Bonjour, Tout à commencé ce matin lorsque j'ai eu un message d'erreur des mises a jours windows " il se peut que votre ordinateur court un risque". Ca ma interpellé car mes mises a jours sont mise en mode automatique et là mon ordi me prétent qu'elles ne le sont pas, je n'ai toujours pas su réglé ce pblem. Il y a une heure avast à reperé un virus appelé WIN32 trojano 1165 je le supprime mais il revient sans arrêt. J'aimerais rapidement corriger et supprimer ces problemes car j'ai l'impression que mon ordi a de plus en plus de mal. J'ai passé ma journée a faire des scans avec avast, spybot et ad-aware, cc cleaner sans succès. Je suis novice en pc donc si qqn pourrait m'aider ce serais grandement apprécié, j'ai bcp de travaux à rendre pour le moment et si mon pc me lache mnt ca sera très compliqué. Merci d'avance Aurélien

ensuite fait ceci bitdefender online uniquement avec internet explorer http://www.bitdefender.fr/scan_fr/scan8/ie.html et poste le rapport mais java a jour https://www.java.com/fr/download/manual.jsp desinstalle deamon tool il comporte un adaware et surtout vire bitcomet tu as surment pris cette saloperie par ce biais

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 17:12:07, on 19/05/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16640) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\LEXPPS.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Microsoft IntelliType Pro\type32.exe C:\Program Files\Microsoft IntelliPoint\point32.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\XemiComputers\Active Desktop Calendar\ADC.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\Google\Google Updater\GoogleUpdater.exe C:\Program Files\Stardock\ObjectDock\ObjectDock.exe C:\PROGRA~1\MOZILL~1\FIREFOX.EXE C:\WINDOWS\system32\NOTEPAD.EXE C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe C:\Program Files\Hijackthis\monjack.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = https://support.microsoft.com/en-US/topic/internet-explorer-downloads-d49e1f0d-571c-9a7b-d97e-be248806ca70 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {07B4938A-E6E1-43BF-8018-3EA5D530C381} - (no file) O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.5.19.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: (no name) - {6C23AB0C-0244-4B01-8253-BEE724D0D2EC} - (no file) O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll O2 - BHO: (no name) - {E545846B-F484-446C-9F09-063B01CD777C} - (no file) O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe" O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe" O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Microsoft Updates] svehost.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\RunServices: [Microsoft Updates] svehost.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [Active Desktop Calendar] C:\Program Files\XemiComputers\Active Desktop Calendar\ADC.exe O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe O8 - Extra context menu item: Download all links using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm O8 - Extra context menu item: Download all videos using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm O8 - Extra context menu item: Download link using &BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - https://bitdefender.solutions-antivirus.com/scan8/oscan8.cab O20 - Winlogon Notify: wvUoLfcy - C:\WINDOWS\ O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe (file missing) O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

Je dois fixer les " (no file)" je suppose, et il y a autre chose? Merci de ton aide!

Attend je suis allez demandé quelque chose car il y a quelquechose qui me chagrine sur ton rapport.

re, On ma donné la marche a suivre Télécharger OAD (Outil d'Aide au Diagnostic) < http://sosvirus.changelog.fr/OAD.exe > → Enregistre-le sur ton bureau → Lancer 'OAD.exe' en faisant un double clique sur le fichier → Saisir la valeur recherchée -> svehost.exe ( fait un copier/coller ) → Type de recherche : sélectionner l'option 6 puis valide [entrée] → OAD va maintenant rechercher le fichier. → Laisse-le travailler jusqu'à ce qu'il en ait terminé. → Suivant la taille des disques durs, cette recherche peut prendre plusieurs minutes. ------------- Patienter. -------------- → Le rapport de recherche s'affichera automatiquement dès qu'il en aura terminé. → Faire un copier/coller de ce rapport dans ton prochain post. (CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller ) Note: Certains Antivirus peuvent émettre une alerte lors du téléchargement / utilisation > ignore

VOila voila, lun. 19/05/2008 ---- 17:37:19,60 ---------------------------------- §§§§§§ [svehost.exe] §§§§§§ ---------------------------------- [X] Registre -------------- [ ] rapide -- Fichier --- [ ] disque systeme ------------- [X] complete ******************** [Registre] ******************** [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Microsoft Updates"="svehost.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices] "Microsoft Updates"="svehost.exe" ******************* [Fichier] ******************* ********************* [Même date] ********************* Aucun fichier créé à la même date détecté Outil Aide Diagnostic By !aur3n7 Version 1.1 ---------------------------------- §§§§§ Fin Rapport §§§§§ ----------------------------------

je fais quoi ensuite? désolé de pousser; j'imagine que tes appelés dans tout les coins et que ta du boulot, mais j'ai énormément de travail en retard, mon pc plante est infecté depuis dimanche matin et je veus être sur que tout est en ordre avant de me lancer. merci de me dire ce que je dois faire, :-) nik,

/!\ Manip crée spécialement pour cet utilisateur , ne pas reproduire chez soi ... /!\ Crée un nouveau document texte : clic droit de souris sur le bureau, "Nouveau"> "Document Texte". Ouvre-le et copie-colle dedans de ce qui est en citation en gras ci-dessous, (copie tout d'un trait) : ( y compris Regedit4, et la ligne vide en dessous ) REGEDIT4 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Microsoft Updates"=- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices] "Microsoft Updates"=- Puis "fichier" -> "enregistrer sous" : dans : sur le bureau Nom du fichier : fix.reg Type de fichier : "tous les fichiers" clique sur "enregistrer" Cela doit ressembler à ça Double clique sur fix.reg → tu dois OBLIGATOIREMENT* avoir un message "voulez-vous vraiment ajouter les informations contenues dans ce fichier .reg au registre ?" Si c'est bien le cas, clique sur "oui" *Prevenir si le message n'apparait pas. Puis reposte un hijackthis stp a+

j'ai vu que t'avais répondus à mon message, sur la page du forum, mais dans la discussion ici il n'apparait pas chez moi, tu sais le renvoyer?

Win32 Trojano-1165 !! - Page 2

Résolu

Réponse 21 / 43
nikitabe Messages postés 121 Statut Membre 3

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:12:07, on 19/05/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Microsoft IntelliType Pro\type32.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\XemiComputers\Active Desktop Calendar\ADC.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files\Hijackthis\monjack.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = https://support.microsoft.com/en-US/topic/internet-explorer-downloads-d49e1f0d-571c-9a7b-d97e-be248806ca70
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {07B4938A-E6E1-43BF-8018-3EA5D530C381} - (no file)
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.5.19.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {6C23AB0C-0244-4B01-8253-BEE724D0D2EC} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: (no name) - {E545846B-F484-446C-9F09-063B01CD777C} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Microsoft Updates] svehost.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\RunServices: [Microsoft Updates] svehost.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Active Desktop Calendar] C:\Program Files\XemiComputers\Active Desktop Calendar\ADC.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: Download all links using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Download all videos using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: Download link using &BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - https://bitdefender.solutions-antivirus.com/scan8/oscan8.cab
O20 - Winlogon Notify: wvUoLfcy - C:\WINDOWS\
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
0
Réponse 22 / 43
nikitabe Messages postés 121 Statut Membre 3

Je dois fixer les " (no file)" je suppose, et il y a autre chose?

Merci de ton aide!
0
Réponse 23 / 43
dou-l Messages postés 2871 Statut Membre 61

Attend je suis allez demandé quelque chose car il y a quelquechose qui me chagrine sur ton rapport.
0
Réponse 24 / 43
nikitabe Messages postés 121 Statut Membre 3

argh :s

ok, j'attends
0
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
Réponse 25 / 43
dou-l Messages postés 2871 Statut Membre 61

re,

On ma donné la marche a suivre

Télécharger OAD (Outil d'Aide au Diagnostic) < http://sosvirus.changelog.fr/OAD.exe >
→ Enregistre-le sur ton bureau
→ Lancer 'OAD.exe' en faisant un double clique sur le fichier
→ Saisir la valeur recherchée -> svehost.exe ( fait un copier/coller )
→ Type de recherche : sélectionner l'option 6 puis valide [entrée]
→ OAD va maintenant rechercher le fichier.
→ Laisse-le travailler jusqu'à ce qu'il en ait terminé.
→ Suivant la taille des disques durs, cette recherche peut prendre plusieurs minutes.

------------- Patienter. --------------

→ Le rapport de recherche s'affichera automatiquement dès qu'il en aura terminé.
→ Faire un copier/coller de ce rapport dans ton prochain post.

(CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

Note: Certains Antivirus peuvent émettre une alerte lors du téléchargement / utilisation > ignore
0
Réponse 26 / 43
nikitabe Messages postés 121 Statut Membre 3

VOila voila,

lun. 19/05/2008 ---- 17:37:19,60

----------------------------------
§§§§§§ [svehost.exe] §§§§§§
----------------------------------
[X] Registre

-------------- [ ] rapide
-- Fichier --- [ ] disque systeme
------------- [X] complete

********************
[Registre]
********************

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Microsoft Updates"="svehost.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
"Microsoft Updates"="svehost.exe"

*******************
[Fichier]
*******************

*********************
[Même date]
*********************

Aucun fichier créé à la même date détecté

Outil Aide Diagnostic By !aur3n7 Version 1.1
----------------------------------
§§§§§ Fin Rapport §§§§§
----------------------------------
0
Réponse 27 / 43
nikitabe Messages postés 121 Statut Membre 3

je fais quoi ensuite?

désolé de pousser; j'imagine que tes appelés dans tout les coins et que ta du boulot, mais j'ai énormément de travail en retard, mon pc plante est infecté depuis dimanche matin et je veus être sur que tout est en ordre avant de me lancer.

merci de me dire ce que je dois faire, :-)

nik,
0
Réponse 28 / 43
dou-l Messages postés 2871 Statut Membre 61

/!\ Manip crée spécialement pour cet utilisateur , ne pas reproduire chez soi ... /!\

Crée un nouveau document texte : clic droit de souris sur le bureau, "Nouveau"> "Document Texte". Ouvre-le et copie-colle dedans de ce qui est en citation en gras ci-dessous, (copie tout d'un trait) : ( y compris Regedit4, et la ligne vide en dessous )

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Microsoft Updates"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
"Microsoft Updates"=-

Puis "fichier" -> "enregistrer sous" :
dans : sur le bureau
Nom du fichier : fix.reg
Type de fichier : "tous les fichiers"
clique sur "enregistrer"

Cela doit ressembler à ça

Double clique sur fix.reg

→ tu dois OBLIGATOIREMENT* avoir un message "voulez-vous vraiment ajouter les informations contenues dans ce fichier .reg au registre ?"
Si c'est bien le cas, clique sur "oui"

*Prevenir si le message n'apparait pas.

Puis reposte un hijackthis stp

a+
0
Réponse 29 / 43
nikitabe Messages postés 121 Statut Membre 3

j'ai vu que t'avais répondus à mon message, sur la page du forum,

mais dans la discussion ici il n'apparait pas chez moi, tu sais le renvoyer?
0
Réponse 30 / 43
dou-l Messages postés 2871 Statut Membre 61

Moi aussi ca me la fait mais maintenant c'est bon la manip y est c'est juste un petit bug !!
0
Réponse 31 / 43
nikitabe Messages postés 121 Statut Membre 3

okok, scuz le forum dois etre busy!

voila les démarche se sont bien passée comme prévu, donc ci joint un nouveau hijackthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:14:47, on 19/05/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Microsoft IntelliType Pro\type32.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\XemiComputers\Active Desktop Calendar\ADC.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files\Hijackthis\monjack.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\regedit.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = https://support.microsoft.com/en-US/topic/internet-explorer-downloads-d49e1f0d-571c-9a7b-d97e-be248806ca70
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {07B4938A-E6E1-43BF-8018-3EA5D530C381} - (no file)
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.5.19.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {6C23AB0C-0244-4B01-8253-BEE724D0D2EC} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: (no name) - {E545846B-F484-446C-9F09-063B01CD777C} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Active Desktop Calendar] C:\Program Files\XemiComputers\Active Desktop Calendar\ADC.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: Download all links using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Download all videos using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: Download link using &BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - https://bitdefender.solutions-antivirus.com/scan8/oscan8.cab
O20 - Winlogon Notify: wvUoLfcy - C:\WINDOWS\
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
0
Réponse 32 / 43
nikitabe Messages postés 121 Statut Membre 3

ps: lorsque j'ai fais la manip, spybot ma demander de confirmer une changement important dans le registre, j'ai accpepter,
puis directement après un autre message s'est affiché ;

catégorie : system start up global entry
modif : valeur supprimée
element: microsoft updates
ancienne valeurs; svehost.exe

je confirme la modification du registre ou pas? depuis ce qui m'est arrivé je me méfie, (peu etre un peu trop!)
0
Réponse 33 / 43
dou-l Messages postés 2871 Statut Membre 61

Ok

Relance HijackThis, choisis "do a scan only" coche la case devant les lignes ci-dessous et clic en bas sur "fix checked".

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://go.microsoft.com/fwlink/?LinkId=54843
O2 - BHO: (no name) - {07B4938A-E6E1-43BF-8018-3EA5D530C381} - (no file)
O2 - BHO: (no name) - {6C23AB0C-0244-4B01-8253-BEE724D0D2EC} - (no file)
O2 - BHO: (no name) - {E545846B-F484-446C-9F09-063B01CD777C} - (no file)
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

et dit tes soucis actuel
0
Réponse 34 / 43
nikitabe Messages postés 121 Statut Membre 3

voila j'ai fixer mes lignes,

puis j'ai redemarrer, et toujours le message d'erreur des mises a jours automatiques comme au début du probleme, j'ai pas l'impression d'etre totalement sain, je reposte un hijackthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:38:56, on 19/05/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Microsoft IntelliType Pro\type32.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\XemiComputers\Active Desktop Calendar\ADC.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\Hijackthis\monjack.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.5.19.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\RunServices: [Microsoft Updates] svehost.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Active Desktop Calendar] C:\Program Files\XemiComputers\Active Desktop Calendar\ADC.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: Download all links using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Download all videos using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: Download link using &BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - https://bitdefender.solutions-antivirus.com/scan8/oscan8.cab
O20 - Winlogon Notify: wvUoLfcy - C:\WINDOWS\
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
0
Réponse 35 / 43
dou-l Messages postés 2871 Statut Membre 61

confirme stp puis dis moi
0
Réponse 36 / 43
nikitabe Messages postés 121 Statut Membre 3

ok, j'ai l'impression que je me suis tromper dans divers modifications, je ne sais plus ce qui est bon de ce qui ne l'est pas.

Peut me dire si il y a des choses à autoriser/refuser?

et comment savoir si les modifications registres sont normal ou néfaste? des fois j'en ai 10 d'un coup qui viennent alors je les refuse toutes c bien trop suspect.

enfin si ça t'intéresse jette y un œil et dis moi ;)

18/05/2008 16:11:14 Autorisé(e) (based on user decision) value "Spybot - Search & Destroy" (new data: "") supprimé(e) in System Startup global entry!
18/05/2008 16:11:29 Refusé(e) (based on user decision) value "SpybotDeletingA5661" (new data: "") supprimé(e) in System Startup global entry!
18/05/2008 16:11:31 Refusé(e) (based on user decision) value "SpybotDeletingC7485" (new data: "") supprimé(e) in System Startup global entry!
18/05/2008 16:11:35 Refusé(e) (based on user decision) value "SpybotDeletingA2786" (new data: "") supprimé(e) in System Startup global entry!
18/05/2008 16:11:37 Refusé(e) (based on user decision) value "SpybotDeletingC6651" (new data: "") supprimé(e) in System Startup global entry!
18/05/2008 16:14:46 Autorisé(e) (based on user decision) value "{A1625BB5-1E3F-4A3C-8DD6-2C5D23DA5362}" (new data: "") ajouté(e) in Browser Helper Object!
18/05/2008 16:15:41 Refusé(e) (based on user decision) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:15:42 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:15:43 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:15:44 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:15:45 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:15:46 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:15:47 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:15:48 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:15:49 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:15:50 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:15:52 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:15:53 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:15:54 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:15:55 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:15:56 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:15:57 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:15:58 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:15:59 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:19:18 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:19:21 Refusé(e) (based on user blacklist) value "SpybotDeletingA5661" (new data: "") supprimé(e) in System Startup global entry!
18/05/2008 16:19:23 Refusé(e) (based on user blacklist) value "SpybotDeletingC7485" (new data: "") supprimé(e) in System Startup global entry!
18/05/2008 16:19:23 Refusé(e) (based on user blacklist) value "SpybotDeletingA2786" (new data: "") supprimé(e) in System Startup global entry!
18/05/2008 16:19:24 Refusé(e) (based on user blacklist) value "SpybotDeletingC6651" (new data: "") supprimé(e) in System Startup global entry!
18/05/2008 16:19:25 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:19:27 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:19:28 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:19:29 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:19:32 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:19:33 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:19:36 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:19:37 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:19:39 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:19:40 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:19:42 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:19:43 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:19:44 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:19:46 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:19:47 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:19:48 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:19:49 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:19:50 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:19:51 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:19:52 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:19:54 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:19:56 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:19:57 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:19:58 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:19:59 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:00 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:01 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:02 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:04 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:05 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:06 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:07 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:08 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:09 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:10 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:11 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:12 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:13 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:14 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:15 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:16 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:17 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:18 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:19 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:20 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:21 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:22 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:23 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:24 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:25 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:26 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:27 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:28 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:29 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:30 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:31 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:32 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:33 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:34 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:35 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:36 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:37 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:38 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:39 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:41 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:42 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:43 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:44 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:45 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:46 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:47 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:48 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:49 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:50 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:51 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:52 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:53 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:54 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:55 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:57 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:58 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:20:59 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:21:00 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:21:01 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:21:02 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:21:03 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:21:04 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:21:06 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:21:07 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:21:08 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:21:09 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:21:10 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:21:11 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:21:12 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:22:31 Refusé(e) (based on user decision) value "c0c0bb82" (new data: "rundll32.exe "C:\WINDOWS\system32\eeutlvsf.dll",b") ajouté(e) in System Startup global entry!
18/05/2008 16:22:32 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:22:33 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:22:34 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:22:35 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:22:36 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:22:37 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:22:38 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:22:39 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:22:40 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:22:41 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:22:42 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:22:43 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:22:44 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:22:45 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:22:46 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:22:47 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:22:49 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:22:50 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:22:51 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:22:53 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:22:54 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:22:55 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:22:56 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:22:57 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:22:58 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:22:59 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:00 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:01 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:02 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:03 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:04 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:05 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:06 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:07 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:08 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:09 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:10 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:11 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:12 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:13 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:14 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:15 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:16 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:17 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:18 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:19 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:20 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:21 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:22 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:23 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:24 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:25 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:26 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:27 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:28 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:29 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:30 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:31 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:32 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:33 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:35 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:36 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:37 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:38 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:39 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:40 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:41 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:42 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:43 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:44 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:45 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:46 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:47 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:48 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:49 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:50 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:51 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:52 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:53 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:54 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:55 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:56 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:57 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:58 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:23:59 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:00 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:01 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:02 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:04 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:05 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:06 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:07 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:08 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:09 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:10 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:11 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:12 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:13 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:14 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:15 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:16 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:17 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:18 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:19 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:20 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:21 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:22 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:23 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:24 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:25 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:26 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:27 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:28 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:29 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:30 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:31 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:32 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:33 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:34 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:35 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:36 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:37 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:39 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:40 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:41 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:42 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:43 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:44 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:45 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:46 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:47 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:48 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:49 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:50 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:51 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:52 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:53 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:54 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:55 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:56 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:57 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:58 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:24:59 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:25:00 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:25:01 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:25:02 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:25:03 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:25:04 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:25:05 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:25:08 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:25:09 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:25:11 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:25:12 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:25:13 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:25:14 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:25:15 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:25:16 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:25:17 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:25:18 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:25:19 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:25:20 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:25:22 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:25:23 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:25:24 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:25:25 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:25:26 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:25:27 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:25:28 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:25:29 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:25:30 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:25:31 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:25:32 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:25:33 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:25:34 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/2008 16:25:35 Refusé(e) (based on user blacklist) value "BMc3f3881e" (new data: "Rundll32.exe "C:\WINDOWS\system32\qhjoasjt.dll",s") modifié(e) in System Startup global entry!
18/05/20
0
Réponse 37 / 43
dou-l Messages postés 2871 Statut Membre 61

Ca te pose des probleme ou il revienne sans cesse ces demande de modif ?
0
Réponse 38 / 43
nikitabe Messages postés 121 Statut Membre 3

j'ai plutôt l'impression que c'est chaque fois des différentes, et çà me pose problème d'autoriser qqch dont je ne suis pas sur, donc j'ai plutôt tendance a refuser,

Est ce que ça peut être mauvais de refuser une modification normal?

Avant d'avoir cette attaque les messages de modification de registre étaient relativement rares, donc si elle venait pendant une install j'acceptais, si elle sortait de nulle part je refusait. Mais là je doit dire que j'hésite souvent...
0
Réponse 39 / 43
jacques.gache Messages postés 34829 Statut Contributeur sécurité 1 645

nikitabe, comme je te le dis sur ton autre tropic tu as une infection SD, comme je ne sais pas si tu as suivi les démarche que je te donnais ici http://www.commentcamarche.net/forum/affich 6466007 rapport smitfraud et hijackthis ce qui expliquerais que sur ton dernier hijacthis sur celui-ci je retrouves toujours l'infection je te laisse donc régler ton infection car si tu t'amuses sur plusieur sujet pour le même proplème tu ne feras rien de bon
0
Réponse 40 / 43
dou-l Messages postés 2871 Statut Membre 61

Ouh la deux fois les memes operations pas cooll !!
0

Win32 Trojano-1165 !! - Page 2

Discussions similaires

Newsletters