Se connecter / S'enregistrer
Votre question

[Résolu] Form1 virus!

Tags :
  • Sécurité
Dernière réponse : dans Sécurité et virus
27 Juillet 2009 14:18:56

Bonjour je post ce message en espérant que quelqu'un me réponde au plus vite!! Donc voila depuis quelque semaine j'ai remarquer que quand j'ouvre le gestionnaire des taches j'ai un logiciel inconnu qui ce nomme Form1 a mon avis il s'agit d'un logiciel espion !! Donc j'ai regarder un peu sur les forum et j'ai vue qu'il fallait faire un scan avec hijackthis ce que j'ai fait donc je vous post mon résultat directement :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:32:36, on 26/07/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:32:36, on 26/07/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\hp\support\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Windows\ZSSnp211.exe
C:\Windows\Domino.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Windows\system32\schtasks.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\ehome\ehmsas.exe
c:\users\geoffrey\appdata\local\cygmc.exe
C:\hp\kbd\kbd.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Logitech\Profiler\LWEmon.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Steam\Steam.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\geoffrey\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com?o=1607
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&loca...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&loca...
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb127\Dealio.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb127\Dealio.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
O4 - HKLM\..\Run: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [SunJavaUpdateReg] "C:\Windows\system32\jureg.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [ZSSnp211] C:\Windows\ZSSnp211.exe
O4 - HKLM\..\Run: [Domino] C:\Windows\Domino.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [au] C:\Program Files\Dealio\DealioAU.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [H2O] C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [Windows] "C:\Users\Public\Public Documents\Windows Movie Player\player.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [cygmc] "c:\users\geoffrey\appdata\local\cygmc.exe" cygmc
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: OneNote 2007 - Capture d'écran et lancement.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Startup: RollerCoaster Tycoon 3 Registration.lnk = C:\Users\geoffrey\AppData\Local\Temp\{0FB657AB-FFF9-4EDA-9970-CF9E74E61444}\{907B4640-266B-4A21-92FB-CD1A86CD0F63}\ATR1.exe
O4 - Startup: RollerCoaster Tycoon 3_ Wild Registration.lnk = C:\Users\geoffrey\AppData\Local\Temp\{D513D1FD-0A76-4E70-A671-7425A085F8AE}\{45653847-497F-47BB-A878-46FBDE34A3E0}\ATR1.exe
O8 - Extra context menu item: Compare Prices with &Dealio - C:\Users\geoffrey\AppData\LocalLow\Dealio\kb127\res\DealioSearch.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll
O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll
O13 - Gopher Prefix:
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: ASKService - Unknown owner - C:\Program Files\AskBarDis\bar\bin\AskService.exe
O23 - Service: ASKUpgrade - Unknown owner - C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: DiRT Drivers Auto Removal (pr2ah4nc) (pr2ah4nc) - CODEMASTERS - C:\Windows\system32\pr2ah4nc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

--
End of file - 10651 bytes

Voila donc après bah j'attends avec impatience une réponse parce que je ne sait vraiment pas quoi faire après avoir fait ce scan. A+

Autres pages sur : resolu form1 virus

a c 267 8 Sécurité
27 Juillet 2009 15:45:55

Bonjour,

Citation :
O4 - HKCU\..\Run: [cygmc] "c:\users\geoffrey\appdata\local\cygmc.exe" cygmc

--> Infection Navipromo.

  • Désactive l'UAC le temps de la désinfection.
  • Télécharge Navilog1 (de IL-MAFIOSO) sur ton Bureau.
  • Double-clique sur Navilog1.exe afin de lancer l'installation.
  • Puis double-clique sur Navilog1 présent sur le Bureau.
    (Sous Vista, clique droit sur le raccourci de Navilog1 et choisis Exécuter en tant qu'administrateur)
  • Appuie sur F ou f puis valide par Entrée.
  • Appuie sur une touche de ton clavier à chaque fois que cela est demandé, tu arriveras au menu des options.
  • Choisis l'option 1 et appuie sur la touche Entrée pour valider ton choix.
  • Patiente le temps du scan. Il te sera peut-être demandé de redémarrer ton PC.
  • Patiente jusqu'au message : *** Scan terminé le ..... ***
  • Le scan fini, le Bloc-notes contenant le rapport sera affiché, poste le contenu de ce rapport dans ta prochaine réponse.
  • Si le résultat du scan ne s'affiche pas, tu le trouveras dans C:\cleannavi.txt
    27 Juillet 2009 17:01:04

    voila mon rapport:

    Fix Navipromo version 4.0.1 commencé le 27/07/2009 16:16:11,44

    !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
    !!! Postez ce rapport sur le forum pour le faire analyser !!!

    Outil exécuté depuis C:\Program Files\navilog1

    Mise à jour le 18.07.2009 à 11h00 par IL-MAFIOSO

    Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
    X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 5000+ )
    BIOS : Phoenix - AwardBIOS v6.00PG
    USER : geoffrey ( Not Administrator ! )
    BOOT : Normal boot

    Antivirus : avast! antivirus 4.8.1229 [VPS 090509-0] 4.8.1229 (Activated)


    C:\ (Local Disk) - NTFS - Total:455 Go (Free:108 Go)
    D:\ (Local Disk) - NTFS - Total:10 Go (Free:1 Go)
    E:\ (CD or DVD)
    H:\ (USB)
    I:\ (USB)
    J:\ (USB)
    K:\ (USB)
    L:\ (CD or DVD)
    M:\ (Local Disk) - NTFS - Total:149 Go (Free:33 Go)


    Recherche executée en mode normal

    Nettoyage exécuté au redémarrage de l'ordinateur


    C:\Program Files\InternetGamebox supprimé !
    c:\progra~2\micros~1\windows\startm~1\programs\InternetGamebox supprimé !
    C:\Users\geoffrey\AppData\Local\virtualstore\Program Files\InternetGamebox supprimé !
    C:\Windows\prefetch\GAME.EXE-86CFD7E7.pf supprimé !
    C:\Windows\prefetch\GAMEOVERLAYUI.EXE-B60F837D.pf supprimé !
    C:\Users\geoffrey\AppData\Local\cygmc.exe supprimé !
    C:\Users\geoffrey\AppData\Local\cygmc.dat supprimé !
    C:\Users\geoffrey\AppData\Local\cygmc_nav.dat supprimé !
    C:\Users\geoffrey\AppData\Local\cygmc_navps.dat supprimé !
    C:\Users\geoffrey\AppData\Local\irboy.dat supprimé !
    C:\Users\geoffrey\AppData\Local\irboy_nav.dat supprimé !
    C:\Users\geoffrey\AppData\Local\irboy_navps.dat supprimé !


    Nettoyage contenu C:\Windows\Temp effectué !
    Nettoyage contenu C:\Users\geoffrey\AppData\Local\Temp effectué !


    *** Sauvegarde du Registre vers dossier Safebackup ***

    sauvegarde du Registre réalisée avec succès !

    *** Nettoyage Registre ***

    Nettoyage Registre Ok






    *** Scan terminé 27/07/2009 16:58:48,37 ***
    Contenus similaires
    a c 267 8 Sécurité
    27 Juillet 2009 17:09:21

    Ne réinstalle pas InternetGamebox, c'est un programme piégé.

  • Désinstalle Navilog1.

  • Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.
  • Double-clique sur RSIT.exe afin de lancer le programme.
    (Sous Vista, il faut cliquer droit sur RSIT.exe et choisir Exécuter en tant qu'administrateur)
  • Clique sur Continue à l'écran Disclaimer.
  • Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.
  • Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches).

    Note : les rapports sont sauvegardés dans le dossier C:\rsit.
    27 Juillet 2009 17:35:58

    Voila mes deux rapport d'abbord le log.txd:

    Logfile of random's system information tool 1.06 (written by random/random)
    Run by geoffrey at 2009-07-27 17:21:32
    Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
    System drive C: has 111 GB (24%) free of 466 GB
    Total RAM: 3070 MB (65% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 17:21:39, on 27/07/2009
    Platform: Windows Vista SP1 (WinNT 6.00.1905)
    MSIE: Internet Explorer v8.00 (8.00.6001.18702)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\Dwm.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\Explorer.EXE
    C:\Windows\system32\conime.exe
    C:\hp\support\hpsysdrv.exe
    C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
    C:\Program Files\Alwil Software\Avast4\ashDisp.exe
    C:\Windows\ZSSnp211.exe
    C:\Windows\system32\schtasks.exe
    C:\Windows\Domino.exe
    C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
    C:\Windows\System32\rundll32.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Windows\ehome\ehtray.exe
    C:\Program Files\DAEMON Tools Lite\daemon.exe
    C:\Program Files\Steam\Steam.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Windows\ehome\ehmsas.exe
    C:\hp\kbd\kbd.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Windows\system32\SearchFilterHost.exe
    C:\Users\geoffrey\Downloads\RSIT.exe
    C:\Program Files\trend micro\geoffrey.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com?o=1607
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&loca...
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&loca...
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O1 - Hosts: ::1 localhost
    O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
    O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb127\Dealio.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll
    O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
    O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
    O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb127\Dealio.dll
    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
    O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
    O4 - HKLM\..\Run: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
    O4 - HKLM\..\Run: [SunJavaUpdateReg] "C:\Windows\system32\jureg.exe"
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [ZSSnp211] C:\Windows\ZSSnp211.exe
    O4 - HKLM\..\Run: [Domino] C:\Windows\Domino.exe
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [au] C:\Program Files\Dealio\DealioAU.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [H2O] C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
    O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
    O4 - HKCU\..\Run: [Windows] "C:\Users\Public\Public Documents\Windows Movie Player\player.exe"
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
    O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
    O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
    O4 - Startup: OneNote 2007 - Capture d'écran et lancement.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
    O4 - Startup: RollerCoaster Tycoon 3 Registration.lnk = C:\Users\geoffrey\AppData\Local\Temp\{0FB657AB-FFF9-4EDA-9970-CF9E74E61444}\{907B4640-266B-4A21-92FB-CD1A86CD0F63}\ATR1.exe
    O4 - Startup: RollerCoaster Tycoon 3_ Wild Registration.lnk = C:\Users\geoffrey\AppData\Local\Temp\{D513D1FD-0A76-4E70-A671-7425A085F8AE}\{45653847-497F-47BB-A878-46FBDE34A3E0}\ATR1.exe
    O8 - Extra context menu item: Compare Prices with &Dealio - C:\Users\geoffrey\AppData\LocalLow\Dealio\kb127\res\DealioSearch.html
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
    O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
    O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe (file missing)
    O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe (file missing)
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll
    O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll
    O13 - Gopher Prefix:
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
    O23 - Service: ASKService - Unknown owner - C:\Program Files\AskBarDis\bar\bin\AskService.exe
    O23 - Service: ASKUpgrade - Unknown owner - C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
    O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
    O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
    O23 - Service: DiRT Drivers Auto Removal (pr2ah4nc) (pr2ah4nc) - CODEMASTERS - C:\Windows\system32\pr2ah4nc.exe
    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

    --
    End of file - 10754 bytes

    ======Scheduled tasks folder======

    C:\Windows\tasks\cxokfige.job

    ======Registry dump======

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
    Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
    AskBar BHO - C:\Program Files\AskBarDis\bar\bin\askBar.dll [2008-12-09 333192]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
    Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2008-07-07 1562448]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6A87B991-A31F-4130-AE72-6D0C294BF082}]
    DealioBHO Class - C:\Program Files\Dealio\kb127\Dealio.dll [2008-05-26 3170144]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
    Windows Live Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2006-08-31 322368]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
    Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-12 259696]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
    Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll [2009-06-19 669168]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
    Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll [2009-04-27 470512]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
    Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-05-21 41368]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}
    {3041d03e-fd4b-44e0-b742-2d9b88305f98} - Ask Toolbar - C:\Program Files\AskBarDis\bar\bin\askBar.dll [2008-12-09 333192]
    {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - Dealio - C:\Program Files\Dealio\kb127\Dealio.dll [2008-05-26 3170144]
    {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-12 259696]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]
    "hpsysdrv"=c:\hp\support\hpsysdrv.exe [2007-04-18 65536]
    "KBD"=C:\HP\KBD\KbdStub.EXE [2006-12-08 65536]
    "OsdMaestro"=C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe [2007-02-15 118784]
    "HP Health Check Scheduler"=[ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe []
    "SunJavaUpdateReg"=C:\Windows\system32\jureg.exe [2007-04-07 54936]
    ""= []
    "avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-02-05 81000]
    "ZSSnp211"=C:\Windows\ZSSnp211.exe [2007-04-06 57344]
    "Domino"=C:\Windows\Domino.exe [2006-08-18 49152]
    "HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]
    "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]
    "NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2009-02-18 13683232]
    "NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2009-02-18 92704]
    "au"=C:\Program Files\Dealio\DealioAU.exe [2008-05-26 595296]
    "SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-05-21 148888]
    "H2O"=C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe [2005-10-23 385024]

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-19 1233920]
    "swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-03-12 39408]
    "ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952]
    "DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-07-24 490952]
    "Windows"=C:\Users\Public\Public Documents\Windows Movie Player\player.exe [2009-02-11 679936]
    "msnmsgr"=C:\Program Files\MSN Messenger\msnmsgr.exe [2007-01-19 5674352]
    "ares"=C:\Program Files\Ares\Ares.exe [2009-02-03 1004544]
    "Start WingMan Profiler"= []
    "Steam"=c:\program files\steam\steam.exe [2009-06-17 1217784]
    "WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240]
    "Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-07-16 25604904]

    C:\Users\geoffrey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
    OneNote 2007 - Capture d'écran et lancement.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
    RollerCoaster Tycoon 3 Registration.lnk - C:\Users\geoffrey\AppData\Local\Temp\{0FB657AB-FFF9-4EDA-9970-CF9E74E61444}\{907B4640-266B-4A21-92FB-CD1A86CD0F63}\ATR1.exe
    RollerCoaster Tycoon 3_ Wild Registration.lnk - C:\Users\geoffrey\AppData\Local\Temp\{D513D1FD-0A76-4E70-A671-7425A085F8AE}\{45653847-497F-47BB-A878-46FBDE34A3E0}\ATR1.exe

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
    "EnableLUA"=0
    "dontdisplaylastusername"=0
    "legalnoticecaption"=
    "legalnoticetext"=
    "shutdownwithoutlogon"=1
    "undockwithoutlogon"=1
    "EnableUIADesktopToggle"=0

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "C:\Program Files\FlashGet Network\FlashGet universal\FlashGet.exe"="C:\Program Files\FlashGet Network\FlashGet universal\FlashGet.exe:*:Enabled:Flashget2"
    "C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdate.exe"="C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdate.exe:*:Enabled:FGLiveUpdate"
    "C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdateEx.exe"="C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdateEx.exe:*:Enabled:FGLiveUpdateEx"

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\F]
    shell\Auto\command - AdobeR.exe e
    shell\AutoRun\command - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\N]
    shell\Auto\command - AdobeR.exe e
    shell\AutoRun\command - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL N:\

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d2f359e4-e992-11dc-bb97-001e901e6a9c}]
    shell\AutoRun\command - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL H:\copy.exe

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{fec94cc6-68c6-11dd-a940-001e901e6a9c}]
    shell\Auto\command - AdobeR.exe e
    shell\AutoRun\command - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL N:\


    ======File associations======

    .js - edit - C:\Windows\System32\Notepad.exe %1
    .js - open - C:\Windows\System32\WScript.exe "%1" %*
    .reg - open - "regedit.exe" "%1"

    ======List of files/folders created in the last 1 months======

    2009-07-27 17:21:33 ----D---- C:\Program Files\trend micro
    2009-07-27 17:21:32 ----D---- C:\rsit
    2009-07-27 14:08:11 ----A---- C:\cleannavi.txt
    2009-07-27 14:06:57 ----D---- C:\Program Files\Navilog1
    2009-07-26 19:45:35 ----D---- C:\Users\geoffrey\AppData\Roaming\skypePM
    2009-07-26 19:43:14 ----D---- C:\Users\geoffrey\AppData\Roaming\Skype
    2009-07-26 19:42:43 ----D---- C:\Program Files\Common Files\Skype
    2009-07-26 19:42:42 ----RD---- C:\Program Files\Skype
    2009-07-26 19:42:37 ----D---- C:\ProgramData\Skype
    2009-07-18 17:37:48 ----A---- C:\Windows\system32\t2embed.dll
    2009-07-18 17:37:48 ----A---- C:\Windows\system32\fontsub.dll
    2009-07-18 17:37:48 ----A---- C:\Windows\system32\atmfd.dll
    2009-07-18 17:37:47 ----A---- C:\Windows\system32\dciman32.dll
    2009-07-10 12:25:16 ----D---- C:\Users\geoffrey\AppData\Roaming\Steinberg
    2009-07-10 12:24:55 ----A---- C:\Windows\system32\rmbe3260.dll
    2009-07-10 12:24:55 ----A---- C:\Windows\system32\ra32sipr.dll
    2009-07-10 12:24:55 ----A---- C:\Windows\system32\ra32dnet.dll
    2009-07-10 12:24:55 ----A---- C:\Windows\system32\ra3228_8.dll
    2009-07-10 12:24:54 ----A---- C:\Windows\system32\ra3214_4.dll
    2009-07-10 12:24:54 ----A---- C:\Windows\system32\pngu3263.dll
    2009-07-10 12:24:54 ----A---- C:\Windows\system32\pneng50.dll
    2009-07-10 12:24:54 ----A---- C:\Windows\system32\pncrt.dll
    2009-07-10 12:24:54 ----A---- C:\Windows\system32\pnc3250.dll
    2009-07-10 12:24:54 ----A---- C:\Windows\system32\msvcp70.dll
    2009-07-10 12:24:54 ----A---- C:\Windows\system32\encdnet.dll
    2009-07-10 12:24:54 ----A---- C:\Windows\system32\decdnet.dll
    2009-07-10 12:24:53 ----D---- C:\Program Files\ASIO
    2009-07-10 12:24:06 ----D---- C:\Program Files\Cubase SX 3
    2009-07-10 12:22:29 ----A---- C:\Windows\system32\SynsoLChk.dll
    2009-07-10 12:22:28 ----D---- C:\Program Files\Syncrosoft
    2009-07-10 12:06:22 ----D---- C:\Users\geoffrey\AppData\Roaming\Anvil Studio
    2009-07-08 20:42:26 ----D---- C:\Graphics
    2009-07-08 11:30:43 ----D---- C:\Program Files\Euro Truck Simulator
    2009-07-07 12:29:56 ----D---- C:\Program Files\XnView
    2009-07-07 11:21:55 ----D---- C:\Program Files\VTFEdit
    2009-07-07 11:08:14 ----D---- C:\Users\geoffrey\AppData\Roaming\IrfanView
    2009-07-07 11:08:13 ----D---- C:\Program Files\IrfanView
    2009-07-07 11:05:12 ----D---- C:\Program Files\Paint.NET
    2009-07-07 09:52:58 ----D---- C:\Program Files\SprayR
    2009-07-04 17:35:12 ----N---- C:\Windows\system32\mwgfxcopy.exe
    2009-07-04 17:35:12 ----N---- C:\Windows\system32\mwgfx24.dll
    2009-07-04 17:35:12 ----N---- C:\Windows\system32\mwgfx.dll
    2009-07-04 17:35:12 ----N---- C:\Windows\system32\mwdds.dll
    2009-07-04 17:35:12 ----N---- C:\Windows\system32\mwace.dll
    2009-06-28 11:00:30 ----A---- C:\Windows\system32\LMRTREND.dll
    2009-06-28 11:00:29 ----A---- C:\Windows\system32\LMRT.dll
    2009-06-28 11:00:29 ----A---- C:\Windows\system32\dxtmsft3.dll
    2009-06-28 11:00:28 ----A---- C:\Windows\system32\unam4ie.exe
    2009-06-28 11:00:28 ----A---- C:\Windows\system32\strmdll.dll
    2009-06-28 11:00:23 ----A---- C:\Windows\system32\vidx16.dll
    2009-06-28 11:00:23 ----A---- C:\Windows\system32\danim.dll
    2009-06-28 11:00:22 ----A---- C:\Windows\system32\qcut.dll
    2009-06-28 11:00:21 ----A---- C:\Windows\system32\w95inf32.dll
    2009-06-28 11:00:21 ----A---- C:\Windows\system32\w95inf16.dll

    ======List of files/folders modified in the last 1 months======

    2009-07-27 17:21:39 ----D---- C:\Windows\Prefetch
    2009-07-27 17:21:33 ----RD---- C:\Program Files
    2009-07-27 17:04:16 ----D---- C:\Windows\System32
    2009-07-27 17:04:16 ----D---- C:\Windows\inf
    2009-07-27 17:04:16 ----A---- C:\Windows\system32\PerfStringBackup.INI
    2009-07-27 17:01:57 ----D---- C:\Program Files\Mozilla Firefox
    2009-07-27 17:00:03 ----D---- C:\Program Files\Steam
    2009-07-27 16:58:04 ----D---- C:\Windows\Temp
    2009-07-27 16:14:23 ----D---- C:\ProgramData
    2009-07-27 06:59:16 ----SHD---- C:\System Volume Information
    2009-07-26 23:54:09 ----D---- C:\Program Files\Vuze
    2009-07-26 23:54:07 ----D---- C:\Users\geoffrey\AppData\Roaming\Azureus
    2009-07-26 19:43:13 ----D---- C:\Windows\system32\Tasks
    2009-07-26 19:42:59 ----SHD---- C:\Windows\Installer
    2009-07-26 19:42:43 ----D---- C:\Program Files\Common Files
    2009-07-26 18:00:41 ----D---- C:\Windows\winsxs
    2009-07-26 18:00:40 ----D---- C:\Program Files\Internet Explorer
    2009-07-26 01:44:12 ----D---- C:\Windows\system32\catroot
    2009-07-18 18:02:46 ----D---- C:\Program Files\Windows Mail
    2009-07-18 18:00:44 ----D---- C:\Windows\Debug
    2009-07-18 17:37:43 ----D---- C:\Windows\system32\catroot2
    2009-07-11 17:25:04 ----AD---- C:\Windows
    2009-07-11 07:16:00 ----D---- C:\Users\geoffrey\AppData\Roaming\LimeWire
    2009-07-10 12:24:54 ----RSD---- C:\Windows\Fonts
    2009-07-10 12:23:20 ----D---- C:\Windows\system32\drivers
    2009-07-08 16:16:37 ----HD---- C:\Program Files\InstallShield Installation Information
    2009-07-08 11:32:32 ----RSD---- C:\Windows\assembly
    2009-07-07 17:10:56 ----A---- C:\Windows\system32\mrt.exe
    2009-07-07 12:30:05 ----D---- C:\Users\geoffrey\AppData\Roaming\XnView
    2009-07-05 10:35:39 ----D---- C:\Program Files\GTR-Evolution
    2009-07-04 23:14:14 ----D---- C:\Windows\system32\directx
    2009-07-02 19:08:01 ----D---- C:\Program Files\Common Files\Steam
    2009-06-30 22:47:56 ----SD---- C:\Users\geoffrey\AppData\Roaming\Microsoft
    2009-06-28 11:00:29 ----D---- C:\Program Files\Windows Media Player
    2009-06-28 11:00:28 ----D---- C:\Windows\Help

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2009-02-05 23152]
    R1 aswSP;avast! Self Protection; C:\Windows\system32\drivers\aswSP.sys [2009-02-05 114768]
    R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2009-02-05 51376]
    R2 aswFsBlk;aswFsBlk; C:\Windows\system32\DRIVERS\aswFsBlk.sys [2009-02-05 20560]
    R2 aswMonFlt;aswMonFlt; C:\Windows\system32\DRIVERS\aswMonFlt.sys [2009-02-05 51792]
    R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2008-11-21 271360]
    R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2008-11-21 18048]
    R3 CLEDX;Team H2O CLEDX service; C:\Windows\system32\DRIVERS\cledx.sys [2005-05-09 33792]
    R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2009-03-12 2342688]
    R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvmfdx32.sys [2007-11-17 1040544]
    R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2009-02-18 7765504]
    R3 Ps2;PS2; C:\Windows\system32\DRIVERS\PS2.sys [2005-12-12 19072]
    R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\WmBEnum.sys [2006-06-06 11136]
    R3 WmFilter;Logitech Gaming HID Filter Driver; C:\Windows\system32\drivers\WmFilter.sys [2006-06-06 21632]
    R3 WmHidLo;Logitech Gaming USB Filter Driver; C:\Windows\system32\drivers\WmHidLo.sys [2006-06-06 20864]
    R3 WmXlCore;Logitech WingMan Translation Layer Driver; C:\Windows\system32\drivers\WmXlCore.sys [2006-06-06 46208]
    R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]
    R3 xusb21;Xbox 360 Wireless Receiver Driver Service 21; C:\Windows\system32\DRIVERS\xusb21.sys [2007-08-28 55808]
    S2 Nsynas32;Nsynas32; C:\Windows\system32\drivers\Nsynas32.sys []
    S3 alipcapx;alipcapx; C:\Windows\system32\drivers\alipcapx.sys []
    S3 ASPI;Advanced SCSI Programming Interface Driver; \??\C:\Windows\System32\DRIVERS\ASPI32.sys [2002-07-17 84832]
    S3 catchme;catchme; \??\C:\Users\geoffrey\AppData\Local\Temp\catchme.sys []
    S3 Dot4;Pilote MS IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4.sys [2008-01-19 131584]
    S3 Dot4Print;Pilote de classe Imprimante pour IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2008-01-19 16384]
    S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2008-01-19 36864]
    S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys [2009-03-15 14336]
    S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
    S3 ezplay;VSO Software ezplay; C:\Windows\System32\Drivers\ezplay.sys [2008-08-14 94208]
    S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
    S3 mcdbus;Driver for MagicISO SCSI Host Controller; C:\Windows\system32\DRIVERS\mcdbus.sys [2008-07-28 116736]
    S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
    S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
    S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
    S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
    S3 NPF;Netgroup Packet Filter; C:\Windows\system32\drivers\npf.sys []
    S3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2008-08-14 47360]
    S3 SymIM;Symantec Network Security Intermediate Filter Service; C:\Windows\system32\DRIVERS\SymIM.sys []
    S3 SymIMMP;SymIMMP; C:\Windows\system32\DRIVERS\SymIM.sys []
    S3 usbscan;Pilote de scanneur USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328]
    S3 WmVirHid;Logitech Virtual Hid Device Driver; C:\Windows\system32\drivers\WmVirHid.sys [2006-06-06 6400]
    S3 xnacc;Contrôleur XBOX 360 pour le service de pilote Windows; C:\Windows\system32\DRIVERS\xnacc.sys [2008-01-19 521216]
    S3 ZSMC211;ZSMC USB PC Camera (ZS0211); C:\Windows\System32\Drivers\ZS211.sys [2007-08-03 1470592]
    S4 nvrd32;NVIDIA nForce RAID Driver; C:\Windows\system32\drivers\nvrd32.sys [2007-12-07 131616]
    S4 nvsmu;nvsmu; C:\Windows\system32\drivers\nvsmu.sys [2007-10-12 13312]
    S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]

    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R2 ASKService;ASKService; C:\Program Files\AskBarDis\bar\bin\AskService.exe [2008-12-09 464264]
    R2 ASKUpgrade;ASKUpgrade; C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe [2008-12-09 234888]
    R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-02-05 18752]
    R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-02-05 138680]
    R2 HP Health Check Service;HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2007-09-19 65536]
    R2 LightScribeService;LightScribeService Direct Disc Labeling Service; c:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-11-19 79136]
    R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2009-02-18 207392]
    R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2009-05-02 66872]
    R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2007-01-09 272024]
    R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-02-05 254040]
    R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-02-05 352920]
    R3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2009-07-02 316664]
    S2 pr2ah4nc;DiRT Drivers Auto Removal (pr2ah4nc); C:\Windows\system32\pr2ah4nc.exe [2007-05-18 407152]
    S3 aspnet_state;Service d'état ASP.NET; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-27 34312]
    S3 Boonty Games;Boonty Games; C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe [2008-10-13 69120]
    S3 GameConsoleService;GameConsoleService; C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe [2007-07-24 181800]
    S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-27 182768]
    S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
    S3 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfservice.exe [2009-03-15 216232]
    S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
    S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
    S3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\MSN Messenger\usnsvc.exe [2007-01-19 97136]

    -----------------EOF-----------------

    ET LE INFO.TXD:

    info.txt logfile of random's system information tool 1.06 2009-07-27 17:21:41

    ======Uninstall list======

    -->"C:\Program Files\HP Games\Bejeweled 2 Deluxe\Uninstall.exe"
    -->"C:\Program Files\HP Games\Blasterball 2 Revolution\Uninstall.exe"
    -->"C:\Program Files\HP Games\Blasterball 3\Uninstall.exe"
    -->"C:\Program Files\HP Games\Bricks of Egypt\Uninstall.exe"
    -->"C:\Program Files\HP Games\Chicken Invaders 3 - Revenge of the Yolk\Uninstall.exe"
    -->"C:\Program Files\HP Games\Chuzzle Deluxe\Uninstall.exe"
    -->"C:\Program Files\HP Games\Cooking Dash\Uninstall.exe"
    -->"C:\Program Files\HP Games\Crystal Maze\Uninstall.exe"
    -->"C:\Program Files\HP Games\Diner Dash\Uninstall.exe"
    -->"C:\Program Files\HP Games\FATE\Uninstall.exe"
    -->"C:\Program Files\HP Games\Fish Tycoon\Uninstall.exe"
    -->"C:\Program Files\HP Games\Gem Shop\Uninstall.exe"
    -->"C:\Program Files\HP Games\Insaniquarium Deluxe\Uninstall.exe"
    -->"C:\Program Files\HP Games\Jewel Quest\Uninstall.exe"
    -->"C:\Program Files\HP Games\Magic Academy\Uninstall.exe"
    -->"C:\Program Files\HP Games\Mah Jong Quest\Uninstall.exe"
    -->"C:\Program Files\HP Games\My HP Game Console\Uninstall.exe"
    -->"C:\Program Files\HP Games\Ocean Express\Uninstall.exe"
    -->"C:\Program Files\HP Games\Peggle\Uninstall.exe"
    -->"C:\Program Files\HP Games\Penguins!\Uninstall.exe"
    -->"C:\Program Files\HP Games\Polar Bowler\Uninstall.exe"
    -->"C:\Program Files\HP Games\Polar Golfer Pineapple Cup\Uninstall.exe"
    -->"C:\Program Files\HP Games\Polar Golfer\Uninstall.exe"
    -->"C:\Program Files\HP Games\Puzzle Express\Uninstall.exe"
    -->"C:\Program Files\HP Games\Shooting Stars Pool\Uninstall.exe"
    -->"C:\Program Files\HP Games\Slingo Deluxe\Uninstall.exe"
    -->"C:\Program Files\HP Games\Sudoku Quest\Uninstall.exe"
    -->"C:\Program Files\HP Games\Super Granny\Uninstall.exe"
    -->"C:\Program Files\HP Games\Tradewinds\Uninstall.exe"
    -->"C:\Program Files\HP Games\Virtual Villagers - A New Home\Uninstall.exe"
    -->"C:\Program Files\HP Games\Zuma Deluxe\Uninstall.exe"
    -->MsiExec /X{DD1865F0-AD73-40FB-B23E-1822E02396FF}
    3DVIA player 4.1-->MsiExec.exe /X{4E868D3D-6EEB-4273-926C-2287236B5B79}
    Activation Assistant for the 2007 Microsoft Office suites-->"C:\ProgramData\{B3C2C1CD-6B77-4A96-B670-F734AC2A1CBC}\Microsoft Office Activation Assistant.exe" REMOVE=TRUE MODIFY=FALSE
    Adobe Flash Player 10 ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
    Adobe Flash Player 10 Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
    Adobe Reader 8.1.6 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81300000003}
    Adobe Shockwave Player 11-->C:\Windows\system32\adobe\SHOCKW~1\UNWISE.EXE C:\Windows\system32\Adobe\SHOCKW~1\Install.log
    Alt WAV MP3 WMA OGG Converter 7.2-->"C:\Program Files\Alt WAV MP3 WMA OGG Converter\unins000.exe"
    Analyseur et SDK MSXML 4.0 SP2-->MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
    Anno 1701-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A2433A63-5F5D-40E5-B529-9123C2B3E734}\setup.exe" -l0x9 -removeonly
    Anti-Leech Plugin for Mozilla, Opera, Netscape-->C:\Program Files\Anti-Leech\ALNN\setup2.exe -u
    Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
    Ares 2.1.1-->"C:\Program Files\Ares\uninstall.exe"
    avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
    AVIConverter 3.0-->C:\Program Files\AVIConverter\uninst.exe
    Banshee Screamer Alarm 2.55-->"C:\Program Files\Banshee Screamer Alarm\unins000.exe"
    Blender (remove only)-->"C:\Program Files\Blender Foundation\Blender\uninstall.exe"
    Bus Driver-->"C:\Windows\Bus Driver\uninstall.exe" "/U:C:\Program Files\Bus Driver\Uninstall\uninstall.xml"
    Call of Duty(R) 2-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{D0A05794-48C2-4424-A15A-9F20FCFDD374}
    Call of Duty(R) 4 - Modern Warfare(TM)-->C:\Program Files\InstallShield Installation Information\{E48469CC-635E-4FD5-A122-1497C286D217}\setup.exe -runfromtemp -l0x040c
    CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
    Choice Guard-->MsiExec.exe /I{EBD5E7A9-DBB8-4E24-AE3A-CF9390AF1CCB}
    Dealio Toolbar 3.4-->MsiExec.exe /X{6105648C-0C3C-481D-8C11-1F4952D6FB53}
    Dedicated Server-->"C:\Program Files\Steam\steam.exe" steam://uninstall/5
    DiRT-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{57B89E30-0BBA-4F20-9F2C-8E8CDE1CEDB6}\setup.exe" -l0x40c -removeonly
    Dofus 1.26.0-->C:\Program Files\Dofus\uninstall.exe
    Editeur Handling GTA-SA v2.0-->C:\Program Files\Editeur Handling GTA-SA\Uninstal.exe
    Euro Truck Simulator-->C:\Program Files\Euro Truck Simulator\Uninstal_EuroTruckSimulator.exe
    Fable - The Lost Chapters-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{C3C9EB3D-24FA-4462-B784-0EC6AAFCD2DD}
    ffdshow [rev 918] [2007-02-12]-->"C:\Program Files\ffdshow\unins000.exe"
    Fraps-->"C:\Fraps\uninstall.exe"
    Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_9DE96A29E721D90A.exe" /uninstall
    Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
    GTA San Andreas-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}\setup.exe" -l0x40c -removeonly
    GTR 2 1.0.0.0-->"C:\Program Files\SimBin\GTR 2\Support\unins000.exe"
    Half-Life 2-->"C:\Program Files\Steam\steam.exe" steam://uninstall/220
    Hewlett-Packard Active Check-->MsiExec.exe /X{254C37AA-6B72-4300-84F6-98A82419187E}
    Hewlett-Packard Asset Agent for Health Check-->MsiExec.exe /X{669D4A35-146B-4314-89F1-1AC3D7B88367}
    HijackThis 2.0.2-->"C:\Users\geoffrey\Desktop\HijackThis.exe" /uninstall
    Hitman Blood Money-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A804B134-F03D-4EFD-9BC0-DCD257AA1B22}\setup.exe" -l0xc0c -removeonly
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
    HP Customer Experience Enhancements-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C8D47273-7A1A-4614-A3D8-263632D8A5ED}\setup.exe" -l0x9 -removeonly
    HP Customer Feedback-->MsiExec.exe /I{9DBA770F-BF73-4D39-B1DF-6035D95268FC}
    HP Easy Setup - Frontend-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1BCE2581-B7CA-4BB4-BDFB-D113506AA38B}\setup.exe" -l0x9 -removeonly
    HP Games-->"C:\Program Files\HP Games\Uninstall.exe"
    HP On-Screen Cap/Num/Scroll Lock Indicator-->C:\Windows\system32\OsdRemove.exe
    HP Photosmart Essential 2.5-->C:\Program Files\HP\Digital Imaging\PhotoSmartEssential\hpzscr01.exe -datfile hpqbud13.dat
    HP Picasso Media Center Add-In-->MsiExec.exe /I{55979C41-7D6A-49CC-B591-64AC1BBE2C8B}
    HP Update-->MsiExec.exe /X{FE57DE70-95DE-4B64-9266-84DA811053DB}
    IsoBuster 2.5-->"C:\Program Files\Smart Projects\IsoBuster\Uninst\unins000.exe"
    Java(TM) 6 Update 14-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216012FF}
    Java(TM) SE Runtime Environment 6 Update 1-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}
    Kit Runtime VB6.0-->C:\WINDOWS\st6unst.exe -n "C:\Windows\system32\ST6UNST.LOG"
    Le Centre de Contrôle de Licences de Syncrosoft-->C:\PROGRA~1\SYNCRO~1\UNWISE.EXE C:\PROGRA~1\SYNCRO~1\INSTALL.LOG
    le Parrain® LE JEU VIDEO-->C:\Program Files\Electronic Arts\le Parrain® LE JEU VIDEO\EAUninstall.exe
    Les Sims™ 3-->"C:\Program Files\InstallShield Installation Information\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}\Sims3Setup.exe" -runfromtemp -l0x040c -removeonly
    LightScribe System Software 1.10.23.1-->MsiExec.exe /X{0E19A83E-F53B-40CF-8C91-96F32D955E6A}
    LimeWire 4.18.8-->"C:\Program Files\LimeWire\uninstall.exe"
    Logitech Gaming Software-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{13AA6556-BA96-4468-A8B4-1AD4A75AD5A0}\setup.exe" -l0x40c -removeonly
    Ma-Config.com-->MsiExec.exe /X{560BD6E0-0BA6-43AF-B423-E1DF4D2EB3C3}
    Magic ISO Maker v5.5 (build 0273)-->C:\PROGRA~1\MagicISO\UNWISE.EXE C:\PROGRA~1\MagicISO\INSTALL.LOG
    MagicDisc 2.7.105-->C:\PROGRA~1\MAGICD~1\UNWISE.EXE C:\PROGRA~1\MAGICD~1\INSTALL.LOG
    Microsoft .NET Framework 1.1 Hotfix (KB929729)-->"C:\Windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\Windows\Microsoft.NET\Framework\v1.1.4322\Updates\M929729\M929729Uninstall.msp"
    Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
    Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
    Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
    Microsoft .NET Framework 3.5 SP1-->C:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
    Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
    Microsoft Games for Windows - LIVE Redistributable-->MsiExec.exe /X{59E4543A-D49D-4489-B445-473D763C79AF}
    Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
    Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
    Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
    Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
    Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-00A1-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
    Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
    Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
    Microsoft Office Home and Student 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL
    Microsoft Office Home and Student 2007-->MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}
    Microsoft Office OneNote MUI (French) 2007-->MsiExec.exe /X{90120000-00A1-040C-0000-0000000FF1CE}
    Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
    Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
    Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
    Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
    Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
    Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
    Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
    Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
    Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {14809F99-C601-4D4A-9391-F1E8FAA964C5}
    Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}
    Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
    Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {F580DDD5-8D37-4998-968E-EBB76BB86787}
    Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
    Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {187308AB-5FA7-4F14-9AB9-D290383A10D9}
    Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
    Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
    Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
    Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
    Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
    Microsoft Works-->MsiExec.exe /I{3B160861-7250-451E-B5EE-8B92BF30A710}
    Microsoft WSE 3.0 Runtime-->MsiExec.exe /X{E3E71D07-CD27-46CB-8448-16D4FB29AA13}
    Mirror's Edge™-->MsiExec.exe /X{AEDBD563-24BB-4EE3-8366-A654DAC2D988}
    Mise à jour Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {B761869A-B85C-40E2-994C-A1CE78AC8F2C}
    Mise à jour Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {C3DCA38E-005E-41BA-A52A-7C3429F351C3}
    Mise à jour Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {81536A04-DBFB-4DB3-978F-0F284590C223}
    MixVibes DVS uninstall-->C:\Program Files\MixVibesDVS7DEMO\uninstall.exe
    Module de compatibilité pour Microsoft Office System 2007-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
    Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->C:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
    MountDaemon from GermanSoft-->"C:\Program Files\D-Tools\unins000.exe"
    Mozilla Firefox (3.0.12)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
    MP3 Player Utilities 4.00-->MsiExec.exe /I{7784A172-61F1-445E-8368-601607E0DD22}
    MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
    MSXML 4.0 SP2 (KB941833)-->MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF}
    MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
    muvee autoProducer 6.1-->C:\Program Files\InstallShield Installation Information\{5115C036-C0D5-4E1B-81C9-542CA967478A}\muveesetup.exe -removeonly -runfromtemp
    Need for Speed™ ProStreet-->MsiExec.exe /X{2E1A71D5-7897-4F3F-B0E3-B412C86A646D}
    Need for Speed™ Undercover-->MsiExec.exe /X{E6D22FE1-AB5F-42CA-9480-6F70B96DDD88}
    neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
    NetworkAddonMod Beta Version 2006.12.24 française-->C:\Users\geoffrey\Documents\SimCity 4\Plugins\NetworkAddonMod\uninst.exe
    NFO viewer v 2.1-->"C:\Program Files\NFO viewer\unins000.exe"
    NVIDIA Drivers-->C:\Windows\system32\nvuninst.exe UninstallGUI
    NVIDIA PhysX-->MsiExec.exe /X{DD1865F0-AD73-40FB-B23E-1822E02396FF}
    Occuword internet tv & radio 1.5 (DEMO)-->C:\Program Files\Occuword internet tv & radio\DEMO\Uninstall.exe
    OpenAL-->"C:\Program Files\OpenAL\OalinstGridRelease.exe" /U
    Outils de diagnostic du matériel-->C:\Program Files\PC-Doctor 5 for Windows\uninst.exe
    Pacific Poker-->C:\PROGRA~1\PACIFI~1\UNWISE.EXE C:\PROGRA~1\PACIFI~1\INSTALL.LOG
    Paint.NET v3.36-->MsiExec.exe /X{43602F34-1AA3-44FB-AEB2-D08C2C73743F}
    Pcsx2 0.9.6-->MsiExec.exe /I{0E2B767B-EA6A-489B-BF83-8083FE1DB661}
    PoiZone-->C:\Program Files\Image-Line\PoiZone\uninstall.exe
    Power2Go-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{40BF1E83-20EB-11D8-97C5-0009C5020658}\Setup.exe" -uninstall
    PowerDirector-->"C:\Program Files\InstallShield Installation Information\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}\setup.exe" /z-uninstall
    PunkBuster Services-->C:\Windows\system32\pbsvc.exe -u
    Python 2.5-->MsiExec.exe /I{0A2C5854-557E-48C8-835A-3B9F074BDCAA}
    Quick Menu Builder 1.2-->"C:\Program Files\Mattgo27 Apps\Quick Menu Builder\uninstall.exe"
    RACE 07 Offline-->"C:\Program Files\RACE 07 Offline\unins000.exe"
    Race Driver 3-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0297C87B-CC40-446F-865A-031B4FC0CF22}\setup.exe" -l0x40c -removeonly
    Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -removeonly
    rFactor (remove only)-->"C:\Program Files\rFactor\Uninstall.exe"
    Rockstar Games Social Club-->"C:\Program Files\InstallShield Installation Information\{08B3869E-D282-424C-9AFC-870E04A4BA14}\setup.exe" -runfromtemp -l0x040c -removeonly
    RollerCoaster Tycoon® 3-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{907B4640-266B-4A21-92FB-CD1A86CD0F63}\Setup.exe" -l0x9
    Royal Games-->C:\Users\geoffrey\Documents\SimCity 4\Plugins\Tour d'Armor\Uninstal.exe
    SAMSUNG Mobile Modem Driver Set-->C:\Windows\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe
    Samsung Mobile phone USB driver Software-->C:\Windows\system32\Samsung_USB_Drivers\5\SSSDUninstall.exe
    SAMSUNG Mobile USB Modem 1.0 Software-->C:\Windows\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe
    SAMSUNG Mobile USB Modem Software-->C:\Windows\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe
    San Andreas Mod Installer-->"C:\Windows\San Andreas Mod Installer\uninstall.exe" "/U:C:\Program Files\San Andreas Mod Installer\Uninstall\uninstall.xml"
    Security Update for 2007 Microsoft Office System (KB969559)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
    Security Update for 2007 Microsoft Office System (KB969679)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C66E4A6C-6E07-4C63-8CCD-2493B5087C73}
    Security Update for Microsoft Office Excel 2007 (KB969682)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C03803BD-745A-46F8-8557-817DED578780}
    Security Update for Microsoft Office PowerPoint 2007 (KB957789)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D}
    Security Update for Microsoft Office system 2007 (KB969613)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}
    Security Update for Microsoft Office Word 2007 (KB969604)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {CF3D6499-709C-43D0-8908-BC5652656050}
    SEGA Rally-->"C:\Program Files\InstallShield Installation Information\{4A05FF52-4AA8-4681-BC06-5EE7F812A441}\setup.exe" -runfromtemp -l0x040c -removeonly
    SEGA Rally-->MsiExec.exe /I{4A05FF52-4AA8-4681-BC06-5EE7F812A441}
    SimCity 4 Deluxe-->C:\Program Files\Maxis\SimCity 4 Deluxe\EAUninstall.exe
    SimCityTM Sociétés-->MsiExec.exe /X{0B5154C0-8F00-4616-B0AB-6240AE80D9CE}
    Skype web features-->MsiExec.exe /I{541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}
    Skype™ 4.1-->MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
    Solution de clavier multimédia amélioré-->C:\HP\KBD\Install.exe /u
    Spelling Dictionaries Support For Adobe Reader 8-->MsiExec.exe /I{AC76BA86-7AD7-5464-3428-800000000003}
    SprayR 1.0 RC7b-->C:\Program Files\SprayR\uninst.exe
    Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
    Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
    Steinberg Cubase SX v3.1.1.944-->C:\PROGRA~1\CUBASE~1\UNWISE.EXE C:\PROGRA~1\CUBASE~1\INSTALL.LOG
    Steinberg Cubase VST32-->C:\PROGRA~1\STEINB~1\CUBASE~1.1\UNINST~1.EXE C:\PROGRA~1\STEINB~1\CUBASE~1.1\Install.log
    SyncroSoft Emu (Remove only)-->C:\Program Files\SyncroSoft\Pos\H2O\Uninst.exe
    Test Drive Unlimited-->MsiExec.exe /X{C37A0BC1-52EE-4F97-8223-5CA9FC0357B0}
    The Sims 2 Double Deluxe-->C:\Program Files\EA GAMES\The Sims 2 Double Deluxe\EAUninstall.exe
    Tom Clancy's Rainbow Six Vegas 2-->"C:\Program Files\InstallShield Installation Information\{FD416706-875C-4B0B-A23A-9E740DAE029E}\setup.exe" -runfromtemp -l0x040c -removeonly
    Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
    Us long trucks road simulator-->"C:\Program Files\Anuman interactive\Us long trucks road simulator\unins000.exe"
    Vdesk 2 & BTEWin-->"C:\Program Files\Vdesk 2 & BTEWin\unins000.exe"
    Ventrilo Client-->MsiExec.exe /I{789289CA-F73A-4A16-A331-54D498CE069F}
    Virtual DJ - Atomix Productions-->C:\PROGRA~1\VIRTUA~1\UNWISE.EXE C:\PROGRA~1\VIRTUA~1\INSTALL.LOG
    VLC media player 0.9.8a-->C:\Program Files\VideoLAN\VLC\uninstall.exe
    VTFEdit 1.2.5-->"C:\Program Files\VTFEdit\unins000.exe"
    Vuze Toolbar-->"C:\Program Files\AskBarDis\unins000.exe"
    Vuze-->C:\Program Files\Vuze\uninstall.exe
    Windows Live Messenger-->MsiExec.exe /I{F6326B60-1B1D-4ABF-BFCD-7B7404F44411}
    Windows Live Sign-in Assistant-->MsiExec.exe /I{49672EC2-171B-47B4-8CE7-50D7806360D7}
    Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
    WinISO 5.3-->"C:\Program Files\WinISO\unins000.exe"
    Xilisoft Video Converter 3-->C:\Program Files\Xilisoft\Video Converter 3\Uninstall.exe
    XnView 1.96.2-->"C:\Program Files\XnView\unins000.exe"
    Xvid 1.1.2 final uninstall-->"C:\Program Files\Xvid\unins000.exe"
    Zombie Panic! Source Dedicated Server-->"C:\Program Files\Steam\steam.exe" steam://uninstall/17505
    ZSMC USB PC Camera (ZS0211)-->C:\Program Files\InstallShield Installation Information\{44D02D8B-FFB3-4245-8D26-68D10B4C4023}\setup.exe -runfromtemp -l0x040c -removeonly

    ======Security center information======

    AV: avast! antivirus 4.8.1229 [VPS 090509-0]
    AS: Windows Defender (disabled)
    AS: avast! antivirus 4.8.1229 [VPS 090509-0]

    ======System event log======

    Computer Name: PC-de-mathias
    Event Code: 7000
    Message: Le service Nsynas32 n'a pas pu démarrer en raison de l'erreur :
    Le fichier spécifié est introuvable.
    Record Number: 120695
    Source Name: Service Control Manager
    Time Written: 20090727140448.000000-000
    Event Type: Erreur
    User:

    Computer Name: PC-de-mathias
    Event Code: 15016
    Message: Impossible d’initialiser le package de sécurité Kerberos pour l’authentification côté serveur. Le champ de données contient le numéro de l’erreur.
    Record Number: 120771
    Source Name: Microsoft-Windows-HttpEvent
    Time Written: 20090727141332.230350-000
    Event Type: Erreur
    User:

    Computer Name: PC-de-mathias
    Event Code: 7000
    Message: Le service Nsynas32 n'a pas pu démarrer en raison de l'erreur :
    Le fichier spécifié est introuvable.
    Record Number: 120811
    Source Name: Service Control Manager
    Time Written: 20090727141505.000000-000
    Event Type: Erreur
    User:

    Computer Name: PC-de-mathias
    Event Code: 15016
    Message: Impossible d’initialiser le package de sécurité Kerberos pour l’authentification côté serveur. Le champ de données contient le numéro de l’erreur.
    Record Number: 120902
    Source Name: Microsoft-Windows-HttpEvent
    Time Written: 20090727145724.827755-000
    Event Type: Erreur
    User:

    Computer Name: PC-de-mathias
    Event Code: 7000
    Message: Le service Nsynas32 n'a pas pu démarrer en raison de l'erreur :
    Le fichier spécifié est introuvable.
    Record Number: 120939
    Source Name: Service Control Manager
    Time Written: 20090727145856.000000-000
    Event Type: Erreur
    User:

    =====Application event log=====

    Computer Name: PC-de-mathias
    Event Code: 3013
    Message: Impossible de mettre à jour l'entrée <C:\USERS\GEOFFREY\DOCUMENTS\EURO TRUCK SIMULATOR\SAVE\1\PREVIEW.TGA> dans la configuration de hachage.

    Contexte : Application , Catalogue SystemIndex

    Détails :
    Un périphérique attaché au système ne fonctionne pas correctement. (0x8007001f)

    Record Number: 22152
    Source Name: Microsoft-Windows-Search
    Time Written: 20090727140532.000000-000
    Event Type: Erreur
    User:

    Computer Name: PC-de-mathias
    Event Code: 3013
    Message: Impossible de mettre à jour l'entrée <C:\USERS\GEOFFREY\DOCUMENTS\EURO TRUCK SIMULATOR\SAVE\1\PREVIEW.TGA> dans la configuration de hachage.

    Contexte : Application , Catalogue SystemIndex

    Détails :
    Un périphérique attaché au système ne fonctionne pas correctement. (0x8007001f)

    Record Number: 22153
    Source Name: Microsoft-Windows-Search
    Time Written: 20090727140532.000000-000
    Event Type: Erreur
    User:

    Computer Name: PC-de-mathias
    Event Code: 3013
    Message: Impossible de mettre à jour l'entrée <C:\USERS\GEOFFREY\DOCUMENTS\EURO TRUCK SIMULATOR\SAVE\1\PREVIEW.MAT> dans la configuration de hachage.

    Contexte : Application , Catalogue SystemIndex

    Détails :
    Un périphérique attaché au système ne fonctionne pas correctement. (0x8007001f)

    Record Number: 22154
    Source Name: Microsoft-Windows-Search
    Time Written: 20090727140533.000000-000
    Event Type: Erreur
    User:

    Computer Name: PC-de-mathias
    Event Code: 3013
    Message: Impossible de mettre à jour l'entrée <C:\USERS\GEOFFREY\DOCUMENTS\EURO TRUCK SIMULATOR\SAVE\1\PREVIEW.MAT> dans la configuration de hachage.

    Contexte : Application , Catalogue SystemIndex

    Détails :
    Un périphérique attaché au système ne fonctionne pas correctement. (0x8007001f)

    Record Number: 22155
    Source Name: Microsoft-Windows-Search
    Time Written: 20090727140533.000000-000
    Event Type: Erreur
    User:

    Computer Name: PC-de-mathias
    Event Code: 1002
    Message: Le programme hl2.exe version 0.0.0.0 a cessé d’interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l’historique du problème dans l’application Rapports et solutions aux problèmes du Panneau de configuration. ID de processus : 380 Heure de début : 01ca0ec4f8d85163 Heure de fin : 390
    Record Number: 22186
    Source Name: Application Hang
    Time Written: 20090727145503.000000-000
    Event Type: Erreur
    User:

    =====Security event log=====

    Computer Name: PC-de-mathias
    Event Code: 4624
    Message: L’ouverture de session d’un compte s’est correctement déroulée.

    Sujet :
    ID de sécurité : S-1-5-18
    Nom du compte : PC-DE-MATHIAS$
    Domaine du compte : WORKGROUP
    ID d’ouverture de session : 0x3e7

    Type d’ouverture de session : 5

    Nouvelle ouverture de session :
    ID de sécurité : S-1-5-18
    Nom du compte : SYSTEM
    Domaine du compte : AUTORITE NT
    ID d’ouverture de session : 0x3e7
    GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000}

    Informations sur le processus :
    ID du processus : 0x284
    Nom du processus : C:\Windows\System32\services.exe

    Informations sur le réseau :
    Nom de la station de travail :
    Adresse du réseau source : -
    Port source : -

    Informations détaillées sur l’authentification :
    Processus d’ouverture de session : Advapi
    Package d’authentification : Negotiate
    Services en transit : -
    Nom du package (NTLM uniquement) : -
    Longueur de la clé : 0

    Cet événement est généré lors de la création d’une ouverture de session. Il est généré sur l’ordinateur sur lequel l’ouverture de session a été effectuée.

    Le champ Objet indique le compte sur le système local qui a demandé l’ouverture de session. Il s’agit le plus souvent d’un service, comme le service Serveur, ou un processus local tel que Winlogon.exe ou Services.exe.

    Le champ Type d’ouverture de session indique le type d’ouverture de session qui s’est produit. Les types les plus courants sont 2 (interactif) et 3 (réseau).

    Le champ Nouvelle ouverture de session indique le compte pour lequel la nouvelle ouverture de session a été créée, par exemple, le compte qui s’est connecté.

    Les champs relatifs au réseau indiquent la provenance d’une demande d’ouverture de session à distance. Le nom de la station de travail n’étant pas toujours disponible, peut être laissé vide dans certains cas.

    Les champs relatifs aux informations d’authentification fournissent des détails sur cette demande d’ouverture de session spécifique.
    - Le GUID d’ouverture de session est un identificateur unique pouvant servir à associer cet événement à un événement KDC .
    - Les services en transit indiquent les services intermédiaires qui ont participé à cette demande d’ouverture de session.
    - Nom du package indique quel est le sous-protocole qui a été utilisé parmi les protocoles NTLM.
    - La longueur de la clé indique la longueur de la clé de session générée. Elle a la valeur 0 si aucune clé de session n’a été demandée.
    Record Number: 23937
    Source Name: Microsoft-Windows-Security-Auditing
    Time Written: 20090305114900.626222-000
    Event Type: Succès de l'audit
    User:

    Computer Name: PC-de-mathias
    Event Code: 4672
    Message: Privilèges spéciaux attribués à la nouvelle ouverture de session.

    Sujet :
    ID de sécurité : S-1-5-18
    Nom du compte : SYSTEM
    Domaine du compte : AUTORITE NT
    ID d’ouverture de session : 0x3e7

    Privilèges : SeAssignPrimaryTokenPrivilege
    SeTcbPrivilege
    SeSecurityPrivilege
    SeTakeOwnershipPrivilege
    SeLoadDriverPrivilege
    SeBackupPrivilege
    SeRestorePrivilege
    SeDebugPrivilege
    SeAuditPrivilege
    SeSystemEnvironmentPrivilege
    SeImpersonatePrivilege
    Record Number: 23938
    Source Name: Microsoft-Windows-Security-Auditing
    Time Written: 20090305114900.626222-000
    Event Type: Succès de l'audit
    User:

    Computer Name: PC-de-mathias
    Event Code: 4648
    Message: Tentative d’ouverture de session en utilisant des informations d’identification explicites.

    Sujet :
    ID de sécurité : S-1-5-18
    Nom du compte : PC-DE-MATHIAS$
    Domaine du compte : WORKGROUP
    ID d’ouverture de session : 0x3e7
    GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000}

    Compte dont les informations d’identification ont été utilisées :
    Nom du compte : SYSTEM
    Domaine du compte : AUTORITE NT
    GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000}

    Serveur cible :
    Nom du serveur cible : localhost
    Informations supplémentaires : localhost

    Informations sur le processus :
    ID du processus : 0x284
    Nom du processus : C:\Windows\System32\services.exe

    Informations sur le réseau :
    Adresse du réseau : -
    Port : -

    Cet événement est généré lorsqu’un processus tente d’ouvrir une session pour un compte en spécifiant explicitement les informations d’identification de ce compte. Ceci se produit le plus souvent dans les configurations par lot comme les tâches planifiées, ou avec l’utilisation de la commande RUNAS.
    Record Number: 23939
    Source Name: Microsoft-Windows-Security-Auditing
    Time Written: 20090305114900.704223-000
    Event Type: Succès de l'audit
    User:

    Computer Name: PC-de-mathias
    Event Code: 4624
    Message: L’ouverture de session d’un compte s’est correctement déroulée.

    Sujet :
    ID de sécurité : S-1-5-18
    Nom du compte : PC-DE-MATHIAS$
    Domaine du compte : WORKGROUP
    ID d’ouverture de session : 0x3e7

    Type d’ouverture de session : 5

    Nouvelle ouverture de session :
    ID de sécurité : S-1-5-18
    Nom du compte : SYSTEM
    Domaine du compte : AUTORITE NT
    ID d’ouverture de session : 0x3e7
    GUID d’ouverture de session : {00000000-0000-0000-0000-000000000000}

    Informations sur le processus :
    ID du processus : 0x284
    Nom du processus : C:\Windows\System32\services.exe

    Informations sur le réseau :
    Nom de la station de travail :
    Adresse du réseau source : -
    Port source : -

    Informations détaillées sur l’authentification :
    Processus d’ouverture de session : Advapi
    Package d’authentification : Negotiate
    Services en transit : -
    Nom du package (NTLM uniquement) : -
    Longueur de la clé : 0

    Cet événement est généré lors de la création d’une ouverture de session. Il est généré sur l’ordinateur sur lequel l’ouverture de session a été effectuée.

    Le champ Objet indique le compte sur le système local qui a demandé l’ouverture de session. Il s’agit le plus souvent d’un service, comme le service Serveur, ou un processus local tel que Winlogon.exe ou Services.exe.

    Le champ Type d’ouverture de session indique le type d’ouverture de session qui s’est produit. Les types les plus courants sont 2 (interactif) et 3 (réseau).

    Le champ Nouvelle ouverture de session indique le compte pour lequel la nouvelle ouverture de session a été créée, par exemple, le compte qui s’est connecté.

    Les champs relatifs au réseau indi
    a c 267 8 Sécurité
    27 Juillet 2009 17:37:20

    Ok, il reste des infections.

  • Télécharge UsbFix (de Chiquitine29 & C_XX) sur ton Bureau.
  • Lance l'installation avec les paramètres par défaut.
  • Branche tes sources de données externes à ton PC (clé USB, disque dur externe, carte SD, etc...) sans les ouvrir.
  • Double-clique sur le raccourci UsbFix sur ton Bureau.
  • Choisis l'option 1 (Recherche).
  • Laisse travailler l'outil.
  • Poste le rapport UsbFix.txt.

    Note : le rapport UsbFix.txt est sauvegardé à la racine du disque (C:\UsbFix.txt).

    "Process.exe", une composante de l'outil, est détectée par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool. Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
    27 Juillet 2009 17:54:12

    Ah je croix que ça vien de la regarde a la fin ya écrit Dossiers infectieux :

    ############################## | UsbFix V6.011 |

    User : geoffrey (Administrateurs) # PC-DE-MATHIAS
    Update on 24/07/09 by Chiquitine29 & C_XX
    Start at: 17:50:11 | 27/07/2009
    Website : http://pagesperso-orange.fr/NosTools/index.html

    AMD Athlon(tm) 64 X2 Dual Core Processor 5000+
    Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6001 32-bit) # Service Pack 1
    Internet Explorer 8.0.6001.18783
    Windows Firewall Status : Enabled
    AV : avast! antivirus 4.8.1229 [VPS 090509-0] 4.8.1229 [ Enabled | Updated ]

    C:\ -> Disque fixe local # 455,56 Go (133,56 Go free) [HP] # NTFS
    D:\ -> Disque fixe local # 10,2 Go (1,39 Go free) [FACTORY_IMAGE] # NTFS
    E:\ -> Disque CD-ROM
    H:\ -> Disque amovible
    I:\ -> Disque amovible
    J:\ -> Disque amovible
    K:\ -> Disque amovible
    L:\ -> Disque CD-ROM
    M:\ -> Disque fixe local # 149,04 Go (33,84 Go free) [HP Pocket Media Drive] # NTFS

    ############################## | Processus actifs |

    C:\Windows\System32\smss.exe
    C:\Windows\system32\csrss.exe
    C:\Windows\system32\wininit.exe
    C:\Windows\system32\csrss.exe
    C:\Windows\system32\services.exe
    C:\Windows\system32\lsass.exe
    C:\Windows\system32\lsm.exe
    C:\Windows\system32\winlogon.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\nvvsvc.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\SLsvc.exe
    C:\Windows\system32\rundll32.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\Windows\System32\spoolsv.exe
    C:\Windows\system32\svchost.exe
    C:\Program Files\AskBarDis\bar\bin\AskService.exe
    C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe
    c:\Program Files\Common Files\LightScribe\LSSrvc.exe
    C:\Windows\system32\PnkBstrA.exe
    C:\Windows\system32\svchost.exe
    C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\system32\SearchIndexer.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Windows\system32\WUDFHost.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\Explorer.EXE
    C:\Windows\system32\conime.exe
    C:\hp\support\hpsysdrv.exe
    C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
    C:\Program Files\Alwil Software\Avast4\ashDisp.exe
    C:\Windows\ZSSnp211.exe
    C:\Windows\system32\schtasks.exe
    C:\Windows\Domino.exe
    C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
    C:\Windows\System32\rundll32.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Windows\ehome\ehtray.exe
    C:\Program Files\DAEMON Tools Lite\daemon.exe
    C:\Program Files\Steam\Steam.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Windows\ehome\ehmsas.exe
    C:\Program Files\Windows Media Player\wmpnetwk.exe
    c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
    C:\Program Files\Common Files\Steam\SteamService.exe
    C:\hp\kbd\kbd.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Windows\explorer.exe
    C:\Windows\system32\wbem\wmiprvse.exe

    ################## | Fichiers # Dossiers infectieux |
    a c 267 8 Sécurité
    27 Juillet 2009 18:11:25

    Le rapport n'est pas complet.
    27 Juillet 2009 18:18:34

    Mince désoler attend j'en refait un.
    27 Juillet 2009 18:25:07

    La ça doit etre bon :

    ############################## | UsbFix V6.011 |

    User : geoffrey (Administrateurs) # PC-DE-MATHIAS
    Update on 24/07/09 by Chiquitine29 & C_XX
    Start at: 18:18:03 | 27/07/2009
    Website : http://pagesperso-orange.fr/NosTools/index.html

    AMD Athlon(tm) 64 X2 Dual Core Processor 5000+
    Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6001 32-bit) # Service Pack 1
    Internet Explorer 8.0.6001.18783
    Windows Firewall Status : Enabled
    AV : avast! antivirus 4.8.1229 [VPS 090509-0] 4.8.1229 [ Enabled | Updated ]

    C:\ -> Disque fixe local # 455,56 Go (131,33 Go free) [HP] # NTFS
    D:\ -> Disque fixe local # 10,2 Go (1,39 Go free) [FACTORY_IMAGE] # NTFS
    E:\ -> Disque CD-ROM
    H:\ -> Disque amovible
    I:\ -> Disque amovible
    J:\ -> Disque amovible
    K:\ -> Disque amovible
    L:\ -> Disque CD-ROM
    M:\ -> Disque fixe local # 149,04 Go (33,84 Go free) [HP Pocket Media Drive] # NTFS

    ############################## | Processus actifs |

    C:\Windows\System32\smss.exe
    C:\Windows\system32\csrss.exe
    C:\Windows\system32\wininit.exe
    C:\Windows\system32\csrss.exe
    C:\Windows\system32\services.exe
    C:\Windows\system32\lsass.exe
    C:\Windows\system32\lsm.exe
    C:\Windows\system32\winlogon.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\nvvsvc.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\SLsvc.exe
    C:\Windows\system32\rundll32.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\Windows\System32\spoolsv.exe
    C:\Windows\system32\svchost.exe
    C:\Program Files\AskBarDis\bar\bin\AskService.exe
    C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe
    c:\Program Files\Common Files\LightScribe\LSSrvc.exe
    C:\Windows\system32\PnkBstrA.exe
    C:\Windows\system32\svchost.exe
    C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\system32\SearchIndexer.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Windows\system32\WUDFHost.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\Explorer.EXE
    C:\Windows\system32\conime.exe
    C:\hp\support\hpsysdrv.exe
    C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
    C:\Program Files\Alwil Software\Avast4\ashDisp.exe
    C:\Windows\ZSSnp211.exe
    C:\Windows\system32\schtasks.exe
    C:\Windows\Domino.exe
    C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
    C:\Windows\System32\rundll32.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Windows\ehome\ehtray.exe
    C:\Program Files\DAEMON Tools Lite\daemon.exe
    C:\Program Files\Steam\Steam.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Windows\ehome\ehmsas.exe
    C:\Program Files\Windows Media Player\wmpnetwk.exe
    c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
    C:\Program Files\Common Files\Steam\SteamService.exe
    C:\hp\kbd\kbd.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Windows\explorer.exe
    C:\Program Files\Vuze\Azureus.exe
    C:\Windows\system32\SearchProtocolHost.exe
    C:\Windows\system32\SearchFilterHost.exe
    C:\Windows\system32\wbem\wmiprvse.exe

    ################## | Fichiers # Dossiers infectieux |


    ################## | Registre # Clés Run infectieuses |

    Présent ! HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows"
    Présent ! HKU\S-1-5-21-2241278974-3211440934-1083988723-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows"

    ################## | Registre # Mountpoints2 |

    HKCU\..\..\Explorer\MountPoints2\F
    shell\Auto\command =AdobeR.exe e
    shell\AutoRun\command =C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\

    HKCU\..\..\Explorer\MountPoints2\N
    shell\Auto\command =AdobeR.exe e
    shell\AutoRun\command =C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL N:\

    HKCU\..\..\Explorer\MountPoints2\{d2f359e4-e992-11dc-bb97-001e901e6a9c}
    shell\AutoRun\command =C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL H:\copy.exe

    HKCU\..\..\Explorer\MountPoints2\{fec94cc6-68c6-11dd-a940-001e901e6a9c}
    shell\Auto\command =AdobeR.exe e
    shell\AutoRun\command =C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL N:\

    ################## | Cracks / Keygens / Serials |

    "C:\Users\geoffrey\AppData\Local\ApplicationHistory\KeyGenerator.exe.fc25c691.ini.inuse"
    22/11/2008 20:32 |Size : 0 |Crc32 : 00000000 |Md5 : d41d8cd98f00b204e9800998ecf8427e
    a c 267 8 Sécurité
    27 Juillet 2009 18:30:31

  • Branche tes sources de données externes à ton PC (clé USB, disque dur externe, carte SD, etc...) sans les ouvrir.
  • Double-clique sur le raccourci UsbFix présent sur ton Bureau pour le lancer.
  • Choisis l'option 2 (Suppression).
  • Ton Bureau disparaîtra et le PC redémarrera.
  • Au redémarrage, UsbFix scannera ton PC, laisse travailler l'outil.
  • Ensuite, poste le rapport UsbFix.txt qui apparaîtra avec le Bureau.

    Note : le rapport UsbFix.txt est sauvegardé à la racine du disque (C:\UsbFix.txt).
    27 Juillet 2009 19:10:41

    Le voila:

    ############################## | UsbFix V6.011 |

    User : geoffrey (Administrateurs) # PC-DE-MATHIAS
    Update on 24/07/09 by Chiquitine29 & C_XX
    Start at: 18:33:16 | 27/07/2009
    Website : http://pagesperso-orange.fr/NosTools/index.html

    AMD Athlon(tm) 64 X2 Dual Core Processor 5000+
    Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6001 32-bit) # Service Pack 1
    Internet Explorer 8.0.6001.18783
    Windows Firewall Status : Enabled
    AV : avast! antivirus 4.8.1229 [VPS 090509-0] 4.8.1229 [ Enabled | Updated ]

    C:\ -> Disque fixe local # 455,56 Go (131,93 Go free) [HP] # NTFS
    D:\ -> Disque fixe local # 10,2 Go (1,39 Go free) [FACTORY_IMAGE] # NTFS
    E:\ -> Disque CD-ROM
    H:\ -> Disque amovible
    I:\ -> Disque amovible
    J:\ -> Disque amovible
    K:\ -> Disque amovible
    L:\ -> Disque CD-ROM
    M:\ -> Disque fixe local # 149,04 Go (33,84 Go free) [HP Pocket Media Drive] # NTFS

    ############################## | Processus actifs |

    C:\Windows\System32\smss.exe
    C:\Windows\system32\csrss.exe
    C:\Windows\system32\wininit.exe
    C:\Windows\system32\csrss.exe
    C:\Windows\system32\services.exe
    C:\Windows\system32\lsass.exe
    C:\Windows\system32\lsm.exe
    C:\Windows\system32\winlogon.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\nvvsvc.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\LogonUI.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\SLsvc.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\rundll32.exe
    C:\Windows\system32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\Windows\System32\spoolsv.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\userinit.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Windows\system32\runonce.exe
    C:\Windows\system32\conime.exe
    C:\Program Files\AskBarDis\bar\bin\AskService.exe
    C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe
    c:\Program Files\Common Files\LightScribe\LSSrvc.exe
    C:\Windows\system32\PnkBstrA.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\taskeng.exe
    C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\system32\SearchIndexer.exe
    C:\Windows\system32\WUDFHost.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\Windows\system32\wbem\wmiprvse.exe

    ################## | Fichiers # Dossiers infectieux |


    ################## | All Drives ... |


    ################## | Registre # Clés Run infectieuses |

    Supprimé ! HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows"

    ################## | Registre # Mountpoints2 |

    Supprimé ! HKCU\...\Explorer\MountPoints2\F\Shell\Auto\Command
    Supprimé ! HKCU\...\Explorer\MountPoints2\N\Shell\Auto\Command
    Supprimé ! HKCU\...\Explorer\MountPoints2\{d2f359e4-e992-11dc-bb97-001e901e6a9c}\Shell\AutoRun\Command
    Supprimé ! HKCU\...\Explorer\MountPoints2\{fec94cc6-68c6-11dd-a940-001e901e6a9c}\Shell\Auto\Command

    ################## | Listing des fichiers présent |

    [23/02/2008 02:28|--a------|74] -> C:\autoexec.bat
    [19/01/2008 09:45|-rahs----|333203] -> C:\bootmgr
    [23/02/2008 10:16|-ra-s----|8192] -> C:\BOOTSECT.BAK
    [27/07/2009 16:58|--a------|2053] -> C:\cleannavi.txt
    [18/09/2006 23:43|--a------|10] -> C:\config.sys
    [18/11/2008 18:50|--a------|0] -> C:\data.txt
    [17/02/2009 15:47|--a------|27482] -> C:\GF_Excpt.txt
    [09/08/2008 00:22|-rahs----|0] -> C:\IO.SYS
    [02/04/2009 18:23|--a------|65673] -> C:\kdiue732.txt
    [04/06/2009 20:28|--a------|3249] -> C:\LGSInst.Log
    [09/08/2008 00:22|-rahs----|0] -> C:\MSDOS.SYS
    [?|?|?] -> C:\pagefile.sys
    [25/10/2008 00:46|--a------|594] -> C:\updatedatfix.log
    [27/07/2009 18:38|--a------|3898] -> C:\UsbFix.txt
    [22/06/2007 17:44|---hs----|438328] -> D:\boo.mgr
    [02/11/2006 01:53|---hs----|438840] -> D:\bootmgr
    [19/06/2007 16:22|---hs----|1322] -> D:\Desktop.ini
    [21/08/2008 18:01|--ahs----|22] -> D:\HPCD.sys
    [21/08/2008 17:50|---hs----|215] -> D:\MASTER.LOG
    [07/08/2008 17:35|---hs----|428] -> D:\pcdr.ini
    [19/06/2007 16:22|---hs----|181616] -> D:\Protect.ed
    [21/08/2008 16:41|-r-hs----|26] -> D:\RCBoot.sys
    [23/02/2008 12:30|---hs----|44] -> D:\RESTORE.INI

    ################## | Vaccination |

    # C:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
    # D:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
    # M:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.

    ################## | Cracks / Keygens / Serials |

    "C:\Users\geoffrey\AppData\Local\ApplicationHistory\KeyGenerator.exe.fc25c691.ini.inuse"
    22/11/2008 20:32 |Size : 0 |Crc32 : 00000000 |Md5 : d41d8cd98f00b204e9800998ecf8427e
    a c 267 8 Sécurité
    27 Juillet 2009 19:20:30

  • Désinstalle UsbFix et Dealio Toolbar.

  • Télécharge Ad-Remover (de Cyrildu17 / C_XX) sur ton Bureau.

    /!\ Déconnecte-toi et ferme toutes applications en cours /!\

  • Double-clique sur le programme d'installation, installe-le dans son emplacement par défaut (C:\Program files).
  • Double-clique sur le raccourci d'Ad-Remover situé sur ton Bureau pour le lancer.
    (Sous Vista, il faut cliquer droit sur le raccourci d'Ad-Remover et choisir Exécuter en tant qu'administrateur)
  • Choisis la langue F pour français.
  • Au menu principal, choisis l'option S.

    /!\ Laisse travailler l'outil /!\

  • Poste le rapport qui apparaît à la fin (C:\Ad-Report-SCAN.log).

    (CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

    Note : "Process.exe", une composante de l'outil, est détectée par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool. Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
    27 Juillet 2009 20:35:56

    Voila le rapport :

    .
    ======= RAPPORT D'AD-REMOVER 1.1.4.5_O | UNIQUEMENT XP/VISTA/SEVEN =======
    .
    Mit à jour par C_XX le 24/06/2009 à 7:10 PM
    Contact: AdRemover.contact@gmail.com
    Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
    .
    Lancé à: 20:07:54, 27/07/2009 | Mode Normal | Option: SCAN
    Exécuté de: C:\Program Files\Ad-remover\
    Système d'exploitation: Microsoft® Windows Vista™ Home Premium Service Pack 1 v6.0.6001
    Nom du PC: PC-DE-MATHIAS | Utilisateur actuel: geoffrey
    .
    Administrateur: Administrateur *Desactive*
    N'est pas administrateur: ASPNET
    Administrateur: geoffrey
    N'est pas administrateur: Invité
    N'est pas administrateur: mathias
    .
    ============== ÉLÉMENT(S) TROUVÉ(S) ==============
    .
    Service: "ASKService"
    Service: "ASKUpgrade"
    .
    HKCR\CLSID\{201f27d4-3704-41d6-89c1-aa35e39143ed}
    HKCR\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179}
    HKCU\Software\Grand Virtual
    HKCU\Software\pacificpoker
    HKCU\Software\PartyGaming
    HKCU\Software\Poker 770
    HKCU\Software\pokerinstaller
    HKCU\Software\VB and VBA Program Settings\eurobarre
    HKLM\Software\Classes\CLSID\{201f27d4-3704-41d6-89c1-aa35e39143ed}
    HKLM\Software\Dealio
    HKLM\Software\Microsoft\Internet Explorer\Extensions\{B7FE5D70-9AA2-40F1-9C6B-12A255F085E1}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pacific Poker
    HKLM\Software\Poker 770
    HKLM\Software\Trymedia Systems
    HKCU\Software\AppDataLow\software\{8A4FCC7A-33C6-C6F6-D2B1-5144EE1C6A42}
    HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F}
    HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
    HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
    HKCR\CLSID\{0702a2b6-13aa-4090-9e01-bcdc85dd933f}
    HKLM\Software\Classes\CLSID\{0702a2b6-13aa-4090-9e01-bcdc85dd933f}
    HKCR\CLSID\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
    HKLM\Software\Classes\CLSID\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
    HKCR\CLSID\{b0de3308-5d5a-470d-81b9-634fc078393b}
    HKLM\Software\Classes\CLSID\{b0de3308-5d5a-470d-81b9-634fc078393b}
    .
    C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Eurobarre
    C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Games\PartyPoker.lnk
    C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Pacific Poker
    C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\PartyPoker
    C:\ProgramData\Trymedia
    C:\Users\geoffrey\AppData\Roaming\PacificPoker
    C:\Users\geoffrey\DOCUME~1\PacificPoker
    C:\Program Files\AskBarDis
    C:\Program Files\PacificPoker
    C:\Programs\PartyGaming
    C:\Windows\Eurobarre
    C:\Users\geoffrey\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Pacific Poker.lnk
    C:\Users\geoffrey\AppData\Roaming\MICROS~1\Windows\STARTM~1\Pacific Poker.lnk
    C:\Users\Invit‚\Desktop\Pacific Poker.lnk
    C:\Users\Invit‚\Desktop\Installation de PartyPoker.lnk
    C:\Users\mathias\Desktop\Pacific Poker.lnk
    C:\Users\mathias\Desktop\Installation de PartyPoker.lnk
    C:\Users\geoffrey\AppData\Roaming\MICROS~1\Windows\Cookies\geoffrey@partypoker[1].txt
    C:\Users\geoffrey\AppData\Roaming\MICROS~1\Windows\Cookies\geoffrey@simyo[2].txt
    .
    ============== Scan additionnel ==============
    .

    * Mozilla FireFox Version 3.0.12 *

    Nom du profil: 3bglv205.default (geoffrey)
    .
    (Prefs.js) user_pref("browser.search.selectedEngine", "GoogIe");
    (Prefs.js) user_pref("browser.startup.homepage", "hxxp://www.google.fr/firefox");
    (Prefs.js) user_pref("browser.startup.homepage_override.mstone", "rv:1.9.0.12");
    .
    .

    * Internet Explorer Version 8.0.6001.18783 *

    [HKEY_CURRENT_USER\..\Internet Explorer\Main]

    Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
    Start Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnh...

    [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

    Default_Page_URL: hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=81&bd=Pavilion&pf=desktop
    Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
    Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
    Start Page: hxxp://fr.msn.com/

    [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

    Tabs: res://ieframe.dll/tabswelcome.htm

    .
    ============== Processus Caches/Bloque ==============
    .
    PID: 1204 [LOCKED] audiodg.exe
    .

    ============== Suspect (Cracks, Serials ... ) ==============

    .
    C:\Users\geoffrey\AppData\Local\ApplicationHistory\KeyGenerator.exe.fc25c691.ini.inuse
    C:\Users\geoffrey\AppData\Local\VirtualStore\Program Files\uTorrent\[isoHunt]_Pro.Cycling.Manager.2008-RELOADED_-_CRACK_ONLY.4266298.TPB.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\[isoHunt] Tom Clancy's Rainbow Six Vegas 2 - KeyGen.exe.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\[SUMOTorrent.com]_Half_Life_2_Keygen-363148(TB247474).torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\[SUMOTorrent.com]_Rainbow_Six__Vegas_2_Keygen-7501991(TB197372).torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\_Euro Truck Simulator 2008 (PC) Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\=[SUMOTorrent.com]=_Half-Life_2_The_Orange_Box_KeyGen.zip
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Anno_1701_Crack_NoCD_Patch__www_softzone_org_.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Bus_Driver___crack526710706688_77.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Caesar_IV__RELOADED_crack_and_keygen_with_update_v1_0_1_1__h33t_com_PC_2xCD_IMAGE_.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Call Of Duty 5 - World at War + Patch + Crack + Serial - By JOULSSS.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Cod_5___Call_of_Duty_World_at_War___CD_Key__amp__Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Colin_McRae_DiRT_Crack_Only_STOLEN.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Cracks for GTA 1,2,3 Vice City and San Andreas[www.spynova.org] [mininova].torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Euro Truck Simulator 2008 (PC) Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Euro_Truck_Simulator___1_0_Crack_rar.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Euro_Truck_Simulator_2008___Crack_Only.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Euro_Truck_Simulator_2008__PC__Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Euro_truck_Simulator_2008_just_crack.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Grand Theft Auto San Andreas No-DVD Crack v1.0 [EN+SP+FR+IT+DE][works 100] [mininova].torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\grid patch 1.2 + crack.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Half Life 2 Keygen-092582.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Half_Life_2__Crack__amp__Cd_Key__Works_Great__.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Half_Life_2_Keygen-Fenopy.com.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Live_For_Speed_S2_Alpha_Y_Cracked_version.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Race Driver GRID Crack FIXED PC.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Race_07_1_0_0_9_Crack_rar.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Race_Driver__GRID_1_1_patch___crack.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Race_Driver__GRID_1_2_patch___crack.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\race_driver_GRID_2008_CRACK_skullptura_rip_game.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Race_Driver_GRID_Crack_FIXED_PC___UPDATE.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Rollercoaster Tycoon 3 + Soaked + Wild + Patch [mininova].torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Simcity 4 Deluxe Edition Serial Nocd Crack Sim City.rar [mininova].torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Simulateur_de_Conduite_3D___Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Tom Clancy Rainbow Six Vegas 2 Keygen Serial Only.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Tom_Clancy_Rainbow_Six_Vegas_2_Keygen_Serial_Only.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Tom_Clancys_Rainbow_Six_Vegas_2_Crack_FIXED___Serial_to_Play_Onl.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Tom_Clancys_Rainbow_Six_Vegas_2_FIXED_Keygen___Serial_Works_ONL.torrent
    C:\Users\geoffrey\AppData\Roaming\LimeWire\.AppSpecialShare\Pro.Cycling.Manager.2008-RELOADED - CRACK ONLY.torrent.bak
    C:\Users\geoffrey\AppData\Roaming\LimeWire\.AppSpecialShare\Rollercoaster Tycoon 3 - Multilanguage + Serial + No-CD Patch (PC-ISO).rar.torrent.bak
    C:\Users\geoffrey\AppData\Roaming\uTorrent\[PC GAME CRACK NO DVD] TOCA Race Driver 3 (1) By Ziano.rar.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\[PC GAME CRACK NO DVD] TOCA Race Driver 3 (1) By Ziano.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Age Of Empires 3 full DVD +crack + serial.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\AoE 3 all-in-one+cracks+keys+PowerIso.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Atomix VirtualDJ Pro v5.2 Final + Working Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call of Duty 4 - Modern Warfare Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call of Duty 4 [EN, DVD-ISO, KEYGEN + CRACK] - DEViANCE.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call of duty 4 [PC-DVD] crack iso.iso.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call Of Duty 5 - World at War + Patch + Crack + Serial - By JOULSSS.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call Of Duty 5 - World at War + Patch + Crack + Serial - By JOULSSS.2.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call Of Duty 5 - World at War + Patch + Crack + Serial - By JOULSSS.3.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call Of Duty 5 - World at War + Patch + Crack + Serial - By JOULSSS.4.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call Of Duty 5 - World at War + Patch + Crack + Serial - By JOULSSS.5.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call Of Duty 5 - World at War + Patch + Crack + Serial - By JOULSSS.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call of Duty 5 World at War Keygen.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call Of duty World at War cracked.iso.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call.of.Duty.4.Cracks+Key-SAVED.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call_Of_Duty_2_Keygen(saikat).torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call_of_Duty_5_CRACK.exe.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call_of_Duty_5_CRACK.exe.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call_of_Duty_5_Serial_Crack.rar.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call_of_Duty_5_Serial_Crack.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Crack 7 sins.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Frontlines Fuel Of War Crack Only-Razor1911.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Frontlines Fuel of War Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Frontlines Fuel of War v1.1.1 No-DVD crack.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Grand Theft Auto San Andreas No-DVD Crack v1.0 [EN+SP+FR+IT+DE][works 100%].torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GRiD - Race Driver 1.2 Crack (Fixed EXE).torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GRID Race Driver v1.2 Just Crack Fixed.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GRID Update 1.1(Cracked).torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA 4 Serial.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA IV - Crack - Razor1911.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA IV - Gran Theft Auto 4 - Crack + Serial Keygen.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA IV - Gran Theft Auto 4 - Crack + Serial Keygen.2.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA IV - Gran Theft Auto 4 - Crack + Serial Keygen.3.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA IV - Gran Theft Auto 4 - Crack + Serial Keygen.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA IV - Gran Theft Auto 4 - Crack + Serial Keygen_fix.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA IV - Gran Theft Auto 4 - Crack + Serial Keygen_fix.2.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA IV - Gran Theft Auto 4 - Crack + Serial Keygen_fix.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Gta Iv Serial Number.txt.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA.4.CRACK.WORKING-LOBO.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA.IV.Crack.Securom.Bypass.Launcher.UBER-PROPER-FeD0R.Neo-REPACK.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA.IV.Crack.Securom.Bypass.Launcher.UBER-PROPER-FeD0R.Neo-REPACK.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA_4_CRACK-WORKING.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA_GRAND_THEFT_AUTO_IV_4_CRACK_+_ACTIVATION_BYPASS_100%_REAL_TESTED.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTAIV__Keygen.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\IK.Multimedia.Amplitube.X-Gear.v1.2.1.VST.RTAS.Incl.KeyGen-DYNAMiCS.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Mafia The City Of Lost Heaven + NoCD Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Medal of Honor Airborne-HATRED Crack+Keygen.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Moto GP 08 v1.0 [MULTI5] Crack by ShellZ.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Need For Speed Undercover with crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\need for speed underground crack.zip.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Need.For.Speed.Undercover.Crack.and.Keygen.RELOADED.zip.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Need.for.Speed.Undercover.Keygen.Only-0x0008.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Need_for_Speed_Carbon- EN +SERIAL+PATCH FRENCH-VERIFTEAM.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\PC Games Sims 2 Incl CRACK.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\PC_Saints.Row.2.-.direct.play.Update.-(Patch) ToeD.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Race Driver GRID - Multi language + CRACK.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Race Driver GRID - Multi language + CRACK.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Race Driver Grid 1.1 patch + crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Roller.coaster.Tycoon.3.-.Multilanguage. .Serial. .No-CD.Patch.(PC-ISO).[EliteTeamX.com].rar.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Roller.coaster.Tycoon.3.-.Multilanguage. .Serial. .No-CD.Patch.(PC-ISO).[EliteTeamX.com].rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Rollercoaster Tycoon 3 Incl Crack.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Rollercoaster Tycoon 3 Incl Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\RollerCoaster Tycoon 3 Mac Crack.zip.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\RollerCoaster Tycoon 3-Updates_Cracked.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\San Andreas DVD +Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Scarface.[Inc.CRACK]-RELOADED.[www.torrentfive.com].torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Sim City 4 Deluxe Edition [Multi12] (Serial included).torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Sim City Societies - Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Sim City Societies + Update + Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\SimCity 4 Deluxe Edition + Serial + NoCD Crack Sim City.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\SimCity 4 Deluxe Incl Crack.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\SimCity 4 Deluxe Incl Crack.2.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\SimCity 4 Deluxe Incl Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\SimCity Societies + UPDATE + CRACK.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\SimCity Societies + UPDATE + CRACK.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\SimCitySocieties.DVD.MULT-LANG.keygen+crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Sims 2 Double Deluxe Crack NFO.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Sims 2 Double Deluxe Crack.rar.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Sims 2 Double Deluxe Crack.rar.2.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Sims 2 Double Deluxe Crack.rar.3.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Sims 2 Double Deluxe Crack.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Sims 2 Pets Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Sims Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Test Drive Unlimited Pc Multilanguage+Crack NoDVD+Serials+Images+Megapack cars by patrickXR1.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\The Godfather (CRACK) - RELOADED.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\The Sims 2 Mansion Garden Stuff Incl Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\The.Godfather.The.Game with Serial and NoCD Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\The.Sims.2...Bon.Voyage.CLONEDVD.Multi2.inkl.Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\The.Sims.2.Apartment.Life-RELOADED+CRACK Working Confirmed.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\The.Sims.2.Apartment.Life-RELOADED+CRACK Working Confirmed.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\The_Godfather_The_Game_Crackfix.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\TOCA.Race.Driver.3.Crack.Only-RELOADED.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\TOCA.Race.Driver.3.Crack.Only-RELOADED.2.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\TOCA.Race.Driver.3.Crack.Only-RELOADED.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Toca.Race.Driver.3.RELOADED-NO-DVD.Crack(www.bitreactor.to).rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Tom Clancy Rainbow Six Vegas 2 Keygen Serial Only.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\VirtualDJ.v5.1.Full.Incl.Crack.work.k3yg3n.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\VirtualDJ.v5.1.Full.Incl.Crack.work.keygen - VDJ.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\World of Warcraft + Burning Crusade + patches [2.4.3 enGB] private server wowge.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\WoW 2.4.3 to 3.0.2 Update EU [HpR] crack keygen.zip.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\WoW Glider Keygen.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Wowglider Keygen.rar.torrent
    C:\Users\geoffrey\Documents\Crack\game.exe
    C:\Users\geoffrey\Documents\Crack\iw3sp (2).exe
    C:\Users\geoffrey\Documents\Crack\iw3sp.exe
    C:\Users\geoffrey\Documents\Crack\need for speed underground crack.zip
    C:\Users\geoffrey\Documents\Crack\rainbows six vegas 2 crack.rar
    C:\Users\geoffrey\Documents\Crack\Sims 2 Double Deluxe Crack.rar
    C:\Users\geoffrey\Documents\Crack\Sims2 pets.exe
    C:\Users\geoffrey\Documents\Crack\Sims2EP9.exe
    C:\Users\geoffrey\Documents\Crack\TOCA Race Driver 3 No-DVD.rar
    C:\Users\geoffrey\Documents\Crack\Toca.Race.Driver.3.RELOADED-NO-DVD.Crack(www.bitreactor.to).rar
    C:\Users\geoffrey\Documents\Crack\zt.exe
    C:\Users\mathias\AppData\Roaming\uTorrent\Pro.Cycling.Manager.2008-RELOADED - CRACK ONLY.torrent
    C:\Users\mathias\AppData\Roaming\uTorrent\Windows XP Pro Corp x64 Bootable CD Incl SP2 And Serial.torrent
    C:\Users\mathias\Documents\Pro.Cycling.Manager.2008-RELOADED_-_CRACK_ONLY.4266298.TPB.torrent
    .
    ===================================
    .
    20040 Octet(s) - C:\Ad-Report-SCAN.log
    .
    9 Fichier(s) - C:\Users\geoffrey\AppData\Local\Temp
    1 Fichier(s) - C:\Windows\Temp
    .
    0 Fichier(s) - C:\Program Files\Ad-remover\BACKUP
    0 Fichier(s) - C:\Program Files\Ad-remover\QUARANTINE
    .
    Fin à: 20:19:50 | 27/07/2009
    .
    ============== E.O.F ==============
    .
    a c 267 8 Sécurité
    27 Juillet 2009 20:38:29

    Ton poker va passer à la trappe, tu le réinstalleras si tu veux.

    Tu peux faire l'option L et poster le rapport.
    28 Juillet 2009 11:53:05

    ça tombe bien je n'y joue jamais :)  :

    .
    ======= RAPPORT D'AD-REMOVER 1.1.4.5_O | UNIQUEMENT XP/VISTA/SEVEN =======
    .
    Mit à jour par C_XX le 24/06/2009 à 7:10 PM
    Contact: AdRemover.contact@gmail.com
    Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
    .
    Lancé à: 11:39:19, 28/07/2009 | Mode Normal | Option: CLEAN
    Exécuté de: C:\Program Files\Ad-remover\
    Système d'exploitation: Microsoft® Windows Vista™ Home Premium Service Pack 1 v6.0.6001
    Nom du PC: PC-DE-MATHIAS | Utilisateur actuel: geoffrey
    .
    Administrateur: Administrateur *Desactive*
    N'est pas administrateur: ASPNET
    Administrateur: geoffrey
    N'est pas administrateur: Invité
    N'est pas administrateur: mathias
    .
    ============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
    .
    /!\ NON SUPPRIMÉ - Service: "ASKService"
    /!\ NON SUPPRIMÉ - Service: "ASKUpgrade"
    Service: "MyWebSearchService"
    .
    /!\ NON SUPPRIMÉ - HKCR\CLSID\{201f27d4-3704-41d6-89c1-aa35e39143ed}
    /!\ NON SUPPRIMÉ - HKCR\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179}
    HKCU\Software\Grand Virtual
    HKCU\Software\pacificpoker
    HKCU\Software\PartyGaming
    HKCU\Software\Poker 770
    HKCU\Software\pokerinstaller
    HKCU\Software\VB and VBA Program Settings\eurobarre
    /!\ NON SUPPRIMÉ - HKLM\Software\Classes\CLSID\{201f27d4-3704-41d6-89c1-aa35e39143ed}
    /!\ NON SUPPRIMÉ - HKLM\Software\Dealio
    /!\ NON SUPPRIMÉ - HKLM\Software\Microsoft\Internet Explorer\Extensions\{B7FE5D70-9AA2-40F1-9C6B-12A255F085E1}
    /!\ NON SUPPRIMÉ - HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}
    /!\ NON SUPPRIMÉ - HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pacific Poker
    /!\ NON SUPPRIMÉ - HKLM\Software\Poker 770
    /!\ NON SUPPRIMÉ - HKLM\Software\Trymedia Systems
    HKCU\Software\AppDataLow\software\{8A4FCC7A-33C6-C6F6-D2B1-5144EE1C6A42}
    HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F}
    /!\ NON SUPPRIMÉ - HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
    HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
    /!\ NON SUPPRIMÉ - HKCR\CLSID\{0702a2b6-13aa-4090-9e01-bcdc85dd933f}
    /!\ NON SUPPRIMÉ - HKLM\Software\Classes\CLSID\{0702a2b6-13aa-4090-9e01-bcdc85dd933f}
    /!\ NON SUPPRIMÉ - HKCR\CLSID\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
    /!\ NON SUPPRIMÉ - HKLM\Software\Classes\CLSID\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
    /!\ NON SUPPRIMÉ - HKCR\CLSID\{b0de3308-5d5a-470d-81b9-634fc078393b}
    /!\ NON SUPPRIMÉ - HKLM\Software\Classes\CLSID\{b0de3308-5d5a-470d-81b9-634fc078393b}
    .
    C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Eurobarre
    C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Games\PartyPoker.lnk
    C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Pacific Poker\Pacific Poker.lnk
    C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Pacific Poker\Uninstall Pacific Poker.lnk
    C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Pacific Poker
    C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\PartyPoker\D‚sinstaller PartyPoker.lnk
    C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\PartyPoker\PartyPoker.lnk
    C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\PartyPoker
    C:\ProgramData\Trymedia\data
    C:\ProgramData\Trymedia\licenses
    C:\ProgramData\Trymedia\data\{10334AC1-5BE8-5014-477F-98ED84F850B4}
    C:\ProgramData\Trymedia\data\{1D2A58A3-F23D-AAF7-CC3F-E3EC6A873F00}
    C:\ProgramData\Trymedia\data\{44EB4CBC-60AD-C9E2-2B0C-2299152AECCB}
    C:\ProgramData\Trymedia\data\{4999CD9A-B651-BA8F-3B86-0F4B57650898}
    C:\ProgramData\Trymedia\data\{4D88F2A7-E708-4C2B-05FB-9DFD43025FB8}
    C:\ProgramData\Trymedia\data\{4E0F6278-F0AC-9099-6620-6805E3A8F38A}
    C:\ProgramData\Trymedia\data\{58293D48-A0D6-4DBA-856B-0205F9EEA960}
    C:\ProgramData\Trymedia\data\{611790D1-6C09-B32C-70B1-B6B9F98AEE6E}
    C:\ProgramData\Trymedia\data\{6933DB8E-5737-6239-8496-885012C3A22A}
    C:\ProgramData\Trymedia\data\{723C6D19-FFC0-D41F-2229-E59D2D5969FE}
    C:\ProgramData\Trymedia\data\{8060E7C0-C73E-8EAD-CD4A-C0B61D559C4A}
    C:\ProgramData\Trymedia\data\{965BBF20-5DE8-11DB-8C82-C2F37EDF01F2}
    C:\ProgramData\Trymedia\data\{9D682A7B-42F7-1D80-A47B-3C1293E2FC6D}
    C:\ProgramData\Trymedia\data\{A08F1B54-BF48-B532-42CC-912BA59E21B0}
    C:\ProgramData\Trymedia\data\{A98DDE24-F4FB-B421-0EFB-5CA86F23BC94}
    C:\ProgramData\Trymedia\data\{C13C2618-DD61-C814-D51F-53DA44050F85}
    C:\ProgramData\Trymedia\data\{C9BD0512-3B43-C2A4-A1EC-C4384B63F943}
    C:\ProgramData\Trymedia\data\{D363057B-CBA0-CFA5-F59F-694A90CB726B}
    C:\ProgramData\Trymedia\data\{DE17629A-BEA1-3D56-193E-8D145662E0D8}
    C:\ProgramData\Trymedia\data\{DFDA9C4E-A0CC-D2F9-A4D1-A4DEA7972286}
    C:\ProgramData\Trymedia\data\{E0DBDA4D-574B-919A-9283-D67CD3235CAF}
    C:\ProgramData\Trymedia\data\{EFF8B20F-5A5D-4120-DEB7-2049D18398A9}
    C:\ProgramData\Trymedia\data\{F625F1FE-F0BA-53BF-1F78-6BB9E7B69BBE}
    C:\ProgramData\Trymedia\data\{FE8447E5-B040-B5F8-1542-A6BC01D3ABB4}
    C:\ProgramData\Trymedia
    C:\Users\geoffrey\AppData\Roaming\PacificPoker\casinopoker
    C:\Users\geoffrey\AppData\Roaming\PacificPoker\Icons
    C:\Users\geoffrey\AppData\Roaming\PacificPoker\Localization
    C:\Users\geoffrey\AppData\Roaming\PacificPoker\Utils
    C:\Users\geoffrey\AppData\Roaming\PacificPoker\casinopoker\Arena
    C:\Users\geoffrey\AppData\Roaming\PacificPoker\casinopoker\media
    C:\Users\geoffrey\AppData\Roaming\PacificPoker\casinopoker\Utils
    C:\Users\geoffrey\AppData\Roaming\PacificPoker\casinopoker\Arena\ArCommon
    C:\Users\geoffrey\AppData\Roaming\PacificPoker\casinopoker\Arena\ArCommon\dalang.ini
    C:\Users\geoffrey\AppData\Roaming\PacificPoker\casinopoker\media\NoShock
    C:\Users\geoffrey\AppData\Roaming\PacificPoker\casinopoker\media\NoShock\nsconf.ini
    C:\Users\geoffrey\AppData\Roaming\PacificPoker\casinopoker\Utils\CCRD.iss
    C:\Users\geoffrey\AppData\Roaming\PacificPoker\casinopoker\Utils\ToolTips.ini
    C:\Users\geoffrey\AppData\Roaming\PacificPoker\Icons\16x16_game.ico
    C:\Users\geoffrey\AppData\Roaming\PacificPoker\Icons\16x16_tour.ico
    C:\Users\geoffrey\AppData\Roaming\PacificPoker\Icons\coin.ico
    C:\Users\geoffrey\AppData\Roaming\PacificPoker\Icons\cube.ico
    C:\Users\geoffrey\AppData\Roaming\PacificPoker\Icons\logo.ico
    C:\Users\geoffrey\AppData\Roaming\PacificPoker\Icons\PokerOnNet.ico
    C:\Users\geoffrey\AppData\Roaming\PacificPoker\Icons\Ring_Game.ico
    C:\Users\geoffrey\AppData\Roaming\PacificPoker\Icons\Tour_Game.ico
    C:\Users\geoffrey\AppData\Roaming\PacificPoker\Icons\Tour_lobby.ico
    C:\Users\geoffrey\AppData\Roaming\PacificPoker\Localization\countries_flags.iss
    C:\Users\geoffrey\AppData\Roaming\PacificPoker\Localization\ecinw.iss
    C:\Users\geoffrey\AppData\Roaming\PacificPoker\Localization\ecinw_Demo.iss
    C:\Users\geoffrey\AppData\Roaming\PacificPoker\Localization\m.iss
    C:\Users\geoffrey\AppData\Roaming\PacificPoker\Localization\Pl.iss
    C:\Users\geoffrey\AppData\Roaming\PacificPoker\Utils\logo.ico
    C:\Users\geoffrey\AppData\Roaming\PacificPoker
    C:\Users\geoffrey\DOCUME~1\PacificPoker\mathilau69
    C:\Users\geoffrey\DOCUME~1\PacificPoker\PlayersNotes.ini
    C:\Users\geoffrey\DOCUME~1\PacificPoker\mathilau69\PlayersNotes.ini
    C:\Users\geoffrey\DOCUME~1\PacificPoker
    /!\ NON SUPPRIMÉ: C:\Program Files\AskBarDis\bar
    C:\Program Files\AskBarDis\unins000.dat
    C:\Program Files\AskBarDis\unins000.exe
    /!\ NON SUPPRIMÉ: C:\Program Files\AskBarDis\bar\bin
    C:\Program Files\AskBarDis\bar\Settings
    C:\Program Files\AskBarDis\bar\bin\askBar.dll
    C:\Program Files\AskBarDis\bar\bin\askPopStp.dll
    /!\ NON SUPPRIMÉ: C:\Program Files\AskBarDis\bar\bin\AskService.exe
    C:\Program Files\AskBarDis\bar\bin\AskSplash.exe
    C:\Program Files\AskBarDis\bar\bin\AskTBApp.exe
    /!\ NON SUPPRIMÉ: C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe
    C:\Program Files\AskBarDis\bar\bin\psvince.dll
    C:\Program Files\AskBarDis\bar\Settings\AskLogo.ico
    C:\Program Files\AskBarDis\bar\Settings\config.dat
    C:\Program Files\AskBarDis\bar\Settings\config.dat.bak
    /!\ NON SUPPRIMÉ: C:\Program Files\AskBarDis
    C:\Program Files\PacificPoker\bin
    C:\Program Files\PacificPoker\ListProc.exe
    C:\Program Files\PacificPoker\pv.exe
    C:\Program Files\PacificPoker\Unwise.exe
    C:\Program Files\PacificPoker\Unwise.ini
    C:\Program Files\PacificPoker\bin\bass.dll
    C:\Program Files\PacificPoker\bin\casinopoker
    C:\Program Files\PacificPoker\bin\ExtractZip.dll
    C:\Program Files\PacificPoker\bin\pacificpoker.exe
    C:\Program Files\PacificPoker\bin\poker.exe
    C:\Program Files\PacificPoker\bin\casinopoker\bin
    C:\Program Files\PacificPoker\bin\casinopoker\bin\bass.dll
    C:\Program Files\PacificPoker\bin\casinopoker\bin\casino.exe
    C:\Program Files\PacificPoker\bin\casinopoker\bin\casinoApp.exe
    C:\Program Files\PacificPoker\bin\casinopoker\bin\ExtractZip.dll
    C:\Program Files\PacificPoker
    C:\Programs\PartyGaming\announce.txt
    C:\Programs\PartyGaming\PartyCasino
    C:\Programs\PartyGaming\PartyPoker
    C:\Programs\PartyGaming\PartyCasino\format.ini
    C:\Programs\PartyGaming\PartyCasino\GRA.ini
    C:\Programs\PartyGaming\PartyCasino\language
    C:\Programs\PartyGaming\PartyCasino\LHN.txt
    C:\Programs\PartyGaming\PartyCasino\lobbyconfig.txt
    C:\Programs\PartyGaming\PartyCasino\PartyCasino.dll
    C:\Programs\PartyGaming\PartyCasino\pc_uninstall.bat
    C:\Programs\PartyGaming\PartyCasino\ProductVersion.txt
    C:\Programs\PartyGaming\PartyCasino\sys.ini
    C:\Programs\PartyGaming\PartyCasino\Temp
    C:\Programs\PartyGaming\PartyCasino\version.txt
    C:\Programs\PartyGaming\PartyCasino\language\allLangVersion.txt
    C:\Programs\PartyGaming\PartyCasino\language\en_US
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR
    C:\Programs\PartyGaming\PartyCasino\language\version.txt
    C:\Programs\PartyGaming\PartyCasino\language\en_US\articles
    C:\Programs\PartyGaming\PartyCasino\language\en_US\lang_pack_en_US.txt
    C:\Programs\PartyGaming\PartyCasino\language\en_US\version.txt
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\Articles
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\lang_pack_fr_FR.txt
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\version.txt
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\Articles\167058.html
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\Articles\167264.atc
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\Articles\6.html
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\account_but_newacocunt.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\ace.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\ace.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\allversion.txt
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\BB-Numbers-comma.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\BB-Numbers-dot.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\bonus-icon.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\bottom-banners-left-buttons.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\bottom-banners-right-buttons.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\but.bmp
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\but.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\but.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\but_account.bmp
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\but_skin.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\but_skin.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\but_skin_account.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\but_skin_sliver.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\client_bottom.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\client_bottom_right.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\client_bottom_seperator.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\client_gradient.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\client_top.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\client_top_header.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\client_top_left.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\Common_background.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\Common_background_minimised.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\Common_buttons_380x23.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\Common_CloseContainer.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\create_account.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\deuce.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\deuce.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\down_arrow.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\down_arrow_o.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\icon_three.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\icon_ticked.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\jack.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\jack.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\king.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\king.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\left_bottom.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\LHN-sub-menu.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_account.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_account_background.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_account_collapse.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_account_divider.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_ani_refresh.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_background.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_badbeat_jackpot.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_bar_jackpot_numbers.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_bar_jackpot_numbers.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_bar_jackpot_numbers_small.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_bar_jackpot_numbers_small.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_bar_news.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_but_cashout.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_but_deposit.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_but_deposit_large.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_but_options.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_but_redeem.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_but_refresh.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_but_reload_play.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_but_status.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_cashier.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_cashier_collapse.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_casino.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_casino_collapse.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_collapse.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_details_open.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_expand.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_gammon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_gammon_collapse.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_link_arrow.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_poker.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_poker_collapse.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_preferences.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_preferences_collapse.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_separator.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_separator_collapse.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_separator_collapse.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_sub_nav.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_support.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_support_collapse.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lhn_tab_background.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\loading.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\LobbyClock.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lobby_but.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\lobby_skin.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\Main-area-top-bg.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\Mainarea-Collapse-button.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\Mainarea-Expand-button.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\MAT-bg.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\MAT-collapse-close-buttons.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\MAT-collapse-open-buttons.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\MAT-deposit-buttons.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\MAT-Loyality-A-gold.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\MAT-minimised-bg.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\MAT-minimised-bg.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\MAT-refresh-icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\MAT-slider-bg.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\MAT-slider-blue-button.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\MAT-slider-blue.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\MAT-slider-green-button.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\MAT-slider-green.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\MAT-slider-orange-button.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\MAT-slider-orange.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\Message-icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\new-mail-icon.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\no-mail-icon.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\PartyCasino.ico
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\pokerLobby_bonusBack.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\pokerLobby_depositButtonLarge.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\pokerLobby_leftHandIconPoker.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\popup_login_bottom.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\popup_login_top.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\popup_register_bottomleft.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\popup_register_top.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\queen.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\queen.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\sign_up.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\skin.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\skin_account.bmp
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\spacer.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\splash_screen_bg.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\system_but_bets.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\system_but_bets_collapse.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\system_but_bingo.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\system_but_bingo_collapse.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\system_but_casino-27.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\system_but_casino.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\system_but_casino_collapse.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\system_but_connected.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\system_but_connected_good.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\system_but_connected_poor.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\system_but_disconnected.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\system_but_gammon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\system_but_gammon_collapse.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\system_but_poker.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\system_but_poker_collapse.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\system_but_security.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\system_but_security.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\ticker_bg.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\up_arrow.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\up_arrow_o.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\version.txt
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\addplaymoney_button.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\aud.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\autospincancel_button.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\autospinoptions_background.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\autospinstart_button.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\balance_strip.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\bottombar_logo_net.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\bottombar_net.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\bottombar_net_big.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\bottombar_net_medium.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\BuyInConfig.ini
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\buyin_botbg.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\buyin_cancelbutton.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\buyin_cashierbutton.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\buyin_midbg.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\buyin_okbutton.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\buyin_topbg.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cad.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cashier_button.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cashout_midbg.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cent_strip.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\chf.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\chips.wav
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\czk.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\dkk.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\eur.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\exit_button.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\format.ini
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\gamelogs_button.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\game_topbar_pff.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\gbp.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\hkd.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\huf.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\ils.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\inr.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\jpy.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\krw.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\myr.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\nok.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\nzd.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\php.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\pln.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\popup_but_cancel.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\popup_but_cashier.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\popup_but_ok.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\popup_buyin_but_all.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\popup_buyin_tab.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\PushBut.wav
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\quickdeposit_button.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\ron.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\rur.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\sek.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\sgd.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\skk.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\status_dlg.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\system_but_close.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\system_but_inactive_close.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\system_but_inactive_minimise.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\system_but_minimise.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\sys_icons.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\table_logo_com.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\table_logo_net.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\thb.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\trny_buyin_botbg.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\try.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\twd.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\usd.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\version.txt
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\version_button.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\win.wav
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\zar.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\6_bigcardback.bmp
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\c0_5.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\c1.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\c10.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\c100.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\c100k.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\c10k.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\c1k.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\c25.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\c250.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\c25k.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\c2_5k.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\c5.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\c50.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\c500.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\c500k.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\c50k.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\c5k.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\Card.wav
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\CardFlip.wav
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\card_deck.bmp
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\FRU_6_bigcardback.bmp
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\number_circle.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\pointer_R.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\qd_cashier_button.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\qd_exit_button.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\qd_gamelogs_button.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\qd_version_button.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rc0_5.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rc1.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rc10.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rc100.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rc100k.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rc10k.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rc1k.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rc25.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rc250.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rc25k.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rc2_5k.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rc5.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rc50.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rc500.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rc500k.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rc50k.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rc5k.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\Rr.bmp
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\rules_button.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\version.txt
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_americanroulette_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_baccarat_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_bjbonuspairs_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_bjhighlimit_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_bjsingledeck_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_boardbabe_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_cashcruise_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_casinowar_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_coolbanana_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_deuceswild_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_europeanroulette_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_firedrake_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_flamingo_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_fruitparty_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_goannagold_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_goldenoasis_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_graveyardbash_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_hotjokerpoker_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_hotroller_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_job_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_junglerumble_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_kangacash_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_kookakeno_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_lir_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_logo_cover.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_magicman_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_mhvp_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_paigow_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_pcp_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_pc_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_piggypayback_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_predator_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_reddog_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_safecrackerkeno_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_sfw_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_silvercity_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_superjoker_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_supermystic_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_superstar_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_sweethawaii_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_tcp_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_tod_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bjbar_vegasclub_icon.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\bj_check.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\blackjack
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\BlackJack.dll
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\blackjack.wav
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\chip_pointer_R.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\clear_button.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\deal_button.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\double_button.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\hit_button.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\insurance.wav
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\insure_button.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\number_circle.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\pointer_R.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\push.wav
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\repeatbet_button.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\result_bj.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\result_bust.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\result_insure.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\result_lost.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\result_push.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\result_won.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\split.wav
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\split_button.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\stand_button.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\surrender_button.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\version.txt
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\blackjack\bj_table.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\blackjack\Config.ini
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\blackjack\blackjack\version.txt
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\action_button.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\action_pending_panel.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\autostand.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\away_button.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\backcard.bmp
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\bj_check.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\blackjack.wav
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\card_pointer.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\check_box.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\chip_pointer.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\clear_button.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\CommonConfig.ini
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\deal_button.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\double_button.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\first_hand.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\FRU_backcard.bmp
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\game_topbar_pff.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\hit_button.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\iam_back_button.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\insurance.wav
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\leave_seat_button.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\looser.rgn
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\looser_popup.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\mhbj_clear_btn.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\mhbj_deal_btn.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\mhbj_double_bets_btn.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\mhbj_double_btn.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\mhbj_hit_btn.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\mhbj_repeatbet_btn.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\mhbj_split_btn.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\mhbj_stand_btn.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\mhbj_surrender_btn.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\mpbj_deck.bmp
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\MultiHandBJConfig.ini
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\MultiHandBJTrnyConfig.ini
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\multiplayerbj.dll
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\multiplayerblackjack
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\number_circle.gif
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\player_area.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\push.wav
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\repeatbet_button.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\result_bj.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\result_bust.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\result_push.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\result_won.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\sittingout_button.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\skip_button.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\split.wav
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\split_button.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\stand_button.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\surrender_button.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\take_seat_button.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\trny_player_area.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\trny_watcher_area.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\version.txt
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\watcher_area.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\winner.rgn
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\winners_closebutton.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\winners_popup.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\win_glow.png
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\multiplayerblackjack\mpbj_table.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\multiplayerblackjack\mpbj_trny_table.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\multiplayerblackjack\sp_mpbj_table.jpg
    C:\Programs\PartyGaming\PartyCasino\language\fr_FR\images\games\cardgames\multiplayerbj\multiplayerblackjack\version.txt
    C:\Programs\PartyGaming\PartyPoker\install.log
    C:\Programs\PartyGaming\PartyPoker\Language
    C:\Programs\PartyGaming\PartyPoker\Notes.txt
    C:\Programs\PartyGaming\PartyPoker\pp_mathilau69_c-o-i.txt
    C:\Programs\PartyGaming\PartyPoker\pp_mathilau69_pst_flts.txt
    C:\Programs\PartyGaming\PartyPoker\Uninstall.exe
    C:\Programs\PartyGaming\PartyPoker\usertab.txt
    C:\Programs\PartyGaming\PartyPoker\WatchList.txt
    C:\Programs\PartyGaming\PartyPoker\install.log\PartyPoker
    C:\Programs\PartyGaming\PartyPoker\Language\en_US
    C:\Programs\PartyGaming\PartyPoker\Language\fr_FR
    C:\Programs\PartyGaming\PartyPoker\Language\en_US\articles
    C:\Programs\PartyGaming\PartyPoker\Language\en_US\temp
    C:\Programs\PartyGaming\PartyPoker\Language\en_US\articles\70933.atc
    C:\Programs\PartyGaming\PartyPoker\Language\fr_FR\Articles
    C:\Programs\PartyGaming\PartyPoker\Language\fr_FR\temp
    C:\Programs\PartyGaming\PartyPoker\Language\fr_FR\Articles\167056.html
    C:\Programs\PartyGaming\PartyPoker\Language\fr_FR\Articles\167266.atc
    C:\Programs\PartyGaming\PartyPoker\Language\fr_FR\Articles\16991.html
    C:\Programs\PartyGaming\PartyPoker\Language\fr_FR\Articles\2.html
    C:\Programs\PartyGaming\PartyPoker\Language\fr_FR\Articles\4.html
    C:\Programs\PartyGaming\PartyPoker\Language\fr_FR\Articles\54708.html
    C:\Programs\PartyGaming\PartyPoker\Language\fr_FR\Articles\6331.html
    C:\Programs\PartyGaming\PartyPoker\Language\fr_FR\Articles\6333.html
    C:\Programs\PartyGaming\PartyPoker\Language\fr_FR\Articles\71023.html
    C:\Programs\PartyGaming\PartyPoker\Language\fr_FR\Articles\71241.atc
    C:\Programs\PartyGaming
    C:\Windows\Eurobarre\uninstall.exe
    C:\Windows\Eurobarre
    C:\Users\geoffrey\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Pacific Poker.lnk
    C:\Users\geoffrey\AppData\Roaming\MICROS~1\Windows\STARTM~1\Pacific Poker.lnk
    C:\Users\Invit‚\Desktop\Pacific Poker.lnk
    C:\Users\Invit‚\Desktop\Installation de PartyPoker.lnk
    C:\Users\mathias\Desktop\Pacific Poker.lnk
    C:\Users\mathias\Desktop\Installation de PartyPoker.lnk
    C:\Users\geoffrey\AppData\Roaming\MICROS~1\Windows\Cookies\geoffrey@partypoker[1].txt
    C:\Users\geoffrey\AppData\Roaming\MICROS~1\Windows\Cookies\geoffrey@simyo[2].txt

    (!) -- Fichiers temporaires supprimés.

    .
    ============== Scan additionnel ==============
    .

    * Mozilla FireFox Version 3.0.12 *

    Nom du profil: 3bglv205.default (geoffrey)
    .
    (Prefs.js) user_pref("browser.search.selectedEngine", "GoogIe");
    (Prefs.js) user_pref("browser.startup.homepage", "hxxp://www.google.fr/firefox");
    (Prefs.js) user_pref("browser.startup.homepage_override.mstone", "rv:1.9.0.12");
    .
    .

    * Internet Explorer Version 8.0.6001.18783 *

    [HKEY_CURRENT_USER\..\Internet Explorer\Main]

    Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnh...
    Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
    Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
    Start Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnh...

    [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

    Default_Page_URL: hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=81&bd=Pavilion&pf=desktop
    Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
    Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
    Start Page: hxxp://fr.msn.com/

    [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

    Tabs: res://ieframe.dll/tabswelcome.htm

    .
    ============== Processus Caches/Bloque ==============
    .
    PID: 1204 [LOCKED] audiodg.exe
    .

    ============== Suspect (Cracks, Serials ... ) ==============

    .
    C:\Users\geoffrey\AppData\Local\ApplicationHistory\KeyGenerator.exe.fc25c691.ini.inuse
    C:\Users\geoffrey\AppData\Local\VirtualStore\Program Files\uTorrent\[isoHunt]_Pro.Cycling.Manager.2008-RELOADED_-_CRACK_ONLY.4266298.TPB.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\[isoHunt] Tom Clancy's Rainbow Six Vegas 2 - KeyGen.exe.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\[SUMOTorrent.com]_Half_Life_2_Keygen-363148(TB247474).torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\[SUMOTorrent.com]_Rainbow_Six__Vegas_2_Keygen-7501991(TB197372).torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\_Euro Truck Simulator 2008 (PC) Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\=[SUMOTorrent.com]=_Half-Life_2_The_Orange_Box_KeyGen.zip
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Anno_1701_Crack_NoCD_Patch__www_softzone_org_.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Bus_Driver___crack526710706688_77.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Caesar_IV__RELOADED_crack_and_keygen_with_update_v1_0_1_1__h33t_com_PC_2xCD_IMAGE_.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Call Of Duty 5 - World at War + Patch + Crack + Serial - By JOULSSS.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Cod_5___Call_of_Duty_World_at_War___CD_Key__amp__Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Colin_McRae_DiRT_Crack_Only_STOLEN.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Cracks for GTA 1,2,3 Vice City and San Andreas[www.spynova.org] [mininova].torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Euro Truck Simulator 2008 (PC) Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Euro_Truck_Simulator___1_0_Crack_rar.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Euro_Truck_Simulator_2008___Crack_Only.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Euro_Truck_Simulator_2008__PC__Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Euro_truck_Simulator_2008_just_crack.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Grand Theft Auto San Andreas No-DVD Crack v1.0 [EN+SP+FR+IT+DE][works 100] [mininova].torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\grid patch 1.2 + crack.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Half Life 2 Keygen-092582.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Half_Life_2__Crack__amp__Cd_Key__Works_Great__.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Half_Life_2_Keygen-Fenopy.com.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Live_For_Speed_S2_Alpha_Y_Cracked_version.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Race Driver GRID Crack FIXED PC.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Race_07_1_0_0_9_Crack_rar.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Race_Driver__GRID_1_1_patch___crack.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Race_Driver__GRID_1_2_patch___crack.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\race_driver_GRID_2008_CRACK_skullptura_rip_game.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Race_Driver_GRID_Crack_FIXED_PC___UPDATE.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Rollercoaster Tycoon 3 + Soaked + Wild + Patch [mininova].torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Simcity 4 Deluxe Edition Serial Nocd Crack Sim City.rar [mininova].torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Simulateur_de_Conduite_3D___Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Tom Clancy Rainbow Six Vegas 2 Keygen Serial Only.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Tom_Clancy_Rainbow_Six_Vegas_2_Keygen_Serial_Only.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Tom_Clancys_Rainbow_Six_Vegas_2_Crack_FIXED___Serial_to_Play_Onl.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Tom_Clancys_Rainbow_Six_Vegas_2_FIXED_Keygen___Serial_Works_ONL.torrent
    C:\Users\geoffrey\AppData\Roaming\LimeWire\.AppSpecialShare\Pro.Cycling.Manager.2008-RELOADED - CRACK ONLY.torrent.bak
    C:\Users\geoffrey\AppData\Roaming\LimeWire\.AppSpecialShare\Rollercoaster Tycoon 3 - Multilanguage + Serial + No-CD Patch (PC-ISO).rar.torrent.bak
    C:\Users\geoffrey\AppData\Roaming\uTorrent\[PC GAME CRACK NO DVD] TOCA Race Driver 3 (1) By Ziano.rar.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\[PC GAME CRACK NO DVD] TOCA Race Driver 3 (1) By Ziano.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Age Of Empires 3 full DVD +crack + serial.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\AoE 3 all-in-one+cracks+keys+PowerIso.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Atomix VirtualDJ Pro v5.2 Final + Working Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call of Duty 4 - Modern Warfare Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call of Duty 4 [EN, DVD-ISO, KEYGEN + CRACK] - DEViANCE.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call of duty 4 [PC-DVD] crack iso.iso.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call Of Duty 5 - World at War + Patch + Crack + Serial - By JOULSSS.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call Of Duty 5 - World at War + Patch + Crack + Serial - By JOULSSS.2.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call Of Duty 5 - World at War + Patch + Crack + Serial - By JOULSSS.3.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call Of Duty 5 - World at War + Patch + Crack + Serial - By JOULSSS.4.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call Of Duty 5 - World at War + Patch + Crack + Serial - By JOULSSS.5.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call Of Duty 5 - World at War + Patch + Crack + Serial - By JOULSSS.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call of Duty 5 World at War Keygen.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call Of duty World at War cracked.iso.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call.of.Duty.4.Cracks+Key-SAVED.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call_Of_Duty_2_Keygen(saikat).torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call_of_Duty_5_CRACK.exe.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call_of_Duty_5_CRACK.exe.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call_of_Duty_5_Serial_Crack.rar.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call_of_Duty_5_Serial_Crack.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Crack 7 sins.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Frontlines Fuel Of War Crack Only-Razor1911.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Frontlines Fuel of War Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Frontlines Fuel of War v1.1.1 No-DVD crack.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Grand Theft Auto San Andreas No-DVD Crack v1.0 [EN+SP+FR+IT+DE][works 100%].torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GRiD - Race Driver 1.2 Crack (Fixed EXE).torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GRID Race Driver v1.2 Just Crack Fixed.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GRID Update 1.1(Cracked).torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA 4 Serial.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA IV - Crack - Razor1911.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA IV - Gran Theft Auto 4 - Crack + Serial Keygen.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA IV - Gran Theft Auto 4 - Crack + Serial Keygen.2.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA IV - Gran Theft Auto 4 - Crack + Serial Keygen.3.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA IV - Gran Theft Auto 4 - Crack + Serial Keygen.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA IV - Gran Theft Auto 4 - Crack + Serial Keygen_fix.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA IV - Gran Theft Auto 4 - Crack + Serial Keygen_fix.2.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA IV - Gran Theft Auto 4 - Crack + Serial Keygen_fix.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Gta Iv Serial Number.txt.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA.4.CRACK.WORKING-LOBO.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA.IV.Crack.Securom.Bypass.Launcher.UBER-PROPER-FeD0R.Neo-REPACK.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA.IV.Crack.Securom.Bypass.Launcher.UBER-PROPER-FeD0R.Neo-REPACK.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA_4_CRACK-WORKING.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA_GRAND_THEFT_AUTO_IV_4_CRACK_+_ACTIVATION_BYPASS_100%_REAL_TESTED.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTAIV__Keygen.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\IK.Multimedia.Amplitube.X-Gear.v1.2.1.VST.RTAS.Incl.KeyGen-DYNAMiCS.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Mafia The City Of Lost Heaven + NoCD Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Medal of Honor Airborne-HATRED Crack+Keygen.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Moto GP 08 v1.0 [MULTI5] Crack by ShellZ.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Need For Speed Undercover with crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\need for speed underground crack.zip.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Need.For.Speed.Undercover.Crack.and.Keygen.RELOADED.zip.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Need.for.Speed.Undercover.Keygen.Only-0x0008.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Need_for_Speed_Carbon- EN +SERIAL+PATCH FRENCH-VERIFTEAM.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\PC Games Sims 2 Incl CRACK.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\PC_Saints.Row.2.-.direct.play.Update.-(Patch) ToeD.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Race Driver GRID - Multi language + CRACK.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Race Driver GRID - Multi language + CRACK.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Race Driver Grid 1.1 patch + crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Roller.coaster.Tycoon.3.-.Multilanguage. .Serial. .No-CD.Patch.(PC-ISO).[EliteTeamX.com].rar.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Roller.coaster.Tycoon.3.-.Multilanguage. .Serial. .No-CD.Patch.(PC-ISO).[EliteTeamX.com].rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Rollercoaster Tycoon 3 Incl Crack.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Rollercoaster Tycoon 3 Incl Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\RollerCoaster Tycoon 3 Mac Crack.zip.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\RollerCoaster Tycoon 3-Updates_Cracked.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\San Andreas DVD +Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Scarface.[Inc.CRACK]-RELOADED.[www.torrentfive.com].torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Sim City 4 Deluxe Edition [Multi12] (Serial included).torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Sim City Societies - Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Sim City Societies + Update + Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\SimCity 4 Deluxe Edition + Serial + NoCD Crack Sim City.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\SimCity 4 Deluxe Incl Crack.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\SimCity 4 Deluxe Incl Crack.2.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\SimCity 4 Deluxe Incl Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\SimCity Societies + UPDATE + CRACK.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\SimCity Societies + UPDATE + CRACK.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\SimCitySocieties.DVD.MULT-LANG.keygen+crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Sims 2 Double Deluxe Crack NFO.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Sims 2 Double Deluxe Crack.rar.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Sims 2 Double Deluxe Crack.rar.2.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Sims 2 Double Deluxe Crack.rar.3.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Sims 2 Double Deluxe Crack.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Sims 2 Pets Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Sims Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Test Drive Unlimited Pc Multilanguage+Crack NoDVD+Serials+Images+Megapack cars by patrickXR1.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\The Godfather (CRACK) - RELOADED.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\The Sims 2 Mansion Garden Stuff Incl Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\The.Godfather.The.Game with Serial and NoCD Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\The.Sims.2...Bon.Voyage.CLONEDVD.Multi2.inkl.Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\The.Sims.2.Apartment.Life-RELOADED+CRACK Working Confirmed.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\The.Sims.2.Apartment.Life-RELOADED+CRACK Working Confirmed.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\The_Godfather_The_Game_Crackfix.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\TOCA.Race.Driver.3.Crack.Only-RELOADED.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\TOCA.Race.Driver.3.Crack.Only-RELOADED.2.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\TOCA.Race.Driver.3.Crack.Only-RELOADED.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Toca.Race.Driver.3.RELOADED-NO-DVD.Crack(www.bitreactor.to).rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Tom Clancy Rainbow Six Vegas 2 Keygen Serial Only.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\VirtualDJ.v5.1.Full.Incl.Crack.work.k3yg3n.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\VirtualDJ.v5.1.Full.Incl.Crack.work.keygen - VDJ.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\World of Warcraft + Burning Crusade + patches [2.4.3 enGB] private server wowge.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\WoW 2.4.3 to 3.0.2 Update EU [HpR] crack keygen.zip.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\WoW Glider Keygen.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Wowglider Keygen.rar.torrent
    C:\Users\geoffrey\Documents\Crack\game.exe
    C:\Users\geoffrey\Documents\Crack\iw3sp (2).exe
    C:\Users\geoffrey\Documents\Crack\iw3sp.exe
    C:\Users\geoffrey\Documents\Crack\need for speed underground crack.zip
    C:\Users\geoffrey\Documents\Crack\rainbows six vegas 2 crack.rar
    C:\Users\geoffrey\Docum
    a c 267 8 Sécurité
    28 Juillet 2009 15:20:56

    L'UAC est bien désactivé et Ad-Remover est bien exécuté en tant qu'administrateur ?
    28 Juillet 2009 22:59:02

    L'UAC est bien désactivé par contre ad-remover je l'ai lancer normalement est ce que j'en refait un en tant qu'administrateur ?
    a c 267 8 Sécurité
    28 Juillet 2009 23:02:36

    Oui.
    28 Juillet 2009 23:42:58

    J'ai lance ad-remover en tant qu'administrateur et voila ce que ça me donne :

    .
    ======= RAPPORT D'AD-REMOVER 1.1.4.5_O | UNIQUEMENT XP/VISTA/SEVEN =======
    .
    Mit à jour par C_XX le 24/06/2009 à 7:10 PM
    Contact: AdRemover.contact@gmail.com
    Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
    .
    Lancé à: 23:07:44, 28/07/2009 | Mode Normal | Option: CLEAN
    Exécuté de: C:\Program Files\Ad-remover\
    Système d'exploitation: Microsoft® Windows Vista™ Home Premium Service Pack 1 v6.0.6001
    Nom du PC: PC-DE-MATHIAS | Utilisateur actuel: geoffrey
    .
    Administrateur: Administrateur *Desactive*
    N'est pas administrateur: ASPNET
    Administrateur: geoffrey
    N'est pas administrateur: Invité
    N'est pas administrateur: mathias
    .
    ============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
    .
    /!\ NON SUPPRIMÉ - Service: "ASKService"
    /!\ NON SUPPRIMÉ - Service: "ASKUpgrade"
    Service: "MyWebSearchService"
    .
    /!\ NON SUPPRIMÉ - HKCR\CLSID\{201f27d4-3704-41d6-89c1-aa35e39143ed}
    /!\ NON SUPPRIMÉ - HKCR\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179}
    /!\ NON SUPPRIMÉ - HKLM\Software\Classes\CLSID\{201f27d4-3704-41d6-89c1-aa35e39143ed}
    /!\ NON SUPPRIMÉ - HKLM\Software\Dealio
    /!\ NON SUPPRIMÉ - HKLM\Software\Microsoft\Internet Explorer\Extensions\{B7FE5D70-9AA2-40F1-9C6B-12A255F085E1}
    /!\ NON SUPPRIMÉ - HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}
    /!\ NON SUPPRIMÉ - HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pacific Poker
    /!\ NON SUPPRIMÉ - HKLM\Software\Poker 770
    /!\ NON SUPPRIMÉ - HKLM\Software\Trymedia Systems
    /!\ NON SUPPRIMÉ - HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
    /!\ NON SUPPRIMÉ - HKCR\CLSID\{0702a2b6-13aa-4090-9e01-bcdc85dd933f}
    /!\ NON SUPPRIMÉ - HKLM\Software\Classes\CLSID\{0702a2b6-13aa-4090-9e01-bcdc85dd933f}
    /!\ NON SUPPRIMÉ - HKCR\CLSID\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
    /!\ NON SUPPRIMÉ - HKLM\Software\Classes\CLSID\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
    /!\ NON SUPPRIMÉ - HKCR\CLSID\{b0de3308-5d5a-470d-81b9-634fc078393b}
    /!\ NON SUPPRIMÉ - HKLM\Software\Classes\CLSID\{b0de3308-5d5a-470d-81b9-634fc078393b}
    .
    /!\ NON SUPPRIMÉ: C:\Program Files\AskBarDis\bar
    /!\ NON SUPPRIMÉ: C:\Program Files\AskBarDis\bar\bin
    /!\ NON SUPPRIMÉ: C:\Program Files\AskBarDis\bar\bin\AskService.exe
    /!\ NON SUPPRIMÉ: C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe
    /!\ NON SUPPRIMÉ: C:\Program Files\AskBarDis

    (!) -- Fichiers temporaires supprimés.

    .
    ============== Scan additionnel ==============
    .

    * Mozilla FireFox Version 3.0.12 *

    Nom du profil: 3bglv205.default (geoffrey)
    .
    (Prefs.js) user_pref("browser.search.selectedEngine", "GoogIe");
    (Prefs.js) user_pref("browser.startup.homepage", "hxxp://www.google.fr/firefox");
    (Prefs.js) user_pref("browser.startup.homepage_override.mstone", "rv:1.9.0.12");
    .
    .

    * Internet Explorer Version 8.0.6001.18783 *

    [HKEY_CURRENT_USER\..\Internet Explorer\Main]

    Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnh...
    Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
    Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
    Start Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnh...

    [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

    Default_Page_URL: hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=81&bd=Pavilion&pf=desktop
    Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
    Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
    Start Page: hxxp://fr.msn.com/

    [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

    Tabs: res://ieframe.dll/tabswelcome.htm

    .
    ============== Processus Caches/Bloque ==============
    .
    PID: 1204 [LOCKED] audiodg.exe
    PID: 4592 [LOCKED] mfpmp.exe
    .

    ============== Suspect (Cracks, Serials ... ) ==============

    .
    C:\Users\geoffrey\AppData\Local\ApplicationHistory\KeyGenerator.exe.fc25c691.ini.inuse
    C:\Users\geoffrey\AppData\Local\VirtualStore\Program Files\uTorrent\[isoHunt]_Pro.Cycling.Manager.2008-RELOADED_-_CRACK_ONLY.4266298.TPB.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\[isoHunt] Tom Clancy's Rainbow Six Vegas 2 - KeyGen.exe.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\[SUMOTorrent.com]_Half_Life_2_Keygen-363148(TB247474).torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\[SUMOTorrent.com]_Rainbow_Six__Vegas_2_Keygen-7501991(TB197372).torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\_Euro Truck Simulator 2008 (PC) Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\=[SUMOTorrent.com]=_Half-Life_2_The_Orange_Box_KeyGen.zip
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Anno_1701_Crack_NoCD_Patch__www_softzone_org_.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Bus_Driver___crack526710706688_77.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Caesar_IV__RELOADED_crack_and_keygen_with_update_v1_0_1_1__h33t_com_PC_2xCD_IMAGE_.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Call Of Duty 5 - World at War + Patch + Crack + Serial - By JOULSSS.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Cod_5___Call_of_Duty_World_at_War___CD_Key__amp__Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Colin_McRae_DiRT_Crack_Only_STOLEN.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Cracks for GTA 1,2,3 Vice City and San Andreas[www.spynova.org] [mininova].torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Euro Truck Simulator 2008 (PC) Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Euro_Truck_Simulator___1_0_Crack_rar.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Euro_Truck_Simulator_2008___Crack_Only.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Euro_Truck_Simulator_2008__PC__Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Euro_truck_Simulator_2008_just_crack.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Grand Theft Auto San Andreas No-DVD Crack v1.0 [EN+SP+FR+IT+DE][works 100] [mininova].torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\grid patch 1.2 + crack.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Half Life 2 Keygen-092582.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Half_Life_2__Crack__amp__Cd_Key__Works_Great__.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Half_Life_2_Keygen-Fenopy.com.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Live_For_Speed_S2_Alpha_Y_Cracked_version.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Race Driver GRID Crack FIXED PC.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Race_07_1_0_0_9_Crack_rar.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Race_Driver__GRID_1_1_patch___crack.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Race_Driver__GRID_1_2_patch___crack.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\race_driver_GRID_2008_CRACK_skullptura_rip_game.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Race_Driver_GRID_Crack_FIXED_PC___UPDATE.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Rollercoaster Tycoon 3 + Soaked + Wild + Patch [mininova].torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Simcity 4 Deluxe Edition Serial Nocd Crack Sim City.rar [mininova].torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Simulateur_de_Conduite_3D___Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Tom Clancy Rainbow Six Vegas 2 Keygen Serial Only.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Tom_Clancy_Rainbow_Six_Vegas_2_Keygen_Serial_Only.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Tom_Clancys_Rainbow_Six_Vegas_2_Crack_FIXED___Serial_to_Play_Onl.torrent
    C:\Users\geoffrey\AppData\Roaming\Azureus\torrents\Tom_Clancys_Rainbow_Six_Vegas_2_FIXED_Keygen___Serial_Works_ONL.torrent
    C:\Users\geoffrey\AppData\Roaming\LimeWire\.AppSpecialShare\Pro.Cycling.Manager.2008-RELOADED - CRACK ONLY.torrent.bak
    C:\Users\geoffrey\AppData\Roaming\LimeWire\.AppSpecialShare\Rollercoaster Tycoon 3 - Multilanguage + Serial + No-CD Patch (PC-ISO).rar.torrent.bak
    C:\Users\geoffrey\AppData\Roaming\uTorrent\[PC GAME CRACK NO DVD] TOCA Race Driver 3 (1) By Ziano.rar.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\[PC GAME CRACK NO DVD] TOCA Race Driver 3 (1) By Ziano.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Age Of Empires 3 full DVD +crack + serial.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\AoE 3 all-in-one+cracks+keys+PowerIso.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Atomix VirtualDJ Pro v5.2 Final + Working Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call of Duty 4 - Modern Warfare Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call of Duty 4 [EN, DVD-ISO, KEYGEN + CRACK] - DEViANCE.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call of duty 4 [PC-DVD] crack iso.iso.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call Of Duty 5 - World at War + Patch + Crack + Serial - By JOULSSS.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call Of Duty 5 - World at War + Patch + Crack + Serial - By JOULSSS.2.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call Of Duty 5 - World at War + Patch + Crack + Serial - By JOULSSS.3.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call Of Duty 5 - World at War + Patch + Crack + Serial - By JOULSSS.4.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call Of Duty 5 - World at War + Patch + Crack + Serial - By JOULSSS.5.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call Of Duty 5 - World at War + Patch + Crack + Serial - By JOULSSS.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call of Duty 5 World at War Keygen.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call Of duty World at War cracked.iso.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call.of.Duty.4.Cracks+Key-SAVED.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call_Of_Duty_2_Keygen(saikat).torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call_of_Duty_5_CRACK.exe.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call_of_Duty_5_CRACK.exe.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call_of_Duty_5_Serial_Crack.rar.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Call_of_Duty_5_Serial_Crack.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Crack 7 sins.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Frontlines Fuel Of War Crack Only-Razor1911.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Frontlines Fuel of War Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Frontlines Fuel of War v1.1.1 No-DVD crack.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Grand Theft Auto San Andreas No-DVD Crack v1.0 [EN+SP+FR+IT+DE][works 100%].torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GRiD - Race Driver 1.2 Crack (Fixed EXE).torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GRID Race Driver v1.2 Just Crack Fixed.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GRID Update 1.1(Cracked).torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA 4 Serial.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA IV - Crack - Razor1911.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA IV - Gran Theft Auto 4 - Crack + Serial Keygen.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA IV - Gran Theft Auto 4 - Crack + Serial Keygen.2.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA IV - Gran Theft Auto 4 - Crack + Serial Keygen.3.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA IV - Gran Theft Auto 4 - Crack + Serial Keygen.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA IV - Gran Theft Auto 4 - Crack + Serial Keygen_fix.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA IV - Gran Theft Auto 4 - Crack + Serial Keygen_fix.2.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA IV - Gran Theft Auto 4 - Crack + Serial Keygen_fix.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Gta Iv Serial Number.txt.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA.4.CRACK.WORKING-LOBO.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA.IV.Crack.Securom.Bypass.Launcher.UBER-PROPER-FeD0R.Neo-REPACK.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA.IV.Crack.Securom.Bypass.Launcher.UBER-PROPER-FeD0R.Neo-REPACK.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA_4_CRACK-WORKING.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTA_GRAND_THEFT_AUTO_IV_4_CRACK_+_ACTIVATION_BYPASS_100%_REAL_TESTED.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\GTAIV__Keygen.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\IK.Multimedia.Amplitube.X-Gear.v1.2.1.VST.RTAS.Incl.KeyGen-DYNAMiCS.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Mafia The City Of Lost Heaven + NoCD Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Medal of Honor Airborne-HATRED Crack+Keygen.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Moto GP 08 v1.0 [MULTI5] Crack by ShellZ.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Need For Speed Undercover with crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\need for speed underground crack.zip.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Need.For.Speed.Undercover.Crack.and.Keygen.RELOADED.zip.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Need.for.Speed.Undercover.Keygen.Only-0x0008.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Need_for_Speed_Carbon- EN +SERIAL+PATCH FRENCH-VERIFTEAM.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\PC Games Sims 2 Incl CRACK.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\PC_Saints.Row.2.-.direct.play.Update.-(Patch) ToeD.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Race Driver GRID - Multi language + CRACK.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Race Driver GRID - Multi language + CRACK.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Race Driver Grid 1.1 patch + crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Roller.coaster.Tycoon.3.-.Multilanguage. .Serial. .No-CD.Patch.(PC-ISO).[EliteTeamX.com].rar.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Roller.coaster.Tycoon.3.-.Multilanguage. .Serial. .No-CD.Patch.(PC-ISO).[EliteTeamX.com].rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Rollercoaster Tycoon 3 Incl Crack.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Rollercoaster Tycoon 3 Incl Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\RollerCoaster Tycoon 3 Mac Crack.zip.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\RollerCoaster Tycoon 3-Updates_Cracked.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\San Andreas DVD +Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Scarface.[Inc.CRACK]-RELOADED.[www.torrentfive.com].torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Sim City 4 Deluxe Edition [Multi12] (Serial included).torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Sim City Societies - Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Sim City Societies + Update + Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\SimCity 4 Deluxe Edition + Serial + NoCD Crack Sim City.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\SimCity 4 Deluxe Incl Crack.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\SimCity 4 Deluxe Incl Crack.2.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\SimCity 4 Deluxe Incl Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\SimCity Societies + UPDATE + CRACK.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\SimCity Societies + UPDATE + CRACK.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\SimCitySocieties.DVD.MULT-LANG.keygen+crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Sims 2 Double Deluxe Crack NFO.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Sims 2 Double Deluxe Crack.rar.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Sims 2 Double Deluxe Crack.rar.2.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Sims 2 Double Deluxe Crack.rar.3.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Sims 2 Double Deluxe Crack.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Sims 2 Pets Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Sims Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Test Drive Unlimited Pc Multilanguage+Crack NoDVD+Serials+Images+Megapack cars by patrickXR1.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\The Godfather (CRACK) - RELOADED.rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\The Sims 2 Mansion Garden Stuff Incl Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\The.Godfather.The.Game with Serial and NoCD Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\The.Sims.2...Bon.Voyage.CLONEDVD.Multi2.inkl.Crack.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\The.Sims.2.Apartment.Life-RELOADED+CRACK Working Confirmed.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\The.Sims.2.Apartment.Life-RELOADED+CRACK Working Confirmed.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\The_Godfather_The_Game_Crackfix.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\TOCA.Race.Driver.3.Crack.Only-RELOADED.1.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\TOCA.Race.Driver.3.Crack.Only-RELOADED.2.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\TOCA.Race.Driver.3.Crack.Only-RELOADED.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Toca.Race.Driver.3.RELOADED-NO-DVD.Crack(www.bitreactor.to).rar.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Tom Clancy Rainbow Six Vegas 2 Keygen Serial Only.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\VirtualDJ.v5.1.Full.Incl.Crack.work.k3yg3n.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\VirtualDJ.v5.1.Full.Incl.Crack.work.keygen - VDJ.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\World of Warcraft + Burning Crusade + patches [2.4.3 enGB] private server wowge.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\WoW 2.4.3 to 3.0.2 Update EU [HpR] crack keygen.zip.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\WoW Glider Keygen.torrent
    C:\Users\geoffrey\AppData\Roaming\uTorrent\Wowglider Keygen.rar.torrent
    C:\Users\geoffrey\Documents\Crack\game.exe
    C:\Users\geoffrey\Documents\Crack\iw3sp (2).exe
    C:\Users\geoffrey\Documents\Crack\iw3sp.exe
    C:\Users\geoffrey\Documents\Crack\need for speed underground crack.zip
    C:\Users\geoffrey\Documents\Crack\rainbows six vegas 2 crack.rar
    C:\Users\geoffrey\Documents\Crack\Sims 2 Double Deluxe Crack.rar
    C:\Users\geoffrey\Documents\Crack\Sims2 pets.exe
    C:\Users\geoffrey\Documents\Crack\Sims2EP9.exe
    C:\Users\geoffrey\Documents\Crack\TOCA Race Driver 3 No-DVD.rar
    C:\Users\geoffrey\Documents\Crack\Toca.Race.Driver.3.RELOADED-NO-DVD.Crack(www.bitreactor.to).rar
    C:\Users\geoffrey\Documents\Crack\zt.exe
    C:\Users\mathias\AppData\Roaming\uTorrent\Pro.Cycling.Manager.2008-RELOADED - CRACK ONLY.torrent
    C:\Users\mathias\AppData\Roaming\uTorrent\Windows XP Pro Corp x64 Bootable CD Incl SP2 And Serial.torrent
    C:\Users\mathias\Documents\Pro.Cycling.Manager.2008-RELOADED_-_CRACK_ONLY.4266298.TPB.torrent
    .
    ===================================
    .
    19489 Octet(s) - C:\Ad-Report-CLEAN.log
    20356 Octet(s) - C:\Ad-Report-SCAN.log
    .
    10 Fichier(s) - C:\Users\geoffrey\AppData\Local\Temp
    1 Fichier(s) - C:\Windows\Temp
    .
    21 Fichier(s) - C:\Program Files\Ad-remover\BACKUP
    79 Fichier(s) - C:\Program Files\Ad-remover\QUARANTINE
    .
    Fin à: 23:15:27 | 28/07/2009
    .
    ============== E.O.F ==============
    .
    a c 267 8 Sécurité
    28 Juillet 2009 23:49:44

  • Désinstalle Ad-Remover.

  • Télécharge OTM (OldTimer) sur ton Bureau.
  • Clique droit sur OTM.exe et choisis Exécuter en tant qu'administrateur.
  • Copie (Ctrl+C) le texte suivant ci-dessous :

    :processes
    explorer.exe

    :services
    ASKService
    ASKUpgrade

    :reg
    [-HKCR\CLSID\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
    [-HKCR\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179}]
    [-HKLM\Software\Classes\CLSID\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
    [-HKLM\Software\Dealio]
    [-HKLM\Software\Microsoft\Internet Explorer\Extensions\{B7FE5D70-9AA2-40F1-9C6B-12A255F085E1}]
    [-HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
    [-HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pacific Poker]
    [-HKLM\Software\Poker 770]
    [-HKLM\Software\Trymedia Systems]
    [-HKLM\Software\Microsoft\Internet Explorer\Toolbar]
    "{3041d03e-fd4b-44e0-b742-2d9b88305f98}"=-
    [-HKCR\CLSID\{0702a2b6-13aa-4090-9e01-bcdc85dd933f}]
    [-HKLM\Software\Classes\CLSID\{0702a2b6-13aa-4090-9e01-bcdc85dd933f}]
    [-HKCR\CLSID\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
    [-HKLM\Software\Classes\CLSID\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
    [-HKCR\CLSID\{b0de3308-5d5a-470d-81b9-634fc078393b}]
    [-HKLM\Software\Classes\CLSID\{b0de3308-5d5a-470d-81b9-634fc078393b}]

    :files
    C:\Program Files\AskBarDis

    :commands
    [purity]
    [emptytemp]
    [reboot]

  • Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.
  • Clique maintenant sur le bouton MoveIt! puis ferme OTM.

    ---> Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
    Accepte en cliquant sur YES.

  • Poste le rapport situé dans ce dossier : C:\_OTM\MovedFiles\
    ---> Le nom du rapport correspond au moment de sa création : date_heure.log
    29 Juillet 2009 00:21:19

    J'ai fait ce que tu ma dis en tant qu'administrateur mais au moment du [emptytemp] ça a fait a cesser de fonctionner j'ai quand même eu un rapport :

    Files moved on Reboot...
    C:\Users\geoffrey\AppData\Local\Temp\~DFBE97.tmp moved successfully.
    File C:\Users\geoffrey\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(157)\Content.IE5\25OR45VY\008%252520crack%2526e%253Dhttp%25253a%25252f%25252fwww.bittorrent.com%25252fsearch%25253fclient%25253dutor...[1].gif not found!
    File C:\Users\geoffrey\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(145)\Content.IE5\V0MGH502\try=fr&affiliate=frrap2k&grp=entertainment&svc=music&reach=rap2k&ee=0&Params.cookie.noupdate=ats&refurl=http%3A%2F%2Fwww.rap2k[1].com%2Fforums&ord=1221081692 not found!
    File C:\Users\geoffrey\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(145)\Content.IE5\5Z4HUPGC\1676,1680,1685,2943,2978,3002,3014,3015,3023,3024,3027,3036,3053,3302,3331,4661,5324,5328,5335,5817,5847&RawValues=&Redirect=;ord=cmAiRhN,bemqargKbwK[1].htm not found!
    File C:\Users\geoffrey\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low(145)\Content.IE5\5Z4HUPGC\417,1446,1461,1462,1463,1676,1680,1685,2943,2976,3000,3024,3029,3302,3332,5111,5324,5328,5336,5817,12511&RawValues=&Redirect=;ord=cKeeKkf,bemqdhoRphf[1].htm not found!

    Registry entries deleted on Reboot...
    a c 267 8 Sécurité
    29 Juillet 2009 01:28:29

  • Mets à jour Adobe Reader.

  • Télécharge Malwarebytes' Anti-Malware (MBAM) sur ton Bureau.
  • Double-clique sur le fichier téléchargé pour lancer le processus d'installation.
  • Dans l'onglet Mise à jour, clique sur le bouton Recherche de mise à jour : si le pare-feu demande l'autorisation à MBAM de se connecter à Internet, accepte.
  • Une fois la mise à jour terminée, rends-toi dans l'onglet Recherche.
  • Sélectionne Exécuter un examen rapide.
  • Clique sur Rechercher. L'analyse démarre.
  • A la fin de l'analyse, un message s'affiche :
    Citation :
    L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.

  • Clique sur OK pour poursuivre. Si MBAM n'a rien trouvé, il te le dira aussi.
  • Ferme tes navigateurs.
  • Si des malwares ont été détectés, clique sur Afficher les résultats.
  • Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection, MBAM va détruire les fichiers et clés de registre infectés et en mettre une copie dans la quarantaine.
  • MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Copie-colle ce rapport dans ta prochaine réponse.
    29 Juillet 2009 02:50:15

    Voila le rapport :

    Malwarebytes' Anti-Malware 1.39
    Version de la base de données: 2524
    Windows 6.0.6001 Service Pack 1

    29/07/2009 02:33:41
    mbam-log-2009-07-29 (02-33-41).txt

    Type de recherche: Examen rapide
    Eléments examinés: 96819
    Temps écoulé: 10 minute(s), 15 second(s)

    Processus mémoire infecté(s): 0
    Module(s) mémoire infecté(s): 0
    Clé(s) du Registre infectée(s): 9
    Valeur(s) du Registre infectée(s): 3
    Elément(s) de données du Registre infecté(s): 1
    Dossier(s) infecté(s): 3
    Fichier(s) infecté(s): 7

    Processus mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Module(s) mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Clé(s) du Registre infectée(s):
    HKEY_CLASSES_ROOT\xml.xml (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\xml.xml.1 (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Typelib\{56acb669-4139-5611-cbba-f5acb0f4db09} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{500bca15-57a7-4eaf-8143-8c619470b13d} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\anti-leech alnn (Trojan.AntiLeechPlugin) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@anti-leech.com/anti-leech plugin,version=1.0.2.3 (Trojan.AntiLeechPlugin) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Anti-Leech (Trojan.AntiLeechPlugin) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\cs41275 (Malware.Trace) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\ColdWare (Malware.Trace) -> Quarantined and deleted successfully.

    Valeur(s) du Registre infectée(s):
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow\*.securewebinfo.com (Trojan.Zlob) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow\*.safetyincludes.com (Trojan.Zlob) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow\*.securemanaging.com (Trojan.Zlob) -> Quarantined and deleted successfully.

    Elément(s) de données du Registre infecté(s):
    HKEY_CLASSES_ROOT\regfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: ("regedit.exe" "%1") Good: (regedit.exe "%1") -> Quarantined and deleted successfully.

    Dossier(s) infecté(s):
    C:\Windows\System32\kBin02 (Trojan.Agent) -> Quarantined and deleted successfully.
    c:\program files\Anti-Leech (Trojan.AntiLeechPlugin) -> Quarantined and deleted successfully.
    c:\program files\anti-leech\ALNN (Trojan.AntiLeechPlugin) -> Quarantined and deleted successfully.

    Fichier(s) infecté(s):
    c:\program files\mozilla firefox\plugins\alhlp.exe (Trojan.AntiLeechPlugin) -> Quarantined and deleted successfully.
    c:\program files\mozilla firefox\plugins\npalnn.dll (Trojan.AntiLeechPlugin) -> Quarantined and deleted successfully.
    c:\program files\anti-leech\ALNN\alhlp.exe (Trojan.AntiLeechPlugin) -> Quarantined and deleted successfully.
    c:\program files\anti-leech\ALNN\npalnn.dll (Trojan.AntiLeechPlugin) -> Quarantined and deleted successfully.
    c:\program files\anti-leech\ALNN\setup2.exe (Trojan.AntiLeechPlugin) -> Quarantined and deleted successfully.
    c:\Users\geoffrey\favorites\Antivirus Scan.url (Rogue.Link) -> Quarantined and deleted successfully.
    C:\Windows\kdiue732.txt (Malware.Trace) -> Quarantined and deleted successfully.

    Petite question : Dans l'onglet Quarantaine de Malwarebytes' Anti-Malware il y a plein de fichier je peux les supprimer ou pas?
    Autre petite question :)  : L'UAC s'est ré-enclencher est-ce normal?
    30 Juillet 2009 17:54:31

    Qu'est ce que je fait maintenant??
    a c 267 8 Sécurité
    30 Juillet 2009 17:59:09

  • Relance MBAM, va dans Quarantaine et supprime tout.

  • Refais un scan RSIT et poste le rapport log.
    30 Juillet 2009 20:09:55

    Logfile of random's system information tool 1.06 (written by random/random)
    Run by geoffrey at 2009-07-30 20:08:38
    Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
    System drive C: has 152 GB (32%) free of 466 GB
    Total RAM: 3070 MB (49% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 20:08:48, on 30/07/2009
    Platform: Windows Vista SP1 (WinNT 6.00.1905)
    MSIE: Internet Explorer v8.00 (8.00.6001.18813)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\Dwm.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\Explorer.EXE
    C:\hp\support\hpsysdrv.exe
    C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
    C:\Program Files\Alwil Software\Avast4\ashDisp.exe
    C:\Windows\system32\schtasks.exe
    C:\Windows\ZSSnp211.exe
    C:\Windows\Domino.exe
    C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
    C:\Windows\System32\rundll32.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Windows\ehome\ehtray.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
    C:\Windows\ehome\ehmsas.exe
    C:\hp\kbd\kbd.exe
    C:\Windows\explorer.exe
    C:\Program Files\Steam\Steam.exe
    C:\Program Files\Logitech\Profiler\LWEmon.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Windows\system32\NOTEPAD.EXE
    C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
    C:\Windows\system32\SearchFilterHost.exe
    C:\Users\geoffrey\Downloads\RSIT(2).exe
    C:\Program Files\trend micro\geoffrey.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&loca...
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O1 - Hosts: ::1 localhost
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll
    O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
    O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
    O4 - HKLM\..\Run: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
    O4 - HKLM\..\Run: [SunJavaUpdateReg] "C:\Windows\system32\jureg.exe"
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [ZSSnp211] C:\Windows\ZSSnp211.exe
    O4 - HKLM\..\Run: [Domino] C:\Windows\Domino.exe
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [H2O] C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [TweakDUN] C:\Program Files\TweakDUN\tweakdun.exe splash
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
    O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
    O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
    O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
    O4 - Startup: OneNote 2007 - Capture d'écran et lancement.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
    O4 - Startup: RollerCoaster Tycoon 3 Registration.lnk = C:\Users\geoffrey\AppData\Local\Temp\{0FB657AB-FFF9-4EDA-9970-CF9E74E61444}\{907B4640-266B-4A21-92FB-CD1A86CD0F63}\ATR1.exe
    O4 - Startup: RollerCoaster Tycoon 3_ Wild Registration.lnk = C:\Users\geoffrey\AppData\Local\Temp\{D513D1FD-0A76-4E70-A671-7425A085F8AE}\{45653847-497F-47BB-A878-46FBDE34A3E0}\ATR1.exe
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
    O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O13 - Gopher Prefix:
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
    O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
    O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
    O23 - Service: DiRT Drivers Auto Removal (pr2ah4nc) (pr2ah4nc) - CODEMASTERS - C:\Windows\system32\pr2ah4nc.exe
    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

    --
    End of file - 9250 bytes

    ======Scheduled tasks folder======

    C:\Windows\tasks\cxokfige.job

    ======Registry dump======

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
    Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
    Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2008-07-07 1562448]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
    Windows Live Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2006-08-31 322368]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
    Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-12 259696]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
    Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll [2009-06-19 669168]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
    Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll [2009-04-27 470512]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
    Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-05-21 41368]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]
    "hpsysdrv"=c:\hp\support\hpsysdrv.exe [2007-04-18 65536]
    "KBD"=C:\HP\KBD\KbdStub.EXE [2006-12-08 65536]
    "OsdMaestro"=C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe [2007-02-15 118784]
    "HP Health Check Scheduler"=[ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe []
    "SunJavaUpdateReg"=C:\Windows\system32\jureg.exe [2007-04-07 54936]
    ""= []
    "avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-02-05 81000]
    "ZSSnp211"=C:\Windows\ZSSnp211.exe [2007-04-06 57344]
    "Domino"=C:\Windows\Domino.exe [2006-08-18 49152]
    "HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]
    "NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2009-02-18 13683232]
    "NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2009-02-18 92704]
    "SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-05-21 148888]
    "H2O"=C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe [2005-10-23 385024]
    "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
    "TweakDUN"=C:\Program Files\TweakDUN\tweakdun.exe splash []

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-19 1233920]
    "swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-03-12 39408]
    "ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952]
    "DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-07-24 490952]
    "msnmsgr"=C:\Program Files\MSN Messenger\msnmsgr.exe [2007-01-19 5674352]
    "ares"=C:\Program Files\Ares\Ares.exe -h []
    "Start WingMan Profiler"= []
    "Steam"=c:\program files\steam\steam.exe [2009-06-17 1217784]
    "WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240]
    "Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-07-16 25604904]

    C:\Users\geoffrey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
    OneNote 2007 - Capture d'écran et lancement.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
    RollerCoaster Tycoon 3 Registration.lnk - C:\Users\geoffrey\AppData\Local\Temp\{0FB657AB-FFF9-4EDA-9970-CF9E74E61444}\{907B4640-266B-4A21-92FB-CD1A86CD0F63}\ATR1.exe
    RollerCoaster Tycoon 3_ Wild Registration.lnk - C:\Users\geoffrey\AppData\Local\Temp\{D513D1FD-0A76-4E70-A671-7425A085F8AE}\{45653847-497F-47BB-A878-46FBDE34A3E0}\ATR1.exe

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
    "dontdisplaylastusername"=0
    "legalnoticecaption"=
    "legalnoticetext"=
    "shutdownwithoutlogon"=1
    "undockwithoutlogon"=1
    "EnableUIADesktopToggle"=0
    "UacDisableNotify"=0

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    "NoDriveAutoRun"=FFFFFFFF
    "NoDriveTypeAutoRun"=255
    "HonorAutoRunSetting"=1

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    "NoDriveAutoRun"=
    "NoDriveTypeAutoRun"=
    "HonorAutoRunSetting"=

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "C:\Program Files\FlashGet Network\FlashGet universal\FlashGet.exe"="C:\Program Files\FlashGet Network\FlashGet universal\FlashGet.exe:*:Enabled:Flashget2"
    "C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdate.exe"="C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdate.exe:*:Enabled:FGLiveUpdate"
    "C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdateEx.exe"="C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdateEx.exe:*:Enabled:FGLiveUpdateEx"

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

    ======File associations======

    .js - edit - C:\Windows\System32\Notepad.exe %1
    .js - open - C:\Windows\System32\WScript.exe "%1" %*

    ======List of files/folders created in the last 1 months======

    2009-07-30 12:13:51 ----A---- C:\Windows\system32\rmoc3260.dll
    2009-07-30 12:13:51 ----A---- C:\Windows\system32\pndx5032.dll
    2009-07-30 12:13:51 ----A---- C:\Windows\system32\pndx5016.dll
    2009-07-30 12:13:50 ----D---- C:\Users\geoffrey\AppData\Roaming\Real
    2009-07-30 12:13:50 ----D---- C:\ProgramData\Real
    2009-07-30 12:13:50 ----D---- C:\Program Files\Real Alternative
    2009-07-29 02:41:47 ----A---- C:\Windows\system32\mshtml.dll
    2009-07-29 02:41:47 ----A---- C:\Windows\system32\ieframe.dll
    2009-07-29 02:41:46 ----A---- C:\Windows\system32\urlmon.dll
    2009-07-29 02:41:46 ----A---- C:\Windows\system32\iertutil.dll
    2009-07-29 02:41:45 ----A---- C:\Windows\system32\wininet.dll
    2009-07-29 02:41:45 ----A---- C:\Windows\system32\occache.dll
    2009-07-29 02:41:45 ----A---- C:\Windows\system32\msfeeds.dll
    2009-07-29 02:41:45 ----A---- C:\Windows\system32\iedkcs32.dll
    2009-07-29 02:41:44 ----A---- C:\Windows\system32\msfeedssync.exe
    2009-07-29 02:41:44 ----A---- C:\Windows\system32\msfeedsbs.dll
    2009-07-29 02:41:44 ----A---- C:\Windows\system32\jsproxy.dll
    2009-07-29 02:41:44 ----A---- C:\Windows\system32\ieUnatt.exe
    2009-07-29 02:41:44 ----A---- C:\Windows\system32\ieui.dll
    2009-07-29 02:41:44 ----A---- C:\Windows\system32\iesysprep.dll
    2009-07-29 02:41:44 ----A---- C:\Windows\system32\iesetup.dll
    2009-07-29 02:41:44 ----A---- C:\Windows\system32\iernonce.dll
    2009-07-29 02:41:44 ----A---- C:\Windows\system32\iepeers.dll
    2009-07-29 02:41:44 ----A---- C:\Windows\system32\ie4uinit.exe
    2009-07-29 02:15:15 ----D---- C:\Users\geoffrey\AppData\Roaming\Malwarebytes
    2009-07-29 02:15:09 ----D---- C:\ProgramData\Malwarebytes
    2009-07-29 02:15:09 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
    2009-07-29 00:13:17 ----D---- C:\_OTM
    2009-07-28 13:13:45 ----A---- C:\Windows\system32\mfc70.dll
    2009-07-27 20:07:15 ----D---- C:\Program Files\Ad-remover
    2009-07-27 18:38:08 ----RASHD---- C:\autorun.inf
    2009-07-27 18:33:11 ----A---- C:\UsbFix.txt
    2009-07-27 17:21:33 ----D---- C:\Program Files\trend micro
    2009-07-27 17:21:32 ----D---- C:\rsit
    2009-07-27 14:08:11 ----A---- C:\cleannavi.txt
    2009-07-27 14:06:57 ----D---- C:\Program Files\Navilog1
    2009-07-26 19:45:35 ----D---- C:\Users\geoffrey\AppData\Roaming\skypePM
    2009-07-26 19:43:14 ----D---- C:\Users\geoffrey\AppData\Roaming\Skype
    2009-07-26 19:42:43 ----D---- C:\Program Files\Common Files\Skype
    2009-07-26 19:42:42 ----RD---- C:\Program Files\Skype
    2009-07-26 19:42:37 ----D---- C:\ProgramData\Skype
    2009-07-18 17:37:48 ----A---- C:\Windows\system32\t2embed.dll
    2009-07-18 17:37:48 ----A---- C:\Windows\system32\fontsub.dll
    2009-07-18 17:37:48 ----A---- C:\Windows\system32\atmfd.dll
    2009-07-18 17:37:47 ----A---- C:\Windows\system32\dciman32.dll
    2009-07-10 12:25:16 ----D---- C:\Users\geoffrey\AppData\Roaming\Steinberg
    2009-07-10 12:24:55 ----A---- C:\Windows\system32\rmbe3260.dll
    2009-07-10 12:24:55 ----A---- C:\Windows\system32\ra32sipr.dll
    2009-07-10 12:24:55 ----A---- C:\Windows\system32\ra32dnet.dll
    2009-07-10 12:24:55 ----A---- C:\Windows\system32\ra3228_8.dll
    2009-07-10 12:24:54 ----A---- C:\Windows\system32\ra3214_4.dll
    2009-07-10 12:24:54 ----A---- C:\Windows\system32\pngu3263.dll
    2009-07-10 12:24:54 ----A---- C:\Windows\system32\pneng50.dll
    2009-07-10 12:24:54 ----A---- C:\Windows\system32\pncrt.dll
    2009-07-10 12:24:54 ----A---- C:\Windows\system32\pnc3250.dll
    2009-07-10 12:24:54 ----A---- C:\Windows\system32\msvcp70.dll
    2009-07-10 12:24:54 ----A---- C:\Windows\system32\encdnet.dll
    2009-07-10 12:24:54 ----A---- C:\Windows\system32\decdnet.dll
    2009-07-10 12:24:53 ----D---- C:\Program Files\ASIO
    2009-07-10 12:24:06 ----D---- C:\Program Files\Cubase SX 3
    2009-07-10 12:22:29 ----A---- C:\Windows\system32\SynsoLChk.dll
    2009-07-10 12:22:28 ----D---- C:\Program Files\Syncrosoft
    2009-07-10 12:06:22 ----D---- C:\Users\geoffrey\AppData\Roaming\Anvil Studio
    2009-07-08 20:42:26 ----D---- C:\Graphics
    2009-07-08 11:30:43 ----D---- C:\Program Files\Euro Truck Simulator
    2009-07-07 12:29:56 ----D---- C:\Program Files\XnView
    2009-07-07 11:21:55 ----D---- C:\Program Files\VTFEdit
    2009-07-07 11:08:14 ----D---- C:\Users\geoffrey\AppData\Roaming\IrfanView
    2009-07-07 11:08:13 ----D---- C:\Program Files\IrfanView
    2009-07-07 11:05:12 ----D---- C:\Program Files\Paint.NET
    2009-07-07 09:52:58 ----D---- C:\Program Files\SprayR
    2009-07-04 17:35:12 ----N---- C:\Windows\system32\mwgfxcopy.exe
    2009-07-04 17:35:12 ----N---- C:\Windows\system32\mwgfx24.dll
    2009-07-04 17:35:12 ----N---- C:\Windows\system32\mwgfx.dll
    2009-07-04 17:35:12 ----N---- C:\Windows\system32\mwdds.dll
    2009-07-04 17:35:12 ----N---- C:\Windows\system32\mwace.dll

    ======List of files/folders modified in the last 1 months======

    2009-07-30 20:08:48 ----D---- C:\Windows\Prefetch
    2009-07-30 20:08:35 ----D---- C:\Windows\Temp
    2009-07-30 18:54:19 ----D---- C:\Program Files\Steam
    2009-07-30 18:51:55 ----D---- C:\Users\geoffrey\AppData\Roaming\Azureus
    2009-07-30 14:22:11 ----SHD---- C:\System Volume Information
    2009-07-30 12:13:51 ----D---- C:\Windows\System32
    2009-07-30 12:13:50 ----RD---- C:\Program Files
    2009-07-30 12:13:50 ----D---- C:\ProgramData
    2009-07-30 11:55:13 ----D---- C:\Windows\inf
    2009-07-30 11:55:13 ----A---- C:\Windows\system32\PerfStringBackup.INI
    2009-07-30 01:30:19 ----AD---- C:\Windows
    2009-07-30 00:20:04 ----D---- C:\Users\geoffrey\AppData\Roaming\XnView
    2009-07-29 18:02:35 ----D---- C:\Windows\system32\migration
    2009-07-29 18:02:35 ----D---- C:\Program Files\Internet Explorer
    2009-07-29 18:01:44 ----D---- C:\Windows\winsxs
    2009-07-29 18:01:01 ----SHD---- C:\Windows\Installer
    2009-07-29 16:05:26 ----D---- C:\Users\geoffrey\AppData\Roaming\LimeWire
    2009-07-29 02:40:46 ----D---- C:\Windows\system32\catroot
    2009-07-29 02:40:45 ----D---- C:\Windows\system32\catroot2
    2009-07-29 02:34:47 ----D---- C:\Windows\system32\drivers
    2009-07-29 02:13:59 ----D---- C:\ProgramData\Adobe
    2009-07-29 02:13:17 ----D---- C:\Program Files\Common Files\Adobe
    2009-07-29 02:13:04 ----D---- C:\Program Files\Adobe
    2009-07-29 02:07:37 ----D---- C:\Program Files\Mozilla Firefox
    2009-07-28 13:14:27 ----D---- C:\Users\geoffrey\AppData\Roaming\AVS4YOU
    2009-07-28 13:14:19 ----D---- C:\Program Files\AVS4YOU
    2009-07-28 13:14:14 ----D---- C:\Program Files\Common Files\AVSMedia
    2009-07-28 11:45:09 ----D---- C:\Programs
    2009-07-27 18:41:01 ----SHD---- C:\$Recycle.Bin
    2009-07-26 23:54:09 ----D---- C:\Program Files\Vuze
    2009-07-26 19:43:13 ----D---- C:\Windows\system32\Tasks
    2009-07-26 19:42:43 ----D---- C:\Program Files\Common Files
    2009-07-18 18:02:46 ----D---- C:\Program Files\Windows Mail
    2009-07-18 18:00:44 ----D---- C:\Windows\Debug
    2009-07-10 12:24:54 ----RSD---- C:\Windows\Fonts
    2009-07-08 16:16:37 ----HD---- C:\Program Files\InstallShield Installation Information
    2009-07-08 11:32:32 ----RSD---- C:\Windows\assembly
    2009-07-07 17:10:56 ----A---- C:\Windows\system32\mrt.exe
    2009-07-05 10:35:39 ----D---- C:\Program Files\GTR-Evolution
    2009-07-04 23:14:14 ----D---- C:\Windows\system32\directx
    2009-07-02 19:08:01 ----D---- C:\Program Files\Common Files\Steam

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2009-02-05 23152]
    R1 aswSP;avast! Self Protection; C:\Windows\system32\drivers\aswSP.sys [2009-02-05 114768]
    R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2009-02-05 51376]
    R2 aswFsBlk;aswFsBlk; C:\Windows\system32\DRIVERS\aswFsBlk.sys [2009-02-05 20560]
    R2 aswMonFlt;aswMonFlt; C:\Windows\system32\DRIVERS\aswMonFlt.sys [2009-02-05 51792]
    R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2008-11-21 271360]
    R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2008-11-21 18048]
    R3 CLEDX;Team H2O CLEDX service; C:\Windows\system32\DRIVERS\cledx.sys [2005-05-09 33792]
    R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2009-03-12 2342688]
    R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvmfdx32.sys [2007-11-17 1040544]
    R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2009-02-18 7765504]
    R3 Ps2;PS2; C:\Windows\system32\DRIVERS\PS2.sys [2005-12-12 19072]
    R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\WmBEnum.sys [2006-06-06 11136]
    R3 WmFilter;Logitech Gaming HID Filter Driver; C:\Windows\system32\drivers\WmFilter.sys [2006-06-06 21632]
    R3 WmHidLo;Logitech Gaming USB Filter Driver; C:\Windows\system32\drivers\WmHidLo.sys [2006-06-06 20864]
    R3 WmVirHid;Logitech Virtual Hid Device Driver; C:\Windows\system32\drivers\WmVirHid.sys [2006-06-06 6400]
    R3 WmXlCore;Logitech WingMan Translation Layer Driver; C:\Windows\system32\drivers\WmXlCore.sys [2006-06-06 46208]
    R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]
    R3 xusb21;Xbox 360 Wireless Receiver Driver Service 21; C:\Windows\system32\DRIVERS\xusb21.sys [2007-08-28 55808]
    S2 Nsynas32;Nsynas32; C:\Windows\system32\drivers\Nsynas32.sys []
    S3 aqty48cn;aqty48cn; C:\Windows\system32\drivers\aqty48cn.sys []
    S3 ASPI;Advanced SCSI Programming Interface Driver; \??\C:\Windows\System32\DRIVERS\ASPI32.sys [2002-07-17 84832]
    S3 catchme;catchme; \??\C:\Users\geoffrey\AppData\Local\Temp\catchme.sys []
    S3 Dot4;Pilote MS IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4.sys [2008-01-19 131584]
    S3 Dot4Print;Pilote de classe Imprimante pour IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2008-01-19 16384]
    S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2008-01-19 36864]
    S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys [2009-03-15 14336]
    S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
    S3 ezplay;VSO Software ezplay; C:\Windows\System32\Drivers\ezplay.sys [2008-08-14 94208]
    S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
    S3 mcdbus;Driver for MagicISO SCSI Host Controller; C:\Windows\system32\DRIVERS\mcdbus.sys [2008-07-28 116736]
    S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
    S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
    S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
    S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
    S3 NPF;Netgroup Packet Filter; C:\Windows\system32\drivers\npf.sys []
    S3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2008-08-14 47360]
    S3 SymIM;Symantec Network Security Intermediate Filter Service; C:\Windows\system32\DRIVERS\SymIM.sys []
    S3 SymIMMP;SymIMMP; C:\Windows\system32\DRIVERS\SymIM.sys []
    S3 usbscan;Pilote de scanneur USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328]
    S3 xnacc;Contrôleur XBOX 360 pour le service de pilote Windows; C:\Windows\system32\DRIVERS\xnacc.sys [2008-01-19 521216]
    S3 ZSMC211;ZSMC USB PC Camera (ZS0211); C:\Windows\System32\Drivers\ZS211.sys [2007-08-03 1470592]
    S4 nvrd32;NVIDIA nForce RAID Driver; C:\Windows\system32\drivers\nvrd32.sys [2007-12-07 131616]
    S4 nvsmu;nvsmu; C:\Windows\system32\drivers\nvsmu.sys [2007-10-12 13312]
    S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]

    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-02-05 18752]
    R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-02-05 138680]
    R2 HP Health Check Service;HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2007-09-19 65536]
    R2 LightScribeService;LightScribeService Direct Disc Labeling Service; c:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-11-19 79136]
    R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2009-02-18 207392]
    R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2009-05-02 66872]
    R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2007-01-09 272024]
    R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-02-05 254040]
    R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-02-05 352920]
    R3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2009-07-02 316664]
    S2 pr2ah4nc;DiRT Drivers Auto Removal (pr2ah4nc); C:\Windows\system32\pr2ah4nc.exe [2007-05-18 407152]
    S3 aspnet_state;Service d'état ASP.NET; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-27 34312]
    S3 Boonty Games;Boonty Games; C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe [2008-10-13 69120]
    S3 GameConsoleService;GameConsoleService; C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe [2007-07-24 181800]
    S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-27 182768]
    S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
    S3 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfservice.exe [2009-03-15 216232]
    S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
    S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
    S3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\MSN Messenger\usnsvc.exe [2007-01-19 97136]

    -----------------EOF-----------------
    a c 267 8 Sécurité
    30 Juillet 2009 20:36:22

    Plus de souci ?
    31 Juillet 2009 14:33:52

    Bah je ne crois pas je ne voit plus Form1 quand je fait ctrl+alt+suppr donc a mon avis c'est bon non?
    a c 267 8 Sécurité
    31 Juillet 2009 14:37:06

  • Supprime ce fichier : C:\Windows\tasks\cxokfige.job

    Tu souhaites conserver Avast ?
    31 Juillet 2009 18:56:00

    J'ai supprimer le fichier que tu m'as dit. Pour avast j'aimerai bien le garder parce que je trouve que c'est un très bon anti-virus pas toi?
    1 Août 2009 01:17:56

    Avast Etait un bon antivirus, maintenant il est en retard ^^
    choisis plutot antivir
    2 Août 2009 13:19:55

    Non merci je garde avast bon bah je crois bien que mon problème est résolu merci beaucoup Destrio5 je te suis très reconnaissant et merci a toi aussi alex9193 ! @+
    a c 267 8 Sécurité
    2 Août 2009 16:32:11

    1/

  • Désinstalle HijackThis.

  • Télécharge ToolsCleaner2 sur ton Bureau.
  • Clique droit sur ToolsCleaner2.exe et choisis Exécuter en tant qu'administrateur.
  • Clique sur Recherche et laisse le scan agir.
  • Clique sur Suppression pour finaliser.
  • Tu peux, si tu le souhaites, te servir des Options Facultatives.
  • Clique sur Quitter pour obtenir le rapport.
  • Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).


    2/

  • Télécharge et installe CCleaner Slim.
  • Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc....
  • Va dans Nettoyeur, choisis Analyser. Une fois terminé, lance le nettoyage.


    3/

  • Il est nécessaire de désactiver puis réactiver la restauration système pour la purger.


    ==Prévention==

    Réactive l'UAC si ce n'est pas déjà fait.

    Conserve MBAM. Il te servira à scanner les fichiers douteux en complément de l'antivirus et scanne le disque dur régulièrement.

    Par rapport au P2P : Lien

    Voici un dossier complet (A lire avec Adobe Reader ou Foxit Reader) : Lien


    ==Problème résolu ?==

    --> Si tu estimes que ton problème est résolu, ajoute [Résolu] au titre. Pour cela :
  • Clique, dans ton premier message, sur le bouton Editer .
  • Ajoute la mention [Résolu] devant le titre.
  • Clique ensuite sur Valider votre message.


    Sois plus vigilant(e) sur Internet ;) 
    3 Août 2009 12:33:09

    Je n'arrive pas a faire une recherche avec ToolsCleaner2 je le lance bien en tant qu'adminisstrateur mais quand je lance la recherche ça fait "ne répond pas" j'ai bien attendu pour voir si ça ne se débloquait pas mais non! Comment faire?
    a c 267 8 Sécurité
    3 Août 2009 16:26:38

  • Supprime OTM, RSIT, les dossiers RSIT et _OTM situés dans C:\ et ToolsCleaner.
    3 Août 2009 18:00:16

    ça y est j'ai supprimer OTM RSIT et ToolsCleaner.
    a c 267 8 Sécurité
    3 Août 2009 19:01:54

    Tu peux passer à la suite.
    3 Août 2009 19:37:40

    C'est a dire :
    "2/

    * Télécharge et installe CCleaner Slim.
    * Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc....
    * Va dans Nettoyeur, choisis Analyser. Une fois terminé, lance le nettoyage. "

    c'est ça? Donc du coup je ne vais pas faire le 1/
    a c 267 8 Sécurité
    3 Août 2009 19:55:06

    Tu as fait le 1/ d'une autre manière ;) 
    3 Août 2009 22:43:38

    Etape 2/ et 3/ c'est fait
    a c 267 8 Sécurité
    4 Août 2009 05:17:14

    Ok ;) 
    4 Août 2009 13:41:29

    C'est fini ? Je met Résolu?
    a c 267 8 Sécurité
    4 Août 2009 13:47:02

    Oui.
    4 Août 2009 14:58:48

    OK je te remercie beaucoup tu m'a vraiment bien aider ça fait plaisir de trouver de gens sympa comme toi Merci beaucoup .
    21 Octobre 2009 11:34:18

    bonjour, j'ai également le même problème avec FORM 1, j'ai fait plusieurs scan rien ne fonctionne. je fait une copie des deux fichiers texte que j'ai obtenu avec random's system information tool. Merci de me donner un coup de main
    Tom's guide dans le monde
    • Allemagne
    • Italie
    • Irlande
    • Royaume Uni
    • Etats Unis
    Suivre Tom's Guide
    Inscrivez-vous à la Newsletter
    • ajouter à twitter
    • ajouter à facebook
    • ajouter un flux RSS