Rapport Hijackthis

Résolu
Alias -  
Bonjour,
voila depuis hier soir mon pc est infecte je pense par un Vundo mais je n arrive pas à m en debarasser !!
j ai des pages internet qui s ouvre sans cesse , spybot ma detecte un "virtumonde"
ensuite j ai un runtime microsoft C++ qui souvre egalement , et quand je clic sur ok ca disparait ><

je vous joint mon rapport hijacthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:55:27, on 27/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
C:\Documents and Settings\All Users\Application Data\kxyfkjyj\anybsbut.exe
C:\WINDOWS\system32\CmUCReye.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\qzufupsd.exe
C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Documents and Settings\Egd\Bureau\procexp.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = socks=
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll
O4 - HKLM\..\Run: [CmUCRRun] C:\WINDOWS\system32\CmUCReye.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [1c7e6f82] rundll32.exe "C:\WINDOWS\system32\knxeohnh.dll",b
O4 - HKLM\..\Run: [BM1f4d5c1e] Rundll32.exe "C:\WINDOWS\system32\ljuxnsnw.dll",s
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [brdoidbk] C:\WINDOWS\system32\qzufupsd.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKLM\..\Policies\Explorer\Run: [WbL7bDPpOv] C:\Documents and Settings\All Users\Application Data\kxyfkjyj\anybsbut.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://messenger.zone.msn.com/EN-US/a-LUXR/mjolauncher.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
O23 - Service: BitDefender Communicator (XCOMM) - BitDefender - C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe

--
End of file - 6781 bytes
**

merci de votre aide ^^
Configuration: Windows XP
Internet Explorer 7.0

30 réponses

Résumé de la discussion

Un utilisateur signale une infection présumée par Vundo (Virtumonde) où les pages Internet s'ouvrent sans arrêt et des alertes apparaissent après le lancement d’un runtime Microsoft, avec un rapport HijackThis détaillant de nombreux processus. Des outils de sécurité sont utilisés: Spybot détecte Virtumonde et des entrées suspectes apparaissent dans les registres et les programmes de démarrage, notamment des noms inhabituels et des processus en veille. Les réponses évoquent des scans avec ComboFix et Malwarebytes' Anti-Malware, détectant Trojan.Vundo et FakeAlert et procédant à leur quarantaine ou suppression, avec suppression de clés Run et de modules malveillants. En dernier lieu, des éléments mémoire et des processus malveillants ont été identifiés et isolés, suggérant un redémarrage et un nettoyage complet.

Bobot (l’IA à votre service)
  1. cafanada
    bonjou, moi aussi jai un probleme et je compren rien a hijackthis..

    pourai tu maider aussi stp ca serai tro sympas...

    voila je resultat de hijackthis

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 10:32:31, on 30/05/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    E:\WINDOWS\System32\smss.exe
    E:\WINDOWS\system32\winlogon.exe
    E:\WINDOWS\system32\services.exe
    E:\WINDOWS\system32\lsass.exe
    E:\WINDOWS\system32\svchost.exe
    E:\WINDOWS\System32\svchost.exe
    E:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
    E:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
    E:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
    E:\WINDOWS\system32\spoolsv.exe
    E:\WINDOWS\System32\igfxtray.exe
    E:\WINDOWS\System32\hkcmd.exe
    E:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
    E:\PROGRA~1\SYMANT~1\VPTray.exe
    E:\Program Files\Symantec AntiVirus\DefWatch.exe
    E:\WINDOWS\system32\rundll32.exe
    E:\WINDOWS\system32\ctfmon.exe
    E:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    E:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
    E:\Program Files\Symantec AntiVirus\Rtvscan.exe
    E:\WINDOWS\system32\wscntfy.exe
    E:\Program Files\Internet Explorer\iexplore.exe
    E:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
    E:\Program Files\Internet Explorer\iexplore.exe
    E:\Program Files\CCleaner\CCleaner.exe
    E:\Program Files\AxBx\Multi Virus Cleaner 2008\MVC.exe
    E:\WINDOWS\explorer.exe
    E:\Documents and Settings\Administrateur\Bureau\HiJackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ca/?gws_rd=ssl
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - E:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - E:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O4 - HKLM\..\Run: [IgfxTray] E:\WINDOWS\System32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] E:\WINDOWS\System32\hkcmd.exe
    O4 - HKLM\..\Run: [ccApp] "E:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [vptray] E:\PROGRA~1\SYMANT~1\VPTray.exe
    O4 - HKLM\..\Run: [2229115b] rundll32.exe "E:\WINDOWS\system32\rtykdsbh.dll",b
    O4 - HKLM\..\Run: [BM4bbb7d07] Rundll32.exe "E:\WINDOWS\system32\hovdlhnr.dll",s
    O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [MsnMsgr] "E:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] E:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] E:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] E:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] E:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://E:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - E:\Program Files\Yahoo!\Common\yinsthelper.dll
    O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} (CTVUAxCtrl Object) - http://dl.tvunetworks.com/TVUAx.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
    O17 - HKLM\System\CCS\Services\Tcpip\..\{06B98D5E-E4B6-4019-A4AE-C1E6F168F60B}: NameServer = 142.51.1.52,142.51.1.53
    O23 - Service: Boonty Games - BOONTY - E:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - E:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - E:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
    O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - E:\Program Files\Symantec AntiVirus\DefWatch.exe
    O23 - Service: Google Updater Service (gusvc) - Google - E:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - E:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: LiveUpdate - Symantec Corporation - E:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
    O23 - Service: SAVRoam (SavRoam) - symantec - E:\Program Files\Symantec AntiVirus\SavRoam.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - E:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
    O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - E:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
    O23 - Service: Symantec AntiVirus - Symantec Corporation - E:\Program Files\Symantec AntiVirus\Rtvscan.exe
    0
    1. lili
      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 08:11:32, on 2008-05-29
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16640)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Compaq\Easy Access Button Support\StartEAK.exe
      C:\Program Files\Compaq\Easy Access Button Support\CPQEADM.EXE
      C:\COMPAQ\CPQINET\CPQInet.exe
      C:\Compaq\EAKDRV\EAUSBKBD.EXE
      C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe

      s v p vous voulez m'aider....mon msn gèle tj et je ne sais pas pourquoi.....j'ai suivi tous les étapes ccleaner apres anti-spyware et apres hijack this mais msn il n'a rien de règler il gèle tj apres 5 mins que je suis dessus alors vous pouvez m'aider s v p

      merci d'avance xx
      C:\Program Files\ClamWin\bin\ClamTray.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
      C:\PROGRA~1\Compaq\EASYAC~1\BttnServ.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      C:\WINDOWS\system32\pctspk.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
      C:\WINDOWS\system32\wscntfy.exe
      C:\Program Files\MSN Messenger\usnsvc.exe
      C:\Program Files\Java\jre1.6.0_03\bin\jucheck.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.fr.msn.ca/0SEFRCA/SAOS01?FORM=TOOLBR
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.fr.msn.ca/0SEFRCA/SAOS01?FORM=TOOLBR
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.fr.msn.ca/0SEFRCA/SAOS01?FORM=TOOLBR
      R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://login.live.com/ppsecure/md5auth.srf?lc=1036
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Compaq
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
      O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: (no name) - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file)
      O3 - Toolbar: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file)
      O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
      O4 - HKLM\..\Run: [CPQEASYACC] C:\Program Files\Compaq\Easy Access Button Support\StartEAK.exe
      O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
      O4 - HKLM\..\Run: [ClamWin] "C:\Program Files\ClamWin\bin\ClamTray.exe" --logon
      O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
      O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
      O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
      O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
      O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Support - {1DF11059-AA39-412D-AFF3-921EB778B85A} - C:\Program Files\Internet Explorer\SIGNUP\Presario.htm (HKCU)
      O14 - IERESET.INF: START_PAGE_URL=https://sarah.tncrun.net/tr?id=0134ac768603e78911c429635d1a97e83fc6dc578e.r&tk=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwdWIiOiI1MjJjNjE1YTlhODQ4MGNhYjhiMTA0MTIiLCJ0cyI6IjAyMDYwNDU4IiwiZCI6InByZXNhcmlvLm5ldCJ9.kRF1OyB-fqYx7g2D5Fi95BDnQ-uNg77oOncDwZhI_Zo
      O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei/ZwinkyInitialSetup1.0.0.15-3.cab
      O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
      O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
      O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} - http://www.gamespy.com
      O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - https://amoure08.wordpress.com/
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {AB29A544-D6B4-4E36-A1F8-D3E34FC7B00A} (WTHoster Class) - https://www.wildtangent.com/gamesapp
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: IMAPI CD-Burning COM Service (ImapiService) - Roxio Inc. - C:\WINDOWS\System32\ImapiRox.exe
      O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      0
      1. Alias
        euh je n arrive pas a modifier le statut du premier message ><

        desole...
        0
        1. Utilisateur anonyme
          de rien ciao et bon surf
          0
          2. Alias
            tres bien merci a toi chiquitine ^^

            tu es mon sauveur ^^
            0
            1. Utilisateur anonyme
              voila tout est propre

              si t as des rapport supprime les

              si t as un dossier backup supprime le

              ton pc est maintenant propre

              Si tu es satisfait de mon intervention

              et que tu n as plus de probleme

              change le statut du sujet en résolu stp

              pour cela va en haut sur ta premiere question et la tu as le choix
              0
              1. Alias
                -->- Recherche:

                C:\Qoobox: trouvé !
                C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
                C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
                C:\Documents and Settings\Egd\Bureau\HijackThis.lnk: trouvé !
                C:\Documents and Settings\Egd\Bureau\Clean.zip: trouvé !
                C:\Documents and Settings\Egd\Bureau\ComboFix.exe: trouvé !
                C:\Documents and Settings\Egd\Bureau\MsnFix: trouvé !
                C:\Documents and Settings\Egd\Bureau\appz\HJTInstall.exe: trouvé !
                C:\Documents and Settings\Egd\Bureau\msnfix\MsnFix: trouvé !
                C:\Program Files\Trend Micro\HijackThis: trouvé !
                C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !

                ---------------------------------
                -->- Suppression:

                C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
                C:\Documents and Settings\Egd\Bureau\HijackThis.lnk: supprimé !
                C:\Documents and Settings\Egd\Bureau\Clean.zip: supprimé !
                C:\Documents and Settings\Egd\Bureau\ComboFix.exe: supprimé !
                C:\Documents and Settings\Egd\Bureau\appz\HJTInstall.exe: supprimé !
                C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
                C:\Qoobox: supprimé !
                C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
                C:\Documents and Settings\Egd\Bureau\MsnFix: supprimé !
                C:\Program Files\Trend Micro\HijackThis: supprimé !

                voila ^^
                0
                1. Utilisateur anonyme
                  1) fais ce qui est expliqué post19 et envoi le rapport

                  2) Pour vundo garde malewarebyte
                  0
                  1. Alias
                    ok merci a toi tu me conseille quoi pour ne plus etre embeter avec ces vundo ou autre ?

                    je te remercie encore pour ce depannage

                    bonne soiree a toi ^^
                    0
                    2. Alias
                      jte l ai poster au dessus ^^

                      sinon ca fait 10min que j ai pas eu de popups

                      je sais pas si c est bon ?

                      merci ^^
                      0
                      1. Utilisateur anonyme
                        _Maintenant , nous allons supprimer les logiciels de désinfection que je t'ai fait téléchargé.
                        En effet , s'en servir est dangereux pour le pc si l'on ne s'y connais pas.
                        De plus ils sont mis régulièrement à jours.

                        ? Ferme toutes les applications en cours, puis télécharge ToolsCleaner2 sur ton Bureau.

                        http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner

                        ? Double clique sur ToolsCleaner2.exe >
                        ? Clique sur .Recherche
                        ? puis sur Suppression quand la liste est trouvée.
                        ? Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

                        (CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

                        Note : ton bureau RISQUE de disparaître, c'est normal. S'il n'apparaît pas à la fin du scan, fais la manip suivante :

                        CTRL+ALT+SUPP pour ouvrir le Gestionnaire des tâches.
                        Puis rends toi à l'onglet "Processus". Clique en haut à gauche sur Fichiers et choisis "Exécuter"

                        Tape explorer.exe et valide. Cela fera re-apparaître le Bureau

                        Tuto : https://www.commentcamarche.net/list 8341 toolscleaner suppression des fix de force brute ( merci espion3004 )
                        0
                        1. Utilisateur anonyme
                          ok refais un scan hijackthis et poste le rapport stp
                          0
                          1. Alias
                            et le hijackthis

                            Logfile of Trend Micro HijackThis v2.0.2
                            Scan saved at 21:39, on 2008-05-27
                            Platform: Windows XP SP2 (WinNT 5.01.2600)
                            MSIE: Internet Explorer v7.00 (7.00.6000.16640)
                            Boot mode: Normal

                            Running processes:
                            C:\WINDOWS\System32\smss.exe
                            C:\WINDOWS\system32\winlogon.exe
                            C:\WINDOWS\system32\services.exe
                            C:\WINDOWS\system32\lsass.exe
                            C:\WINDOWS\system32\svchost.exe
                            C:\WINDOWS\System32\svchost.exe
                            C:\WINDOWS\system32\svchost.exe
                            C:\WINDOWS\system32\spoolsv.exe
                            C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                            C:\WINDOWS\system32\nvsvc32.exe
                            C:\WINDOWS\system32\svchost.exe
                            C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
                            C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
                            C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
                            C:\WINDOWS\system32\CmUCReye.exe
                            C:\WINDOWS\RTHDCPL.EXE
                            C:\WINDOWS\system32\RUNDLL32.EXE
                            C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
                            C:\WINDOWS\system32\ctfmon.exe
                            C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe
                            C:\Program Files\Messenger\msmsgs.exe
                            C:\WINDOWS\System32\svchost.exe
                            C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
                            C:\WINDOWS\explorer.exe
                            C:\Program Files\Internet Explorer\iexplore.exe
                            C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                            C:\Program Files\Windows Live\Contacts\wlcomm.exe
                            C:\Program Files\Windows Live\Messenger\usnsvc.exe
                            F:\World of Warcraft\WoW-2.4.0-frFR-downloader.exe
                            C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                            R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr/
                            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
                            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
                            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                            R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                            R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = socks=
                            R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                            O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll
                            O4 - HKLM\..\Run: [CmUCRRun] C:\WINDOWS\system32\CmUCReye.exe
                            O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
                            O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                            O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
                            O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
                            O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe
                            O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe"
                            O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
                            O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                            O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                            O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
                            O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
                            O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
                            O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
                            O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                            O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                            O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                            O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
                            O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
                            O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                            O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                            O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                            O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                            O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
                            O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://messenger.zone.msn.com/EN-US/a-LUXR/mjolauncher.cab
                            O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                            O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                            O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
                            O20 - Winlogon Notify: byXOhghh - C:\WINDOWS\
                            O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                            O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
                            O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
                            O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                            O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
                            O23 - Service: BitDefender Communicator (XCOMM) - BitDefender - C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
                            0
                            1. Alias
                              arf ca a buggue ^^

                              attend alors la suite

                              C:\Program Files\Moonlight-Destinys\binkw32.dll
                              C:\Program Files\Moonlight-Destinys\Config.tpc
                              C:\Program Files\Moonlight-Destinys\cps.dll
                              C:\Program Files\Moonlight-Destinys\data.grf
                              C:\Program Files\Moonlight-Destinys\data.ini
                              C:\Program Files\Moonlight-Destinys\dbghelp.dll
                              C:\Program Files\Moonlight-Destinys\dinput.dll
                              C:\Program Files\Moonlight-Destinys\granny2.dll
                              C:\Program Files\Moonlight-Destinys\GRF.dll
                              C:\Program Files\Moonlight-Destinys\ijl15.dll
                              C:\Program Files\Moonlight-Destinys\moonlight.grf
                              C:\Program Files\Moonlight-Destinys\moonlightdestinys.exe
                              C:\Program Files\Moonlight-Destinys\Mp3dec.asi
                              C:\Program Files\Moonlight-Destinys\Mss32.dll
                              C:\Program Files\Moonlight-Destinys\Mssfast.m3d
                              C:\Program Files\Moonlight-Destinys\msvcp60.dll
                              C:\Program Files\Moonlight-Destinys\Setup.exe
                              C:\Program Files\Moonlight-Destinys\slicence.txt
                              C:\Program Files\Moonlight-Destinys\TriadPatcherLog.txt
                              C:\Program Files\Moonlight-Destinys\TriadPatchsList.ini
                              C:\Program Files\Moonlight-Destinys\uninstall.exe
                              C:\Program Files\Moonlight-Destinys\unrar.dll
                              C:\Program Files\Moonlight-Destinys\updater.exe
                              C:\Program Files\Moonlight-Destinys\zlib1.dll
                              C:\sqmdata19.sqm
                              C:\sqmnoopt19.sqm
                              C:\WINDOWS\ALCFDRTM.EXE
                              C:\WINDOWS\ALCFDRTM.EXE\
                              C:\WINDOWS\system32\cgekbbuh.dll
                              C:\WINDOWS\system32\foxjmcvh.dll
                              C:\WINDOWS\system32\xfyhhfaf.dll
                              C:\WINDOWS\wininit.ini

                              .
                              ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-04-27 to 2008-05-27 ))))))))))))))))))))))))))))))))))))
                              .

                              2008-05-27 21:15 . 2008-05-27 21:15 <REP> d-------- C:\327882R2FWJFW
                              2008-05-27 20:40 . <REP> C:\WINDOWS\LastGood.Tmp
                              2008-05-27 20:30 . 2008-03-02 14:25 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage r‚seau
                              2008-05-27 20:30 . 2008-03-02 14:25 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression
                              2008-05-27 20:30 . 2008-03-02 13:41 <REP> d--h----- C:\Documents and Settings\Administrateur\ModŠles
                              2008-05-27 20:30 . 2008-03-02 14:25 <REP> d-------- C:\Documents and Settings\Administrateur\Mes documents
                              2008-05-27 20:30 . 2008-03-02 14:25 <REP> dr------- C:\Documents and Settings\Administrateur\Menu D‚marrer
                              2008-05-27 20:30 . 2008-03-02 14:25 <REP> d-------- C:\Documents and Settings\Administrateur\Favoris
                              2008-05-27 20:30 . 2008-03-02 14:25 <REP> d-------- C:\Documents and Settings\Administrateur\Bureau
                              2008-05-27 20:30 . 2008-05-27 20:30 <REP> d-------- C:\Documents and Settings\Administrateur
                              2008-05-27 20:21 . 2008-05-27 20:21 <REP> d-------- C:\Program Files\CCleaner
                              2008-05-27 19:53 . 2008-05-27 19:53 10,290,154 --a------ C:\upload_moi_SYLVIA.tar.gz
                              2008-05-27 18:09 . 2008-05-27 18:09 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
                              2008-05-27 18:09 . 2008-05-27 18:09 <REP> d-------- C:\Documents and Settings\Egd\Application Data\Malwarebytes
                              2008-05-27 18:09 . 2008-05-27 18:09 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
                              2008-05-27 18:09 . 2008-05-05 20:46 27,048 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys
                              2008-05-27 18:09 . 2008-05-05 20:46 15,864 --a------ C:\WINDOWS\system32\drivers\mbam.sys
                              2008-05-26 20:12 . 2008-05-26 20:12 <REP> d-------- C:\Documents and Settings\Egd\Application Data\Grisoft
                              2008-05-26 20:12 . 2008-05-26 20:12 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft
                              2008-05-26 20:12 . 2007-05-30 14:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
                              2008-05-26 19:56 . 2008-05-27 19:42 <REP> d-------- C:\Program Files\Spybot - Search & Destroy
                              2008-05-26 19:56 . 2008-05-27 18:16 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
                              2008-05-26 12:22 . 2008-05-26 12:22 <REP> d-------- C:\Documents and Settings\All Users\Application Data\UiEnCom
                              2008-05-26 12:22 . 2008-05-26 12:22 <REP> d-------- C:\Documents and Settings\All Users\Application Data\smartsrvutil
                              2008-05-25 21:37 . 2008-05-27 17:31 <REP> d-------- C:\Documents and Settings\All Users\Application Data\kxyfkjyj
                              2008-05-25 21:02 . 2008-05-25 21:02 <REP> d-------- C:\Documents and Settings\Egd\Application Data\gtopala
                              2008-05-23 18:19 . 2008-05-23 18:19 <REP> d-------- C:\Documents and Settings\Egd\Application Data\ImgBurn
                              2008-05-23 18:09 . 2008-05-23 18:09 <REP> d-------- C:\Program Files\ImgBurn
                              2008-05-20 21:03 . 2008-05-20 21:03 <REP> d-------- C:\Documents and Settings\LocalService\Menu D‚marrer
                              2008-05-20 20:52 . 2008-05-27 21:21 121 --a------ C:\WINDOWS\bdagent.INI
                              2008-05-20 20:41 . 2008-05-20 20:41 <REP> d-------- C:\Program Files\BitDefender
                              2008-05-20 20:41 . 2008-05-20 20:41 <REP> d-------- C:\Documents and Settings\Egd\Application Data\Bitdefender
                              2008-05-20 20:40 . 2008-05-20 20:41 <REP> d-------- C:\Program Files\Fichiers communs\BitDefender
                              2008-05-14 12:20 . 2008-05-14 12:20 <REP> d-------- C:\Program Files\DAEMON Tools Lite
                              2008-05-14 12:17 . 2008-05-14 12:17 <REP> d-------- C:\Documents and Settings\Egd\Application Data\DAEMON Tools
                              2008-05-13 22:20 . 2008-05-13 22:20 <REP> dr-h----- C:\Documents and Settings\Egd\Application Data\SecuROM
                              2008-05-13 22:05 . 2008-05-13 22:05 107,888 --a------ C:\WINDOWS\system32\CmdLineExt.dll
                              2008-05-13 21:45 . 2008-05-13 21:45 <REP> d-------- C:\Program Files\QuickPar
                              2008-05-08 23:28 . 2004-08-18 10:34 442,368 -ra------ C:\WINDOWS\system32\vp6vfw.dll
                              2008-05-08 23:11 . 2008-05-14 12:17 717,296 --a------ C:\WINDOWS\system32\drivers\sptd.sys
                              2008-05-08 19:13 . 2008-05-08 19:13 <REP> d-------- C:\Documents and Settings\Egd\Application Data\Samsung
                              2008-05-08 19:05 . 2008-05-08 19:05 <REP> d-------- C:\WINDOWS\system32\Samsung_USB_Drivers
                              2008-05-08 19:05 . 2006-05-03 22:53 174,592 --a------ C:\WINDOWS\system32\framedyn.dll
                              2008-05-08 19:05 . 2005-08-30 01:49 94,000 --a------ C:\WINDOWS\system32\drivers\ssm_mdm.sys
                              2008-05-08 19:05 . 2005-08-30 01:47 58,320 --a------ C:\WINDOWS\system32\drivers\ssm_bus.sys
                              2008-05-08 19:05 . 2005-08-30 01:49 8,336 --a------ C:\WINDOWS\system32\drivers\ssm_mdfl.sys
                              2008-05-08 19:05 . 2005-08-30 01:49 6,176 --a------ C:\WINDOWS\system32\drivers\ssm_cmnt.sys
                              2008-05-08 19:05 . 2005-08-30 01:49 6,176 --a------ C:\WINDOWS\system32\drivers\ssm_cm.sys
                              2008-05-08 19:05 . 2005-08-30 01:47 5,840 --a------ C:\WINDOWS\system32\drivers\ssm_whnt.sys
                              2008-05-08 19:05 . 2005-08-30 01:47 5,840 --a------ C:\WINDOWS\system32\drivers\ssm_wh.sys
                              2008-05-08 19:05 . 2005-08-28 20:51 766 --a------ C:\WINDOWS\system32\Uninstall.ico
                              2008-05-08 19:04 . 2008-05-08 19:04 <REP> d-------- C:\Program Files\Samsung
                              2008-05-08 19:04 . 2006-07-24 16:05 5,632 --a------ C:\WINDOWS\system32\drivers\StarOpen.sys
                              2008-05-07 13:36 . 2008-05-07 13:36 <REP> d-------- C:\Program Files\Teamspeak2_RC2
                              2008-05-07 13:36 . 2008-05-07 13:36 <REP> d-------- C:\Documents and Settings\Egd\Application Data\teamspeak2
                              2008-05-07 13:36 . 2008-05-07 13:36 34,064 --a------ C:\WINDOWS\system32\lhacm.acm

                              .
                              (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
                              .
                              2008-05-27 18:48 --------- d-----w C:\Documents and Settings\Egd\Application Data\GrabIt
                              2008-05-27 16:16 --------- d--h--w C:\Program Files\InstallShield Installation Information
                              2008-05-23 14:29 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Help
                              2008-05-20 18:58 85,520 ----a-w C:\WINDOWS\system32\drivers\bdfndisf.sys
                              2008-05-20 18:44 --------- d-----w C:\Documents and Settings\All Users\Application Data\BitDefender
                              2008-05-14 10:23 --------- d-----w C:\Documents and Settings\All Users\Application Data\Skype
                              2008-05-14 06:33 --------- d-----w C:\Documents and Settings\Egd\Application Data\skypePM
                              2008-04-26 16:10 --------- d-----w C:\Program Files\Total Video Converter
                              2008-04-20 20:26 --------- d-----w C:\Documents and Settings\Egd\Application Data\FileZilla
                              2008-04-20 18:49 32 ----a-w C:\Documents and Settings\All Users\Application Data\ezsid.dat
                              2008-04-17 19:22 --------- d-----w C:\Program Files\Trend Micro
                              2008-04-17 09:17 --------- d-----w C:\Program Files\Paint.NET
                              .

                              ((((((((((((((((((((((((((((( snapshot@2008-05-27_20.40.02,06 )))))))))))))))))))))))))))))))))))))))))
                              .
                              - 2008-05-27 18:36:38 2,048 --s-a-w C:\WINDOWS\bootstat.dat
                              + 2008-05-27 19:22:51 2,048 --s-a-w C:\WINDOWS\bootstat.dat
                              .
                              ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
                              .
                              .
                              REGEDIT4
                              *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

                              [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                              "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 14:00 15360]
                              "MsnMsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-12-02 17:42 3739672]
                              "IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe" [2008-02-28 18:07 1828136]
                              "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 18:24 1694208]
                              "DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\daemon.exe" [2008-04-01 11:39 486856]

                              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                              "CmUCRRun"="C:\WINDOWS\system32\CmUCReye.exe" [2005-10-12 15:44 241664]
                              "RTHDCPL"="RTHDCPL.EXE" [2006-01-11 18:23 15961088 C:\WINDOWS\RTHDCPL.exe]
                              "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-12-05 02:41 8523776]
                              "nwiz"="nwiz.exe" [2007-12-05 02:41 1626112 C:\WINDOWS\system32\nwiz.exe]
                              "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-12-05 02:41 81920]
                              "NeroFilterCheck"="C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe" [2008-02-28 10:59 570664]
                              "BDAgent"="C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe" [2008-05-20 20:58 360448]
                              "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312]

                              [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
                              "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 14:00 15360]

                              [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\byXOhghh]

                              [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
                              --a------ 2008-01-11 23:16 39792 C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe

                              [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
                              "%windir%\\system32\\sessmgr.exe"=
                              "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
                              "C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
                              "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
                              "C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=

                              R3 3xHybrid;3xHybrid service;C:\WINDOWS\system32\DRIVERS\3xHybrid.sys [2005-12-06 12:16]
                              R3 Bdfndisf;BitDefender Firewall NDIS Filter Service;C:\WINDOWS\system32\DRIVERS\bdfndisf.sys [2008-05-20 20:58]
                              R3 CMISTOR;CMIUCR.SYS CM220 Card Reader Driver;C:\WINDOWS\system32\DRIVERS\cmiucr.SYS [2006-06-24 02:39]

                              [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
                              bdx REG_MULTI_SZ scan

                              [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{518e66c0-1d45-11dd-8d76-00161723a1d6}]
                              \Shell\AutoRun\command - L:\Autorun.exe

                              .
                              **************************************************************************

                              catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                              Rootkit scan 2008-05-27 21:23:25
                              Windows 5.1.2600 Service Pack 2 NTFS

                              Balayage processus cach‚s ...

                              Balayage cach‚ autostart entries ...

                              Balayage des fichiers cach‚s ...

                              C:\Documents and Settings\Egd\Local Settings\Application Data\Microsoft\Windows\GameExplorer\{DFEF49D9-FC95-4301-99B9-2FB91C6ABA06}\PlayTasks\1\Les Sims™ 2 : Boit@Look.lnk 861 bytes hidden from API

                              Scan termin‚ avec succŠs
                              Les fichiers cach‚s: 1

                              **************************************************************************

                              [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\bdfsfltr]
                              "ImagePath"=hex:73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,44,00,52,\

                              [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\bdfsfltr]
                              "ImagePath"=hex:73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,44,00,52,\
                              .
                              ------------------------ Other Running Processes ------------------------
                              .
                              C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                              C:\WINDOWS\system32\nvsvc32.exe
                              C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
                              C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
                              C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
                              C:\WINDOWS\system32\rundll32.exe
                              C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
                              .
                              **************************************************************************
                              .
                              Temps d'accomplissement: 2008-05-27 21:27:22 - machine was rebooted
                              ComboFix-quarantined-files.txt 2008-05-27 19:27:16
                              ComboFix2.txt 2008-05-27 18:40:22

                              Pre-Run: 23,420,149,760 octets libres
                              Post-Run: 23,528,599,552 octets libres

                              1327 --- E O F --- 2008-05-27 18:00:10
                              0
                              1. Utilisateur anonyme
                                t as la suite du rapport stp ???
                                0
                                1. Alias
                                  voila le rapport de combo

                                  ComboFix 08-05-26.2 - Egd 2008-05-27 21:16:18.3 - NTFSx86
                                  Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.2004 [GMT 2:00]
                                  Endroit: C:\Documents and Settings\Egd\Bureau\ComboFix.exe
                                  Command switches used :: C:\Documents and Settings\Egd\Bureau\CFScript.txt
                                  * Création d'un nouveau point de restauration
                                  * Resident AV is active

                                  [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]

                                  FILE ::
                                  C:\sqmdata19.sqm
                                  C:\sqmnoopt19.sqm
                                  C:\WINDOWS\ALCFDRTM.EXE
                                  C:\WINDOWS\system32\cgekbbuh.dll
                                  C:\WINDOWS\system32\foxjmcvh.dll
                                  C:\WINDOWS\system32\xfyhhfaf.dll
                                  C:\WINDOWS\wininit.ini
                                  .

                                  (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
                                  .

                                  C:\Documents and Settings\All Users\Application Data\ezsid.dat\
                                  C:\Documents and Settings\Egd\Application Data\Hide IP NG
                                  C:\Documents and Settings\Egd\Application Data\Hide IP NG\hideip.ini
                                  C:\Documents and Settings\Egd\Application Data\Hide IP NG\log.txt
                                  C:\Documents and Settings\Egd\Application Data\HideIP
                                  C:\Documents and Settings\Egd\Application Data\HideIP\hideip.ini
                                  C:\Documents and Settings\Egd\Application Data\HideIP\log.txt
                                  C:\Program Files\Asgard Of Ardamir
                                  C:\Program Files\Asgard Of Ardamir\_tmpEmblem\Asgard Of Ardamir_2_23.ebm
                                  C:\Program Files\Asgard Of Ardamir\_tmpEmblem\Asgard Of Ardamir_20_4.ebm
                                  C:\Program Files\Asgard Of Ardamir\_tmpEmblem\Asgard Of Ardamir_22_3.ebm
                                  C:\Program Files\Asgard Of Ardamir\_tmpEmblem\Asgard Of Ardamir_23_8.ebm
                                  C:\Program Files\Asgard Of Ardamir\_tmpEmblem\Asgard Of Ardamir_25_31.ebm
                                  C:\Program Files\Asgard Of Ardamir\_tmpEmblem\Asgard Of Ardamir_30_58.ebm
                                  C:\Program Files\Asgard Of Ardamir\_tmpEmblem\Asgard Of Ardamir_4_172.ebm
                                  C:\Program Files\Asgard Of Ardamir\_tmpEmblem\Asgard Of Ardamir_5_30.ebm
                                  C:\Program Files\Asgard Of Ardamir\_tmpEmblem\Asgard Of Ardamir_7_2.ebm
                                  C:\Program Files\Asgard Of Ardamir\_tmpEmblem\Asgard Of Ardamir_8_1.ebm
                                  C:\Program Files\Asgard Of Ardamir\_tmpEmblem\Asgard Of Ardamir_9_25.ebm
                                  C:\Program Files\Asgard Of Ardamir\AI\È£¹®Å¬·ç½º ÀΰøÁö´É ½ºÅ©¸³Æ® ¼³¸í¼­.htm
                                  C:\Program Files\Asgard Of Ardamir\AI\AI.lua
                                  C:\Program Files\Asgard Of Ardamir\AI\Const.lua
                                  C:\Program Files\Asgard Of Ardamir\AI\USER_AI\AI.lua
                                  C:\Program Files\Asgard Of Ardamir\AI\USER_AI\Const.lua
                                  C:\Program Files\Asgard Of Ardamir\AI\USER_AI\Util.lua
                                  C:\Program Files\Asgard Of Ardamir\AI\Util.lua
                                  C:\Program Files\Asgard Of Ardamir\aoa.exe
                                  C:\Program Files\Asgard Of Ardamir\aoa1.grf
                                  C:\Program Files\Asgard Of Ardamir\aoa2.grf
                                  C:\Program Files\Asgard Of Ardamir\aoa3.grf
                                  C:\Program Files\Asgard Of Ardamir\BGM\[u]0[/u]1.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\[u]0[/u]2.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\[u]0[/u]3.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\[u]0[/u]4.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\[u]0[/u]5.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\[u]0[/u]6.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\[u]0[/u]7.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\[u]0[/u]8.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\[u]0[/u]9.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\10.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\100.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\101.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\102.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\103.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\104.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\105.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\106.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\107.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\108.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\109.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\11.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\110.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\111.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\112.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\113.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\12.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\13.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\14.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\15.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\16.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\17.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\18.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\19.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\20.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\200.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\201.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\202.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\203.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\205.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\206.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\21.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\22.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\23.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\24.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\25.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\26.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\27.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\28.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\29.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\30.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\31.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\33.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\34.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\35.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\36.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\37.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\38.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\39.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\40.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\41.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\42.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\43.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\44.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\45.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\46.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\47.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\48.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\49.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\50.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\51.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\52.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\53.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\54.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\55.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\56.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\57.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\58.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\59.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\60.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\61.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\62.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\63.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\64.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\65.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\66.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\67.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\68.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\69.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\70.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\71.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\72.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\73.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\74.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\75.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\76.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\77.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\78.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\79.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\80.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\81.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\82.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\83.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\84.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\85.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\86.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\87.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\88.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\89.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\90.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\91.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\92.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\93.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\94.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\95.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\96.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\97.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\99.mp3
                                  C:\Program Files\Asgard Of Ardamir\BGM\intro.mp3
                                  C:\Program Files\Asgard Of Ardamir\binkw32.dll
                                  C:\Program Files\Asgard Of Ardamir\Config.tpc
                                  C:\Program Files\Asgard Of Ardamir\cps.dll
                                  C:\Program Files\Asgard Of Ardamir\dbghelp.dll
                                  C:\Program Files\Asgard Of Ardamir\dinput.dll
                                  C:\Program Files\Asgard Of Ardamir\Emblem\Mettre son embleme de guilde.txt
                                  C:\Program Files\Asgard Of Ardamir\granny2.dll
                                  C:\Program Files\Asgard Of Ardamir\GRF.dll
                                  C:\Program Files\Asgard Of Ardamir\ijl15.dll
                                  C:\Program Files\Asgard Of Ardamir\KOR_LANG.CFG
                                  C:\Program Files\Asgard Of Ardamir\licence.txt
                                  C:\Program Files\Asgard Of Ardamir\Mp3dec.asi
                                  C:\Program Files\Asgard Of Ardamir\Mss32.dll
                                  C:\Program Files\Asgard Of Ardamir\Mssfast.m3d
                                  C:\Program Files\Asgard Of Ardamir\msvcp60.dll
                                  C:\Program Files\Asgard Of Ardamir\NPCHK.DLL
                                  C:\Program Files\Asgard Of Ardamir\NPCIPHER.DLL
                                  C:\Program Files\Asgard Of Ardamir\npkcrypt.dll
                                  C:\Program Files\Asgard Of Ardamir\npkcrypt.sys
                                  C:\Program Files\Asgard Of Ardamir\npkcrypt.vxd
                                  C:\Program Files\Asgard Of Ardamir\npkcusb.sys
                                  C:\Program Files\Asgard Of Ardamir\npkeysdk.dll
                                  C:\Program Files\Asgard Of Ardamir\npkpdb.dll
                                  C:\Program Files\Asgard Of Ardamir\NPPSK.DLL
                                  C:\Program Files\Asgard Of Ardamir\NPSCAN.DES
                                  C:\Program Files\Asgard Of Ardamir\npupdate.dll
                                  C:\Program Files\Asgard Of Ardamir\NPUPDATE0.DLL
                                  C:\Program Files\Asgard Of Ardamir\NPX.DLL
                                  C:\Program Files\Asgard Of Ardamir\Patcher.exe
                                  C:\Program Files\Asgard Of Ardamir\Registry Keys.reg
                                  C:\Program Files\Asgard Of Ardamir\Setup.exe
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\ARW_DOWN.BMP
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\ARW_LEFT.BMP
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\arw_right.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\arw_right_on.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\ARW_UP.BMP
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\basewin_bg.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\basewin_mini.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_abil_dis.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_abil_off.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_abil_on.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_cartoff.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_comm_dis.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_comm_off.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_comm_on.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_dialog_off.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_dialog_on.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_equip_dis.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_equip_off.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_equip_on.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_friend_dis.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_friend_off.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_friend_on.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_items_dis.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_items_off.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_items_on.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_job_dis.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_job_off.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_job_on.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_map_dis.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_map_off.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_map_on.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_off.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_option_dis.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_option_off.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_option_on.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_profile_dis.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_profile_off.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_profile_on.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_skill_dis.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_skill_off.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_skill_on.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_status_dis.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_status_off.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btn_status_on.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btnbar_arrow.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btnbar_left.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btnbar_left2.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btnbar_mid.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btnbar_mid2.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btnbar_right.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\btnbar_right2.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\chatwin0_bg.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\chatwin1_left.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\chatwin1_line.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\chatwin1_mid.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\chatwin1_right.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\collection_bg.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\cutline_0.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\dialbtn_his.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\dialbtn_his0.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\dialbtn_opt.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\dialbtn_opt0.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\dialog_bg.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\dialog_btn0.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\dialog_btn1.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\dialog_btn2.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\dialog_his.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\dialog_left.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\dialog_mid.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\dialog_resize.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\dialog_right.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\dialscr_bar.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\dialscr_bg.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\dialscr_down.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\dialscr_up.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\dlgoptwin_bg.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\equipwin_bg.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\exchange_bg.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\grp_leader.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\grp_offline.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\grp_online.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\GRP_STUN.BMP
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\GZE_BG.BMP
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\gzeblue_left.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\gzeblue_mid.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\gzeblue_right.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\gzered_left.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\gzered_mid.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\gzered_right.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\ico_confusion.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\ico_curse.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\ico_frozen.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\ico_poison.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\ico_silence.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\ico_stone.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\item_invert.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\itemwin_left.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\itemwin_mid.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\itemwin_right.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\lv_up_off.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\LV_UP_ON.BMP
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\mesbtn_01.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\mesbtn_01_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\mesbtn_01_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\mesbtn_02.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\mesbtn_02_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\mesbtn_02_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\mesbtn_03.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\mesbtn_03_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\mesbtn_03_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\mesbtn_04.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\mesbtn_04_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\mesbtn_04_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\mesbtn_05.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\mesbtn_05_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\mesbtn_05_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\mesbtn_left.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\mesbtn_mid.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\mesbtn_right.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\optwin0_bg.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\optwin1_bg.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\shortcut_bg.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\shortitem_bg.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\shortitem_btn.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\shtcut_item.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\shtcut_skill.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\skill_up_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\skill_up_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\skill_up_c.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\skillcollection.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\sprite_bg.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\statwin_bg.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\statwin0_bg.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\statwin1_bg.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\sys_base_off.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\sys_base_on.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\sys_close_off.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\sys_close_on.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\sys_mini_off.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\sys_mini_on.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\sysboxs_ld.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\sysboxs_lu.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\sysboxs_rd.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\sysboxs_ru.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\tab_itm_01.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\tab_itm_02.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\tab_itm_03.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\titlebar_fix.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\titlebar_left.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\titlebar_mid.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\titlebar_right.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\txtbox_btn_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\txtbox_btn_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\txtbox_btn_c.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\txtbox_l.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\txtbox_m.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\txtbox_r.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\txtdown_btn_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\txtdown_btn_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\txtdown_btn_c.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\txtup_btn_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\txtup_btn_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\basic_interface\txtup_btn_c.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_1on1.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_1on1_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_1on1_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_add.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_add_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_add_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_agree.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_agree_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_agree_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\BTN_BACK.BMP
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_back_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_back_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\BTN_BUY.BMP
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_buy_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_buy_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_cancel.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_cancel_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_cancel_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_close.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_close_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_close_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_del.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_del_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_del_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_disagree.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_disagree_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_disagree_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_edit.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_edit_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_edit_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_exchange.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_exchange_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_exchange_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_exchange_dis.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_find.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_find_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_find_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_friend.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_friend_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_friend_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_get.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_get_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_get_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_help.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_help_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_help_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_help2.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_info.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_info_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_info_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_learn.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_learn_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_learn_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_list.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_list_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_list_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_make.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_make_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_make_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_memo.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_memo_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_memo_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\BTN_NEXT.BMP
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_next_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_next_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\BTN_OK.BMP
                                  C:\Program Files\Asgard Of Ardamir\skin\default\BTN_OK_A.BMP
                                  C:\Program Files\Asgard Of Ardamir\skin\default\BTN_OK_B.BMP
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_ok_dis.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_reply.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_reply_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_reply_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_resize.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_restart.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_restart_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_restart_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_rewrite.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_rewrite_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_rewrite_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\BTN_SELL.BMP
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_sell_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_sell_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_send.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_send_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_send_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\BTN_use.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\BTN_use_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\BTN_use_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_view.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_view_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_view_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_write.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_write_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\btn_write_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\chat_close.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\chat_open.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\checkbox_0.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\checkbox_1.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\client_select_cs.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\client_select_cs1.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\colorchip.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\empty_card_slot.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\esc_01a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\esc_01b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\esc_01c.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\esc_02a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\esc_02b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\esc_02c.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\esc_03a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\esc_03b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\esc_03c.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\esc_04a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\esc_04b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\esc_04c.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\arw-agi0.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\arw-agi1.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\arw-dex0.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\arw-dex1.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\arw-int0.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\arw-int1.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\arw-luk0.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\arw-luk1.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\arw-str0.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\arw-str1.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\arw-vit0.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\arw-vit1.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\box_select.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\btn_back.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\btn_cancel.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\btn_close.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\btn_connect.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\btn_connect_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\btn_connect_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\btn_exit.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\btn_exit_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\btn_exit_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\btn_help.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\btn_help2.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\btn_make.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\btn_next.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\btn_ok.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\btn_request.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\btn_request_a.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\btn_request_b.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\chk_saveoff.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\chk_saveon.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\etc_empty.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\name-edit.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\win_login.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\win_make.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\win_select.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\login_interface\win_service.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\radiobtn_off.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\radiobtn_on.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\scroll0bar_down.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\scroll0bar_mid.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\scroll0bar_up.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\scroll0down.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\scroll0mid.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\scroll0up.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\scroll1bar_left.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\scroll1bar_mid.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\scroll1bar_right.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\scroll1left.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\scroll1mid.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\scroll1right.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\shop.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\sysbox_arr_l.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\sysbox_arr_r.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\sysbox_bg.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\sysbox_ld.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\sysbox_lm.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\sysbox_lu.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\sysbox_md.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\sysbox_mu.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\sysbox_rd.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\sysbox_rm.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\sysbox_ru.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\sysboxs_ld.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\sysboxs_lu.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\sysboxs_rd.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\sysboxs_ru.bmp
                                  C:\Program Files\Asgard Of Ardamir\skin\default\win_msgbox.bmp
                                  C:\Program Files\Asgard Of Ardamir\TipOfTheDay.txt
                                  C:\Program Files\Asgard Of Ardamir\TriadPatchsList.ini
                                  C:\Program Files\Asgard Of Ardamir\unins000.dat
                                  C:\Program Files\Asgard Of Ardamir\unins000.exe
                                  C:\Program Files\Dollcevita
                                  C:\Program Files\Dollcevita\_tmpEmblem\Dollcevita_1124_22.ebm
                                  C:\Program Files\Dollcevita\_tmpEmblem\Dollcevita_11964_146.ebm
                                  C:\Program Files\Dollcevita\_tmpEmblem\Dollcevita_15164_61.ebm
                                  C:\Program Files\Dollcevita\_tmpEmblem\Dollcevita_15177_40.ebm
                                  C:\Program Files\Dollcevita\_tmpEmblem\Dollcevita_15214_1.ebm
                                  C:\Program Files\Dollcevita\_tmpEmblem\Dollcevita_15226_2.ebm
                                  C:\Program Files\Dollcevita\_tmpEmblem\Dollcevita_15228_4.ebm
                                  C:\Program Files\Dollcevita\adata.grf
                                  C:\Program Files\Dollcevita\AI\AI.lua
                                  C:\Program Files\Dollcevita\AI\AI_M.lua
                                  C:\Program Files\Dollcevita\AI\Const.lua
                                  C:\Program Files\Dollcevita\AI\Util.lua
                                  C:\Program Files\Dollcevita\bdata.grf
                                  C:\Program Files\Dollcevita\BGM\[u]0[/u]1.mp3
                                  C:\Program Files\Dollcevita\BGM\[u]0[/u]2.mp3
                                  C:\Program Files\Dollcevita\BGM\[u]0[/u]3.mp3
                                  C:\Program Files\Dollcevita\BGM\[u]0[/u]4.mp3
                                  C:\Program Files\Dollcevita\BGM\[u]0[/u]5.mp3
                                  C:\Program Files\Dollcevita\BGM\[u]0[/u]6.mp3
                                  C:\Program Files\Dollcevita\BGM\[u]0[/u]7.mp3
                                  C:\Program Files\Dollcevita\BGM\[u]0[/u]8.mp3
                                  C:\Program Files\Dollcevita\BGM\[u]0[/u]9.mp3
                                  C:\Program Files\Dollcevita\BGM\10.mp3
                                  C:\Program Files\Dollcevita\BGM\100.mp3
                                  C:\Program Files\Dollcevita\BGM\101.mp3
                                  C:\Program Files\Dollcevita\BGM\102.mp3
                                  C:\Program Files\Dollcevita\BGM\103.mp3
                                  C:\Program Files\Dollcevita\BGM\104.mp3
                                  C:\Program Files\Dollcevita\BGM\105.mp3
                                  C:\Program Files\Dollcevita\BGM\106.mp3
                                  C:\Program Files\Dollcevita\BGM\107.mp3
                                  C:\Program Files\Dollcevita\BGM\108.mp3
                                  C:\Program Files\Dollcevita\BGM\109.mp3
                                  C:\Program Files\Dollcevita\BGM\11.mp3
                                  C:\Program Files\Dollcevita\BGM\110.mp3
                                  C:\Program Files\Dollcevita\BGM\111.mp3
                                  C:\Program Files\Dollcevita\BGM\112.mp3
                                  C:\Program Files\Dollcevita\BGM\113.mp3
                                  C:\Program Files\Dollcevita\BGM\114.mp3
                                  C:\Program Files\Dollcevita\BGM\115.mp3
                                  C:\Program Files\Dollcevita\BGM\116.mp3
                                  C:\Program Files\Dollcevita\BGM\117.mp3
                                  C:\Program Files\Dollcevita\BGM\118.mp3
                                  C:\Program Files\Dollcevita\BGM\119.mp3
                                  C:\Program Files\Dollcevita\BGM\12.mp3
                                  C:\Program Files\Dollcevita\BGM\120.mp3
                                  C:\Program Files\Dollcevita\BGM\121.mp3
                                  C:\Program Files\Dollcevita\BGM\122.mp3
                                  C:\Program Files\Dollcevita\BGM\123.mp3
                                  C:\Program Files\Dollcevita\BGM\124.mp3
                                  C:\Program Files\Dollcevita\BGM\125.mp3
                                  C:\Program Files\Dollcevita\BGM\13.mp3
                                  C:\Program Files\Dollcevita\BGM\14.mp3
                                  C:\Program Files\Dollcevita\BGM\15.mp3
                                  C:\Program Files\Dollcevita\BGM\16.mp3
                                  C:\Program Files\Dollcevita\BGM\17.mp3
                                  C:\Program Files\Dollcevita\BGM\18.mp3
                                  C:\Program Files\Dollcevita\BGM\19.mp3
                                  C:\Program Files\Dollcevita\BGM\20.mp3
                                  C:\Program Files\Dollcevita\BGM\21.mp3
                                  C:\Program Files\Dollcevita\BGM\22.mp3
                                  C:\Program Files\Dollcevita\BGM\23.mp3
                                  C:\Program Files\Dollcevita\BGM\24.mp3
                                  C:\Program Files\Dollcevita\BGM\25.mp3
                                  C:\Program Files\Dollcevita\BGM\26.mp3
                                  C:\Program Files\Dollcevita\BGM\27.mp3
                                  C:\Program Files\Dollcevita\BGM\28.mp3
                                  C:\Program Files\Dollcevita\BGM\29.mp3
                                  C:\Program Files\Dollcevita\BGM\30.mp3
                                  C:\Program Files\Dollcevita\BGM\31.mp3
                                  C:\Program Files\Dollcevita\BGM\33.mp3
                                  C:\Program Files\Dollcevita\BGM\34.mp3
                                  C:\Program Files\Dollcevita\BGM\35.mp3
                                  C:\Program Files\Dollcevita\BGM\36.mp3
                                  C:\Program Files\Dollcevita\BGM\37.mp3
                                  C:\Program Files\Dollcevita\BGM\38.mp3
                                  C:\Program Files\Dollcevita\BGM\39.mp3
                                  C:\Program Files\Dollcevita\BGM\40.mp3
                                  C:\Program Files\Dollcevita\BGM\41.mp3
                                  C:\Program Files\Dollcevita\BGM\42.mp3
                                  C:\Program Files\Dollcevita\BGM\43.mp3
                                  C:\Program Files\Dollcevita\BGM\44.mp3
                                  C:\Program Files\Dollcevita\BGM\45.mp3
                                  C:\Program Files\Dollcevita\BGM\46.mp3
                                  C:\Program Files\Dollcevita\BGM\47.mp3
                                  C:\Program Files\Dollcevita\BGM\48.mp3
                                  C:\Program Files\Dollcevita\BGM\49.mp3
                                  C:\Program Files\Dollcevita\BGM\50.mp3
                                  C:\Program Files\Dollcevita\BGM\51.mp3
                                  C:\Program Files\Dollcevita\BGM\52.mp3
                                  C:\Program Files\Dollcevita\BGM\53.mp3
                                  C:\Program Files\Dollcevita\BGM\54.mp3
                                  C:\Program Files\Dollcevita\BGM\55.mp3
                                  C:\Program Files\Dollcevita\BGM\56.mp3
                                  C:\Program Files\Dollcevita\BGM\57.mp3
                                  C:\Program Files\Dollcevita\BGM\58.mp3
                                  C:\Program Files\Dollcevita\BGM\59.mp3
                                  C:\Program Files\Dollcevita\BGM\60.mp3
                                  C:\Program Files\Dollcevita\BGM\61.mp3
                                  C:\Program Files\Dollcevita\BGM\62.mp3
                                  C:\Program Files\Dollcevita\BGM\63.mp3
                                  C:\Program Files\Dollcevita\BGM\64.mp3
                                  C:\Program Files\Dollcevita\BGM\65.mp3
                                  C:\Program Files\Dollcevita\BGM\66.mp3
                                  C:\Program Files\Dollcevita\BGM\67.mp3
                                  C:\Program Files\Dollcevita\BGM\68.mp3
                                  C:\Program Files\Dollcevita\BGM\69.mp3
                                  C:\Program Files\Dollcevita\BGM\70.mp3
                                  C:\Program Files\Dollcevita\BGM\71.mp3
                                  C:\Program Files\Dollcevita\BGM\72.mp3
                                  C:\Program Files\Dollcevita\BGM\73.mp3
                                  C:\Program Files\Dollcevita\BGM\74.mp3
                                  C:\Program Files\Dollcevita\BGM\75.mp3
                                  C:\Program Files\Dollcevita\BGM\76.mp3
                                  C:\Program Files\Dollcevita\BGM\77.mp3
                                  C:\Program Files\Dollcevita\BGM\78.mp3
                                  C:\Program Files\Dollcevita\BGM\79.mp3
                                  C:\Program Files\Dollcevita\BGM\80.mp3
                                  C:\Program Files\Dollcevita\BGM\81.mp3
                                  C:\Program Files\Dollcevita\BGM\82.mp3
                                  C:\Program Files\Dollcevita\BGM\83.mp3
                                  C:\Program Files\Dollcevita\BGM\84.mp3
                                  C:\Program Files\Dollcevita\BGM\85.mp3
                                  C:\Program Files\Dollcevita\BGM\86.mp3
                                  C:\Program Files\Dollcevita\BGM\87.mp3
                                  C:\Program Files\Dollcevita\BGM\88.mp3
                                  C:\Program Files\Dollcevita\BGM\89.mp3
                                  C:\Program Files\Dollcevita\BGM\90.mp3
                                  C:\Program Files\Dollcevita\BGM\91.mp3
                                  C:\Program Files\Dollcevita\BGM\92.mp3
                                  C:\Program Files\Dollcevita\BGM\93.mp3
                                  C:\Program Files\Dollcevita\BGM\94.mp3
                                  C:\Program Files\Dollcevita\BGM\95.mp3
                                  C:\Program Files\Dollcevita\BGM\96.mp3
                                  C:\Program Files\Dollcevita\BGM\97.mp3
                                  C:\Program Files\Dollcevita\BGM\98.mp3
                                  C:\Program Files\Dollcevita\BGM\99.mp3
                                  C:\Program Files\Dollcevita\binkw32.dll
                                  C:\Program Files\Dollcevita\cps.dll
                                  C:\Program Files\Dollcevita\data.grf
                                  C:\Program Files\Dollcevita\DATA.INI
                                  C:\Program Files\Dollcevita\dbghelp.dll
                                  C:\Program Files\Dollcevita\dcv.exe
                                  C:\Program Files\Dollcevita\dinput.dll
                                  C:\Program Files\Dollcevita\granny2.dll
                                  C:\Program Files\Dollcevita\ijl15.dll
                                  C:\Program Files\Dollcevita\Mp3dec.asi
                                  C:\Program Files\Dollcevita\Mss32.dll
                                  C:\Program Files\Dollcevita\Mssfast.m3d
                                  C:\Program Files\Dollcevita\msvcp60.dll
                                  C:\Program Files\Dollcevita\neoncube.file
                                  C:\Program Files\Dollcevita\neoncube\neoncube.ini
                                  C:\Program Files\Dollcevita\neoncube\skin\bg.bmp
                                  C:\Program Files\Dollcevita\neoncube\skin\bg.jpg
                                  C:\Program Files\Dollcevita\neoncube\skin\cancel.bmp
                                  C:\Program Files\Dollcevita\neoncube\skin\cancel_hover.bmp
                                  C:\Program Files\Dollcevita\neoncube\skin\close.bmp
                                  C:\Program Files\Dollcevita\neoncube\skin\close_hover.bmp
                                  C:\Program Files\Dollcevita\neoncube\skin\frame.bmp
                                  C:\Program Files\Dollcevita\neoncube\skin\minimize.bmp
                                  C:\Program Files\Dollcevita\neoncube\skin\minimize_hover.bmp
                                  C:\Program Files\Dollcevita\neoncube\skin\neoncube.style
                                  C:\Program Files\Dollcevita\neoncube\skin\progressbar.bmp
                                  C:\Program Files\Dollcevita\neoncube\skin\register.bmp
                                  C:\Program Files\Dollcevita\neoncube\skin\register_hover.bmp
                                  C:\Program Files\Dollcevita\neoncube\skin\startgame.bmp
                                  C:\Program Files\Dollcevita\neoncube\skin\startgame_hover.bmp
                                  C:\Program Files\Dollcevita\NHCgogo_10.eot
                                  C:\Program Files\Dollcevita\NHCgogo_12.eot
                                  C:\Program Files\Dollcevita\npkcrypt.dll
                                  C:\Program Files\Dollcevita\npkpdb.dll
                                  C:\Program Files\Dollcevita\Patcheur.exe
                                  C:\Program Files\Dollcevita\ProhibitionLog.gd
                                  C:\Program Files\Dollcevita\ProhibitionLog.txt
                                  C:\Program Files\Dollcevita\RixLoveangel_10.eot
                                  C:\Program Files\Dollcevita\RixLoveangel_12.eot
                                  C:\Program Files\Dollcevita\RixSquirrel_10.eot
                                  C:\Program Files\Dollcevita\RixSquirrel_12.eot
                                  C:\Program Files\Dollcevita\RO_MF.ini
                                  C:\Program Files\Dollcevita\Setup.exe
                                  C:\Program Files\Dollcevita\TipOfTheDay.txt
                                  C:\Program Files\Dollcevita\tmp.nc
                                  C:\Program Files\Dollcevita\unins000.dat
                                  C:\Program Files\Dollcevita\unins000.exe
                                  C:\Program Files\Dollcevita\unrar.dll
                                  C:\Program Files\Kingdom Of Midgard - Online
                                  C:\Program Files\Kingdom Of Midgard - Online\_tmpEmblem\Kingdom Of midgard _21_1.ebm
                                  C:\Program Files\Kingdom Of Midgard - Online\_tmpEmblem\Kingdom Of midgard _30_81.ebm
                                  C:\Program Files\Kingdom Of Midgard - Online\_tmpEmblem\Kingdom Of midgard _48_1.ebm
                                  C:\Program Files\Kingdom Of Midgard - Online\_tmpEmblem\Kingdom Of midgard _57_1.ebm
                                  C:\Program Files\Kingdom Of Midgard - Online\_tmpEmblem\Kingdom Of midgard _60_7.ebm
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\AI.lua
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\Const.lua
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\USER_AI\AI.lua
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\USER_AI\Amistr.lua
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\USER_AI\AntiPosLag.lua
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\USER_AI\AutoAlch.lua
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\USER_AI\Battle.lua
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\USER_AI\Commands.lua
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\USER_AI\Conf\AMCs.lua
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\USER_AI\Conf\Config.lua
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\USER_AI\Conf\Custom.lua
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\USER_AI\Conf\Friends.lua
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\USER_AI\Conf\Monsters.lua
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\USER_AI\ConfCheck.lua
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\USER_AI\Const.lua
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\USER_AI\Const2.lua
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\USER_AI\Docs\en\AdvMove.txt
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\USER_AI\Docs\en\ChangeLog.txt
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\USER_AI\Docs\en\License.txt
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\USER_AI\Docs\Support.html
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\USER_AI\Filir.lua
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\USER_AI\Friends.lua
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\USER_AI\Globals.lua
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\USER_AI\InitSupport.lua
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\USER_AI\Lif.lua
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\USER_AI\List.lua
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\USER_AI\MonSupport.lua
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\USER_AI\NetUsageMonitor.lua
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\USER_AI\Personality.lua
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\USER_AI\Sequencer.lua
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\USER_AI\Simulator.lua
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\USER_AI\Table.lua
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\USER_AI\Timeout.lua
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\USER_AI\Utils.lua
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\USER_AI\Vanilmirth.lua
                                  C:\Program Files\Kingdom Of Midgard - Online\AI\Util.lua
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\[u]0[/u]1.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\[u]0[/u]2.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\[u]0[/u]3.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\[u]0[/u]4.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\[u]0[/u]5.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\[u]0[/u]6.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\[u]0[/u]7.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\[u]0[/u]8.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\[u]0[/u]9.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\10.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\100.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\101.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\102.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\103.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\104.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\105.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\106.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\107.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\108.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\109.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\11.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\110.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\111.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\112.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\113.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\12.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\13.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\14.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\15.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\16.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\17.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\18.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\19.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\20.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\21.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\22.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\23.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\24.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\25.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\26.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\27.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\28.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\29.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\30.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\31.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\33.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\34.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\35.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\36.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\37.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\38.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\39.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\40.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\41.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\42.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\43.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\44.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\45.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\46.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\47.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\48.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\49.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\50.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\51.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\52.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\53.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\54.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\55.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\56.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\57.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\58.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\59.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\60.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\61.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\62.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\63.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\64.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\65.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\66.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\67.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\68.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\69.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\70.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\71.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\72.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\73.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\74.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\75.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\76.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\77.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\78.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\79.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\80.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\81.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\82.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\83.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\84.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\85.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\86.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\87.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\88.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\89.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\90.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\91.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\92.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\94.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\95.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\96.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\97.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\98.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\BGM\99.mp3
                                  C:\Program Files\Kingdom Of Midgard - Online\binkw32.dll
                                  C:\Program Files\Kingdom Of Midgard - Online\Config.tpc
                                  C:\Program Files\Kingdom Of Midgard - Online\cps.dll
                                  C:\Program Files\Kingdom Of Midgard - Online\data.grf
                                  C:\Program Files\Kingdom Of Midgard - Online\DATA.INI
                                  C:\Program Files\Kingdom Of Midgard - Online\dinput.dll
                                  C:\Program Files\Kingdom Of Midgard - Online\emblem\Mettre son embleme de guilde.txt
                                  C:\Program Files\Kingdom Of Midgard - Online\granny2.dll
                                  C:\Program Files\Kingdom Of Midgard - Online\GRF.dll
                                  C:\Program Files\Kingdom Of Midgard - Online\ijl15.dll
                                  C:\Program Files\Kingdom Of Midgard - Online\Kingdom Of Midgard.exe
                                  C:\Program Files\Kingdom Of Midgard - Online\KoM-Online.exe
                                  C:\Program Files\Kingdom Of Midgard - Online\kom.grf
                                  C:\Program Files\Kingdom Of Midgard - Online\KoM.ico
                                  C:\Program Files\Kingdom Of Midgard - Online\Mp3dec.asi
                                  C:\Program Files\Kingdom Of Midgard - Online\Mss32.dll
                                  C:\Program Files\Kingdom Of Midgard - Online\Mssfast.m3d
                                  C:\Program Files\Kingdom Of Midgard - Online\RO_MF.ini
                                  C:\Program Files\Kingdom Of Midgard - Online\ScreenShot\Thumbs.db
                                  C:\Program Files\Kingdom Of Midgard - Online\sdata.grf
                                  C:\Program Files\Kingdom Of Midgard - Online\Setup.exe
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\ARW_DOWN.BMP
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\ARW_LEFT.BMP
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\arw_right.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\arw_right_on.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\ARW_UP.BMP
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\basewin_bg.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\basewin_mini.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\btn_cartoff.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\btn_comm_dis.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\btn_comm_off.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\btn_comm_on.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\btn_equip_dis.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\btn_equip_off.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\btn_equip_on.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\btn_friend_dis.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\btn_friend_off.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\btn_friend_on.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\btn_items_dis.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\btn_items_off.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\btn_items_on.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\btn_map_dis.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\btn_map_off.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\btn_map_on.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\btn_option_dis.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\btn_option_off.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\btn_option_on.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\btn_skill_dis.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\btn_skill_off.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\btn_skill_on.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\btn_status_dis.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\btn_status_off.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\btn_status_on.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\btnbar_left.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\btnbar_left2.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\btnbar_mid.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\btnbar_mid2.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\btnbar_right.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\btnbar_right2.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\chatwin0_bg.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\chatwin1_left.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\chatwin1_line.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\chatwin1_mid.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\chatwin1_right.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\collection_bg.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\cutline_0.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\dialog_bg.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\dialog_btn0.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\dialog_btn1.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\dialog_btn2.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\dialog_mid.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\dialog_resize.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\equipwin_bg.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\exchange_bg.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\grp_leader.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\basic_interface\grp_offline.bmp
                                  C:\Program Files\Kingdom Of Midgard - Online\skin\default\b
                                  0
                                  1. Utilisateur anonyme
                                    Copie le texte ci-dessous :

                                    File::
                                    C:\WINDOWS\system32\foxjmcvh.dll
                                    C:\WINDOWS\system32\xfyhhfaf.dll
                                    C:\WINDOWS\system32\cgekbbuh.dll
                                    C:\WINDOWS\ALCFDRTM.EXE
                                    C:\sqmdata19.sqm
                                    C:\sqmnoopt19.sqm

                                    Folder::
                                    C:\Program Files\Asgard Of Ardamir
                                    C:\Program Files\Kingdom Of Midgard - Online
                                    C:\Program Files\Dollcevita
                                    C:\Documents and Settings\All Users\Application Data\ezsid.dat
                                    C:\Documents and Settings\Egd\Application Data\Hide IP NG
                                    C:\Documents and Settings\Egd\Application Data\HideIP
                                    C:\Program Files\Moonlight-Destinys

                                    Registry::
                                    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\run]
                                    "WbL7bDPpOv"=-

                                    Ouvre le Bloc-Notes puis colle le texte copié.
                                    (Démarrer\Tous les programmes\Accessoires\Bloc notes.)
                                    Sauvegarde ce fichier sous le nom de CFScript.txt.

                                    Glisse maintenant le fichier CFScript.txt dans Combofix.exe comme ci-dessous :

                                    http://sd-1.archive-host.com/membres/up/1366464061/CFScript.gif

                                    Cela va relancer Combofix,

                                    Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide.

                                    Patiente le temps du scan.Le bureau va disparaître à plusieurs reprises: c'est normal!

                                    Ne touche à rien tant que le scan n'est pas terminé.

                                    Après redémarrage, poste le contenu du rapport Combofix.txt accompagné d'un rapport Hijackthis.

                                    S'il n'y a pas de rédémarrage, poste quand même les rapports.
                                    0
                                    1. Alias
                                      voila Logfile of Trend Micro HijackThis v2.0.2
                                      Scan saved at 20:50, on 2008-05-27
                                      Platform: Windows XP SP2 (WinNT 5.01.2600)
                                      MSIE: Internet Explorer v7.00 (7.00.6000.16640)
                                      Boot mode: Normal

                                      Running processes:
                                      C:\WINDOWS\System32\smss.exe
                                      C:\WINDOWS\system32\winlogon.exe
                                      C:\WINDOWS\system32\services.exe
                                      C:\WINDOWS\system32\lsass.exe
                                      C:\WINDOWS\system32\svchost.exe
                                      C:\WINDOWS\System32\svchost.exe
                                      C:\WINDOWS\system32\svchost.exe
                                      C:\WINDOWS\system32\spoolsv.exe
                                      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                                      C:\WINDOWS\system32\nvsvc32.exe
                                      C:\WINDOWS\system32\svchost.exe
                                      C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
                                      C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
                                      C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
                                      C:\WINDOWS\system32\CmUCReye.exe
                                      C:\WINDOWS\RTHDCPL.EXE
                                      C:\WINDOWS\system32\RUNDLL32.EXE
                                      C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
                                      C:\WINDOWS\system32\ctfmon.exe
                                      C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe
                                      C:\Program Files\Messenger\msmsgs.exe
                                      C:\WINDOWS\System32\svchost.exe
                                      C:\WINDOWS\system32\wuauclt.exe
                                      C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
                                      C:\WINDOWS\system32\wscntfy.exe
                                      C:\WINDOWS\explorer.exe
                                      C:\WINDOWS\system32\wuauclt.exe
                                      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                                      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr/
                                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                                      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = socks=
                                      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                                      O2 - BHO: (no name) - {61C32521-C40C-4335-ACD8-1253214A85C9} - (no file)
                                      O2 - BHO: (no name) - {6ec406ff-5501-4118-a6eb-dacd0728939d} - (no file)
                                      O2 - BHO: (no name) - {AF61DAF8-9552-45C8-A59E-A75767F9C30B} - (no file)
                                      O2 - BHO: (no name) - {EBD33416-C473-40C6-A6EE-7E82A31543E7} - (no file)
                                      O2 - BHO: {611a5444-33ae-494a-9aa4-6eb5efd9b3ee} - {ee3b9dfe-5be6-4aa9-a494-ea334445a116} - C:\WINDOWS\system32\foxjmcvh.dll
                                      O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll
                                      O4 - HKLM\..\Run: [CmUCRRun] C:\WINDOWS\system32\CmUCReye.exe
                                      O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
                                      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                                      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
                                      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
                                      O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe
                                      O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe"
                                      O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
                                      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                                      O4 - HKCU\..\Run: [MsnMsgr] "C:\PROGRA~1\WINDOW~4\MESSEN~1\msnmsgr.exe" /background
                                      O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
                                      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
                                      O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
                                      O4 - HKLM\..\Policies\Explorer\Run: [WbL7bDPpOv] C:\Documents and Settings\All Users\Application Data\kxyfkjyj\anybsbut.exe
                                      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
                                      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                                      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                                      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                                      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
                                      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
                                      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                                      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                                      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                                      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                                      O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
                                      O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://messenger.zone.msn.com/EN-US/a-LUXR/mjolauncher.cab
                                      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                                      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                                      O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
                                      O20 - Winlogon Notify: byXOhghh - C:\WINDOWS\
                                      O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                                      O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
                                      O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
                                      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                                      O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
                                      O23 - Service: BitDefender Communicator (XCOMM) - BitDefender - C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
                                      0
                                      1. Utilisateur anonyme
                                        ok refais un scan hijackthis et poste le nouveau rapport stp
                                        0
                                        • 1
                                        • 2

                                        Discussions similaires

                                        Impossible d'afficher le rapport de tableau croisé dynamique sur un rapport
                                        Utilisateur anonyme

                                        13 réponses
                                        rapport de visite commercial
                                        antcho

                                        3 réponses
                                        impossible d'afficher le tableau dynamique sur un rapport existant
                                        Pierre

                                        3 réponses
                                        Rapport audit parc informatique
                                        It administrateur

                                        9 réponses
                                        Theme de rapport de stage option comptabilité
                                        sana saydou

                                        2 réponses