tentative de changement de page de démarrage

Question

Bonjour, j'ai un avertissement de spywareguard qui me dit ceci : an attempt to change internet explorer setting has been detected, warning your homme page has been changed (about blank), ceci après avoir ouvert une nouvelle fenêtre sur IE6. J'ai essayé pas mal d'anti-virus et rien ça continue. Bien sur mon spywareguard me permet de ne pas accepter ce changement, mais l'avertissement revient chaque fois. Quelqu'un peut-il me dire s'il y a une solution? Merci de votre aide

Colosse · Answer

passe le spybot et vaccine ensuitesalutations

theobordeaux · Answer

C'est fait mais j'ai tjrs le même avertissement

balltrap34 · Answer

salut si tu as spybot version 1.3met spybot en mode avancer click sur tool et page de demarrage et la tu pourras fixer la page

theobordeaux · Answer

J'essaie de me servir de HijackThis-v1.97.7 mais toute une liste apparait et je ne sait pas quoi "fixer", quelqu'un peut-il m'aider? Je ne peux pas faire de copier-coller pour tout mettre ici.

Tirailleur · Answer

une fois le scan fini, clique sur "save log" puis copie/colle ici le rapport qui s'affiche.

theobordeaux · Answer

Voila le log de hijackthis, de plus ce matin j'ai eu un avertissement sur le trojan wintrim.be. Merci Tirailleur, c très sympa, je suis un peu démuni devant tout ça.Logfile of HijackThis v1.97.7Scan saved at 10:21:55, on 14/06/2004Platform: Windows XP  (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 (6.00.2600.0000)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\Grisoft\AVG6\avgserv.exeC:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exeC:\WINDOWS\System32
vsvc32.exeC:\WINDOWS\System32	cpsvcs.exeC:\WINDOWS\System32\snmp.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\SOUNDMAN.EXEC:\PROGRA~1\Wanadoo\CnxMon.exeC:\PROGRA~1\Wanadoo\TaskbarIcon.exeC:\Program Files\Logitech\iTouch\iTouch.exeC:\PROGRA~1\DAP\DAP.EXEC:\Program Files\Real\RealPlayer\RealPlay.exeC:\Program Files\Creative\WebCam Go Control\CAMTRAY.EXEC:\Program Files\QuickTime\qttask.exeC:\WINDOWS\System32\P2P Networking\P2P Networking.exeC:\PROGRA~1\WANADO~2\Wanadoo Messager.exeC:\Program Files\Java\j2re1.5.0\bin\jusched.exeC:\Program Files\Enigma Software Group\SpyHunter\PopupBlocker\EnigmaPopupStop.exeC:\Program Files\Logitech\MouseWare\system\em_exec.exeC:\PROGRA~1\Grisoft\AVG6\avgcc32.exeC:\Program Files\The Cleaner	ca.exeC:\Program Files\The Cleaner	cm.exeC:\Program Files\VoissaNoPubs\VoissaNoPubs.exeC:\PROGRA~1\MOZILLA.ORG\MOZILLA\MOZILLA.EXEC:\Program Files\Nikon\NkView6\NkvMon.exeC:\Program Files\WinZip\WZQKPICK.EXEC:\Program Files\BHODemon\BHODemon.exeC:\Program Files\SpywareGuard\sgmain.exeC:\Program Files\SpywareGuard\sgbhp.exeC:\WINDOWS\System32\ctfmon.exeC:\Program Files\Internet Explorer\IEXPLORE.EXEC:\Program Files\Internet Explorer\IEXPLORE.EXEC:\Documents and Settings\Théodore\Bureau\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.google.fr/keyword/%sR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.wanadoo.fr/go/page_recherche/R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.wanadoo.fr/R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.fr/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.wanadoo.fr/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.wanadoo.fr/R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.wanadoo.fr/R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.wanadoo.fr/R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet ExplorerR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://www.wanadoo.fr/R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://www.wanadoo.fr/R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensR1 - HKCU\Software\Microsoft\Internet Explorer,SearchAssistant = ,R1 - HKCU\Software\Microsoft\Internet Explorer,CustomizeSearch = ,N2 - Netscape 6: user_pref("browser.startup.homepage", "http://www.wanadoo.fr"); (C:\Documents and Settings\Théodore\Application Data\Mozilla\Profiles\default\msxnbk4y.slt\prefs.js)N2 - Netscape 6: user_pref("browser.search.defaultengine", "engine://C%3A%5CPROGRA%7E1%5CMOZILLA.ORG%5CMOZILLA%5Csearchplugins%5Cgooglefr.src"); (C:\Documents and Settings\Théodore\Application Data\Mozilla\Profiles\default\msxnbk4y.slt\prefs.js)O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dllO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO3 - Toolbar: (no name) - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - (no file)O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dllO3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocxO3 - Toolbar: Commander Toolbar - {6596829B-37D4-40ad-971B-1E9041725C52} - C:\WINDOWS\System32\ietb.dllO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initializeO4 - HKLM\..\Run: [nwiz] nwiz.exe /installO4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXEO4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exeO4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exeO4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exeO4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exeO4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.ExeO4 - HKLM\..\Run: [DownloadAccelerator] C:\PROGRA~1\DAP\DAP.EXE /STARTUPO4 - HKLM\..\Run: [NVCLOCK] rundll32 nvclock.dll,fnNvclockO4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYERO4 - HKLM\..\Run: [WebCam Go Sti Service Application] wbcgosvcO4 - HKLM\..\Run: [Creative WebCam Tray] C:\Program Files\Creative\WebCam Go Control\CAMTRAY.EXEO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTARTO4 - HKLM\..\Run: [Wanadoo Messager.exe] "C:\PROGRA~1\WANADO~2\Wanadoo Messager.exe" /backgroundO4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.5.0\bin\jusched.exeO4 - HKLM\..\Run: [EnigmaPopupStop] C:\Program Files\Enigma Software Group\SpyHunter\PopupBlocker\EnigmaPopupStop.exeO4 - HKLM\..\Run: [ASUS Probe] C:\Program Files\ASUS\Probe\AsusProb.exeO4 - HKLM\..\Run: [Necutray] NECUTRAY.EXEO4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe /STARTUPO4 - HKLM\..\Run: [tcactive] C:\Program Files\The Cleaner	ca.exeO4 - HKLM\..\Run: [tcmonitor] C:\Program Files\The Cleaner	cm.exeO4 - HKCU\..\Run: [Mozilla Quick Launch] "C:\PROGRA~1\MOZILLA.ORG\MOZILLA\MOZILLA.EXE" -turboO4 - Startup: BHODemon.lnk = C:\Program Files\BHODemon\BHODemon.exeO4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exeO4 - Startup: Wanadoo visio.lnk.disabledO4 - Startup: WanadooVisio.lnk.disabledO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXEO4 - Global Startup: NkvMon.exe.lnk = C:\Program Files\Nikon\NkView6\NkvMon.exeO4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXEO6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions presentO6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htmO8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.htmlO8 - Extra context menu item: Backward &Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.htmlO8 - Extra context menu item: Cac&hed Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.htmlO8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htmO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000O8 - Extra context menu item: Ouvrir le cadre dans une nouvelle fenêtre - file://C:\WINDOWS\web
vcadre.htmlO8 - Extra context menu item: Si&milar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.htmlO8 - Extra context menu item: Voir les cookies - C:\WINDOWS\web\cookies.htmlO9 - Extra 'Tools' menuitem: Console Java (Sun) (HKLM)O9 - Extra button: UCmore Info (HKLM)O9 - Extra button: Related (HKLM)O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)O16 - DPF: ppctlcab - http://www.pestscan.com/scanner/ppctlcab.cabO16 - DPF: {1EB17D1C-141D-4D9D-91CB-24D99215851D} - http://akamai.downloadv3.com/binaries/IA/netia32_FR_XP.cabO16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://www.pestscan.com/scanner/axscanner.cabO16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CABO16 - DPF: {6596829B-37D4-40AD-971B-1E9041725C52} (Commander Toolbar) - http://www.direct-ip.com/deliver/global/ms.cabO16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004033001/housecall.antivirus.com/housecall/xscan53.cabO16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cabO16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553525000} - http://active.macromedia.com/flash2/cabs/swflash.cabO16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cabO16 - DPF: {EEECA057-AD0F-44A7-8BE5-8634CEDBDBD1} - http://akamai.downloadv3.com/binaries/IA/netpe32_FR_XP.cab

theobordeaux · Answer

Voilà le log merci.Scan started at 15/06/2004 11:33:40 Scanning memory...Scanning boot sectors...Scanning files...C:\Documents and Settings\MH\Mes documents\Mes documents\Download\illus8.zip->Illustrator.exe - Win95/CIH.remnants -> InfectedC:\Documents and Settings\TEMP\Bureau\Marie Helene\Mes documents\Mes documents\Mes documents\Download\illus8.zip->Illustrator.exe - Win95/CIH.remnants -> InfectedC:\WINDOWS\system32
etia32.dll - Trojan:Win32/Trilon.B -> InfectedScanned============================	Objects: 146115	Directories: 10922	Archives: 9959	Size(Kb): 985473	Infected files: 3

Tirailleur · Answer

salut, Pense à les fichiers cachés : Ouvre le poste de travail Outils/Options des dossiers Onglet affichage Au milieu il y a Fichiers et dossiers cachés  Coche Afficher les fichiers et dossiers cachés Fais appliquerensuite va supprimer ces fichiers : C:\Documents and Settings\MH\Mes documents\Mes documents\Download\illus8.zipC:\Documents and Settings\TEMP\Bureau\Marie Helene\Mes documents\Mes documents\Mes documents\Download\illus8.zipC:\WINDOWS\system32
etia32.dll-----ensuite refais un scan avec ravantivirus pour voir s'il ne reste rien et reposte un nouveau HijackThis ici stp

theobordeaux · Answer

Il ne reste plus rien voila le logLogfile of HijackThis v1.97.7Scan saved at 05:46:42, on 16/06/2004Platform: Windows XP  (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 (6.00.2600.0000)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\Grisoft\AVG6\avgserv.exeC:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exeC:\WINDOWS\System32
vsvc32.exeC:\WINDOWS\System32	cpsvcs.exeC:\WINDOWS\System32\snmp.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\SOUNDMAN.EXEC:\PROGRA~1\Wanadoo\CnxMon.exeC:\PROGRA~1\Wanadoo\TaskbarIcon.exeC:\Program Files\Logitech\iTouch\iTouch.exeC:\PROGRA~1\DAP\DAP.EXEC:\Program Files\Real\RealPlayer\RealPlay.exeC:\Program Files\Creative\WebCam Go Control\CAMTRAY.EXEC:\Program Files\QuickTime\qttask.exeC:\WINDOWS\System32\P2P Networking\P2P Networking.exeC:\PROGRA~1\WANADO~2\Wanadoo Messager.exeC:\Program Files\Java\j2re1.5.0\bin\jusched.exeC:\Program Files\Logitech\MouseWare\system\em_exec.exeC:\Program Files\Enigma Software Group\SpyHunter\PopupBlocker\EnigmaPopupStop.exeC:\PROGRA~1\Grisoft\AVG6\avgcc32.exeC:\Program Files\The Cleaner	ca.exeC:\Program Files\The Cleaner	cm.exeC:\PROGRA~1\MOZILLA.ORG\MOZILLA\MOZILLA.EXEC:\Program Files\Nikon\NkView6\NkvMon.exeC:\Program Files\WinZip\WZQKPICK.EXEC:\Program Files\BHODemon\BHODemon.exeC:\Program Files\SpywareGuard\sgmain.exeC:\Program Files\SpywareGuard\sgbhp.exeC:\Program Files\Internet Explorer\IEXPLORE.EXEC:\Documents and Settings\Théodore\Bureau\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.google.fr/keyword/%sR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.wanadoo.fr/go/page_recherche/R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.wanadoo.fr/R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.fr/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.wanadoo.fr/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.wanadoo.fr/R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.wanadoo.fr/R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.wanadoo.fr/R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet ExplorerR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://www.wanadoo.fr/R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://www.wanadoo.fr/R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensR1 - HKCU\Software\Microsoft\Internet Explorer,SearchAssistant = ,R1 - HKCU\Software\Microsoft\Internet Explorer,CustomizeSearch = ,N2 - Netscape 6: user_pref("browser.startup.homepage", "http://www.wanadoo.fr"); (C:\Documents and Settings\Théodore\Application Data\Mozilla\Profiles\default\msxnbk4y.slt\prefs.js)N2 - Netscape 6: user_pref("browser.search.defaultengine", "engine://C%3A%5CPROGRA%7E1%5CMOZILLA.ORG%5CMOZILLA%5Csearchplugins%5Cgooglefr.src"); (C:\Documents and Settings\Théodore\Application Data\Mozilla\Profiles\default\msxnbk4y.slt\prefs.js)O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dllO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO3 - Toolbar: (no name) - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - (no file)O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dllO3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocxO3 - Toolbar: Commander Toolbar - {6596829B-37D4-40ad-971B-1E9041725C52} - C:\WINDOWS\System32\ietb.dllO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initializeO4 - HKLM\..\Run: [nwiz] nwiz.exe /installO4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXEO4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exeO4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exeO4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exeO4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exeO4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.ExeO4 - HKLM\..\Run: [DownloadAccelerator] C:\PROGRA~1\DAP\DAP.EXE /STARTUPO4 - HKLM\..\Run: [NVCLOCK] rundll32 nvclock.dll,fnNvclockO4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYERO4 - HKLM\..\Run: [WebCam Go Sti Service Application] wbcgosvcO4 - HKLM\..\Run: [Creative WebCam Tray] C:\Program Files\Creative\WebCam Go Control\CAMTRAY.EXEO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTARTO4 - HKLM\..\Run: [Wanadoo Messager.exe] "C:\PROGRA~1\WANADO~2\Wanadoo Messager.exe" /backgroundO4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.5.0\bin\jusched.exeO4 - HKLM\..\Run: [EnigmaPopupStop] C:\Program Files\Enigma Software Group\SpyHunter\PopupBlocker\EnigmaPopupStop.exeO4 - HKLM\..\Run: [ASUS Probe] C:\Program Files\ASUS\Probe\AsusProb.exeO4 - HKLM\..\Run: [Necutray] NECUTRAY.EXEO4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe /STARTUPO4 - HKLM\..\Run: [tcactive] C:\Program Files\The Cleaner	ca.exeO4 - HKLM\..\Run: [tcmonitor] C:\Program Files\The Cleaner	cm.exeO4 - HKCU\..\Run: [Mozilla Quick Launch] "C:\PROGRA~1\MOZILLA.ORG\MOZILLA\MOZILLA.EXE" -turboO4 - Startup: BHODemon.lnk = C:\Program Files\BHODemon\BHODemon.exeO4 - Startup: Reprendre l'installation de Windows Update.lnk = C:\WINDOWS\Fichiers d'installation de Windows Update\ie6setup.exeO4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exeO4 - Startup: Wanadoo visio.lnk.disabledO4 - Startup: WanadooVisio.lnk.disabledO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXEO4 - Global Startup: NkvMon.exe.lnk = C:\Program Files\Nikon\NkView6\NkvMon.exeO4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXEO6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions presentO6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htmO8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.htmlO8 - Extra context menu item: Backward &Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.htmlO8 - Extra context menu item: Cac&hed Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.htmlO8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htmO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000O8 - Extra context menu item: Ouvrir le cadre dans une nouvelle fenêtre - file://C:\WINDOWS\web
vcadre.htmlO8 - Extra context menu item: Si&milar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.htmlO8 - Extra context menu item: Voir les cookies - C:\WINDOWS\web\cookies.htmlO9 - Extra 'Tools' menuitem: Console Java (Sun) (HKLM)O9 - Extra button: UCmore Info (HKLM)O9 - Extra button: Related (HKLM)O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)O16 - DPF: ppctlcab - http://www.pestscan.com/scanner/ppctlcab.cabO16 - DPF: {1EB17D1C-141D-4D9D-91CB-24D99215851D} - http://akamai.downloadv3.com/binaries/IA/netia32_FR_XP.cabO16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://www.pestscan.com/scanner/axscanner.cabO16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CABO16 - DPF: {6596829B-37D4-40AD-971B-1E9041725C52} (Commander Toolbar) - http://www.direct-ip.com/deliver/global/ms.cabO16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cabO16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cabO16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553525000} - http://active.macromedia.com/flash2/cabs/swflash.cabO16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cabO16 - DPF: {EEECA057-AD0F-44A7-8BE5-8634CEDBDBD1} - http://akamai.downloadv3.com/binaries/IA/netpe32_FR_XP.cab

Tentative de changement de page de démarrage

9 réponses

Discussions similaires

Newsletters