Sujet Précédent Sujet Suivant

Virtumonde/vundo quoi faire??

Fermé
jojo32100 Messages postés 14 Date d'inscription jeudi 6 décembre 2007 Statut Membre Dernière intervention 7 décembre 2007 - 6 déc. 2007 à 14:09
g!rly Messages postés 18209 Date d'inscription vendredi 17 août 2007 Statut Contributeur Dernière intervention 30 novembre 2014 - 7 déc. 2007 à 19:12
Bonjour,
J'ai essayé de supprimer ce virus qui m'enerve enormément!!Voici le rapport de hijackthis!!Est -il parti ce virus??
Merci de votre réponse

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:04:06, on 06/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVTray.exe
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVRID.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\ISafe.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\alg.exe
F:\Azureus\Azureus.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\VetMsg.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\Sanner\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ustart.org
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [CaAvTray] "C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVTray.exe"
O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVRID.exe"
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKLM\..\Run: [780c125a] rundll32.exe "C:\WINDOWS\system32\atauimfq.dll",b
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Unibet Poker - {C53BFCFC-7A54-4627-AEBA-2CD4871FCA97} - C:\Microgaming\Poker\UnibetpokerMPP\MPPoker.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\ISafe.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\VetMsg.exe

24 réponses

  • 1
  • 2
Réponse 1 / 24
g!rly Messages postés 18209 Date d'inscription vendredi 17 août 2007 Statut Contributeur Dernière intervention 30 novembre 2014 406
6 déc. 2007 à 16:55
salut jojo,

helas non il reste des bouts

tu as un par feu?

Télécharge combofix.exe (par sUBs) sur ton Bureau.

-> http://download.bleepingcomputer.com/sUBs/ComboFix.exe

-> Double clique combofix.exe.
-> Tape sur la touche 1 (Yes) pour démarrer le scan.
-> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

NOTE : Le rapport se trouve également ici : C:\Combofix.txt

@+
0
Réponse 2 / 24
jojo32100 Messages postés 14 Date d'inscription jeudi 6 décembre 2007 Statut Membre Dernière intervention 7 décembre 2007
6 déc. 2007 à 19:03
Merci de m'aidé!!
Tiens il m'a mis cec:
ComboFix 07-12-02.6 - mickael 2007-12-06 18:47:28.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.481 [GMT 1:00]
Running from: C:\Documents and Settings\mickael\Bureau\ComboFix.exe
* Created a new restore point
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\mickael\Local Settings\Application Data\draofkzhwl.dat
C:\Documents and Settings\mickael\Local Settings\Application Data\draofkzhwl_nav.dat
C:\Documents and Settings\mickael\Local Settings\Application Data\draofkzhwl_navps.dat
C:\WINDOWS\b111.exe
C:\WINDOWS\cookies.ini
C:\WINDOWS\system32\atauimfq.dll
C:\WINDOWS\system32\awvvt.dll
C:\WINDOWS\system32\bxbbxulq.dll
C:\WINDOWS\system32\ddccy.dll
C:\WINDOWS\system32\gaqsybmm.ini
C:\WINDOWS\system32\gebcc.dll
C:\WINDOWS\system32\geedc.dll
C:\WINDOWS\system32\geede.dll
C:\WINDOWS\system32\hhkmp.ini2
C:\WINDOWS\system32\hjotytwn.ini
C:\WINDOWS\system32\iwltmsux.ini
C:\WINDOWS\system32\ljjjkji.dll
C:\WINDOWS\system32\mllji.dll
C:\WINDOWS\system32\mmbysqag.dll
C:\WINDOWS\system32\nwtytojh.dll
C:\WINDOWS\system32\opnljig.dll
C:\WINDOWS\system32\pmnkkhi.dll
C:\WINDOWS\system32\pmnlm.dll
C:\WINDOWS\system32\qfmiuata.ini
C:\WINDOWS\system32\qluxbbxb.ini
C:\WINDOWS\system32\rtstv.ini
C:\WINDOWS\system32\rtstv.ini2
C:\WINDOWS\system32\sstqr.dll
C:\WINDOWS\system32\ssttt.dll
C:\WINDOWS\system32\vtsqo.dll
C:\WINDOWS\system32\vtstr.dll
C:\WINDOWS\system32\xusmtlwi.dll

.
((((((((((((((((((((((((((((( Fichiers cr‚‚s 2007-11-06 to 2007-12-06 ))))))))))))))))))))))))))))))))))))
.

2007-12-03 19:28 . 2007-12-05 07:11 594 ---hs---- C:\WINDOWS\system32\ovnhqrtu.ini
2007-12-03 01:50 . 2007-12-03 01:50 <REP> d-------- C:\Microgaming
2007-12-02 19:43 . 2007-12-02 20:14 <REP> d-------- C:\Program Files\eMule
2007-12-02 19:39 . 2007-12-06 07:51 <REP> d-------- C:\Program Files\Spyware Doctor
2007-12-02 19:39 . 2007-12-02 19:39 <REP> d-------- C:\Documents and Settings\mickael\Application Data\PC Tools
2007-12-02 19:39 . 2007-10-18 00:16 79,688 --a------ C:\WINDOWS\system32\drivers\iksyssec.sys
2007-12-02 19:39 . 2007-10-18 00:15 62,280 --a------ C:\WINDOWS\system32\drivers\iksysflt.sys
2007-12-02 19:39 . 2007-10-18 00:14 41,288 --a------ C:\WINDOWS\system32\drivers\ikfilesec.sys
2007-12-02 19:39 . 2007-10-18 00:16 29,000 --a------ C:\WINDOWS\system32\drivers\kcom.sys
2007-12-02 15:16 . 2007-12-02 15:44 <REP> d-------- C:\VundoFix Backups
2007-12-02 15:13 . 2007-12-06 13:59 <REP> d-------- C:\Program Files\Trend Micro
2007-12-01 15:40 . 2007-12-02 15:11 143 --a------ C:\WINDOWS\system32\mcrh.tmp
2007-12-01 13:49 . 2007-12-01 15:34 <REP> d-------- C:\WINDOWS\SxsCaPendDel
2007-11-29 22:29 . 2007-11-29 22:29 <REP> d-------- C:\Program Files\EA SPORTS
2007-11-29 20:00 . 2007-11-29 20:00 49,472 --a------ C:\Program Files\update.zip
2007-11-29 19:53 . 2007-11-29 19:53 35,840 --a------ C:\WINDOWS\mrofinu2000351.exe.tmp
2007-11-29 19:52 . 2007-02-09 18:34 420,816 --a------ C:\Documents and Settings\mickael\Application Data\wunauclt.exe
2007-11-29 19:05 . 2007-11-29 19:05 685,816 --a------ C:\WINDOWS\system32\drivers\sptd.sys
2007-11-26 19:18 . 2007-12-06 16:08 <REP> d-------- C:\Documents and Settings\mickael\Application Data\Azureus
2007-11-26 19:18 . 2007-11-26 19:18 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Azureus
2007-11-18 12:08 . 2007-11-18 12:08 17 --a------ C:\WINDOWS\pp.enc
2007-11-18 12:06 . 2007-12-06 17:05 <REP> d-------- C:\Documents and Settings\mickael\Application Data\Microgaming

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-12-02 19:43 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2007-12-01 12:54 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-12-01 12:46 --------- d-----w C:\Program Files\BitTorrent
2007-11-29 18:25 --------- d-----w C:\Program Files\Windows Media Connect 2
2007-11-23 21:13 --------- d-----w C:\Documents and Settings\mickael\Application Data\BitTorrent
2007-10-12 07:15 --------- d-----w C:\Documents and Settings\All Users\Application Data\TEMP
2007-10-11 22:41 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{12902647-FF12-424F-9B88-86D9F8AEB7D9}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{38EBBB75-3811-4C21-B06C-8CCBFA6A8747}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{7FC6D532-90B9-4EE7-A4DB-8C2BA036A49A}]
C:\WINDOWS\system32\vtsqq.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AF6C417D-8939-40EB-898A-C612EBDA0413}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2006-03-02 13:00]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2004-12-01 08:54 C:\WINDOWS\SOUNDMAN.EXE]
"NvCplDaemon"="RUNDLL32.exe" [2006-03-02 13:00 C:\WINDOWS\system32\rundll32.exe]
"nwiz"="nwiz.exe" [2006-08-11 22:43 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="RUNDLL32.exe" [2006-03-02 13:00 C:\WINDOWS\system32\rundll32.exe]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50]
"CaAvTray"="C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVTray.exe" [2007-08-08 10:58]
"CAVRID"="C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVRID.exe" [2007-08-08 10:58]
"SDTray"="C:\Program Files\Spyware Doctor\SDTrayApp.exe" [2007-11-02 17:24]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2006-03-02 13:00]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice]
@=""

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Contrôleur d’état.lnk]
path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Contrôleur d’état.lnk
backup=C:\WINDOWS\pss\Contrôleur d’état.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk]
path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Lancement rapide d'Adobe Reader.lnk
backup=C:\WINDOWS\pss\Lancement rapide d'Adobe Reader.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent]
F:\bittorent\bittorrent.exe --force_start_minimized

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ControlCenter2.0]
C:\Program Files\Brother\ControlCenter2\brctrcen.exe /autorun

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\draofkzhwl]
c:\documents and settings\mickael\local settings\application data\draofkzhwl.exe draofkzhwl

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndexSearch]
2005-03-17 19:30 40960 --a--c--- C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe /background

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
C:\Program Files\MSN Messenger\MsnMsgr.Exe /background

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Odebit Multimedia V3]
F:\V3\Odebit.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Odebit Multimedia V3 - Services]
F:\V3\Odebit.exe /info

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PaperPort PTD]
2005-03-17 19:17 57393 --a--c--- C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SetDefPrt]
2005-01-26 18:02 49152 -----c--- C:\Program Files\Brother\Brmfl05a\BrStDvPt.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe /nosplash /minimized

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
F:\Spybot - Search & Destroy\TeaTimer.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SSBkgdUpdate]
C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe -Embedding -boot

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
F:\Steam\Steam.exe -silent

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2007-03-14 02:43 83608 --a------ C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2007-01-26 08:56 171448 --a------ C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe

R3 BrScnUsb;Brother USB Still Image driver;C:\WINDOWS\system32\Drivers\BrScnUsb.sys
R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
S3 ovt530;Webcam Deluxe;C:\WINDOWS\system32\Drivers\ov530vid.sys
S3 SetupNTGLM7X;SetupNTGLM7X;\??\H:\NTGLM7X.sys

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4314a642-95a9-11db-8ce2-806d6172696f}]
\Shell\AutoRun\command - H:\Setup.exe

.
Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
"2007-11-29 18:52:58 C:\WINDOWS\Tasks\At1.job"
- C:\Documents and Settings\mickael\Application Data\wunauclt.exe
"2007-11-29 19:00:00 C:\WINDOWS\Tasks\At2.job"
- C:\Documents and Settings\mickael\Application Data\wunauclt.exe
"2007-11-29 18:52:58 C:\WINDOWS\Tasks\At3.job"
- C:\Documents and Settings\mickael\Application Data\wunauclt.exe
"2007-11-29 21:43:43 C:\WINDOWS\Tasks\At4.job"
- C:\Documents and Settings\mickael\Application Data\wunauclt.exe
"2007-11-29 21:43:43 C:\WINDOWS\Tasks\At5.job"
"2007-11-29 21:43:43 C:\WINDOWS\Tasks\At6.job"
- C:\Documents and Settings\mickael\Application Data\wunauclt.exe
.
**************************************************************************

catchme 0.3.1318 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-06 18:57:57
Windows 5.1.2600 Service Pack 2 NTFS

detected NTDLL code modification:
ZwClose

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-12-06 19:00:25 - machine was rebooted
.
--- E O F ---
0
Réponse 3 / 24
g!rly Messages postés 18209 Date d'inscription vendredi 17 août 2007 Statut Contributeur Dernière intervention 30 novembre 2014 406
6 déc. 2007 à 19:30
re,

tu as un par feu`?

Copie le texte ci-dessous :

File::
C:\WINDOWS\system32\ovnhqrtu.ini
C:\WINDOWS\SxsCaPendDel
C:\Program Files\update.zip
C:\WINDOWS\mrofinu2000351.exe.tmp
c:\documents and settings\mickael\local settings\application data\draofkzhwl.exe

Folder::
C:\Microgaming
C:\VundoFix Backups

Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{12902647-FF12-424F-9B88-86D9F8AEB7D9}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{38EBBB75-3811-4C21-B06C-8CCBFA6A8747}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{7FC6D532-90B9-4EE7-A4DB-8C2BA036A49A}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AF6C417D-8939-40EB-898A-C612EBDA0413}]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\draofkzhwl]

Ouvre le Bloc-Notes puis colle le texte copié.
(Démarrer\Tous les programmes\Accessoires\Bloc notes.)
Sauvegarde ce fichier sous le nom de CFScript.txt.

Glisse maintenant le fichier CFScript.txt dans Combofix.exe comme ci-dessous :

http://serveur1.archive-host.com/membres/up/1366464061/CFScript.gif

Cela va relancer Combofix,


Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide.

Patiente le temps du scan.Le bureau va disparaître à plusieurs reprises: c'est normal!

Ne touche à rien tant que le scan n'est pas terminé.

Après redémarrage, poste le contenu du rapport Combofix.txt2

S'il n'y a pas de rédémarrage, poste quand même le rapport.

puis fais ceci :

Téléchargez MSNFix.zip (de !aur3n7) sur votre bureau:
http://sosvirus.changelog.fr/MSNFix.zip
Décompressez-le (clic droit >> Extraire ici) et double cliquer sur le fichier MSNFix.bat.
- Exécutez l'option R.
-- Si l'infection est détectée, un message l'indiquera et il suffira de presser une touche pour lancer le nettoyage

Note :
Si une erreur de suppression est détectée un message s'affichera demandant de redémarrer l'ordinateur afin de terminer les opérations. Dans ce cas il suffit de redémarrer l'ordinateur en mode normal

- Le rapport sera enregistré dans le même dossier que MSNFix sous forme date_heure.txt

et

Fais un clic droit sur ce lien :
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
Ensuite double clique sur navilog1.exe pour lancer l'installation.
Une fois l'installation terminée, le fix s'exécutera automatiquement.
(Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

Laisse-toi guider. Au menu principal, choisis 1 et valides.
(ne fais pas le choix 2,3 ou 4 sans notre avis/accord)

Patiente jusqu'au message :
*** Analyse Termine le ..... ***
Appuie sur une touche comme demandé, le blocnote va s'ouvrir.
Copie-colle l'intégralité dans une réponse. Referme le blocnote.
Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)

donc post le rapport de combofix celui de msnfix et celui de navilog dans ta prochaine réponse

@+
0
Réponse 4 / 24
jojo32100 Messages postés 14 Date d'inscription jeudi 6 décembre 2007 Statut Membre Dernière intervention 7 décembre 2007
6 déc. 2007 à 20:25
Rapport 2 combofix

ComboFix 07-12-02.6 - mickael 2007-12-06 19:43:50.2 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.604 [GMT 1:00]
Running from: C:\Documents and Settings\mickael\Bureau\ComboFix.exe
Command switches used :: C:\Documents and Settings\mickael\Bureau\CFScript.txt
* Created a new restore point

FILE
c:\documents and settings\mickael\local settings\application data\draofkzhwl.exe
C:\Program Files\update.zip
C:\WINDOWS\mrofinu2000351.exe.tmp
C:\WINDOWS\SxsCaPendDel
C:\WINDOWS\system32\ovnhqrtu.ini
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Microgaming
C:\Microgaming\Poker\UnibetpokerMPP\ABI.dll
C:\Microgaming\Poker\UnibetpokerMPP\BuildVersion.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\IAniObject.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\IAreaMapObject.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\IBannerObject.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\IButtonObject.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\ICanvasObject.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\ICardObject.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\ICasinoInfo.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\ICasinoPainter.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\ICheckBoxObject.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\IChipArrayObject.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\IComboObject.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\ICommsObject.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\IDataLayer.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\IDDList.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\IDeckObject.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\IEncrypt.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\IEventLogger.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\IFontObject.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\IGameHistory.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\IGameStats.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\IHotKeyObject.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\IImage.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\IInf.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\ILineObject.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\IListHeaderControl.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\IListObject.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\ILobbyListObject.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\ILocalData.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\ILogger.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\IMenuBar.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\IMonitorSection.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\IMPGStore.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\IPathObject.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\IPlayerAccount.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\IScrollObject.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\IServerStringManager.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\ISliderBarRanged.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\ISliderObject.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\ISoundHandler.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\ISpriteController.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\ISpriteList.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\ITabList.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\ITextBox.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\ITextObject.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\ITickerObject.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\ITreeControl.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\IUsageStats.dll
C:\Microgaming\Poker\UnibetpokerMPP\Control\IWebObject.dll
C:\Microgaming\Poker\UnibetpokerMPP\Eula.txt
C:\Microgaming\Poker\UnibetpokerMPP\fdi.dll
C:\Microgaming\Poker\UnibetpokerMPP\GameHistory.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\ClientConfig\ClientConfig.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Common\Common.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Common\PrimaBlank.html
C:\Microgaming\Poker\UnibetpokerMPP\global\Common\SND_Button.wav
C:\Microgaming\Poker\UnibetpokerMPP\global\ExitSplash\ExitSplash.dll
C:\Microgaming\Poker\UnibetpokerMPP\global\ExitSplash\exitsplash.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\FlashCasinoGame\FlashCasinoGame.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\FlashCasinoGame\FlashCasinoGame.dll
C:\Microgaming\Poker\UnibetpokerMPP\global\FlashCasinoGame\FlashCasinoGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Guest\ClientConfig\ClientConfig.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Guest\Common\Common.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Guest\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Guest\Menu\M_Tree.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Guest\Menu\M_Wizard_Cash.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Guest\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Guest\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Guest\Tourn_Menu\Tourn_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\HoldEm\holdem.dll
C:\Microgaming\Poker\UnibetpokerMPP\global\HoldEm\HoldEm.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\ICafe\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\ICafe\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\ICafe\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\BTN_UPECombineLater.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\BTN_UPECombineNow.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\FLC_ConnectSpeed.gif
C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\M_ADV_ExpandView.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\M_Buddy.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\M_Casino.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\M_Tree.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\M_Wizard.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\M_Wizard_Cash.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\M_Wizard_MTT.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\M_Wizard_SnG.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\Menu.dll
C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\SND_TournReminder.mp3
C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\TXT_FlagsImageList.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\TXT_SpeechBubble.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\TXT_SpeechbubbleAdv.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\TXT_SubTabComboBoxTxtBkg.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\TXT_SubTabComboLimitBoxBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\TXT_SubTabComboListBoxBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\TXT_UPECombineArrow.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\TXT_UPECombineBkg.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\BTN_HistoryScrollDown1.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\BTN_HistoryScrollUp1.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\Chat.dll
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\Data3.fnt
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\DECK_ChipsMany.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\DECK_RabbitCamColour.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\DECK_RabbitCamStandard.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\FLC_rotate.gif
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\FNT_Rating.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\FNT_StickyNote.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\ICO_Clubs.BMP
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\ICO_Diamonds.BMP
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\ICO_Hearts.BMP
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\ICO_Spades.BMP
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\LargeViewTournamentPanel.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\Scroll_HistoryBackground.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\Scroll_HistoryBottomPiece.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\Scroll_HistoryMiddlePiece.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\Scroll_HistoryTopPiece.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\SND_AddChips.wav
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\SND_AddChips2.wav
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\SND_BadBeatProgressiveWin.wav
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\SND_CardDeal.mp3
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\SND_CardFold.mp3
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\SND_Check.mp3
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\SND_ChipsDragging.wav
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\SND_ExitGame.wav
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\SND_InputNeeded.mp3
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\SND_SitDown.mp3
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\SND_WakeUp.mp3
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\SND_Win.mp3
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_10seatpref.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_BBWinPlaque.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_GreyCard.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_HistoryBkg.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_Icon_History.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_Icon_Note.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_Icon_Profile.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_NextLevel_MiniView.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_SpeechArrow01.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_SpeechArrow02.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_SpeechArrow03.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_SpeechArrow04.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_SpeechBubble.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_StickyNoteBkg.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_TableNotification.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_TableNotification_Miniview.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_TournDetailsListBoxbkg.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_TournListTextBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\Popup_Menu\Popup_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Popup_Menu\TXT_IconAuditors.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\Popup_Menu\TXT_IconCashCheck.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\Popup_Menu\TXT_IconPlayCheck.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\Splash\Splash.dll
C:\Microgaming\Poker\UnibetpokerMPP\global\Splash\splash.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Table10\Table10.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Table10_Cards\Table10_Cards.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Table2\Table2.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Table2_Cards\Table2_Cards.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Table2_Draw\Table2_Draw.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Table2_Stud\Table2_Stud.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Table2_Stud_Cards\Table2_Stud_Cards.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Table5\Table5.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Table5_Cards\Table5_Cards.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Table5_Draw\Table5_Draw.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Table5_Stud\Table5_Stud.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Table5_Stud_Cards\Table5_Stud_Cards.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Table6\Table6.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Table6_Cards\Table6_Cards.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Table6_Stud\Table6_Stud.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Table6_Stud_Cards\Table6_Stud_Cards.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Table8\Table8.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Table8_Cards\Table8_Cards.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Table8_Stud\Table8_Stud.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Table8_Stud_Cards\Table8_Stud_Cards.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Tourn_Menu\Data3.fnt
C:\Microgaming\Poker\UnibetpokerMPP\global\Tourn_Menu\FNT_Tourn_Blinds.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\Tourn_Menu\FNT_Tourn_CurrentLevel.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\Tourn_Menu\FNT_Tourn_NextBreak.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\Tourn_Menu\FNT_Tourn_NextLevelBlinds.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\Tourn_Menu\FNT_Tourn_NextLevelTime.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\Tourn_Menu\FNT_Tourn_NumEntrants.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\Tourn_Menu\FNT_Tourn_PlayersRemainingLRG.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\Tourn_Menu\FNT_Tourn_PlayersRemainingSML.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\Tourn_Menu\FNT_Tourn_Postion.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\Tourn_Menu\FNT_Tourn_RunningTime.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\Tourn_Menu\Tourn_Menu.dll
C:\Microgaming\Poker\UnibetpokerMPP\global\Tourn_Menu\Tourn_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\global\Tourn_Menu\TXT_TournDetailsListBoxbkg.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\Tourn_Menu\TXT_TournListTextbkg.dat
C:\Microgaming\Poker\UnibetpokerMPP\global\Tourn_Menu\TXT_TournShowListBoxbkg.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\da\BuildVersion.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\da\Common\CommonRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\da\Common\GenericImage.gif
C:\Microgaming\Poker\UnibetpokerMPP\local\da\Common\TXT_PoweredByBH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\da\Common\TXT_PoweredByBV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\da\Common\TXT_PoweredByWH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\da\Common\TXT_PoweredByWV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\da\ExitSplash\ExitSplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\da\FlashCasinoGame\FlashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\da\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\da\Menu\M_ADV_ExpandView.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\da\Menu\M_Tree.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\da\Menu\M_Wizard_Cash.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\da\Menu\M_Wizard_SnG.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\da\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\da\Menu\MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\da\PokerGame\LargeViewTournamentPanel.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\da\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\da\PokerGame\pokergameRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\da\Splash\SplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\da\Tourn_Menu\Tourn_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\da\Tourn_Menu\Tourn_MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\de\BuildVersion.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\de\Common\CommonRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\de\Common\GenericImage.gif
C:\Microgaming\Poker\UnibetpokerMPP\local\de\Common\TXT_PoweredByBH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\de\Common\TXT_PoweredByBV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\de\Common\TXT_PoweredByWH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\de\Common\TXT_PoweredByWV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\de\ExitSplash\ExitSplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\de\FlashCasinoGame\FlashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\de\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\de\Menu\M_ADV_ExpandView.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\de\Menu\M_Buddy.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\de\Menu\M_Casino.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\de\Menu\M_Tree.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\de\Menu\M_Wizard.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\de\Menu\M_Wizard_Cash.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\de\Menu\M_Wizard_MTT.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\de\Menu\M_Wizard_SnG.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\de\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\de\Menu\MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\de\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\de\PokerGame\pokergameRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\de\Splash\SplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\de\Table2_Draw\Table2_Draw.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\de\Table5_Draw\Table5_Draw.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\de\Tourn_Menu\Tourn_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\de\Tourn_Menu\Tourn_MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\el\BuildVersion.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\el\Common\CommonRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\el\Common\GenericImage.gif
C:\Microgaming\Poker\UnibetpokerMPP\local\el\Common\TXT_PoweredByBH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\el\Common\TXT_PoweredByBV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\el\Common\TXT_PoweredByWH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\el\Common\TXT_PoweredByWV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\el\ExitSplash\ExitSplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\el\FlashCasinoGame\FlashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\el\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\el\Menu\M_Buddy.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\el\Menu\M_Casino.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\el\Menu\M_Tree.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\el\Menu\M_Wizard.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\el\Menu\M_Wizard_Cash.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\el\Menu\M_Wizard_MTT.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\el\Menu\M_Wizard_SnG.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\el\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\el\Menu\MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\el\PokerGame\LargeViewTournamentPanel.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\el\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\el\PokerGame\pokergameRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\el\Splash\SplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\el\Tourn_Menu\Tourn_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\el\Tourn_Menu\Tourn_MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\en\BuildVersion.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\en\Common\CommonRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\en\Common\GenericImage.gif
C:\Microgaming\Poker\UnibetpokerMPP\local\en\Common\TXT_PoweredByBH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\en\Common\TXT_PoweredByBV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\en\Common\TXT_PoweredByWH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\en\Common\TXT_PoweredByWV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\en\ExitSplash\ExitSplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\en\FlashCasinoGame\FlashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\en\Menu\MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\en\PokerGame\pokergameRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\en\Splash\SplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\en\Tourn_Menu\Tourn_MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\es\BuildVersion.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\es\Common\CommonRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\es\Common\GenericImage.gif
C:\Microgaming\Poker\UnibetpokerMPP\local\es\Common\TXT_PoweredByBH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\es\Common\TXT_PoweredByBV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\es\Common\TXT_PoweredByWH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\es\Common\TXT_PoweredByWV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\es\ExitSplash\ExitSplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\es\FlashCasinoGame\FlashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\es\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\es\Menu\M_Buddy.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\es\Menu\M_Tree.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\es\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\es\Menu\MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\es\PokerGame\LargeViewTournamentPanel.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\es\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\es\PokerGame\pokergameRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\es\Splash\SplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\es\Tourn_Menu\Tourn_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\es\Tourn_Menu\Tourn_MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\fi\BuildVersion.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\fi\Common\CommonRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\fi\Common\GenericImage.gif
C:\Microgaming\Poker\UnibetpokerMPP\local\fi\Common\TXT_PoweredByBH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\fi\Common\TXT_PoweredByBV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\fi\Common\TXT_PoweredByWH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\fi\Common\TXT_PoweredByWV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\fi\ExitSplash\ExitSplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\fi\FlashCasinoGame\FlashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\fi\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\fi\Menu\M_Buddy.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\fi\Menu\M_Tree.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\fi\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\fi\Menu\MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\fi\PokerGame\LargeViewTournamentPanel.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\fi\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\fi\PokerGame\pokergameRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\fi\Splash\SplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\fi\Table5\Table5.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\fi\Tourn_Menu\Tourn_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\fi\Tourn_Menu\Tourn_MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\fr\BuildVersion.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Common\CommonRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Common\GenericImage.gif
C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Common\TXT_PoweredByBH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Common\TXT_PoweredByBV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Common\TXT_PoweredByWH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Common\TXT_PoweredByWV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\fr\ExitSplash\exitsplash.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\fr\ExitSplash\ExitSplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\fr\FlashCasinoGame\FlashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Menu\M_Buddy.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Menu\M_Tree.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Menu\M_Wizard.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Menu\M_Wizard_Cash.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Menu\M_Wizard_SnG.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Menu\MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\fr\PokerGame\LargeViewTournamentPanel.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\fr\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\fr\PokerGame\pokergameRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Splash\SplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Table2_Draw\Table2_Draw.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Table5_Draw\Table5_Draw.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Tourn_Menu\Tourn_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Tourn_Menu\Tourn_MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\it\BuildVersion.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\it\Common\CommonRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\it\Common\GenericImage.gif
C:\Microgaming\Poker\UnibetpokerMPP\local\it\Common\TXT_PoweredByBH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\it\Common\TXT_PoweredByBV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\it\Common\TXT_PoweredByWH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\it\Common\TXT_PoweredByWV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\it\ExitSplash\ExitSplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\it\FlashCasinoGame\FlashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\it\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\it\Menu\M_ADV_ExpandView.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\it\Menu\M_Buddy.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\it\Menu\M_Tree.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\it\Menu\M_Wizard.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\it\Menu\M_Wizard_Cash.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\it\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\it\Menu\MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\it\PokerGame\LargeViewTournamentPanel.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\it\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\it\PokerGame\pokergameRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\it\Splash\SplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\it\Table2_Draw\Table2_Draw.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\it\Table5\Table5.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\it\Table5_Draw\Table5_Draw.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\it\Table5_Stud\Table5_Stud.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\it\Tourn_Menu\Tourn_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\it\Tourn_Menu\Tourn_MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\ja\BuildVersion.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\ja\Common\CommonRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\ja\Common\GenericImage.gif
C:\Microgaming\Poker\UnibetpokerMPP\local\ja\Common\TXT_PoweredByBH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\ja\Common\TXT_PoweredByBV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\ja\Common\TXT_PoweredByWH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\ja\Common\TXT_PoweredByWV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\ja\ExitSplash\ExitSplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\ja\FlashCasinoGame\FlashCasinoGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\ja\FlashCasinoGame\FlashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\ja\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\ja\Menu\M_Tree.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\ja\Menu\M_Wizard.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\ja\Menu\M_Wizard_Cash.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\ja\Menu\M_Wizard_MTT.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\ja\Menu\M_Wizard_SnG.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\ja\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\ja\Menu\MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\ja\PokerGame\LargeViewTournamentPanel.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\ja\PokerGame\Pokergame.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\ja\PokerGame\pokergameRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\ja\Splash\SplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\ja\Tourn_Menu\Tourn_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\ja\Tourn_Menu\Tourn_MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\ko\BuildVersion.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\ko\Common\CommonRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\ko\Common\GenericImage.gif
C:\Microgaming\Poker\UnibetpokerMPP\local\ko\Common\TXT_PoweredByBH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\ko\Common\TXT_PoweredByBV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\ko\Common\TXT_PoweredByWH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\ko\Common\TXT_PoweredByWV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\ko\ExitSplash\ExitSplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\ko\FlashCasinoGame\FlashCasinoGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\ko\FlashCasinoGame\FlashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\ko\Menu\M_Tree.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\ko\Menu\M_Wizard.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\ko\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\ko\Menu\MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\ko\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\ko\PokerGame\pokergameRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\ko\Splash\SplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\ko\Tourn_Menu\Tourn_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\ko\Tourn_Menu\Tourn_MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\nl\BuildVersion.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Common\CommonRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Common\GenericImage.gif
C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Common\TXT_PoweredByBH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Common\TXT_PoweredByBV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Common\TXT_PoweredByWH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Common\TXT_PoweredByWV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\nl\ExitSplash\ExitSplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\nl\FlashCasinoGame\FlashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Menu\M_ADV_ExpandView.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Menu\M_Buddy.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Menu\M_Casino.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Menu\M_Tree.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Menu\M_Wizard.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Menu\M_Wizard_Cash.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Menu\M_Wizard_MTT.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Menu\M_Wizard_SnG.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Menu\MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\nl\PokerGame\LargeViewTournamentPanel.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\nl\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\nl\PokerGame\pokergameRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Splash\SplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Tourn_Menu\Tourn_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Tourn_Menu\Tourn_MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\no\BuildVersion.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\no\Common\CommonRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\no\Common\GenericImage.gif
C:\Microgaming\Poker\UnibetpokerMPP\local\no\Common\TXT_PoweredByBH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\no\Common\TXT_PoweredByBV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\no\Common\TXT_PoweredByWH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\no\Common\TXT_PoweredByWV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\no\ExitSplash\ExitSplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\no\FlashCasinoGame\FlashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\no\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\no\Menu\M_Buddy.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\no\Menu\M_Tree.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\no\Menu\M_Wizard_Cash.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\no\Menu\M_Wizard_SnG.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\no\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\no\Menu\MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\no\PokerGame\LargeViewTournamentPanel.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\no\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\no\PokerGame\pokergameRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\no\Splash\SplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\no\Tourn_Menu\Tourn_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\no\Tourn_Menu\Tourn_MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\BuildVersion.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Common\CommonRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Common\GenericImage.gif
C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Common\TXT_PoweredByBH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Common\TXT_PoweredByBV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Common\TXT_PoweredByWH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Common\TXT_PoweredByWV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\ExitSplash\ExitSplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\FlashCasinoGame\FlashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Menu\M_ADV_ExpandView.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Menu\M_Buddy.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Menu\M_Tree.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Menu\M_Wizard.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Menu\M_Wizard_Cash.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Menu\MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\PokerGame\LargeViewTournamentPanel.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\PokerGame\Pokergame.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\PokerGame\pokergameRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Splash\SplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Table5\Table5.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Table5_Draw\Table5_Draw.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Tourn_Menu\Tourn_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Tourn_Menu\Tourn_MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\pt\BuildVersion.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\pt\Common\CommonRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\pt\Common\GenericImage.gif
C:\Microgaming\Poker\UnibetpokerMPP\local\pt\Common\TXT_PoweredByBH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\pt\Common\TXT_PoweredByBV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\pt\Common\TXT_PoweredByWH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\pt\Common\TXT_PoweredByWV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\pt\ExitSplash\ExitSplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\pt\FlashCasinoGame\FlashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\pt\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\pt\Menu\M_ADV_ExpandView.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\pt\Menu\M_Buddy.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\pt\Menu\M_Tree.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\pt\Menu\M_Wizard.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\pt\Menu\M_Wizard_Cash.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\pt\Menu\menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\pt\Menu\MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\pt\PokerGame\LargeViewTournamentPanel.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\pt\PokerGame\Pokergame.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\pt\PokerGame\PokergameRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\pt\Splash\SplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\pt\Tourn_Menu\Tourn_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\pt\Tourn_Menu\Tourn_MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\ru\BuildVersion.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Common\CommonRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Common\GenericImage.gif
C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Common\TXT_PoweredByBH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Common\TXT_PoweredByBV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Common\TXT_PoweredByWH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Common\TXT_PoweredByWV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\ru\ExitSplash\ExitSplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\ru\FlashCasinoGame\FlashCasinoGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\ru\FlashCasinoGame\FlashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Menu\M_ADV_ExpandView.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Menu\M_Buddy.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Menu\M_Tree.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Menu\M_Wizard.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Menu\M_Wizard_Cash.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Menu\M_Wizard_SnG.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Menu\MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\ru\PokerGame\LargeViewTournamentPanel.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\ru\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\ru\PokerGame\pokergameRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Splash\SplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Table5_Draw\Table5_Draw.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Tourn_Menu\Tourn_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Tourn_Menu\Tourn_MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\sv\BuildVersion.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Common\CommonRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Common\GenericImage.gif
C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Common\TXT_PoweredByBH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Common\TXT_PoweredByBV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Common\TXT_PoweredByWH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Common\TXT_PoweredByWV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\sv\ExitSplash\ExitSplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\sv\FlashCasinoGame\FlashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Menu\M_Buddy.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Menu\M_Tree.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Menu\M_Wizard.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Menu\M_Wizard_Cash.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Menu\M_Wizard_SnG.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Menu\MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\sv\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\sv\PokerGame\pokergameRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Splash\SplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Table2_Draw\Table2_Draw.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Table5_Draw\Table5_Draw.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Tourn_Menu\Tourn_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Tourn_Menu\Tourn_MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\tr\BuildVersion.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\tr\Common\CommonRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\tr\Common\GenericImage.gif
C:\Microgaming\Poker\UnibetpokerMPP\local\tr\Common\TXT_PoweredByBH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\tr\Common\TXT_PoweredByBV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\tr\Common\TXT_PoweredByWH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\tr\Common\TXT_PoweredByWV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\tr\ExitSplash\ExitSplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\tr\FlashCasinoGame\FlashCasinoGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\tr\FlashCasinoGame\FlashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\tr\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\tr\Menu\M_Buddy.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\tr\Menu\M_Tree.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\tr\Menu\M_Wizard_Cash.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\tr\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\tr\Menu\MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\tr\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\tr\PokerGame\pokergameRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\tr\Splash\SplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\tr\Table5_Draw\Table5_Draw.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\tr\Tourn_Menu\Tourn_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\tr\Tourn_Menu\Tourn_MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\BuildVersion.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Common\CommonRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Common\GenericImage.gif
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Common\TXT_PoweredByBH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Common\TXT_PoweredByBV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Common\TXT_PoweredByWH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Common\TXT_PoweredByWV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\ExitSplash\exitsplash.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\ExitSplash\ExitSplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\FlashCasinoGame\FlashCasinoGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\FlashCasinoGame\FlashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Menu\M_ADV_ExpandView.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Menu\M_Buddy.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Menu\M_Casino.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Menu\M_Tree.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Menu\M_Wizard.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Menu\M_Wizard_Cash.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Menu\M_Wizard_MTT.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Menu\M_Wizard_SnG.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Menu\MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\PokerGame\LargeViewTournamentPanel.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\PokerGame\pokergameRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Splash\SplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Table2_Draw\Table2_Draw.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Table5_Draw\Table5_Draw.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Tourn_Menu\Tourn_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Tourn_Menu\Tourn_MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\BuildVersion.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Common\CommonRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Common\GenericImage.gif
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Common\TXT_PoweredByBH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Common\TXT_PoweredByBV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Common\TXT_PoweredByWH.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Common\TXT_PoweredByWV.dat
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\ExitSplash\ExitSplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\FlashCasinoGame\FlashCasinoGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\FlashCasinoGame\FlashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Menu\M_ADV_ExpandView.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Menu\M_Buddy.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Menu\M_Casino.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Menu\M_Tree.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Menu\M_Wizard.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Menu\M_Wizard_Cash.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Menu\M_Wizard_MTT.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Menu\M_Wizard_SnG.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Menu\MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\PokerGame\LargeViewTournamentPanel.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\PokerGame\pokergameRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Splash\SplashRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Tourn_Menu\Tourn_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Tourn_Menu\Tourn_MenuRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\Logger\unibetpoker34.lgr
C:\Microgaming\Poker\UnibetpokerMPP\Logger\unibetpoker35.lgr
C:\Microgaming\Poker\UnibetpokerMPP\Logger\unibetpoker36.lgr
C:\Microgaming\Poker\UnibetpokerMPP\Logger\unibetpoker37.lgr
C:\Microgaming\Poker\UnibetpokerMPP\Logger\unibetpoker38.lgr
C:\Microgaming\Poker\UnibetpokerMPP\Logger\unibetpoker39.lgr
C:\Microgaming\Poker\UnibetpokerMPP\Logger\unibetpoker40.lgr
C:\Microgaming\Poker\UnibetpokerMPP\Logger\unibetpoker41.lgr
C:\Microgaming\Poker\UnibetpokerMPP\Logger\unibetpoker42.lgr
C:\Microgaming\Poker\UnibetpokerMPP\Logger\unibetpoker43.lgr
C:\Microgaming\Poker\UnibetpokerMPP\Magic.enc
C:\Microgaming\Poker\UnibetpokerMPP\MGSCOMMS.dll
C:\Microgaming\Poker\UnibetpokerMPP\mgsmsg.dll
C:\Microgaming\Poker\UnibetpokerMPP\Mimgldr.dll
C:\Microgaming\Poker\UnibetpokerMPP\Mp3dec.asi
C:\Microgaming\Poker\UnibetpokerMPP\MPCore.dll
C:\Microgaming\Poker\UnibetpokerMPP\MPExporter.dll
C:\Microgaming\Poker\UnibetpokerMPP\MPG.dat
C:\Microgaming\Poker\UnibetpokerMPP\MPGStore2.dll
C:\Microgaming\Poker\UnibetpokerMPP\MPGUtil.dll
C:\Microgaming\Poker\UnibetpokerMPP\MPPoker.exe
C:\Microgaming\Poker\UnibetpokerMPP\Mss32.dll
C:\Microgaming\Poker\UnibetpokerMPP\msvcp71.dll
C:\Microgaming\Poker\UnibetpokerMPP\msvcr71.dll
C:\Microgaming\Poker\UnibetpokerMPP\mupinfo
C:\Microgaming\Poker\UnibetpokerMPP\readme.txt
C:\Microgaming\Poker\UnibetpokerMPP\storecore.dll
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Common\TXT_AboutMGS.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\ExitSplash\ExitSplash.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\ExitSplash\exitsplash.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\HoldEm\BTN_close.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\HoldEm\BTN_minimize.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\HoldEm\MiniTable.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Icafe\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Icafe\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BKG_BadBeat.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_6.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_ActiveTablesCheck.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_ActiveTablesUnCheck.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_ADV_Find.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_ADV_Go.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_ADV_JoinTable.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_ADV_JoinWaitingList.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Buddy_AcceptDecline.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Buddy_AddBuddy.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Buddy_BlockRemove.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_CanvasTitleBarTables.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_CheckBox.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_CheckBox_Tourn.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_FetchNext.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_FetchPrev.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_GameScrollDown.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_GameScrollUp.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_GameSkinnyScrollDown.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_GameSkinnyScrollUp.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Go.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Gototourn.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_JoinTable.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_JoinWaitingList.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_ListHeader.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Login.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Menu.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Nav_Bank.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Nav_Buddies.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Nav_BuddyIcon.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Nav_Casino.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Nav_ChangeLobby.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Nav_Help.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Nav_Menu.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Nav_MyAccount.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Nav_Preferences.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Nav_Promotions.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Nav_Refresh.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Nav_SecureIcon.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_UnCheckBox.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_UnCheckBox_Tourn.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_10SeatSmall.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_1ClickMedium.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_2SeatSmall.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_5CardDrawSmall.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_5CardStudSmall.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_5SeatSmall.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_6SeatSmall.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_7CardStudSmall.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_8SeatSmall.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_CashLarge.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_CashMedium.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_EUR.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_FixedLimitSmall.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_GBP.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_GoToTable.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_HoldemSmall.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_HyperLinks.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_JPY.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_Minus.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_MoreBack.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_NOK.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_NoLimitSmall.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_OmahaHiLoSmall.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_OmahaSmall.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_Plus.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_PotLimitSmall.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_RadioSelected.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_RadioUnselected.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_ScheduleMedium.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_SEK.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_Sit&GoMedium.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_Sit&GoMTTSmall.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_Sit&GoSTTSmall.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_SuggestionBox.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_SuggestionBoxSnG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_SuggestionError.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_USD.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\CHK_ADV_ShowHideAdv.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\CHK_CheckBoxCheckUncheck.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\CHK_Nav_SoundIcon.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Data3.fnt
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\FLC_ConnectSpeed.gif
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\FLC_MOTD.gif
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\FNT_Jackpot.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\M_Buddy.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\M_Casino.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\M_Shared.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\M_Tree.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\M_Wizard.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Main.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Minus.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Plus.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\SCROLL_Background.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\SCROLL_BottomPiece.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\SCROLL_MiddlePiece.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Scroll_SkinnyBackground.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Scroll_SkinnyBottomPiece.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Scroll_SkinnyMiddlePiece.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Scroll_SkinnyTopPiece.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\SCROLL_TopPiece.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Slider_ADV_IndicatorLeft.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Slider_ADV_IndicatorRight.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Slider_ADV_MainBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Slider_ADV_RangeSelection.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Slider_Wizard_Indicator.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Slider_Wizard_MainBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Slider_Wizard_RangeSelection.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Slider_Wizard_SnGIndicator.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Slider_Wizard_SnGMainBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_MainSelectedLeft.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_MainSelectedMiddle.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_MainSelectedRight.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_MainUnselectedLeft.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_MainUnselectedMiddle.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_MainUnselectedRight.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_PrivateSelectedLeft.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_PrivateSelectedMiddle.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_PrivateSelectedRight.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_PrivateUnselectedLeft.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_PrivateUnselectedMiddle.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_PrivateUnselectedRight.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_SliderSelectedLeft.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_SliderSelectedMiddle.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_SliderSelectedRight.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_SliderUnSelectedLeft.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_SliderUnSelectedMiddle.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_SliderUnSelectedRight.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_LobbyNormalLeft.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_LobbyNormalMiddle.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_LobbyNormalRight.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_LobbySelectedLeft.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_LobbySelectedMiddle.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_LobbySelectedRight.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_ADV_CheckBoxAltBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_ADV_FilterBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_ADV_FilterBKGSml.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_ADV_GameListBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_ADV_GameListBottomBar.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_ADV_Main.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_ADV_PrivateBottom.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_ADV_PrivateSeatedWaitBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_ADV_SeatedWaitingAltBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_ADV_SeatedWaitingBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_ADV_SeatedWaitingBottom.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_ADV_VerticalDivider.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_BannerBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Buddy_BuddyImageList.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Buddy_Error.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Buddy_InviteRecievedImageList.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Buddy_Main.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Buddy_MainTournListLobby.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Buddy_SeatedWaitingBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_FlagsImageList.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_FlashTableInfoListBkG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_FrameBottom.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\g
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 24
jojo32100 Messages postés 14 Date d'inscription jeudi 6 décembre 2007 Statut Membre Dernière intervention 7 décembre 2007
6 déc. 2007 à 20:51
Rapport msn fix

MSNFix 1.601

C:\Documents and Settings\mickael\Bureau\MSNFix
Fix exécuté le 06/12/2007 - 20:47:26,40 By mickael
mode normal

************************ Recherche les fichiers présents

Aucun Fichier trouvé

************************ Recherche les dossiers présents

... C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP\




************************ Suppression des fichiers



************************ Suppression des dossiers

.. OK ... C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP\


************************ Nettoyage du registre



************************ Fichiers suspects

Aucun Fichier trouvé


Les fichiers et clés de registre supprimés ont été sauvegardés dans le fichier 06122007_20482918.zip


------------------------------------------------------------------------
Auteur : !aur3n7 Contact: https://www.ionos.fr/
------------------------------------------------------------------------

--------------------------------------------- END ---------------------------------------------
0
Réponse 6 / 24
g!rly Messages postés 18209 Date d'inscription vendredi 17 août 2007 Statut Contributeur Dernière intervention 30 novembre 2014 406
6 déc. 2007 à 20:58
peux tu mettre le rapport de combofix en entier stp

puis il manque encore le rapport de navilog

@´+
0
Réponse 7 / 24
jojo32100 Messages postés 14 Date d'inscription jeudi 6 décembre 2007 Statut Membre Dernière intervention 7 décembre 2007
6 déc. 2007 à 21:08
Et voila le dernier merci pour tout!!

Search Navipromo version 3.3.6 commencé le 06/12/2007 à 20:54:41,48

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1
Mise à jour le 14.11.2007 à 18h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.11


*** Recherche Programmes installés ***




*** Recherche dossiers dans C:\WINDOWS ***



*** Recherche dossiers dans C:\Program Files ***



*** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data ***




*** Recherche dossiers dans C:\Documents and Settings\mickael\Application Data ***


*** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1 ***


*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

Aucun fichier trouvé dans :

- C:\WINDOWS\system32
- C:\DOCUME~1\MICKAEL\LOCALS~1\APPLIC~1



*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans C:\WINDOWS\system32 *

* Recherche dans C:\DOCUME~1\MICKAEL\LOCALS~1\APPLIC~1 *



*** Recherche fichiers ***




*** Recherche clés spécifiques dans le Registre ***


*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche fichiers connus:

2)Recherche Heuristique :



3)Recherche Certificats :

Certificat Egroup absent !


*** Analyse terminée le 06/12/2007 à 20:55:55,75 ***
0
Réponse 8 / 24
jojo32100 Messages postés 14 Date d'inscription jeudi 6 décembre 2007 Statut Membre Dernière intervention 7 décembre 2007
6 déc. 2007 à 21:10
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_FrameBottom.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_GameLauncherBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_GameList_AltBkg.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_GameListBkg.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_GameListSelected.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_GameTypeBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_LoyaltyPointBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_MainTournListLobby.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_MenuBarDropDown.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_MOTD.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_MultiTreeFolderFlashBkg.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_MultiTreeFolderPokerBkg.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Nav_PlayerDetailsDivider.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Nav_TaskBarDivider.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_PrivateBottomBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_PrivateTopBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_QSErrorBkg.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_QuickStartBkg.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_RakedHandsBkg.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_SeatedWaitingBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_TableInfoListBkG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Tree_CanvasTitleBarDisabled.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Tree_GameListBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Tree_GameListCasinoBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Tree_GameTypeBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Tree_Main.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Tree_PrivateTopBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Tree_SeatedWaitingAltBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Tree_SeatedWaitingBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Tree_TableInfoListBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_TreeImageList.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_TreeNodeBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Wizard_Divider.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Wizard_Main.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Wizard_SuggestionBox.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Wizard_SuggestionBoxSelected.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Wizard_SuggestionBoxSnG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Wizard_SuggestionBoxSnGSelected.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Wizard_TournBlockSelected.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Wizard_TournBlockUnSelected.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_4.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_5.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_AutoMuckCheck_MiniView.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_AutoMuckUncheck_MiniView.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_AutoPostCheck_MiniView.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_AutoPostUncheck_MiniView.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Bank.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Bank_MiniView.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Check.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Check_miniview.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Check2.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_DealMaking.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Exit.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Game1.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Game2.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Game3.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_GameScrollDown.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_GameScrollUp.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_GameSkinnyScrollDownRebuy.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_GameSkinnyScrollUpRebuy.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Help.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_HistoryScrollDown.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_HistoryScrollUp.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Limit_miniview.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_ListHeader.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_ListHeaderTL.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Lobby.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Lobby_MiniView.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Menu.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Menu_MiniView.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_NoLimit_miniview.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_popupmenu.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_ProposeDeal.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_ProposeDeal_MiniView.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_SitOutCheck_MiniView.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_SitOutUncheck_MiniView.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_SliderBetButton.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Stats.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_TimeBank.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Uncheck.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Uncheck_miniview.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Uncheck2.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_WebButton.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Webbutton4.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Webbutton5.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\Data3.fnt
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\DECK_CardBackMini.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\DECK_CardBackSmall.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\DECK_CardBackTiny.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\DECK_CardSmall.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\DECK_CardSmall_4Color.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\DECK_RabbitCamCardBack.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\FLC_Dealmaking.gif
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\FLC_EndTurn.gif
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\FNT_BetInfo.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\FNT_JackpotTable.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\FNT_JackpotWinAmount.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\Minus.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\Plus.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\SCROLL_Background.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\SCROLL_BottomPiece.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\SCROLL_MiddlePiece.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\Scroll_SkinnyBackgroundRebuy.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\Scroll_SkinnyBottomPieceRebuy.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\Scroll_SkinnyMiddlePieceRebuy.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\Scroll_SkinnyTopPieceRebuy.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\SCROLL_TopPiece.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\SLIDER_Indicator.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\SLIDER_Main.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TAB_EmbeddedLobbyNormalLeft.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TAB_EmbeddedLobbyNormalMiddle.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TAB_EmbeddedLobbyNormalRight.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TAB_EmbeddedLobbySelectedLeft.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TAB_EmbeddedLobbySelectedMiddle.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TAB_EmbeddedLobbySelectedRight.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TAB_SliderNormalLeft.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TAB_SliderNormalMiddle.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TAB_SliderNormalRight.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TAB_SliderSelectedLeft.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TAB_SliderSelectedMiddle.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TAB_SliderSelectedRight.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_AutoRebuyComboBoxBkg.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_AutoRebuyComboListBoxBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_BadBeatChipTray.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_BBTableLogoOverlay.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_BBWinPlaque.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_BlackjackLaunchBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_Branding.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_DiscardCardsBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_EmbeddedLobbyBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_EmbeddedLobbyNodeBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_EmbeddedLobbyTabBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_FoldCardsBkg_Mini.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_FoldPlaqueBalBkg.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_FrameBottom.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_GameList_AltBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_GameListSelected.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_GameListSelectedPT.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_MainRulesDisplay.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_MainStatsDisplay.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_MiniViewSliderBackground.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_MTT_Stats.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_MTTInfoBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_PlaqueAction.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_PlaqueActive.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_PlaqueBalBkg.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_PlaqueFreeSeat.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_PlaqueNoAction.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_PlaqueSitOut.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_Poweredby_Miniview.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_SliderBackground.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_YourTurn.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_YourTurn_miniview.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Popup_Menu\Popup_Background.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Popup_Menu\Popup_Borders.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Popup_Menu\Popup_Buddy_Submenu.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Popup_Menu\Popup_Divider.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Popup_Menu\Popup_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Popup_Menu\Popup_OptionsCheck.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Popup_Menu\Popup_Submenu.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Popup_Menu\Popup_Title.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Splash\BTN_Close.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Splash\FLC_Progress.gif
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Splash\Splash.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Splash\splash.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Table10\Table10.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Table2\table2.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Table5\table5.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Table5_Draw\Table5_Draw.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Table6\table6.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Table8\table8.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\BTN_6TL.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\BTN_7.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\BTN_GameSkinnyScrollDownTL.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\BTN_GameSkinnyScrollUpTL.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\BTN_ListHeaderTL.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\BTN_LoginTL.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\BTN_TournHeader.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\Scroll_SkinnyBackgroundTL.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\Scroll_SkinnyBottomPieceTL.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\Scroll_SkinnyMiddlePieceTL.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\Scroll_SkinnyTopPieceTL.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\TAB_TournNormalLeft.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\TAB_TournNormalMiddle.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\TAB_TournNormalRight.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\TAB_TournSelectedLeft.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\TAB_TournSelectedMiddle.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\TAB_TournSelectedRight.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\Tourn_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\TXT_FrameBottomTL.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\TXT_GameListSelectedTL.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\TXT_MainTournList.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\TXT_Tourn_AltBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\TXT_Tourn_BetStructureAltBKG.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\TXT_Tourn_BetStructureSelected.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\TXT_Tourn_BuddyIcon.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\TXT_Tourn_ClockBlankScreen.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\TXT_Tourn_TournDescription.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\TXT_TournLobby.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\da\ClientConfig\ClientConfig.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\da\ClientConfig\OperatorRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\da\Common\blank.css
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\da\Common\Blank.html
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\da\ExitSplash\exitsplash.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\da\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\da\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\da\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\da\PokerGame\TXT_DealerMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\da\PokerGame\TXT_DealerMarkerMini.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\da\PokerGame\TXT_ReservedMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\de\ClientConfig\ClientConfig.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\de\ClientConfig\OperatorRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\de\Common\blank.css
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\de\Common\Blank.html
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\de\ExitSplash\exitsplash.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\de\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\de\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\de\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\de\PokerGame\TXT_DealerMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\de\PokerGame\TXT_DealerMarkerMini.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\de\PokerGame\TXT_ReservedMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\de\Splash\splash.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\de\Tourn_Menu\Tourn_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\ClientConfig\ClientConfig.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\ClientConfig\OperatorRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\Common\blank.css
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\Common\Blank.html
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\Common\TXT_PoweredByBH.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\Common\TXT_PoweredByBV.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\Common\TXT_PoweredByWH.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\Common\TXT_PoweredByWV.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\ExitSplash\ExitSplash.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\Menu\M_Shared.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\PokerGame\TXT_DealerMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\PokerGame\TXT_DealerMarkerMini.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\PokerGame\TXT_ReservedMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\Splash\splash.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\Tourn_Menu\Tourn_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\en\ClientConfig\ClientConfig.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\en\ClientConfig\OperatorRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\en\Common\blank.css
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\en\Common\Blank.html
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\en\PokerGame\TXT_DealerMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\en\PokerGame\TXT_DealerMarkerMini.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\en\PokerGame\TXT_ReservedMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\es\ClientConfig\ClientConfig.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\es\ClientConfig\OperatorRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\es\Common\blank.css
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\es\Common\Blank.html
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\es\ExitSplash\exitsplash.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\es\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\es\Menu\M_Tree.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\es\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\es\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\es\PokerGame\TXT_DealerMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\es\PokerGame\TXT_DealerMarkerMini.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\es\PokerGame\TXT_ReservedMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fi\ClientConfig\ClientConfig.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fi\ClientConfig\OperatorRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fi\Common\blank.css
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fi\Common\Blank.html
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fi\ExitSplash\ExitSplash.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fi\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fi\Menu\M_Tree.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fi\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fi\PokerGame\Pokergame.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fi\PokerGame\TXT_DealerMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fi\PokerGame\TXT_DealerMarkerMini.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fi\PokerGame\TXT_ReservedMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fi\Tourn_Menu\Tourn_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fr\ClientConfig\ClientConfig.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fr\ClientConfig\OperatorRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fr\Common\blank.css
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fr\Common\blank.html
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fr\ExitSplash\exitsplash.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fr\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fr\Menu\M_Wizard.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fr\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fr\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fr\PokerGame\TXT_DealerMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fr\PokerGame\TXT_DealerMarkerMini.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fr\PokerGame\TXT_ReservedMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fr\Splash\splash.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fr\Tourn_Menu\Tourn_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\it\ClientConfig\ClientConfig.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\it\ClientConfig\OperatorRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\it\Common\blank.css
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\it\Common\Blank.html
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\it\ExitSplash\exitsplash.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\it\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\it\Menu\M_Tree.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\it\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\it\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\it\PokerGame\TXT_DealerMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\it\PokerGame\TXT_DealerMarkerMini.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\it\PokerGame\TXT_ReservedMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\it\Splash\splash.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\ClientConfig\ClientConfig.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\ClientConfig\OperatorRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\Common\blank.css
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\Common\blank.html
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\ExitSplash\ExitSplash.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\Menu\M_Buddy.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\Menu\M_Shared.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\Menu\M_Tree.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\Menu\M_Wizard.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\PokerGame\TXT_DealerMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\PokerGame\TXT_DealerMarkerMini.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\PokerGame\TXT_ReservedMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\Popup_Menu\Popup_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\Splash\splash.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\Tourn_Menu\Tourn_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\ClientConfig\ClientConfig.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\ClientConfig\OperatorRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\Common\blank.css
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\Common\Blank.html
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\ExitSplash\ExitSplash.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\Menu\M_Buddy.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\Menu\M_Shared.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\Menu\M_Tree.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\Menu\M_Wizard.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\PokerGame\TXT_DealerMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\PokerGame\TXT_DealerMarkerMini.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\PokerGame\TXT_ReservedMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\Popup_Menu\Popup_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\Splash\splash.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\Tourn_Menu\Tourn_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\nl\ClientConfig\ClientConfig.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\nl\ClientConfig\OperatorRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\nl\Common\blank.css
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\nl\Common\Blank.html
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\nl\ExitSplash\exitsplash.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\nl\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\nl\Menu\M_Tree.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\nl\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\nl\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\nl\PokerGame\TXT_DealerMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\nl\PokerGame\TXT_DealerMarkerMini.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\nl\PokerGame\TXT_ReservedMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\nl\Splash\splash.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\nl\Tourn_Menu\Tourn_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\no\ClientConfig\ClientConfig.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\no\ClientConfig\OperatorRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\no\Common\blank.css
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\no\Common\Blank.html
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\no\ExitSplash\exitsplash.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\no\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\no\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\no\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\no\PokerGame\TXT_DealerMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\no\PokerGame\TXT_DealerMarkerMini.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\no\PokerGame\TXT_ReservedMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\no\Tourn_Menu\Tourn_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt-br\ClientConfig\ClientConfig.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt-br\ClientConfig\OperatorRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt-br\Common\blank.css
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt-br\Common\Blank.html
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt-br\ExitSplash\exitsplash.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt-br\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt-br\Menu\M_Tree.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt-br\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt-br\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt-br\PokerGame\TXT_DealerMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt-br\PokerGame\TXT_DealerMarkerMini.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt-br\PokerGame\TXT_ReservedMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt\ClientConfig\ClientConfig.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt\ClientConfig\OperatorRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt\Common\blank.css
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt\Common\blank.html
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt\ExitSplash\exitsplash.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt\Menu\menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt\Pokergame\Pokergame.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt\Pokergame\TXT_DealerMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt\Pokergame\TXT_DealerMarkerMini.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt\Pokergame\TXT_ReservedMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt\Tourn_Menu\Tourn_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\ClientConfig\ClientConfig.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\ClientConfig\OperatorRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\Common\blank.css
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\Common\Blank.html
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\ExitSplash\ExitSplash.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\Menu\M_Buddy.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\Menu\M_Shared.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\Menu\M_Tree.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\Menu\M_Wizard.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\PokerGame\TXT_DealerMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\PokerGame\TXT_DealerMarkerMini.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\PokerGame\TXT_ReservedMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\Popup_Menu\Popup_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\Splash\splash.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\Tourn_Menu\Tourn_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\sv\ClientConfig\ClientConfig.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\sv\ClientConfig\OperatorRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\sv\Common\blank.css
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\sv\Common\Blank.html
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\sv\ExitSplash\exitsplash.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\sv\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\sv\Menu\M_Tree.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\sv\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\sv\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\sv\PokerGame\TXT_DealerMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\sv\PokerGame\TXT_DealerMarkerMini.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\sv\PokerGame\TXT_ReservedMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\tr\ClientConfig\ClientConfig.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\tr\ClientConfig\OperatorRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\tr\Common\blank.css
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\tr\Common\blank.html
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\tr\ExitSplash\ExitSplash.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\tr\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\tr\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\tr\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\tr\PokerGame\TXT_DealerMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\tr\PokerGame\TXT_DealerMarkerMini.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\tr\PokerGame\TXT_ReservedMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\tr\Popup_Menu\Popup_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\tr\Splash\splash.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\tr\Tourn_Menu\Tourn_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\ClientConfig\ClientConfig.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\ClientConfig\OperatorRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\Common\blank.css
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\Common\blank.html
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\ExitSplash\ExitSplash.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\Menu\M_Buddy.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\Menu\M_Shared.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\Menu\M_Tree.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\Menu\M_Wizard.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\PokerGame\TXT_DealerMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\PokerGame\TXT_DealerMarkerMini.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\PokerGame\TXT_ReservedMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\Popup_Menu\Popup_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\Splash\splash.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\Tourn_Menu\Tourn_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\ClientConfig\ClientConfig.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\ClientConfig\OperatorRes.dll
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\Common\blank.css
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\Common\blank.html
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\ExitSplash\ExitSplash.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\Menu\M_Adv.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\Menu\M_Buddy.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\Menu\M_Shared.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\Menu\M_Tree.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\Menu\M_Wizard.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\Menu\Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\PokerGame\PokerGame.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\PokerGame\TXT_DealerMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\PokerGame\TXT_DealerMarkerMini.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\PokerGame\TXT_ReservedMarker.dat
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\Popup_Menu\Popup_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\Splash\splash.inf
C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\Tourn_Menu\Tourn_Menu.inf
C:\Microgaming\Poker\UnibetpokerMPP\Unibetpoker\INSTALL.LOG
C:\Microgaming\Poker\UnibetpokerMPP\Unibetpoker\UNWISE.EXE
C:\Microgaming\Poker\UnibetpokerMPP\unicows.dll
C:\Microgaming\Poker\UnibetpokerMPP\Update.dat
C:\Microgaming\Poker\UnibetpokerMPP\vpac.dll
C:\Microgaming\Poker\UnibetpokerMPP\WebHelper.dll
C:\Microgaming\Poker\UnibetpokerMPP\Wizard.bmp
C:\Program Files\update.zip
C:\VundoFix Backups
C:\VundoFix Backups\addmorefiles.txt
C:\VundoFix Backups\awvtq.dll.bad
C:\VundoFix Backups\jkhfe.dll.bad
C:\VundoFix Backups\jkkjj.dll.bad
C:\VundoFix Backups\jkkll.dll.bad
C:\VundoFix Backups\llkkj.ini.bad
C:\VundoFix Backups\llkkj.ini2.bad
C:\VundoFix Backups\pmkjh.dll.bad
C:\VundoFix Backups\pmkjk.dll.bad
C:\VundoFix Backups\qqstv.ini.bad
C:\VundoFix Backups\qqstv.ini2.bad
C:\VundoFix Backups\vtsqq.dll.bad
C:\WINDOWS\mrofinu2000351.exe.tmp
C:\WINDOWS\system32\ovnhqrtu.ini

.
((((((((((((((((((((((((((((( Fichiers cr‚‚s 2007-11-06 to 2007-12-06 ))))))))))))))))))))))))))))))))))))
.

2007-12-02 19:43 . 2007-12-02 20:14 <REP> d-------- C:\Program Files\eMule
2007-12-02 19:39 . 2007-12-06 07:51 <REP> d-------- C:\Program Files\Spyware Doctor
2007-12-02 19:39 . 2007-12-02 19:39 <REP> d-------- C:\Documents and Settings\mickael\Application Data\PC Tools
2007-12-02 19:39 . 2007-10-18 00:16 79,688 --a------ C:\WINDOWS\system32\drivers\iksyssec.sys
2007-12-02 19:39 . 2007-10-18 00:15 62,280 --a------ C:\WINDOWS\system32\drivers\iksysflt.sys
2007-12-02 19:39 . 2007-10-18 00:14 41,288 --a------ C:\WINDOWS\system32\drivers\ikfilesec.sys
2007-12-02 19:39 . 2007-10-18 00:16 29,000 --a------ C:\WINDOWS\system32\drivers\kcom.sys
2007-12-02 15:13 . 2007-12-06 13:59 <REP> d-------- C:\Program Files\Trend Micro
2007-12-01 15:40 . 2007-12-02 15:11 143 --a------ C:\WINDOWS\system32\mcrh.tmp
2007-12-01 13:49 . 2007-12-01 15:34 <REP> d-------- C:\WINDOWS\SxsCaPendDel
2007-11-29 22:29 . 2007-11-29 22:29 <REP> d-------- C:\Program Files\EA SPORTS
2007-11-29 19:52 . 2007-02-09 18:34 420,816 --a------ C:\Documents and Settings\mickael\Application Data\wunauclt.exe
2007-11-29 19:05 . 2007-11-29 19:05 685,816 --a------ C:\WINDOWS\system32\drivers\sptd.sys
2007-11-26 19:18 . 2007-12-06 16:08 <REP> d-------- C:\Documents and Settings\mickael\Application Data\Azureus
2007-11-26 19:18 . 2007-11-26 19:18 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Azureus
2007-11-18 12:08 . 2007-11-18 12:08 17 --a------ C:\WINDOWS\pp.enc
2007-11-18 12:06 . 2007-12-06 17:05 <REP> d-------- C:\Documents and Settings\mickael\Application Data\Microgaming

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-12-02 19:43 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2007-12-01 12:54 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-12-01 12:46 --------- d-----w C:\Program Files\BitTorrent
2007-11-29 18:25 --------- d-----w C:\Program Files\Windows Media Connect 2
2007-11-23 21:13 --------- d-----w C:\Documents and Settings\mickael\Application Data\BitTorrent
2007-10-12 07:15 --------- d-----w C:\Documents and Settings\All Users\Application Data\TEMP
2007-10-11 22:41 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2006-03-02 13:00]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2004-12-01 08:54 C:\WINDOWS\SOUNDMAN.EXE]
"NvCplDaemon"="RUNDLL32.exe" [2006-03-02 13:00 C:\WINDOWS\system32\rundll32.exe]
"nwiz"="nwiz.exe" [2006-08-11 22:43 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="RUNDLL32.exe" [2006-03-02 13:00 C:\WINDOWS\system32\rundll32.exe]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50]
"CaAvTray"="C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVTray.exe" [2007-08-08 10:58]
"CAVRID"="C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVRID.exe" [2007-08-08 10:58]
"SDTray"="C:\Program Files\Spyware Doctor\SDTrayApp.exe" [2007-11-02 17:24]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2006-03-02 13:00]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice]
@=""

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Contrôleur d’état.lnk]
path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Contrôleur d’état.lnk
backup=C:\WINDOWS\pss\Contrôleur d’état.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk]
path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Lancement rapide d'Adobe Reader.lnk
backup=C:\WINDOWS\pss\Lancement rapide d'Adobe Reader.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent]
F:\bittorent\bittorrent.exe --force_start_minimized

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ControlCenter2.0]
C:\Program Files\Brother\ControlCenter2\brctrcen.exe /autorun

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndexSearch]
2005-03-17 19:30 40960 --a--c--- C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe /background

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
C:\Program Files\MSN Messenger\MsnMsgr.Exe /background

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Odebit Multimedia V3]
F:\V3\Odebit.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Odebit Multimedia V3 - Services]
F:\V3\Odebit.exe /info

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PaperPort PTD]
2005-03-17 19:17 57393 --a--c--- C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SetDefPrt]
2005-01-26 18:02 49152 -----c--- C:\Program Files\Brother\Brmfl05a\BrStDvPt.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe /nosplash /minimized

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
F:\Spybot - Search & Destroy\TeaTimer.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SSBkgdUpdate]
C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe -Embedding -boot

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
F:\Steam\Steam.exe -silent

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2007-03-14 02:43 83608 --a------ C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2007-01-26 08:56 171448 --a------ C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe

R3 BrScnUsb;Brother USB Still Image driver;C:\WINDOWS\system32\Drivers\BrScnUsb.sys
R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
S3 ovt530;Webcam Deluxe;C:\WINDOWS\system32\Drivers\ov530vid.sys
S3 SetupNTGLM7X;SetupNTGLM7X;\??\H:\NTGLM7X.sys

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4314a642-95a9-11db-8ce2-806d6172696f}]
\Shell\AutoRun\command - H:\Setup.exe

.
Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
"2007-11-29 18:52:58 C:\WINDOWS\Tasks\At1.job"
- C:\Documents and Settings\mickael\Application Data\wunauclt.exe
"2007-11-29 19:00:00 C:\WINDOWS\Tasks\At2.job"
- C:\Documents and Settings\mickael\Application Data\wunauclt.exe
"2007-11-29 18:52:58 C:\WINDOWS\Tasks\At3.job"
- C:\Documents and Settings\mickael\Application Data\wunauclt.exe
"2007-11-29 21:43:43 C:\WINDOWS\Tasks\At4.job"
- C:\Documents and Settings\mickael\Application Data\wunauclt.exe
"2007-11-29 21:43:43 C:\WINDOWS\Tasks\At5.job"
"2007-11-29 21:43:43 C:\WINDOWS\Tasks\At6.job"
- C:\Documents and Settings\mickael\Application Data\wunauclt.exe
.
**************************************************************************

catchme 0.3.1318 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-06 20:13:54
Windows 5.1.2600 Service Pack 2 NTFS

detected NTDLL code modification:
ZwClose

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-12-06 20:16:29 - machine was rebooted
C:\ComboFix2.txt ... 2007-12-06 19:00
.
--- E O F ---


C'est le reste de combofix tien
0
Réponse 9 / 24
g!rly Messages postés 18209 Date d'inscription vendredi 17 août 2007 Statut Contributeur Dernière intervention 30 novembre 2014 406
6 déc. 2007 à 21:22
re,

fais analyser ceci :

C:\Documents and Settings\mickael\Application Data\wunauclt.exe

ici

http://virusscan.jotti.org/de/

et post le resulat ici

et puis fais navilog stp

Fais un clic droit sur ce lien :
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
Ensuite double clique sur navilog1.exe pour lancer l'installation.
Une fois l'installation terminée, le fix s'exécutera automatiquement.
(Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

Laisse-toi guider. Au menu principal, choisis 1 et valides.
(ne fais pas le choix 2,3 ou 4 sans notre avis/accord)

Patiente jusqu'au message :
*** Analyse Termine le ..... ***
Appuie sur une touche comme demandé, le blocnote va s'ouvrir.
Copie-colle l'intégralité dans une réponse. Referme le blocnote.
Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)
0
Réponse 10 / 24
jojo32100 Messages postés 14 Date d'inscription jeudi 6 décembre 2007 Statut Membre Dernière intervention 7 décembre 2007
6 déc. 2007 à 22:15
Datei: wunauclt.exe
Auslastung: 0% 100%

Status: ERGEBNISLOS (scan dauert an)
Entdeckte Packprogramme: Bitte warten...
Bit9 rapportiert: File not found

A-Squared Keine Viren gefunden
AntiVir Keine Viren gefunden
ArcaVir Keine Viren gefunden
Avast Scanning, bitte warten...
AVG Antivirus Scanning, bitte warten...
BitDefender Scanning, bitte warten...
ClamAV Scanning, bitte warten...
CPsecure Scanning, bitte warten...
Dr.Web Scanning, bitte warten...
F-Prot Antivirus Scanning, bitte warten...
F-Secure Anti-Virus Scanning, bitte warten...
Fortinet Scanning, bitte warten...
Ikarus Scanning, bitte warten...
Kaspersky Anti-Virus Scanning, bitte warten...
NOD32 Scanning, bitte warten...
Norman Virus Control Scanning, bitte warten...
Panda Antivirus Scanning, bitte warten...
Rising Antivirus Scanning, bitte warten...
Sophos Antivirus Scanning, bitte warten...
VirusBuster Scanning, bitte warten...
VBA32 Scanning, bitte warten...

pour wunault
0
Réponse 11 / 24
jojo32100 Messages postés 14 Date d'inscription jeudi 6 décembre 2007 Statut Membre Dernière intervention 7 décembre 2007
6 déc. 2007 à 22:17
Search Navipromo version 3.3.6 commencé le 06/12/2007 à 20:54:41,48

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1
Mise à jour le 14.11.2007 à 18h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.11


*** Recherche Programmes installés ***




*** Recherche dossiers dans C:\WINDOWS ***



*** Recherche dossiers dans C:\Program Files ***



*** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data ***




*** Recherche dossiers dans C:\Documents and Settings\mickael\Application Data ***


*** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1 ***


*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

Aucun fichier trouvé dans :

- C:\WINDOWS\system32
- C:\DOCUME~1\MICKAEL\LOCALS~1\APPLIC~1



*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans C:\WINDOWS\system32 *

* Recherche dans C:\DOCUME~1\MICKAEL\LOCALS~1\APPLIC~1 *



*** Recherche fichiers ***




*** Recherche clés spécifiques dans le Registre ***


*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche fichiers connus:

2)Recherche Heuristique :



3)Recherche Certificats :

Certificat Egroup absent !


*** Analyse terminée le 06/12/2007 à 20:55:55,75 ***

Tiens navilog
0
Réponse 12 / 24
g!rly Messages postés 18209 Date d'inscription vendredi 17 août 2007 Statut Contributeur Dernière intervention 30 novembre 2014 406
6 déc. 2007 à 22:17
peux tu faire la meme analyse ici stp

C:\Documents and Settings\mickael\Application Data\wunauclt.exe

https://www.virustotal.com/gui/

car jottis apparament n´etait pas disponible
0
Réponse 13 / 24
jojo32100 Messages postés 14 Date d'inscription jeudi 6 décembre 2007 Statut Membre Dernière intervention 7 décembre 2007
6 déc. 2007 à 22:17
Il est mort alors ce truc de.....!!!????
0
Réponse 14 / 24
jojo32100 Messages postés 14 Date d'inscription jeudi 6 décembre 2007 Statut Membre Dernière intervention 7 décembre 2007
6 déc. 2007 à 22:21
Fichier wunauclt.exe reçu le 2007.12.05 02:22:00 (CET)
Situation actuelle: en cours de chargement ... mis en file d'attente en attente en cours d'analyse terminé NON TROUVE ARRETE


Résultat: 2/32 (6.25%)
en train de charger les informations du serveur...
Votre fichier est dans la file d'attente, en position: ___.
L'heure estimée de démarrage est entre ___ et ___ .
Ne fermez pas la fenêtre avant la fin de l'analyse.
L'analyseur qui traitait votre fichier est actuellement stoppé, nous allons attendre quelques secondes pour tenter de récupérer vos résultats.
Si vous attendez depuis plus de cinq minutes, vous devez renvoyer votre fichier.
Votre fichier est, en ce moment, en cours d'analyse par VirusTotal,
les résultats seront affichés au fur et à mesure de leur génération.
Formaté Impression des résultats
Votre fichier a expiré ou n'existe pas.
Le service est en ce moment, stoppé, votre fichier attend d'être analysé (position : ) depuis une durée indéfinie.

Vous pouvez attendre une réponse du Web (re-chargement automatique) ou taper votre e-mail dans le formulaire ci-dessous et cliquer "Demande" pour que le système vous envoie une notification quand l'analyse sera terminée.
Email:


Antivirus Version Dernière mise à jour Résultat
AhnLab-V3 - - -
AntiVir - - -
Authentium - - -
Avast - - Win32:Trojan-gen {VC}
AVG - - -
BitDefender - - -
CAT-QuickHeal - - -
ClamAV - - -
DrWeb - - -
eSafe - - -
eTrust-Vet - - -
Ewido - - -
FileAdvisor - - -
Fortinet - - -
F-Prot - - -
F-Secure - - -
Ikarus - - Virus.Win32.Trojan
Kaspersky - - -
McAfee - - -
Microsoft - - -
NOD32v2 - - -
Norman - - -
Panda - - -
Prevx1 - - -
Rising - - -
Sophos - - -
Sunbelt - - -
Symantec - - -
TheHacker - - -
VBA32 - - -
VirusBuster - - -
Webwasher-Gateway - - -


Tiens apparemment un autre trojan j'en ai marre!!!!
0
Réponse 15 / 24
jojo32100 Messages postés 14 Date d'inscription jeudi 6 décembre 2007 Statut Membre Dernière intervention 7 décembre 2007
6 déc. 2007 à 22:21
Fichier wunauclt.exe reçu le 2007.12.05 02:22:00 (CET)
Situation actuelle: en cours de chargement ... mis en file d'attente en attente en cours d'analyse terminé NON TROUVE ARRETE


Résultat: 2/32 (6.25%)
en train de charger les informations du serveur...
Votre fichier est dans la file d'attente, en position: ___.
L'heure estimée de démarrage est entre ___ et ___ .
Ne fermez pas la fenêtre avant la fin de l'analyse.
L'analyseur qui traitait votre fichier est actuellement stoppé, nous allons attendre quelques secondes pour tenter de récupérer vos résultats.
Si vous attendez depuis plus de cinq minutes, vous devez renvoyer votre fichier.
Votre fichier est, en ce moment, en cours d'analyse par VirusTotal,
les résultats seront affichés au fur et à mesure de leur génération.
Formaté Impression des résultats
Votre fichier a expiré ou n'existe pas.
Le service est en ce moment, stoppé, votre fichier attend d'être analysé (position : ) depuis une durée indéfinie.

Vous pouvez attendre une réponse du Web (re-chargement automatique) ou taper votre e-mail dans le formulaire ci-dessous et cliquer "Demande" pour que le système vous envoie une notification quand l'analyse sera terminée.
Email:


Antivirus Version Dernière mise à jour Résultat
AhnLab-V3 - - -
AntiVir - - -
Authentium - - -
Avast - - Win32:Trojan-gen {VC}
AVG - - -
BitDefender - - -
CAT-QuickHeal - - -
ClamAV - - -
DrWeb - - -
eSafe - - -
eTrust-Vet - - -
Ewido - - -
FileAdvisor - - -
Fortinet - - -
F-Prot - - -
F-Secure - - -
Ikarus - - Virus.Win32.Trojan
Kaspersky - - -
McAfee - - -
Microsoft - - -
NOD32v2 - - -
Norman - - -
Panda - - -
Prevx1 - - -
Rising - - -
Sophos - - -
Sunbelt - - -
Symantec - - -
TheHacker - - -
VBA32 - - -
VirusBuster - - -
Webwasher-Gateway - - -


Tiens apparemment un autre trojan j'en ai marre!!!!
0
Réponse 16 / 24
g!rly Messages postés 18209 Date d'inscription vendredi 17 août 2007 Statut Contributeur Dernière intervention 30 novembre 2014 406
6 déc. 2007 à 22:33
merci pour navilog tu peux le supprimer

pour wunauclt.exe

c´est bien ce que je me disais; mais jamais sur a 100% maintenant je le suis a 200%

post un nouveau combofix stp

@+
0
Réponse 17 / 24
jojo32100 Messages postés 14 Date d'inscription jeudi 6 décembre 2007 Statut Membre Dernière intervention 7 décembre 2007
6 déc. 2007 à 22:51
ComboFix 07-12-02.6 - mickael 2007-12-06 22:40:33.3 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.523 [GMT 1:00]
Running from: C:\Documents and Settings\mickael\Bureau\ComboFix.exe
.

((((((((((((((((((((((((((((( Fichiers créés 2007-11-06 to 2007-12-06 ))))))))))))))))))))))))))))))))))))
.

2007-12-06 20:52 . 2007-12-06 21:08 <REP> d-------- C:\Program Files\Navilog1
2007-12-02 19:43 . 2007-12-02 20:14 <REP> d-------- C:\Program Files\eMule
2007-12-02 19:39 . 2007-12-06 07:51 <REP> d-------- C:\Program Files\Spyware Doctor
2007-12-02 19:39 . 2007-12-02 19:39 <REP> d-------- C:\Documents and Settings\mickael\Application Data\PC Tools
2007-12-02 19:39 . 2007-10-18 00:16 79,688 --a------ C:\WINDOWS\system32\drivers\iksyssec.sys
2007-12-02 19:39 . 2007-10-18 00:15 62,280 --a------ C:\WINDOWS\system32\drivers\iksysflt.sys
2007-12-02 19:39 . 2007-10-18 00:14 41,288 --a------ C:\WINDOWS\system32\drivers\ikfilesec.sys
2007-12-02 19:39 . 2007-10-18 00:16 29,000 --a------ C:\WINDOWS\system32\drivers\kcom.sys
2007-12-02 15:13 . 2007-12-06 13:59 <REP> d-------- C:\Program Files\Trend Micro
2007-12-01 15:40 . 2007-12-02 15:11 143 --a------ C:\WINDOWS\system32\mcrh.tmp
2007-12-01 13:49 . 2007-12-01 15:34 <REP> d-------- C:\WINDOWS\SxsCaPendDel
2007-11-29 22:29 . 2007-11-29 22:29 <REP> d-------- C:\Program Files\EA SPORTS
2007-11-29 19:52 . 2007-02-09 18:34 420,816 --a------ C:\Documents and Settings\mickael\Application Data\wunauclt.exe
2007-11-29 19:05 . 2007-11-29 19:05 685,816 --a------ C:\WINDOWS\system32\drivers\sptd.sys
2007-11-26 19:18 . 2007-12-06 16:08 <REP> d-------- C:\Documents and Settings\mickael\Application Data\Azureus
2007-11-26 19:18 . 2007-11-26 19:18 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Azureus
2007-11-18 12:08 . 2007-11-18 12:08 17 --a------ C:\WINDOWS\pp.enc
2007-11-18 12:06 . 2007-12-06 17:05 <REP> d-------- C:\Documents and Settings\mickael\Application Data\Microgaming

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-12-02 19:43 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2007-12-01 12:54 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-12-01 12:46 --------- d-----w C:\Program Files\BitTorrent
2007-11-29 18:25 --------- d-----w C:\Program Files\Windows Media Connect 2
2007-11-23 21:13 --------- d-----w C:\Documents and Settings\mickael\Application Data\BitTorrent
2007-10-11 22:41 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2006-03-02 13:00]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2004-12-01 08:54 C:\WINDOWS\SOUNDMAN.EXE]
"NvCplDaemon"="RUNDLL32.exe" [2006-03-02 13:00 C:\WINDOWS\system32\rundll32.exe]
"nwiz"="nwiz.exe" [2006-08-11 22:43 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="RUNDLL32.exe" [2006-03-02 13:00 C:\WINDOWS\system32\rundll32.exe]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50]
"CaAvTray"="C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVTray.exe" [2007-08-08 10:58]
"CAVRID"="C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVRID.exe" [2007-08-08 10:58]
"SDTray"="C:\Program Files\Spyware Doctor\SDTrayApp.exe" [2007-11-02 17:24]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2006-03-02 13:00]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice]
@=""

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Contrôleur d’état.lnk]
path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Contrôleur d’état.lnk
backup=C:\WINDOWS\pss\Contrôleur d’état.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk]
path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Lancement rapide d'Adobe Reader.lnk
backup=C:\WINDOWS\pss\Lancement rapide d'Adobe Reader.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent]
F:\bittorent\bittorrent.exe --force_start_minimized

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ControlCenter2.0]
C:\Program Files\Brother\ControlCenter2\brctrcen.exe /autorun

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndexSearch]
2005-03-17 19:30 40960 --a--c--- C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe /background

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
C:\Program Files\MSN Messenger\MsnMsgr.Exe /background

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Odebit Multimedia V3]
F:\V3\Odebit.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Odebit Multimedia V3 - Services]
F:\V3\Odebit.exe /info

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PaperPort PTD]
2005-03-17 19:17 57393 --a--c--- C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SetDefPrt]
2005-01-26 18:02 49152 -----c--- C:\Program Files\Brother\Brmfl05a\BrStDvPt.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe /nosplash /minimized

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
F:\Spybot - Search & Destroy\TeaTimer.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SSBkgdUpdate]
C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe -Embedding -boot

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
F:\Steam\Steam.exe -silent

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2007-03-14 02:43 83608 --a------ C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2007-01-26 08:56 171448 --a------ C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe

R3 BrScnUsb;Brother USB Still Image driver;C:\WINDOWS\system32\Drivers\BrScnUsb.sys
R3 ovt530;Webcam Deluxe;C:\WINDOWS\system32\Drivers\ov530vid.sys
R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
S3 SetupNTGLM7X;SetupNTGLM7X;\??\H:\NTGLM7X.sys

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4314a642-95a9-11db-8ce2-806d6172696f}]
\Shell\AutoRun\command - H:\Setup.exe

.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2007-11-29 18:52:58 C:\WINDOWS\Tasks\At1.job"
- C:\Documents and Settings\mickael\Application Data\wunauclt.exe
"2007-11-29 19:00:00 C:\WINDOWS\Tasks\At2.job"
- C:\Documents and Settings\mickael\Application Data\wunauclt.exe
"2007-11-29 18:52:58 C:\WINDOWS\Tasks\At3.job"
- C:\Documents and Settings\mickael\Application Data\wunauclt.exe
"2007-11-29 21:43:43 C:\WINDOWS\Tasks\At4.job"
- C:\Documents and Settings\mickael\Application Data\wunauclt.exe
"2007-11-29 21:43:43 C:\WINDOWS\Tasks\At5.job"
"2007-11-29 21:43:43 C:\WINDOWS\Tasks\At6.job"
- C:\Documents and Settings\mickael\Application Data\wunauclt.exe
.
**************************************************************************

catchme 0.3.1318 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-06 22:45:48
Windows 5.1.2600 Service Pack 2 NTFS

detected NTDLL code modification:
ZwClose

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-12-06 22:48:11
C:\ComboFix2.txt ... 2007-12-06 20:16
C:\ComboFix3.txt ... 2007-12-06 19:00
.
--- E O F ---
Tiens voila!!C'est bon c'est fini avec ce virus!!!!???
0
Réponse 18 / 24
g!rly Messages postés 18209 Date d'inscription vendredi 17 août 2007 Statut Contributeur Dernière intervention 30 novembre 2014 406
6 déc. 2007 à 23:14
re,

il faut etre patient surtout que ton infection n´est pas des plus anodine...
puis tu m´as toujours pas repondu, as tu un par feu ?
si tu n´en as pas

instale :

par feu : kerio

http://www.malekal.com/kerio_firewall.php#mozTocId721480

https://www.vulgarisation-informatique.com/kerio.php

ou zone alarm plus facil a configurer mais moins performant

http://www.kachouri.com/tuto/tuto-143-zonealarm-installation-du-firewall--pare-feu.html

Copie le texte ci-dessous :

File::
C:\WINDOWS\system32\mcrh.tmp
C:\Documents and Settings\mickael\Application Data\wunauclt.exe
C:\WINDOWS\Tasks\At1.job
C:\WINDOWS\Tasks\At2.job
C:\WINDOWS\Tasks\At3.job
C:\WINDOWS\Tasks\At4.job
C:\WINDOWS\Tasks\At5.job
C:\WINDOWS\Tasks\At6.job

Folder::
C:\Program Files\Navilog1


Ouvre le Bloc-Notes puis colle le texte copié.
(Démarrer\Tous les programmes\Accessoires\Bloc notes.)
Sauvegarde ce fichier sous le nom de CFScript.txt.

Glisse maintenant le fichier CFScript.txt dans Combofix.exe comme ci-dessous :

http://serveur1.archive-host.com/membres/up/1366464061/CFScript.gif

Cela va relancer Combofix,

Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide.

Patiente le temps du scan.Le bureau va disparaître à plusieurs reprises: c'est normal!

Ne touche à rien tant que le scan n'est pas terminé.

Après redémarrage, poste le contenu du rapport Combofix.txt accompagné d'un rapport Hijackthis.

S'il n'y a pas de rédémarrage, poste quand même les rapports.

puis pour verofier:

Scan en ligne bitdefender :

https://www.bitdefender.com/toolbox/

Clicker sur " I agree " et suivre les indications

A faire imperativement sous internet explorer, en acceptant l´activ x

tutoriel en image en image

http://pageperso.aol.fr/rginformatique/mapage/defender.htm

dans ta prochaine réponse post le rapport de combofix3.tx et le rapport de bitdefender

@+
0
Réponse 19 / 24
g!rly Messages postés 18209 Date d'inscription vendredi 17 août 2007 Statut Contributeur Dernière intervention 30 novembre 2014 406
6 déc. 2007 à 23:17
--

Le meilleur moyen de faire tourner la tête à une femme, c'est de lui dire qu'elle a un joli profil
0
Réponse 20 / 24
jojo32100 Messages postés 14 Date d'inscription jeudi 6 décembre 2007 Statut Membre Dernière intervention 7 décembre 2007
6 déc. 2007 à 23:44
Rapport combofix
.
ComboFix 07-12-02.6 - mickael 2007-12-06 23:33:16.4 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.603 [GMT 1:00]
Running from: C:\Documents and Settings\mickael\Bureau\ComboFix.exe
Command switches used :: C:\Documents and Settings\mickael\Bureau\CFScript.txt
* Created a new restore point

FILE
C:\Documents and Settings\mickael\Application Data\wunauclt.exe
C:\WINDOWS\system32\mcrh.tmp
C:\WINDOWS\Tasks\At1.job
C:\WINDOWS\Tasks\At2.job
C:\WINDOWS\Tasks\At3.job
C:\WINDOWS\Tasks\At4.job
C:\WINDOWS\Tasks\At5.job
C:\WINDOWS\Tasks\At6.job
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\mickael\Application Data\wunauclt.exe
C:\Program Files\Navilog1
C:\Program Files\Navilog1\catchme.exe
C:\Program Files\Navilog1\GetPaths.exe
C:\Program Files\Navilog1\gnc.exe
C:\Program Files\Navilog1\navilog1.bat
C:\Program Files\Navilog1\Process.exe
C:\Program Files\Navilog1\reboot.exe
C:\Program Files\Navilog1\recherok.txt
C:\Program Files\Navilog1\reg.exe
C:\Program Files\Navilog1\regnavi.reg
C:\Program Files\Navilog1\traite.bat
C:\Program Files\Navilog1\unins000.dat
C:\Program Files\Navilog1\unins000.exe
C:\WINDOWS\system32\mcrh.tmp
C:\WINDOWS\Tasks\At1.job
C:\WINDOWS\Tasks\At2.job
C:\WINDOWS\Tasks\At3.job
C:\WINDOWS\Tasks\At4.job
C:\WINDOWS\Tasks\At5.job
C:\WINDOWS\Tasks\At6.job

.
((((((((((((((((((((((((((((( Fichiers créés 2007-11-06 to 2007-12-06 ))))))))))))))))))))))))))))))))))))
.

2007-12-02 19:43 . 2007-12-02 20:14 <REP> d-------- C:\Program Files\eMule
2007-12-02 19:39 . 2007-12-06 07:51 <REP> d-------- C:\Program Files\Spyware Doctor
2007-12-02 19:39 . 2007-12-02 19:39 <REP> d-------- C:\Documents and Settings\mickael\Application Data\PC Tools
2007-12-02 19:39 . 2007-10-18 00:16 79,688 --a------ C:\WINDOWS\system32\drivers\iksyssec.sys
2007-12-02 19:39 . 2007-10-18 00:15 62,280 --a------ C:\WINDOWS\system32\drivers\iksysflt.sys
2007-12-02 19:39 . 2007-10-18 00:14 41,288 --a------ C:\WINDOWS\system32\drivers\ikfilesec.sys
2007-12-02 19:39 . 2007-10-18 00:16 29,000 --a------ C:\WINDOWS\system32\drivers\kcom.sys
2007-12-02 15:13 . 2007-12-06 13:59 <REP> d-------- C:\Program Files\Trend Micro
2007-12-01 13:49 . 2007-12-01 15:34 <REP> d-------- C:\WINDOWS\SxsCaPendDel
2007-11-29 22:29 . 2007-11-29 22:29 <REP> d-------- C:\Program Files\EA SPORTS
2007-11-29 19:05 . 2007-11-29 19:05 685,816 --a------ C:\WINDOWS\system32\drivers\sptd.sys
2007-11-26 19:18 . 2007-12-06 16:08 <REP> d-------- C:\Documents and Settings\mickael\Application Data\Azureus
2007-11-26 19:18 . 2007-11-26 19:18 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Azureus
2007-11-18 12:08 . 2007-11-18 12:08 17 --a------ C:\WINDOWS\pp.enc
2007-11-18 12:06 . 2007-12-06 22:54 <REP> d-------- C:\Documents and Settings\mickael\Application Data\Microgaming

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-12-02 19:43 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2007-12-01 12:54 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-12-01 12:46 --------- d-----w C:\Program Files\BitTorrent
2007-11-29 18:25 --------- d-----w C:\Program Files\Windows Media Connect 2
2007-11-23 21:13 --------- d-----w C:\Documents and Settings\mickael\Application Data\BitTorrent
2007-10-11 22:41 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2006-03-02 13:00]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2004-12-01 08:54 C:\WINDOWS\SOUNDMAN.EXE]
"NvCplDaemon"="RUNDLL32.exe" [2006-03-02 13:00 C:\WINDOWS\system32\rundll32.exe]
"nwiz"="nwiz.exe" [2006-08-11 22:43 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="RUNDLL32.exe" [2006-03-02 13:00 C:\WINDOWS\system32\rundll32.exe]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50]
"CaAvTray"="C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVTray.exe" [2007-08-08 10:58]
"CAVRID"="C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVRID.exe" [2007-08-08 10:58]
"SDTray"="C:\Program Files\Spyware Doctor\SDTrayApp.exe" [2007-11-02 17:24]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2006-03-02 13:00]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice]
@=""

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Contrôleur d’état.lnk]
path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Contrôleur d’état.lnk
backup=C:\WINDOWS\pss\Contrôleur d’état.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk]
path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Lancement rapide d'Adobe Reader.lnk
backup=C:\WINDOWS\pss\Lancement rapide d'Adobe Reader.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent]
F:\bittorent\bittorrent.exe --force_start_minimized

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ControlCenter2.0]
C:\Program Files\Brother\ControlCenter2\brctrcen.exe /autorun

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndexSearch]
2005-03-17 19:30 40960 --a--c--- C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe /background

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
C:\Program Files\MSN Messenger\MsnMsgr.Exe /background

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Odebit Multimedia V3]
F:\V3\Odebit.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Odebit Multimedia V3 - Services]
F:\V3\Odebit.exe /info

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PaperPort PTD]
2005-03-17 19:17 57393 --a--c--- C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SetDefPrt]
2005-01-26 18:02 49152 -----c--- C:\Program Files\Brother\Brmfl05a\BrStDvPt.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe /nosplash /minimized

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
F:\Spybot - Search & Destroy\TeaTimer.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SSBkgdUpdate]
C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe -Embedding -boot

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
F:\Steam\Steam.exe -silent

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2007-03-14 02:43 83608 --a------ C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2007-01-26 08:56 171448 --a------ C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe

R3 BrScnUsb;Brother USB Still Image driver;C:\WINDOWS\system32\Drivers\BrScnUsb.sys
R3 ovt530;Webcam Deluxe;C:\WINDOWS\system32\Drivers\ov530vid.sys
R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
S3 SetupNTGLM7X;SetupNTGLM7X;\??\H:\NTGLM7X.sys

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4314a642-95a9-11db-8ce2-806d6172696f}]
\Shell\AutoRun\command - H:\Setup.exe

.
**************************************************************************

catchme 0.3.1318 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-06 23:38:22
Windows 5.1.2600 Service Pack 2 NTFS

detected NTDLL code modification:
ZwClose

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-12-06 23:40:31
C:\ComboFix2.txt ... 2007-12-06 22:48
C:\ComboFix3.txt ... 2007-12-06 20:16
.
--- E O F ---
0

Discussions similaires

Virtumonde.dll détècté avec spybot ??
Banban la tulipe -
dom -

18 réponses
Virtumonde.Dll
speedyyamas12 -
jlpjlp -

22 réponses
Virtumonde infeste .DLL file
hydracom -
hydracom -

17 réponses
[virus] infecté par trojan vundo
j-mi57 -
j-mi57 -

15 réponses