Zlob

neozis -  
 Utilisateur anonyme -
Bonsoir,

et bien je suis infecter par un zlob (trojan downloader) et je n'arrive pas l'enlever.

j'ai scanner avec microsoft antispyware et j'ai donc eu cela
http://img95.imageshack.us/img95/2598/zlob1oe.jpg

alors si quelqu'un d'entre vous pouver me donner un coup de pouce.

merci de votre aide

ps: la page d'acceuil internet que je n'arrive pas a enlever a cause du zlob
https://imageshack.com/

7 réponses

  1. Utilisateur anonyme
     
    Salut,

    télécharges hijackthis:
    Téléchargement de HijackThis

    Installe le dans son propre dossier:
    -cliques droit sur le bureau, nouveau dossier, installes-le dedans.
    Lance le, cliques sur "do a system scan and save logfile"
    Puis copies et colles le rapport ici.
    0
  2. neozis
     
    salut,

    désolé pour le retard

    voila le rapport, je l'ai déjà fait mais je n'arrive pas a enlever la ligne (o2:BHO)

    Logfile of HijackThis v1.99.1
    Scan saved at 10:29:46, on 15/05/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
    C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
    C:\WINDOWS\system32\RunDll32.exe
    C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
    C:\Program Files\DAEMON Tools\daemon.exe
    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\WINDOWS\system32\ctfmon.exe
    C:\PROGRA~1\INCRED~1\bin\IMApp.exe
    C:\Program Files\Ensemble clavier et souris sans fil Labtec\MagicKey.exe
    C:\Program Files\Ensemble clavier et souris sans fil Labtec\OSD.EXE
    C:\WINDOWS\system32\inetsrv\inetinfo.exe
    C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
    C:\Program Files\Network Associates\VirusScan\Mcshield.exe
    C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
    C:\PROGRA~1\NETWOR~1\COMMON~1\naPrdMgr.exe
    C:\WINDOWS\System32\nvsvc32.exe
    C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
    C:\WINDOWS\System32\alg.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\atmclk.exe
    C:\WINDOWS\system32\dcomcfg.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Documents and Settings\NEOZIS\Bureau\HijackThis.exe

    O2 - BHO: Nothing - {b0398eca-0bcd-4645-8261-5e9dc70248d0} - C:\WINDOWS\system32\hpC5E3.tmp
    O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
    O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
    O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
    O4 - HKLM\..\Run: [DUControl] "C:\Program Files\DirectUpdate v4\DUControl.exe"
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
    O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
    O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
    O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_5 -reboot 1
    O4 - Global Startup: Activer l'ensemble clavier et souris sans fil Labtec.lnk = C:\Program Files\Ensemble clavier et souris sans fil Labtec\MagicKey.exe
    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll (file missing)
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll (file missing)
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
    O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
    O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
    O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
    O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
    0
    1. Utilisateur anonyme
       
      Si tu touches sans connaître on va pas s'en sorti l'ami..

      Fait ce scan anti-virus en ligne avec Internet Explorer, accepte l'active X, pour le faire fonctionner,
      une fois qu'il a terminé colle le rapport ici stp, puis je pense que ça sera ok.

      https://www.bitdefender.com/toolbox/
      0
  3. neozis
     
    voici le resultat de bitdefender

    Results

    Identified Viruses
    11

    Infected Files
    12

    Suspect Files
    0

    Warnings
    0

    Disinfected
    0

    Deleted Files
    11

    Engines Info

    Virus Definitions
    375010

    Engine build
    AVCORE v1.0 (build 2310) (i386) (Apr 17 2006 16:24:38)

    Scan plugins
    13

    Archive plugins
    40

    Unpack plugins
    4

    E-mail plugins
    6

    System plugins
    1

    Scan Settings

    First Action
    Disinfect

    Second Action
    Delete

    Heuristics
    Yes

    Enable Warnings
    Yes

    Scanned Extensions
    *;

    Exclude Extensions

    Scan Emails
    Yes

    Scan Archives
    Yes

    Scan Packed
    Yes

    Scan Files
    Yes

    Scan Boot
    Yes

    Scanned File
    Status

    C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>GetAccess.class
    Infected with: Java.Trojan.Exploit.Bytverify

    C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>GetAccess.class
    Disinfection failed

    C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>GetAccess.class
    Deleted

    C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip
    Updated

    C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>Installer.class
    Infected with: Trojan.Downloader.Java.Openconnection.AJ

    C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>Installer.class
    Disinfection failed

    C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>Installer.class
    Deleted

    C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip
    Updated

    C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>NewSecurityClassLoader.class
    Infected with: Trojan.Exploit.Byteverify.G

    C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>NewSecurityClassLoader.class
    Disinfection failed

    C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>NewSecurityClassLoader.class
    Deleted

    C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip
    Updated

    C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>NewURLClassLoader.class
    Infected with: Trojan.Java.Byteverify.Exploit.C

    C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>NewURLClassLoader.class
    Disinfection failed

    C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>NewURLClassLoader.class
    Deleted

    C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip
    Updated

    C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv470.jar-1ab62644-610d43d6.zip=>Matrix.class
    Infected with: Java.Trojan.Downloader.OpenStream.C

    C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv470.jar-1ab62644-610d43d6.zip=>Matrix.class
    Disinfection failed

    C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv470.jar-1ab62644-610d43d6.zip=>Matrix.class
    Deleted

    C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv470.jar-1ab62644-610d43d6.zip
    Updated

    C:\Documents and Settings\NEOZIS\Local Settings\Temp\nsj3.tmp=>(NSIS o)=>lzma_nsis0004
    Infected with: Trojan.Downloader.IstBar.OK

    C:\Documents and Settings\NEOZIS\Local Settings\Temp\nsj3.tmp=>(NSIS o)=>lzma_nsis0004
    Disinfection failed

    C:\Documents and Settings\NEOZIS\Local Settings\Temp\nsj3.tmp=>(NSIS o)=>lzma_nsis0004
    Deleted

    C:\Documents and Settings\NEOZIS\Local Settings\Temp\nsj3.tmp=>(NSIS o)
    Update failed

    C:\Documents and Settings\NEOZIS\Mes documents\LOGICIEL\Native Instruments Traktor DJ Studio 3 Crack - Keygen - Serial.zip=>crackfix.exe
    Infected with: Trojan.Bho.B

    C:\Documents and Settings\NEOZIS\Mes documents\LOGICIEL\Native Instruments Traktor DJ Studio 3 Crack - Keygen - Serial.zip=>crackfix.exe
    Disinfection failed

    C:\Documents and Settings\NEOZIS\Mes documents\LOGICIEL\Native Instruments Traktor DJ Studio 3 Crack - Keygen - Serial.zip=>crackfix.exe
    Deleted

    C:\Documents and Settings\NEOZIS\Mes documents\LOGICIEL\Native Instruments Traktor DJ Studio 3 Crack - Keygen - Serial.zip
    Update failed

    C:\Program Files\Starforce\devsec.exe
    Infected with: Trojan.Delf.QS

    C:\Program Files\Starforce\devsec.exe
    Disinfection failed

    C:\Program Files\Starforce\devsec.exe
    Deleted

    C:\WINDOWS\system32\cheat_plugin.exe
    Infected with: Trojan.Downloader.Inservice.JZ

    C:\WINDOWS\system32\cheat_plugin.exe
    Disinfection failed

    C:\WINDOWS\system32\cheat_plugin.exe
    Deleted

    C:\WINDOWS\system32\expIorer.exe
    Infected with: Trojan.Downloader.Agent.BZ

    C:\WINDOWS\system32\expIorer.exe
    Disinfection failed

    C:\WINDOWS\system32\expIorer.exe
    Deleted

    C:\WINDOWS\system32\regperf.exe
    Infected with: BehavesLike:Win32.ExplorerHijack

    C:\WINDOWS\system32\regperf.exe
    Disinfection failed

    C:\WINDOWS\system32\regperf.exe
    Delete failed

    C:\WINDOWS\system32\swrtg.exe
    Infected with: Trojan.Delf.QS

    C:\WINDOWS\system32\swrtg.exe
    Disinfection failed

    C:\WINDOWS\system32\swrtg.exe
    Deleted
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. neozis
     
    salut,

    rapport 1

    SmitFraudFix v2.44

    Rapport fait à 10:34:12,76, 16/05/2006
    Executé à partir de C:\Documents and Settings\NEOZIS\Bureau\SmitfraudFix
    OS: Microsoft Windows XP [version 5.1.2600]

    »»»»»»»»»»»»»»»»»»»»»»»» C:\

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

    C:\WINDOWS\system32\atmclk.exe PRESENT !
    C:\WINDOWS\system32\dcomcfg.exe PRESENT !
    C:\WINDOWS\system32\hp????.tmp PRESENT !
    C:\WINDOWS\system32\ld????.tmp PRESENT !
    C:\WINDOWS\system32\ot.ico PRESENT !
    C:\WINDOWS\system32\regperf.exe PRESENT !
    C:\WINDOWS\system32\stdole3.tlb PRESENT !
    C:\WINDOWS\system32\ts.ico PRESENT !
    C:\WINDOWS\system32\1024\ PRESENT !

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\NEOZIS\Application Data

    »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

    »»»»»»»»»»»»»»»»»»»»»»»»

    »»»»»»»»»»»»»»»»»»»»»»»» Bureau

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

    »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

    »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
    "Source"="About:Home"
    "SubscribedURL"="About:Home"
    "FriendlyName"="Ma page d'accueil"

    »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

    »»»»»»»»»»»»»»»»»»»»»»»» Fin

    et bien pour le rapport 2, tout est parti.

    grand merci a toi bernie61 et aussi aux autres, toutes les saleté sont parti.
    0
  7. bernie61
     
    hello
    refais un hijackthis pour qu on termine le nettoyage
    a+
    0
  8. NEOZIS
     
    Logfile of HijackThis v1.99.1
    Scan saved at 22:31:07, on 16/05/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
    C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
    C:\WINDOWS\system32\RunDll32.exe
    C:\Program Files\DAEMON Tools\daemon.exe
    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\WINDOWS\system32\ctfmon.exe
    C:\PROGRA~1\INCRED~1\bin\IMApp.exe
    C:\Program Files\Ensemble clavier et souris sans fil Labtec\MagicKey.exe
    C:\Program Files\Ensemble clavier et souris sans fil Labtec\OSD.EXE
    C:\WINDOWS\system32\inetsrv\inetinfo.exe
    C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
    C:\Program Files\Network Associates\VirusScan\Mcshield.exe
    C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
    C:\WINDOWS\System32\nvsvc32.exe
    C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\eMule\emule.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Documents and Settings\NEOZIS\Bureau\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
    O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
    O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
    O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
    O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
    O4 - HKLM\..\Run: [DUControl] "C:\Program Files\DirectUpdate v4\DUControl.exe"
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
    O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
    O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
    O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_5 -reboot 1
    O4 - Global Startup: Activer l'ensemble clavier et souris sans fil Labtec.lnk = C:\Program Files\Ensemble clavier et souris sans fil Labtec\MagicKey.exe
    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
    O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
    O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
    O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
    O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

    encore merci
    0
    1. Utilisateur anonyme
       
      Salut,

      c'est propre ;-) merci à Bernie

      A++
      0

Discussions similaires

Zlob trojan
marich -
iceman6259 -

8 réponses