Virus warning you're in danger.

tista91 Messages postés 90 Statut Membre -  
tista91 Messages postés 90 Statut Membre -
Bonjour,

Voila, je ne sais pas comment (peut-être après avoir pris des fotos sur une clé vérolée) mon fond d'écran est passé tout bleu avec ecrit en gros "warning you're in danger" et tout une page d'écriture. Après avoir cherché un peu sur les forums (puisquil à l'air connu), j'ai fait tourné smitfraudfix en mode sans échec. Mon fond d'ecran est redevenu comme avant mais je sens que mon ordi est encore verolé, des fenêtres internet qui bloquent par exemple.
Est ce que qqun pourrait m'aider ou me conseiller ?

En vous remerciant par avance, à très vite.

24 réponses

  • 1
  • 2
  1. juju666 Messages postés 35446 Date d'inscription   Statut Contributeur sécurité Dernière intervention   4 796
     
    salut smitfraudfix n est plus utilisé il n'est plus à jour ;)

    je pense que tu as attrapé un rogue, un faux logiciel de sécurité qui te harcèle pour acheter leur merde

    ▶ Télécharge sur le bureau RogueKiller (par tigzy)

    ▶ ▶ (Sous Vista/Seven, clique droit, lancer en tant qu'administrateur )

    ▶ Quitte tous tes programmes en cours
    ▶ Lance RogueKiller.exe.
    ▶ Un scan se lance, puis tu verra d'indiqué dans la fenêtre
    ▶ ▶ 1. Scan (écrit en vert)
    ▶ ▶ 2. Delete (écrit en rouge)
    ▶ ▶ 3. Hosts RAZ (écrit en rouge)
    ▶ ▶ 4. Proxy RAZ (écrit en rouge)
    ▶ ▶ 5. DNS RAZ (écrit en rouge)
    ▶ A ce moment tape 2 et valide
    Note: s'il te demande de supprimer le proxy, tape 1
    ▶ Un rapport (RKreport1.txt) a du se créer à côté de l'exécutable, colle son contenu dans la réponse
    ▶ Si le programme a été bloqué, ne pas hésiter à essayer plusieurs fois ou a changer son nom en winlogon.exe

    ▶ Télécharge Malwarebytes' Anti-Malware et enregistre le sur ton bureau.

    ▶ ▶ Miroir 1 si inaccessible
    ▶ ▶ Miroir 2 si inaccessible

    ▶ ▶ /!\ Utilisateur de Vista et Windows 7 : Clique droit sur le logo de Malwarebytes' Anti-Malware, « exécuter en tant qu'Administrateur »

    ▶ Double clique sur le fichier téléchargé pour lancer le processus d'installation.
    ▶ Dans l'onglet "mise à jour", clique sur le bouton Recherche de mise à jour
    ▶ si le pare-feu demande l'autorisation de se connecter pour Malwarebytes, accepte
    ▶ Une fois la mise à jour terminée
    ▶ rends-toi dans l'onglet Recherche
    ▶ Sélectionne Exécuter un examen complet
    ▶ Clique sur Rechercher
    ▶ ▶ Le scan démarre.
    ▶ A la fin de l'analyse, un message s'affiche : L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.
    ▶ Clique sur Ok pour poursuivre.
    ▶ Si des malwares ont été détectés, cliques sur Afficher les résultats
    ▶ Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection . Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
    ▶ Malwarebytes va ouvrir le bloc-notes et y copier le rapport d'analyse. Copie/colle le ici (ctrl+a pour tout sélectionner, ctrl+c pour copier, ctrl+v pour coller)

    ▶ ▶ Il se peut que MBAM ait besoin de redémarrer le pc pour finaliser la suppression, donc pas de panique, redémarre ton pc !!!
    ▶ Une fois le PC redémarré, rends toi dans l'onglet rapport/log
    ▶ Tu clique dessus pour l'afficher, une fois affiché
    ▶ Copie/colle le ici (ctrl+a pour tout sélectionner, ctrl+c pour copier, ctrl+v pour coller)

    Si tu as besoin d'aide regarde ce tutoriel :
    https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

    @+
    0
  2. tista91 Messages postés 90 Statut Membre
     
    Merci pour cette réponse très complète :) Je lance tout et reviens aux nouvelles.
    0
  3. tista91 Messages postés 90 Statut Membre
     
    1er rapport :

    RogueKiller V4.3.1 par Tigzy
    contact sur https://www.luanagames.com/index.fr.html
    mail: tigzyRK<at>gmail<dot>com
    Remontees: https://www.luanagames.com/index.fr.html

    Systeme d'exploitation: Windows 7 (6.1.7600 ) 32 bits version
    Demarrage : Mode normal
    Utilisateur: Baptiste [Droits d'admin]
    Mode: Suppression -- Date : 14/03/2011 20:10:46

    Processus malicieux: 0

    Entrees de registre: 1
    [APPDT/TMP/DESKTOP] HKCU\[...]\Run : Microsoft Firewall 2.9 (C:\Users\Baptiste\AppData\Roaming\FW-332070391.exe /s) -> DELETED

    Fichier HOSTS:

    Termine : << RKreport[1].txt >>
    RKreport[1].txt
    0
  4. juju666 Messages postés 35446 Date d'inscription   Statut Contributeur sécurité Dernière intervention   4 796
     
    ok vu, tu peux passer à malwarebytes ;)
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. tista91 Messages postés 90 Statut Membre
     
    desolé j'ai du couper hier malwarbyte puisque c'etait trop long et je devais dormir... je relance la et le laisserait tourner dans la nuit si necessaire
    0
  7. tista91 Messages postés 90 Statut Membre
     
    Re bonsoir Juju666,

    Voici le rapport malwarebytes :

    Malwarebytes' Anti-Malware 1.50.1.1100
    www.malwarebytes.org

    Version de la base de données: 6056

    Windows 6.1.7600
    Internet Explorer 8.0.7600.16385

    15/03/2011 21:39:29
    mbam-log-2011-03-15 (21-39-29).txt

    Type d'examen: Examen complet (C:\|D:\|)
    Elément(s) analysé(s): 350156
    Temps écoulé: 1 heure(s), 3 minute(s), 21 seconde(s)

    Processus mémoire infecté(s): 0
    Module(s) mémoire infecté(s): 0
    Clé(s) du Registre infectée(s): 0
    Valeur(s) du Registre infectée(s): 0
    Elément(s) de données du Registre infecté(s): 0
    Dossier(s) infecté(s): 0
    Fichier(s) infecté(s): 1

    Processus mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Module(s) mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Clé(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Valeur(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Elément(s) de données du Registre infecté(s):
    (Aucun élément nuisible détecté)

    Dossier(s) infecté(s):
    (Aucun élément nuisible détecté)

    Fichier(s) infecté(s):
    c:\programdata\okolfeh06504\okolfeh06504.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    0
  8. tista91 Messages postés 90 Statut Membre
     
    Pardon, trop vite en besogne, le voici apres redémarrage :

    Malwarebytes' Anti-Malware 1.50.1.1100
    www.malwarebytes.org

    Version de la base de données: 6056

    Windows 6.1.7600
    Internet Explorer 8.0.7600.16385

    15/03/2011 21:39:29
    mbam-log-2011-03-15 (21-39-29).txt

    Type d'examen: Examen complet (C:\|D:\|)
    Elément(s) analysé(s): 350156
    Temps écoulé: 1 heure(s), 3 minute(s), 21 seconde(s)

    Processus mémoire infecté(s): 0
    Module(s) mémoire infecté(s): 0
    Clé(s) du Registre infectée(s): 0
    Valeur(s) du Registre infectée(s): 0
    Elément(s) de données du Registre infecté(s): 0
    Dossier(s) infecté(s): 0
    Fichier(s) infecté(s): 1

    Processus mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Module(s) mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Clé(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Valeur(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Elément(s) de données du Registre infecté(s):
    (Aucun élément nuisible détecté)

    Dossier(s) infecté(s):
    (Aucun élément nuisible détecté)

    Fichier(s) infecté(s):
    c:\programdata\okolfeh06504\okolfeh06504.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    0
  9. juju666 Messages postés 35446 Date d'inscription   Statut Contributeur sécurité Dernière intervention   4 796
     
    Coucou ^^

    Ah il se la joue chiantos =] ça va être cool :P

    Attention, avant de commencer, lit attentivement la procédure, et imprime la

    /!\ Ne pas utiliser ce logiciel en dehors du cadre de cette désinfection : DANGEUREUX /!\
    tutoriel combofix

    ▶ Fais un clic droit sur le lien ci dessous, choisi "Enregistrer la cible du lien sous", comme destination : ton Bureau, change son nom (ton_pseudo.exe par exemple) :

    http://download.bleepingcomputer.com/sUBs/ComboFix.exe

    ▶ /!\ Déconnecte-toi du net et ARRÊTE TES LOGICIELS DE PROTECTION /!\

    ▶ Double-clique sur ComboFix.exe
    Un "pop-up" va apparaître qui dit que ComboFix est utilisé à vos risques et avec aucune garantie... Clique sur oui pour accepter

    ▶ ▶ SURTOUT INSTALLES LA CONSOLE DE RECUPERATION
    (si il te propose de l'installer remets internet)

    ▶ Mets-le en langue française F

    ▶ Tape sur la touche 1 (Yes) pour démarrer le scan.


    ▶ Ne touche à rien(souris, clavier) tant que le scan n'est pas terminé, car tu risques de planter ton PC

    ▶En fin de scan, il est possible que ComboFix ait besoin de redémarrer le PC pour finaliser la désinfection, laisse-le faire.

    ▶ Une fois le scan achevé, un rapport va s'afficher : Poste son contenu

    ▶ ▶ /!\ Réactive la protection en temps réel de ton antivirus et de ton antispyware avant de te reconnecter à Internet. /!\

    ▶ Note : Le rapport se trouve également là : C:\ComboFix.txt

    @+
    0
  10. tista91 Messages postés 90 Statut Membre
     
    ca fait 3 fois que je poste mais des que je reviens, il n'y a plus mon msg...

    ComboFix 11-03-16.06 - Baptiste 17/03/2011 22:51:51.1.2 - x86
    Microsoft Windows 7 Édition Intégrale 6.1.7600.0.1252.33.1036.18.3062.1982 [GMT 1:00]
    Lancé depuis: c:\users\Baptiste\Desktop\tista91.exe
    AV: AntiVir Desktop *Disabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
    SP: AntiVir Desktop *Disabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
    SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    .
    .
    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    c:\users\Baptiste\AppData\Local\Temp\BFF5.tmp
    c:\users\Baptiste\AppData\Roaming\desktop.ini
    c:\windows\7Loader.TAG
    c:\windows\system32\404Fix.exe
    c:\windows\system32\Agent.OMZ.Fix.exe
    c:\windows\system32\dumphive.exe
    c:\windows\system32\IEDFix.C.exe
    c:\windows\system32\IEDFix.exe
    c:\windows\system32\o4Patch.exe
    c:\windows\system32\Process.exe
    c:\windows\system32\SrchSTS.exe
    c:\windows\system32\tmp.reg
    c:\windows\system32\VACFix.exe
    c:\windows\system32\VCCLSID.exe
    c:\windows\system32\WS2Fix.exe
    .
    .
    ((((((((((((((((((((((((((((( Fichiers créés du 2011-02-17 au 2011-03-17 ))))))))))))))))))))))))))))))))))))
    .
    .
    2011-03-17 21:57 . 2011-03-17 21:57 -------- d-----w- c:\users\Default\AppData\Local\temp
    2011-03-14 18:30 . 2011-03-14 18:30 -------- d-----w- c:\programdata\WEBREG
    2011-03-14 18:30 . 2011-03-14 18:30 -------- d-----w- c:\users\Baptiste\AppData\Roaming\HP
    2011-03-14 18:30 . 2011-03-14 18:30 -------- d-----w- c:\users\Baptiste\AppData\Local\HP
    2011-03-14 18:29 . 2009-04-16 11:42 315904 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\hpfpp70w.dll
    2011-03-14 18:26 . 2011-03-14 18:26 -------- d-----w- c:\users\Baptiste\AppData\Roaming\Yahoo!
    2011-03-14 18:26 . 2011-03-14 18:26 -------- d-----w- c:\programdata\Yahoo! Companion
    2011-03-14 18:26 . 2011-03-14 18:26 -------- d-----w- c:\program files\Yahoo!
    2011-03-14 18:24 . 2011-03-14 18:24 -------- d-----w- c:\programdata\HP Product Assistant
    2011-03-14 18:22 . 2011-03-14 18:22 -------- d-----w- c:\program files\Common Files\HP
    2011-03-14 18:22 . 2011-03-14 18:22 -------- d-----w- c:\program files\Common Files\Hewlett-Packard
    2011-03-14 18:20 . 2009-04-15 21:53 452408 ----a-w- c:\windows\system32\hpzids01.dll
    2011-03-14 18:20 . 2009-04-16 11:42 123904 ----a-w- c:\windows\system32\hpf3l70w.dll
    2011-03-14 18:20 . 2009-03-31 16:21 713728 ----a-w- c:\windows\system32\hposwia_d02d.dll
    2011-03-14 18:20 . 2009-03-31 16:21 589824 ----a-w- c:\windows\system32\hpost_d02d.dll
    2011-03-14 18:20 . 2009-03-31 16:21 315392 ----a-w- c:\windows\system32\hposc_d02a.dll
    2011-03-14 18:14 . 2011-03-14 18:25 -------- d-----w- c:\program files\HP
    2011-03-14 18:13 . 2011-03-14 18:30 -------- d-----w- c:\programdata\HP
    2011-03-13 19:18 . 2011-03-13 19:18 -------- d-----w- c:\program files\Enigma Software Group
    2011-03-13 19:16 . 2011-03-14 18:11 -------- d-----w- c:\windows\8713EF96D15042F19318B4AF40FD9053.TMP
    2011-03-13 19:16 . 2011-03-13 19:16 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
    2011-03-13 18:56 . 2011-03-13 18:56 691 ----a-w- c:\users\Baptiste\AppData\Roaming\GetValue.vbs
    2011-03-13 18:56 . 2011-03-13 18:56 35 ----a-w- c:\users\Baptiste\AppData\Roaming\SetValue.bat
    2011-03-13 16:35 . 2011-03-15 20:00 -------- d-----w- c:\programdata\oKoLfEh06504
    2011-03-09 08:22 . 2010-12-23 05:28 850432 ----a-w- c:\windows\system32\sbe.dll
    2011-03-09 08:22 . 2010-12-23 05:28 642048 ----a-w- c:\windows\system32\CPFilters.dll
    2011-03-09 08:22 . 2010-12-23 05:28 534528 ----a-w- c:\windows\system32\EncDec.dll
    2011-03-09 08:22 . 2010-12-23 05:24 199680 ----a-w- c:\windows\system32\mpg2splt.ax
    2011-03-09 08:22 . 2010-12-18 05:30 2690560 ----a-w- c:\windows\system32\mstscax.dll
    2011-03-09 08:22 . 2010-12-18 05:26 1034240 ----a-w- c:\windows\system32\mstsc.exe
    2011-03-06 18:54 . 2011-02-11 06:54 5943120 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{3A8947BC-1C0B-4193-841F-DDFABAB25322}\mpengine.dll
    .
    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2011-01-07 07:27 . 2011-02-08 20:12 34304 ----a-w- c:\windows\system32\atmlib.dll
    2011-01-07 05:33 . 2011-02-08 20:12 294400 ----a-w- c:\windows\system32\atmfd.dll
    2011-01-05 05:37 . 2011-02-08 20:12 428032 ----a-w- c:\windows\system32\vbscript.dll
    2011-01-05 03:37 . 2011-02-08 20:12 2329088 ----a-w- c:\windows\system32\win32k.sys
    2010-12-20 17:09 . 2010-05-10 23:32 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
    2010-12-20 17:08 . 2010-05-10 23:32 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
    2010-12-18 05:32 . 2011-02-08 20:12 981504 ----a-w- c:\windows\system32\wininet.dll
    2010-12-18 05:29 . 2011-02-08 20:12 44544 ----a-w- c:\windows\system32\licmgr10.dll
    2010-12-18 05:29 . 2011-02-08 20:12 541184 ----a-w- c:\windows\system32\kerberos.dll
    2010-12-18 04:20 . 2011-02-08 20:12 386048 ----a-w- c:\windows\system32\html.iec
    2010-12-18 03:47 . 2011-02-08 20:12 1638912 ----a-w- c:\windows\system32\mshtml.tlb
    2010-07-22 21:40 . 2010-09-22 19:24 2944904 ----a-w- c:\program files\Common Files\AskToolbarInstaller.exe
    .
    .
    ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
    REGEDIT4
    .
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]
    "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-05-10 39408]
    "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-06 149040]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-06-20 35760]
    "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832]
    "avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
    "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-01-12 827392]
    "NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-15 153136]
    "Microsoft Default Manager"="c:\program files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" [2010-05-10 439568]
    "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-01-11 246504]
    "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-11-29 421888]
    "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-12-13 421160]
    "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
    "Malwarebytes' Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-12-20 963976]
    .
    c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
    HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2009-5-21 275768]
    WinZip Quick Pick.lnk - c:\program files\WinZip\WZQKPICK.EXE [2010-5-11 118784]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "ConsentPromptBehaviorAdmin"= 5 (0x5)
    "ConsentPromptBehaviorUser"= 3 (0x3)
    "EnableUIADesktopToggle"= 0 (0x0)
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
    "aux"=wdmaud.drv
    .
    R2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-05-10 135664]
    R3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
    R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2010-07-27 1343400]
    S1 HWiNFO32;HWiNFO32 Kernel Driver;c:\installation\HWINFO332\HWiNFO32.SYS [2009-07-16 19064]
    S2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [2010-05-10 108289]
    S3 netw5v32;Pilote de carte de liaison WiFi sans fil Intel(R) 5000 Series pour Windows Vista 32 bits;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
    S3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-13 207360]
    S3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-13 980992]
    S3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-13 661504]
    .
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    HPService REG_MULTI_SZ HPSLPSVC
    HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
    hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
    .
    Contenu du dossier 'Tâches planifiées'
    .
    2011-03-17 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
    - c:\program files\Google\Update\GoogleUpdate.exe [2010-05-10 23:09]
    .
    2011-03-17 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
    - c:\program files\Google\Update\GoogleUpdate.exe [2010-05-10 23:09]
    .
    .
    ------- Examen supplémentaire -------
    .
    uStart Page = hxxp://www.google.fr/
    uInternet Settings,ProxyOverride = *.local
    IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
    IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
    IE: Liens de téléchargement avec Mega Manager... - c:\program files\Megaupload\Mega Manager\mm_file.htm
    IE: {{90EAE591-7E7E-434a-8E28-ECFD00071806} - c:\program files\PokerStars.FR\PokerStarsUpdate.exe
    .
    - - - - ORPHELINS SUPPRIMES - - - -
    .
    WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
    .
    .
    .
    --------------------- CLES DE REGISTRE BLOQUEES ---------------------
    .
    [HKEY_USERS\S-1-5-21-836634276-2264066331-3125555827-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
    @Denied: (2) (LocalSystem)
    "Progid"="WindowsLiveMail.Email.1"
    .
    [HKEY_USERS\S-1-5-21-836634276-2264066331-3125555827-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
    @Denied: (2) (LocalSystem)
    "Progid"="WindowsLiveMail.VCard.1"
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
    @Denied: (A) (Users)
    @Denied: (A) (Everyone)
    @Allowed: (B 1 2 3 4 5) (S-1-5-20)
    "BlindDial"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
    @Denied: (Full) (Everyone)
    .
    Heure de fin: 2011-03-17 22:59:25
    ComboFix-quarantined-files.txt 2011-03-17 21:59
    .
    Avant-CF: 63 900 499 968 octets libres
    Après-CF: 63 785 308 160 octets libres
    .
    - - End Of File - - 366592EEA5D5F31A8C08037B3623DCFE
    0
  11. juju666 Messages postés 35446 Date d'inscription   Statut Contributeur sécurité Dernière intervention   4 796
     
    coucou :)

    arf fallait le dire que le robot bouffait ton message, on l'aurait restauré plus tôt =/

    1//
    ▶ ▶ DÉSACTIVE TES PROTECTIONS DURANT LA PROCÉDURE

    ▶ Crée un nouveau document texte : clic droit de souris sur le bureau > Nouveau > Document Texte, et copie dedans les lignes suivantes : 

    
KillAll::

DirLook::
c:\programdata\oKoLfEh06504 

File::
c:\program files\Common Files\AskToolbarInstaller.exe 

Folder::
c:\program files\PokerStars.FR


    ▶ Enregistre ce fichier sous le nom CFScript

    ▶ Fait un glisser/déposer de ce fichier CFScript sur le fichier ComboFix.exe comme sur la capture :http://i261.photobucket.com/albums/ii49/Malekal_morte/CFScript-2.gif

    ▶ Combofix se lance, laisse toi guider..

    ▶ Patiente le temps du scan. Le bureau va disparaître à plusieurs reprises: c'est normal!
    Ne touche à rien tant que le scan n'est pas terminé.
    ▶ Une fois le scan achevé, un rapport va s'afficher: poste son contenu, en précisant où en sont tes soucis

    ▶ Si le fichier ne s'ouvre pas, il se trouve ici > C:\ComboFix.txt

    Ensuite:

    2//
    ▶ Rentre dans ton panneau de configuration....
    ▶ Apparence et personnalisation...
    ▶ Option des dossiers...(double cliquer dessus)
    ▶ Dans l'onglet affichage un peu plus bas où il est indiqué "Afficher les dossiers et fichiers cachés": Coche cette option
    ▶ Encore plus bas : Masquer les fichiers protégés du système d'exploitation (recommandé) : à décocher.

    ▶ ▶ ensuite rends toi sur ce lien:
    https://www.virustotal.com/gui/

    (si virustotal ne fonctionne pas: https://virusscan.jotti.org/fr

    ▶ Là où il est indiqué "envoyer le fichier", Clique sur "parcourir"
    recherche les entrées suivante dans ton disque : 

    c:\users\Baptiste\AppData\Roaming\GetValue.vbs 
c:\users\Baptiste\AppData\Roaming\SetValue.bat


    ▶ Si une fenêtre apparait disant, "Le fichier à déjà été Analysé", Alors clique sur Réanalyser le fichier maintenant

    ▶ Copie et colle le lien de ta barre d'adresse ici, après que l'analyse soit terminée

    Pour terminer :

    3//

    Nous allons effectuer un diagnostic de ton PC:
    ▶ Télécharge ZHPDiag sur ton bureau :

    https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html
    ou :
    http://www.premiumorange.com/zeb-help-process/zhpdiag.html
    ou :
    https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/

    ▶ Laisse toi guider lors de l'installation,coche "Ajouter une icône sur le bureau" et décoche la case "Exécuter ZHPDiag"

    /!\Utilisateur de Vista et Seven : Clique droit sur le logo de ZHPdiag, « exécuter en tant qu'Administrateur »

    ▶ Clique sur l'icône représentant une loupe (« Lancer le diagnostic »)
    ▶ Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette
    ▶ Héberge le rapport ZHPDiag.txt sur un des sites ci dessous, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum :
    http://pjjoint.malekal.com/

    Si indispo:
    http://www.cijoint.fr/
    ou :
    http://ww38.toofiles.com/fr/documents-upload.html
    ou :
    https://www.cjoint.com/
    ou :
    https://www.casimages.com/

    ▶ Tuto zhpdiag :
    http://www.premiumorange.com/zeb-help-process/zhpdiag.html

    Hébergement de rapport sur pjjoint.malekal.com

    ▶ Rends toi sur pjjoint.malekal.com
    ▶ Clique sur le bouton Parcourir
    ▶ Sélectionne le fichier que tu veux heberger et clique sur Ouvrir
    ▶ Clique sur le bouton Envoyer
    ▶ Un message de confirmation s'affiche (L'upload a réussi ! - Le lien à transmettre à vos correspondant pour visualiser le fichier est : https://pjjoint.malekal.com/files.php?id=df5ea299241015 Copie le lien dans ta prochaine réponse.

    Bonne journée
    0
  12. tista91 Messages postés 90 Statut Membre
     
    Tous mes messages se font bouffer
    0
  13. tista91 Messages postés 90 Statut Membre
     
    ComboFix 11-03-22.01 - Baptiste 22/03/2011 21:14:43.2.2 - x86
    Microsoft Windows 7 Édition Intégrale 6.1.7600.0.1252.33.1036.18.3062.2163 [GMT 1:00]
    Lancé depuis: c:\users\Baptiste\Desktop\tista91.exe
    Commutateurs utilisés :: c:\users\Baptiste\Desktop\CFScript.txt
    AV: AntiVir Desktop *Disabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
    SP: AntiVir Desktop *Disabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
    SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    .
    FILE ::
    "c:\program files\Common Files\AskToolbarInstaller.exe"
    .
    .
    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    c:\program files\Common Files\AskToolbarInstaller.exe
    c:\program files\PokerStars.FR
    c:\program files\PokerStars.FR\_update2black.dat
    c:\program files\PokerStars.FR\_update2default.dat
    c:\program files\PokerStars.FR\_update2g.dat
    c:\program files\PokerStars.FR\_update2gcd.dat
    c:\program files\PokerStars.FR\_update2oldblack.dat
    c:\program files\PokerStars.FR\_update2rare.dat
    c:\program files\PokerStars.FR\_update2s.dat
    c:\program files\PokerStars.FR\_update2simple.dat
    c:\program files\PokerStars.FR\_update2skyrock.dat
    c:\program files\PokerStars.FR\_update2techno.dat
    c:\program files\PokerStars.FR\_update2xblack.dat
    c:\program files\PokerStars.FR\backup\gx\cashierpaysystem.jpg
    c:\program files\PokerStars.FR\backup\gx\ctrls\bracket-header-curr.png
    c:\program files\PokerStars.FR\backup\gx\fg-active.png
    c:\program files\PokerStars.FR\backup\gx\home\banner.jpg
    c:\program files\PokerStars.FR\backup\gx\home\lobby-button.png
    c:\program files\PokerStars.FR\backup\gx\home\tourn-logo.png
    c:\program files\PokerStars.FR\backup\gx\home\welcome.png
    c:\program files\PokerStars.FR\backup\gx\templates\browser.css
    c:\program files\PokerStars.FR\backup\gx\templates\dialog.css
    c:\program files\PokerStars.FR\backup\gx\templates\dialog.html
    c:\program files\PokerStars.FR\backup\gx\templates\help.html
    c:\program files\PokerStars.FR\backup\gx\templates\menu.xml
    c:\program files\PokerStars.FR\backup\i18n.msg_cli.txt
    c:\program files\PokerStars.FR\backup\PokerStars.exe
    c:\program files\PokerStars.FR\backup\themes\&default\gx.ini
    c:\program files\PokerStars.FR\backup\themes\black\gx.ini
    c:\program files\PokerStars.FR\backup\themes\black\home\c-hdr-b.png
    c:\program files\PokerStars.FR\backup\themes\black\home\welcome.png
    c:\program files\PokerStars.FR\backup\themes\black\templates\dialog.html
    c:\program files\PokerStars.FR\backup\update.ini
    c:\program files\PokerStars.FR\fw.ini
    c:\program files\PokerStars.FR\gx\arr.a.bmp
    c:\program files\PokerStars.FR\gx\arr.bmp
    c:\program files\PokerStars.FR\gx\bg.jpg
    c:\program files\PokerStars.FR\gx\bg.png
    c:\program files\PokerStars.FR\gx\blt.a.bmp
    c:\program files\PokerStars.FR\gx\blt.bmp
    c:\program files\PokerStars.FR\gx\cashierpaysystem.a.bmp
    c:\program files\PokerStars.FR\gx\cashierpaysystem.bmp
    c:\program files\PokerStars.FR\gx\cashierpaysystem.jpg
    c:\program files\PokerStars.FR\gx\cheque.jpg
    c:\program files\PokerStars.FR\gx\chequeCA.jpg
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip-d.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip-d.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip000001.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip000001.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip000005.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip000005.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip000025.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip000025.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip0001.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip0001.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip0005.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip0005.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip0025.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip0025.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip0100.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip0100.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip0500.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip0500.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip1000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip1000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip100000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip100000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip1000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip1000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip100000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip100000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip25000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip25000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip25000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip25000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip5000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip5000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip500000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip500000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip5000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip5000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip500000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chip500000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chipone.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\0\chipone.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip-d.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip-d.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip000001.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip000001.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip000005.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip000005.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip000025.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip000025.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip0001.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip0001.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip0005.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip0005.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip0025.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip0025.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip0100.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip0100.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip0500.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip0500.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip1000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip1000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip100000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip100000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip1000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip1000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip100000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip100000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip25000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip25000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip25000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip25000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip5000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip5000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip500000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip500000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip5000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip5000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip500000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\1\chip500000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip-d.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip-d.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip000001.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip000001.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip000005.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip000005.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip000025.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip000025.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip0001.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip0001.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip0005.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip0005.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip0025.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip0025.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip0100.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip0100.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip0500.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip0500.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip1000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip1000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip100000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip100000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip1000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip1000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip100000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip100000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip25000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip25000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip25000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip25000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip5000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip5000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip500000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip500000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip5000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip5000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip500000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\2\chip500000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip-d.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip-d.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip000001.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip000001.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip000005.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip000005.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip000025.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip000025.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip0001.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip0001.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip0005.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip0005.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip0025.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip0025.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip0100.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip0100.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip0500.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip0500.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip1000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip1000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip100000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip100000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip1000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip1000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip100000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip100000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip25000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip25000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip25000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip25000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip5000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip5000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip500000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip500000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip5000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip5000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip500000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\3\chip500000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip-d.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip-d.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip000001.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip000001.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip000005.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip000005.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip000025.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip000025.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip0001.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip0001.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip0005.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip0005.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip0025.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip0025.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip0100.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip0100.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip0500.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip0500.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip1000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip1000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip100000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip100000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip1000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip1000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip100000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip100000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip25000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip25000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip25000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip25000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip5000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip5000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip500000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip500000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip5000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip5000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip500000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\4\chip500000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip-d.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip-d.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip000001.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip000001.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip000005.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip000005.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip000025.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip000025.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip0001.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip0001.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip0005.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip0005.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip0025.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip0025.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip0100.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip0100.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip0500.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip0500.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip1000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip1000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip100000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip100000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip1000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip1000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip100000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip100000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip25000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip25000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip25000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip25000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip5000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip5000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip500000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip500000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip5000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip5000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip500000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\5\chip500000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip-d.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip-d.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip000001.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip000001.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip000005.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip000005.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip000025.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip000025.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip0001.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip0001.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip0005.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip0005.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip0025.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip0025.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip0100.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip0100.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip0500.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip0500.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip1000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip1000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip100000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip100000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip1000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip1000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip100000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip100000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip25000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip25000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip25000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip25000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip5000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip5000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip500000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip500000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip5000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip5000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip500000000.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\chips\6\chip500000000.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\0\cardbase.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\0\cardbase.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\0\cardface.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\0\cardface.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\0\cardrank.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\0\cardsuit.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\1\cardbase.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\1\cardbase.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\1\cardface.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\1\cardface.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\2\cardbase.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\2\cardbase.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\2\cardface.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\2\cardface.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\2\cardrank.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\2\cardsuit.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\3\cardbase.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\3\cardbase.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\3\cardface.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\3\cardface.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\3\cardrank.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\3\cardsuit.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\4\cardbase.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\4\cardbase.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\4\cardface.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\4\cardface.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\4\cardrank.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\4\cardsuit.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\5\cardbase.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\5\cardbase.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\5\cardface.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\5\cardface.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\5\cardrank.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\5\cardsuit.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\6\cardbase.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\6\cardbase.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\6\cardface.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\6\cardface.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\6\cardrank.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\6\cardsuit.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\back.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\cardfade.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\cardfade.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\deck.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\smback.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\default\smback.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\0\cardbase.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\0\cardbase.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\0\cardrank.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\0\cardsuit.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\0\cardsuit.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\1\cardbase.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\1\cardbase.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\1\cardrank.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\1\cardsuit.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\1\cardsuit.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\2\cardbase.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\2\cardbase.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\2\cardrank.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\2\cardsuit.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\2\cardsuit.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\3\cardbase.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\3\cardbase.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\3\cardrank.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\3\cardsuit.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\3\cardsuit.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\4\cardbase.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\4\cardbase.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\4\cardrank.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\4\cardsuit.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\4\cardsuit.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\5\cardbase.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\5\cardbase.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\5\cardrank.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\5\cardsuit.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\5\cardsuit.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\6\cardbase.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\6\cardbase.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\6\cardrank.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\6\cardsuit.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\6\cardsuit.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\cardrank.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\cardsuit.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\large\cardsuit.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\0\cardbase.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\0\cardbase.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\0\cardrank.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\0\cardrank.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\0\cardsuit.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\0\cardsuit.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\0\deck.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\0\deck.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\1\cardbase.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\1\cardbase.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\1\cardrank.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\1\cardrank.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\1\cardsuit.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\1\cardsuit.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\1\deck.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\1\deck.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\2\cardbase.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\2\cardbase.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\2\cardrank.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\2\cardrank.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\2\cardsuit.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\2\cardsuit.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\2\deck.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\2\deck.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\3\cardbase.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\3\cardbase.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\3\cardrank.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\3\cardrank.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\3\cardsuit.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\3\cardsuit.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\3\deck.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\3\deck.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\4\cardbase.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\4\cardbase.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\4\cardrank.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\4\cardrank.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\4\cardsuit.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\4\cardsuit.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\4\deck.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\4\deck.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\5\cardbase.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\5\cardbase.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\5\cardrank.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\5\cardrank.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\5\cardsuit.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\5\cardsuit.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\5\deck.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\5\deck.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\6\cardbase.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\6\cardbase.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\6\cardrank.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\6\cardrank.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\6\cardsuit.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\6\cardsuit.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\6\deck.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\6\deck.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\back.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\back.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\cardfade.a.bmp
    c:\program files\PokerStars.FR\gx\chips&deck\deck\simple\cardfade.bmp
    c:\program files\PokerStars.FR\gx\close.a.bmp
    c:\program files\PokerStars.FR\gx\close.bmp
    c:\program files\PokerStars.FR\gx\ctep.bmp
    c:\program files\PokerStars.FR\gx\ctrls\bb.a.bmp
    c:\program files\PokerStars.FR\gx\ctrls\bb.bmp
    c:\program files\PokerStars.FR\gx\ctrls\bracket-bg.jpg
    c:\program files\PokerStars.FR\gx\ctrls\bracket-bg.png
    c:\program files\PokerStars.FR\gx\ctrls\bracket-bye.png
    c:\program files\PokerStars.FR\gx\ctrls\bracket-header-curr.png
    c:\program files\PokerStars.FR\gx\ctrls\bracket-header-final.png
    c:\program files\PokerStars.FR\gx\ctrls\bracket-header.png
    c:\program files\PokerStars.FR\gx\ctrls\bracket-logo.png
    c:\program files\PokerStars.FR\gx\ctrls\bracket-player-adv.png
    c:\program files\PokerStars.FR\gx\ctrls\bracket-player-in.png
    c:\program files\PokerStars.FR\gx\ctrls\bracket-player-out.png
    c:\program files\PokerStars.FR\gx\ctrls\bracket-player-won.png
    c:\program files\PokerStars.FR\gx\ctrls\bracket-spacer.png
    c:\program files\PokerStars.FR\gx\ctrls\bracket-spade-b.png
    c:\program files\PokerStars.FR\gx\ctrls\bracket-spade-t.png
    c:\program files\PokerStars.FR\gx\ctrls\btn.a.bmp
    c:\program files\PokerStars.FR\gx\ctrls\btn.bmp
    c:\program files\PokerStars.FR\gx\ctrls\cashierb.a.bmp
    c:\program files\PokerStars.FR\gx\ctrls\cashierb.bmp
    c:\program files\PokerStars.FR\gx\ctrls\cashiergb.a.bmp
    c:\program files\PokerStars.FR\gx\ctrls\cashiergb.bmp
    c:\program files\PokerStars.FR\gx\ctrls\cashierrb.a.bmp
    c:\program files\PokerStars.FR\gx\ctrls\cashierrb.bmp
    c:\program files\PokerStars.FR\gx\ctrls\cb.a.bmp
    c:\program files\PokerStars.FR\gx\ctrls\cb.bmp
    c:\program files\PokerStars.FR\gx\ctrls\cb2.a.bmp
    c:\program files\PokerStars.FR\gx\ctrls\cb2.bmp
    c:\program files\PokerStars.FR\gx\ctrls\cbtn.a.bmp
    c:\program files\PokerStars.FR\gx\ctrls\cbtn.bmp
    c:\program files\PokerStars.FR\gx\ctrls\detach.a.bmp
    c:\program files\PokerStars.FR\gx\ctrls\detach.bmp
    c:\program files\PokerStars.FR\gx\ctrls\disclose.a.bmp
    c:\program files\PokerStars.FR\gx\ctrls\disclose.bmp
    c:\program files\PokerStars.FR\gx\ctrls\drag-btn.a.bmp
    c:\program files\PokerStars.FR\gx\ctrls\drag-btn.bmp
    c:\program files\PokerStars.FR\gx\ctrls\gblk.bmp
    c:\program files\PokerStars.FR\gx\ctrls\gear-icon.png
    c:\program files\PokerStars.FR\gx\ctrls\helper-bar.bmp
    c:\program files\PokerStars.FR\gx\ctrls\helper-bg.bmp
    c:\program files\PokerStars.FR\gx\ctrls\helper-collapse.bmp
    c:\program files\PokerStars.FR\gx\ctrls\helper-lock.bmp
    c:\program files\PokerStars.FR\gx\ctrls\helper-refresh.bmp
    c:\program files\PokerStars.FR\gx\ctrls\helper-reset.bmp
    c:\program files\PokerStars.FR\gx\ctrls\helper-size.bmp
    c:\program files\PokerStars.FR\gx\ctrls\lb.a.bmp
    c:\program files\PokerStars.FR\gx\ctrls\lb.bmp
    c:\program files\PokerStars.FR\gx\ctrls\note-icon.png
    c:\program files\PokerStars.FR\gx\ctrls\progress-b.png
    c:\program files\PokerStars.FR\gx\ctrls\progress-red.png
    c:\program files\PokerStars.FR\gx\ctrls\progress.png
    c:\program files\PokerStars.FR\gx\ctrls\rblk.bmp
    c:\program files\PokerStars.FR\gx\ctrls\rbtn.a.bmp
    c:\program files\PokerStars.FR\gx\ctrls\rbtn.bmp
    c:\program files\PokerStars.FR\gx\ctrls\s-btn-both.a.bmp
    c:\program files\PokerStars.FR\gx\ctrls\s-btn-both.bmp
    c:\program files\PokerStars.FR\gx\ctrls\s-btn-pause.a.bmp
    c:\program files\PokerStars.FR\gx\ctrls\s-btn-pause.bmp
    c:\program files\PokerStars.FR\gx\ctrls\s-btn-play.a.bmp
    c:\program files\PokerStars.FR\gx\ctrls\s-btn-play.bmp
    c:\program files\PokerStars.FR\gx\ctrls\sizebox.a.bmp
    c:\program files\PokerStars.FR\gx\ctrls\sizebox.bmp
    c:\program files\PokerStars.FR\gx\ctrls\slider-grip.a.bmp
    c:\program files\PokerStars.FR\gx\ctrls\slider-grip.bmp
    c:\program files\PokerStars.FR\gx\ctrls\slider.bmp
    c:\program files\PokerStars.FR\gx\ctrls\ss-btn.a.bmp
    c:\program files\PokerStars.FR\gx\ctrls\ss-btn.bmp
    c:\program files\PokerStars.FR\gx\ctrls\stb.a.bmp
    c:\program files\PokerStars.FR\gx\ctrls\stb.bmp
    c:\program files\PokerStars.FR\gx\ctrls\stellar-bar.png
    c:\program files\PokerStars.FR\gx\ctrls\tabs.a.bmp
    c:\program files\PokerStars.FR\gx\ctrls\tabs.bmp
    c:\program files\PokerStars.FR\gx\ctrls\tourn-link.a.bmp
    c:\program files\PokerStars.FR\gx\ctrls\tourn-link.bmp
    c:\program files\PokerStars.FR\gx\ctrls\tta-back.bmp
    c:\program files\PokerStars.FR\gx\ctrls\tta-border.a.bmp
    c:\program files\PokerStars.FR\gx\ctrls\tta-border.bmp
    c:\program files\PokerStars.FR\gx\ctrls\wb.a.bmp
    c:\program files\PokerStars.FR\gx\ctrls\wb.bmp
    c:\program files\PokerStars.FR\gx\cvn.jpg
    c:\program files\PokerStars.FR\gx\cvn_astro.jpg
    c:\program files\PokerStars.FR\gx\dialog.a.bmp
    c:\program files\PokerStars.FR\gx\dialog.bmp
    c:\program files\PokerStars.FR\gx\fg-active.png
    c:\program files\PokerStars.FR\gx\fg-inactive.png
    c:\program files\PokerStars.FR\gx\fg-on.a.bmp
    c:\program files\PokerStars.FR\gx\fg-on.bmp
    c:\program files\PokerStars.FR\gx\fg.a.bmp
    c:\program files\PokerStars.FR\gx\fg.b.bmp
    c:\program files\PokerStars.FR\gx\fg.bmp
    c:\program files\PokerStars.FR\gx\fg.png
    c:\program files\PokerStars.FR\gx\fg10.png
    c:\program files\PokerStars.FR\gx\fg2.png
    c:\program files\PokerStars.FR\gx\fg4.png
    c:\program files\PokerStars.FR\gx\fg6.png
    c:\program files\PokerStars.FR\gx\fg7.png
    c:\program files\PokerStars.FR\gx\fg8.png
    c:\program files\PokerStars.FR\gx\fg9.png
    c:\program files\PokerStars.FR\gx\filter-ico.a.bmp
    c:\program files\PokerStars.FR\gx\filter-ico.bmp
    c:\program files\PokerStars.FR\gx\filter.a.bmp
    c:\program files\PokerStars.FR\gx\filter.bmp
    c:\program files\PokerStars.FR\gx\filterb.bmp
    c:\program files\PokerStars.FR\gx\fonts\ar08.bmp
    c:\program files\PokerStars.FR\gx\fonts\ar08.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\ar08.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\ar08.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\ar08.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\ar08.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\ar08.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\ar08.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\ar08.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\ar08.pff
    c:\program files\PokerStars.FR\gx\fonts\ar09.bmp
    c:\program files\PokerStars.FR\gx\fonts\ar09.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\ar09.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\ar09.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\ar09.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\ar09.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\ar09.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\ar09.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\ar09.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\ar09.pff
    c:\program files\PokerStars.FR\gx\fonts\ar10.bmp
    c:\program files\PokerStars.FR\gx\fonts\ar10.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\ar10.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\ar10.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\ar10.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\ar10.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\ar10.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\ar10.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\ar10.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\ar10.pff
    c:\program files\PokerStars.FR\gx\fonts\arb08.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb08.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb08.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb08.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb08.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb08.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb08.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb08.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb08.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb08.pff
    c:\program files\PokerStars.FR\gx\fonts\arb09.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb09.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb09.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb09.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb09.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb09.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb09.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb09.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb09.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb09.pff
    c:\program files\PokerStars.FR\gx\fonts\arb10.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb10.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb10.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb10.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb10.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb10.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb10.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb10.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb10.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb10.pff
    c:\program files\PokerStars.FR\gx\fonts\arb11.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb11.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb11.cp1250i.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb11.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb11.cp1251i.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb11.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb11.cp1252i.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb11.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb11.cp1253i.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb11.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb11.cp1254i.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb11.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb11.cp1255i.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb11.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb11.cp1256i.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb11.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb11.cp1257i.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb11.pff
    c:\program files\PokerStars.FR\gx\fonts\arb11i.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb12.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb12.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb12.cp1250i.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb12.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb12.cp1251i.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb12.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb12.cp1252i.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb12.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb12.cp1253i.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb12.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb12.cp1254i.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb12.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb12.cp1255i.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb12.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb12.cp1256i.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb12.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb12.cp1257i.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb12.pff
    c:\program files\PokerStars.FR\gx\fonts\arb12i.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb14.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb14.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb14.cp1250i.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb14.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb14.cp1251i.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb14.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb14.cp1252i.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb14.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb14.cp1253i.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb14.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb14.cp1254i.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb14.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb14.cp1255i.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb14.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb14.cp1256i.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb14.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb14.cp1257i.bmp
    c:\program files\PokerStars.FR\gx\fonts\arb14.pff
    c:\program files\PokerStars.FR\gx\fonts\arb14i.bmp
    c:\program files\PokerStars.FR\gx\fonts\arbu09.bmp
    c:\program files\PokerStars.FR\gx\fonts\arbu09.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\arbu09.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\arbu09.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\arbu09.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\arbu09.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\arbu09.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\arbu09.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\arbu09.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\arbu09.pff
    c:\program files\PokerStars.FR\gx\fonts\arbu10.bmp
    c:\program files\PokerStars.FR\gx\fonts\arbu10.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\arbu10.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\arbu10.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\arbu10.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\arbu10.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\arbu10.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\arbu10.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\arbu10.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\arbu10.pff
    c:\program files\PokerStars.FR\gx\fonts\arbu12.bmp
    c:\program files\PokerStars.FR\gx\fonts\arbu12.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\arbu12.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\arbu12.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\arbu12.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\arbu12.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\arbu12.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\arbu12.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\arbu12.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\arbu12.pff
    c:\program files\PokerStars.FR\gx\fonts\aru08.bmp
    c:\program files\PokerStars.FR\gx\fonts\aru08.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\aru08.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\aru08.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\aru08.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\aru08.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\aru08.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\aru08.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\aru08.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\aru08.pff
    c:\program files\PokerStars.FR\gx\fonts\gmb075.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb075.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb075.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb075.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb075.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb075.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb075.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb075.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb075.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb075.pff
    c:\program files\PokerStars.FR\gx\fonts\gmb08.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb08.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb08.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb08.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb08.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb08.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb08.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb08.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb08.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb08.pff
    c:\program files\PokerStars.FR\gx\fonts\gmb09.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb09.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb09.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb09.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb09.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb09.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb09.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb09.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb09.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb09.pff
    c:\program files\PokerStars.FR\gx\fonts\gmb10.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb10.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb10.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb10.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb10.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb10.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb10.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb10.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb10.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb10.pff
    c:\program files\PokerStars.FR\gx\fonts\gmb11.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb11.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb11.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb11.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb11.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb11.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb11.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb11.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb11.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb11.pff
    c:\program files\PokerStars.FR\gx\fonts\gmb12.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb12.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb12.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb12.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb12.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb12.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb12.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb12.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb12.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb12.pff
    c:\program files\PokerStars.FR\gx\fonts\gmb14.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb14.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb14.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb14.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb14.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb14.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb14.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb14.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb14.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb14.pff
    c:\program files\PokerStars.FR\gx\fonts\gmb16.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb16.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb16.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb16.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb16.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb16.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb16.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb16.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb16.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb16.pff
    c:\program files\PokerStars.FR\gx\fonts\gmb18.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb18.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb18.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb18.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb18.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb18.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb18.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb18.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb18.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb18.pff
    c:\program files\PokerStars.FR\gx\fonts\gmb20.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb20.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb20.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb20.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb20.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb20.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb20.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb20.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb20.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\gmb20.pff
    c:\program files\PokerStars.FR\gx\fonts\lg08.bmp
    c:\program files\PokerStars.FR\gx\fonts\lg08.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\lg08.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\lg08.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\lg08.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\lg08.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\lg08.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\lg08.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\lg08.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\lg08.pff
    c:\program files\PokerStars.FR\gx\fonts\lg09.bmp
    c:\program files\PokerStars.FR\gx\fonts\lg09.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\lg09.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\lg09.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\lg09.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\lg09.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\lg09.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\lg09.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\lg09.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\lg09.pff
    c:\program files\PokerStars.FR\gx\fonts\lgb075.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb075.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb075.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb075.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb075.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb075.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb075.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb075.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb075.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb075.pff
    c:\program files\PokerStars.FR\gx\fonts\lgb08.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb08.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb08.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb08.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb08.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb08.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb08.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb08.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb08.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb08.pff
    c:\program files\PokerStars.FR\gx\fonts\lgb09.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb09.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb09.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb09.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb09.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb09.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb09.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb09.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb09.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb09.pff
    c:\program files\PokerStars.FR\gx\fonts\lgb10.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb10.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb10.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb10.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb10.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb10.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb10.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb10.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb10.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb10.pff
    c:\program files\PokerStars.FR\gx\fonts\lgb11.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb11.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb11.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb11.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb11.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb11.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb11.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb11.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb11.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb11.pff
    c:\program files\PokerStars.FR\gx\fonts\lgb12.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb12.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb12.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb12.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb12.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb12.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb12.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb12.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb12.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb12.pff
    c:\program files\PokerStars.FR\gx\fonts\lgb14.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb14.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb14.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb14.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb14.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb14.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb14.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb14.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb14.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb14.pff
    c:\program files\PokerStars.FR\gx\fonts\lgb16.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb16.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb16.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb16.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb16.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb16.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb16.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb16.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb16.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb16.pff
    c:\program files\PokerStars.FR\gx\fonts\lgb18.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb18.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb18.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb18.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb18.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb18.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb18.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb18.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb18.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb18.pff
    c:\program files\PokerStars.FR\gx\fonts\lgb20.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb20.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb20.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb20.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb20.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb20.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb20.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb20.cp1256.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb20.cp1257.bmp
    c:\program files\PokerStars.FR\gx\fonts\lgb20.pff
    c:\program files\PokerStars.FR\gx\fonts\mss08.bmp
    c:\program files\PokerStars.FR\gx\fonts\mss08.cp1250.bmp
    c:\program files\PokerStars.FR\gx\fonts\mss08.cp1251.bmp
    c:\program files\PokerStars.FR\gx\fonts\mss08.cp1252.bmp
    c:\program files\PokerStars.FR\gx\fonts\mss08.cp1253.bmp
    c:\program files\PokerStars.FR\gx\fonts\mss08.cp1254.bmp
    c:\program files\PokerStars.FR\gx\fonts\mss08.cp1255.bmp
    c:\program files\PokerStars.FR\gx\fonts\mss08.cp1256.bmp
    c:\progr
    0
  14. juju666 Messages postés 35446 Date d'inscription   Statut Contributeur sécurité Dernière intervention   4 796
     
    attends.
    0
  15. tista91 Messages postés 90 Statut Membre
     
    J'ai le rapport combofix, les deux liens pour la 2eme étape :

    http://www.virustotal.com/file-scan/report.html?id=d257db13aebb16f1c936d4c7d912d02f4005389724aa47f559fa378f6a13e0f8-1300826267

    http://www.virustotal.com/file-scan/report.html?id=d9971fb32726019c6ef56cad56018ca94a569b2fb1eb281b4d307f236d5ff7a3-1300826393

    Mais combofix ne veut pas apparaitre ici
    0
  17. tista91 Messages postés 90 Statut Membre
     
    et pour "Hébergement de rapport sur pjjoint.malekal.com", ils me demandent un mot de passe...
    0
  18. tista91 Messages postés 90 Statut Membre
     
    Mais peut etre pas necessaire vu que je l'ai fait avant avec l'autre manière ?
    0
  19. tista91 Messages postés 90 Statut Membre
     
    Ah il est passé combofix entre temps !
    0
  20. juju666 Messages postés 35446 Date d'inscription   Statut Contributeur sécurité Dernière intervention   4 796
     
    oui j ai demandé qu'ils soient restaurés ^^

    ton combofix est incomplet héberge le stp

    supprime ces deux trucs :
    c:\users\Baptiste\AppData\Roaming\GetValue.vbs
    c:\users\Baptiste\AppData\Roaming\SetValue.bat

    ça pue.

    je regarde zhpdiag voir si c est mieux.
    0
  • 1
  • 2

Discussions similaires

[URGENT] Que veut dire prise (AUX IN)?
quentinel -
ankae -

18 réponses
autoradio Android que peut-on brancher sur vidéo input
chrisia -
baladur13 -

3 réponses
Casque audio sur prise aux In
Bert -
Andy31200 -

3 réponses
qu'est ce qu'une prise DC IN ?
daphdu974 -
Andy31200 -

3 réponses
java script error in the main process
ceciel2307 -
Thibaut -

3 réponses