Virtumonde/vundo quoi faire??

jojo32100 Messages postés 14 Statut Membre -  
g!rly Messages postés 18462 Statut Contributeur -
Bonjour,
J'ai essayé de supprimer ce virus qui m'enerve enormément!!Voici le rapport de hijackthis!!Est -il parti ce virus??
Merci de votre réponse

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:04:06, on 06/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVTray.exe
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVRID.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\ISafe.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\alg.exe
F:\Azureus\Azureus.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\VetMsg.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\Sanner\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ustart.org
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [CaAvTray] "C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVTray.exe"
O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVRID.exe"
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKLM\..\Run: [780c125a] rundll32.exe "C:\WINDOWS\system32\atauimfq.dll",b
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Unibet Poker - {C53BFCFC-7A54-4627-AEBA-2CD4871FCA97} - C:\Microgaming\Poker\UnibetpokerMPP\MPPoker.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\ISafe.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\VetMsg.exe

--
End of file - 5933 bytes
Configuration: Windows XP
Internet Explorer 7.0

24 réponses

  • 1
  • 2
  1. g!rly Messages postés 18462 Statut Contributeur 407
     
    salut jojo,

    helas non il reste des bouts

    tu as un par feu?

    Télécharge combofix.exe (par sUBs) sur ton Bureau.

    -> http://download.bleepingcomputer.com/sUBs/ComboFix.exe

    -> Double clique combofix.exe.
    -> Tape sur la touche 1 (Yes) pour démarrer le scan.
    -> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

    NOTE : Le rapport se trouve également ici : C:\Combofix.txt

    @+
    0
  2. jojo32100 Messages postés 14 Statut Membre
     
    Merci de m'aidé!!
    Tiens il m'a mis cec:
    ComboFix 07-12-02.6 - mickael 2007-12-06 18:47:28.1 - NTFSx86
    Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.481 [GMT 1:00]
    Running from: C:\Documents and Settings\mickael\Bureau\ComboFix.exe
    * Created a new restore point
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .

    C:\Documents and Settings\mickael\Local Settings\Application Data\draofkzhwl.dat
    C:\Documents and Settings\mickael\Local Settings\Application Data\draofkzhwl_nav.dat
    C:\Documents and Settings\mickael\Local Settings\Application Data\draofkzhwl_navps.dat
    C:\WINDOWS\b111.exe
    C:\WINDOWS\cookies.ini
    C:\WINDOWS\system32\atauimfq.dll
    C:\WINDOWS\system32\awvvt.dll
    C:\WINDOWS\system32\bxbbxulq.dll
    C:\WINDOWS\system32\ddccy.dll
    C:\WINDOWS\system32\gaqsybmm.ini
    C:\WINDOWS\system32\gebcc.dll
    C:\WINDOWS\system32\geedc.dll
    C:\WINDOWS\system32\geede.dll
    C:\WINDOWS\system32\hhkmp.ini2
    C:\WINDOWS\system32\hjotytwn.ini
    C:\WINDOWS\system32\iwltmsux.ini
    C:\WINDOWS\system32\ljjjkji.dll
    C:\WINDOWS\system32\mllji.dll
    C:\WINDOWS\system32\mmbysqag.dll
    C:\WINDOWS\system32\nwtytojh.dll
    C:\WINDOWS\system32\opnljig.dll
    C:\WINDOWS\system32\pmnkkhi.dll
    C:\WINDOWS\system32\pmnlm.dll
    C:\WINDOWS\system32\qfmiuata.ini
    C:\WINDOWS\system32\qluxbbxb.ini
    C:\WINDOWS\system32\rtstv.ini
    C:\WINDOWS\system32\rtstv.ini2
    C:\WINDOWS\system32\sstqr.dll
    C:\WINDOWS\system32\ssttt.dll
    C:\WINDOWS\system32\vtsqo.dll
    C:\WINDOWS\system32\vtstr.dll
    C:\WINDOWS\system32\xusmtlwi.dll

    .
    ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2007-11-06 to 2007-12-06 ))))))))))))))))))))))))))))))))))))
    .

    2007-12-03 19:28 . 2007-12-05 07:11 594 ---hs---- C:\WINDOWS\system32\ovnhqrtu.ini
    2007-12-03 01:50 . 2007-12-03 01:50 <REP> d-------- C:\Microgaming
    2007-12-02 19:43 . 2007-12-02 20:14 <REP> d-------- C:\Program Files\eMule
    2007-12-02 19:39 . 2007-12-06 07:51 <REP> d-------- C:\Program Files\Spyware Doctor
    2007-12-02 19:39 . 2007-12-02 19:39 <REP> d-------- C:\Documents and Settings\mickael\Application Data\PC Tools
    2007-12-02 19:39 . 2007-10-18 00:16 79,688 --a------ C:\WINDOWS\system32\drivers\iksyssec.sys
    2007-12-02 19:39 . 2007-10-18 00:15 62,280 --a------ C:\WINDOWS\system32\drivers\iksysflt.sys
    2007-12-02 19:39 . 2007-10-18 00:14 41,288 --a------ C:\WINDOWS\system32\drivers\ikfilesec.sys
    2007-12-02 19:39 . 2007-10-18 00:16 29,000 --a------ C:\WINDOWS\system32\drivers\kcom.sys
    2007-12-02 15:16 . 2007-12-02 15:44 <REP> d-------- C:\VundoFix Backups
    2007-12-02 15:13 . 2007-12-06 13:59 <REP> d-------- C:\Program Files\Trend Micro
    2007-12-01 15:40 . 2007-12-02 15:11 143 --a------ C:\WINDOWS\system32\mcrh.tmp
    2007-12-01 13:49 . 2007-12-01 15:34 <REP> d-------- C:\WINDOWS\SxsCaPendDel
    2007-11-29 22:29 . 2007-11-29 22:29 <REP> d-------- C:\Program Files\EA SPORTS
    2007-11-29 20:00 . 2007-11-29 20:00 49,472 --a------ C:\Program Files\update.zip
    2007-11-29 19:53 . 2007-11-29 19:53 35,840 --a------ C:\WINDOWS\mrofinu2000351.exe.tmp
    2007-11-29 19:52 . 2007-02-09 18:34 420,816 --a------ C:\Documents and Settings\mickael\Application Data\wunauclt.exe
    2007-11-29 19:05 . 2007-11-29 19:05 685,816 --a------ C:\WINDOWS\system32\drivers\sptd.sys
    2007-11-26 19:18 . 2007-12-06 16:08 <REP> d-------- C:\Documents and Settings\mickael\Application Data\Azureus
    2007-11-26 19:18 . 2007-11-26 19:18 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Azureus
    2007-11-18 12:08 . 2007-11-18 12:08 17 --a------ C:\WINDOWS\pp.enc
    2007-11-18 12:06 . 2007-12-06 17:05 <REP> d-------- C:\Documents and Settings\mickael\Application Data\Microgaming

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2007-12-02 19:43 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
    2007-12-01 12:54 --------- d--h--w C:\Program Files\InstallShield Installation Information
    2007-12-01 12:46 --------- d-----w C:\Program Files\BitTorrent
    2007-11-29 18:25 --------- d-----w C:\Program Files\Windows Media Connect 2
    2007-11-23 21:13 --------- d-----w C:\Documents and Settings\mickael\Application Data\BitTorrent
    2007-10-12 07:15 --------- d-----w C:\Documents and Settings\All Users\Application Data\TEMP
    2007-10-11 22:41 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft
    .

    ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    REGEDIT4
    *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{12902647-FF12-424F-9B88-86D9F8AEB7D9}]

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{38EBBB75-3811-4C21-B06C-8CCBFA6A8747}]

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{7FC6D532-90B9-4EE7-A4DB-8C2BA036A49A}]
    C:\WINDOWS\system32\vtsqq.dll

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AF6C417D-8939-40EB-898A-C612EBDA0413}]

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2006-03-02 13:00]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "SoundMan"="SOUNDMAN.EXE" [2004-12-01 08:54 C:\WINDOWS\SOUNDMAN.EXE]
    "NvCplDaemon"="RUNDLL32.exe" [2006-03-02 13:00 C:\WINDOWS\system32\rundll32.exe]
    "nwiz"="nwiz.exe" [2006-08-11 22:43 C:\WINDOWS\system32\nwiz.exe]
    "NvMediaCenter"="RUNDLL32.exe" [2006-03-02 13:00 C:\WINDOWS\system32\rundll32.exe]
    "NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50]
    "CaAvTray"="C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVTray.exe" [2007-08-08 10:58]
    "CAVRID"="C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVRID.exe" [2007-08-08 10:58]
    "SDTray"="C:\Program Files\Spyware Doctor\SDTrayApp.exe" [2007-11-02 17:24]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2006-03-02 13:00]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice]
    @=""

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice]
    @=""

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Contrôleur d’état.lnk]
    path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Contrôleur d’état.lnk
    backup=C:\WINDOWS\pss\Contrôleur d’état.lnkCommon Startup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk]
    path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Lancement rapide d'Adobe Reader.lnk
    backup=C:\WINDOWS\pss\Lancement rapide d'Adobe Reader.lnkCommon Startup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent]
    F:\bittorent\bittorrent.exe --force_start_minimized

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ControlCenter2.0]
    C:\Program Files\Brother\ControlCenter2\brctrcen.exe /autorun

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\draofkzhwl]
    c:\documents and settings\mickael\local settings\application data\draofkzhwl.exe draofkzhwl

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndexSearch]
    2005-03-17 19:30 40960 --a--c--- C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
    C:\Program Files\Messenger\msmsgs.exe /background

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
    C:\Program Files\MSN Messenger\MsnMsgr.Exe /background

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Odebit Multimedia V3]
    F:\V3\Odebit.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Odebit Multimedia V3 - Services]
    F:\V3\Odebit.exe /info

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PaperPort PTD]
    2005-03-17 19:17 57393 --a--c--- C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SetDefPrt]
    2005-01-26 18:02 49152 -----c--- C:\Program Files\Brother\Brmfl05a\BrStDvPt.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
    C:\Program Files\Skype\Phone\Skype.exe /nosplash /minimized

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
    F:\Spybot - Search & Destroy\TeaTimer.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SSBkgdUpdate]
    C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe -Embedding -boot

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
    F:\Steam\Steam.exe -silent

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
    2007-03-14 02:43 83608 --a------ C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
    2007-01-26 08:56 171448 --a------ C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe

    R3 BrScnUsb;Brother USB Still Image driver;C:\WINDOWS\system32\Drivers\BrScnUsb.sys
    R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
    S3 ovt530;Webcam Deluxe;C:\WINDOWS\system32\Drivers\ov530vid.sys
    S3 SetupNTGLM7X;SetupNTGLM7X;\??\H:\NTGLM7X.sys

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4314a642-95a9-11db-8ce2-806d6172696f}]
    \Shell\AutoRun\command - H:\Setup.exe

    .
    Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
    "2007-11-29 18:52:58 C:\WINDOWS\Tasks\At1.job"
    - C:\Documents and Settings\mickael\Application Data\wunauclt.exe
    "2007-11-29 19:00:00 C:\WINDOWS\Tasks\At2.job"
    - C:\Documents and Settings\mickael\Application Data\wunauclt.exe
    "2007-11-29 18:52:58 C:\WINDOWS\Tasks\At3.job"
    - C:\Documents and Settings\mickael\Application Data\wunauclt.exe
    "2007-11-29 21:43:43 C:\WINDOWS\Tasks\At4.job"
    - C:\Documents and Settings\mickael\Application Data\wunauclt.exe
    "2007-11-29 21:43:43 C:\WINDOWS\Tasks\At5.job"
    "2007-11-29 21:43:43 C:\WINDOWS\Tasks\At6.job"
    - C:\Documents and Settings\mickael\Application Data\wunauclt.exe
    .
    **************************************************************************

    catchme 0.3.1318 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2007-12-06 18:57:57
    Windows 5.1.2600 Service Pack 2 NTFS

    detected NTDLL code modification:
    ZwClose

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    Completion time: 2007-12-06 19:00:25 - machine was rebooted
    .
    --- E O F ---
    0
  3. g!rly Messages postés 18462 Statut Contributeur 407
     
    re,

    tu as un par feu`?

    Copie le texte ci-dessous :

    File::
    C:\WINDOWS\system32\ovnhqrtu.ini
    C:\WINDOWS\SxsCaPendDel
    C:\Program Files\update.zip
    C:\WINDOWS\mrofinu2000351.exe.tmp
    c:\documents and settings\mickael\local settings\application data\draofkzhwl.exe

    Folder::
    C:\Microgaming
    C:\VundoFix Backups

    Registry::
    [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{12902647-FF12-424F-9B88-86D9F8AEB7D9}]
    [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{38EBBB75-3811-4C21-B06C-8CCBFA6A8747}]
    [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{7FC6D532-90B9-4EE7-A4DB-8C2BA036A49A}]
    [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AF6C417D-8939-40EB-898A-C612EBDA0413}]
    [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\draofkzhwl]

    Ouvre le Bloc-Notes puis colle le texte copié.
    (Démarrer\Tous les programmes\Accessoires\Bloc notes.)
    Sauvegarde ce fichier sous le nom de CFScript.txt.

    Glisse maintenant le fichier CFScript.txt dans Combofix.exe comme ci-dessous :

    http://serveur1.archive-host.com/membres/up/1366464061/CFScript.gif

    Cela va relancer Combofix,

    Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide.

    Patiente le temps du scan.Le bureau va disparaître à plusieurs reprises: c'est normal!

    Ne touche à rien tant que le scan n'est pas terminé.

    Après redémarrage, poste le contenu du rapport Combofix.txt2

    S'il n'y a pas de rédémarrage, poste quand même le rapport.

    puis fais ceci :

    Téléchargez MSNFix.zip (de !aur3n7) sur votre bureau:
    http://sosvirus.changelog.fr/MSNFix.zip
    Décompressez-le (clic droit >> Extraire ici) et double cliquer sur le fichier MSNFix.bat.
    - Exécutez l'option R.
    -- Si l'infection est détectée, un message l'indiquera et il suffira de presser une touche pour lancer le nettoyage

    Note :
    Si une erreur de suppression est détectée un message s'affichera demandant de redémarrer l'ordinateur afin de terminer les opérations. Dans ce cas il suffit de redémarrer l'ordinateur en mode normal

    - Le rapport sera enregistré dans le même dossier que MSNFix sous forme date_heure.txt

    et

    Fais un clic droit sur ce lien :
    http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
    Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
    Ensuite double clique sur navilog1.exe pour lancer l'installation.
    Une fois l'installation terminée, le fix s'exécutera automatiquement.
    (Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

    Laisse-toi guider. Au menu principal, choisis 1 et valides.
    (ne fais pas le choix 2,3 ou 4 sans notre avis/accord)

    Patiente jusqu'au message :
    *** Analyse Termine le ..... ***
    Appuie sur une touche comme demandé, le blocnote va s'ouvrir.
    Copie-colle l'intégralité dans une réponse. Referme le blocnote.
    Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)

    donc post le rapport de combofix celui de msnfix et celui de navilog dans ta prochaine réponse

    @+
    0
  4. jojo32100 Messages postés 14 Statut Membre
     
    Rapport 2 combofix

    ComboFix 07-12-02.6 - mickael 2007-12-06 19:43:50.2 - NTFSx86
    Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.604 [GMT 1:00]
    Running from: C:\Documents and Settings\mickael\Bureau\ComboFix.exe
    Command switches used :: C:\Documents and Settings\mickael\Bureau\CFScript.txt
    * Created a new restore point

    FILE
    c:\documents and settings\mickael\local settings\application data\draofkzhwl.exe
    C:\Program Files\update.zip
    C:\WINDOWS\mrofinu2000351.exe.tmp
    C:\WINDOWS\SxsCaPendDel
    C:\WINDOWS\system32\ovnhqrtu.ini
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .

    C:\Microgaming
    C:\Microgaming\Poker\UnibetpokerMPP\ABI.dll
    C:\Microgaming\Poker\UnibetpokerMPP\BuildVersion.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\IAniObject.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\IAreaMapObject.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\IBannerObject.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\IButtonObject.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\ICanvasObject.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\ICardObject.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\ICasinoInfo.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\ICasinoPainter.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\ICheckBoxObject.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\IChipArrayObject.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\IComboObject.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\ICommsObject.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\IDataLayer.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\IDDList.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\IDeckObject.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\IEncrypt.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\IEventLogger.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\IFontObject.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\IGameHistory.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\IGameStats.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\IHotKeyObject.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\IImage.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\IInf.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\ILineObject.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\IListHeaderControl.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\IListObject.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\ILobbyListObject.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\ILocalData.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\ILogger.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\IMenuBar.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\IMonitorSection.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\IMPGStore.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\IPathObject.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\IPlayerAccount.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\IScrollObject.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\IServerStringManager.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\ISliderBarRanged.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\ISliderObject.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\ISoundHandler.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\ISpriteController.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\ISpriteList.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\ITabList.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\ITextBox.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\ITextObject.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\ITickerObject.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\ITreeControl.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\IUsageStats.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Control\IWebObject.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Eula.txt
    C:\Microgaming\Poker\UnibetpokerMPP\fdi.dll
    C:\Microgaming\Poker\UnibetpokerMPP\GameHistory.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\ClientConfig\ClientConfig.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Common\Common.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Common\PrimaBlank.html
    C:\Microgaming\Poker\UnibetpokerMPP\global\Common\SND_Button.wav
    C:\Microgaming\Poker\UnibetpokerMPP\global\ExitSplash\ExitSplash.dll
    C:\Microgaming\Poker\UnibetpokerMPP\global\ExitSplash\exitsplash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\FlashCasinoGame\FlashCasinoGame.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\FlashCasinoGame\FlashCasinoGame.dll
    C:\Microgaming\Poker\UnibetpokerMPP\global\FlashCasinoGame\FlashCasinoGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Guest\ClientConfig\ClientConfig.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Guest\Common\Common.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Guest\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Guest\Menu\M_Tree.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Guest\Menu\M_Wizard_Cash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Guest\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Guest\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Guest\Tourn_Menu\Tourn_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\HoldEm\holdem.dll
    C:\Microgaming\Poker\UnibetpokerMPP\global\HoldEm\HoldEm.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\ICafe\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\ICafe\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\ICafe\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\BTN_UPECombineLater.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\BTN_UPECombineNow.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\FLC_ConnectSpeed.gif
    C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\M_ADV_ExpandView.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\M_Buddy.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\M_Casino.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\M_Tree.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\M_Wizard.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\M_Wizard_Cash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\M_Wizard_MTT.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\M_Wizard_SnG.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\Menu.dll
    C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\SND_TournReminder.mp3
    C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\TXT_FlagsImageList.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\TXT_SpeechBubble.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\TXT_SpeechbubbleAdv.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\TXT_SubTabComboBoxTxtBkg.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\TXT_SubTabComboLimitBoxBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\TXT_SubTabComboListBoxBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\TXT_UPECombineArrow.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\Menu\TXT_UPECombineBkg.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\BTN_HistoryScrollDown1.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\BTN_HistoryScrollUp1.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\Chat.dll
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\Data3.fnt
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\DECK_ChipsMany.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\DECK_RabbitCamColour.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\DECK_RabbitCamStandard.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\FLC_rotate.gif
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\FNT_Rating.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\FNT_StickyNote.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\ICO_Clubs.BMP
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\ICO_Diamonds.BMP
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\ICO_Hearts.BMP
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\ICO_Spades.BMP
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\LargeViewTournamentPanel.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\Scroll_HistoryBackground.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\Scroll_HistoryBottomPiece.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\Scroll_HistoryMiddlePiece.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\Scroll_HistoryTopPiece.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\SND_AddChips.wav
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\SND_AddChips2.wav
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\SND_BadBeatProgressiveWin.wav
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\SND_CardDeal.mp3
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\SND_CardFold.mp3
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\SND_Check.mp3
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\SND_ChipsDragging.wav
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\SND_ExitGame.wav
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\SND_InputNeeded.mp3
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\SND_SitDown.mp3
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\SND_WakeUp.mp3
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\SND_Win.mp3
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_10seatpref.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_BBWinPlaque.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_GreyCard.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_HistoryBkg.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_Icon_History.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_Icon_Note.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_Icon_Profile.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_NextLevel_MiniView.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_SpeechArrow01.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_SpeechArrow02.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_SpeechArrow03.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_SpeechArrow04.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_SpeechBubble.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_StickyNoteBkg.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_TableNotification.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_TableNotification_Miniview.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_TournDetailsListBoxbkg.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\PokerGame\TXT_TournListTextBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\Popup_Menu\Popup_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Popup_Menu\TXT_IconAuditors.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\Popup_Menu\TXT_IconCashCheck.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\Popup_Menu\TXT_IconPlayCheck.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\Splash\Splash.dll
    C:\Microgaming\Poker\UnibetpokerMPP\global\Splash\splash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Table10\Table10.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Table10_Cards\Table10_Cards.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Table2\Table2.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Table2_Cards\Table2_Cards.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Table2_Draw\Table2_Draw.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Table2_Stud\Table2_Stud.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Table2_Stud_Cards\Table2_Stud_Cards.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Table5\Table5.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Table5_Cards\Table5_Cards.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Table5_Draw\Table5_Draw.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Table5_Stud\Table5_Stud.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Table5_Stud_Cards\Table5_Stud_Cards.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Table6\Table6.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Table6_Cards\Table6_Cards.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Table6_Stud\Table6_Stud.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Table6_Stud_Cards\Table6_Stud_Cards.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Table8\Table8.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Table8_Cards\Table8_Cards.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Table8_Stud\Table8_Stud.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Table8_Stud_Cards\Table8_Stud_Cards.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Tourn_Menu\Data3.fnt
    C:\Microgaming\Poker\UnibetpokerMPP\global\Tourn_Menu\FNT_Tourn_Blinds.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\Tourn_Menu\FNT_Tourn_CurrentLevel.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\Tourn_Menu\FNT_Tourn_NextBreak.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\Tourn_Menu\FNT_Tourn_NextLevelBlinds.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\Tourn_Menu\FNT_Tourn_NextLevelTime.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\Tourn_Menu\FNT_Tourn_NumEntrants.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\Tourn_Menu\FNT_Tourn_PlayersRemainingLRG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\Tourn_Menu\FNT_Tourn_PlayersRemainingSML.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\Tourn_Menu\FNT_Tourn_Postion.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\Tourn_Menu\FNT_Tourn_RunningTime.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\Tourn_Menu\Tourn_Menu.dll
    C:\Microgaming\Poker\UnibetpokerMPP\global\Tourn_Menu\Tourn_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\global\Tourn_Menu\TXT_TournDetailsListBoxbkg.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\Tourn_Menu\TXT_TournListTextbkg.dat
    C:\Microgaming\Poker\UnibetpokerMPP\global\Tourn_Menu\TXT_TournShowListBoxbkg.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\da\BuildVersion.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\da\Common\CommonRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\da\Common\GenericImage.gif
    C:\Microgaming\Poker\UnibetpokerMPP\local\da\Common\TXT_PoweredByBH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\da\Common\TXT_PoweredByBV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\da\Common\TXT_PoweredByWH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\da\Common\TXT_PoweredByWV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\da\ExitSplash\ExitSplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\da\FlashCasinoGame\FlashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\da\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\da\Menu\M_ADV_ExpandView.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\da\Menu\M_Tree.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\da\Menu\M_Wizard_Cash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\da\Menu\M_Wizard_SnG.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\da\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\da\Menu\MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\da\PokerGame\LargeViewTournamentPanel.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\da\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\da\PokerGame\pokergameRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\da\Splash\SplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\da\Tourn_Menu\Tourn_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\da\Tourn_Menu\Tourn_MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\de\BuildVersion.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\de\Common\CommonRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\de\Common\GenericImage.gif
    C:\Microgaming\Poker\UnibetpokerMPP\local\de\Common\TXT_PoweredByBH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\de\Common\TXT_PoweredByBV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\de\Common\TXT_PoweredByWH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\de\Common\TXT_PoweredByWV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\de\ExitSplash\ExitSplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\de\FlashCasinoGame\FlashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\de\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\de\Menu\M_ADV_ExpandView.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\de\Menu\M_Buddy.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\de\Menu\M_Casino.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\de\Menu\M_Tree.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\de\Menu\M_Wizard.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\de\Menu\M_Wizard_Cash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\de\Menu\M_Wizard_MTT.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\de\Menu\M_Wizard_SnG.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\de\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\de\Menu\MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\de\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\de\PokerGame\pokergameRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\de\Splash\SplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\de\Table2_Draw\Table2_Draw.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\de\Table5_Draw\Table5_Draw.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\de\Tourn_Menu\Tourn_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\de\Tourn_Menu\Tourn_MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\el\BuildVersion.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\el\Common\CommonRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\el\Common\GenericImage.gif
    C:\Microgaming\Poker\UnibetpokerMPP\local\el\Common\TXT_PoweredByBH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\el\Common\TXT_PoweredByBV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\el\Common\TXT_PoweredByWH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\el\Common\TXT_PoweredByWV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\el\ExitSplash\ExitSplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\el\FlashCasinoGame\FlashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\el\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\el\Menu\M_Buddy.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\el\Menu\M_Casino.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\el\Menu\M_Tree.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\el\Menu\M_Wizard.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\el\Menu\M_Wizard_Cash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\el\Menu\M_Wizard_MTT.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\el\Menu\M_Wizard_SnG.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\el\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\el\Menu\MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\el\PokerGame\LargeViewTournamentPanel.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\el\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\el\PokerGame\pokergameRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\el\Splash\SplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\el\Tourn_Menu\Tourn_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\el\Tourn_Menu\Tourn_MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\en\BuildVersion.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\en\Common\CommonRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\en\Common\GenericImage.gif
    C:\Microgaming\Poker\UnibetpokerMPP\local\en\Common\TXT_PoweredByBH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\en\Common\TXT_PoweredByBV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\en\Common\TXT_PoweredByWH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\en\Common\TXT_PoweredByWV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\en\ExitSplash\ExitSplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\en\FlashCasinoGame\FlashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\en\Menu\MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\en\PokerGame\pokergameRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\en\Splash\SplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\en\Tourn_Menu\Tourn_MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\es\BuildVersion.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\es\Common\CommonRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\es\Common\GenericImage.gif
    C:\Microgaming\Poker\UnibetpokerMPP\local\es\Common\TXT_PoweredByBH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\es\Common\TXT_PoweredByBV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\es\Common\TXT_PoweredByWH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\es\Common\TXT_PoweredByWV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\es\ExitSplash\ExitSplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\es\FlashCasinoGame\FlashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\es\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\es\Menu\M_Buddy.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\es\Menu\M_Tree.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\es\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\es\Menu\MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\es\PokerGame\LargeViewTournamentPanel.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\es\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\es\PokerGame\pokergameRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\es\Splash\SplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\es\Tourn_Menu\Tourn_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\es\Tourn_Menu\Tourn_MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\fi\BuildVersion.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\fi\Common\CommonRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\fi\Common\GenericImage.gif
    C:\Microgaming\Poker\UnibetpokerMPP\local\fi\Common\TXT_PoweredByBH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\fi\Common\TXT_PoweredByBV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\fi\Common\TXT_PoweredByWH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\fi\Common\TXT_PoweredByWV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\fi\ExitSplash\ExitSplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\fi\FlashCasinoGame\FlashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\fi\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\fi\Menu\M_Buddy.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\fi\Menu\M_Tree.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\fi\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\fi\Menu\MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\fi\PokerGame\LargeViewTournamentPanel.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\fi\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\fi\PokerGame\pokergameRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\fi\Splash\SplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\fi\Table5\Table5.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\fi\Tourn_Menu\Tourn_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\fi\Tourn_Menu\Tourn_MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\fr\BuildVersion.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Common\CommonRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Common\GenericImage.gif
    C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Common\TXT_PoweredByBH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Common\TXT_PoweredByBV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Common\TXT_PoweredByWH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Common\TXT_PoweredByWV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\fr\ExitSplash\exitsplash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\fr\ExitSplash\ExitSplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\fr\FlashCasinoGame\FlashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Menu\M_Buddy.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Menu\M_Tree.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Menu\M_Wizard.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Menu\M_Wizard_Cash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Menu\M_Wizard_SnG.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Menu\MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\fr\PokerGame\LargeViewTournamentPanel.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\fr\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\fr\PokerGame\pokergameRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Splash\SplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Table2_Draw\Table2_Draw.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Table5_Draw\Table5_Draw.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Tourn_Menu\Tourn_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\fr\Tourn_Menu\Tourn_MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\it\BuildVersion.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\it\Common\CommonRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\it\Common\GenericImage.gif
    C:\Microgaming\Poker\UnibetpokerMPP\local\it\Common\TXT_PoweredByBH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\it\Common\TXT_PoweredByBV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\it\Common\TXT_PoweredByWH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\it\Common\TXT_PoweredByWV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\it\ExitSplash\ExitSplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\it\FlashCasinoGame\FlashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\it\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\it\Menu\M_ADV_ExpandView.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\it\Menu\M_Buddy.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\it\Menu\M_Tree.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\it\Menu\M_Wizard.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\it\Menu\M_Wizard_Cash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\it\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\it\Menu\MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\it\PokerGame\LargeViewTournamentPanel.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\it\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\it\PokerGame\pokergameRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\it\Splash\SplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\it\Table2_Draw\Table2_Draw.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\it\Table5\Table5.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\it\Table5_Draw\Table5_Draw.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\it\Table5_Stud\Table5_Stud.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\it\Tourn_Menu\Tourn_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\it\Tourn_Menu\Tourn_MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\ja\BuildVersion.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\ja\Common\CommonRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\ja\Common\GenericImage.gif
    C:\Microgaming\Poker\UnibetpokerMPP\local\ja\Common\TXT_PoweredByBH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\ja\Common\TXT_PoweredByBV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\ja\Common\TXT_PoweredByWH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\ja\Common\TXT_PoweredByWV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\ja\ExitSplash\ExitSplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\ja\FlashCasinoGame\FlashCasinoGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\ja\FlashCasinoGame\FlashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\ja\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\ja\Menu\M_Tree.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\ja\Menu\M_Wizard.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\ja\Menu\M_Wizard_Cash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\ja\Menu\M_Wizard_MTT.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\ja\Menu\M_Wizard_SnG.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\ja\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\ja\Menu\MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\ja\PokerGame\LargeViewTournamentPanel.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\ja\PokerGame\Pokergame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\ja\PokerGame\pokergameRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\ja\Splash\SplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\ja\Tourn_Menu\Tourn_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\ja\Tourn_Menu\Tourn_MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\ko\BuildVersion.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\ko\Common\CommonRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\ko\Common\GenericImage.gif
    C:\Microgaming\Poker\UnibetpokerMPP\local\ko\Common\TXT_PoweredByBH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\ko\Common\TXT_PoweredByBV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\ko\Common\TXT_PoweredByWH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\ko\Common\TXT_PoweredByWV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\ko\ExitSplash\ExitSplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\ko\FlashCasinoGame\FlashCasinoGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\ko\FlashCasinoGame\FlashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\ko\Menu\M_Tree.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\ko\Menu\M_Wizard.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\ko\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\ko\Menu\MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\ko\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\ko\PokerGame\pokergameRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\ko\Splash\SplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\ko\Tourn_Menu\Tourn_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\ko\Tourn_Menu\Tourn_MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\nl\BuildVersion.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Common\CommonRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Common\GenericImage.gif
    C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Common\TXT_PoweredByBH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Common\TXT_PoweredByBV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Common\TXT_PoweredByWH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Common\TXT_PoweredByWV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\nl\ExitSplash\ExitSplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\nl\FlashCasinoGame\FlashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Menu\M_ADV_ExpandView.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Menu\M_Buddy.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Menu\M_Casino.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Menu\M_Tree.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Menu\M_Wizard.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Menu\M_Wizard_Cash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Menu\M_Wizard_MTT.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Menu\M_Wizard_SnG.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Menu\MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\nl\PokerGame\LargeViewTournamentPanel.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\nl\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\nl\PokerGame\pokergameRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Splash\SplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Tourn_Menu\Tourn_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\nl\Tourn_Menu\Tourn_MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\no\BuildVersion.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\no\Common\CommonRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\no\Common\GenericImage.gif
    C:\Microgaming\Poker\UnibetpokerMPP\local\no\Common\TXT_PoweredByBH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\no\Common\TXT_PoweredByBV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\no\Common\TXT_PoweredByWH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\no\Common\TXT_PoweredByWV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\no\ExitSplash\ExitSplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\no\FlashCasinoGame\FlashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\no\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\no\Menu\M_Buddy.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\no\Menu\M_Tree.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\no\Menu\M_Wizard_Cash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\no\Menu\M_Wizard_SnG.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\no\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\no\Menu\MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\no\PokerGame\LargeViewTournamentPanel.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\no\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\no\PokerGame\pokergameRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\no\Splash\SplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\no\Tourn_Menu\Tourn_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\no\Tourn_Menu\Tourn_MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\BuildVersion.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Common\CommonRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Common\GenericImage.gif
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Common\TXT_PoweredByBH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Common\TXT_PoweredByBV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Common\TXT_PoweredByWH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Common\TXT_PoweredByWV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\ExitSplash\ExitSplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\FlashCasinoGame\FlashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Menu\M_ADV_ExpandView.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Menu\M_Buddy.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Menu\M_Tree.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Menu\M_Wizard.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Menu\M_Wizard_Cash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Menu\MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\PokerGame\LargeViewTournamentPanel.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\PokerGame\Pokergame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\PokerGame\pokergameRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Splash\SplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Table5\Table5.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Table5_Draw\Table5_Draw.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Tourn_Menu\Tourn_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt-br\Tourn_Menu\Tourn_MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt\BuildVersion.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt\Common\CommonRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt\Common\GenericImage.gif
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt\Common\TXT_PoweredByBH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt\Common\TXT_PoweredByBV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt\Common\TXT_PoweredByWH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt\Common\TXT_PoweredByWV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt\ExitSplash\ExitSplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt\FlashCasinoGame\FlashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt\Menu\M_ADV_ExpandView.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt\Menu\M_Buddy.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt\Menu\M_Tree.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt\Menu\M_Wizard.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt\Menu\M_Wizard_Cash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt\Menu\menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt\Menu\MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt\PokerGame\LargeViewTournamentPanel.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt\PokerGame\Pokergame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt\PokerGame\PokergameRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt\Splash\SplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt\Tourn_Menu\Tourn_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\pt\Tourn_Menu\Tourn_MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\ru\BuildVersion.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Common\CommonRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Common\GenericImage.gif
    C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Common\TXT_PoweredByBH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Common\TXT_PoweredByBV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Common\TXT_PoweredByWH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Common\TXT_PoweredByWV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\ru\ExitSplash\ExitSplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\ru\FlashCasinoGame\FlashCasinoGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\ru\FlashCasinoGame\FlashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Menu\M_ADV_ExpandView.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Menu\M_Buddy.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Menu\M_Tree.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Menu\M_Wizard.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Menu\M_Wizard_Cash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Menu\M_Wizard_SnG.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Menu\MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\ru\PokerGame\LargeViewTournamentPanel.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\ru\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\ru\PokerGame\pokergameRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Splash\SplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Table5_Draw\Table5_Draw.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Tourn_Menu\Tourn_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\ru\Tourn_Menu\Tourn_MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\sv\BuildVersion.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Common\CommonRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Common\GenericImage.gif
    C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Common\TXT_PoweredByBH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Common\TXT_PoweredByBV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Common\TXT_PoweredByWH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Common\TXT_PoweredByWV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\sv\ExitSplash\ExitSplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\sv\FlashCasinoGame\FlashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Menu\M_Buddy.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Menu\M_Tree.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Menu\M_Wizard.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Menu\M_Wizard_Cash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Menu\M_Wizard_SnG.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Menu\MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\sv\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\sv\PokerGame\pokergameRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Splash\SplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Table2_Draw\Table2_Draw.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Table5_Draw\Table5_Draw.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Tourn_Menu\Tourn_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\sv\Tourn_Menu\Tourn_MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\tr\BuildVersion.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\tr\Common\CommonRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\tr\Common\GenericImage.gif
    C:\Microgaming\Poker\UnibetpokerMPP\local\tr\Common\TXT_PoweredByBH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\tr\Common\TXT_PoweredByBV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\tr\Common\TXT_PoweredByWH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\tr\Common\TXT_PoweredByWV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\tr\ExitSplash\ExitSplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\tr\FlashCasinoGame\FlashCasinoGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\tr\FlashCasinoGame\FlashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\tr\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\tr\Menu\M_Buddy.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\tr\Menu\M_Tree.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\tr\Menu\M_Wizard_Cash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\tr\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\tr\Menu\MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\tr\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\tr\PokerGame\pokergameRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\tr\Splash\SplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\tr\Table5_Draw\Table5_Draw.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\tr\Tourn_Menu\Tourn_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\tr\Tourn_Menu\Tourn_MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\BuildVersion.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Common\CommonRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Common\GenericImage.gif
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Common\TXT_PoweredByBH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Common\TXT_PoweredByBV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Common\TXT_PoweredByWH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Common\TXT_PoweredByWV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\ExitSplash\exitsplash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\ExitSplash\ExitSplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\FlashCasinoGame\FlashCasinoGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\FlashCasinoGame\FlashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Menu\M_ADV_ExpandView.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Menu\M_Buddy.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Menu\M_Casino.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Menu\M_Tree.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Menu\M_Wizard.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Menu\M_Wizard_Cash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Menu\M_Wizard_MTT.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Menu\M_Wizard_SnG.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Menu\MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\PokerGame\LargeViewTournamentPanel.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\PokerGame\pokergameRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Splash\SplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Table2_Draw\Table2_Draw.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Table5_Draw\Table5_Draw.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Tourn_Menu\Tourn_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-cn\Tourn_Menu\Tourn_MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\BuildVersion.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Common\CommonRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Common\GenericImage.gif
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Common\TXT_PoweredByBH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Common\TXT_PoweredByBV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Common\TXT_PoweredByWH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Common\TXT_PoweredByWV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\ExitSplash\ExitSplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\FlashCasinoGame\FlashCasinoGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\FlashCasinoGame\FlashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Menu\M_ADV_ExpandView.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Menu\M_Buddy.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Menu\M_Casino.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Menu\M_Tree.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Menu\M_Wizard.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Menu\M_Wizard_Cash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Menu\M_Wizard_MTT.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Menu\M_Wizard_SnG.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Menu\MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\PokerGame\LargeViewTournamentPanel.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\PokerGame\pokergameRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Splash\SplashRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Tourn_Menu\Tourn_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\local\zh-tw\Tourn_Menu\Tourn_MenuRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Logger\unibetpoker34.lgr
    C:\Microgaming\Poker\UnibetpokerMPP\Logger\unibetpoker35.lgr
    C:\Microgaming\Poker\UnibetpokerMPP\Logger\unibetpoker36.lgr
    C:\Microgaming\Poker\UnibetpokerMPP\Logger\unibetpoker37.lgr
    C:\Microgaming\Poker\UnibetpokerMPP\Logger\unibetpoker38.lgr
    C:\Microgaming\Poker\UnibetpokerMPP\Logger\unibetpoker39.lgr
    C:\Microgaming\Poker\UnibetpokerMPP\Logger\unibetpoker40.lgr
    C:\Microgaming\Poker\UnibetpokerMPP\Logger\unibetpoker41.lgr
    C:\Microgaming\Poker\UnibetpokerMPP\Logger\unibetpoker42.lgr
    C:\Microgaming\Poker\UnibetpokerMPP\Logger\unibetpoker43.lgr
    C:\Microgaming\Poker\UnibetpokerMPP\Magic.enc
    C:\Microgaming\Poker\UnibetpokerMPP\MGSCOMMS.dll
    C:\Microgaming\Poker\UnibetpokerMPP\mgsmsg.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Mimgldr.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Mp3dec.asi
    C:\Microgaming\Poker\UnibetpokerMPP\MPCore.dll
    C:\Microgaming\Poker\UnibetpokerMPP\MPExporter.dll
    C:\Microgaming\Poker\UnibetpokerMPP\MPG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\MPGStore2.dll
    C:\Microgaming\Poker\UnibetpokerMPP\MPGUtil.dll
    C:\Microgaming\Poker\UnibetpokerMPP\MPPoker.exe
    C:\Microgaming\Poker\UnibetpokerMPP\Mss32.dll
    C:\Microgaming\Poker\UnibetpokerMPP\msvcp71.dll
    C:\Microgaming\Poker\UnibetpokerMPP\msvcr71.dll
    C:\Microgaming\Poker\UnibetpokerMPP\mupinfo
    C:\Microgaming\Poker\UnibetpokerMPP\readme.txt
    C:\Microgaming\Poker\UnibetpokerMPP\storecore.dll
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Common\TXT_AboutMGS.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\ExitSplash\ExitSplash.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\ExitSplash\exitsplash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\HoldEm\BTN_close.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\HoldEm\BTN_minimize.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\HoldEm\MiniTable.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Icafe\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Icafe\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BKG_BadBeat.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_6.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_ActiveTablesCheck.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_ActiveTablesUnCheck.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_ADV_Find.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_ADV_Go.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_ADV_JoinTable.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_ADV_JoinWaitingList.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Buddy_AcceptDecline.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Buddy_AddBuddy.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Buddy_BlockRemove.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_CanvasTitleBarTables.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_CheckBox.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_CheckBox_Tourn.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_FetchNext.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_FetchPrev.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_GameScrollDown.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_GameScrollUp.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_GameSkinnyScrollDown.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_GameSkinnyScrollUp.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Go.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Gototourn.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_JoinTable.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_JoinWaitingList.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_ListHeader.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Login.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Menu.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Nav_Bank.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Nav_Buddies.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Nav_BuddyIcon.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Nav_Casino.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Nav_ChangeLobby.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Nav_Help.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Nav_Menu.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Nav_MyAccount.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Nav_Preferences.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Nav_Promotions.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Nav_Refresh.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Nav_SecureIcon.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_UnCheckBox.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_UnCheckBox_Tourn.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_10SeatSmall.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_1ClickMedium.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_2SeatSmall.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_5CardDrawSmall.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_5CardStudSmall.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_5SeatSmall.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_6SeatSmall.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_7CardStudSmall.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_8SeatSmall.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_CashLarge.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_CashMedium.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_EUR.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_FixedLimitSmall.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_GBP.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_GoToTable.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_HoldemSmall.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_HyperLinks.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_JPY.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_Minus.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_MoreBack.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_NOK.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_NoLimitSmall.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_OmahaHiLoSmall.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_OmahaSmall.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_Plus.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_PotLimitSmall.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_RadioSelected.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_RadioUnselected.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_ScheduleMedium.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_SEK.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_Sit&GoMedium.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_Sit&GoMTTSmall.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_Sit&GoSTTSmall.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_SuggestionBox.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_SuggestionBoxSnG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_SuggestionError.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\BTN_Wizard_USD.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\CHK_ADV_ShowHideAdv.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\CHK_CheckBoxCheckUncheck.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\CHK_Nav_SoundIcon.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Data3.fnt
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\FLC_ConnectSpeed.gif
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\FLC_MOTD.gif
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\FNT_Jackpot.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\M_Buddy.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\M_Casino.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\M_Shared.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\M_Tree.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\M_Wizard.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Main.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Minus.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Plus.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\SCROLL_Background.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\SCROLL_BottomPiece.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\SCROLL_MiddlePiece.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Scroll_SkinnyBackground.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Scroll_SkinnyBottomPiece.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Scroll_SkinnyMiddlePiece.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Scroll_SkinnyTopPiece.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\SCROLL_TopPiece.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Slider_ADV_IndicatorLeft.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Slider_ADV_IndicatorRight.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Slider_ADV_MainBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Slider_ADV_RangeSelection.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Slider_Wizard_Indicator.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Slider_Wizard_MainBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Slider_Wizard_RangeSelection.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Slider_Wizard_SnGIndicator.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\Slider_Wizard_SnGMainBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_MainSelectedLeft.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_MainSelectedMiddle.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_MainSelectedRight.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_MainUnselectedLeft.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_MainUnselectedMiddle.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_MainUnselectedRight.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_PrivateSelectedLeft.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_PrivateSelectedMiddle.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_PrivateSelectedRight.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_PrivateUnselectedLeft.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_PrivateUnselectedMiddle.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_PrivateUnselectedRight.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_SliderSelectedLeft.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_SliderSelectedMiddle.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_SliderSelectedRight.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_SliderUnSelectedLeft.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_SliderUnSelectedMiddle.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_ADV_SliderUnSelectedRight.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_LobbyNormalLeft.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_LobbyNormalMiddle.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_LobbyNormalRight.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_LobbySelectedLeft.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_LobbySelectedMiddle.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TAB_LobbySelectedRight.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_ADV_CheckBoxAltBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_ADV_FilterBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_ADV_FilterBKGSml.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_ADV_GameListBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_ADV_GameListBottomBar.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_ADV_Main.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_ADV_PrivateBottom.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_ADV_PrivateSeatedWaitBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_ADV_SeatedWaitingAltBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_ADV_SeatedWaitingBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_ADV_SeatedWaitingBottom.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_ADV_VerticalDivider.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_BannerBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Buddy_BuddyImageList.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Buddy_Error.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Buddy_InviteRecievedImageList.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Buddy_Main.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Buddy_MainTournListLobby.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Buddy_SeatedWaitingBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_FlagsImageList.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_FlashTableInfoListBkG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_FrameBottom.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\g
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. jojo32100 Messages postés 14 Statut Membre
     
    Rapport msn fix

    MSNFix 1.601

    C:\Documents and Settings\mickael\Bureau\MSNFix
    Fix exécuté le 06/12/2007 - 20:47:26,40 By mickael
    mode normal

    ************************ Recherche les fichiers présents

    Aucun Fichier trouvé

    ************************ Recherche les dossiers présents

    ... C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP\

    ************************ Suppression des fichiers

    ************************ Suppression des dossiers

    .. OK ... C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP\

    ************************ Nettoyage du registre

    ************************ Fichiers suspects

    Aucun Fichier trouvé

    Les fichiers et clés de registre supprimés ont été sauvegardés dans le fichier 06122007_20482918.zip

    ------------------------------------------------------------------------
    Auteur : !aur3n7 Contact: https://www.ionos.fr/
    ------------------------------------------------------------------------

    --------------------------------------------- END ---------------------------------------------
    0
  7. g!rly Messages postés 18462 Statut Contributeur 407
     
    peux tu mettre le rapport de combofix en entier stp

    puis il manque encore le rapport de navilog

    @´+
    0
  8. jojo32100 Messages postés 14 Statut Membre
     
    Et voila le dernier merci pour tout!!

    Search Navipromo version 3.3.6 commencé le 06/12/2007 à 20:54:41,48

    !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
    !!! Postez ce rapport sur le forum pour le faire analyser !!!
    !!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

    Outil exécuté depuis C:\Program Files\navilog1
    Mise à jour le 14.11.2007 à 18h00 par IL-MAFIOSO

    Microsoft Windows XP [version 5.1.2600]
    Internet Explorer : 7.0.5730.11

    *** Recherche Programmes installés ***

    *** Recherche dossiers dans C:\WINDOWS ***

    *** Recherche dossiers dans C:\Program Files ***

    *** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data ***

    *** Recherche dossiers dans C:\Documents and Settings\mickael\Application Data ***

    *** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1 ***

    *** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
    pour + d'infos : http://www.gmer.net

    Aucun fichier trouvé dans :

    - C:\WINDOWS\system32
    - C:\DOCUME~1\MICKAEL\LOCALS~1\APPLIC~1

    *** Recherche avec GenericNaviSearch ***
    !!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
    !!! A vérifier impérativement avant toute suppression manuelle !!!

    * Recherche dans C:\WINDOWS\system32 *

    * Recherche dans C:\DOCUME~1\MICKAEL\LOCALS~1\APPLIC~1 *

    *** Recherche fichiers ***

    *** Recherche clés spécifiques dans le Registre ***

    *** Module de Recherche complémentaire ***
    (Recherche fichiers spécifiques)

    1)Recherche fichiers connus:

    2)Recherche Heuristique :

    3)Recherche Certificats :

    Certificat Egroup absent !

    *** Analyse terminée le 06/12/2007 à 20:55:55,75 ***
    0
  9. jojo32100 Messages postés 14 Statut Membre
     
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_FrameBottom.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_GameLauncherBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_GameList_AltBkg.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_GameListBkg.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_GameListSelected.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_GameTypeBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_LoyaltyPointBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_MainTournListLobby.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_MenuBarDropDown.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_MOTD.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_MultiTreeFolderFlashBkg.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_MultiTreeFolderPokerBkg.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Nav_PlayerDetailsDivider.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Nav_TaskBarDivider.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_PrivateBottomBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_PrivateTopBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_QSErrorBkg.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_QuickStartBkg.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_RakedHandsBkg.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_SeatedWaitingBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_TableInfoListBkG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Tree_CanvasTitleBarDisabled.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Tree_GameListBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Tree_GameListCasinoBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Tree_GameTypeBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Tree_Main.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Tree_PrivateTopBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Tree_SeatedWaitingAltBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Tree_SeatedWaitingBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Tree_TableInfoListBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_TreeImageList.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_TreeNodeBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Wizard_Divider.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Wizard_Main.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Wizard_SuggestionBox.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Wizard_SuggestionBoxSelected.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Wizard_SuggestionBoxSnG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Wizard_SuggestionBoxSnGSelected.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Wizard_TournBlockSelected.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Menu\TXT_Wizard_TournBlockUnSelected.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_4.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_5.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_AutoMuckCheck_MiniView.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_AutoMuckUncheck_MiniView.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_AutoPostCheck_MiniView.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_AutoPostUncheck_MiniView.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Bank.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Bank_MiniView.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Check.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Check_miniview.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Check2.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_DealMaking.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Exit.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Game1.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Game2.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Game3.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_GameScrollDown.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_GameScrollUp.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_GameSkinnyScrollDownRebuy.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_GameSkinnyScrollUpRebuy.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Help.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_HistoryScrollDown.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_HistoryScrollUp.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Limit_miniview.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_ListHeader.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_ListHeaderTL.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Lobby.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Lobby_MiniView.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Menu.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Menu_MiniView.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_NoLimit_miniview.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_popupmenu.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_ProposeDeal.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_ProposeDeal_MiniView.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_SitOutCheck_MiniView.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_SitOutUncheck_MiniView.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_SliderBetButton.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Stats.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_TimeBank.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Uncheck.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Uncheck_miniview.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Uncheck2.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_WebButton.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Webbutton4.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\BTN_Webbutton5.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\Data3.fnt
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\DECK_CardBackMini.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\DECK_CardBackSmall.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\DECK_CardBackTiny.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\DECK_CardSmall.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\DECK_CardSmall_4Color.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\DECK_RabbitCamCardBack.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\FLC_Dealmaking.gif
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\FLC_EndTurn.gif
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\FNT_BetInfo.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\FNT_JackpotTable.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\FNT_JackpotWinAmount.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\Minus.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\Plus.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\SCROLL_Background.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\SCROLL_BottomPiece.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\SCROLL_MiddlePiece.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\Scroll_SkinnyBackgroundRebuy.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\Scroll_SkinnyBottomPieceRebuy.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\Scroll_SkinnyMiddlePieceRebuy.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\Scroll_SkinnyTopPieceRebuy.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\SCROLL_TopPiece.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\SLIDER_Indicator.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\SLIDER_Main.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TAB_EmbeddedLobbyNormalLeft.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TAB_EmbeddedLobbyNormalMiddle.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TAB_EmbeddedLobbyNormalRight.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TAB_EmbeddedLobbySelectedLeft.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TAB_EmbeddedLobbySelectedMiddle.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TAB_EmbeddedLobbySelectedRight.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TAB_SliderNormalLeft.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TAB_SliderNormalMiddle.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TAB_SliderNormalRight.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TAB_SliderSelectedLeft.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TAB_SliderSelectedMiddle.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TAB_SliderSelectedRight.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_AutoRebuyComboBoxBkg.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_AutoRebuyComboListBoxBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_BadBeatChipTray.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_BBTableLogoOverlay.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_BBWinPlaque.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_BlackjackLaunchBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_Branding.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_DiscardCardsBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_EmbeddedLobbyBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_EmbeddedLobbyNodeBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_EmbeddedLobbyTabBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_FoldCardsBkg_Mini.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_FoldPlaqueBalBkg.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_FrameBottom.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_GameList_AltBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_GameListSelected.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_GameListSelectedPT.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_MainRulesDisplay.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_MainStatsDisplay.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_MiniViewSliderBackground.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_MTT_Stats.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_MTTInfoBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_PlaqueAction.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_PlaqueActive.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_PlaqueBalBkg.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_PlaqueFreeSeat.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_PlaqueNoAction.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_PlaqueSitOut.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_Poweredby_Miniview.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_SliderBackground.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_YourTurn.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\PokerGame\TXT_YourTurn_miniview.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Popup_Menu\Popup_Background.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Popup_Menu\Popup_Borders.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Popup_Menu\Popup_Buddy_Submenu.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Popup_Menu\Popup_Divider.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Popup_Menu\Popup_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Popup_Menu\Popup_OptionsCheck.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Popup_Menu\Popup_Submenu.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Popup_Menu\Popup_Title.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Splash\BTN_Close.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Splash\FLC_Progress.gif
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Splash\Splash.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Splash\splash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Table10\Table10.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Table2\table2.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Table5\table5.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Table5_Draw\Table5_Draw.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Table6\table6.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Table8\table8.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\BTN_6TL.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\BTN_7.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\BTN_GameSkinnyScrollDownTL.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\BTN_GameSkinnyScrollUpTL.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\BTN_ListHeaderTL.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\BTN_LoginTL.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\BTN_TournHeader.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\Scroll_SkinnyBackgroundTL.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\Scroll_SkinnyBottomPieceTL.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\Scroll_SkinnyMiddlePieceTL.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\Scroll_SkinnyTopPieceTL.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\TAB_TournNormalLeft.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\TAB_TournNormalMiddle.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\TAB_TournNormalRight.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\TAB_TournSelectedLeft.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\TAB_TournSelectedMiddle.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\TAB_TournSelectedRight.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\Tourn_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\TXT_FrameBottomTL.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\TXT_GameListSelectedTL.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\TXT_MainTournList.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\TXT_Tourn_AltBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\TXT_Tourn_BetStructureAltBKG.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\TXT_Tourn_BetStructureSelected.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\TXT_Tourn_BuddyIcon.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\TXT_Tourn_ClockBlankScreen.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\TXT_Tourn_TournDescription.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\global\Tourn_Menu\TXT_TournLobby.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\da\ClientConfig\ClientConfig.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\da\ClientConfig\OperatorRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\da\Common\blank.css
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\da\Common\Blank.html
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\da\ExitSplash\exitsplash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\da\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\da\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\da\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\da\PokerGame\TXT_DealerMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\da\PokerGame\TXT_DealerMarkerMini.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\da\PokerGame\TXT_ReservedMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\de\ClientConfig\ClientConfig.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\de\ClientConfig\OperatorRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\de\Common\blank.css
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\de\Common\Blank.html
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\de\ExitSplash\exitsplash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\de\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\de\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\de\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\de\PokerGame\TXT_DealerMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\de\PokerGame\TXT_DealerMarkerMini.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\de\PokerGame\TXT_ReservedMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\de\Splash\splash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\de\Tourn_Menu\Tourn_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\ClientConfig\ClientConfig.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\ClientConfig\OperatorRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\Common\blank.css
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\Common\Blank.html
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\Common\TXT_PoweredByBH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\Common\TXT_PoweredByBV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\Common\TXT_PoweredByWH.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\Common\TXT_PoweredByWV.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\ExitSplash\ExitSplash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\Menu\M_Shared.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\PokerGame\TXT_DealerMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\PokerGame\TXT_DealerMarkerMini.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\PokerGame\TXT_ReservedMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\Splash\splash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\el\Tourn_Menu\Tourn_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\en\ClientConfig\ClientConfig.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\en\ClientConfig\OperatorRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\en\Common\blank.css
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\en\Common\Blank.html
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\en\PokerGame\TXT_DealerMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\en\PokerGame\TXT_DealerMarkerMini.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\en\PokerGame\TXT_ReservedMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\es\ClientConfig\ClientConfig.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\es\ClientConfig\OperatorRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\es\Common\blank.css
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\es\Common\Blank.html
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\es\ExitSplash\exitsplash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\es\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\es\Menu\M_Tree.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\es\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\es\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\es\PokerGame\TXT_DealerMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\es\PokerGame\TXT_DealerMarkerMini.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\es\PokerGame\TXT_ReservedMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fi\ClientConfig\ClientConfig.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fi\ClientConfig\OperatorRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fi\Common\blank.css
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fi\Common\Blank.html
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fi\ExitSplash\ExitSplash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fi\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fi\Menu\M_Tree.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fi\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fi\PokerGame\Pokergame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fi\PokerGame\TXT_DealerMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fi\PokerGame\TXT_DealerMarkerMini.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fi\PokerGame\TXT_ReservedMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fi\Tourn_Menu\Tourn_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fr\ClientConfig\ClientConfig.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fr\ClientConfig\OperatorRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fr\Common\blank.css
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fr\Common\blank.html
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fr\ExitSplash\exitsplash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fr\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fr\Menu\M_Wizard.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fr\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fr\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fr\PokerGame\TXT_DealerMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fr\PokerGame\TXT_DealerMarkerMini.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fr\PokerGame\TXT_ReservedMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fr\Splash\splash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\fr\Tourn_Menu\Tourn_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\it\ClientConfig\ClientConfig.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\it\ClientConfig\OperatorRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\it\Common\blank.css
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\it\Common\Blank.html
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\it\ExitSplash\exitsplash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\it\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\it\Menu\M_Tree.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\it\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\it\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\it\PokerGame\TXT_DealerMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\it\PokerGame\TXT_DealerMarkerMini.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\it\PokerGame\TXT_ReservedMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\it\Splash\splash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\ClientConfig\ClientConfig.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\ClientConfig\OperatorRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\Common\blank.css
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\Common\blank.html
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\ExitSplash\ExitSplash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\Menu\M_Buddy.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\Menu\M_Shared.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\Menu\M_Tree.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\Menu\M_Wizard.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\PokerGame\TXT_DealerMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\PokerGame\TXT_DealerMarkerMini.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\PokerGame\TXT_ReservedMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\Popup_Menu\Popup_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\Splash\splash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ja\Tourn_Menu\Tourn_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\ClientConfig\ClientConfig.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\ClientConfig\OperatorRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\Common\blank.css
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\Common\Blank.html
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\ExitSplash\ExitSplash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\Menu\M_Buddy.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\Menu\M_Shared.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\Menu\M_Tree.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\Menu\M_Wizard.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\PokerGame\TXT_DealerMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\PokerGame\TXT_DealerMarkerMini.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\PokerGame\TXT_ReservedMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\Popup_Menu\Popup_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\Splash\splash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ko\Tourn_Menu\Tourn_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\nl\ClientConfig\ClientConfig.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\nl\ClientConfig\OperatorRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\nl\Common\blank.css
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\nl\Common\Blank.html
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\nl\ExitSplash\exitsplash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\nl\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\nl\Menu\M_Tree.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\nl\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\nl\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\nl\PokerGame\TXT_DealerMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\nl\PokerGame\TXT_DealerMarkerMini.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\nl\PokerGame\TXT_ReservedMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\nl\Splash\splash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\nl\Tourn_Menu\Tourn_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\no\ClientConfig\ClientConfig.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\no\ClientConfig\OperatorRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\no\Common\blank.css
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\no\Common\Blank.html
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\no\ExitSplash\exitsplash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\no\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\no\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\no\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\no\PokerGame\TXT_DealerMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\no\PokerGame\TXT_DealerMarkerMini.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\no\PokerGame\TXT_ReservedMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\no\Tourn_Menu\Tourn_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt-br\ClientConfig\ClientConfig.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt-br\ClientConfig\OperatorRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt-br\Common\blank.css
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt-br\Common\Blank.html
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt-br\ExitSplash\exitsplash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt-br\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt-br\Menu\M_Tree.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt-br\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt-br\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt-br\PokerGame\TXT_DealerMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt-br\PokerGame\TXT_DealerMarkerMini.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt-br\PokerGame\TXT_ReservedMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt\ClientConfig\ClientConfig.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt\ClientConfig\OperatorRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt\Common\blank.css
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt\Common\blank.html
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt\ExitSplash\exitsplash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt\Menu\menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt\Pokergame\Pokergame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt\Pokergame\TXT_DealerMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt\Pokergame\TXT_DealerMarkerMini.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt\Pokergame\TXT_ReservedMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\pt\Tourn_Menu\Tourn_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\ClientConfig\ClientConfig.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\ClientConfig\OperatorRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\Common\blank.css
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\Common\Blank.html
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\ExitSplash\ExitSplash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\Menu\M_Buddy.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\Menu\M_Shared.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\Menu\M_Tree.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\Menu\M_Wizard.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\PokerGame\TXT_DealerMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\PokerGame\TXT_DealerMarkerMini.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\PokerGame\TXT_ReservedMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\Popup_Menu\Popup_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\Splash\splash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\ru\Tourn_Menu\Tourn_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\sv\ClientConfig\ClientConfig.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\sv\ClientConfig\OperatorRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\sv\Common\blank.css
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\sv\Common\Blank.html
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\sv\ExitSplash\exitsplash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\sv\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\sv\Menu\M_Tree.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\sv\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\sv\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\sv\PokerGame\TXT_DealerMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\sv\PokerGame\TXT_DealerMarkerMini.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\sv\PokerGame\TXT_ReservedMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\tr\ClientConfig\ClientConfig.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\tr\ClientConfig\OperatorRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\tr\Common\blank.css
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\tr\Common\blank.html
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\tr\ExitSplash\ExitSplash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\tr\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\tr\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\tr\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\tr\PokerGame\TXT_DealerMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\tr\PokerGame\TXT_DealerMarkerMini.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\tr\PokerGame\TXT_ReservedMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\tr\Popup_Menu\Popup_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\tr\Splash\splash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\tr\Tourn_Menu\Tourn_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\ClientConfig\ClientConfig.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\ClientConfig\OperatorRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\Common\blank.css
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\Common\blank.html
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\ExitSplash\ExitSplash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\Menu\M_Buddy.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\Menu\M_Shared.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\Menu\M_Tree.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\Menu\M_Wizard.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\PokerGame\TXT_DealerMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\PokerGame\TXT_DealerMarkerMini.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\PokerGame\TXT_ReservedMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\Popup_Menu\Popup_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\Splash\splash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-cn\Tourn_Menu\Tourn_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\ClientConfig\ClientConfig.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\ClientConfig\OperatorRes.dll
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\Common\blank.css
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\Common\blank.html
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\ExitSplash\ExitSplash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\Menu\M_Adv.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\Menu\M_Buddy.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\Menu\M_Shared.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\Menu\M_Tree.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\Menu\M_Wizard.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\Menu\Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\PokerGame\PokerGame.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\PokerGame\TXT_DealerMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\PokerGame\TXT_DealerMarkerMini.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\PokerGame\TXT_ReservedMarker.dat
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\Popup_Menu\Popup_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\Splash\splash.inf
    C:\Microgaming\Poker\UnibetpokerMPP\theme\unibetpoker\local\zh-tw\Tourn_Menu\Tourn_Menu.inf
    C:\Microgaming\Poker\UnibetpokerMPP\Unibetpoker\INSTALL.LOG
    C:\Microgaming\Poker\UnibetpokerMPP\Unibetpoker\UNWISE.EXE
    C:\Microgaming\Poker\UnibetpokerMPP\unicows.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Update.dat
    C:\Microgaming\Poker\UnibetpokerMPP\vpac.dll
    C:\Microgaming\Poker\UnibetpokerMPP\WebHelper.dll
    C:\Microgaming\Poker\UnibetpokerMPP\Wizard.bmp
    C:\Program Files\update.zip
    C:\VundoFix Backups
    C:\VundoFix Backups\addmorefiles.txt
    C:\VundoFix Backups\awvtq.dll.bad
    C:\VundoFix Backups\jkhfe.dll.bad
    C:\VundoFix Backups\jkkjj.dll.bad
    C:\VundoFix Backups\jkkll.dll.bad
    C:\VundoFix Backups\llkkj.ini.bad
    C:\VundoFix Backups\llkkj.ini2.bad
    C:\VundoFix Backups\pmkjh.dll.bad
    C:\VundoFix Backups\pmkjk.dll.bad
    C:\VundoFix Backups\qqstv.ini.bad
    C:\VundoFix Backups\qqstv.ini2.bad
    C:\VundoFix Backups\vtsqq.dll.bad
    C:\WINDOWS\mrofinu2000351.exe.tmp
    C:\WINDOWS\system32\ovnhqrtu.ini

    .
    ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2007-11-06 to 2007-12-06 ))))))))))))))))))))))))))))))))))))
    .

    2007-12-02 19:43 . 2007-12-02 20:14 <REP> d-------- C:\Program Files\eMule
    2007-12-02 19:39 . 2007-12-06 07:51 <REP> d-------- C:\Program Files\Spyware Doctor
    2007-12-02 19:39 . 2007-12-02 19:39 <REP> d-------- C:\Documents and Settings\mickael\Application Data\PC Tools
    2007-12-02 19:39 . 2007-10-18 00:16 79,688 --a------ C:\WINDOWS\system32\drivers\iksyssec.sys
    2007-12-02 19:39 . 2007-10-18 00:15 62,280 --a------ C:\WINDOWS\system32\drivers\iksysflt.sys
    2007-12-02 19:39 . 2007-10-18 00:14 41,288 --a------ C:\WINDOWS\system32\drivers\ikfilesec.sys
    2007-12-02 19:39 . 2007-10-18 00:16 29,000 --a------ C:\WINDOWS\system32\drivers\kcom.sys
    2007-12-02 15:13 . 2007-12-06 13:59 <REP> d-------- C:\Program Files\Trend Micro
    2007-12-01 15:40 . 2007-12-02 15:11 143 --a------ C:\WINDOWS\system32\mcrh.tmp
    2007-12-01 13:49 . 2007-12-01 15:34 <REP> d-------- C:\WINDOWS\SxsCaPendDel
    2007-11-29 22:29 . 2007-11-29 22:29 <REP> d-------- C:\Program Files\EA SPORTS
    2007-11-29 19:52 . 2007-02-09 18:34 420,816 --a------ C:\Documents and Settings\mickael\Application Data\wunauclt.exe
    2007-11-29 19:05 . 2007-11-29 19:05 685,816 --a------ C:\WINDOWS\system32\drivers\sptd.sys
    2007-11-26 19:18 . 2007-12-06 16:08 <REP> d-------- C:\Documents and Settings\mickael\Application Data\Azureus
    2007-11-26 19:18 . 2007-11-26 19:18 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Azureus
    2007-11-18 12:08 . 2007-11-18 12:08 17 --a------ C:\WINDOWS\pp.enc
    2007-11-18 12:06 . 2007-12-06 17:05 <REP> d-------- C:\Documents and Settings\mickael\Application Data\Microgaming

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2007-12-02 19:43 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
    2007-12-01 12:54 --------- d--h--w C:\Program Files\InstallShield Installation Information
    2007-12-01 12:46 --------- d-----w C:\Program Files\BitTorrent
    2007-11-29 18:25 --------- d-----w C:\Program Files\Windows Media Connect 2
    2007-11-23 21:13 --------- d-----w C:\Documents and Settings\mickael\Application Data\BitTorrent
    2007-10-12 07:15 --------- d-----w C:\Documents and Settings\All Users\Application Data\TEMP
    2007-10-11 22:41 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft
    .

    ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    REGEDIT4
    *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2006-03-02 13:00]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "SoundMan"="SOUNDMAN.EXE" [2004-12-01 08:54 C:\WINDOWS\SOUNDMAN.EXE]
    "NvCplDaemon"="RUNDLL32.exe" [2006-03-02 13:00 C:\WINDOWS\system32\rundll32.exe]
    "nwiz"="nwiz.exe" [2006-08-11 22:43 C:\WINDOWS\system32\nwiz.exe]
    "NvMediaCenter"="RUNDLL32.exe" [2006-03-02 13:00 C:\WINDOWS\system32\rundll32.exe]
    "NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50]
    "CaAvTray"="C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVTray.exe" [2007-08-08 10:58]
    "CAVRID"="C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVRID.exe" [2007-08-08 10:58]
    "SDTray"="C:\Program Files\Spyware Doctor\SDTrayApp.exe" [2007-11-02 17:24]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2006-03-02 13:00]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice]
    @=""

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice]
    @=""

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Contrôleur d’état.lnk]
    path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Contrôleur d’état.lnk
    backup=C:\WINDOWS\pss\Contrôleur d’état.lnkCommon Startup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk]
    path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Lancement rapide d'Adobe Reader.lnk
    backup=C:\WINDOWS\pss\Lancement rapide d'Adobe Reader.lnkCommon Startup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent]
    F:\bittorent\bittorrent.exe --force_start_minimized

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ControlCenter2.0]
    C:\Program Files\Brother\ControlCenter2\brctrcen.exe /autorun

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndexSearch]
    2005-03-17 19:30 40960 --a--c--- C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
    C:\Program Files\Messenger\msmsgs.exe /background

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
    C:\Program Files\MSN Messenger\MsnMsgr.Exe /background

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Odebit Multimedia V3]
    F:\V3\Odebit.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Odebit Multimedia V3 - Services]
    F:\V3\Odebit.exe /info

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PaperPort PTD]
    2005-03-17 19:17 57393 --a--c--- C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SetDefPrt]
    2005-01-26 18:02 49152 -----c--- C:\Program Files\Brother\Brmfl05a\BrStDvPt.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
    C:\Program Files\Skype\Phone\Skype.exe /nosplash /minimized

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
    F:\Spybot - Search & Destroy\TeaTimer.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SSBkgdUpdate]
    C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe -Embedding -boot

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
    F:\Steam\Steam.exe -silent

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
    2007-03-14 02:43 83608 --a------ C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
    2007-01-26 08:56 171448 --a------ C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe

    R3 BrScnUsb;Brother USB Still Image driver;C:\WINDOWS\system32\Drivers\BrScnUsb.sys
    R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
    S3 ovt530;Webcam Deluxe;C:\WINDOWS\system32\Drivers\ov530vid.sys
    S3 SetupNTGLM7X;SetupNTGLM7X;\??\H:\NTGLM7X.sys

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4314a642-95a9-11db-8ce2-806d6172696f}]
    \Shell\AutoRun\command - H:\Setup.exe

    .
    Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
    "2007-11-29 18:52:58 C:\WINDOWS\Tasks\At1.job"
    - C:\Documents and Settings\mickael\Application Data\wunauclt.exe
    "2007-11-29 19:00:00 C:\WINDOWS\Tasks\At2.job"
    - C:\Documents and Settings\mickael\Application Data\wunauclt.exe
    "2007-11-29 18:52:58 C:\WINDOWS\Tasks\At3.job"
    - C:\Documents and Settings\mickael\Application Data\wunauclt.exe
    "2007-11-29 21:43:43 C:\WINDOWS\Tasks\At4.job"
    - C:\Documents and Settings\mickael\Application Data\wunauclt.exe
    "2007-11-29 21:43:43 C:\WINDOWS\Tasks\At5.job"
    "2007-11-29 21:43:43 C:\WINDOWS\Tasks\At6.job"
    - C:\Documents and Settings\mickael\Application Data\wunauclt.exe
    .
    **************************************************************************

    catchme 0.3.1318 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2007-12-06 20:13:54
    Windows 5.1.2600 Service Pack 2 NTFS

    detected NTDLL code modification:
    ZwClose

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    Completion time: 2007-12-06 20:16:29 - machine was rebooted
    C:\ComboFix2.txt ... 2007-12-06 19:00
    .
    --- E O F ---

    C'est le reste de combofix tien
    0
  10. g!rly Messages postés 18462 Statut Contributeur 407
     
    re,

    fais analyser ceci :

    C:\Documents and Settings\mickael\Application Data\wunauclt.exe

    ici

    http://virusscan.jotti.org/de/

    et post le resulat ici

    et puis fais navilog stp

    Fais un clic droit sur ce lien :
    http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
    Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
    Ensuite double clique sur navilog1.exe pour lancer l'installation.
    Une fois l'installation terminée, le fix s'exécutera automatiquement.
    (Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

    Laisse-toi guider. Au menu principal, choisis 1 et valides.
    (ne fais pas le choix 2,3 ou 4 sans notre avis/accord)

    Patiente jusqu'au message :
    *** Analyse Termine le ..... ***
    Appuie sur une touche comme demandé, le blocnote va s'ouvrir.
    Copie-colle l'intégralité dans une réponse. Referme le blocnote.
    Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)
    0
  11. jojo32100 Messages postés 14 Statut Membre
     
    Datei: wunauclt.exe
    Auslastung: 0% 100%

    Status: ERGEBNISLOS (scan dauert an)
    Entdeckte Packprogramme: Bitte warten...
    Bit9 rapportiert: File not found

    A-Squared Keine Viren gefunden
    AntiVir Keine Viren gefunden
    ArcaVir Keine Viren gefunden
    Avast Scanning, bitte warten...
    AVG Antivirus Scanning, bitte warten...
    BitDefender Scanning, bitte warten...
    ClamAV Scanning, bitte warten...
    CPsecure Scanning, bitte warten...
    Dr.Web Scanning, bitte warten...
    F-Prot Antivirus Scanning, bitte warten...
    F-Secure Anti-Virus Scanning, bitte warten...
    Fortinet Scanning, bitte warten...
    Ikarus Scanning, bitte warten...
    Kaspersky Anti-Virus Scanning, bitte warten...
    NOD32 Scanning, bitte warten...
    Norman Virus Control Scanning, bitte warten...
    Panda Antivirus Scanning, bitte warten...
    Rising Antivirus Scanning, bitte warten...
    Sophos Antivirus Scanning, bitte warten...
    VirusBuster Scanning, bitte warten...
    VBA32 Scanning, bitte warten...

    pour wunault
    0
  12. jojo32100 Messages postés 14 Statut Membre
     
    Search Navipromo version 3.3.6 commencé le 06/12/2007 à 20:54:41,48

    !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
    !!! Postez ce rapport sur le forum pour le faire analyser !!!
    !!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

    Outil exécuté depuis C:\Program Files\navilog1
    Mise à jour le 14.11.2007 à 18h00 par IL-MAFIOSO

    Microsoft Windows XP [version 5.1.2600]
    Internet Explorer : 7.0.5730.11

    *** Recherche Programmes installés ***

    *** Recherche dossiers dans C:\WINDOWS ***

    *** Recherche dossiers dans C:\Program Files ***

    *** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data ***

    *** Recherche dossiers dans C:\Documents and Settings\mickael\Application Data ***

    *** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1 ***

    *** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
    pour + d'infos : http://www.gmer.net

    Aucun fichier trouvé dans :

    - C:\WINDOWS\system32
    - C:\DOCUME~1\MICKAEL\LOCALS~1\APPLIC~1

    *** Recherche avec GenericNaviSearch ***
    !!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
    !!! A vérifier impérativement avant toute suppression manuelle !!!

    * Recherche dans C:\WINDOWS\system32 *

    * Recherche dans C:\DOCUME~1\MICKAEL\LOCALS~1\APPLIC~1 *

    *** Recherche fichiers ***

    *** Recherche clés spécifiques dans le Registre ***

    *** Module de Recherche complémentaire ***
    (Recherche fichiers spécifiques)

    1)Recherche fichiers connus:

    2)Recherche Heuristique :

    3)Recherche Certificats :

    Certificat Egroup absent !

    *** Analyse terminée le 06/12/2007 à 20:55:55,75 ***

    Tiens navilog
    0
  13. g!rly Messages postés 18462 Statut Contributeur 407
     
    peux tu faire la meme analyse ici stp

    C:\Documents and Settings\mickael\Application Data\wunauclt.exe

    https://www.virustotal.com/gui/

    car jottis apparament n´etait pas disponible
    0
  14. jojo32100 Messages postés 14 Statut Membre
     
    Il est mort alors ce truc de.....!!!????
    0
  15. jojo32100 Messages postés 14 Statut Membre
     
    Fichier wunauclt.exe reçu le 2007.12.05 02:22:00 (CET)
    Situation actuelle: en cours de chargement ... mis en file d'attente en attente en cours d'analyse terminé NON TROUVE ARRETE

    Résultat: 2/32 (6.25%)
    en train de charger les informations du serveur...
    Votre fichier est dans la file d'attente, en position: ___.
    L'heure estimée de démarrage est entre ___ et ___ .
    Ne fermez pas la fenêtre avant la fin de l'analyse.
    L'analyseur qui traitait votre fichier est actuellement stoppé, nous allons attendre quelques secondes pour tenter de récupérer vos résultats.
    Si vous attendez depuis plus de cinq minutes, vous devez renvoyer votre fichier.
    Votre fichier est, en ce moment, en cours d'analyse par VirusTotal,
    les résultats seront affichés au fur et à mesure de leur génération.
    Formaté Impression des résultats
    Votre fichier a expiré ou n'existe pas.
    Le service est en ce moment, stoppé, votre fichier attend d'être analysé (position : ) depuis une durée indéfinie.

    Vous pouvez attendre une réponse du Web (re-chargement automatique) ou taper votre e-mail dans le formulaire ci-dessous et cliquer "Demande" pour que le système vous envoie une notification quand l'analyse sera terminée.
    Email:

    Antivirus Version Dernière mise à jour Résultat
    AhnLab-V3 - - -
    AntiVir - - -
    Authentium - - -
    Avast - - Win32:Trojan-gen {VC}
    AVG - - -
    BitDefender - - -
    CAT-QuickHeal - - -
    ClamAV - - -
    DrWeb - - -
    eSafe - - -
    eTrust-Vet - - -
    Ewido - - -
    FileAdvisor - - -
    Fortinet - - -
    F-Prot - - -
    F-Secure - - -
    Ikarus - - Virus.Win32.Trojan
    Kaspersky - - -
    McAfee - - -
    Microsoft - - -
    NOD32v2 - - -
    Norman - - -
    Panda - - -
    Prevx1 - - -
    Rising - - -
    Sophos - - -
    Sunbelt - - -
    Symantec - - -
    TheHacker - - -
    VBA32 - - -
    VirusBuster - - -
    Webwasher-Gateway - - -

    Tiens apparemment un autre trojan j'en ai marre!!!!
    0
  16. jojo32100 Messages postés 14 Statut Membre
     
    Fichier wunauclt.exe reçu le 2007.12.05 02:22:00 (CET)
    Situation actuelle: en cours de chargement ... mis en file d'attente en attente en cours d'analyse terminé NON TROUVE ARRETE

    Résultat: 2/32 (6.25%)
    en train de charger les informations du serveur...
    Votre fichier est dans la file d'attente, en position: ___.
    L'heure estimée de démarrage est entre ___ et ___ .
    Ne fermez pas la fenêtre avant la fin de l'analyse.
    L'analyseur qui traitait votre fichier est actuellement stoppé, nous allons attendre quelques secondes pour tenter de récupérer vos résultats.
    Si vous attendez depuis plus de cinq minutes, vous devez renvoyer votre fichier.
    Votre fichier est, en ce moment, en cours d'analyse par VirusTotal,
    les résultats seront affichés au fur et à mesure de leur génération.
    Formaté Impression des résultats
    Votre fichier a expiré ou n'existe pas.
    Le service est en ce moment, stoppé, votre fichier attend d'être analysé (position : ) depuis une durée indéfinie.

    Vous pouvez attendre une réponse du Web (re-chargement automatique) ou taper votre e-mail dans le formulaire ci-dessous et cliquer "Demande" pour que le système vous envoie une notification quand l'analyse sera terminée.
    Email:

    Antivirus Version Dernière mise à jour Résultat
    AhnLab-V3 - - -
    AntiVir - - -
    Authentium - - -
    Avast - - Win32:Trojan-gen {VC}
    AVG - - -
    BitDefender - - -
    CAT-QuickHeal - - -
    ClamAV - - -
    DrWeb - - -
    eSafe - - -
    eTrust-Vet - - -
    Ewido - - -
    FileAdvisor - - -
    Fortinet - - -
    F-Prot - - -
    F-Secure - - -
    Ikarus - - Virus.Win32.Trojan
    Kaspersky - - -
    McAfee - - -
    Microsoft - - -
    NOD32v2 - - -
    Norman - - -
    Panda - - -
    Prevx1 - - -
    Rising - - -
    Sophos - - -
    Sunbelt - - -
    Symantec - - -
    TheHacker - - -
    VBA32 - - -
    VirusBuster - - -
    Webwasher-Gateway - - -

    Tiens apparemment un autre trojan j'en ai marre!!!!
    0
  17. g!rly Messages postés 18462 Statut Contributeur 407
     
    merci pour navilog tu peux le supprimer

    pour wunauclt.exe

    c´est bien ce que je me disais; mais jamais sur a 100% maintenant je le suis a 200%

    post un nouveau combofix stp

    @+
    0
  18. jojo32100 Messages postés 14 Statut Membre
     
    ComboFix 07-12-02.6 - mickael 2007-12-06 22:40:33.3 - NTFSx86
    Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.523 [GMT 1:00]
    Running from: C:\Documents and Settings\mickael\Bureau\ComboFix.exe
    .

    ((((((((((((((((((((((((((((( Fichiers créés 2007-11-06 to 2007-12-06 ))))))))))))))))))))))))))))))))))))
    .

    2007-12-06 20:52 . 2007-12-06 21:08 <REP> d-------- C:\Program Files\Navilog1
    2007-12-02 19:43 . 2007-12-02 20:14 <REP> d-------- C:\Program Files\eMule
    2007-12-02 19:39 . 2007-12-06 07:51 <REP> d-------- C:\Program Files\Spyware Doctor
    2007-12-02 19:39 . 2007-12-02 19:39 <REP> d-------- C:\Documents and Settings\mickael\Application Data\PC Tools
    2007-12-02 19:39 . 2007-10-18 00:16 79,688 --a------ C:\WINDOWS\system32\drivers\iksyssec.sys
    2007-12-02 19:39 . 2007-10-18 00:15 62,280 --a------ C:\WINDOWS\system32\drivers\iksysflt.sys
    2007-12-02 19:39 . 2007-10-18 00:14 41,288 --a------ C:\WINDOWS\system32\drivers\ikfilesec.sys
    2007-12-02 19:39 . 2007-10-18 00:16 29,000 --a------ C:\WINDOWS\system32\drivers\kcom.sys
    2007-12-02 15:13 . 2007-12-06 13:59 <REP> d-------- C:\Program Files\Trend Micro
    2007-12-01 15:40 . 2007-12-02 15:11 143 --a------ C:\WINDOWS\system32\mcrh.tmp
    2007-12-01 13:49 . 2007-12-01 15:34 <REP> d-------- C:\WINDOWS\SxsCaPendDel
    2007-11-29 22:29 . 2007-11-29 22:29 <REP> d-------- C:\Program Files\EA SPORTS
    2007-11-29 19:52 . 2007-02-09 18:34 420,816 --a------ C:\Documents and Settings\mickael\Application Data\wunauclt.exe
    2007-11-29 19:05 . 2007-11-29 19:05 685,816 --a------ C:\WINDOWS\system32\drivers\sptd.sys
    2007-11-26 19:18 . 2007-12-06 16:08 <REP> d-------- C:\Documents and Settings\mickael\Application Data\Azureus
    2007-11-26 19:18 . 2007-11-26 19:18 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Azureus
    2007-11-18 12:08 . 2007-11-18 12:08 17 --a------ C:\WINDOWS\pp.enc
    2007-11-18 12:06 . 2007-12-06 17:05 <REP> d-------- C:\Documents and Settings\mickael\Application Data\Microgaming

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2007-12-02 19:43 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
    2007-12-01 12:54 --------- d--h--w C:\Program Files\InstallShield Installation Information
    2007-12-01 12:46 --------- d-----w C:\Program Files\BitTorrent
    2007-11-29 18:25 --------- d-----w C:\Program Files\Windows Media Connect 2
    2007-11-23 21:13 --------- d-----w C:\Documents and Settings\mickael\Application Data\BitTorrent
    2007-10-11 22:41 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft
    .

    ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    REGEDIT4
    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2006-03-02 13:00]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "SoundMan"="SOUNDMAN.EXE" [2004-12-01 08:54 C:\WINDOWS\SOUNDMAN.EXE]
    "NvCplDaemon"="RUNDLL32.exe" [2006-03-02 13:00 C:\WINDOWS\system32\rundll32.exe]
    "nwiz"="nwiz.exe" [2006-08-11 22:43 C:\WINDOWS\system32\nwiz.exe]
    "NvMediaCenter"="RUNDLL32.exe" [2006-03-02 13:00 C:\WINDOWS\system32\rundll32.exe]
    "NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50]
    "CaAvTray"="C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVTray.exe" [2007-08-08 10:58]
    "CAVRID"="C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVRID.exe" [2007-08-08 10:58]
    "SDTray"="C:\Program Files\Spyware Doctor\SDTrayApp.exe" [2007-11-02 17:24]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2006-03-02 13:00]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice]
    @=""

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice]
    @=""

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Contrôleur d’état.lnk]
    path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Contrôleur d’état.lnk
    backup=C:\WINDOWS\pss\Contrôleur d’état.lnkCommon Startup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk]
    path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Lancement rapide d'Adobe Reader.lnk
    backup=C:\WINDOWS\pss\Lancement rapide d'Adobe Reader.lnkCommon Startup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent]
    F:\bittorent\bittorrent.exe --force_start_minimized

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ControlCenter2.0]
    C:\Program Files\Brother\ControlCenter2\brctrcen.exe /autorun

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndexSearch]
    2005-03-17 19:30 40960 --a--c--- C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
    C:\Program Files\Messenger\msmsgs.exe /background

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
    C:\Program Files\MSN Messenger\MsnMsgr.Exe /background

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Odebit Multimedia V3]
    F:\V3\Odebit.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Odebit Multimedia V3 - Services]
    F:\V3\Odebit.exe /info

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PaperPort PTD]
    2005-03-17 19:17 57393 --a--c--- C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SetDefPrt]
    2005-01-26 18:02 49152 -----c--- C:\Program Files\Brother\Brmfl05a\BrStDvPt.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
    C:\Program Files\Skype\Phone\Skype.exe /nosplash /minimized

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
    F:\Spybot - Search & Destroy\TeaTimer.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SSBkgdUpdate]
    C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe -Embedding -boot

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
    F:\Steam\Steam.exe -silent

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
    2007-03-14 02:43 83608 --a------ C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
    2007-01-26 08:56 171448 --a------ C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe

    R3 BrScnUsb;Brother USB Still Image driver;C:\WINDOWS\system32\Drivers\BrScnUsb.sys
    R3 ovt530;Webcam Deluxe;C:\WINDOWS\system32\Drivers\ov530vid.sys
    R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
    S3 SetupNTGLM7X;SetupNTGLM7X;\??\H:\NTGLM7X.sys

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4314a642-95a9-11db-8ce2-806d6172696f}]
    \Shell\AutoRun\command - H:\Setup.exe

    .
    Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
    "2007-11-29 18:52:58 C:\WINDOWS\Tasks\At1.job"
    - C:\Documents and Settings\mickael\Application Data\wunauclt.exe
    "2007-11-29 19:00:00 C:\WINDOWS\Tasks\At2.job"
    - C:\Documents and Settings\mickael\Application Data\wunauclt.exe
    "2007-11-29 18:52:58 C:\WINDOWS\Tasks\At3.job"
    - C:\Documents and Settings\mickael\Application Data\wunauclt.exe
    "2007-11-29 21:43:43 C:\WINDOWS\Tasks\At4.job"
    - C:\Documents and Settings\mickael\Application Data\wunauclt.exe
    "2007-11-29 21:43:43 C:\WINDOWS\Tasks\At5.job"
    "2007-11-29 21:43:43 C:\WINDOWS\Tasks\At6.job"
    - C:\Documents and Settings\mickael\Application Data\wunauclt.exe
    .
    **************************************************************************

    catchme 0.3.1318 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2007-12-06 22:45:48
    Windows 5.1.2600 Service Pack 2 NTFS

    detected NTDLL code modification:
    ZwClose

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    Completion time: 2007-12-06 22:48:11
    C:\ComboFix2.txt ... 2007-12-06 20:16
    C:\ComboFix3.txt ... 2007-12-06 19:00
    .
    --- E O F ---
    Tiens voila!!C'est bon c'est fini avec ce virus!!!!???
    0
  19. g!rly Messages postés 18462 Statut Contributeur 407
     
    re,

    il faut etre patient surtout que ton infection n´est pas des plus anodine...
    puis tu m´as toujours pas repondu, as tu un par feu ?
    si tu n´en as pas

    instale :

    par feu : kerio

    http://www.malekal.com/kerio_firewall.php#mozTocId721480

    https://www.vulgarisation-informatique.com/kerio.php

    ou zone alarm plus facil a configurer mais moins performant

    http://www.kachouri.com/tuto/tuto-143-zonealarm-installation-du-firewall--pare-feu.html

    Copie le texte ci-dessous :

    File::
    C:\WINDOWS\system32\mcrh.tmp
    C:\Documents and Settings\mickael\Application Data\wunauclt.exe
    C:\WINDOWS\Tasks\At1.job
    C:\WINDOWS\Tasks\At2.job
    C:\WINDOWS\Tasks\At3.job
    C:\WINDOWS\Tasks\At4.job
    C:\WINDOWS\Tasks\At5.job
    C:\WINDOWS\Tasks\At6.job

    Folder::
    C:\Program Files\Navilog1

    Ouvre le Bloc-Notes puis colle le texte copié.
    (Démarrer\Tous les programmes\Accessoires\Bloc notes.)
    Sauvegarde ce fichier sous le nom de CFScript.txt.

    Glisse maintenant le fichier CFScript.txt dans Combofix.exe comme ci-dessous :

    http://serveur1.archive-host.com/membres/up/1366464061/CFScript.gif

    Cela va relancer Combofix,

    Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide.

    Patiente le temps du scan.Le bureau va disparaître à plusieurs reprises: c'est normal!

    Ne touche à rien tant que le scan n'est pas terminé.

    Après redémarrage, poste le contenu du rapport Combofix.txt accompagné d'un rapport Hijackthis.

    S'il n'y a pas de rédémarrage, poste quand même les rapports.

    puis pour verofier:

    Scan en ligne bitdefender :

    https://www.bitdefender.com/toolbox/

    Clicker sur " I agree " et suivre les indications

    A faire imperativement sous internet explorer, en acceptant l´activ x

    tutoriel en image en image

    http://pageperso.aol.fr/rginformatique/mapage/defender.htm

    dans ta prochaine réponse post le rapport de combofix3.tx et le rapport de bitdefender

    @+
    0
  20. g!rly Messages postés 18462 Statut Contributeur 407
     
    --

    Le meilleur moyen de faire tourner la tête à une femme, c'est de lui dire qu'elle a un joli profil
    0
  21. jojo32100 Messages postés 14 Statut Membre
     
    Rapport combofix
    .
    ComboFix 07-12-02.6 - mickael 2007-12-06 23:33:16.4 - NTFSx86
    Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.603 [GMT 1:00]
    Running from: C:\Documents and Settings\mickael\Bureau\ComboFix.exe
    Command switches used :: C:\Documents and Settings\mickael\Bureau\CFScript.txt
    * Created a new restore point

    FILE
    C:\Documents and Settings\mickael\Application Data\wunauclt.exe
    C:\WINDOWS\system32\mcrh.tmp
    C:\WINDOWS\Tasks\At1.job
    C:\WINDOWS\Tasks\At2.job
    C:\WINDOWS\Tasks\At3.job
    C:\WINDOWS\Tasks\At4.job
    C:\WINDOWS\Tasks\At5.job
    C:\WINDOWS\Tasks\At6.job
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .

    C:\Documents and Settings\mickael\Application Data\wunauclt.exe
    C:\Program Files\Navilog1
    C:\Program Files\Navilog1\catchme.exe
    C:\Program Files\Navilog1\GetPaths.exe
    C:\Program Files\Navilog1\gnc.exe
    C:\Program Files\Navilog1\navilog1.bat
    C:\Program Files\Navilog1\Process.exe
    C:\Program Files\Navilog1\reboot.exe
    C:\Program Files\Navilog1\recherok.txt
    C:\Program Files\Navilog1\reg.exe
    C:\Program Files\Navilog1\regnavi.reg
    C:\Program Files\Navilog1\traite.bat
    C:\Program Files\Navilog1\unins000.dat
    C:\Program Files\Navilog1\unins000.exe
    C:\WINDOWS\system32\mcrh.tmp
    C:\WINDOWS\Tasks\At1.job
    C:\WINDOWS\Tasks\At2.job
    C:\WINDOWS\Tasks\At3.job
    C:\WINDOWS\Tasks\At4.job
    C:\WINDOWS\Tasks\At5.job
    C:\WINDOWS\Tasks\At6.job

    .
    ((((((((((((((((((((((((((((( Fichiers créés 2007-11-06 to 2007-12-06 ))))))))))))))))))))))))))))))))))))
    .

    2007-12-02 19:43 . 2007-12-02 20:14 <REP> d-------- C:\Program Files\eMule
    2007-12-02 19:39 . 2007-12-06 07:51 <REP> d-------- C:\Program Files\Spyware Doctor
    2007-12-02 19:39 . 2007-12-02 19:39 <REP> d-------- C:\Documents and Settings\mickael\Application Data\PC Tools
    2007-12-02 19:39 . 2007-10-18 00:16 79,688 --a------ C:\WINDOWS\system32\drivers\iksyssec.sys
    2007-12-02 19:39 . 2007-10-18 00:15 62,280 --a------ C:\WINDOWS\system32\drivers\iksysflt.sys
    2007-12-02 19:39 . 2007-10-18 00:14 41,288 --a------ C:\WINDOWS\system32\drivers\ikfilesec.sys
    2007-12-02 19:39 . 2007-10-18 00:16 29,000 --a------ C:\WINDOWS\system32\drivers\kcom.sys
    2007-12-02 15:13 . 2007-12-06 13:59 <REP> d-------- C:\Program Files\Trend Micro
    2007-12-01 13:49 . 2007-12-01 15:34 <REP> d-------- C:\WINDOWS\SxsCaPendDel
    2007-11-29 22:29 . 2007-11-29 22:29 <REP> d-------- C:\Program Files\EA SPORTS
    2007-11-29 19:05 . 2007-11-29 19:05 685,816 --a------ C:\WINDOWS\system32\drivers\sptd.sys
    2007-11-26 19:18 . 2007-12-06 16:08 <REP> d-------- C:\Documents and Settings\mickael\Application Data\Azureus
    2007-11-26 19:18 . 2007-11-26 19:18 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Azureus
    2007-11-18 12:08 . 2007-11-18 12:08 17 --a------ C:\WINDOWS\pp.enc
    2007-11-18 12:06 . 2007-12-06 22:54 <REP> d-------- C:\Documents and Settings\mickael\Application Data\Microgaming

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2007-12-02 19:43 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
    2007-12-01 12:54 --------- d--h--w C:\Program Files\InstallShield Installation Information
    2007-12-01 12:46 --------- d-----w C:\Program Files\BitTorrent
    2007-11-29 18:25 --------- d-----w C:\Program Files\Windows Media Connect 2
    2007-11-23 21:13 --------- d-----w C:\Documents and Settings\mickael\Application Data\BitTorrent
    2007-10-11 22:41 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft
    .

    ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    REGEDIT4
    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2006-03-02 13:00]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "SoundMan"="SOUNDMAN.EXE" [2004-12-01 08:54 C:\WINDOWS\SOUNDMAN.EXE]
    "NvCplDaemon"="RUNDLL32.exe" [2006-03-02 13:00 C:\WINDOWS\system32\rundll32.exe]
    "nwiz"="nwiz.exe" [2006-08-11 22:43 C:\WINDOWS\system32\nwiz.exe]
    "NvMediaCenter"="RUNDLL32.exe" [2006-03-02 13:00 C:\WINDOWS\system32\rundll32.exe]
    "NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50]
    "CaAvTray"="C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVTray.exe" [2007-08-08 10:58]
    "CAVRID"="C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVRID.exe" [2007-08-08 10:58]
    "SDTray"="C:\Program Files\Spyware Doctor\SDTrayApp.exe" [2007-11-02 17:24]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2006-03-02 13:00]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice]
    @=""

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice]
    @=""

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Contrôleur d’état.lnk]
    path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Contrôleur d’état.lnk
    backup=C:\WINDOWS\pss\Contrôleur d’état.lnkCommon Startup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk]
    path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Lancement rapide d'Adobe Reader.lnk
    backup=C:\WINDOWS\pss\Lancement rapide d'Adobe Reader.lnkCommon Startup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent]
    F:\bittorent\bittorrent.exe --force_start_minimized

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ControlCenter2.0]
    C:\Program Files\Brother\ControlCenter2\brctrcen.exe /autorun

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndexSearch]
    2005-03-17 19:30 40960 --a--c--- C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
    C:\Program Files\Messenger\msmsgs.exe /background

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
    C:\Program Files\MSN Messenger\MsnMsgr.Exe /background

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Odebit Multimedia V3]
    F:\V3\Odebit.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Odebit Multimedia V3 - Services]
    F:\V3\Odebit.exe /info

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PaperPort PTD]
    2005-03-17 19:17 57393 --a--c--- C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SetDefPrt]
    2005-01-26 18:02 49152 -----c--- C:\Program Files\Brother\Brmfl05a\BrStDvPt.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
    C:\Program Files\Skype\Phone\Skype.exe /nosplash /minimized

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
    F:\Spybot - Search & Destroy\TeaTimer.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SSBkgdUpdate]
    C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe -Embedding -boot

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
    F:\Steam\Steam.exe -silent

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
    2007-03-14 02:43 83608 --a------ C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
    2007-01-26 08:56 171448 --a------ C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe

    R3 BrScnUsb;Brother USB Still Image driver;C:\WINDOWS\system32\Drivers\BrScnUsb.sys
    R3 ovt530;Webcam Deluxe;C:\WINDOWS\system32\Drivers\ov530vid.sys
    R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
    S3 SetupNTGLM7X;SetupNTGLM7X;\??\H:\NTGLM7X.sys

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4314a642-95a9-11db-8ce2-806d6172696f}]
    \Shell\AutoRun\command - H:\Setup.exe

    .
    **************************************************************************

    catchme 0.3.1318 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2007-12-06 23:38:22
    Windows 5.1.2600 Service Pack 2 NTFS

    detected NTDLL code modification:
    ZwClose

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    Completion time: 2007-12-06 23:40:31
    C:\ComboFix2.txt ... 2007-12-06 22:48
    C:\ComboFix3.txt ... 2007-12-06 20:16
    .
    --- E O F ---
    0
  • 1
  • 2