Zlob

neozis -  
 Utilisateur anonyme -
Bonsoir,

et bien je suis infecter par un zlob (trojan downloader) et je n'arrive pas l'enlever.

j'ai scanner avec microsoft antispyware et j'ai donc eu cela
http://img95.imageshack.us/img95/2598/zlob1oe.jpg

alors si quelqu'un d'entre vous pouver me donner un coup de pouce.

merci de votre aide

ps: la page d'acceuil internet que je n'arrive pas a enlever a cause du zlob
https://imageshack.com/

7 réponses

Réponse 1 / 7
Utilisateur anonyme
 
Salut,

télécharges hijackthis:
Téléchargement de HijackThis

Installe le dans son propre dossier:
-cliques droit sur le bureau, nouveau dossier, installes-le dedans.
Lance le, cliques sur "do a system scan and save logfile"
Puis copies et colles le rapport ici.
0
Réponse 2 / 7
neozis
 
salut,

désolé pour le retard

voila le rapport, je l'ai déjà fait mais je n'arrive pas a enlever la ligne (o2:BHO)

Logfile of HijackThis v1.99.1
Scan saved at 10:29:46, on 15/05/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Ensemble clavier et souris sans fil Labtec\MagicKey.exe
C:\Program Files\Ensemble clavier et souris sans fil Labtec\OSD.EXE
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\PROGRA~1\NETWOR~1\COMMON~1\naPrdMgr.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\atmclk.exe
C:\WINDOWS\system32\dcomcfg.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\NEOZIS\Bureau\HijackThis.exe

O2 - BHO: Nothing - {b0398eca-0bcd-4645-8261-5e9dc70248d0} - C:\WINDOWS\system32\hpC5E3.tmp
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [DUControl] "C:\Program Files\DirectUpdate v4\DUControl.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_5 -reboot 1
O4 - Global Startup: Activer l'ensemble clavier et souris sans fil Labtec.lnk = C:\Program Files\Ensemble clavier et souris sans fil Labtec\MagicKey.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll (file missing)
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
0
Utilisateur anonyme
 
Si tu touches sans connaître on va pas s'en sorti l'ami..

Fait ce scan anti-virus en ligne avec Internet Explorer, accepte l'active X, pour le faire fonctionner,
une fois qu'il a terminé colle le rapport ici stp, puis je pense que ça sera ok.

https://www.bitdefender.com/toolbox/
0
Réponse 3 / 7
neozis
 
voici le resultat de bitdefender

Results

Identified Viruses
11

Infected Files
12

Suspect Files
0

Warnings
0

Disinfected
0

Deleted Files
11




Engines Info

Virus Definitions
375010

Engine build
AVCORE v1.0 (build 2310) (i386) (Apr 17 2006 16:24:38)

Scan plugins
13

Archive plugins
40

Unpack plugins
4

E-mail plugins
6

System plugins
1




Scan Settings

First Action
Disinfect

Second Action
Delete

Heuristics
Yes

Enable Warnings
Yes

Scanned Extensions
*;

Exclude Extensions


Scan Emails
Yes

Scan Archives
Yes

Scan Packed
Yes

Scan Files
Yes

Scan Boot
Yes




Scanned File
Status

C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>GetAccess.class
Infected with: Java.Trojan.Exploit.Bytverify

C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>GetAccess.class
Disinfection failed

C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>GetAccess.class
Deleted

C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip
Updated

C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>Installer.class
Infected with: Trojan.Downloader.Java.Openconnection.AJ

C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>Installer.class
Disinfection failed

C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>Installer.class
Deleted

C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip
Updated

C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>NewSecurityClassLoader.class
Infected with: Trojan.Exploit.Byteverify.G

C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>NewSecurityClassLoader.class
Disinfection failed

C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>NewSecurityClassLoader.class
Deleted

C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip
Updated

C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>NewURLClassLoader.class
Infected with: Trojan.Java.Byteverify.Exploit.C

C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>NewURLClassLoader.class
Disinfection failed

C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>NewURLClassLoader.class
Deleted

C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip
Updated

C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv470.jar-1ab62644-610d43d6.zip=>Matrix.class
Infected with: Java.Trojan.Downloader.OpenStream.C

C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv470.jar-1ab62644-610d43d6.zip=>Matrix.class
Disinfection failed

C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv470.jar-1ab62644-610d43d6.zip=>Matrix.class
Deleted

C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv470.jar-1ab62644-610d43d6.zip
Updated

C:\Documents and Settings\NEOZIS\Local Settings\Temp\nsj3.tmp=>(NSIS o)=>lzma_nsis0004
Infected with: Trojan.Downloader.IstBar.OK

C:\Documents and Settings\NEOZIS\Local Settings\Temp\nsj3.tmp=>(NSIS o)=>lzma_nsis0004
Disinfection failed

C:\Documents and Settings\NEOZIS\Local Settings\Temp\nsj3.tmp=>(NSIS o)=>lzma_nsis0004
Deleted

C:\Documents and Settings\NEOZIS\Local Settings\Temp\nsj3.tmp=>(NSIS o)
Update failed

C:\Documents and Settings\NEOZIS\Mes documents\LOGICIEL\Native Instruments Traktor DJ Studio 3 Crack - Keygen - Serial.zip=>crackfix.exe
Infected with: Trojan.Bho.B

C:\Documents and Settings\NEOZIS\Mes documents\LOGICIEL\Native Instruments Traktor DJ Studio 3 Crack - Keygen - Serial.zip=>crackfix.exe
Disinfection failed

C:\Documents and Settings\NEOZIS\Mes documents\LOGICIEL\Native Instruments Traktor DJ Studio 3 Crack - Keygen - Serial.zip=>crackfix.exe
Deleted

C:\Documents and Settings\NEOZIS\Mes documents\LOGICIEL\Native Instruments Traktor DJ Studio 3 Crack - Keygen - Serial.zip
Update failed

C:\Program Files\Starforce\devsec.exe
Infected with: Trojan.Delf.QS

C:\Program Files\Starforce\devsec.exe
Disinfection failed

C:\Program Files\Starforce\devsec.exe
Deleted

C:\WINDOWS\system32\cheat_plugin.exe
Infected with: Trojan.Downloader.Inservice.JZ

C:\WINDOWS\system32\cheat_plugin.exe
Disinfection failed

C:\WINDOWS\system32\cheat_plugin.exe
Deleted

C:\WINDOWS\system32\expIorer.exe
Infected with: Trojan.Downloader.Agent.BZ

C:\WINDOWS\system32\expIorer.exe
Disinfection failed

C:\WINDOWS\system32\expIorer.exe
Deleted

C:\WINDOWS\system32\regperf.exe
Infected with: BehavesLike:Win32.ExplorerHijack

C:\WINDOWS\system32\regperf.exe
Disinfection failed

C:\WINDOWS\system32\regperf.exe
Delete failed

C:\WINDOWS\system32\swrtg.exe
Infected with: Trojan.Delf.QS

C:\WINDOWS\system32\swrtg.exe
Disinfection failed

C:\WINDOWS\system32\swrtg.exe
Deleted
0
Réponse 4 / 7
bernie61
 
hello vous autres

en complément passes aussi SmitfrauFix
http://users.skynet.be/BernieClub/txt2.html#frau

option 1 ET 2
et copie les 2 rapport ici
a+
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 7
neozis
 
salut,

rapport 1

SmitFraudFix v2.44

Rapport fait à 10:34:12,76, 16/05/2006
Executé à partir de C:\Documents and Settings\NEOZIS\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600]

»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

C:\WINDOWS\system32\atmclk.exe PRESENT !
C:\WINDOWS\system32\dcomcfg.exe PRESENT !
C:\WINDOWS\system32\hp????.tmp PRESENT !
C:\WINDOWS\system32\ld????.tmp PRESENT !
C:\WINDOWS\system32\ot.ico PRESENT !
C:\WINDOWS\system32\regperf.exe PRESENT !
C:\WINDOWS\system32\stdole3.tlb PRESENT !
C:\WINDOWS\system32\ts.ico PRESENT !
C:\WINDOWS\system32\1024\ PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\NEOZIS\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»»


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

et bien pour le rapport 2, tout est parti.

grand merci a toi bernie61 et aussi aux autres, toutes les saleté sont parti.
0
Réponse 6 / 7
bernie61
 
hello
refais un hijackthis pour qu on termine le nettoyage
a+
0
Réponse 7 / 7
NEOZIS
 
Logfile of HijackThis v1.99.1
Scan saved at 22:31:07, on 16/05/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Ensemble clavier et souris sans fil Labtec\MagicKey.exe
C:\Program Files\Ensemble clavier et souris sans fil Labtec\OSD.EXE
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\eMule\emule.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\NEOZIS\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [DUControl] "C:\Program Files\DirectUpdate v4\DUControl.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_5 -reboot 1
O4 - Global Startup: Activer l'ensemble clavier et souris sans fil Labtec.lnk = C:\Program Files\Ensemble clavier et souris sans fil Labtec\MagicKey.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

encore merci
0
Utilisateur anonyme
 
Salut,

c'est propre ;-) merci à Bernie

A++
0

Discussions similaires

Trojan.Zlob.Gen !!!!!!!!!!
doufy10 -
H3lios -

19 réponses
Zlob trojan
marich -
iceman6259 -

8 réponses