.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lg09.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lg09.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lg09.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lg09.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lg09.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lg09.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lg09.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lg09.pff
                          c:\program files\PokerStars.FR\gx\fonts\lgb075.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb075.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb075.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb075.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb075.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb075.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb075.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb075.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb075.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb075.pff
                          c:\program files\PokerStars.FR\gx\fonts\lgb08.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb08.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb08.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb08.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb08.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb08.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb08.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb08.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb08.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb08.pff
                          c:\program files\PokerStars.FR\gx\fonts\lgb09.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb09.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb09.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb09.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb09.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb09.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb09.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb09.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb09.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb09.pff
                          c:\program files\PokerStars.FR\gx\fonts\lgb10.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb10.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb10.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb10.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb10.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb10.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb10.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb10.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb10.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb10.pff
                          c:\program files\PokerStars.FR\gx\fonts\lgb11.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb11.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb11.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb11.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb11.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb11.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb11.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb11.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb11.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb11.pff
                          c:\program files\PokerStars.FR\gx\fonts\lgb12.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb12.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb12.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb12.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb12.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb12.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb12.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb12.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb12.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb12.pff
                          c:\program files\PokerStars.FR\gx\fonts\lgb14.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb14.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb14.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb14.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb14.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb14.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb14.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb14.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb14.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb14.pff
                          c:\program files\PokerStars.FR\gx\fonts\lgb16.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb16.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb16.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb16.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb16.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb16.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb16.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb16.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb16.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb16.pff
                          c:\program files\PokerStars.FR\gx\fonts\lgb18.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb18.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb18.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb18.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb18.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb18.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb18.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb18.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb18.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb18.pff
                          c:\program files\PokerStars.FR\gx\fonts\lgb20.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb20.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb20.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb20.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb20.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb20.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb20.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb20.cp1256.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb20.cp1257.bmp
                          c:\program files\PokerStars.FR\gx\fonts\lgb20.pff
                          c:\program files\PokerStars.FR\gx\fonts\mss08.bmp
                          c:\program files\PokerStars.FR\gx\fonts\mss08.cp1250.bmp
                          c:\program files\PokerStars.FR\gx\fonts\mss08.cp1251.bmp
                          c:\program files\PokerStars.FR\gx\fonts\mss08.cp1252.bmp
                          c:\program files\PokerStars.FR\gx\fonts\mss08.cp1253.bmp
                          c:\program files\PokerStars.FR\gx\fonts\mss08.cp1254.bmp
                          c:\program files\PokerStars.FR\gx\fonts\mss08.cp1255.bmp
                          c:\program files\PokerStars.FR\gx\fonts\mss08.cp1256.bmp
                          c:\progr
                          0
                          2. tista91 Auteur
                            J'ai le rapport combofix, les deux liens pour la 2eme étape :

                            http://www.virustotal.com/file-scan/report.html?id=d257db13aebb16f1c936d4c7d912d02f4005389724aa47f559fa378f6a13e0f8-1300826267

                            http://www.virustotal.com/file-scan/report.html?id=d9971fb32726019c6ef56cad56018ca94a569b2fb1eb281b4d307f236d5ff7a3-1300826393

                            Mais combofix ne veut pas apparaitre ici
                            0
                            2. tista91 Auteur
                              et pour "Hébergement de rapport sur pjjoint.malekal.com", ils me demandent un mot de passe...
                              0
                              1. tista91 Auteur
                                Mais peut etre pas necessaire vu que je l'ai fait avant avec l'autre manière ?
                                0
                                1. tista91 Auteur
                                  Ah il est passé combofix entre temps !
                                  0
                                  1. juju666 Contributeur sécurité
                                    oui j ai demandé qu'ils soient restaurés ^^

                                    ton combofix est incomplet héberge le stp

                                    supprime ces deux trucs :
                                    c:\users\Baptiste\AppData\Roaming\GetValue.vbs
                                    c:\users\Baptiste\AppData\Roaming\SetValue.bat

                                    ça pue.

                                    je regarde zhpdiag voir si c est mieux.
                                    0
                                    • 1
                                    • 2

                                    Discussions similaires

                                    [URGENT] Que veut dire prise (AUX IN)?
                                    quentinel

                                    18 réponses
                                    autoradio Android que peut-on brancher sur vidéo input
                                    chrisia

                                    3 réponses
                                    Casque audio sur prise aux In
                                    Bert

                                    3 réponses
                                    qu'est ce qu'une prise DC IN ?
                                    daphdu974

                                    3 réponses
                                    java script error in the main process
                                    ceciel2307

                                    3 réponses