Aller au contenu

karo02

Membres
 Afficher le profil  Afficher son activité

  • Compteur de contenus

    60

  • Inscription

  • Dernière visite

Tout ce qui a été posté par karo02

  1. karo02
    Bonjour QC001 (et Charly qui doit dormir en ce moment je suppose). Donc je suis la manip sans gmer, simplement en effectuant le script via combofix puis un scan vundofix. En mode sans échec, les antivirus n'apparaissent pas dans la barre des tâches : comment faire pour les désactiver ? Dois-je désinstaller l'un des deux tout de suite ? Dans ce cas, vous me recommandez plutôt Antivir j'imagine ? Merci pour l'explication sur la résolution de l'écran, je ne comprenais pas pourquoi cette option était disponible mais ne fonctionnait pas ! Je ferai tout ça tout à l'heure car là je dois aller à mon entrainement de natation... A plus.
  2. karo02
    Merci, bon courage.
  3. karo02
    Il y a plein de trucs qui commencent par : Driver\Kbdclass\Device\keyboardClass0 IRP_MJ_XXXX avec XXX = system control, close, query security, etc. (une cinquantaine de lignes en tout). plus tout en haut PAGE ntoskrnl.exe!TrlCopySid + FF 805673BA 7 Bytes etc??? et tout en bas : ? fdfgugcg.dat le fichier spécifié est introuvable Serait-ce lui le méchant ?
  4. karo02
    C'est ce que j'ai essayé... Mais je ne peux pas "monter" la fenêtre sur l'écran plus haut que la limite basse de la barre de titre, et ensuite même en agrandissant le plus possible vers le bas je n'arrive pas jusqu'au bouton copie. J'ai essayé d'augmenter la résolution de l'écran dans les paramètres d'affichage pour en voir plus mais ça n'a pas l'air de fonctionner en mode sans échec. Là je commence à m'énerver de ne pas réussir à faire ce truc tout con pour pouvoir te poster le rapport, donc j'abandonne et je réessaierai demain. Bon courage pour le boulot !
  5. karo02
    Bon désolée je n'y arrive pas, le scan s'est terminé (enfin, les lignes ont arrêté de défiler en bas de la fenêtre donc je suppose que c'est fini)... mais je ne vois pas de bouton copie, même en essayant de redimensionner la fenêtre dans tous les sens : je ne peux pas la rendre plus haute que la taille de l'écran, il n'y a pas de barre de défilement vertical sur la droite, j'imagine que le bouton copie est en dessous du bouton scan mais je n'arrive pas à y accéder... Y'a une astuce pour redimensionner cette fenêtre ? Le rapport n'est pas quelque part sur le disque ?
  6. karo02
    C'est bon j'ai trouvé (un simple pb de dimensionnement de la fenêtre en mode sans échec), désolée je suis pas super douée... Le scan est en cours.
  7. karo02
    Coucou ! Ne t'excuse pas pour l'attente, je trouve déjà ça super que tu m'aides comme ça ! Par contre avec gmer, dans l'onglet "rootkit" je n'ai pas de bouton scan, il y a OK ou cancel (et OK ne lance visiblement pas de scan). L'onglet rootkit ressemble plutôt à un onglet de config, avec les cases à cocher system, libraries, services etc. Sur l'onglet Autostart j'ai un bouton scan : le scan s'est fait en 5 s, voici le résultat, je ne sais pas si c'était la bonne manip... GMER 1.0.13.12551 - http://www.gmer.net Autostart scan 2007-11-23 21:59:40 Windows 5.1.2600 Service Pack 2 HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems@Windows = %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16 HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon@Userinit = C:\WINDOWS\system32\userinit.exe, HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon@DLLName = WgaLogon.dll HKLM\SYSTEM\CurrentControlSet\Services\ >>> AntiVirScheduler /*AntiVir PersonalEdition Classic Scheduler*/@ = "C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe" AntiVirService /*AntiVir PersonalEdition Classic Guard*/@ = "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe" Apple Mobile Device /*Apple Mobile Device*/@ = "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe" McAfeeFramework /*Service Framework McAfee*/@ = "C:\Program Files\Network Associates\Common Framework\FrameworkService.exe" /ServiceStart McShield /*Network Associates McShield*/@ = "C:\Program Files\Network Associates\VirusScan\Mcshield.exe" McTaskManager /*Network Associates Task Manager*/@ = "C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe" MSI_WLAN_Service /*MSI_WLAN_Service*/@ = "C:\Program Files\MicroStar\WLANUtility\WLAN_Service.exe" NVSvc /*NVIDIA Driver Helper Service*/@ = %SystemRoot%\System32\nvsvc32.exe ScsiPort@ = %SystemRoot%\system32\drivers\scsiport.sys Spooler /*Spouleur d'impression*/@ = %SystemRoot%\system32\spoolsv.exe vsmon /*TrueVector Internet Monitor*/@ = C:\WINDOWS\system32\ZONELABS\vsmon.exe -service HKLM\Software\Microsoft\Windows\CurrentVersion\Run >>> @PCTVOICEpctspk.exe = pctspk.exe @SynTPLprC:\Program Files\Synaptics\SynTP\SynTPLpr.exe = C:\Program Files\Synaptics\SynTP\SynTPLpr.exe @SynTPEnhC:\Program Files\Synaptics\SynTP\SynTPEnh.exe = C:\Program Files\Synaptics\SynTP\SynTPEnh.exe @ESBC:\WINDOWS\System32\ESB.exe = C:\WINDOWS\System32\ESB.exe @NvCplDaemonRUNDLL32.EXE NvQTwk,NvCplDaemon initialize = RUNDLL32.EXE NvQTwk,NvCplDaemon initialize @nwiznwiz.exe /installquiet = nwiz.exe /installquiet @WINPROC AUDITC:\OEMCUST\TOOLS\WIN32\WINPROC.EXE C:\CABS\SCRIPTS\PROCESS\AUDIT.SCR C:\DRIVERS\PROCESS.TXT /TRACE = C:\OEMCUST\TOOLS\WIN32\WINPROC.EXE C:\CABS\SCRIPTS\PROCESS\AUDIT.SCR C:\DRIVERS\PROCESS.TXT /TRACE @RemoteControl"C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" = "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" @TkBellExe"C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot = "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot @SunJavaUpdateSched"C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" = "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" @ShStatEXE"C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE = "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE @McAfeeUpdaterUI"C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey = "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey @Network Associates Error Reporting Service"C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe" = "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe" @Zone Labs ClientC:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe = C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe @WinampAgentC:\Program Files\Winamp\winampa.exe = C:\Program Files\Winamp\winampa.exe @QuickTime Task"C:\Program Files\QuickTime\QTTask.exe" -atboottime = "C:\Program Files\QuickTime\QTTask.exe" -atboottime @iTunesHelper"C:\Program Files\iTunes\iTunesHelper.exe" = "C:\Program Files\iTunes\iTunesHelper.exe" @avgnt"C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min = "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min HKCU\Software\Microsoft\Windows\CurrentVersion\Run >>> @MSMSGS"C:\Program Files\Messenger\msmsgs.exe" /background = "C:\Program Files\Messenger\msmsgs.exe" /background @swgC:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe = C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe HKLM\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad@WPDShServiceObj = C:\WINDOWS\system32\WPDShServiceObj.dll HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved >>> @{1F2E5C40-9550-11CE-99D2-00AA006E086C} /*Page de sécurité NTFS*/rshx32_5.dll = rshx32_5.dll @{42071714-76d4-11d1-8b24-00a0c9068ff3} /*Extension Affichage Panorama du Panneau de configuration*/deskpan.dll /*file not found*/ = deskpan.dll /*file not found*/ @{1CDB2949-8F65-4355-8456-263E7C208A5D} /*Explorateur de Bureau*/C:\WINDOWS\System32\nvshell.dll = C:\WINDOWS\System32\nvshell.dll @{1E9B04FB-F9E5-4718-997B-B8DA88302A47} /*Desktop Explorer Menu*/C:\WINDOWS\System32\nvshell.dll = C:\WINDOWS\System32\nvshell.dll @{32683183-48a0-441b-a342-7c2a440a9478} /*Media Band*/(null) = @{45AC2688-0253-4ED8-97DE-B5370FA7D48A} /*Shell Extension for Malware scanning*/C:\Program Files\Avira\AntiVir PersonalEdition Classic\shlext.dll = C:\Program Files\Avira\AntiVir PersonalEdition Classic\shlext.dll @{596AB062-B4D2-4215-9F74-E9109B0A8153} /*Previous Versions Property Page*/C:\WINDOWS\System32\twext.dll = C:\WINDOWS\System32\twext.dll @{9DB7A13C-F208-4981-8353-73CC61AE2783} /*Previous Versions*/C:\WINDOWS\System32\twext.dll = C:\WINDOWS\System32\twext.dll @{692F0339-CBAA-47e6-B5B5-3B84DB604E87} /*Extensions Manager Folder*/C:\WINDOWS\System32\extmgr.dll = C:\WINDOWS\System32\extmgr.dll @{0006F045-0000-0000-C000-000000000046} /*Microsoft Outlook Custom Icon Handler*/C:\PROGRA~1\MICROS~2\Office\OLKFSTUB.DLL = C:\PROGRA~1\MICROS~2\Office\OLKFSTUB.DLL @{B41DB860-8EE4-11D2-9906-E49FADC173CA} /*WinRAR shell extension*/C:\Program Files\WinRAR\rarext.dll = C:\Program Files\WinRAR\rarext.dll @{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} /*Shell Extensions for RealOne Player*/C:\Program Files\Real\RealPlayer\rpshell.dll = C:\Program Files\Real\RealPlayer\rpshell.dll @{416651E4-9C3C-11D9-8BDE-F66BAD1E3F3A} /*PhoneBrowser*/(null) = @{35786D3C-B075-49b9-88DD-029876E11C01} /*Portable Devices*/%SystemRoot%\system32\wpdshext.dll = %SystemRoot%\system32\wpdshext.dll @{D6791A63-E7E2-4fee-BF52-5DED8E86E9B8} /*Portable Devices Menu*/%SystemRoot%\system32\wpdshext.dll = %SystemRoot%\system32\wpdshext.dll @{B9E1D2CB-CCFF-4AA6-9579-D7A4754030EF} /*iTunes*/C:\Program Files\iTunes\iTunesMiniPlayer.dll = C:\Program Files\iTunes\iTunesMiniPlayer.dll @{00E7B358-F65B-4dcf-83DF-CD026B94BFD4} /*Autoplay for SlideShow*/(null) = HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved@{BDEADF00-C265-11d0-BCED-00A0C90AB50F} /*Dossiers Web*/ = C:\PROGRA~1\FICHIE~1\MICROS~1\WEBFOL~1\MSONSEXT.DLL HKLM\Software\Classes\*\shellex\ContextMenuHandlers\ >>> Shell Extension for Malware scanning@{45AC2688-0253-4ED8-97DE-B5370FA7D48A} = C:\Program Files\Avira\AntiVir PersonalEdition Classic\shlext.dll VirusScan@{cda2863e-2497-4c49-9b89-06840e070a87} = C:\Program Files\Network Associates\VirusScan\shext.dll WinRAR@{B41DB860-8EE4-11D2-9906-E49FADC173CA} = C:\Program Files\WinRAR\rarext.dll HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\ >>> VirusScan@{cda2863e-2497-4c49-9b89-06840e070a87} = C:\Program Files\Network Associates\VirusScan\shext.dll WinRAR@{B41DB860-8EE4-11D2-9906-E49FADC173CA} = C:\Program Files\WinRAR\rarext.dll HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\ >>> Shell Extension for Malware scanning@{45AC2688-0253-4ED8-97DE-B5370FA7D48A} = C:\Program Files\Avira\AntiVir PersonalEdition Classic\shlext.dll VirusScan@{cda2863e-2497-4c49-9b89-06840e070a87} = C:\Program Files\Network Associates\VirusScan\shext.dll WinRAR@{B41DB860-8EE4-11D2-9906-E49FADC173CA} = C:\Program Files\WinRAR\rarext.dll HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects >>> @{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx = C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx @{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll = C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll @{87EFE72E-ED21-48B1-B465-4DEA4ABA77E0}c:\windows\system32\ckbackb.dll = c:\windows\system32\ckbackb.dll @{AA58ED58-01DD-4d91-8333-CF10577473F7}c:\program files\google\googletoolbar4.dll = c:\program files\google\googletoolbar4.dll @{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll = C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll HKLM\Software\Microsoft\Internet Explorer\Main >>> @Default_Page_URLwww.packardbell.fr/center = www.packardbell.fr/center @Start Pageabout:blank = about:blank @Local Page%SystemRoot%\system32\blank.htm = %SystemRoot%\system32\blank.htm HKCU\Software\Microsoft\Internet Explorer\Main >>> @Start Pagehttp://www.google.com = http://www.google.com @Local PageC:\WINDOWS\system32\blank.htm = C:\WINDOWS\system32\blank.htm HKLM\Software\Classes\PROTOCOLS\Handler\ >>> dvd@CLSID = C:\WINDOWS\system32\msvidctl.dll its@CLSID = C:\WINDOWS\System32\itss.dll lid@CLSID = C:\WINDOWS\System32\msvidctl.dll mhtml@CLSID = %SystemRoot%\System32\inetcomm.dll ms-its@CLSID = C:\WINDOWS\System32\itss.dll mso-offdap@CLSID = {3D9F03FA-7A94-11D3-BE81-0050048385D1} /*file not found*/ tv@CLSID = C:\WINDOWS\system32\msvidctl.dll HKLM\Software\Classes\PROTOCOLS\Handler\wia@CLSID = C:\WINDOWS\System32\wiascr.dll C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage >>> Microsoft Office.lnk = Microsoft Office.lnk WlanUtility.lnk = WlanUtility.lnk MS_update_0610_KB72306.exe = MS_update_0610_KB72306.exe ---- EOF - GMER 1.0.13 ----
  8. karo02
    Salut ! OK, on va bien finir par y arriver (enfin quand je dis "on", c'est toi qui fais tout le boulot !). En attendant, est-ce que je peux commencer la procédure de pré-désinfection indiqué en post-it sur le PC qui marche, ou il vaut mieux pas ? (je me dis que s'il commence à merder aussi, je suis mal barrée !).
  9. karo02
    Salut ! Et moi je commence ma journée de travail... Je croyais avoir bien protégé mon ordi avec un pare-feu, un antivirus et un anti-spyware (configurés comme indiqué dans le site de Malekal suite à une précédente infection il y a 2 ans), j'ai dû rater un truc pour me choper des malwares à ce point. Au pire si c'est vraiment trop compliqué de se débarasser de ce $%&*@@# de malware, je peux toujours formater le PC et réinstaller windows ? Ca existe quand même pas encore les bestioles qui résistent à ce genre de traitement ? Et je dois pouvoir récupérer tous mes docs en mode sans échec ? Ou alors vaut mieux pas parce que je risque de récupérer le malware en même temps et que du coup il vaut mieux essayer de décontaminer que reformater ? En tout cas merci beaucoup encore une fois pour ton aide !
  10. karo02
    OK, bon courage pour aller bosser (tu es ailleurs qu'en France ou tu bosses de nuit ?...) Je ne connecte pas l'ordi infecté, de toutes façons seul le mode sans échec sans prise en charge réseau fonctionne. L'écran bleu est toujours là. A plus !
  11. karo02
    OK. Sachant que mes 2 ordi étaient en réseau domestique, j'imagine qu'il va falloir vérifier l'autre aussi ?... Voilà le nouveau rapport : ComboFix 07-11-19.3 - francois platel 2007-11-22 22:26:27.2 - FAT32x86 MINIMAL Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.372 [GMT 1:00] Running from: C:\Documents and Settings\francois platel\Bureau\ComboFix.exe Command switches used :: C:\Documents and Settings\francois platel\Bureau\CFScript.txt FILE C:\WINDOWS\gvcasinos.ini C:\WINDOWS\system32\CKBACKB(2).DLL C:\WINDOWS\System32\ckbackb.dll C:\WINDOWS\system32\ckbackb.dll C:\WINDOWS\System32\cxulbwsr.dat C:\WINDOWS\system32\drivers\fdfgugcg.dat C:\WINDOWS\System32\hfnci.bak C:\WINDOWS\System32\kapwrgbp.dll C:\WINDOWS\System32\kapwrgbp.dll.bak C:\WINDOWS\System32\kdplqnfj.dat C:\WINDOWS\System32\kdplqnfj.dll.bak C:\WINDOWS\System32\tjgeordw.dat C:\WINDOWS\System32\tjgeordw.dll.bak C:\WINDOWS\System32\trnhxibs.dat C:\WINDOWS\System32\uwkxidld.dat . Incapable d'obtenir les privilèges Système (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\PROGRA~1\FICHIE~1\ikwf C:\PROGRA~1\FICHIE~1\ikwf\ikwfa.lck C:\PROGRA~1\FICHIE~1\ikwf\ikwfd\class-barrel C:\PROGRA~1\FICHIE~1\ikwf\ikwfl.lck C:\PROGRA~1\FICHIE~1\ikwf\ikwfm.lck C:\WINDOWS\gvcasinos.ini C:\WINDOWS\system32\CKBACKB(2).DLL C:\WINDOWS\System32\cxulbwsr.dat C:\WINDOWS\system32\drivers\runtime2.sys C:\WINDOWS\System32\hfnci.bak C:\WINDOWS\System32\kapwrgbp.dll C:\WINDOWS\System32\kapwrgbp.dll.bak C:\WINDOWS\System32\kdplqnfj.dat C:\WINDOWS\System32\kdplqnfj.dll.bak C:\WINDOWS\System32\tjgeordw.dat C:\WINDOWS\System32\tjgeordw.dll.bak C:\WINDOWS\System32\trnhxibs.dat C:\WINDOWS\System32\uwkxidld.dat C:\WINDOWS\System32\ckbackb.dll . . . . Echec de suppression C:\WINDOWS\system32\drivers\fdfgugcg.dat . . . . Echec de suppression . ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2007-10-22 to 2007-11-22 )))))))))))))))))))))))))))))))))))) . 2007-11-22 22:35 <REP> d--hs---- C:\FOUND.001 2007-11-22 18:57 <REP> C:\Documents and Settings\PropriÚtaire\Local Settings 2007-11-22 18:57 <REP> C:\Documents and Settings\PropriÚtaire\Local Settings 2007-11-21 16:34 <REP> d-------- C:\VundoFix Backups 2007-11-21 15:25 <REP> d-------- C:\Program Files\Avira 2007-11-21 15:25 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Avira 2007-11-21 09:36 230 --a------ C:\WINDOWS\system32\spupdsvc.inf 2007-11-21 08:39 335 --a------ C:\WINDOWS\system32\vsconfig.xml 2007-11-11 17:43 <REP> d--hs---- C:\FOUND.012 2007-11-11 16:20 <REP> d--hs---- C:\FOUND.011 2007-11-11 14:45 <REP> d--hs---- C:\FOUND.010 . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2007-11-20 19:30 84,480 ----a-w C:\WINDOWS\system32\ckbackb.dll 2007-10-25 16:56 8,510,976 ------w C:\WINDOWS\system32\dllcache\shell32.dll 2007-10-20 10:10 --------- d-----w C:\Program Files\iPod 2007-10-20 10:09 18,688 ----a-w C:\WINDOWS\system32\drivers\fdfgugcg.dat 2007-10-20 10:09 --------- d-----w C:\Program Files\iTunes 2007-10-20 10:08 --------- d-----w C:\Program Files\Amazon 2007-08-22 14:13 474,624 ------w C:\WINDOWS\system32\dllcache\shlwapi.dll 2007-08-22 14:13 152,064 ------w C:\WINDOWS\system32\dllcache\cdfview.dll 2007-08-22 14:13 1,495,040 ------w C:\WINDOWS\system32\dllcache\shdocvw.dll 2007-08-22 14:13 1,056,768 ------w C:\WINDOWS\system32\dllcache\danim.dll 2007-08-22 14:13 1,023,488 ------w C:\WINDOWS\system32\dllcache\browseui.dll . ((((((((((((((((((((((((((((( snapshot@2007-11-22_18.56.56.96 ))))))))))))))))))))))))))))))))))))))))) . + 2007-03-13 09:57:12 163,328 ----a-w C:\WINDOWS\erdnt\subs\F3M\ERDNT.EXE . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{87EFE72E-ED21-48B1-B465-4DEA4ABA77E0}] 2007-11-20 20:30 84480 --a------ c:\windows\system32\ckbackb.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 18:24] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-16 22:51] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "PCTVOICE"="pctspk.exe" [2002-09-10 21:32 C:\WINDOWS\system32\pctspk.exe] "SynTPLpr"="C:\Program Files\Synaptics\SynTP\SynTPLpr.exe" [2002-10-07 16:40] "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2002-10-07 16:40] "ESB"="C:\WINDOWS\System32\ESB.exe" [2002-11-19 10:13] "NvCplDaemon"="RUNDLL32.exe" [2004-08-19 16:10 C:\WINDOWS\system32\rundll32.exe] "nwiz"="nwiz.exe" [2002-11-08 13:25 C:\WINDOWS\system32\nwiz.exe] "WINPROC AUDIT"="C:\OEMCUST\TOOLS\WIN32\WINPROC.exe" [2002-05-13 11:39] "RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2004-11-02 20:24] "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2006-06-01 18:15] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11] "ShStatEXE"="C:\Program Files\Network Associates\VirusScan\SHSTAT.exe" [2004-09-22 08:00] "McAfeeUpdaterUI"="C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" [2006-07-25 03:55] "Network Associates Error Reporting Service"="C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe" [2003-10-07 09:48] "Zone Labs Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [2006-03-16 11:34] "WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2007-05-15 00:22] "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2007-06-29 06:24] "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-09-26 14:42] "avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2007-08-31 12:25] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 18:24] "ikwf"="C:\PROGRA~1\FICHIE~1\ikwf\ikwfm.exe" [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "SharedAccess"=2 (0x2) . Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es' "2007-09-19 15:50:52 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - C:\Program Files\Apple Software Update\SoftwareUpdate.exe . ************************************************************************** catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-11-22 22:36:15 Windows 5.1.2600 Service Pack 2 FAT NTAPI scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2007-11-22 22:37:27 - machine was rebooted C:\ComboFix2.txt ... 2007-11-22 18:57 . --- E O F ---
  12. karo02
    Bonsoir ! Je fais ça tout de suite... C'est grave docteur, on va finir par s'en sortir ? Merci encore.
  13. karo02
    En mode sans échec je n'ai pas d'icone antivir dans la barre des tâches, mais par contre sur la fenêtre principale j'ai "antivir guard : service stopped" donc je suppose que c'est bon... Par contre pendant le scan, ça n'a pas redémarré en mode normal (nouvel écran bleu), donc j'ai rebooté en mode sans échec pour la fin du processus. Voici le rapport : ComboFix 07-11-19.3 - francois platel 2007-11-22 18:42:31.1 - FAT32x86 MINIMAL Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.363 [GMT 1:00] Running from: C:\Documents and Settings\francois platel\Bureau\ComboFix.exe . Incapable d'obtenir les privilèges Système (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\Administrateur\Application Data\NetMon C:\Documents and Settings\Administrateur\Application Data\NetMon\domains.txt C:\Documents and Settings\Administrateur\Application Data\NetMon\log.txt C:\Documents and Settings\Propriétaire\Application Data\NetMon C:\Documents and Settings\Propriétaire\Application Data\NetMon\domains.txt C:\Documents and Settings\Propriétaire\Application Data\NetMon\log.txt C:\Program Files\ymbols~1 C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58 C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\accessories\cup.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\accessories\customer_cup.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\accessories\heart.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\accessories\menu_down.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\accessories\menu_up.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\accessories\plates.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\accessories\ticket.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\accessories\tray.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\audio\music\mainmenumusic.ogg C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\audio\sfx\sfx_bring_check_1_snd.ogg C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\audio\sfx\sfx_deliver_food_1_snd.ogg C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\audio\sfx\sfx_deliver_order_1_snd.ogg C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\audio\sfx\sfx_diner.ogg C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\audio\sfx\sfx_dish_dropoff_1_snd.ogg C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\audio\sfx\sfx_food_ready_1_snd.ogg C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\audio\sfx\sfx_gain_heart_1.ogg C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\audio\sfx\sfx_get_drinks_1_snd.ogg C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\audio\sfx\sfx_party_arrive_1_snd.ogg C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\audio\sfx\sfx_pencil_write_2.ogg C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\audio\sfx\sfx_pickup_food_1_snd.ogg C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\audio\sfx\sfx_rollover_1.ogg C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\audio\sfx\sfx_seat_people_snd.ogg C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\backgrounds\choosedifficulty.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\backgrounds\credits.jpg C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\backgrounds\flo_lose.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\backgrounds\flo_win.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\backgrounds\help1.jpg C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\backgrounds\help2.jpg C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\backgrounds\highscores.jpg C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\backgrounds\levelintro.jpg C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\backgrounds\levelintro_mask.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\backgrounds\levelover.jpg C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\backgrounds\levelover_mask.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\backgrounds\mainmenu.jpg C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\backgrounds\popup.jpg C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\backgrounds\popup_mask.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\backgrounds\upgradegrid.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\backgrounds\upgradetitle.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\backgrounds\upsell.jpg C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\arrowleft_blue.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\arrowleft_yellow.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\arrowright_blue.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\arrowright_yellow.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\back_blue.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\back_yellow.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\backchalk.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\backchalkup.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\backtomenu_blue.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\backtomenu_yellow.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\cancel.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\cancelup.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\career.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\career_over.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\close.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\closeup.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\continue.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\continueover.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\credits_blue.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\credits_yellow.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\download_blue.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\download_yellow.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\easy.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\easy_over.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\endlessshift.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\endlessshift_over.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\hard.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\hard_over.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\help.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\help_over.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\highscores.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\highscores_over.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\instructions_blue.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\instructions_yellow.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\letsplay.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\letsplayover.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\medium.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\medium_over.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\moreinfo.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\moreinfoup.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\off.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\off_on.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\on.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\on_on.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\pause.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\pauseover.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\quit.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\quitgame.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\quitgameover.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\quitover.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\resumegame.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\resumegameover.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\submit.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\submitup.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\tryagain.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\tryagainover.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\upgrade_over.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\upgrade_up.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\viewglobal.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\viewglobalup.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\viewhighscore.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\viewhighscoreon.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\viewlocal.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons\viewlocalup.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\comics\webcomic.jpg C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\config\career.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\config\customer.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\config\endless.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\config\global.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\config\powerups.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\cook\cook.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\cook\cook.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\cook\stove.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\cursor\arrow.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\cursor\click.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\cursor\click2.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\cursor\grab.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\cursor\open.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\old_male\anim.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\old_male\blue\anim.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\old_male\blue\anim.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\old_male\blue\sit_legs.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\old_male\green\anim.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\old_male\green\anim.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\old_male\green\sit_legs.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\old_male\purple\anim.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\old_male\purple\anim.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\old_male\purple\sit_legs.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\old_male\red\anim.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\old_male\red\anim.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\old_male\red\sit_legs.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\old_male\yellow\anim.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\old_male\yellow\anim.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\old_male\yellow\sit_legs.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\young_female\anim.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\young_female\blue\anim.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\young_female\blue\anim.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\young_female\blue\sit_legs.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\young_female\green\anim.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\young_female\green\anim.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\young_female\green\sit_legs.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\young_female\purple\anim.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\young_female\purple\anim.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\young_female\purple\sit_legs.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\young_female\red\anim.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\young_female\red\anim.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\young_female\red\sit_legs.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\young_female\yellow\anim.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\young_female\yellow\anim.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\young_female\yellow\sit_legs.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\flo\idle.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\flo\idle.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\flo\lower.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\flo\lower.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\flo\upper.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\flo\upper.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\fonts\arial.mvec C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\fonts\komikaaxis.mvec C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\furniture\chair.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\furniture\chair.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\furniture\dirt2top.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\furniture\dirt4top.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\furniture\dishcart.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\furniture\dishcart.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\furniture\drinkstation_off.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\furniture\drinkstation_on1.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\furniture\drinkstation_on2.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\furniture\ticketstation.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\furniture\ticketstation.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\hiscore\arrowdown.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\hiscore\arrowdownon.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\hiscore\arrowleft.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\hiscore\arrowlefton.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\hiscore\arrowright.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\hiscore\arrowrighton.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\hiscore\arrowup.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\hiscore\arrowupon.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\hiscore\p1icon.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\hiscore\textedit.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\hiscore\title.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\layouts\endless_1_1.txt C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\layouts\endless_1_1_a.txt C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\layouts\endless_1_1_b.txt C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\layouts\endless_1_1_c.txt C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\layouts\endless_1_2.txt C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\layouts\endless_1_2_a.txt C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\layouts\endless_1_2_b.txt C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\layouts\endless_1_2_c.txt C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\layouts\endless_1_2_d.txt C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\layouts\endless_1_3.txt C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\layouts\endless_1_3_a.txt C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\layouts\endless_1_3_b.txt C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\layouts\endless_1_3_c.txt C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\layouts\endless_1_3_d.txt C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\layouts\fifth_level_diner.txt C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\layouts\first_level_diner.txt C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\layouts\fourth_level_diner.txt C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\layouts\second_level_diner.txt C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\playfirst_logo.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\restaurants\diner\background.jpg C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\restaurants\diner\food\food1.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\restaurants\diner\food\food1.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\restaurants\diner\food\food2.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\restaurants\diner\food\food2.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\restaurants\diner\food\food3.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\restaurants\diner\food\food3.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\restaurants\diner\frames\upgrade_0001.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\restaurants\diner\tables\2top.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\restaurants\diner\tables\2top.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\restaurants\diner\tables\4top.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\restaurants\diner\tables\4top.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\restaurants\diner\upgrades.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\restaurants\tableshadow.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\scripts\choosedifficulty.lua C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\scripts\chooseplayer.lua C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\scripts\chooserestaurant.lua C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\scripts\credits.lua C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\scripts\game.lua C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\scripts\gothighscore.lua C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\scripts\help.lua C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\scripts\help2.lua C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\scripts\hiscore.lua C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\scripts\hiscoreinfo.lua C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\scripts\hiscoresubmit.lua C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\scripts\levelintro.lua C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\scripts\levelover.lua C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\scripts\loading.lua C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\scripts\mainloop.lua C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\scripts\mainmenu.lua C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\scripts\ok.lua C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\scripts\pause.lua C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\scripts\style.lua C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\scripts\tutorialintro.lua C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\scripts\upgrade.lua C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\scripts\upsell.lua C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\scripts\webcomic.lua C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\scripts\yesno.lua C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\splash\gamelabsplash.jpg C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\splash\playfirst_logo.jpg C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\strings.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\angersmoke.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\angersmoke.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\chairflags.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\chairflags.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\check.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\checkmark.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\clock.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\closed.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\closingtime.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\coinflip.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\coinflip.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\dollar.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\doodles\coffee.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\doodles\tables.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\doodles\wallpaper.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\expert.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\expertscore.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\foodpoof.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\foodpoof.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\fork_timer.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\goalcompleted.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\heartgrow.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\heartgrow.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\jar.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\jar.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\level.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\level_career.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\score.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\sound.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\staroff.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\staron.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\tablenumber.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\tablenumberup.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\traynumber.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\tutorial_character.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\tutorialarrow.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\tutorialbox.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\upgradeanim.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\upgradeanim.xml C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\upgrades\drinks.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\upgrades\maitred.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\upgrades\oven.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\upgrades\select.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\upgrades\shoes.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\upgrades\stereo.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\upgrades\table.png C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\dinerdash.exe C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43 C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\accessories\dirty_dishes.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\accessories\foodtray.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\accessories\heart1.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\accessories\heart2.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\accessories\heart3.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\accessories\menu_down.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\accessories\menu_up.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\accessories\mop_prop.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\accessories\ticket.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\music\cafe\cafe_music_a1.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\music\cafe\cafe_music_a2.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\music\cafe\cafe_music_a3.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\music\cafe\cafe_music_a4.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\music\mainmenumusic.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\sfx\baby_cry.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\sfx\chef_cook1.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\sfx\closing_time.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\sfx\customer_ditch.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\sfx\dialog_down.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\sfx\dialog_up.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\sfx\drink_table.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\sfx\expert.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\sfx\highchair_deliver.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\sfx\highchair_pickup.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\sfx\keystroke2.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\sfx\level_lose.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\sfx\level_win.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\sfx\menu_click.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\sfx\menu_rollover.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\sfx\mop_pickup.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\sfx\mop_spill.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\sfx\sfx_bring_check_1_snd.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\sfx\sfx_deliver_food_1_snd.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\sfx\sfx_dish_dropoff_1_snd.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\sfx\sfx_dropoff_drinks_1.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\sfx\sfx_food_ready_1_snd.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\sfx\sfx_gain_heart_1.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\sfx\sfx_get_drinks_1_snd.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\sfx\sfx_menu_down.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\sfx\sfx_party_arrive_1_snd.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\sfx\sfx_pencil_write_2.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\sfx\sfx_pickup_food_1_snd.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\sfx\sfx_seat_people_snd.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\sfx\spill.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\sfx\table_drink.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\sfx\tip_2.ogg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\backgrounds\flo_lose.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\backgrounds\flo_win.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\backgrounds\fullscreendialog.jpg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\backgrounds\high_score_menu_bg.jpg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\backgrounds\levelintro.jpg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\backgrounds\levelintro.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\backgrounds\levelover.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\backgrounds\longdialog.jpg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\backgrounds\longdialog.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\backgrounds\mainmenu.jpg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\backgrounds\mainmenu_logo.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\backgrounds\popup.jpg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\backgrounds\popup.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\backgrounds\textfield.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\backgrounds\upgrade_lines.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\arrowdown_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\arrowdown_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\arrowdown_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\arrowup_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\arrowup_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\arrowup_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\checkbox_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\checkbox_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\checkbox_rotated_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\checkbox_rotated_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\decor_highlight.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\decor_normal.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\decor_selected.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\dialog_button_a_large_1.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\dialog_button_a_large_2.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\dialog_button_a_large_3.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\dialog_button_a_small_1.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\dialog_button_a_small_2.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\dialog_button_a_small_3.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\dialog_button_a1.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\dialog_button_a2.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\dialog_button_a3.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\left_arrow_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\left_arrow_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\left_arrow_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\main_menu_button1_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\main_menu_button1_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\main_menu_button1_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\main_menu_button1_mask.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\main_menu_button2_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\main_menu_button2_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\main_menu_button2_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\main_menu_button2_mask.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\map_button_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\map_button_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\map_button_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\right_arrow_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\right_arrow_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\right_arrow_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\upgrade_down.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\upgrade_over.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\upgrade_up.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons\welcome_player.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\config\actionpoints.bin C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\config\career.bin C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\config\customer.bin C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\config\endless.bin C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\config\global.bin C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\config\powerups.bin C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\cook\stove.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\cursor\arrow.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\cursor\click.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\cursor\click2.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\cursor\grab.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\cursor\open.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\dad_male\anim.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\dad_male\anim.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\dad_male\blue.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\dad_male\blue_legs.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\dad_male\legs.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\dad_male\red.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\dad_male\red_legs.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\kid_male\anim.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\kid_male\anim.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\kid_male\blue.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\kid_male\blue_legs.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\kid_male\legs.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\kid_male\red.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\kid_male\red_legs.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\mom_female\anim.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\mom_female\anim.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\mom_female\baby.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\mom_female\baby.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\mom_female\blue.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\mom_female\blue_baby.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\mom_female\blue_legs.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\mom_female\legs.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\mom_female\red.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\mom_female\red_baby.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\mom_female\red_legs.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\young_female\anim.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\young_female\anim.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\young_female\blue.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\young_female\blue_legs.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\young_female\legs.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\young_female\red.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\young_female\red_legs.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\flo\idle.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\flo\idle.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\flo\lower.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\flo\lower.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\flo\upper.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\flo\upper.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\fonts\mercurius.mvec C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\bench.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\bench.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\blue_highchairbaby.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\chair.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\chair.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\dirt2top.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\dirt4top.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\dishcart.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\dishcart.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\green_highchairbaby.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\highchair_prop_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\highchair_prop_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\highchairbaby.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\highchairbaby.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\luxury_bench.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\luxury_bench.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\mop_station_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\mop_station_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\mop_station_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\podium.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\podium_heart.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\podium_heart.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\purple_highchairbaby.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\radio.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\red_highchairbaby.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\spill.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\spill.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\stereo.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\ticketstation.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\ticketstation.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture\yellow_highchairbaby.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\help\family.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\help\help_dividerline.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\help\help1_colormatch1.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\help\help1_colormatch2.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\help\help1_noise.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\help\help1_score.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\help\help2_cleardishes.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\help\help2_givecheck.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\help\help2_pickupfood.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\help\help2_servefood.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\help\help2_takeorder.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\hiscore\local-hs-bb.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\hiscore\p1icon.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\layouts\career_1_1.bin C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\layouts\career_1_2.bin C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\layouts\career_1_3.bin C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\layouts\career_1_4.bin C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\layouts\career_1_5.bin C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\layouts\career_1_6.bin C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\layouts\endless_1_1.bin C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\layouts\endless_1_1_a.bin C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\layouts\endless_1_1_b.bin C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\layouts\endless_1_1_c.bin C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\playfirstlogo.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\background.jpg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\chairs\blue.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\chairs\green.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\chairs\green.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\chairs\grey.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\chairs\red.pal C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\food\cup1.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\food\food.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\food\food.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\frames\2_0.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\frames\2_1.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\furniture\drinkstation1_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\furniture\drinkstation1_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\furniture\drinkstation1_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\people\cook.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\people\cook.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\props\cup_prop1.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\tables\2top.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\tables\2top.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\tables\4top.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\tables\4top.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\upgrade_icons\cafe_icon_2_0.jpg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\upgrade_icons\cafe_icon_2_1.jpg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\upgrades.xml C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\tableshadow.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\careerupgrade.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\choosedifficulty.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\closeconfirm.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\entername.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\game.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\getmoregames.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\help1.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\help2.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\hiscore.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\hiscoreinfo.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\hiscoresubmit.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\levelintro.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\levelover.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\loading.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\mainloop.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\mainmenu.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\ok.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\pause.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\style.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\upgrade.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\upsell.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts\yesno.lua C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\splash\aol_logo.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\splash\playfirst_logo.jpg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\strings.xml C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\angersmoke.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\angersmoke.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\bubbles\request_bubble.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\bubbles\request_mop.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\bubbles\request_rejectmeal.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\chairflags.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\chairflags.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\check.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\checkmark.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\closed.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\coinflip.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\coinflip.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\decor_lines.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\dollar.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\expert.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\foodpoof.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\foodpoof.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\heartgrow.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\heartgrow.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\jar.anm C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\jar.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\lives_icon.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\noisering.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\notes\music_boost_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\notes\music_boost_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\notes\music_boost_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\notes\music_boost_d.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\notes\music_boost_e.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\notes\music_boost_f.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\tablenumber_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\tablenumber_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\traynumber.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\tutorialarrow.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\tutorialbox.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\ui_base.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\ui_hand.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\ui_timer_off.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\ui_timer_on.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgradeanim.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_bench_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_bench_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_bench_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_drink_station1_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_drink_station1_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_drink_station1_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_luxury_bench_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_luxury_bench_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_luxury_bench_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_oven_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_oven_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_oven_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_podium_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_podium_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_podium_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_powerbars_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_powerbars_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_powerbars_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_radio_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_radio_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_radio_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_stereo_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_stereo_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_stereo_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_table_a.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_table_b.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades\icon_table_c.png C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\upsell\dd1.jpg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\upsell\dd2.jpg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\upsell\dd3.jpg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\upsell\dd4.jpg C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\dinerdash2.exe C:\WINDOWS\mdrive C:\WINDOWS\ppatch~1 C:\WINDOWS\stem32~1 C:\WINDOWS\system32\4_exception.nls C:\WINDOWS\system32\drivers\fdfgugcg.sys C:\WINDOWS\system32\drivers\qilzberb.sys C:\WINDOWS\system32\qmopt.dll C:\WINDOWS\system32\wl.exe C:\WINDOWS\system32\ckbackb.dll . . . . Echec de suppression . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\LEGACY_CMDSERVICE -------\LEGACY_FSTPTZMI -------\LEGACY_NETWORK_MONITOR -------\LEGACY_NWSAPAGENT -------\LEGACY_RUNTIME -------\LEGACY_RUNTIME2 -------\fstptzmi -------\NwSapAgent -------\poof ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2007-10-22 to 2007-11-22 )))))))))))))))))))))))))))))))))))) . 2007-11-21 16:34 <REP> d-------- C:\VundoFix Backups 2007-11-21 15:25 <REP> d-------- C:\Program Files\Avira 2007-11-21 15:25 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Avira 2007-11-11 17:43 <REP> d--hs---- C:\FOUND.012 2007-11-11 16:20 <REP> d--hs---- C:\FOUND.011 2007-11-11 14:45 <REP> d--hs---- C:\FOUND.010 . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2007-11-20 19:30 84,480 ----a-w C:\WINDOWS\system32\ckbackb.dll 2007-10-26 17:59 81,920 ----a-w C:\WINDOWS\system32\CKBACKB(2).DLL 2007-10-25 16:56 8,510,976 ------w C:\WINDOWS\system32\dllcache\shell32.dll 2007-10-20 10:10 --------- d-----w C:\Program Files\iPod 2007-10-20 10:09 18,688 ----a-w C:\WINDOWS\system32\drivers\fdfgugcg.dat 2007-10-20 10:09 --------- d-----w C:\Program Files\iTunes 2007-10-20 10:08 --------- d-----w C:\Program Files\Amazon 2007-10-04 18:59 124,928 ----a-w C:\WINDOWS\system32\kapwrgbp.dll 2007-08-22 14:13 474,624 ------w C:\WINDOWS\system32\dllcache\shlwapi.dll 2007-08-22 14:13 152,064 ------w C:\WINDOWS\system32\dllcache\cdfview.dll 2007-08-22 14:13 1,495,040 ------w C:\WINDOWS\system32\dllcache\shdocvw.dll 2007-08-22 14:13 1,056,768 ------w C:\WINDOWS\system32\dllcache\danim.dll 2007-08-22 14:13 1,023,488 ------w C:\WINDOWS\system32\dllcache\browseui.dll . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{2a6af021-17a2-4014-8624-cf6015f82fad}] [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{39D7900C-461D-86A5-81BA-CF35914FAC04}] [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{87EFE72E-ED21-48B1-B465-4DEA4ABA77E0}] 2007-11-20 20:30 84480 --a------ c:\windows\system32\ckbackb.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 18:24] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-16 22:51] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "PCTVOICE"="pctspk.exe" [2002-09-10 21:32 C:\WINDOWS\system32\pctspk.exe] "SynTPLpr"="C:\Program Files\Synaptics\SynTP\SynTPLpr.exe" [2002-10-07 16:40] "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2002-10-07 16:40] "ESB"="C:\WINDOWS\System32\ESB.exe" [2002-11-19 10:13] "NvCplDaemon"="RUNDLL32.exe" [2004-08-19 16:10 C:\WINDOWS\system32\rundll32.exe] "nwiz"="nwiz.exe" [2002-11-08 13:25 C:\WINDOWS\system32\nwiz.exe] "WINPROC AUDIT"="C:\OEMCUST\TOOLS\WIN32\WINPROC.exe" [2002-05-13 11:39] "RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2004-11-02 20:24] "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2006-06-01 18:15] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11] "ShStatEXE"="C:\Program Files\Network Associates\VirusScan\SHSTAT.exe" [2004-09-22 08:00] "McAfeeUpdaterUI"="C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" [2006-07-25 03:55] "Network Associates Error Reporting Service"="C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe" [2003-10-07 09:48] "Zone Labs Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [2006-03-16 11:34] "WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2007-05-15 00:22] "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2007-06-29 06:24] "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-09-26 14:42] "avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2007-08-31 12:25] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "Wjt"="C:\WINDOWS\??pPatch\n?pdb.exe" [] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 18:24] "ikwf"="C:\PROGRA~1\FICHIE~1\ikwf\ikwfm.exe" [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "SharedAccess"=2 (0x2) R0 sidswawf;Microsoft RPC API Helper;C:\WINDOWS\system32\drivers\fdfgugcg.dat R3 MTC0001_ESB;ESB device driver;C:\WINDOWS\system32\ntESB.sys S1 NaiAvTdi1;NaiAvTdi1;C:\WINDOWS\system32\drivers\mvstdi5x.sys S3 DSDrv4;DSDrv4;\??\C:\PROGRA~1\K!TV\Plugins\S_Bt8x8\DSDrv4.sys S3 M2500;802.11g Wireless Network Driver;C:\WINDOWS\system32\DRIVERS\M2500.sys S3 NuVision;Hauppauge WinTV USB Pro (PAL/SECAM);C:\WINDOWS\system32\DRIVERS\NUVision.sys S3 PortlUSB;PortlUSB;C:\WINDOWS\system32\DRIVERS\YH920GS.sys S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS S4 UpdateManager;Windows Update Manager;C:\WINDOWS\update\updmgr.exe /updatemgr . Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es' "2007-09-19 15:50:52 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - C:\Program Files\Apple Software Update\SoftwareUpdate.exe . ************************************************************************** catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-11-22 18:56:32 Windows 5.1.2600 Service Pack 2 FAT NTAPI scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2007-11-22 18:57:37 - machine was rebooted . --- E O F ---
  14. karo02
    Ca me rassure déjà de savoir que le problème est connu ! (même si ça ne me parle pas beaucoup). En fait c'est parce qu'au départ, je voulais faire la procédure de pré-nettoyage comme indiqué en post-it avant de poster, mais le 1er fichier d'instal d'antivir était corrompu, après j'ai oublié, et quand j'y ai repensé je me suis dit que ça ne pourrait pas faire de mal... mais bon, j'ai bien compris, je ne prends plus d'initiatives ! Je fais ça ce soir en rentrant du boulot, merci pour ton aide.
  15. karo02
    Alors : Le scan VundoFix VundoFix V6.6.2 Checking Java version... Java version is 1.5.0.3 Old versions of java are exploitable and should be removed. Java version is 1.5.0.6 Old versions of java are exploitable and should be removed. Java version is 1.5.0.11 Scan started at 16:34:29 21/11/2007 Listing files found while scanning.... C:\windows\system32\CKBACKB(3).DLL Beginning removal... Attempting to delete C:\windows\system32\CKBACKB(3).DLL C:\windows\system32\CKBACKB(3).DLL Has been deleted! Performing Repairs to the registry. Done! Le scan Diaghelp N'ayant pas de possibilités de connexion réseau sur l'ordi infecté, SIGCHECK n'a pas pu se connecter à internet. J'ai posté le fichier upload... manuellement. DiagHelp version v1.4 - http://www.malekal.com excute le 21/11/2007 à 16:57:46,30 Liste des derniers fichies modifies/crees dans windir\system32 et prefetch C:\WINDOWS\prefetch\LOGONUI.EXE-312BE1BF.pf -->21/11/2007 08:45:26 C:\WINDOWS\prefetch\RUNONCE.EXE-01CA3A2F.pf -->21/11/2007 08:44:30 C:\WINDOWS\prefetch\RUNDLL32.EXE-48A827CE.pf -->21/11/2007 08:41:08 C:\WINDOWS\prefetch\WGATRAY.EXE-350D4455.pf -->21/11/2007 08:40:12 C:\WINDOWS\prefetch\WUAUCLT.EXE-1360D60A.pf -->21/11/2007 08:40:02 C:\WINDOWS\prefetch\ALG.EXE-275708CF.pf -->21/11/2007 08:39:44 C:\WINDOWS\prefetch\IPODSERVICE.EXE-37043579.pf -->21/11/2007 08:39:42 C:\WINDOWS\prefetch\WLAN_SERVICE.EXE-2F88AEEE.pf -->21/11/2007 08:39:42 C:\WINDOWS\prefetch\WMIPRVSE.EXE-0D449B4F.pf -->21/11/2007 08:39:40 C:\WINDOWS\prefetch\IMAPI.EXE-201490BB.pf -->21/11/2007 08:39:34 C:\WINDOWS\System32\drivers\fdfgugcg.dat -->20/10/2007 11:09:56 C:\WINDOWS\System32\drivers\fdfgugcg.sys -->04/10/2007 20:12:56 C:\WINDOWS\System32\drivers\qilzberb.sys -->04/10/2007 20:12:54 C:\WINDOWS\System32\drivers\avipbb.sys -->07/09/2007 12:05:20 C:\WINDOWS\System32\drivers\avgntdd.sys -->09/08/2007 13:04:12 C:\WINDOWS\System32\drivers\avgntmgr.sys -->18/07/2007 14:22:20 C:\WINDOWS\System32\drivers\tcpip.sys -->16/07/2007 14:41:38 C:\WINDOWS\System32\spupdsvc.inf -->21/11/2007 09:36:08 C:\WINDOWS\System32\wpa.dbl -->21/11/2007 08:40:10 C:\WINDOWS\System32\vsconfig.xml -->21/11/2007 08:39:50 C:\WINDOWS\System32\tjgeordw.dat -->20/11/2007 20:46:06 C:\WINDOWS\System32\kdplqnfj.dat -->20/11/2007 20:46:06 C:\WINDOWS\System32\cxulbwsr.dat -->20/11/2007 20:46:06 C:\WINDOWS\System32\ckbackb.dll -->20/11/2007 20:30:26 C:\WINDOWS\System32\trnhxibs.dat -->20/11/2007 20:30:24 C:\WINDOWS\System32\MRT.exe -->02/11/2007 08:12:58 C:\WINDOWS\System32\xpsp3res.dll -->29/10/2007 16:35:14 C:\WINDOWS\System32\FNTCACHE.DAT -->28/10/2007 18:21:28 C:\WINDOWS\System32\ckbackb.dll.bak -->27/10/2007 19:04:44 C:\WINDOWS\System32\CKBACKB(2).DLL -->26/10/2007 18:59:08 C:\WINDOWS\System32\shell32.dll -->25/10/2007 17:56:24 C:\WINDOWS\System32\jupdate-1.6.0_03-b05.log -->20/10/2007 10:51:04 C:\WINDOWS\System32\uwkxidld.dat -->20/10/2007 10:41:08 C:\WINDOWS\System32\hfnci.bak -->04/10/2007 20:00:12 C:\WINDOWS\System32\kapwrgbp.dll -->04/10/2007 19:59:58 C:\WINDOWS\System32\javacpl.cpl -->24/09/2007 23:31:42 C:\WINDOWS\System32\javaws.exe -->24/09/2007 23:31:42 C:\WINDOWS\System32\javaw.exe -->24/09/2007 22:30:30 C:\WINDOWS\System32\java.exe -->24/09/2007 22:30:28 C:\WINDOWS\System32\kapwrgbp.dll.bak -->19/09/2007 18:50:12 C:\WINDOWS\System32\tjgeordw.dll.bak -->14/09/2007 08:14:00 C:\WINDOWS\System32\kdplqnfj.dll.bak -->14/09/2007 08:13:58 C:\WINDOWS\ntbtlog.txt -->21/11/2007 16:56:00 C:\WINDOWS\bootstat.dat -->21/11/2007 16:55:54 C:\WINDOWS\WindowsUpdate.log -->21/11/2007 16:30:26 C:\WINDOWS\iereseticons.log -->21/11/2007 15:25:36 C:\WINDOWS\QTFont.qfn -->21/11/2007 08:39:02 C:\WINDOWS\randseed.rnd -->11/11/2007 16:11:12 C:\WINDOWS\QTFont.for -->19/09/2007 17:32:44 C:\WINDOWS\explorer.exe -->13/06/2007 15:22:28 C:\WINDOWS\win.ini -->17/05/2007 12:53:42 C:\WINDOWS\iltwain.ini -->05/04/2007 21:59:00 C:\WINDOWS\ECONOMISEUR ECRAN.scr -->08/01/2007 19:42:40 C:\WINDOWS\flashax.exe -->08/01/2007 19:42:32 C:\WINDOWS\impborl.dll -->08/01/2007 19:42:32 C:\WINDOWS\system.ini -->03/12/2006 11:45:58 C:\WINDOWS\gvcasinos.ini -->23/09/2006 17:29:10 winlogon.exe Verified: Unsigned svchost.exe Verified: Unsigned ws2_32.dll Verified: Unsigned user32.dll Verified: Unsigned tcpip.sys Verified: Unsigned ndis.sys Verified: Unsigned null.sys Verified: Unsigned ListDLLs v2.25 - DLL lister for Win9x/NT Copyright © 1997-2004 Mark Russinovich Sysinternals - www.sysinternals.com ------------------------------------------------------------------------------ Explorer.EXE pid: 764 Command line: C:\WINDOWS\Explorer.EXE Base Size Version Path 0x58b50000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll 0x76f80000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77000000 0xd4000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x76ac0000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL 0x7d200000 0x2be000 3.01.4000.4039 C:\WINDOWS\system32\msi.dll 0x01500000 0x2c000 C:\Program Files\WinRAR\rarext.dll 0x183b0000 0x7000 8.00.0000.0912 C:\Program Files\Network Associates\VirusScan\shext.dll 0x192f0000 0x3000 8.00.0000.0912 C:\Program Files\Network Associates\VirusScan\RES0c\ShExtRes.dll 0x10000000 0x11000 7.00.0000.0010 C:\Program Files\Avira\AntiVir PersonalEdition Classic\shlext.dll 0x7c250000 0x102000 7.10.3077.0000 C:\Program Files\Avira\AntiVir PersonalEdition Classic\MFC71U.DLL 0x00b20000 0x56000 7.10.3052.0004 C:\Program Files\Avira\AntiVir PersonalEdition Classic\MSVCR71.dll 0x011c0000 0x31000 C:\WINDOWS\system32\ckbackb.dll ListDLLs v2.25 - DLL lister for Win9x/NT Copyright © 1997-2004 Mark Russinovich Sysinternals - www.sysinternals.com ------------------------------------------------------------------------------ winlogon.exe pid: 208 Command line: winlogon.exe Base Size Version Path 0x01000000 0x81000 \??\C:\WINDOWS\system32\winlogon.exe 0x58b50000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\COMCTL32.dll 0x74730000 0x3d000 3.525.1117.0000 C:\WINDOWS\system32\ODBC32.dll 0x20000000 0x18000 3.525.1117.0000 C:\WINDOWS\system32\odbcint.dll 0x00e20000 0x3b000 1.07.0018.0005 C:\WINDOWS\system32\WgaLogon.dll 0x76f80000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77000000 0xd4000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x00f80000 0x31000 C:\WINDOWS\system32\ckbackb.dll 0x6b080000 0x37000 0.09.0007.0003 C:\WINDOWS\system32\libssl32.dll 0x61d80000 0x100000 0.09.0007.0003 C:\WINDOWS\system32\libeay32.dll Le volume dans le lecteur C s'appelle PRINCIPAL Le numéro de série du volume est 0D77-1B06 Répertoire de C:\WINDOWS\temp 21/11/2007 16:55 19 968 startdrv.exe 1 fichier(s) 19 968 octets 0 Rép(s) 18 129 879 040 octets libres Le volume dans le lecteur C s'appelle PRINCIPAL Le numéro de série du volume est 0D77-1B06 Répertoire de C:\WINDOWS\system32 19/08/2004 16:09 6 144 csrss.exe 1 fichier(s) 6 144 octets 0 Rép(s) 18 129 879 040 octets libres Le volume dans le lecteur C s'appelle PRINCIPAL Le numéro de série du volume est 0D77-1B06 Répertoire de C:\WINDOWS\system32 08/11/2002 13:25 278 528 dmcpl.exe 1 fichier(s) 278 528 octets 0 Rép(s) 18 129 879 040 octets libres Contenu de Downloaded Program Files Le volume dans le lecteur C s'appelle PRINCIPAL Le numéro de série du volume est 0D77-1B06 Répertoire de C:\WINDOWS\Downloaded Program Files 25/05/2006 10:44 <REP> . 25/05/2006 10:44 <REP> .. 25/05/2006 12:19 <REP> CONFLICT.1 25/05/2006 12:22 <REP> CONFLICT.2 25/05/2006 13:53 <REP> CONFLICT.3 26/05/2005 04:19 291 wuweb.inf 20/01/2000 15:25 1 162 Microsoft XML Parser for Java.osd 03/06/2002 17:53 144 QTPlugin.inf 05/04/2006 16:12 63 056 MusicManagerUnInstaller.exe 12/07/2006 20:56 <REP> DinerDash.1.0.0.58 03/08/2006 18:20 <REP> DinerDash2.1.0.0.43 27/12/2006 18:46 2 557 752 ImageUploader4.ocx 27/12/2006 18:45 377 ImageUploader4.inf 26/03/2007 16:46 5 085 swflash.inf 7 fichier(s) 2 627 867 octets Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.1 25/05/2006 12:19 <REP> . 25/05/2006 12:19 <REP> .. 0 fichier(s) 0 octets Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.2 25/05/2006 12:22 <REP> . 25/05/2006 12:22 <REP> .. 0 fichier(s) 0 octets Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.3 25/05/2006 13:53 <REP> . 25/05/2006 13:53 <REP> .. 0 fichier(s) 0 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:46 995 328 dinerdash.exe 12/07/2006 20:56 <REP> assets 1 fichier(s) 995 328 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 5 460 playfirst_logo.png 18/11/2005 09:43 11 803 strings.xml 12/07/2006 20:56 <REP> accessories 12/07/2006 20:56 <REP> backgrounds 12/07/2006 20:56 <REP> buttons 12/07/2006 20:56 <REP> comics 12/07/2006 20:56 <REP> config 12/07/2006 20:56 <REP> cook 12/07/2006 20:56 <REP> cursor 12/07/2006 20:56 <REP> flo 12/07/2006 20:56 <REP> fonts 12/07/2006 20:56 <REP> furniture 12/07/2006 20:56 <REP> hiscore 12/07/2006 20:56 <REP> layouts 12/07/2006 20:56 <REP> restaurants 12/07/2006 20:56 <REP> scripts 12/07/2006 20:56 <REP> splash 12/07/2006 20:56 <REP> ui 12/07/2006 20:56 <REP> audio 12/07/2006 20:56 <REP> customers 2 fichier(s) 17 263 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\accessories 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 568 cup.png 18/11/2005 09:43 619 customer_cup.png 18/11/2005 09:43 239 heart.png 18/11/2005 09:43 927 menu_down.png 18/11/2005 09:43 1 244 menu_up.png 18/11/2005 09:43 850 plates.png 18/11/2005 09:43 741 ticket.png 18/11/2005 09:43 1 639 tray.png 8 fichier(s) 6 827 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\backgrounds 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 1 319 choosedifficulty.png 18/11/2005 09:43 12 316 credits.jpg 18/11/2005 09:43 12 927 flo_lose.png 18/11/2005 09:43 13 807 flo_win.png 18/11/2005 09:43 16 725 help1.jpg 18/11/2005 09:43 18 595 help2.jpg 18/11/2005 09:43 14 327 highscores.jpg 18/11/2005 09:43 14 586 levelintro.jpg 18/11/2005 09:43 2 967 levelintro_mask.png 18/11/2005 09:43 14 582 levelover.jpg 18/11/2005 09:43 3 383 levelover_mask.png 18/11/2005 09:43 43 278 mainmenu.jpg 18/11/2005 09:43 7 362 popup.jpg 18/11/2005 09:43 1 899 popup_mask.png 18/11/2005 09:43 6 010 upgradegrid.png 18/11/2005 09:43 3 218 upgradetitle.png 18/11/2005 09:43 39 050 upsell.jpg 17 fichier(s) 226 351 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\buttons 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 825 arrowleft_blue.png 18/11/2005 09:43 995 arrowleft_yellow.png 18/11/2005 09:43 827 arrowright_blue.png 18/11/2005 09:43 991 arrowright_yellow.png 18/11/2005 09:43 2 326 backchalk.png 18/11/2005 09:43 2 960 backchalkup.png 18/11/2005 09:43 1 420 backtomenu_blue.png 18/11/2005 09:43 1 393 backtomenu_yellow.png 18/11/2005 09:43 1 795 back_blue.png 18/11/2005 09:43 1 761 back_yellow.png 18/11/2005 09:43 2 403 cancel.png 18/11/2005 09:43 2 368 cancelup.png 18/11/2005 09:43 2 722 career.png 18/11/2005 09:43 2 714 career_over.png 18/11/2005 09:43 2 156 close.png 18/11/2005 09:43 2 223 closeup.png 18/11/2005 09:43 3 346 continue.png 18/11/2005 09:43 3 208 continueover.png 18/11/2005 09:43 1 378 credits_blue.png 18/11/2005 09:43 1 365 credits_yellow.png 18/11/2005 09:43 2 073 download_blue.png 18/11/2005 09:43 2 081 download_yellow.png 18/11/2005 09:43 2 530 easy.png 18/11/2005 09:43 1 695 easy_over.png 18/11/2005 09:43 2 882 endlessshift.png 18/11/2005 09:43 2 886 endlessshift_over.png 18/11/2005 09:43 2 525 hard.png 18/11/2005 09:43 1 780 hard_over.png 18/11/2005 09:43 1 397 help.png 18/11/2005 09:43 1 395 help_over.png 18/11/2005 09:43 2 871 highscores.png 18/11/2005 09:43 2 871 highscores_over.png 18/11/2005 09:43 1 492 instructions_blue.png 18/11/2005 09:43 1 487 instructions_yellow.png 18/11/2005 09:43 1 491 letsplay.png 18/11/2005 09:43 1 491 letsplayover.png 18/11/2005 09:43 2 934 medium.png 18/11/2005 09:43 1 972 medium_over.png 18/11/2005 09:43 2 909 moreinfo.png 18/11/2005 09:43 2 903 moreinfoup.png 18/11/2005 09:43 580 off.png 18/11/2005 09:43 580 off_on.png 18/11/2005 09:43 505 on.png 18/11/2005 09:43 504 on_on.png 18/11/2005 09:43 827 pause.png 18/11/2005 09:43 843 pauseover.png 18/11/2005 09:43 2 835 quit.png 18/11/2005 09:43 3 776 quitgame.png 18/11/2005 09:43 3 122 quitgameover.png 18/11/2005 09:43 2 866 quitover.png 18/11/2005 09:43 3 762 resumegame.png 18/11/2005 09:43 3 196 resumegameover.png 18/11/2005 09:43 2 812 submit.png 18/11/2005 09:43 2 737 submitup.png 18/11/2005 09:43 3 175 tryagain.png 18/11/2005 09:43 3 244 tryagainover.png 18/11/2005 09:43 4 392 upgrade_over.png 18/11/2005 09:43 4 429 upgrade_up.png 18/11/2005 09:43 4 235 viewglobal.png 18/11/2005 09:43 4 219 viewglobalup.png 18/11/2005 09:43 3 710 viewhighscore.png 18/11/2005 09:43 3 250 viewhighscoreon.png 18/11/2005 09:43 4 189 viewlocal.png 18/11/2005 09:43 4 173 viewlocalup.png 64 fichier(s) 150 802 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\comics 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 31 920 webcomic.jpg 1 fichier(s) 31 920 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\config 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 33 657 career.xml 18/11/2005 09:43 11 169 customer.xml 18/11/2005 09:43 17 741 endless.xml 18/11/2005 09:43 621 global.xml 18/11/2005 09:43 3 137 powerups.xml 5 fichier(s) 66 325 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\cook 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 6 690 cook.png 18/11/2005 09:43 3 091 cook.xml 18/11/2005 09:43 228 stove.png 3 fichier(s) 10 009 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\cursor 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 1 773 arrow.png 18/11/2005 09:43 2 028 click.png 18/11/2005 09:43 1 926 click2.png 18/11/2005 09:43 1 726 grab.png 18/11/2005 09:43 2 274 open.png 5 fichier(s) 9 727 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\flo 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 21 613 idle.png 18/11/2005 09:43 2 752 idle.xml 18/11/2005 09:43 6 943 lower.png 18/11/2005 09:43 2 177 lower.xml 18/11/2005 09:43 16 974 upper.png 18/11/2005 09:43 6 892 upper.xml 6 fichier(s) 57 351 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\fonts 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 36 107 arial.mvec 18/11/2005 09:43 34 231 komikaaxis.mvec 2 fichier(s) 70 338 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\furniture 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 5 529 chair.png 18/11/2005 09:43 2 914 chair.xml 18/11/2005 09:43 1 512 dirt2top.png 18/11/2005 09:43 1 762 dirt4top.png 18/11/2005 09:43 11 831 dishcart.png 18/11/2005 09:43 1 455 dishcart.xml 18/11/2005 09:43 2 990 drinkstation_off.png 18/11/2005 09:43 3 248 drinkstation_on1.png 18/11/2005 09:43 2 965 drinkstation_on2.png 18/11/2005 09:43 14 012 ticketstation.png 18/11/2005 09:43 2 621 ticketstation.xml 11 fichier(s) 50 839 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\hiscore 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 700 arrowdown.png 18/11/2005 09:43 699 arrowdownon.png 18/11/2005 09:43 684 arrowleft.png 18/11/2005 09:43 684 arrowlefton.png 18/11/2005 09:43 677 arrowright.png 18/11/2005 09:43 679 arrowrighton.png 18/11/2005 09:43 701 arrowup.png 18/11/2005 09:43 703 arrowupon.png 18/11/2005 09:43 357 p1icon.png 18/11/2005 09:43 3 844 textedit.png 18/11/2005 09:43 2 066 title.png 11 fichier(s) 11 794 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\layouts 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 301 endless_1_1.txt 18/11/2005 09:43 301 endless_1_1_a.txt 18/11/2005 09:43 301 endless_1_1_b.txt 18/11/2005 09:43 301 endless_1_1_c.txt 18/11/2005 09:43 301 endless_1_2.txt 18/11/2005 09:43 301 endless_1_2_a.txt 18/11/2005 09:43 313 endless_1_2_b.txt 18/11/2005 09:43 301 endless_1_2_c.txt 18/11/2005 09:43 301 endless_1_2_d.txt 18/11/2005 09:43 301 endless_1_3.txt 18/11/2005 09:43 301 endless_1_3_a.txt 18/11/2005 09:43 301 endless_1_3_b.txt 18/11/2005 09:43 301 endless_1_3_c.txt 18/11/2005 09:43 301 endless_1_3_d.txt 18/11/2005 09:43 313 fifth_level_diner.txt 18/11/2005 09:43 313 first_level_diner.txt 18/11/2005 09:43 313 fourth_level_diner.txt 18/11/2005 09:43 313 second_level_diner.txt 18 fichier(s) 5 478 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\restaurants 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 2 996 tableshadow.png 12/07/2006 20:56 <REP> diner 1 fichier(s) 2 996 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\restaurants\diner 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 23 014 background.jpg 18/11/2005 09:43 443 upgrades.xml 12/07/2006 20:56 <REP> food 12/07/2006 20:56 <REP> frames 12/07/2006 20:56 <REP> tables 2 fichier(s) 23 457 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\restaurants\diner\food 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 3 323 food1.png 18/11/2005 09:43 679 food1.xml 18/11/2005 09:43 3 217 food2.png 18/11/2005 09:43 678 food2.xml 18/11/2005 09:43 3 263 food3.png 18/11/2005 09:43 678 food3.xml 6 fichier(s) 11 838 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\restaurants\diner\frames 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 28 970 upgrade_0001.png 1 fichier(s) 28 970 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\restaurants\diner\tables 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 2 142 2top.png 18/11/2005 09:43 1 757 2top.xml 18/11/2005 09:43 1 926 4top.png 18/11/2005 09:43 2 227 4top.xml 4 fichier(s) 8 052 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\scripts 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 1 947 choosedifficulty.lua 18/11/2005 09:43 3 861 chooseplayer.lua 18/11/2005 09:43 1 497 chooserestaurant.lua 18/11/2005 09:43 8 311 credits.lua 18/11/2005 09:43 3 992 game.lua 18/11/2005 09:43 1 300 gothighscore.lua 18/11/2005 09:43 2 500 help.lua 18/11/2005 09:43 3 381 help2.lua 18/11/2005 09:43 14 475 hiscore.lua 18/11/2005 09:43 702 hiscoreinfo.lua 18/11/2005 09:43 3 784 hiscoresubmit.lua 18/11/2005 09:43 1 582 levelintro.lua 18/11/2005 09:43 3 623 levelover.lua 18/11/2005 09:43 775 loading.lua 18/11/2005 09:43 569 mainloop.lua 18/11/2005 09:43 2 548 mainmenu.lua 18/11/2005 09:43 836 ok.lua 18/11/2005 09:43 2 057 pause.lua 18/11/2005 09:43 1 323 style.lua 18/11/2005 09:43 1 521 tutorialintro.lua 18/11/2005 09:43 2 754 upgrade.lua 18/11/2005 09:43 943 upsell.lua 18/11/2005 09:43 2 202 webcomic.lua 18/11/2005 09:43 1 516 yesno.lua 24 fichier(s) 67 999 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\splash 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 7 639 gamelabsplash.jpg 18/11/2005 09:43 21 506 playfirst_logo.jpg 2 fichier(s) 29 145 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 3 181 angersmoke.png 18/11/2005 09:43 1 179 angersmoke.xml 18/11/2005 09:43 2 098 chairflags.png 18/11/2005 09:43 1 884 chairflags.xml 18/11/2005 09:43 1 641 check.png 18/11/2005 09:43 335 checkmark.png 18/11/2005 09:43 9 739 clock.png 18/11/2005 09:43 3 021 closed.png 18/11/2005 09:43 5 511 closingtime.png 18/11/2005 09:43 2 511 coinflip.png 18/11/2005 09:43 1 146 coinflip.xml 18/11/2005 09:43 1 182 dollar.png 18/11/2005 09:43 6 341 expert.png 18/11/2005 09:43 3 910 expertscore.png 18/11/2005 09:43 5 463 foodpoof.png 18/11/2005 09:43 640 foodpoof.xml 18/11/2005 09:43 2 676 fork_timer.png 18/11/2005 09:43 2 680 goalcompleted.png 18/11/2005 09:43 2 013 heartgrow.png 18/11/2005 09:43 1 117 heartgrow.xml 18/11/2005 09:43 18 939 jar.png 18/11/2005 09:43 941 jar.xml 18/11/2005 09:43 10 376 level.png 18/11/2005 09:43 4 276 level_career.png 18/11/2005 09:43 8 910 score.png 18/11/2005 09:43 697 sound.png 18/11/2005 09:43 862 staroff.png 18/11/2005 09:43 1 830 staron.png 18/11/2005 09:43 2 187 tablenumber.png 18/11/2005 09:43 2 303 tablenumberup.png 18/11/2005 09:43 419 traynumber.png 18/11/2005 09:43 1 014 tutorialarrow.png 18/11/2005 09:43 1 880 tutorialbox.png 18/11/2005 09:43 6 924 tutorial_character.png 18/11/2005 09:43 11 027 upgradeanim.png 18/11/2005 09:43 1 457 upgradeanim.xml 12/07/2006 20:56 <REP> doodles 12/07/2006 20:56 <REP> upgrades 36 fichier(s) 132 310 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\doodles 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 5 155 coffee.png 18/11/2005 09:43 3 960 tables.png 18/11/2005 09:43 2 928 wallpaper.png 3 fichier(s) 12 043 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\ui\upgrades 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 2 301 drinks.png 18/11/2005 09:43 4 505 maitred.png 18/11/2005 09:43 3 783 oven.png 18/11/2005 09:43 4 177 select.png 18/11/2005 09:43 2 482 shoes.png 18/11/2005 09:43 4 267 stereo.png 18/11/2005 09:43 3 924 table.png 7 fichier(s) 25 439 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\audio 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 12/07/2006 20:56 <REP> music 12/07/2006 20:56 <REP> sfx 0 fichier(s) 0 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\audio\music 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 55 809 mainmenumusic.ogg 1 fichier(s) 55 809 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\audio\sfx 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 5 299 sfx_bring_check_1_snd.ogg 18/11/2005 09:43 3 602 sfx_deliver_food_1_snd.ogg 18/11/2005 09:43 5 560 sfx_deliver_order_1_snd.ogg 18/11/2005 09:43 9 248 sfx_diner.ogg 18/11/2005 09:43 3 906 sfx_dish_dropoff_1_snd.ogg 18/11/2005 09:43 3 932 sfx_food_ready_1_snd.ogg 18/11/2005 09:43 3 650 sfx_gain_heart_1.ogg 18/11/2005 09:43 14 169 sfx_get_drinks_1_snd.ogg 18/11/2005 09:43 6 727 sfx_party_arrive_1_snd.ogg 18/11/2005 09:43 4 861 sfx_pencil_write_2.ogg 18/11/2005 09:43 4 413 sfx_pickup_food_1_snd.ogg 18/11/2005 09:43 2 868 sfx_rollover_1.ogg 18/11/2005 09:43 4 862 sfx_seat_people_snd.ogg 13 fichier(s) 73 097 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 12/07/2006 20:56 <REP> old_male 12/07/2006 20:56 <REP> young_female 0 fichier(s) 0 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\old_male 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 13 644 anim.xml 12/07/2006 20:56 <REP> blue 12/07/2006 20:56 <REP> green 12/07/2006 20:56 <REP> purple 12/07/2006 20:56 <REP> red 12/07/2006 20:56 <REP> yellow 1 fichier(s) 13 644 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\old_male\blue 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 14 880 anim.png 18/11/2005 09:43 1 479 anim.xml 18/11/2005 09:43 678 sit_legs.png 3 fichier(s) 17 037 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\old_male\green 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 14 567 anim.png 18/11/2005 09:43 1 481 anim.xml 18/11/2005 09:43 626 sit_legs.png 3 fichier(s) 16 674 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\old_male\purple 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 14 859 anim.png 18/11/2005 09:43 1 483 anim.xml 18/11/2005 09:43 640 sit_legs.png 3 fichier(s) 16 982 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\old_male\red 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 14 840 anim.png 18/11/2005 09:43 1 477 anim.xml 18/11/2005 09:43 649 sit_legs.png 3 fichier(s) 16 966 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\old_male\yellow 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 14 982 anim.png 18/11/2005 09:43 1 483 anim.xml 18/11/2005 09:43 786 sit_legs.png 3 fichier(s) 17 251 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\young_female 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 13 571 anim.xml 12/07/2006 20:56 <REP> blue 12/07/2006 20:56 <REP> green 12/07/2006 20:56 <REP> purple 12/07/2006 20:56 <REP> red 12/07/2006 20:56 <REP> yellow 1 fichier(s) 13 571 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\young_female\blue 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 11 922 anim.png 18/11/2005 09:43 1 485 anim.xml 18/11/2005 09:43 476 sit_legs.png 3 fichier(s) 13 883 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\young_female\green 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 11 759 anim.png 18/11/2005 09:43 1 487 anim.xml 18/11/2005 09:43 448 sit_legs.png 3 fichier(s) 13 694 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\young_female\purple 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 11 875 anim.png 18/11/2005 09:43 1 489 anim.xml 18/11/2005 09:43 475 sit_legs.png 3 fichier(s) 13 839 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\young_female\red 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 11 584 anim.png 18/11/2005 09:43 1 483 anim.xml 18/11/2005 09:43 466 sit_legs.png 3 fichier(s) 13 533 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash.1.0.0.58\assets\customers\young_female\yellow 12/07/2006 20:56 <REP> . 12/07/2006 20:56 <REP> .. 18/11/2005 09:43 12 011 anim.png 18/11/2005 09:43 1 489 anim.xml 18/11/2005 09:43 483 sit_legs.png 3 fichier(s) 13 983 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 15:05 1 062 504 dinerdash2.exe 03/08/2006 18:20 <REP> assets 1 fichier(s) 1 062 504 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 15:00 5 537 playfirstlogo.png 01/05/2006 15:00 86 710 strings.xml 03/08/2006 18:20 <REP> accessories 03/08/2006 18:20 <REP> backgrounds 03/08/2006 18:20 <REP> buttons 03/08/2006 18:20 <REP> config 03/08/2006 18:20 <REP> cook 03/08/2006 18:20 <REP> cursor 03/08/2006 18:20 <REP> flo 03/08/2006 18:20 <REP> fonts 03/08/2006 18:20 <REP> furniture 03/08/2006 18:20 <REP> help 03/08/2006 18:20 <REP> hiscore 03/08/2006 18:20 <REP> layouts 03/08/2006 18:20 <REP> restaurants 03/08/2006 18:20 <REP> scripts 03/08/2006 18:20 <REP> splash 03/08/2006 18:20 <REP> ui 03/08/2006 18:20 <REP> upsell 03/08/2006 18:20 <REP> audio 03/08/2006 18:20 <REP> customers 2 fichier(s) 92 247 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\accessories 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 14:59 798 dirty_dishes.png 01/05/2006 14:59 787 foodtray.png 01/05/2006 14:59 371 heart1.png 01/05/2006 14:59 404 heart2.png 01/05/2006 14:59 371 heart3.png 01/05/2006 14:59 777 menu_down.png 01/05/2006 14:59 986 menu_up.png 01/05/2006 14:59 964 mop_prop.png 01/05/2006 14:59 560 ticket.png 9 fichier(s) 6 018 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\backgrounds 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 14:59 15 803 flo_lose.png 01/05/2006 14:59 16 812 flo_win.png 01/05/2006 14:59 14 259 fullscreendialog.jpg 01/05/2006 14:59 18 889 high_score_menu_bg.jpg 01/05/2006 14:59 19 669 levelintro.jpg 01/05/2006 14:59 3 800 levelintro.png 01/05/2006 15:00 22 613 levelover.png 01/05/2006 15:00 13 556 longdialog.jpg 01/05/2006 15:00 868 longdialog.png 01/05/2006 15:00 41 896 mainmenu.jpg 01/05/2006 15:00 12 671 mainmenu_logo.png 01/05/2006 15:00 13 135 popup.jpg 01/05/2006 15:00 1 614 popup.png 01/05/2006 15:00 208 textfield.png 01/05/2006 15:00 914 upgrade_lines.png 15 fichier(s) 196 707 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\buttons 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 15:00 1 478 arrowdown_a.png 01/05/2006 15:00 1 455 arrowdown_b.png 01/05/2006 15:00 1 969 arrowdown_c.png 01/05/2006 15:00 1 471 arrowup_a.png 01/05/2006 15:00 1 412 arrowup_b.png 01/05/2006 15:00 1 952 arrowup_c.png 01/05/2006 15:00 297 checkbox_a.png 01/05/2006 15:00 707 checkbox_b.png 01/05/2006 15:00 655 checkbox_rotated_a.png 01/05/2006 15:00 1 151 checkbox_rotated_b.png 01/05/2006 15:00 344 decor_highlight.png 01/05/2006 15:00 307 decor_normal.png 01/05/2006 15:00 345 decor_selected.png 01/05/2006 15:00 999 dialog_button_a1.png 01/05/2006 15:00 1 014 dialog_button_a2.png 01/05/2006 15:00 1 803 dialog_button_a3.png 01/05/2006 15:00 1 036 dialog_button_a_large_1.png 01/05/2006 15:00 1 040 dialog_button_a_large_2.png 01/05/2006 15:00 1 930 dialog_button_a_large_3.png 01/05/2006 15:00 833 dialog_button_a_small_1.png 01/05/2006 15:00 828 dialog_button_a_small_2.png 01/05/2006 15:00 1 418 dialog_button_a_small_3.png 01/05/2006 15:00 1 180 left_arrow_a.png 01/05/2006 15:00 1 148 left_arrow_b.png 01/05/2006 15:00 1 645 left_arrow_c.png 01/05/2006 15:00 1 083 main_menu_button1_a.png 01/05/2006 15:00 1 087 main_menu_button1_b.png 01/05/2006 15:00 1 651 main_menu_button1_c.png 01/05/2006 15:00 1 125 main_menu_button1_mask.png 01/05/2006 15:00 903 main_menu_button2_a.png 01/05/2006 15:00 936 main_menu_button2_b.png 01/05/2006 15:00 1 320 main_menu_button2_c.png 01/05/2006 15:00 857 main_menu_button2_mask.png 01/05/2006 15:00 1 341 map_button_a.png 01/05/2006 15:00 1 319 map_button_b.png 01/05/2006 15:00 1 614 map_button_c.png 01/05/2006 15:00 1 152 right_arrow_a.png 01/05/2006 15:00 1 162 right_arrow_b.png 01/05/2006 15:00 1 619 right_arrow_c.png 01/05/2006 15:00 3 606 upgrade_down.png 01/05/2006 15:00 4 125 upgrade_over.png 01/05/2006 15:00 3 594 upgrade_up.png 01/05/2006 15:00 395 welcome_player.png 43 fichier(s) 57 306 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\config 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 15:00 589 actionpoints.bin 01/05/2006 15:00 8 353 career.bin 01/05/2006 15:00 5 965 customer.bin 01/05/2006 15:00 2 937 endless.bin 01/05/2006 15:00 1 229 global.bin 01/05/2006 15:00 5 785 powerups.bin 6 fichier(s) 24 858 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\cook 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 15:00 228 stove.png 1 fichier(s) 228 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\cursor 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 15:00 4 287 arrow.png 01/05/2006 15:00 4 352 click.png 01/05/2006 15:00 4 319 click2.png 01/05/2006 15:00 4 254 grab.png 01/05/2006 15:00 4 500 open.png 5 fichier(s) 21 712 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\flo 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 15:00 2 986 idle.anm 01/05/2006 15:00 29 416 idle.png 01/05/2006 15:00 2 699 lower.anm 01/05/2006 15:00 17 108 lower.png 01/05/2006 15:00 5 850 upper.anm 01/05/2006 15:00 35 546 upper.png 6 fichier(s) 93 605 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\fonts 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 15:00 65 569 mercurius.mvec 1 fichier(s) 65 569 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\furniture 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 15:00 417 bench.anm 01/05/2006 15:00 1 100 bench.png 01/05/2006 15:00 1 048 blue_highchairbaby.pal 01/05/2006 15:00 765 chair.anm 01/05/2006 15:00 7 241 chair.png 01/05/2006 15:00 2 264 dirt2top.png 01/05/2006 15:00 2 463 dirt4top.png 01/05/2006 15:00 687 dishcart.anm 01/05/2006 15:00 18 509 dishcart.png 01/05/2006 15:00 1 048 green_highchairbaby.pal 01/05/2006 15:00 1 227 highchairbaby.anm 01/05/2006 15:00 6 207 highchairbaby.png 01/05/2006 15:00 1 415 highchair_prop_a.png 01/05/2006 15:00 1 692 highchair_prop_b.png 01/05/2006 15:00 445 luxury_bench.anm 01/05/2006 15:00 2 300 luxury_bench.png 01/05/2006 15:00 4 804 mop_station_a.png 01/05/2006 15:00 1 367 mop_station_b.png 01/05/2006 15:00 1 743 mop_station_c.png 01/05/2006 15:00 2 792 podium.png 01/05/2006 15:00 501 podium_heart.anm 01/05/2006 15:00 911 podium_heart.png 01/05/2006 15:00 1 048 purple_highchairbaby.pal 01/05/2006 15:00 2 985 radio.png 01/05/2006 15:00 1 048 red_highchairbaby.pal 01/05/2006 15:00 594 spill.anm 01/05/2006 15:00 2 462 spill.png 01/05/2006 15:00 2 982 stereo.png 01/05/2006 15:00 1 270 ticketstation.anm 01/05/2006 15:00 9 112 ticketstation.png 01/05/2006 15:00 1 048 yellow_highchairbaby.pal 31 fichier(s) 83 495 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\help 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 15:00 3 756 family.png 01/05/2006 15:00 5 037 help1_colormatch1.png 01/05/2006 15:00 4 182 help1_colormatch2.png 01/05/2006 15:00 9 703 help1_noise.png 01/05/2006 15:00 4 364 help1_score.png 01/05/2006 15:00 4 131 help2_cleardishes.png 01/05/2006 15:00 6 663 help2_givecheck.png 01/05/2006 15:00 3 024 help2_pickupfood.png 01/05/2006 15:00 5 278 help2_servefood.png 01/05/2006 15:00 6 553 help2_takeorder.png 01/05/2006 15:00 298 help_dividerline.png 11 fichier(s) 52 989 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\hiscore 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 15:00 2 485 local-hs-bb.png 01/05/2006 15:00 515 p1icon.png 2 fichier(s) 3 000 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\layouts 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 15:00 313 career_1_1.bin 01/05/2006 15:00 313 career_1_2.bin 01/05/2006 15:00 313 career_1_3.bin 01/05/2006 15:00 313 career_1_4.bin 01/05/2006 15:00 313 career_1_5.bin 01/05/2006 15:00 313 career_1_6.bin 01/05/2006 15:00 301 endless_1_1.bin 01/05/2006 15:00 301 endless_1_1_a.bin 01/05/2006 15:00 301 endless_1_1_b.bin 01/05/2006 15:00 301 endless_1_1_c.bin 10 fichier(s) 3 082 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 15:00 292 tableshadow.png 03/08/2006 18:20 <REP> cafe 1 fichier(s) 292 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 15:00 24 017 background.jpg 01/05/2006 15:00 625 upgrades.xml 03/08/2006 18:20 <REP> chairs 03/08/2006 18:20 <REP> food 03/08/2006 18:20 <REP> frames 03/08/2006 18:20 <REP> furniture 03/08/2006 18:20 <REP> people 03/08/2006 18:20 <REP> props 03/08/2006 18:20 <REP> tables 03/08/2006 18:20 <REP> upgrade_icons 2 fichier(s) 24 642 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\chairs 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 15:00 1 048 blue.pal 01/05/2006 15:00 587 green.anm 01/05/2006 15:00 1 795 green.png 01/05/2006 15:00 1 048 grey.pal 01/05/2006 15:00 1 048 red.pal 5 fichier(s) 5 526 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\food 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 15:00 610 cup1.png 01/05/2006 15:00 555 food.anm 01/05/2006 15:00 2 554 food.png 3 fichier(s) 3 719 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\frames 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 15:00 16 355 2_0.png 01/05/2006 15:00 20 071 2_1.png 2 fichier(s) 36 426 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\furniture 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 15:00 2 730 drinkstation1_a.png 01/05/2006 15:00 3 285 drinkstation1_b.png 01/05/2006 15:00 2 194 drinkstation1_c.png 3 fichier(s) 8 209 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\people 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 15:00 944 cook.anm 01/05/2006 15:00 7 566 cook.png 2 fichier(s) 8 510 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\props 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 15:00 558 cup_prop1.png 1 fichier(s) 558 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\tables 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 15:00 705 2top.anm 01/05/2006 15:00 2 043 2top.png 01/05/2006 15:00 777 4top.anm 01/05/2006 15:00 2 373 4top.png 4 fichier(s) 5 898 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\restaurants\cafe\upgrade_icons 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 15:00 3 174 cafe_icon_2_0.jpg 01/05/2006 15:00 3 539 cafe_icon_2_1.jpg 2 fichier(s) 6 713 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\scripts 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 15:00 2 516 careerupgrade.lua 01/05/2006 15:00 1 587 choosedifficulty.lua 01/05/2006 15:00 348 closeconfirm.lua 01/05/2006 15:00 1 677 entername.lua 01/05/2006 15:00 5 656 game.lua 01/05/2006 15:00 2 773 getmoregames.lua 01/05/2006 15:00 6 085 help1.lua 01/05/2006 15:00 3 984 help2.lua 01/05/2006 15:00 16 831 hiscore.lua 01/05/2006 15:00 637 hiscoreinfo.lua 01/05/2006 15:00 4 037 hiscoresubmit.lua 01/05/2006 15:00 1 590 levelintro.lua 01/05/2006 15:00 5 176 levelover.lua 01/05/2006 15:00 786 loading.lua 01/05/2006 15:00 1 459 mainloop.lua 01/05/2006 15:00 5 293 mainmenu.lua 01/05/2006 15:00 930 ok.lua 01/05/2006 15:00 2 811 pause.lua 01/05/2006 15:00 3 484 style.lua 01/05/2006 15:00 5 070 upgrade.lua 01/05/2006 15:00 3 861 upsell.lua 01/05/2006 15:00 1 652 yesno.lua 22 fichier(s) 78 243 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\splash 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 15:00 7 620 aol_logo.png 01/05/2006 15:00 28 669 playfirst_logo.jpg 2 fichier(s) 36 289 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 15:00 527 angersmoke.anm 01/05/2006 15:00 2 764 angersmoke.png 01/05/2006 15:00 601 chairflags.anm 01/05/2006 15:00 1 924 chairflags.png 01/05/2006 15:00 497 check.png 01/05/2006 15:00 335 checkmark.png 01/05/2006 15:00 1 933 closed.png 01/05/2006 15:00 469 coinflip.anm 01/05/2006 15:00 1 717 coinflip.png 01/05/2006 15:00 240 decor_lines.png 01/05/2006 15:00 1 361 dollar.png 01/05/2006 15:00 9 207 expert.png 01/05/2006 15:00 453 foodpoof.anm 01/05/2006 15:00 4 220 foodpoof.png 01/05/2006 15:00 457 heartgrow.anm 01/05/2006 15:00 1 041 heartgrow.png 01/05/2006 15:00 1 039 jar.anm 01/05/2006 15:00 6 888 jar.png 01/05/2006 15:00 1 558 lives_icon.png 01/05/2006 15:00 684 noisering.png 01/05/2006 15:00 1 027 tablenumber_a.png 01/05/2006 15:00 1 084 tablenumber_b.png 01/05/2006 15:00 419 traynumber.png 01/05/2006 15:00 1 008 tutorialarrow.png 01/05/2006 15:00 1 580 tutorialbox.png 01/05/2006 15:00 6 441 ui_base.png 01/05/2006 15:00 3 447 ui_hand.png 01/05/2006 15:00 2 946 ui_timer_off.png 01/05/2006 15:00 3 409 ui_timer_on.png 01/05/2006 15:00 1 771 upgradeanim.png 03/08/2006 18:20 <REP> bubbles 03/08/2006 18:20 <REP> notes 03/08/2006 18:20 <REP> upgrades 30 fichier(s) 61 047 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\bubbles 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 15:00 861 request_bubble.png 01/05/2006 15:00 970 request_mop.png 01/05/2006 15:00 2 075 request_rejectmeal.png 3 fichier(s) 3 906 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\notes 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 15:00 305 music_boost_a.png 01/05/2006 15:00 312 music_boost_b.png 01/05/2006 15:00 324 music_boost_c.png 01/05/2006 15:00 300 music_boost_d.png 01/05/2006 15:00 360 music_boost_e.png 01/05/2006 15:00 328 music_boost_f.png 6 fichier(s) 1 929 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\ui\upgrades 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 15:00 1 166 icon_bench_a.png 01/05/2006 15:00 1 527 icon_bench_b.png 01/05/2006 15:00 1 508 icon_bench_c.png 01/05/2006 15:00 2 796 icon_drink_station1_a.png 01/05/2006 15:00 3 319 icon_drink_station1_b.png 01/05/2006 15:00 3 428 icon_drink_station1_c.png 01/05/2006 15:00 2 260 icon_luxury_bench_a.png 01/05/2006 15:00 2 705 icon_luxury_bench_b.png 01/05/2006 15:00 2 409 icon_luxury_bench_c.png 01/05/2006 15:00 3 766 icon_oven_a.png 01/05/2006 15:00 4 308 icon_oven_b.png 01/05/2006 15:00 4 181 icon_oven_c.png 01/05/2006 15:00 2 785 icon_podium_a.png 01/05/2006 15:00 3 209 icon_podium_b.png 01/05/2006 15:00 2 844 icon_podium_c.png 01/05/2006 15:00 3 702 icon_powerbars_a.png 01/05/2006 15:00 3 812 icon_powerbars_b.png 01/05/2006 15:00 3 456 icon_powerbars_c.png 01/05/2006 15:00 3 108 icon_radio_a.png 01/05/2006 15:00 3 624 icon_radio_b.png 01/05/2006 15:00 3 366 icon_radio_c.png 01/05/2006 15:00 2 171 icon_stereo_a.png 01/05/2006 15:00 2 382 icon_stereo_b.png 01/05/2006 15:00 2 305 icon_stereo_c.png 01/05/2006 15:00 3 392 icon_table_a.png 01/05/2006 15:00 3 374 icon_table_b.png 01/05/2006 15:00 3 055 icon_table_c.png 27 fichier(s) 79 958 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\upsell 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 15:00 20 060 dd1.jpg 01/05/2006 15:00 18 770 dd2.jpg 01/05/2006 15:00 19 767 dd3.jpg 01/05/2006 15:00 23 967 dd4.jpg 4 fichier(s) 82 564 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 03/08/2006 18:20 <REP> music 03/08/2006 18:20 <REP> sfx 0 fichier(s) 0 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\music 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 14:59 102 785 mainmenumusic.ogg 03/08/2006 18:20 <REP> cafe 1 fichier(s) 102 785 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\music\cafe 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 14:59 26 626 cafe_music_a1.ogg 01/05/2006 14:59 26 360 cafe_music_a2.ogg 01/05/2006 14:59 26 385 cafe_music_a3.ogg 01/05/2006 14:59 27 416 cafe_music_a4.ogg 4 fichier(s) 106 787 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\audio\sfx 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 14:59 6 088 baby_cry.ogg 01/05/2006 14:59 12 509 chef_cook1.ogg 01/05/2006 14:59 3 881 closing_time.ogg 01/05/2006 14:59 3 340 customer_ditch.ogg 01/05/2006 14:59 7 049 dialog_down.ogg 01/05/2006 14:59 6 918 dialog_up.ogg 01/05/2006 14:59 5 743 drink_table.ogg 01/05/2006 14:59 9 432 expert.ogg 01/05/2006 14:59 3 776 highchair_deliver.ogg 01/05/2006 14:59 3 680 highchair_pickup.ogg 01/05/2006 14:59 4 354 keystroke2.ogg 01/05/2006 14:59 6 211 level_lose.ogg 01/05/2006 14:59 5 502 level_win.ogg 01/05/2006 14:59 2 878 menu_click.ogg 01/05/2006 14:59 2 942 menu_rollover.ogg 01/05/2006 14:59 3 323 mop_pickup.ogg 01/05/2006 14:59 4 676 mop_spill.ogg 01/05/2006 14:59 5 299 sfx_bring_check_1_snd.ogg 01/05/2006 14:59 3 602 sfx_deliver_food_1_snd.ogg 01/05/2006 14:59 3 906 sfx_dish_dropoff_1_snd.ogg 01/05/2006 14:59 7 803 sfx_dropoff_drinks_1.ogg 01/05/2006 14:59 3 932 sfx_food_ready_1_snd.ogg 01/05/2006 14:59 3 650 sfx_gain_heart_1.ogg 01/05/2006 14:59 14 169 sfx_get_drinks_1_snd.ogg 01/05/2006 14:59 4 279 sfx_menu_down.ogg 01/05/2006 14:59 6 727 sfx_party_arrive_1_snd.ogg 01/05/2006 14:59 4 861 sfx_pencil_write_2.ogg 01/05/2006 14:59 4 413 sfx_pickup_food_1_snd.ogg 01/05/2006 14:59 4 862 sfx_seat_people_snd.ogg 01/05/2006 14:59 4 609 spill.ogg 01/05/2006 14:59 4 600 table_drink.ogg 01/05/2006 14:59 11 642 tip_2.ogg 32 fichier(s) 180 656 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 03/08/2006 18:20 <REP> dad_male 03/08/2006 18:20 <REP> kid_male 03/08/2006 18:20 <REP> mom_female 03/08/2006 18:20 <REP> young_female 0 fichier(s) 0 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\dad_male 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 15:00 9 668 anim.anm 01/05/2006 15:00 44 312 anim.png 01/05/2006 15:00 1 048 blue.pal 01/05/2006 15:00 1 048 blue_legs.pal 01/05/2006 15:00 649 legs.png 01/05/2006 15:00 1 048 red.pal 01/05/2006 15:00 1 048 red_legs.pal 7 fichier(s) 58 821 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\kid_male 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 15:00 10 922 anim.anm 01/05/2006 15:00 27 387 anim.png 01/05/2006 15:00 1 048 blue.pal 01/05/2006 15:00 1 048 blue_legs.pal 01/05/2006 15:00 543 legs.png 01/05/2006 15:00 1 048 red.pal 01/05/2006 15:00 1 048 red_legs.pal 7 fichier(s) 43 044 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\mom_female 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 15:00 20 354 anim.anm 01/05/2006 15:00 65 289 anim.png 01/05/2006 15:00 804 baby.anm 01/05/2006 15:00 4 021 baby.png 01/05/2006 15:00 1 048 blue.pal 01/05/2006 15:00 1 048 blue_baby.pal 01/05/2006 15:00 1 048 blue_legs.pal 01/05/2006 15:00 597 legs.png 01/05/2006 15:00 1 048 red.pal 01/05/2006 15:00 1 048 red_baby.pal 01/05/2006 15:00 1 048 red_legs.pal 11 fichier(s) 97 353 octets Répertoire de C:\WINDOWS\Downloaded Program Files\DinerDash2.1.0.0.43\assets\customers\young_female 03/08/2006 18:20 <REP> . 03/08/2006 18:20 <REP> .. 01/05/2006 15:00 10 422 anim.anm 01/05/2006 15:00 45 796 anim.png 01/05/2006 15:00 1 048 blue.pal 01/05/2006 15:00 1 048 blue_legs.pal 01/05/2006 15:00 650 legs.png 01/05/2006 15:00 1 048 red.pal 01/05/2006 15:00 1 048 red_legs.pal 7 fichier(s) 61 060 octets Total des fichiers listés : 624 fichier(s) 7 848 686 octets 251 Rép(s) 18 129 354 752 octets libres Recherche de rootkit! (Merci S!Ri) C:\WINDOWS\temp\startdrv.exe existe : possible précense rootkit runtime.sys/runtime2.sys Recherche d'infections connues Export des clefs sensibles.. Liste des fichiers en exception sur le pare-feu XP SP2 "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\\Documents and Settings\\francois platel\\Mes documents\\LimeWire\\LimeWire.exe"="C:\\Documents and Settings\\francois platel\\Mes documents\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire" "C:\\Program Files\\BitTorrent\\bittorrent.exe"="C:\\Program Files\\BitTorrent\\bittorrent.exe:*:Enabled:BitTorrent" "C:\\Program Files\\Network Associates\\Common Framework\\FrameworkService.exe"="C:\\Program Files\\Network Associates\\Common Framework\\FrameworkService.exe:*:Enabled:McAfee Framework Service" "C:\\Program Files\\VideoLAN\\VLC\\vlc.exe"="C:\\Program Files\\VideoLAN\\VLC\\vlc.exe:*:Enabled:VLC media player" "C:\\Program Files\\Microsoft Games\\Dungeon Siege 2\\DungeonSiege2.exe"="C:\\Program Files\\Microsoft Games\\Dungeon Siege 2\\DungeonSiege2.exe:*:Enabled:Dungeon Siege 2 Game Executable" "C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes" "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" Export de la clef SharedTaskScheduler [sharedTaskScheduler] "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui" "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant" exports des policies REGEDIT4 [system] "dontdisplaylastusername"=dword:00000000 "legalnoticecaption"="" "legalnoticetext"="" "shutdownwithoutlogon"=dword:00000001 "undockwithoutlogon"=dword:00000001 Export des clefs sensibles.. Rechercher adresses sensibles dans le fichier HOSTS... catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-11-21 16:58:27 Windows 5.1.2600 Service Pack 2 FAT NTAPI scanning hidden services ... HKLM\SYSTEM\CurrentControlSet\Services\.NETFrameworkorking HKLM\SYSTEM\CurrentControlSet\Services\Abiosdskeworkorking HKLM\SYSTEM\CurrentControlSet\Services\abp480n5eworkorking HKLM\SYSTEM\CurrentControlSet\Services\ACPI80n5eworkorking HKLM\SYSTEM\CurrentControlSet\Services\ACPIECn5eworkorking HKLM\SYSTEM\CurrentControlSet\Services\adpu160meworkorking HKLM\SYSTEM\CurrentControlSet\Services\aecu160meworkorking HKLM\SYSTEM\CurrentControlSet\Services\AFDu160meworkorking HKLM\SYSTEM\CurrentControlSet\Services\Aha154xmeworkorking HKLM\SYSTEM\CurrentControlSet\Services\aic78u2meworkorking HKLM\SYSTEM\CurrentControlSet\Services\aic78xxmeworkorking HKLM\SYSTEM\CurrentControlSet\Services\ALCXWDMmeworkorking HKLM\SYSTEM\CurrentControlSet\Services\Alertermeworkorking HKLM\SYSTEM\CurrentControlSet\Services\ALGrtermeworkorking HKLM\SYSTEM\CurrentControlSet\Services\AliIdermeworkorking HKLM\SYSTEM\CurrentControlSet\Services\amsintrmeworkorking HKLM\SYSTEM\CurrentControlSet\Services\AntiVirSchedulering HKLM\SYSTEM\CurrentControlSet\Services\AntiVirServiceering HKLM\SYSTEM\CurrentControlSet\Services\AppMgmtobile Device HKLM\SYSTEM\CurrentControlSet\Services\Arp1394obile Device HKLM\SYSTEM\CurrentControlSet\Services\asc1394obile Device HKLM\SYSTEM\CurrentControlSet\Services\asc3350pbile Device HKLM\SYSTEM\CurrentControlSet\Services\asc3550pbile Device HKLM\SYSTEM\CurrentControlSet\Services\ASP.NETpbile Device HKLM\SYSTEM\CurrentControlSet\Services\ASP.NET_1.1.4322ice HKLM\SYSTEM\CurrentControlSet\Services\aspnet_state4322ice HKLM\SYSTEM\CurrentControlSet\Services\AsyncMactate4322ice HKLM\SYSTEM\CurrentControlSet\Services\atapiMactate4322ice HKLM\SYSTEM\CurrentControlSet\Services\Atdiskactate4322ice HKLM\SYSTEM\CurrentControlSet\Services\Atmarpcctate4322ice HKLM\SYSTEM\CurrentControlSet\Services\AudioSrvtate4322ice HKLM\SYSTEM\CurrentControlSet\Services\audstubvtate4322ice HKLM\SYSTEM\CurrentControlSet\Services\avgioubvtate4322ice HKLM\SYSTEM\CurrentControlSet\Services\avgntflttate4322ice HKLM\SYSTEM\CurrentControlSet\Services\avipbblttate4322ice HKLM\SYSTEM\CurrentControlSet\Services\BattCblttate4322ice HKLM\SYSTEM\CurrentControlSet\Services\BeepCblttate4322ice HKLM\SYSTEM\CurrentControlSet\Services\BITSCblttate4322ice HKLM\SYSTEM\CurrentControlSet\Services\BRIDGElttate4322ice HKLM\SYSTEM\CurrentControlSet\Services\BridgeMPtate4322ice HKLM\SYSTEM\CurrentControlSet\Services\BrowserPtate4322ice HKLM\SYSTEM\CurrentControlSet\Services\cbidf2kPtate4322ice HKLM\SYSTEM\CurrentControlSet\Services\CCDECODEtate4322ice HKLM\SYSTEM\CurrentControlSet\Services\cd20xrnttate4322ice HKLM\SYSTEM\CurrentControlSet\Services\Cdaudiottate4322ice HKLM\SYSTEM\CurrentControlSet\Services\Cdfsdiottate4322ice HKLM\SYSTEM\CurrentControlSet\Services\Cdromiottate4322ice HKLM\SYSTEM\CurrentControlSet\Services\Changerttate4322ice HKLM\SYSTEM\CurrentControlSet\Services\cisvcerttate4322ice HKLM\SYSTEM\CurrentControlSet\Services\ClipSrvttate4322ice HKLM\SYSTEM\CurrentControlSet\Services\CmBattvttate4322ice HKLM\SYSTEM\CurrentControlSet\Services\CmdIdevttate4322ice HKLM\SYSTEM\CurrentControlSet\Services\Compbatttate4322ice HKLM\SYSTEM\CurrentControlSet\Services\COMSysAppate4322ice HKLM\SYSTEM\CurrentControlSet\Services\ContentFilter322ice HKLM\SYSTEM\CurrentControlSet\Services\ContentIndexr322ice HKLM\SYSTEM\CurrentControlSet\Services\Cpqarrayndexr322ice HKLM\SYSTEM\CurrentControlSet\Services\CryptSvcndexr322ice HKLM\SYSTEM\CurrentControlSet\Services\dac2w2kcndexr322ice HKLM\SYSTEM\CurrentControlSet\Services\dac960ntndexr322ice HKLM\SYSTEM\CurrentControlSet\Services\DcomLaunchexr322ice HKLM\SYSTEM\CurrentControlSet\Services\DhcpLaunchexr322ice HKLM\SYSTEM\CurrentControlSet\Services\DiskLaunchexr322ice HKLM\SYSTEM\CurrentControlSet\Services\dmadminnchexr322ice HKLM\SYSTEM\CurrentControlSet\Services\dmbootnnchexr322ice HKLM\SYSTEM\CurrentControlSet\Services\dmiootnnchexr322ice HKLM\SYSTEM\CurrentControlSet\Services\dmloadnnchexr322ice HKLM\SYSTEM\CurrentControlSet\Services\dmserverchexr322ice HKLM\SYSTEM\CurrentControlSet\Services\DMusicerchexr322ice HKLM\SYSTEM\CurrentControlSet\Services\Dnscachechexr322ice HKLM\SYSTEM\CurrentControlSet\Services\dpti2ohechexr322ice HKLM\SYSTEM\CurrentControlSet\Services\drmkaudechexr322ice HKLM\SYSTEM\CurrentControlSet\Services\DSDrv4dechexr322ice HKLM\SYSTEM\CurrentControlSet\Services\EntDrv51chexr322ice HKLM\SYSTEM\CurrentControlSet\Services\ERSvcv51chexr322ice HKLM\SYSTEM\CurrentControlSet\Services\Eventlogchexr322ice HKLM\SYSTEM\CurrentControlSet\Services\EventSystemxr322ice HKLM\SYSTEM\CurrentControlSet\Services\Fastfatstemxr322ice HKLM\SYSTEM\CurrentControlSet\Services\FdctUserSwitchingCompatibility HKLM\SYSTEM\CurrentControlSet\Services\FipsUserSwitchingCompatibility HKLM\SYSTEM\CurrentControlSet\Services\FlpydiskSwitchingCompatibility HKLM\SYSTEM\CurrentControlSet\Services\FltMgrskSwitchingCompatibility HKLM\SYSTEM\CurrentControlSet\Services\fstptzmiSwitchingCompatibility HKLM\SYSTEM\CurrentControlSet\Services\Fs_RecmiSwitchingCompatibility HKLM\SYSTEM\CurrentControlSet\Services\FtdiskmiSwitchingCompatibility HKLM\SYSTEM\CurrentControlSet\Services\GEARAspiWDMtchingCompatibility HKLM\SYSTEM\CurrentControlSet\Services\GpcRAspiWDMtchingCompatibility HKLM\SYSTEM\CurrentControlSet\Services\gusvcspiWDMtchingCompatibility HKLM\SYSTEM\CurrentControlSet\Services\helpsvciWDMtchingCompatibility HKLM\SYSTEM\CurrentControlSet\Services\HidServiWDMtchingCompatibility HKLM\SYSTEM\CurrentControlSet\Services\HidUsbviWDMtchingCompatibility HKLM\SYSTEM\CurrentControlSet\Services\hpnUsbviWDMtchingCompatibility HKLM\SYSTEM\CurrentControlSet\Services\hpt3xxviWDMtchingCompatibility HKLM\SYSTEM\CurrentControlSet\Services\HTTPxxviWDMtchingCompatibility HKLM\SYSTEM\CurrentControlSet\Services\HTTPFilterMtchingCompatibility HKLM\SYSTEM\CurrentControlSet\Services\i2omgmtterMtchingCompatibility HKLM\SYSTEM\CurrentControlSet\Services\i2ompmtterMtchingCompatibility HKLM\SYSTEM\CurrentControlSet\Services\i8042prterMtchingCompatibility HKLM\SYSTEM\CurrentControlSet\Services\IDriverTerMtchingCompatibility HKLM\SYSTEM\CurrentControlSet\Services\ImapierTerMtchingCompatibility HKLM\SYSTEM\CurrentControlSet\Services\ImapiServicechingCompatibility HKLM\SYSTEM\CurrentControlSet\Services\inetaccsvicechingCompatibility HKLM\SYSTEM\CurrentControlSet\Services\ini910usvicechingCompatibility HKLM\SYSTEM\CurrentControlSet\Services\InportusvicechingCompatibility HKLM\SYSTEM\CurrentControlSet\Services\IntelIdevicechingCompatibility HKLM\SYSTEM\CurrentControlSet\Services\intelppmvicechingCompatibility HKLM\SYSTEM\CurrentControlSet\Services\ip6fwppmvicechingCompatibility HKLM\SYSTEM\CurrentControlSet\Services\IpFilterDriveringCompatibility HKLM\SYSTEM\CurrentControlSet\Services\IpInIperDriveringCompatibility HKLM\SYSTEM\CurrentControlSet\Services\IpNatperDriveringCompatibility HKLM\SYSTEM\CurrentControlSet\Services\iPod ServiceeringCompatibility HKLM\SYSTEM\CurrentControlSet\Services\IPSecServiceeringCompatibility HKLM\SYSTEM\CurrentControlSet\Services\IRENUMerviceeringCompatibility HKLM\SYSTEM\CurrentControlSet\Services\ISAPISearcheeringCompatibility HKLM\SYSTEM\CurrentControlSet\Services\isapnpearcheeringCompatibility HKLM\SYSTEM\CurrentControlSet\Services\KbdclassrcheeringCompatibility HKLM\SYSTEM\CurrentControlSet\Services\kmixerssrcheeringCompatibility HKLM\SYSTEM\CurrentControlSet\Services\KSecDDssrcheeringCompatibility HKLM\SYSTEM\CurrentControlSet\Services\lanmanservereringCompatibility HKLM\SYSTEM\CurrentControlSet\Services\lanmanworkstationCompatibility HKLM\SYSTEM\CurrentControlSet\Services\lbrtfdcorkstationCompatibility HKLM\SYSTEM\CurrentControlSet\Services\ldapfdcorkstationCompatibility HKLM\SYSTEM\CurrentControlSet\Services\LicenseServiceionCompatibility HKLM\SYSTEM\CurrentControlSet\Services\LmHostsServiceionCompatibility HKLM\SYSTEM\CurrentControlSet\Services\LPDSVCsServiceionCompatibility HKLM\SYSTEM\CurrentControlSet\Services\M2500CsServiceionCompatibility HKLM\SYSTEM\CurrentControlSet\Services\McAfeeFrameworkonCompatibility HKLM\SYSTEM\CurrentControlSet\Services\McShieldameworkonCompatibility HKLM\SYSTEM\CurrentControlSet\Services\McTaskManagerrkonCompatibility HKLM\SYSTEM\CurrentControlSet\Services\MessengeragerrkonCompatibility HKLM\SYSTEM\CurrentControlSet\Services\mnmddngeragerrkonCompatibility HKLM\SYSTEM\CurrentControlSet\Services\mnmsrvceragerrkonCompatibility HKLM\SYSTEM\CurrentControlSet\Services\ModemvceragerrkonCompatibility HKLM\SYSTEM\CurrentControlSet\Services\MouclassragerrkonCompatibility HKLM\SYSTEM\CurrentControlSet\Services\mouhidssragerrkonCompatibility HKLM\SYSTEM\CurrentControlSet\Services\MountMgrragerrkonCompatibility HKLM\SYSTEM\CurrentControlSet\Services\mraid35xragerrkonCompatibility HKLM\SYSTEM\CurrentControlSet\Services\MRxDAV5xragerrkonCompatibility HKLM\SYSTEM\CurrentControlSet\Services\MRxSmb5xragerrkonCompatibility HKLM\SYSTEM\CurrentControlSet\Services\MSDTCb5xragerrkonCompatibility HKLM\SYSTEM\CurrentControlSet\Services\MsfsCb5xragerrkonCompatibility HKLM\SYSTEM\CurrentControlSet\Services\MSIServeragerrkonCompatibility HKLM\SYSTEM\CurrentControlSet\Services\MSI_WLAN_ServicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\MSKSSRVN_ServicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\MSPCLOCK_ServicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\MSPQMOCK_ServicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\mssmbios_ServicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\MSTEEios_ServicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\MTC0001_ESBrvicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\Mup0001_ESBrvicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\NABTSFECESBrvicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\NaiAvFilter1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\NaiAvTdi1er1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\NDISvTdi1er1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\NdisIPdi1er1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\NdisTapi1er1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\Ndisuioi1er1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\NdisWani1er1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\NDProxyi1er1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\NetBIOSi1er1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\NetBTOSi1er1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\NetDDESi1er1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\NetDDEdsdmr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\Netlogondmr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\Netmanondmr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\NIC1394ndmr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\Nla1394ndmr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\Npfs394ndmr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\Ntfs394ndmr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\NtLmSspndmr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\NtmsSvcndmr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\NullSvcndmr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\NuVisiondmr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\nvVisiondmr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\NVSvciondmr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\NwlnkFltdmr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\NwlnkFwddmr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\NwlnkIpxdmr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\NwlnkNbxdmr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\NwlnkSpxdmr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\NwSapAgentr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\ohci1394ntr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\Parport4ntr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\PartMgr4ntr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\ParVdmr4ntr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\PCANDIS5ntr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\PCINDIS5ntr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\PCIDump5ntr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\PCIIdep5ntr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\Pcmciap5ntr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\PDCOMPp5ntr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\PDFRAME5ntr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\PDRELIE5ntr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\PDRFRAMEntr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\perc2AMEntr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\perc2hibntr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\PerfDiskntr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\PerfNetkntr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\PerfOStkntr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\PerfProcntr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\PlugPlayntr1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\PolicyAgent1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\poofcyAgent1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\PortlUSBent1vicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\PptpMiniportvicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\ProcessorortvicenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\ProtectedStoragenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\PSchedtedStoragenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\PtilinkedStoragenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\PtserialdStoragenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\PxHelp20dStoragenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\ql108020dStoragenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\Ql10wnt0dStoragenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\ql121600dStoragenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\ql124000dStoragenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\ql128000dStoragenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\RasAcd00dStoragenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\RasAuto0dStoragenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\Rasl2tp0dStoragenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\RasManp0dStoragenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\RasPppoedStoragenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\RasptioedStoragenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\RdbssioedStoragenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\RDPCDDoedStoragenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\RDPDDDoedStoragenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\RDPNPDoedStoragenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\RDPWDDoedStoragenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\RDSessMgrStoragenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\redbookgrStoragenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\RemoteAccessragenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistrygenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\RpcLocatorstrygenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\RpcSscatorstrygenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\RSVPscatorstrygenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\SamSscatorstrygenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\SCardSvrorstrygenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\ScheduleorstrygenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\ScsiPortorstrygenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\SecdrvrtorstrygenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\seclogonorstrygenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\SENSogonorstrygenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\SerialonorstrygenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\SfloppynorstrygenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\SharedAccessrygenCompatibility HKLM\SYSTEM\CurrentControlSet\Services\ShellHWDetectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\sidswawfetectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\SimbadwfetectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\sisagpwfetectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\SISNICwfetectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\SLIPICwfetectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\SNMPICwfetectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\SparrowfetectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\splitteretectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\SpoolerretectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\sroolerretectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\srservicetectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\SrvervicetectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\SSDPSRVcetectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\ssmdrvVcetectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\stisvcVcetectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\streamipetectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\swenumipetectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\swmidiipetectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\SwPrviipetectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\swwdviipetectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\symc810petectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\symc8xxpetectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\sym_hixpetectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\sym_u3xpetectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\SynTP3xpetectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\sysaudioetectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\SysmonLogtectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\TapiSrvogtectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\TcpiprvogtectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\TDPIPEvogtectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\TDTCPEvogtectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\TermDDvogtectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\TermServicectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\ThemesrvicectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\TlntSvrvicectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\TosIdervicectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\TrkWksrvicectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\TSDDDsrvicectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\UdfsDsrvicectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\ultrasrvicectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\UpdatervicectionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\UpdateManagerionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\upnphostnagerionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\UPSphostnagerionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\USBphostnagerionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\usbehcitnagerionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\usbhubitnagerionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\usbohcitnagerionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\usbscantnagerionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\USBSTORtnagerionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\VgaSavetnagerionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\ViaIdeetnagerionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\VmodemetnagerionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\VolSnaptnagerionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\VpctcomtnagerionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\vsdatantnagerionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\vsmonantnagerionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\VSSonantnagerionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\VvoicentnagerionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\VXDicentnagerionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\W32TimetnagerionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\W3SVCmetnagerionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\WanarpetnagerionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\WDICApetnagerionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\wdmaudetnagerionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\WebClientagerionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\winmgmtntagerionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\WinsockntagerionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\WinSock2tagerionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\WinTrusttagerionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\WmdmPmSNtagerionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\WmimPmSNtagerionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\WmiApRpltagerionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\WmiApSrvtagerionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\WMPNetworkSvcionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\WS2IFSLorkSvcionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\wscsvcLorkSvcionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\WSTCODECrkSvcionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\wuauservrkSvcionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\WudfPfrvrkSvcionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\WudfRdrvrkSvcionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\WudfSvcvrkSvcionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\WZCSVCcvrkSvcionnCompatibility HKLM\SYSTEM\CurrentControlSet\Services\xmlprovvrkSvcionnCompatibility scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden services: 329 hidden files: 0 KProcCheck Version 0.2-beta1 Proof-of-Concept by SIG^2 (www.security.org.sg) Error loading kernel support driver! Make sure you are running this as Administrator. KProcCheck Version 0.2-beta1 Proof-of-Concept by SIG^2 (www.security.org.sg) Error loading kernel support driver! Make sure you are running this as Administrator. Liste des programmes installes Adobe Acrobat 4.0, 5.0 Adobe Flash Player 9 ActiveX Apple Mobile Device Support Apple Software Update Archiveur WinRAR Avira AntiVir PersonalEdition Classic CCleaner (remove only) Correctif Windows XP - KB873339 Correctif Windows XP - KB885250 Correctif Windows XP - KB885835 Correctif Windows XP - KB885836 Correctif Windows XP - KB886185 Correctif Windows XP - KB887472 Correctif Windows XP - KB887742 Correctif Windows XP - KB888113 Correctif Windows XP - KB888302 Correctif Windows XP - KB890859 Correctif Windows XP - KB891781 Easy Start Button ECONOMISEUR ECRAN Screen Saver FileZilla (remove only) Freeplayer Google Toolbar for Internet Explorer HijackThis 2.0.2 Hotfix for Windows XP (KB915865) HSP56 MR Drivers IEEE802.11a/b/g Wireless LAN Software iTunes J2SE Runtime Environment 5.0 Update 11 J2SE Runtime Environment 5.0 Update 3 J2SE Runtime Environment 5.0 Update 6 Java 6 Update 3 Lecteur Windows Media 11 McAfee VirusScan Enterprise Microsoft .NET Framework 1.1 Microsoft Internationalized Domain Names Mitigation APIs Microsoft National Language Support Downlevel APIs Microsoft Office 2000 Premium Microsoft User-Mode Driver Framework Feature Pack 1.0.0 (Pre-Release 5348) Mise à jour de sécurité pour Lecteur Windows Media (KB911564) Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565) Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734) Mise à jour de sécurité pour Lecteur Windows Media 6.4 (KB925398) Mise à jour de sécurité pour Windows XP (KB890046) Mise à jour de sécurité pour Windows XP (KB893756) Mise à jour de sécurité pour Windows XP (KB896358) Mise à jour de sécurité pour Windows XP (KB896422) Mise à jour de sécurité pour Windows XP (KB896423) Mise à jour de sécurité pour Windows XP (KB896424) Mise à jour de sécurité pour Windows XP (KB896428) Mise à jour de sécurité pour Windows XP (KB899587) Mise à jour de sécurité pour Windows XP (KB899591) Mise à jour de sécurité pour Windows XP (KB900725) Mise à jour de sécurité pour Windows XP (KB901017) Mise à jour de sécurité pour Windows XP (KB901214) Mise à jour de sécurité pour Windows XP (KB902400) Mise à jour de sécurité pour Windows XP (KB904706) Mise à jour de sécurité pour Windows XP (KB905414) Mise à jour de sécurité pour Windows XP (KB905749) Mise à jour de sécurité pour Windows XP (KB908519) Mise à jour de sécurité pour Windows XP (KB911280) Mise à jour de sécurité pour Windows XP (KB911562) Mise à jour de sécurité pour Windows XP (KB911567) Mise à jour de sécurité pour Windows XP (KB911927) Mise à jour de sécurité pour Windows XP (KB912812) Mise à jour de sécurité pour Windows XP (KB912919) Mise à jour de sécurité pour Windows XP (KB913446) Mise à jour de sécurité pour Windows XP (KB913580) Mise à jour de sécurité pour Windows XP (KB914388) Mise à jour de sécurité pour Windows XP (KB914389) Mise à jour de sécurité pour Windows XP (KB916281) Mise à jour de sécurité pour Windows XP (KB917159) Mise à jour de sécurité pour Windows XP (KB917344) Mise à jour de sécurité pour Windows XP (KB917422) Mise à jour de sécurité pour Windows XP (KB917953) Mise à jour de sécurité pour Windows XP (KB918118) Mise à jour de sécurité pour Windows XP (KB918439) Mise à jour de sécurité pour Windows XP (KB918899) Mise à jour de sécurité pour Windows XP (KB919007) Mise à jour de sécurité pour Windows XP (KB920213) Mise à jour de sécurité pour Windows XP (KB920214) Mise à jour de sécurité pour Windows XP (KB920670) Mise à jour de sécurité pour Windows XP (KB920683) Mise à jour de sécurité pour Windows XP (KB920685) Mise à jour de sécurité pour Windows XP (KB921398) Mise à jour de sécurité pour Windows XP (KB921503) Mise à jour de sécurité pour Windows XP (KB921883) Mise à jour de sécurité pour Windows XP (KB922616) Mise à jour de sécurité pour Windows XP (KB922760) Mise à jour de sécurité pour Windows XP (KB922819) Mise à jour de sécurité pour Windows XP (KB923191) Mise à jour de sécurité pour Windows XP (KB923414) Mise à jour de sécurité pour Windows XP (KB923694) Mise à jour de sécurité pour Windows XP (KB923980) Mise à jour de sécurité pour Windows XP (KB924191) Mise à jour de sécurité pour Windows XP (KB924270) Mise à jour de sécurité pour Windows XP (KB924496) Mise à jour de sécurité pour Windows XP (KB924667) Mise à jour de sécurité pour Windows XP (KB925454) Mise à jour de sécurité pour Windows XP (KB925486) Mise à jour de sécurité pour Windows XP (KB925902) Mise à jour de sécurité pour Windows XP (KB926255) Mise à jour de sécurité pour Windows XP (KB926436) Mise à jour de sécurité pour Windows XP (KB927779) Mise à jour de sécurité pour Windows XP (KB927802) Mise à jour de sécurité pour Windows XP (KB928090) Mise à jour de sécurité pour Windows XP (KB928255) Mise à jour de sécurité pour Windows XP (KB928843) Mise à jour de sécurité pour Windows XP (KB929123) Mise à jour de sécurité pour Windows XP (KB929969) Mise à jour de sécurité pour Windows XP (KB931768) Mise à jour de sécurité pour Windows XP (KB933566) Mise à jour de sécurité pour Windows XP (KB933729) Mise à jour de sécurité pour Windows XP (KB935839) Mise à jour de sécurité pour Windows XP (KB935840) Mise à jour de sécurité pour Windows XP (KB936021) Mise à jour de sécurité pour Windows XP (KB937143) Mise à jour de sécurité pour Windows XP (KB938127) Mise à jour de sécurité pour Windows XP (KB938829) Mise à jour de sécurité pour Windows XP (KB939653) Mise à jour de sécurité pour Windows XP (KB941202) Mise à jour de sécurité pour Windows XP (KB943460) Mise à jour pour Windows XP (KB894391) Mise à jour pour Windows XP (KB898461) Mise à jour pour Windows XP (KB900485) Mise à jour pour Windows XP (KB908531) Mise à jour pour Windows XP (KB910437) Mise à jour pour Windows XP (KB916595) Mise à jour pour Windows XP (KB920872) Mise à jour pour Windows XP (KB922582) Mise à jour pour Windows XP (KB927891) Mise à jour pour Windows XP (KB929338) Mise à jour pour Windows XP (KB930916) Mise à jour pour Windows XP (KB931836) Mise à jour pour Windows XP (KB933360) Mise à jour pour Windows XP (KB936357) Mise à jour pour Windows XP (KB938828) MSXML 4.0 SP2 (KB927978) MSXML 4.0 SP2 (KB936181) NVIDIA Windows 2000/XP Display Drivers Outil de Publication de Yahoo! Photos PowerDVD QuickTime RealPlayer SiS 900 PCI Fast Ethernet Adapter Driver Synaptics TouchPad VideoLAN VLC media player 0.8.5-freehd Voyages-sncf 1.0 WebFldrs XP Winamp (remove only) Winamp 5 Media Liabrary Import/Export (remove only) Windows Driver Package - Nokia Modem (06/12/2006 6.81.0.21) Windows Genuine Advantage Notifications (KB905474) Windows Installer 3.1 (KB893803) Windows Media Format 11 runtime Windows Media Format 11 runtime Windows Media Player 11 Windows Resource Kit Tools Windows XP Service Pack 2 ZoneAlarm Le volume dans le lecteur C s'appelle PRINCIPAL Le numéro de série du volume est 0D77-1B06 Répertoire de C:\Program Files 25/05/2006 10:37 <REP> . 25/05/2006 10:37 <REP> .. 25/05/2006 22:51 <REP> Adobe 20/10/2007 11:08 <REP> Amazon 19/09/2007 16:50 <REP> Apple Software Update 21/11/2007 15:25 <REP> Avira 25/05/2006 19:06 <REP> CCleaner 25/05/2006 10:43 <REP> ComPlus Applications 25/05/2006 12:45 <REP> CyberLink 26/05/2006 14:52 <REP> DIFX 20/06/2006 18:52 <REP> eMusic Download Manager 25/05/2006 10:37 <REP> Fichiers communs 03/08/2006 18:03 <REP> FileZilla 05/11/2006 12:16 <REP> FpTest 21/12/2006 19:01 <REP> Free 05/11/2006 12:06 <REP> Freeplayer 25/05/2006 12:19 <REP> Google 18/08/2006 16:59 <REP> GrabIt 08/01/2007 20:09 <REP> Grisoft 20/11/2007 19:50 <REP> Hijackthis 25/05/2006 10:43 <REP> Internet Explorer 20/10/2007 11:10 <REP> iPod 20/10/2007 11:09 <REP> iTunes 23/07/2006 23:12 <REP> Java 26/08/2006 11:01 <REP> Juice 20/02/2007 11:22 <REP> Livre Album Fuji Photo 25/05/2006 10:42 <REP> Messenger 25/05/2006 10:46 <REP> microsoft frontpage 26/05/2006 17:49 <REP> Microsoft Office 26/05/2006 17:53 <REP> Microsoft Visual Studio 02/09/2006 11:18 <REP> MicroStar 20/02/2007 11:22 <REP> monAlbumPhoto 25/05/2006 10:44 <REP> Movie Maker 20/06/2006 21:45 <REP> mp3DirectCut 20/06/2006 21:52 <REP> MP3Gain 25/05/2006 10:42 <REP> MSN 25/05/2006 10:42 <REP> MSN Gaming Zone 26/05/2006 15:54 <REP> MSXML 4.0 20/02/2007 15:04 <REP> myphotobook 06/11/2006 16:51 <REP> NetDrive 25/05/2006 10:44 <REP> NetMeeting 02/11/2006 18:41 <REP> Network Associates 27/05/2006 12:00 <REP> Nokia 25/05/2006 10:44 <REP> Outlook Express 16/03/2007 20:21 <REP> PartyGaming 05/04/2007 21:58 <REP> Qimage 19/09/2007 16:52 <REP> QuickTime 01/06/2006 18:15 <REP> Real 29/05/2006 18:50 <REP> Samsung 29/05/2006 19:30 <REP> Samsung(2) 25/05/2006 10:42 <REP> Services en ligne 25/05/2006 10:38 <REP> SiSLan 25/05/2006 13:59 <REP> Spybot - Search & Destroy 25/05/2006 10:39 <REP> Synaptics 22/06/2006 18:25 <REP> VideoLAN 28/05/2006 23:05 <REP> Virtools Web Player 3.0 22/03/2007 22:09 <REP> Voyages-sncf 31/05/2006 20:53 <REP> vtplus 05/11/2006 16:46 <REP> Winamp 25/05/2006 10:44 <REP> Windows Media Player 25/05/2006 10:42 <REP> Windows NT 28/12/2006 18:35 <REP> Windows Resource Kits 31/05/2006 18:21 <REP> WinRAR 16/06/2006 19:58 <REP> WINTV 04/11/2006 18:16 <REP> WistitiSoft 25/05/2006 10:46 <REP> xerox 25/05/2006 19:06 <REP> Yahoo! 04/11/2006 14:26 <REP> Zone Labs 25/05/2006 10:46 <REP> ?ymbols 0 fichier(s) 0 octets 69 Rép(s) 18 114 019 328 octets libres Le volume dans le lecteur C s'appelle PRINCIPAL Le numéro de série du volume est 0D77-1B06 Répertoire de C:\Program Files\fichiers communs 25/05/2006 10:37 <REP> . 25/05/2006 10:37 <REP> .. 25/05/2006 10:37 <REP> Microsoft Shared 25/05/2006 10:37 <REP> SpeechEngines 25/05/2006 10:37 <REP> ODBC 25/05/2006 10:43 <REP> System 25/05/2006 10:43 <REP> MSSoap 25/05/2006 10:44 <REP> Services 25/05/2006 11:21 <REP> ikwf 25/05/2006 11:27 <REP> Cisco Systems 25/05/2006 12:45 <REP> InstallShield 25/05/2006 22:51 <REP> Adobe 26/05/2006 14:52 <REP> PCSuite 26/05/2006 17:53 <REP> Designer 31/05/2006 19:06 <REP> NSV 01/06/2006 18:15 <REP> Real 01/06/2006 18:16 <REP> xing shared 23/07/2006 23:11 <REP> Java 02/11/2006 18:41 <REP> Network Associates 19/09/2007 16:49 <REP> Apple 0 fichier(s) 0 octets 20 Rép(s) 18 114 527 232 octets libres Le volume dans le lecteur C s'appelle PRINCIPAL Le numéro de série du volume est 0D77-1B06 Répertoire de C:\Program Files\fichiers communs\Microsoft Shared\Web Folders 25/05/2006 10:55 <REP> . 25/05/2006 10:55 <REP> .. 18/05/2001 17:57 561 209 MSONSEXT.DLL 07/03/2001 09:00 127 033 MSOWS40c.DLL 03/06/1999 14:09 122 937 MSOWS409.DLL 18/03/1999 06:37 593 977 RAGENT.DLL 4 fichier(s) 1 405 156 octets 2 Rép(s) 18 114 527 232 octets libres c:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\SXA38XEZ\tsinstall_4_0_4_0_b4[1].exe c:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\GHEF4HAR\installer[2].exe c:\Documents and Settings\Default User\Local Settings\Temp\AutoIt\AutoIt3.exe c:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 7.4.3.1\iTunesSetupAdmin.exe c:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\MS_update_0610_KB72306.exe c:\Documents and Settings\All Users\Documents\iPod_Support_v2_01.exe c:\Documents and Settings\All Users\Documents\Mon_Livre_Photo_by_Cewe.exe c:\Documents and Settings\All Users\Documents\myphotobook-Setup.exe c:\Documents and Settings\All Users\Documents\OFFICE11\DSSM.EXE c:\Documents and Settings\All Users\Documents\OFFICE11\EXCEL.EXE c:\Documents and Settings\All Users\Documents\OFFICE11\FINDER.EXE c:\Documents and Settings\All Users\Documents\OFFICE11\GRAPH.EXE c:\Documents and Settings\All Users\Documents\OFFICE11\MSACCESS.EXE c:\Documents and Settings\All Users\Documents\OFFICE11\MSOHTMED.EXE c:\Documents and Settings\All Users\Documents\OFFICE11\MSPUB.EXE c:\Documents and Settings\All Users\Documents\OFFICE11\MSTORDB.EXE c:\Documents and Settings\All Users\Documents\OFFICE11\MSTORE.EXE c:\Documents and Settings\All Users\Documents\OFFICE11\OIS.EXE c:\Documents and Settings\All Users\Documents\OFFICE11\OUTLOOK.EXE c:\Documents and Settings\All Users\Documents\OFFICE11\POWERPNT.EXE c:\Documents and Settings\All Users\Documents\OFFICE11\PPTVIEW.EXE c:\Documents and Settings\All Users\Documents\OFFICE11\PROFLWIZ.EXE c:\Documents and Settings\All Users\Documents\OFFICE11\WAVTOASF.EXE c:\Documents and Settings\All Users\Documents\OFFICE11\WINWORD.EXE c:\Documents and Settings\All Users\Documents\OFFICE11\1036\MSOHELP.EXE c:\Documents and Settings\All Users\Documents\OFFICE11\1036\UNPACK.EXE c:\Documents and Settings\Propriétaire\Local Settings\Temp\AutoIt\AutoIt3.exe c:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\GHEF4HAR\installer[2].exe c:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\SXA38XEZ\tsinstall_4_0_4_0_b4[1].exe c:\Documents and Settings\francois platel\Local Settings\Temp\UNNeroBackItUp.exe c:\Documents and Settings\francois platel\Local Settings\Temp\RarSFX0\basic\setup.exe c:\Documents and Settings\francois platel\Local Settings\Temp\RarSFX0\basic\update.exe c:\Documents and Settings\francois platel\Local Settings\Temp\RarSFX0\basic\wsctool.exe c:\Documents and Settings\francois platel\Bureau\hickjackthisV2install.exe c:\Documents and Settings\francois platel\Bureau\pci_filerecovery.exe c:\Documents and Settings\francois platel\Bureau\VundoFix.exe c:\Documents and Settings\francois platel\Bureau\WindowsXP-KB835935-SP2-FRA.exe c:\Documents and Settings\francois platel\Bureau\Wistitisoft.exe c:\Documents and Settings\francois platel\Bureau\Sécurité\antivir_workstation_win7u_en_h.exe c:\Documents and Settings\francois platel\Bureau\Sécurité\hickjackthisV2install.exe c:\Documents and Settings\francois platel\Bureau\Sécurité\sdat5166.exe c:\Documents and Settings\francois platel\Bureau\Sécurité\stinger.exe c:\Documents and Settings\francois platel\Bureau\Sécurité\stinger_boulot.exe c:\Documents and Settings\francois platel\Bureau\DiagHelp\catchme.exe c:\Documents and Settings\francois platel\Bureau\DiagHelp\diff.exe c:\Documents and Settings\francois platel\Bureau\DiagHelp\dumphive.exe c:\Documents and Settings\francois platel\Bureau\DiagHelp\FilesInfoCmd.exe c:\Documents and Settings\francois platel\Bureau\DiagHelp\find2.exe c:\Documents and Settings\francois platel\Bureau\DiagHelp\Fport.exe c:\Documents and Settings\francois platel\Bureau\DiagHelp\grep.exe c:\Documents and Settings\francois platel\Bureau\DiagHelp\gzip.exe c:\Documents and Settings\francois platel\Bureau\DiagHelp\KProcCheck.exe c:\Documents and Settings\francois platel\Bureau\DiagHelp\LFiles.exe c:\Documents and Settings\francois platel\Bureau\DiagHelp\LISTDLLS.exe c:\Documents and Settings\francois platel\Bureau\DiagHelp\md5sums.exe c:\Documents and Settings\francois platel\Bureau\DiagHelp\pslist.exe c:\Documents and Settings\francois platel\Bureau\DiagHelp\sigcheck.exe c:\Documents and Settings\francois platel\Bureau\DiagHelp\streams.exe c:\Documents and Settings\francois platel\Bureau\DiagHelp\swreg.exe c:\Documents and Settings\francois platel\Bureau\DiagHelp\tar.exe c:\Documents and Settings\francois platel\.limewire\.NetworkShare\LimeWireWinInstaller.exe c:\Documents and Settings\Administrateur\Local Settings\Temp\AutoIt\AutoIt3.exe c:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\GHEF4HAR\installer[2].exe c:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\SXA38XEZ\tsinstall_4_0_4_0_b4[1].exe c:\Documents and Settings\All Users\Application Data\MVTLogs\detect.dll c:\Documents and Settings\All Users\Application Data\MVT\atl.dll c:\Documents and Settings\All Users\Application Data\MVT\msvcp60.dll c:\Documents and Settings\All Users\Application Data\MVT\MVT.dll c:\Documents and Settings\All Users\Application Data\MVT\unicows.dll c:\Documents and Settings\LocalService\Application Data\Microsoft\UPnP Device Host\upnphost\udhisapi.dll ****** Fin du rapport DiagHelp Veuillez svp envoyer le fichier C:\upload_moi_PACKARD.tar.gz a l'adresse http://upload.malekal.com Le scan Hijackthis Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 17:05:19, on 21/11/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Safe mode Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Hijackthis\HijackThis.exe C:\WINDOWS\System32\wbem\wmiprvse.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.packardbell.fr/center R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens F2 - REG:system.ini: Shell=Explorer.exe, O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: (no name) - {2a6af021-17a2-4014-8624-cf6015f82fad} - (no file) O2 - BHO: Microsoft Explorer - {39D7900C-461D-86A5-81BA-CF35914FAC04} - (no file) O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: (no name) - {87EFE72E-ED21-48B1-B465-4DEA4ABA77E0} - c:\windows\system32\ckbackb.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe O4 - HKLM\..\Run: [synTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [ESB] C:\WINDOWS\System32\ESB.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet O4 - HKLM\..\Run: [WINPROC AUDIT] C:\OEMCUST\TOOLS\WIN32\WINPROC.EXE C:\CABS\SCRIPTS\PROCESS\AUDIT.SCR C:\DRIVERS\PROCESS.TXT /TRACE O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [shStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe" O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKUS\S-1-5-20\..\Run: [sra] "C:\PROGRA~1\YMBOLS~1\wowexec.exe" -vt yazr (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [Wjt] C:\WINDOWS\??pPatch\n?pdb.exe (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\Run: [ikwf] C:\PROGRA~1\FICHIE~1\ikwf\ikwfm.exe (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [Wjt] C:\WINDOWS\??pPatch\n?pdb.exe (User 'Default user') O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O4 - Global Startup: WlanUtility.lnk = C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe O4 - Global Startup: MS_update_0610_KB72306.exe O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing) O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll O14 - IERESET.INF: START_PAGE_URL=www.packardbell.fr/center O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1148649440752 O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://wisup.net/_plateforme/Upload/Aurigm...geUploader4.cab O20 - Winlogon Notify: prpqxmwp - C:\WINDOWS\SYSTEM32\ckbackb.dll O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Service Framework McAfee (McAfeeFramework) - McAfee, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe O23 - Service: MSI_WLAN_Service - Unknown owner - C:\Program Files\MicroStar\WLANUtility\WLAN_Service.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe -- End of file - 7098 bytes
  16. karo02
    OK je vais faire ça... Je fais le nouveau scan Hijackthis avant ou après les 2 scans avec vundofix et diaghelp ? en mode normal (si ça marche) ou en mode sans échec ? Merci beaucoup. Edit : en fait je ne peux pas démarrer en mode sans échec avec prise en charge réseau (même écran bleu qu'en mode normal). Mais j'imagine que c'était juste pour pouvoir télécharger les programmes ? Dans ce cas c'est pas grave, j'ai un autre ordi (qui marche) à la maison.
  17. karo02
    OK je vais faire ça... Je fais le nouveau scan Hijackthis avant ou après les 2 scans avec vundofix et diaghelp ? en mode normal (si ça marche) ou en mode sans échec ? Merci beaucoup.
  18. karo02
    bon ben ça s'arrange pas, maintenant je ne peux plus démarrer en mode normal, j'ai direct l'écran bleu (mais sans les informations techniques dans le message cette fois)... Je ne peux que démarrer en mode sans échec. Au secours !!
  19. karo02
    Bon finalement l'écran bleu est revenu... Ca m'étonnait aussi qu'il disparaisse sans que j'ai rien fait. Du coup j'ai eu le temps de noter le message d'erreur (pas texto mais presque) : Ce message ne m'aide pas beaucoup...
  20. karo02
    Voilà le rapport : Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 20:37:55, on 20/11/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\pctspk.exe C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\WINDOWS\System32\ESB.exe C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\Ahead\Nero BackItUp\NBKeyScan.exe C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Documents and Settings\francois platel\file.exe C:\Program Files\WistitiSoft\Agent.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\Program Files\Winamp\winampa.exe C:\Program Files\Network Associates\Common Framework\FrameworkService.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Network Associates\VirusScan\Mcshield.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe C:\Program Files\Network Associates\Common Framework\naPrdMgr.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ZONELABS\vsmon.exe C:\Program Files\MicroStar\WLANUtility\WLAN_Service.exe C:\WINDOWS\System32\wbem\wmiprvse.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\System32\alg.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Hijackthis\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens F2 - REG:system.ini: Shell=Explorer.exe, O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: (no name) - {2a6af021-17a2-4014-8624-cf6015f82fad} - (no file) O2 - BHO: Microsoft Explorer - {39D7900C-461D-86A5-81BA-CF35914FAC04} - (no file) O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: (no name) - {87EFE72E-ED21-48B1-B465-4DEA4ABA77E0} - c:\windows\system32\ckbackb.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe O4 - HKLM\..\Run: [synTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [ESB] C:\WINDOWS\System32\ESB.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet O4 - HKLM\..\Run: [WINPROC AUDIT] C:\OEMCUST\TOOLS\WIN32\WINPROC.EXE C:\CABS\SCRIPTS\PROCESS\AUDIT.SCR C:\DRIVERS\PROCESS.TXT /TRACE O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [shStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe" O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Ahead\Nero BackItUp\NBKeyScan.exe" /devicetype:philips O4 - HKLM\..\Run: [svcs: Dnscache] C:\Documents and Settings\francois platel\file.exe O4 - HKLM\..\Run: [ExtraFilmHemmaAgent] "C:\Program Files\WistitiSoft\Agent.exe" O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe" O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKUS\S-1-5-19\..\Run: [sra] "C:\PROGRA~1\YMBOLS~1\wowexec.exe" -vt yazr (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [sra] "C:\PROGRA~1\YMBOLS~1\wowexec.exe" -vt yazr (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [Wjt] C:\WINDOWS\??pPatch\n?pdb.exe (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [Wjt] C:\WINDOWS\??pPatch\n?pdb.exe (User 'Default user') O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O4 - Global Startup: WlanUtility.lnk = C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe O4 - Global Startup: MS_update_0610_KB72306.exe O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing) O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll O14 - IERESET.INF: START_PAGE_URL=www.packardbell.fr/center O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1148649440752 O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://wisup.net/_plateforme/Upload/Aurigm...geUploader4.cab O20 - Winlogon Notify: prpqxmwp - C:\WINDOWS\SYSTEM32\ckbackb.dll O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Service Framework McAfee (McAfeeFramework) - McAfee, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe O23 - Service: MSI_WLAN_Service - Unknown owner - C:\Program Files\MicroStar\WLANUtility\WLAN_Service.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe -- End of file - 9175 bytes Merci !
  21. karo02
    Merci de ta réponse. Pour préciser un peu le problème, j'ai essayé de le reproduire en désactivant le redémarrage automatique pour pouvoir recopier le message d'erreur de l'écran bleu, mais maintenant bizarrement ça ne le fait plus ! Par contre j'ai eu 2 messages d'analyse à l'accès de virusscan : 1-startdrv.exe, dans le dossier WINDOWS\Temp, détecté en tant que Generic Downloader.z (cheval de troie) dans l'application SpybotSD.exe (fichier supprimé) 2-Program Files\Internet Explorer\iexplore.exe::socket, détecté en tant que bo:heap (débordement de la mémoire tampon) dans l'application iexplore.exe Aide BBCodes Panneau latéral (fichier bloqué par la protection en cas de débordement de la mémoire tampon). (c'est le fameux message que j'avais eu avant les soucis de redémarrage automatique). Je vais installer Hijackthis, je te poste le rapport dès que c'est fait.
  22. karo02
    Bonjour, J'ai chez moi 2 PC portables en réseau domestique Wifi, avec les mêmes protections (antivirus McAffee, pare-feu ZoneAlarm, anti spyware Spybot search & destroy). L'un fonctionne parfaitement, mais depuis 10 jours l'autre affiche un bel écran bleu et redémarre systématiquement 5 min après que je le connecte à internet (par wifi ou ethernet), sans lancer un seul programme. Lorsque la connexion internet est désactivée, il fonctionne bien (pas de ralentissement ou autres...). Avant d'avoir ces soucis d'écran bleu et redémarrage intempestif, j'ai eu plusieurs fois, lors du lancement d'internet explorer (version 6) un message de l'antivirus du type : débordement de mémoire tampon, bo:heap (je n'ai pas le message exact). Après une tentative de restauration du système, je n'ai plus eu de problèmes pendant 24h, puis ça a recommencé, et de nouvelles restaurations à des dates relativement anciennes ne permettent plus de résoudre le problème. McAffee et Spybot ne trouvent rien... Donc je suppose qu'il s'agit d'un virus ? Pouvez-vous m'indiquer la procédure à suivre pour m'en débarasser ? (sachant que je dispose chez moi d'un autre portable avec connexion internet qui fonctionne, je peux facilement télécharger les utilitaires nécessaires). Merci d'avance.
  23. karo02
    Merci je vais essayer ça. Je ne suis pas hyper calée en informatique donc ça me fait un peu peur de modifier directement la base de registre, mais visiblement c'est la seule solution.
  24. karo02
    Bonjour, J'essaie depuis plusieurs jours de configurer mon réseau domestique, je progresse pas à pas mais il y a un truc que je n'arrive pas à régler. J'ai 2 portables : l'un avec XP Pro, l'autre avec XP home ; les 2 sont équipés d'une carte wifi. J'ai une freebox HD qui fait office de routeur. Les 2 portables ont zone alarm, configuré de manière similaire sur les 2 pour accepter la plage d'adresses ip locale. Les 2 portables peuvent se connecter à internet sans souci via la freebox. Les 2 portables se ping réciproquement sans pb. Dans "favoris réseaux", sous le nom de mon réseau local, depuis chacun des portables je vois les deux. Depuis le portable avec XP home, j'accède sans pb aux dossiers partagés de celui avec XP Pro. Depuis le portable avec XP pro, j'ai le message suivant : J'ai lu que ça pouvait être un problème de stratégie de sécurité : j'ai donc installé ce qu'il fallait pour avoir la console gpedit... mais quand je la lance j'ai plein de messages d'erreurs qui commencent tous par et dans la console je n'ai accès qu'à très peu de paramètres (évidemment pas ceux concernant cette fameuse stratégie de sécurité !). Bref je ne sais plus quoi faire, il ne s'agit visiblement que d'un bête problème d'autorisation, et avec ces histoires de "gestion des stratégies" pas installée en standard sur XP home , je n'arrive pas à régler le problème. Merci d'avance de votre aide
  25. karo02
    Bonjour ! Peux-tu détailler un peu comment tu as résolu ton problème ? J'ai pour ma part 2 portables en wifi avec la freebox et les 2 connexions internet fonctionnent. Chaque portable a le firewall Zone Alarm, sachant que j'ai ajouté à la zone sécurisée de ZA la plage d'IP autorisée par la freebox en routeur. Les "ping" de l'un vers l'autre fonctionnent... Mais impossible de partager des fichiers entre les 2 ! Merci de ton aide.
×
×
  • Créer...