infecte par je ne sais quoi Fermé

Question

voici ce que me dit hijack que dois faire maintenant?Logfile of HijackThis v1.99.1Scan saved at 22:24:14, on 13/03/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXEC:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exeC:\Program Files\Fichiers communs\Real\Update_OBealsched.exeC:\Program Files\Winamp\winampa.exeC:\Program Files\Terminator\Quick TV\Scheduled.exeC:\WINDOWS\System32\svchost.exeC:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeC:\Program Files\QuickTime\qttask.exeC:\WINDOWS\system32\Tablet.exeC:\Program Files\F-Secure Internet Security\backweb\4476822\Program\fspex.exeC:\WINDOWS\system32\WTablet\TabUserW.exeC:\Program Files\Alwil Software\Avast4\ashMaiSv.exeC:\Program Files\Alwil Software\Avast4\ashWebSv.exeC:\Program Files\Spybot - Search & Destroy\SpybotSD.exeC:\Program Files\F-Secure Internet Security\Common\FSMA32.EXEC:\Program Files\F-Secure Internet Security\Common\FSMB32.EXEC:\Program Files\F-Secure Internet Security\Common\FCH32.EXEC:\Program Files\F-Secure Internet Security\Anti-Virus\fsgk32st.exeC:\Program Files\F-Secure Internet Security\Anti-Virus\FSGK32.EXEC:\Program Files\F-Secure Internet Security\Anti-Virus\fssm32.exeC:\Program Files\F-Secure Internet Security\Common\FAMEH32.EXEC:\Program Files\F-Secure Internet Security\Anti-Virus\fsqh.exeC:\Program Files\F-Secure Internet Security\Anti-Virus\fsrw.exeC:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exeC:\Program Files\F-Secure Internet Security\Anti-Virus\fsav32.exeC:\Program Files\F-Secure Internet Security\Common\FSM32.EXEC:\PROGRA~1\F-SECU~1\ANTI-S~1\fsaw.exeC:\Program Files\F-Secure Internet Security\FSGUI\fsguidll.exeC:\Program Files\F-Secure Internet Security\FSGUI\fsavgui.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Internet Explorer\IEXPLORE.EXEC:\PROGRA~1\Lavasoft\AD-AWA~2\Ad-Aware.exeC:\Documents and Settings\deejoz.JOAQUIM.000\Bureau\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.free.fr/search/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.free.fr/R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dllO2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dllO2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dllO3 - Toolbar: (no name) - {ACB1E670-3217-45C4-A021-6B829A8A27CB} - (no file)O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dllO4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osbootO4 - HKLM\..\Run: [Winad Client] C:\Program Files\Winad Client\Winad.exeO4 - HKLM\..\Run: [Microsoft Update] vpc32.exeO4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exeO4 - HKLM\..\Run: [Quick TV Agent] C:\Program Files\Terminator\Quick TV\Scheduled.exeO4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE" /splashO4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure Internet Security\TNB\TNBUtil.exe" /CHECKALL /WAITFORSWO4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\F-Secure Internet Security\FSGUI\FSSW.EXE" /rebootO4 - HKLM\..\Run: [News Service] "C:\Program Files\F-Secure Internet Security\FSGUI\ispnews.exe"O4 - HKLM\..\RunServices: [Microsoft Update] vpc32.exeO4 - HKCU\..\Run: [Microsoft Update] vpc32.exeO4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /backgroundO4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exeO4 - Global Startup: F-Secure 2006.lnk = C:\Program Files\F-Secure Internet Security\backweb\4476822\Program\fspex.exeO4 - Global Startup: TabUserW.exe.lnk = C:\WINDOWS\system32\WTablet\TabUserW.exeO4 - Global Startup: TV Remote Control.lnk = C:\Program Files\Terminator\TV7131 Utilities\P3XRCtl.exeO8 - Extra context menu item: &Bloquer cette fenêtre publicitaire - C:\Program Files\F-Secure Internet Security\Anti-Spyware\blockpopups.htmO8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\Office10\EXCEL.EXE/3000O9 - Extra button: Protection Internet Explorer - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure Internet Security\Anti-Spyware\ieshield.dllO9 - Extra 'Tools' menuitem: Protection Internet Explorer... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure Internet Security\Anti-Spyware\ieshield.dllO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS
ppdf32.dllO12 - Plugin for .psd: C:\Program Files\Internet Explorer\PLUGINS
pqtplugin11.dllO14 - IERESET.INF: START_PAGE_URL=http://home.free.fr/O16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://public.windupdates.com/get_file.php?bt=ie&p=1fcf7a5aad9e11fa6e81301772cc81a582986ccec023301891f6f9c30c3ce889b111ab2209f305e0ab84e0c08d7151cd476287cb1585d8c68fdfadc44ff56ae4:bd1acc194c6d95c438093ed0f53d7740O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exeO23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exeO23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)O23 - Service: F-Secure 2006 (BackWeb Plug-in - 4476822) - F-Secure Internet Security 2005 - C:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXEO23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\Anti-Virus\fsgk32st.exeO23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exeO23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exeO23 - Service: FSMA - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\Common\FSMA32.EXEO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exeO23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exeO23 - Service: TabletService - Wacom Technology, Corp. - C:\WINDOWS\system32\Tablet.exe

^^Marie^^ · Answer

Salut

Bonjour,
S'il vous plait
Merci
aurevoir.................. ce ne sont pas des virus.....!!!!!!
Explique ton blème !!!!!!!!

tu le connais : Winad Client ???
Dis nous ce que tu as sur MSN dans ajout/supp des programmes !!

O4 - HKLM\..\Run: [Winad Client] C:\Program Files\Winad Client\Winad.exe

O16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://public.windupdates.com/get_file.php?bt=ie&p=1fcf7a5aad9e11fa6e81301772cc81a582986ccec023301891f6f9c30c3ce889b111ab2209f305e0ab84e0c08d7151cd476287cb1585d8c68fdfadc44ff56ae4

A+

Utilisateur anonyme · Answer

SALUT !!! deejoz

coche les cases devant ces lignes avec hijackthis et fixchecked

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.free.fr/search/
O3 - Toolbar: (no name) - {ACB1E670-3217-45C4-A021-6B829A8A27CB} - (no file)
O4 - HKLM\..\Run: [Winad Client] C:\Program Files\Winad Client\Winad.exe
O4 - HKLM\..\Run: [Microsoft Update] vpc32.exe
O4 - HKLM\..\RunServices: [Microsoft Update] vpc32.exe
O4 - HKCU\..\Run: [Microsoft Update] vpc32.exe
O16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://public.windupdates.com/get_file.php?bt=ie&p=1fcf7a5aad9e11fa6e81301772cc81a582986ccec023301891f6f9c30c3ce889b111ab2209f305e0ab84e0c08d7151cd476287cb1585d8c68fdfadc44ff56ae4:bd1acc194c6d95c438093ed0f53d7740

supprime ceci.
C:\Program Files===>\Winad Client ( le dossier)

charge ces logs

CleanUp40.exe (pour virer les temps)
=====================================
http://www.florensac-chasse-trap.com/ section virus/logiciel de securite
voir demo
http://pageperso.aol.fr/balltrap34/democleanup.htm
lance le supp tt ce quil va trouver

ewido
========
- télécharge et installe ewido http://download.ewido.net/ewido-setup.exe
- Pendant l'installation décoche "Install background guard (required for automatic updates)" et "Install scan via context menu".
- lance Ewido et mets-le à jour
-- clique "Complete System Scan"
- quand le scan est terminé, clique sur "Save Report" et localise le rapport.

a2 free
======

- A2 Free (anti-trojans et worms)
http://www.emsisoft.net/fr/software/download/
inscrit toi

Lire ceci avant de le télécharger:
http://assiste.free.fr/p/internet_utilitaires/a2_free.php
lance le et supp tout ce qu il va trouver

envoie un nouveau rapport hjt et le rapport ewido

deejoz · Answer

rebonjour voici le resultat des différents scan mon ordi est il clean ?rapport hijackLogfile of HijackThis v1.99.1Scan saved at 19:47:04, on 14/03/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Fichiers communs\Real\Update_OBealsched.exeC:\Program Files\Winamp\winampa.exeC:\Program Files\Terminator\Quick TV\Scheduled.exeC:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeC:\Program Files\QuickTime\qttask.exeC:\Program Files\F-Secure Internet Security\Common\FSM32.EXEC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\WINDOWS\system32\WTablet\TabUserW.exeC:\Program Files\Terminator\TV7131 Utilities\P3XRCtl.exeC:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXEC:\Program Files\ewido anti-malware\ewidoctrl.exeC:\Program Files\F-Secure Internet Security\Anti-Virus\fsgk32st.exeC:\Program Files\F-Secure Internet Security\backweb\4476822\Program\fspex.exeC:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exeC:\Program Files\F-Secure Internet Security\Anti-Virus\FSGK32.EXEC:\Program Files\F-Secure Internet Security\Common\FSMA32.EXEC:\Program Files\F-Secure Internet Security\Common\FSMB32.EXEC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\Tablet.exeC:\Program Files\F-Secure Internet Security\Anti-Virus\fssm32.exeC:\Program Files\F-Secure Internet Security\Common\FCH32.EXEC:\Program Files\F-Secure Internet Security\Common\FAMEH32.EXEC:\Program Files\F-Secure Internet Security\Anti-Virus\fsqh.exeC:\Program Files\F-Secure Internet Security\Anti-Virus\fsrw.exeC:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exeC:\Program Files\Alwil Software\Avast4\ashMaiSv.exeC:\Program Files\Alwil Software\Avast4\ashWebSv.exeC:\Program Files\F-Secure Internet Security\Anti-Virus\fsav32.exeC:\Program Files\Internet Explorer\IEXPLORE.EXEC:\PROGRA~1\F-SECU~1\ANTI-S~1\fsaw.exeC:\Program Files\F-Secure Internet Security\FSGUI\fsguidll.exeC:\Documents and Settings\deejoz.JOAQUIM.000\Bureau\HijackThis.exeR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.free.fr/R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dllO2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dllO2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dllO3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dllO4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osbootO4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exeO4 - HKLM\..\Run: [Quick TV Agent] C:\Program Files\Terminator\Quick TV\Scheduled.exeO4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE" /splashO4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure Internet Security\TNB\TNBUtil.exe" /CHECKALL /WAITFORSWO4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\F-Secure Internet Security\FSGUI\FSSW.EXE" /rebootO4 - HKLM\..\Run: [News Service] "C:\Program Files\F-Secure Internet Security\FSGUI\ispnews.exe"O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /backgroundO4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exeO4 - Global Startup: F-Secure 2006.lnk = C:\Program Files\F-Secure Internet Security\backweb\4476822\Program\fspex.exeO4 - Global Startup: TabUserW.exe.lnk = C:\WINDOWS\system32\WTablet\TabUserW.exeO4 - Global Startup: TV Remote Control.lnk = C:\Program Files\Terminator\TV7131 Utilities\P3XRCtl.exeO8 - Extra context menu item: &Bloquer cette fenêtre publicitaire - C:\Program Files\F-Secure Internet Security\Anti-Spyware\blockpopups.htmO8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\Office10\EXCEL.EXE/3000O9 - Extra button: Protection Internet Explorer - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure Internet Security\Anti-Spyware\ieshield.dllO9 - Extra 'Tools' menuitem: Protection Internet Explorer... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure Internet Security\Anti-Spyware\ieshield.dllO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS
ppdf32.dllO12 - Plugin for .psd: C:\Program Files\Internet Explorer\PLUGINS
pqtplugin11.dllO14 - IERESET.INF: START_PAGE_URL=http://home.free.fr/O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exeO23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exeO23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)O23 - Service: F-Secure 2006 (BackWeb Plug-in - 4476822) - F-Secure Internet Security 2005 - C:\PROGRA~1\F-SECU~1\backweb\4476822\Program\SERVIC~1.EXEO23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exeO23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\Anti-Virus\fsgk32st.exeO23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure Internet Security\backweb\4476822\program\fsbwsys.exeO23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exeO23 - Service: FSMA - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\Common\FSMA32.EXEO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exeO23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exeO23 - Service: TabletService - Wacom Technology, Corp. - C:\WINDOWS\system32\Tablet.exerapports ewidoo--------------------------------------------------------- ewido anti-malware - Rapport de scan--------------------------------------------------------- + Créé le:		19:23:00, 14/03/2006 + Somme de contrôle:	7661DB0B + Résultats du scan:	HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/ISTactivex.dll -> Adware.ISTBar : Nettoyer et sauvegarder::Fin du rapportrapports a2a-squared ReportScan Started: 	14/03/2006 18:44:42Scan Finished: 	14/03/2006 19:34:51Scanning Time: 	0h 50min 8secScanned Files: 	94230Infected Files: 	6Nom du fichier 	DiagnosticKey: HKEY_CLASSES_ROOT\interface\{aa4939c3-deca-4a48-a454-97cd587c0ef5} 	Trace.Registry.ISTbar.XXXToolbarKey: HKEY_CLASSES_ROOT\interface\{eee4a2e5-9f56-432f-a6ed-f6f625b551e0} 	Trace.Registry.ISTbar.XXXToolbarKey: HKEY_LOCAL_MACHINE\software\classes\interface\{aa4939c3-deca-4a48-a454-97cd587c0ef5} 	Trace.Registry.ISTbar.XXXToolbarKey: HKEY_LOCAL_MACHINE\software\classes\interface\{eee4a2e5-9f56-432f-a6ed-f6f625b551e0} 	Trace.Registry.ISTbar.XXXToolbarKey: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/istactivex.dll 	Trace.Registry.ISTbarValue: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shareddlls --> c:\windows\downloaded program files\istactivex.dll 	Trace.Registry.ISTbar

Utilisateur anonyme · Answer

citation (( Et les virus ça se supprime non ?))

sous entendu... il resterait des virus .. oublies..... ( log hjt p5 )

voila qui est interressant .fais voir la liste.....xxxx.exe ....xxxxdll ==> nom du virus ??

( istbar n apparaissant que dans le bdr)

Utilisateur anonyme · Answer

en effet tu parles pour rien dire .... dans le poste 5 (pourtant bien precisè.." log hjt p5") ci dessus ,et qui fait l objet de ma precedente question
je te signales que vpc32.exe a disparu depuis bien longtemps deja???( au cas ou tu l aurais pas remarque)
alors un bon conseil mon ami ,dorenavant faire gaffe a l effet boomerang"

Infecte par je ne sais quoi

5 réponses

Discussions similaires