A voir également:
- TROJAN:WIN32/ALUREON.DA!!!!!!!!!!
- Trojan remover - Télécharger - Antivirus & Antimalwares
- Csrss.exe trojan - Forum Virus
- Csrss.exe : processus suspect/virus ? - Forum Virus
- Trojan b901 system32 win config 34 ✓ - Forum Virus
- Trojan win32 - Forum Virus
12 réponses
Utilisateur anonyme
15 avril 2010 à 00:41
15 avril 2010 à 00:41
salut :
▶ Télécharge : Gmer (by Przemyslaw Gmerek)
▶ Dezippe gmer ,cliques sur l'onglet rootkit,lances le scan,des lignes rouges vont apparaitre.
▶ Les lignes rouges indiquent la presence d'un rootkit.Postes moi le rapport gmer (cliques sur copy,puis vas dans demarrer ,puis ouvres le bloc note,vas dans edition et cliques sur coller,le rapport gmer va apparaitre,postes moi le)
Ensuite
▶ sur les lignes rouge:
▶ Services:cliques droit delete service
▶ Process:cliques droit kill process
▶ Adl ,file:cliques droit delete files
▶ Télécharge : Gmer (by Przemyslaw Gmerek)
▶ Dezippe gmer ,cliques sur l'onglet rootkit,lances le scan,des lignes rouges vont apparaitre.
▶ Les lignes rouges indiquent la presence d'un rootkit.Postes moi le rapport gmer (cliques sur copy,puis vas dans demarrer ,puis ouvres le bloc note,vas dans edition et cliques sur coller,le rapport gmer va apparaitre,postes moi le)
Ensuite
▶ sur les lignes rouge:
▶ Services:cliques droit delete service
▶ Process:cliques droit kill process
▶ Adl ,file:cliques droit delete files
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
voici le rapport:
GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-04-14 19:31:05
Windows 6.0.6002 Service Pack 2
Running: gmer.exe; Driver: C:\Users\PROPRI~1\AppData\Local\Temp\kxliikog.sys
---- System - GMER 1.0.15 ----
INT 0x1F \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 82020CD0
INT 0x37 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 820200E8
INT 0xC1 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 820203D8
INT 0xD1 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 8200BD64
INT 0xD2 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 8200C01C
INT 0xDF \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 820201C0
INT 0xE1 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 82020B40
INT 0xE3 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 820206D4
INT 0xFD \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 82021100
INT 0xFE \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 8202136C
---- User code sections - GMER 1.0.15 ----
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!CreateDialogParamW 779772A2 5 Bytes JMP 6FB6DE50 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!GetAsyncKeyState 7797863C 5 Bytes JMP 6FA88EF7 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!SetWindowsHookExW 779787AD 5 Bytes JMP 6FB69A75 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!CallNextHookEx 77978E3B 5 Bytes JMP 6FB5D101 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!UnhookWindowsHookEx 779798DB 5 Bytes JMP 6FAD466E C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!EnableWindow 7797CD8B 5 Bytes JMP 6FB6DCDD C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!CreateWindowExW 77981305 5 Bytes JMP 6FB6DAC4 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!GetKeyState 77988CB1 5 Bytes JMP 6FB6D28B C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!IsDialogMessageW 77990745 5 Bytes JMP 6FA95A17 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!CreateDialogParamA 779917AA 5 Bytes JMP 6FC653AB C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!IsDialogMessage 77991847 5 Bytes JMP 6FC64C47 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!CreateDialogIndirectParamA 779926F1 5 Bytes JMP 6FC653E2 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!CreateDialogIndirectParamW 77999A62 5 Bytes JMP 6FC65419 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!SetKeyboardState 779A0987 5 Bytes JMP 6FC64FB6 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!DialogBoxParamW 779A10B0 5 Bytes JMP 6FA95505 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!DialogBoxIndirectParamW 779A2EF5 5 Bytes JMP 6FC6473F C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!SendInput 779A2F75 5 Bytes JMP 6FC65B73 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!EndDialog 779A326E 5 Bytes JMP 6FA97EC2 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!SetCursorPos 779B6FB2 5 Bytes JMP 6FC65BC7 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!DialogBoxParamA 779B8152 5 Bytes JMP 6FC646DC C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!DialogBoxIndirectParamA 779B847D 5 Bytes JMP 6FC647A2 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!MessageBoxIndirectA 779CD4D9 5 Bytes JMP 6FC64671 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!MessageBoxIndirectW 779CD5D3 5 Bytes JMP 6FC64606 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!MessageBoxExA 779CD639 5 Bytes JMP 6FC645A4 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!MessageBoxExW 779CD65D 5 Bytes JMP 6FC64542 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!keybd_event 779CD972 5 Bytes JMP 6FC65EF7 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] SHELL32.dll!SHRestricted + D95 765B8988 4 Bytes [4D, 30, 43, 74] {DEC EBP; XOR [EBX+0x74], AL}
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] SHELL32.dll!SHRestricted + D9D 765B8990 8 Bytes [57, 2F, 43, 74, 9C, 5B, 42, ...]
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] SHELL32.dll!ILFree + 3DA 765B8DFC 4 Bytes [4D, 30, 43, 74] {DEC EBP; XOR [EBX+0x74], AL}
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] SHELL32.dll!ILFree + 3E2 765B8E04 4 Bytes [57, 2F, 43, 74]
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] SHELL32.dll!SHBindToObject + 8C 765BE188 4 Bytes [4D, 30, 43, 74] {DEC EBP; XOR [EBX+0x74], AL}
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] SHELL32.dll!SHBindToObject + 94 765BE190 4 Bytes [57, 2F, 43, 74]
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] ole32.dll!OleLoadFromStream 76401E12 5 Bytes JMP 6FC64AA7 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] ole32.dll!CoCreateInstance 76439EA6 5 Bytes JMP 6FB6DB20 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!CreateDialogParamW 779772A2 5 Bytes JMP 6FB6DE50 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!GetAsyncKeyState 7797863C 5 Bytes JMP 6FA88EF7 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!SetWindowsHookExW 779787AD 5 Bytes JMP 6FB69A75 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!CallNextHookEx 77978E3B 5 Bytes JMP 6FB5D101 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!UnhookWindowsHookEx 779798DB 5 Bytes JMP 6FAD466E C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!EnableWindow 7797CD8B 5 Bytes JMP 6FB6DCDD C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!CreateWindowExW 77981305 5 Bytes JMP 6FB6DAC4 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!GetKeyState 77988CB1 5 Bytes JMP 6FB6D28B C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!IsDialogMessageW 77990745 5 Bytes JMP 6FA95A17 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!CreateDialogParamA 779917AA 5 Bytes JMP 6FC653AB C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!IsDialogMessage 77991847 5 Bytes JMP 6FC64C47 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!CreateDialogIndirectParamA 779926F1 5 Bytes JMP 6FC653E2 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!CreateDialogIndirectParamW 77999A62 5 Bytes JMP 6FC65419 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!SetKeyboardState 779A0987 5 Bytes JMP 6FC64FB6 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!DialogBoxParamW 779A10B0 5 Bytes JMP 6FA95505 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!DialogBoxIndirectParamW 779A2EF5 5 Bytes JMP 6FC6473F C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!SendInput 779A2F75 5 Bytes JMP 6FC65B73 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!EndDialog 779A326E 5 Bytes JMP 6FA97EC2 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!SetCursorPos 779B6FB2 5 Bytes JMP 6FC65BC7 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!DialogBoxParamA 779B8152 5 Bytes JMP 6FC646DC C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!DialogBoxIndirectParamA 779B847D 5 Bytes JMP 6FC647A2 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!MessageBoxIndirectA 779CD4D9 5 Bytes JMP 6FC64671 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!MessageBoxIndirectW 779CD5D3 5 Bytes JMP 6FC64606 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!MessageBoxExA 779CD639 5 Bytes JMP 6FC645A4 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!MessageBoxExW 779CD65D 5 Bytes JMP 6FC64542 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!keybd_event 779CD972 5 Bytes JMP 6FC65EF7 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] SHELL32.dll!SHRestricted + D95 765B8988 4 Bytes [4D, 30, 43, 74] {DEC EBP; XOR [EBX+0x74], AL}
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] SHELL32.dll!SHRestricted + D9D 765B8990 8 Bytes [57, 2F, 43, 74, 9C, 5B, 42, ...]
GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-04-14 19:31:05
Windows 6.0.6002 Service Pack 2
Running: gmer.exe; Driver: C:\Users\PROPRI~1\AppData\Local\Temp\kxliikog.sys
---- System - GMER 1.0.15 ----
INT 0x1F \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 82020CD0
INT 0x37 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 820200E8
INT 0xC1 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 820203D8
INT 0xD1 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 8200BD64
INT 0xD2 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 8200C01C
INT 0xDF \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 820201C0
INT 0xE1 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 82020B40
INT 0xE3 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 820206D4
INT 0xFD \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 82021100
INT 0xFE \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 8202136C
---- User code sections - GMER 1.0.15 ----
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!CreateDialogParamW 779772A2 5 Bytes JMP 6FB6DE50 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!GetAsyncKeyState 7797863C 5 Bytes JMP 6FA88EF7 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!SetWindowsHookExW 779787AD 5 Bytes JMP 6FB69A75 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!CallNextHookEx 77978E3B 5 Bytes JMP 6FB5D101 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!UnhookWindowsHookEx 779798DB 5 Bytes JMP 6FAD466E C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!EnableWindow 7797CD8B 5 Bytes JMP 6FB6DCDD C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!CreateWindowExW 77981305 5 Bytes JMP 6FB6DAC4 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!GetKeyState 77988CB1 5 Bytes JMP 6FB6D28B C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!IsDialogMessageW 77990745 5 Bytes JMP 6FA95A17 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!CreateDialogParamA 779917AA 5 Bytes JMP 6FC653AB C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!IsDialogMessage 77991847 5 Bytes JMP 6FC64C47 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!CreateDialogIndirectParamA 779926F1 5 Bytes JMP 6FC653E2 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!CreateDialogIndirectParamW 77999A62 5 Bytes JMP 6FC65419 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!SetKeyboardState 779A0987 5 Bytes JMP 6FC64FB6 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!DialogBoxParamW 779A10B0 5 Bytes JMP 6FA95505 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!DialogBoxIndirectParamW 779A2EF5 5 Bytes JMP 6FC6473F C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!SendInput 779A2F75 5 Bytes JMP 6FC65B73 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!EndDialog 779A326E 5 Bytes JMP 6FA97EC2 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!SetCursorPos 779B6FB2 5 Bytes JMP 6FC65BC7 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!DialogBoxParamA 779B8152 5 Bytes JMP 6FC646DC C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!DialogBoxIndirectParamA 779B847D 5 Bytes JMP 6FC647A2 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!MessageBoxIndirectA 779CD4D9 5 Bytes JMP 6FC64671 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!MessageBoxIndirectW 779CD5D3 5 Bytes JMP 6FC64606 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!MessageBoxExA 779CD639 5 Bytes JMP 6FC645A4 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!MessageBoxExW 779CD65D 5 Bytes JMP 6FC64542 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!keybd_event 779CD972 5 Bytes JMP 6FC65EF7 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] SHELL32.dll!SHRestricted + D95 765B8988 4 Bytes [4D, 30, 43, 74] {DEC EBP; XOR [EBX+0x74], AL}
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] SHELL32.dll!SHRestricted + D9D 765B8990 8 Bytes [57, 2F, 43, 74, 9C, 5B, 42, ...]
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] SHELL32.dll!ILFree + 3DA 765B8DFC 4 Bytes [4D, 30, 43, 74] {DEC EBP; XOR [EBX+0x74], AL}
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] SHELL32.dll!ILFree + 3E2 765B8E04 4 Bytes [57, 2F, 43, 74]
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] SHELL32.dll!SHBindToObject + 8C 765BE188 4 Bytes [4D, 30, 43, 74] {DEC EBP; XOR [EBX+0x74], AL}
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] SHELL32.dll!SHBindToObject + 94 765BE190 4 Bytes [57, 2F, 43, 74]
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] ole32.dll!OleLoadFromStream 76401E12 5 Bytes JMP 6FC64AA7 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] ole32.dll!CoCreateInstance 76439EA6 5 Bytes JMP 6FB6DB20 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!CreateDialogParamW 779772A2 5 Bytes JMP 6FB6DE50 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!GetAsyncKeyState 7797863C 5 Bytes JMP 6FA88EF7 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!SetWindowsHookExW 779787AD 5 Bytes JMP 6FB69A75 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!CallNextHookEx 77978E3B 5 Bytes JMP 6FB5D101 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!UnhookWindowsHookEx 779798DB 5 Bytes JMP 6FAD466E C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!EnableWindow 7797CD8B 5 Bytes JMP 6FB6DCDD C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!CreateWindowExW 77981305 5 Bytes JMP 6FB6DAC4 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!GetKeyState 77988CB1 5 Bytes JMP 6FB6D28B C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!IsDialogMessageW 77990745 5 Bytes JMP 6FA95A17 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!CreateDialogParamA 779917AA 5 Bytes JMP 6FC653AB C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!IsDialogMessage 77991847 5 Bytes JMP 6FC64C47 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!CreateDialogIndirectParamA 779926F1 5 Bytes JMP 6FC653E2 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!CreateDialogIndirectParamW 77999A62 5 Bytes JMP 6FC65419 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!SetKeyboardState 779A0987 5 Bytes JMP 6FC64FB6 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!DialogBoxParamW 779A10B0 5 Bytes JMP 6FA95505 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!DialogBoxIndirectParamW 779A2EF5 5 Bytes JMP 6FC6473F C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!SendInput 779A2F75 5 Bytes JMP 6FC65B73 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!EndDialog 779A326E 5 Bytes JMP 6FA97EC2 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!SetCursorPos 779B6FB2 5 Bytes JMP 6FC65BC7 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!DialogBoxParamA 779B8152 5 Bytes JMP 6FC646DC C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!DialogBoxIndirectParamA 779B847D 5 Bytes JMP 6FC647A2 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!MessageBoxIndirectA 779CD4D9 5 Bytes JMP 6FC64671 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!MessageBoxIndirectW 779CD5D3 5 Bytes JMP 6FC64606 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!MessageBoxExA 779CD639 5 Bytes JMP 6FC645A4 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!MessageBoxExW 779CD65D 5 Bytes JMP 6FC64542 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!keybd_event 779CD972 5 Bytes JMP 6FC65EF7 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] SHELL32.dll!SHRestricted + D95 765B8988 4 Bytes [4D, 30, 43, 74] {DEC EBP; XOR [EBX+0x74], AL}
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] SHELL32.dll!SHRestricted + D9D 765B8990 8 Bytes [57, 2F, 43, 74, 9C, 5B, 42, ...]
et le reste:
GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-04-14 19:31:05
Windows 6.0.6002 Service Pack 2
Running: gmer.exe; Driver: C:\Users\PROPRI~1\AppData\Local\Temp\kxliikog.sys
---- System - GMER 1.0.15 ----
INT 0x1F \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 82020CD0
INT 0x37 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 820200E8
INT 0xC1 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 820203D8
INT 0xD1 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 8200BD64
INT 0xD2 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 8200C01C
INT 0xDF \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 820201C0
INT 0xE1 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 82020B40
INT 0xE3 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 820206D4
INT 0xFD \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 82021100
INT 0xFE \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 8202136C
---- User code sections - GMER 1.0.15 ----
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!CreateDialogParamW 779772A2 5 Bytes JMP 6FB6DE50 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!GetAsyncKeyState 7797863C 5 Bytes JMP 6FA88EF7 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!SetWindowsHookExW 779787AD 5 Bytes JMP 6FB69A75 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!CallNextHookEx 77978E3B 5 Bytes JMP 6FB5D101 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!UnhookWindowsHookEx 779798DB 5 Bytes JMP 6FAD466E C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!EnableWindow 7797CD8B 5 Bytes JMP 6FB6DCDD C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!CreateWindowExW 77981305 5 Bytes JMP 6FB6DAC4 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!GetKeyState 77988CB1 5 Bytes JMP 6FB6D28B C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!IsDialogMessageW 77990745 5 Bytes JMP 6FA95A17 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!CreateDialogParamA 779917AA 5 Bytes JMP 6FC653AB C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!IsDialogMessage 77991847 5 Bytes JMP 6FC64C47 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!CreateDialogIndirectParamA 779926F1 5 Bytes JMP 6FC653E2 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!CreateDialogIndirectParamW 77999A62 5 Bytes JMP 6FC65419 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!SetKeyboardState 779A0987 5 Bytes JMP 6FC64FB6 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!DialogBoxParamW 779A10B0 5 Bytes JMP 6FA95505 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!DialogBoxIndirectParamW 779A2EF5 5 Bytes JMP 6FC6473F C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!SendInput 779A2F75 5 Bytes JMP 6FC65B73 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!EndDialog 779A326E 5 Bytes JMP 6FA97EC2 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!SetCursorPos 779B6FB2 5 Bytes JMP 6FC65BC7 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!DialogBoxParamA 779B8152 5 Bytes JMP 6FC646DC C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!DialogBoxIndirectParamA 779B847D 5 Bytes JMP 6FC647A2 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!MessageBoxIndirectA 779CD4D9 5 Bytes JMP 6FC64671 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!MessageBoxIndirectW 779CD5D3 5 Bytes JMP 6FC64606 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!MessageBoxExA 779CD639 5 Bytes JMP 6FC645A4 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!MessageBoxExW 779CD65D 5 Bytes JMP 6FC64542 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!keybd_event 779CD972 5 Bytes JMP 6FC65EF7 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] SHELL32.dll!SHRestricted + D95 765B8988 4 Bytes [4D, 30, 43, 74] {DEC EBP; XOR [EBX+0x74], AL}
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] SHELL32.dll!SHRestricted + D9D 765B8990 8 Bytes [57, 2F, 43, 74, 9C, 5B, 42, ...]
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] SHELL32.dll!ILFree + 3DA 765B8DFC 4 Bytes [4D, 30, 43, 74] {DEC EBP; XOR [EBX+0x74], AL}
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] SHELL32.dll!ILFree + 3E2 765B8E04 4 Bytes [57, 2F, 43, 74]
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] SHELL32.dll!SHBindToObject + 8C 765BE188 4 Bytes [4D, 30, 43, 74] {DEC EBP; XOR [EBX+0x74], AL}
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] SHELL32.dll!SHBindToObject + 94 765BE190 4 Bytes [57, 2F, 43, 74]
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] ole32.dll!OleLoadFromStream 76401E12 5 Bytes JMP 6FC64AA7 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] ole32.dll!CoCreateInstance 76439EA6 5 Bytes JMP 6FB6DB20 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!CreateDialogParamW 779772A2 5 Bytes JMP 6FB6DE50 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!GetAsyncKeyState 7797863C 5 Bytes JMP 6FA88EF7 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!SetWindowsHookExW 779787AD 5 Bytes JMP 6FB69A75 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!CallNextHookEx 77978E3B 5 Bytes JMP 6FB5D101 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!UnhookWindowsHookEx 779798DB 5 Bytes JMP 6FAD466E C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!EnableWindow 7797CD8B 5 Bytes JMP 6FB6DCDD C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!CreateWindowExW 77981305 5 Bytes JMP 6FB6DAC4 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!GetKeyState 77988CB1 5 Bytes JMP 6FB6D28B C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!IsDialogMessageW 77990745 5 Bytes JMP 6FA95A17 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!CreateDialogParamA 779917AA 5 Bytes JMP 6FC653AB C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!IsDialogMessage 77991847 5 Bytes JMP 6FC64C47 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!CreateDialogIndirectParamA 779926F1 5 Bytes JMP 6FC653E2 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!CreateDialogIndirectParamW 77999A62 5 Bytes JMP 6FC65419 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!SetKeyboardState 779A0987 5 Bytes JMP 6FC64FB6 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!DialogBoxParamW 779A10B0 5 Bytes JMP 6FA95505 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!DialogBoxIndirectParamW 779A2EF5 5 Bytes JMP 6FC6473F C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!SendInput 779A2F75 5 Bytes JMP 6FC65B73 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!EndDialog 779A326E 5 Bytes JMP 6FA97EC2 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!SetCursorPos 779B6FB2 5 Bytes JMP 6FC65BC7 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!DialogBoxParamA 779B8152 5 Bytes JMP 6FC646DC C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!DialogBoxIndirectParamA 779B847D 5 Bytes JMP 6FC647A2 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!MessageBoxIndirectA 779CD4D9 5 Bytes JMP 6FC64671 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!MessageBoxIndirectW 779CD5D3 5 Bytes JMP 6FC64606 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!MessageBoxExA 779CD639 5 Bytes JMP 6FC645A4 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!MessageBoxExW 779CD65D 5 Bytes JMP 6FC64542 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!keybd_event 779CD972 5 Bytes JMP 6FC65EF7 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] SHELL32.dll!SHRestricted + D95 765B8988 4 Bytes [4D, 30, 43, 74] {DEC EBP; XOR [EBX+0x74], AL}
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] SHELL32.dll!SHRestricted + D9D 765B8990 8 Bytes [57, 2F, 43, 74, 9C, 5B, 42, ...]
GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-04-14 19:31:05
Windows 6.0.6002 Service Pack 2
Running: gmer.exe; Driver: C:\Users\PROPRI~1\AppData\Local\Temp\kxliikog.sys
---- System - GMER 1.0.15 ----
INT 0x1F \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 82020CD0
INT 0x37 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 820200E8
INT 0xC1 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 820203D8
INT 0xD1 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 8200BD64
INT 0xD2 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 8200C01C
INT 0xDF \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 820201C0
INT 0xE1 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 82020B40
INT 0xE3 \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 820206D4
INT 0xFD \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 82021100
INT 0xFE \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) 8202136C
---- User code sections - GMER 1.0.15 ----
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!CreateDialogParamW 779772A2 5 Bytes JMP 6FB6DE50 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!GetAsyncKeyState 7797863C 5 Bytes JMP 6FA88EF7 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!SetWindowsHookExW 779787AD 5 Bytes JMP 6FB69A75 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!CallNextHookEx 77978E3B 5 Bytes JMP 6FB5D101 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!UnhookWindowsHookEx 779798DB 5 Bytes JMP 6FAD466E C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!EnableWindow 7797CD8B 5 Bytes JMP 6FB6DCDD C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!CreateWindowExW 77981305 5 Bytes JMP 6FB6DAC4 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!GetKeyState 77988CB1 5 Bytes JMP 6FB6D28B C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!IsDialogMessageW 77990745 5 Bytes JMP 6FA95A17 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!CreateDialogParamA 779917AA 5 Bytes JMP 6FC653AB C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!IsDialogMessage 77991847 5 Bytes JMP 6FC64C47 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!CreateDialogIndirectParamA 779926F1 5 Bytes JMP 6FC653E2 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!CreateDialogIndirectParamW 77999A62 5 Bytes JMP 6FC65419 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!SetKeyboardState 779A0987 5 Bytes JMP 6FC64FB6 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!DialogBoxParamW 779A10B0 5 Bytes JMP 6FA95505 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!DialogBoxIndirectParamW 779A2EF5 5 Bytes JMP 6FC6473F C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!SendInput 779A2F75 5 Bytes JMP 6FC65B73 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!EndDialog 779A326E 5 Bytes JMP 6FA97EC2 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!SetCursorPos 779B6FB2 5 Bytes JMP 6FC65BC7 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!DialogBoxParamA 779B8152 5 Bytes JMP 6FC646DC C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!DialogBoxIndirectParamA 779B847D 5 Bytes JMP 6FC647A2 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!MessageBoxIndirectA 779CD4D9 5 Bytes JMP 6FC64671 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!MessageBoxIndirectW 779CD5D3 5 Bytes JMP 6FC64606 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!MessageBoxExA 779CD639 5 Bytes JMP 6FC645A4 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!MessageBoxExW 779CD65D 5 Bytes JMP 6FC64542 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] USER32.dll!keybd_event 779CD972 5 Bytes JMP 6FC65EF7 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] SHELL32.dll!SHRestricted + D95 765B8988 4 Bytes [4D, 30, 43, 74] {DEC EBP; XOR [EBX+0x74], AL}
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] SHELL32.dll!SHRestricted + D9D 765B8990 8 Bytes [57, 2F, 43, 74, 9C, 5B, 42, ...]
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] SHELL32.dll!ILFree + 3DA 765B8DFC 4 Bytes [4D, 30, 43, 74] {DEC EBP; XOR [EBX+0x74], AL}
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] SHELL32.dll!ILFree + 3E2 765B8E04 4 Bytes [57, 2F, 43, 74]
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] SHELL32.dll!SHBindToObject + 8C 765BE188 4 Bytes [4D, 30, 43, 74] {DEC EBP; XOR [EBX+0x74], AL}
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] SHELL32.dll!SHBindToObject + 94 765BE190 4 Bytes [57, 2F, 43, 74]
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] ole32.dll!OleLoadFromStream 76401E12 5 Bytes JMP 6FC64AA7 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2044] ole32.dll!CoCreateInstance 76439EA6 5 Bytes JMP 6FB6DB20 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!CreateDialogParamW 779772A2 5 Bytes JMP 6FB6DE50 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!GetAsyncKeyState 7797863C 5 Bytes JMP 6FA88EF7 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!SetWindowsHookExW 779787AD 5 Bytes JMP 6FB69A75 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!CallNextHookEx 77978E3B 5 Bytes JMP 6FB5D101 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!UnhookWindowsHookEx 779798DB 5 Bytes JMP 6FAD466E C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!EnableWindow 7797CD8B 5 Bytes JMP 6FB6DCDD C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!CreateWindowExW 77981305 5 Bytes JMP 6FB6DAC4 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!GetKeyState 77988CB1 5 Bytes JMP 6FB6D28B C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!IsDialogMessageW 77990745 5 Bytes JMP 6FA95A17 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!CreateDialogParamA 779917AA 5 Bytes JMP 6FC653AB C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!IsDialogMessage 77991847 5 Bytes JMP 6FC64C47 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!CreateDialogIndirectParamA 779926F1 5 Bytes JMP 6FC653E2 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!CreateDialogIndirectParamW 77999A62 5 Bytes JMP 6FC65419 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!SetKeyboardState 779A0987 5 Bytes JMP 6FC64FB6 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!DialogBoxParamW 779A10B0 5 Bytes JMP 6FA95505 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!DialogBoxIndirectParamW 779A2EF5 5 Bytes JMP 6FC6473F C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!SendInput 779A2F75 5 Bytes JMP 6FC65B73 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!EndDialog 779A326E 5 Bytes JMP 6FA97EC2 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!SetCursorPos 779B6FB2 5 Bytes JMP 6FC65BC7 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!DialogBoxParamA 779B8152 5 Bytes JMP 6FC646DC C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!DialogBoxIndirectParamA 779B847D 5 Bytes JMP 6FC647A2 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!MessageBoxIndirectA 779CD4D9 5 Bytes JMP 6FC64671 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!MessageBoxIndirectW 779CD5D3 5 Bytes JMP 6FC64606 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!MessageBoxExA 779CD639 5 Bytes JMP 6FC645A4 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!MessageBoxExW 779CD65D 5 Bytes JMP 6FC64542 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] USER32.dll!keybd_event 779CD972 5 Bytes JMP 6FC65EF7 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] SHELL32.dll!SHRestricted + D95 765B8988 4 Bytes [4D, 30, 43, 74] {DEC EBP; XOR [EBX+0x74], AL}
.text C:\Program Files\Internet Explorer\iexplore.exe[2772] SHELL32.dll!SHRestricted + D9D 765B8990 8 Bytes [57, 2F, 43, 74, 9C, 5B, 42, ...]
Utilisateur anonyme
15 avril 2010 à 10:04
15 avril 2010 à 10:04
hello il ma manque la fin du rapport ...
heberge-le ici et donne le lien obtenu en echange : http://www.cijoint.fr
heberge-le ici et donne le lien obtenu en echange : http://www.cijoint.fr
Utilisateur anonyme
16 avril 2010 à 02:00
16 avril 2010 à 02:00
DESACTIVE TON ANTIVIRUS ET TON PAREFEU SI PRESENTS !!!!!(car il est detecté a tort comme infection)
▶ Télécharge List_Kill'em et enregistre le sur ton bureau
double clique ( clic droit "executer en tant qu'administrateur" pour Vista/7 ) sur le raccourci sur ton bureau pour lancer l'installation
une fois terminée , clic sur "terminer" et le programme se lancera seul
choisis l'option Search
un icone blanc et noir va s'afficher sur le bureau , il te servira à relancer le programme par la suite.
un autre rouge et noir te servira a desinstaller le prog a la fin de la desinfection.
▶ laisse travailler l'outil
à l'apparition de la fenetre blanche , c'est un peu long , c'est normal , le programme n'est pas bloqué.
un rapport du nom de catchme apparait sur ton bureau , ignore-le,ne le poste pas , , il s'auto supprimera a la fin du scan
▶ Poste le contenu du rapport qui s'ouvre aux 100 % du scan à l'ecran "COMPLETED"
▶ Télécharge List_Kill'em et enregistre le sur ton bureau
double clique ( clic droit "executer en tant qu'administrateur" pour Vista/7 ) sur le raccourci sur ton bureau pour lancer l'installation
une fois terminée , clic sur "terminer" et le programme se lancera seul
choisis l'option Search
un icone blanc et noir va s'afficher sur le bureau , il te servira à relancer le programme par la suite.
un autre rouge et noir te servira a desinstaller le prog a la fin de la desinfection.
▶ laisse travailler l'outil
à l'apparition de la fenetre blanche , c'est un peu long , c'est normal , le programme n'est pas bloqué.
un rapport du nom de catchme apparait sur ton bureau , ignore-le,ne le poste pas , , il s'auto supprimera a la fin du scan
▶ Poste le contenu du rapport qui s'ouvre aux 100 % du scan à l'ecran "COMPLETED"
Utilisateur anonyme
16 avril 2010 à 03:13
16 avril 2010 à 03:13
clic droit sur son icone dans la barre des taches et "desactiver la protection residente"