Infection adware LOP

bbrunmontreuil Messages postés 33 Statut Membre -  
sKe69 Messages postés 21955 Statut Contributeur sécurité -
Bonjour,

Je suis infecté par l adware LOP via les pubs CID.

j'ai testé pas mal de choses vues dans les forums telles que désinstallation de msn plus et limewire, mais rien n'y fait

voilà donc le rapport d'intervention LOP S&D, et en fin de mail l'analyse de norton quant à lop, svp venez en aide à un désespéré!!

--------------------\\ Lop S&D 4.2.4-6 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
X86-based PC ( Uniprocessor Free : AMD Sempron(tm) Processor 3200+ )
BIOS : BIOS Date: 01/23/06 18:27:22 Ver: 08.00.12
USER : Ben ( Administrator )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total : 29 Go Free : 19 Go
D:\ (Local Disk) - NTFS - Total : 111 Go Free : 97 Go
E:\ (CD or DVD) - UDF - Total : 6 Go Free : 0 Go

"C:\Lop SD" ( MAJ : 20-10-2008|20:35 )
Option : [1] ( 24/10/2008|19:30 )

--------------------\\ Listing des dossiers dans APPLIC~1

[06/06/2008|21:47] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[05/06/2006|23:07] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe Systems
[16/06/2006|00:59] D:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
[29/05/2008|19:18] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[29/05/2008|19:21] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[02/01/2007|23:49] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Creative
[23/05/2006|14:43] D:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[05/10/2008|14:12] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[24/10/2008|07:47] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
[05/06/2006|22:49] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Macromedia
[29/05/2008|19:23] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[23/05/2006|14:32] D:\DOCUME~1\ALLUSE~1\APPLIC~1\OD2
[15/06/2006|23:08] D:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[23/05/2006|23:10] D:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[16/10/2008|01:13] D:\DOCUME~1\ALLUSE~1\APPLIC~1\SoftLand Ltd
[20/10/2008|22:55] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[22/10/2008|09:39] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Spyware Terminator
[31/01/2007|23:05] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[19/08/2008|12:23] D:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[23/05/2006|14:42] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
[23/05/2006|14:34] D:\DOCUME~1\ALLUSE~1\APPLIC~1\VadeRetro
[05/10/2008|19:22] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[29/05/2008|19:30] D:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Live Toolbar
[29/05/2008|18:57] D:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[01/06/2008|20:34] D:\DOCUME~1\Ben\APPLIC~1\Adobe
[19/06/2007|21:47] D:\DOCUME~1\Ben\APPLIC~1\AdobeUM
[16/10/2008|01:13] D:\DOCUME~1\Ben\APPLIC~1\AdwareBot
[01/06/2008|12:48] D:\DOCUME~1\Ben\APPLIC~1\Apple Computer
[18/07/2007|09:00] D:\DOCUME~1\Ben\APPLIC~1\Creative
[01/10/2006|21:54] D:\DOCUME~1\Ben\APPLIC~1\CyberLink
[21/09/2008|23:36] D:\DOCUME~1\Ben\APPLIC~1\DivX
[21/10/2008|00:59] D:\DOCUME~1\Ben\APPLIC~1\dvdcss
[31/05/2008|23:05] D:\DOCUME~1\Ben\APPLIC~1\EoRezo
[18/10/2008|14:28] D:\DOCUME~1\Ben\APPLIC~1\FileZilla
[02/06/2008|19:31] D:\DOCUME~1\Ben\APPLIC~1\Google
[16/06/2006|01:04] D:\DOCUME~1\Ben\APPLIC~1\Help
[23/05/2006|23:10] D:\DOCUME~1\Ben\APPLIC~1\Identities
[31/05/2008|22:59] D:\DOCUME~1\Ben\APPLIC~1\ItsLabel
[17/08/2008|22:19] D:\DOCUME~1\Ben\APPLIC~1\JLC's Software
[11/10/2008|18:33] D:\DOCUME~1\Ben\APPLIC~1\LimeWire
[01/01/2007|20:04] D:\DOCUME~1\Ben\APPLIC~1\Macromedia
[08/09/2008|13:29] D:\DOCUME~1\Ben\APPLIC~1\Microsoft
[22/08/2008|15:17] D:\DOCUME~1\Ben\APPLIC~1\Move Networks
[30/05/2008|07:40] D:\DOCUME~1\Ben\APPLIC~1\Mozilla
[03/06/2006|21:08] D:\DOCUME~1\Ben\APPLIC~1\OD2
[24/10/2008|01:14] D:\DOCUME~1\Ben\APPLIC~1\OpenOffice.org2
[19/08/2008|13:21] D:\DOCUME~1\Ben\APPLIC~1\PC Tools
[15/06/2006|22:19] D:\DOCUME~1\Ben\APPLIC~1\Real
[13/10/2008|23:56] D:\DOCUME~1\Ben\APPLIC~1\Spyware Terminator
[31/07/2007|19:55] D:\DOCUME~1\Ben\APPLIC~1\Sun
[03/06/2006|14:23] D:\DOCUME~1\Ben\APPLIC~1\Symantec
[30/05/2008|07:40] D:\DOCUME~1\Ben\APPLIC~1\Talkback
[23/05/2007|18:17] D:\DOCUME~1\Ben\APPLIC~1\Ulead Systems
[31/05/2008|21:20] D:\DOCUME~1\Ben\APPLIC~1\VadeRetro
[08/09/2008|12:43] D:\DOCUME~1\Ben\APPLIC~1\vlc
[23/05/2006|14:33] D:\DOCUME~1\Ben\APPLIC~1\You've Got Pictures Screensaver

[28/05/2008|18:23] D:\DOCUME~1\BEN~1.SN1\APPLIC~1\Macromedia
[28/05/2008|18:28] D:\DOCUME~1\BEN~1.SN1\APPLIC~1\Microsoft
[28/05/2008|18:28] D:\DOCUME~1\BEN~1.SN1\APPLIC~1\Real

[23/05/2006|14:39] D:\DOCUME~1\BENSN1~1.000\APPLIC~1\Macromedia
[19/08/2008|13:21] D:\DOCUME~1\BENSN1~1.000\APPLIC~1\Microsoft
[19/08/2008|13:21] D:\DOCUME~1\BENSN1~1.000\APPLIC~1\Real
[19/08/2008|13:21] D:\DOCUME~1\BENSN1~1.000\APPLIC~1\Spyware Terminator

[23/05/2006|23:10] D:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[23/05/2006|14:39] D:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[23/05/2006|14:51] D:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[23/05/2006|14:39] D:\DOCUME~1\DEFAUL~1\APPLIC~1\Real
[23/05/2006|14:35] D:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec
[23/05/2006|14:33] D:\DOCUME~1\DEFAUL~1\APPLIC~1\You've Got Pictures Screensaver

[05/10/2008|19:23] D:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[17/05/2008|00:00] D:\DOCUME~1\LOCALS~1.AUT\APPLIC~1\Microsoft

[17/05/2008|00:00] D:\DOCUME~1\LOCALS~1.000\APPLIC~1\Microsoft

[28/05/2008|18:28] D:\DOCUME~1\LOCALS~1.001\APPLIC~1\Microsoft

[19/08/2008|13:21] D:\DOCUME~1\LOCALS~1.002\APPLIC~1\Microsoft

[27/05/2008|19:21] D:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[17/05/2008|00:00] D:\DOCUME~1\NETWOR~1.AUT\APPLIC~1\Microsoft

[17/05/2008|00:00] D:\DOCUME~1\NETWOR~1.000\APPLIC~1\Microsoft

[28/05/2008|18:28] D:\DOCUME~1\NETWOR~1.001\APPLIC~1\Microsoft

[19/08/2008|13:21] D:\DOCUME~1\NETWOR~1.002\APPLIC~1\Microsoft

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[24/10/2008 15:00][--a------] C:\WINDOWS\tasks\Norton Security Scan.job
[16/10/2008 11:27][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[24/10/2008 19:30][--a------] C:\WINDOWS\tasks\Configurer mon PC.job
[24/10/2008 18:33][--a------] C:\WINDOWS\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
[24/10/2008 19:30][--a------] C:\WINDOWS\tasks\Extension de garantie.job
[24/10/2008 19:30][--a------] C:\WINDOWS\tasks\Master CD_DVD Creator.job
[24/10/2008 01:16][--ah-----] C:\WINDOWS\tasks\SA.DAT
[05/08/2004 14:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[04/10/2008|18:26] C:\Program Files\Adobe
[23/05/2006|14:20] C:\Program Files\AMD
[16/06/2006|01:04] C:\Program Files\AOL 9.0
[23/05/2006|14:33] C:\Program Files\AOL Compagnon
[29/05/2008|19:19] C:\Program Files\Apple Software Update
[08/10/2008|21:22] C:\Program Files\Aptana
[05/10/2008|14:11] C:\Program Files\Audible
[23/05/2006|14:20] C:\Program Files\AvRack
[05/10/2008|14:11] C:\Program Files\CDex_150
[16/08/2004|18:05] C:\Program Files\ComPlus Applications
[05/10/2008|14:08] C:\Program Files\Crawler
[06/10/2008|20:12] C:\Program Files\Creative
[02/01/2007|23:53] C:\Program Files\Creative Installation Information
[23/05/2006|14:43] C:\Program Files\CyberLink
[21/09/2008|23:35] C:\Program Files\DivX
[06/10/2008|20:12] C:\Program Files\Fichiers communs
[17/09/2008|15:14] C:\Program Files\FileZilla FTP Client
[30/05/2008|17:28] C:\Program Files\gimp_2_2_12_xp_2000
[23/05/2006|14:37] C:\Program Files\GMixon
[24/10/2008|18:41] C:\Program Files\Google
[23/05/2006|14:34] C:\Program Files\Goto Software
[06/06/2008|20:18] C:\Program Files\iMesh Applications
[06/10/2008|20:12] C:\Program Files\InstallShield Installation Information
[16/08/2008|00:23] C:\Program Files\Internet Explorer
[29/05/2008|19:22] C:\Program Files\iPod
[29/05/2008|19:22] C:\Program Files\iTunes
[08/10/2008|22:03] C:\Program Files\Java
[05/06/2006|22:40] C:\Program Files\Jeux de cartes
[17/08/2008|22:10] C:\Program Files\JLC's Software
[08/09/2008|13:19] C:\Program Files\Kit ADSL
[02/08/2006|21:11] C:\Program Files\K-Lite Codec Pack
[23/05/2006|14:33] C:\Program Files\Learn2.com
[19/08/2008|21:19] C:\Program Files\Macromedia
[14/08/2008|01:26] C:\Program Files\Messenger
[19/08/2008|21:14] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[16/08/2004|18:11] C:\Program Files\microsoft frontpage
[17/07/2007|00:26] C:\Program Files\Microsoft Office
[27/05/2008|19:03] C:\Program Files\Microsoft SQL Server Compact Edition
[08/09/2008|13:20] C:\Program Files\modem ADSL USB
[16/08/2004|18:06] C:\Program Files\Movie Maker
[24/10/2008|01:29] C:\Program Files\Mozilla Firefox
[16/08/2004|18:03] C:\Program Files\MSN
[16/08/2004|18:03] C:\Program Files\MSN Gaming Zone
[29/05/2008|19:23] C:\Program Files\MSN Messenger
[29/05/2008|18:45] C:\Program Files\MSXML 4.0
[24/10/2008|01:17] C:\Program Files\Navilog1
[16/08/2004|18:06] C:\Program Files\NetMeeting
[11/03/2008|21:02] C:\Program Files\Neuf
[23/05/2006|14:34] C:\Program Files\Norman
[24/10/2008|15:00] C:\Program Files\Norton Security Scan
[08/10/2008|22:03] C:\Program Files\OpenOffice.org 2.4
[29/05/2008|18:56] C:\Program Files\Outlook Express
[20/08/2008|00:00] C:\Program Files\PCFriendly
[29/05/2008|19:21] C:\Program Files\QuickTime
[23/05/2006|14:32] C:\Program Files\Real
[23/05/2006|14:20] C:\Program Files\Realtek AC97
[23/05/2006|14:20] C:\Program Files\Realtek Sound Manager
[16/08/2004|18:07] C:\Program Files\Services en ligne
[23/05/2006|14:38] C:\Program Files\ShowTime
[23/05/2006|14:43] C:\Program Files\Sonic
[20/10/2008|22:55] C:\Program Files\Spybot - Search & Destroy
[14/10/2008|00:32] C:\Program Files\Spyware Terminator
[23/05/2006|14:42] C:\Program Files\Ulead Systems
[16/08/2004|18:19] C:\Program Files\Uninstall Information
[06/05/2008|09:19] C:\Program Files\VideoLAN
[17/08/2008|20:07] C:\Program Files\WebTV
[23/10/2008|23:44] C:\Program Files\WinClamAVShield
[31/05/2008|22:38] C:\Program Files\Windows Live
[05/10/2008|14:15] C:\Program Files\Windows Live Toolbar
[23/05/2006|14:41] C:\Program Files\Windows Media Components
[04/10/2008|22:03] C:\Program Files\Windows Media Connect 2
[04/10/2008|22:03] C:\Program Files\Windows Media Player
[06/06/2008|21:14] C:\Program Files\Windows NT
[16/08/2004|18:07] C:\Program Files\WindowsUpdate
[02/08/2008|17:01] C:\Program Files\WinRAR
[16/08/2004|18:11] C:\Program Files\xerox
[16/06/2006|21:22] C:\Program Files\XviD
[05/10/2008|14:15] C:\Program Files\Yahoo!
[04/10/2008|13:51] C:\Program Files\YesMessenger
[08/10/2008|21:21] C:\Program Files\Zero G Registry

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[06/06/2008|21:47] C:\Program Files\Fichiers communs\Adobe
[05/06/2006|23:07] C:\Program Files\Fichiers communs\Adobe Systems Shared
[23/05/2006|14:33] C:\Program Files\Fichiers communs\AOL
[23/05/2006|14:33] C:\Program Files\Fichiers communs\aolshare
[29/05/2008|19:18] C:\Program Files\Fichiers communs\Apple
[05/06/2006|22:42] C:\Program Files\Fichiers communs\InstallShield
[23/05/2006|14:27] C:\Program Files\Fichiers communs\Java
[19/08/2008|21:19] C:\Program Files\Fichiers communs\Macromedia
[31/05/2008|23:05] C:\Program Files\Fichiers communs\Microsoft Shared
[16/08/2004|18:06] C:\Program Files\Fichiers communs\MSSoap
[23/05/2006|14:32] C:\Program Files\Fichiers communs\Nullsoft
[16/08/2004|17:57] C:\Program Files\Fichiers communs\ODBC
[23/05/2006|14:38] C:\Program Files\Fichiers communs\Real
[16/06/2006|01:12] C:\Program Files\Fichiers communs\Services
[23/05/2006|14:43] C:\Program Files\Fichiers communs\Sonic Shared
[16/08/2004|17:56] C:\Program Files\Fichiers communs\SpeechEngines
[23/05/2006|14:39] C:\Program Files\Fichiers communs\SureThing Shared
[24/10/2008|15:02] C:\Program Files\Fichiers communs\Symantec Shared
[29/05/2008|18:56] C:\Program Files\Fichiers communs\System
[23/05/2006|14:41] C:\Program Files\Fichiers communs\Ulead Systems
[29/05/2008|18:50] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[23/05/2006|14:38] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 43 Processes )

iexplore.exe ~ [PID:2796]

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

D:\DOCUME~1\Ben\LOCALS~1\Temp\nscCE2.tmp
D:\DOCUME~1\Ben\Cookies\ben@advertising[2].txt
D:\DOCUME~1\Ben\Cookies\ben@adin.bigpoint[2].txt
D:\DOCUME~1\Ben\Cookies\ben@bigpoint[1].txt
D:\DOCUME~1\Ben\Cookies\ben@fr.seafight.bigpoint[2].txt
D:\DOCUME~1\Ben\Cookies\ben@fr.thepimps.bigpoint[2].txt
D:\DOCUME~1\Ben\Cookies\ben@fr1.darkorbit.bigpoint[1].txt
D:\DOCUME~1\Ben\Cookies\ben@banner.cotedazurpalace[2].txt
D:\DOCUME~1\Ben\Cookies\ben@cotedazurpalace[2].txt
D:\DOCUME~1\Ben\Cookies\ben@www.cotedazurpalace[1].txt
D:\DOCUME~1\Ben\Cookies\ben@fr.seafight.bigpoint[2].txt

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-24 19:38:57
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
C:\WINDOWS\System32\drivers\hkxqdslr.sys 25600 bytes executable
C:\WINDOWS\System32\urqnnLde.dll 328704 bytes executable
folder error: D:\DOCUME~1\Ben\LOCALS~1\APPLIC~1

--------------------\\ Recherche d'autres infections

C:\WINDOWS\system32\edLnnqru.ini
C:\WINDOWS\system32\edLnnqru.ini2
[b]==> VUNDO <==/b

--------------------\\ ROGUES ..

D:\DOCUME~1\ALLUSE~1\APPLIC~1\SoftLand Ltd*
D:\DOCUME~1\ALLUSE~1\APPLIC~1\SoftLand Ltd

--------------------\\ Cracks & Keygens ..

D:\DOCUME~1\Ben\Local Settings\Temporary Internet Files\Content.IE5\05UN4XY7\keyGen[1].htm
D:\DOCUME~1\Ben\Local Settings\Temporary Internet Files\Content.IE5\D01P3DTB\keyGen[1].htm
D:\DOCUME~1\Ben\Local Settings\Temporary Internet Files\Content.IE5\D01P3DTB\keyGen[2].htm
D:\DOCUME~1\Ben\Local Settings\Temporary Internet Files\Content.IE5\D01P3DTB\keyGen[3].htm
D:\DOCUME~1\Ben\Local Settings\Temporary Internet Files\Content.IE5\E7CVD67U\keyGen[1].htm
D:\DOCUME~1\Ben\Local Settings\Temporary Internet Files\Content.IE5\E7CVD67U\keyGen[2].htm
D:\DOCUME~1\Ben\Local Settings\Temporary Internet Files\Content.IE5\E7CVD67U\keyGen[3].htm
D:\DOCUME~1\Ben\Local Settings\Temporary Internet Files\Content.IE5\E7CVD67U\keyGen[4].htm
D:\DOCUME~1\Ben\Local Settings\Temporary Internet Files\Content.IE5\E7CVD67U\keyGen[5].htm
D:\DOCUME~1\Ben\Local Settings\Temporary Internet Files\Content.IE5\G5QRO1EV\keyGen[1].htm
D:\DOCUME~1\Ben\Local Settings\Temporary Internet Files\Content.IE5\G5QRO1EV\keyGen[2].htm
D:\DOCUME~1\Ben\Local Settings\Temporary Internet Files\Content.IE5\G5QRO1EV\keyGen[3].htm
D:\DOCUME~1\Ben\Local Settings\Temporary Internet Files\Content.IE5\G5QRO1EV\keyGen[4].htm
D:\DOCUME~1\Ben\Local Settings\Temporary Internet Files\Content.IE5\K9EBGTQZ\keyGen[1].htm
D:\DOCUME~1\Ben\Local Settings\Temporary Internet Files\Content.IE5\K9EBGTQZ\keyGen[2].htm
D:\DOCUME~1\Ben\Local Settings\Temporary Internet Files\Content.IE5\K9EBGTQZ\keyGen[3].htm
D:\DOCUME~1\Ben\Local Settings\Temporary Internet Files\Content.IE5\K9EBGTQZ\keyGen[4].htm
D:\DOCUME~1\Ben\Local Settings\Temporary Internet Files\Content.IE5\K9EBGTQZ\keyGen[5].htm
D:\DOCUME~1\Ben\Local Settings\Temporary Internet Files\Content.IE5\WHUNG1IR\keyGen[1].htm
D:\DOCUME~1\Ben\Local Settings\Temporary Internet Files\Content.IE5\WHUNG1IR\keyGen[2].htm
D:\DOCUME~1\Ben\Local Settings\Temporary Internet Files\Content.IE5\WHUNG1IR\keyGen[3].htm
D:\DOCUME~1\Ben\Local Settings\Temporary Internet Files\Content.IE5\YQIXPHW6\keyGen[1].htm
D:\DOCUME~1\Ben\Local Settings\Temporary Internet Files\Content.IE5\YQIXPHW6\keyGen[2].htm
D:\DOCUME~1\Ben\Mes documents\boulot\Favoris\Crack in France par Pifoman.url

[F:76][D:5]-> D:\DOCUME~1\Ben\LOCALS~1\Temp
[F:163][D:0]-> D:\DOCUME~1\Ben\Cookies
[F:5742][D:8]-> D:\DOCUME~1\Ben\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 22/10/2008|23:43 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 23/10/2008| 0:02 - Option : [2]
3 - "C:\Lop SD\LopR_3.txt" - 24/10/2008| 0:00 - Option : [3]
4 - "C:\Lop SD\LopR_4.txt" - 24/10/2008|19:42 - Option : [1]

--------------------\\ Fin du rapport a 19:42:21

ANALYSE NORTON sur LOP
Infection :
c:\lop sd\backup-lop\docume~1\ben\applic~1\rectse~1\cvnedeqx.exe
Base de registres :
HKEY_USERS\S-1-5-21-2787409279-860696490-2509712036-1006\Software\Microsoft\Internet Explorer\Main->AutoSearch
HKEY_USERS\S-1-5-21-2787409279-860696490-2509712036-1006\Software\Microsoft\Internet Explorer\Main->Use Custom Search URL
HKEY_USERS\S-1-5-21-2787409279-860696490-2509712036-1006\Software\Microsoft\Internet Explorer\Main->Use Search Asst
HKEY_USERS\S-1-5-21-2787409279-860696490-2509712036-1006\SOFTWARE\Microsoft\Internet Explorer\Main->Search Bar:http://www.bing.com/spresults.aspx
HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main->Search Bar:http://www.bing.com/spresults.aspx
HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main->Search Bar:http://www.bing.com/spresults.aspx
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main->Search Bar:http://www.bing.com/spresults.aspx
HKEY_USERS\S-1-5-21-2787409279-860696490-2509712036-1006\SOFTWARE\Microsoft\Internet Explorer\Main->Start Page:https://www.broadcom.com/support/security-center
HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main->Start Page:https://www.broadcom.com/support/security-center
HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main->Start Page:https://www.broadcom.com/support/security-center
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main->Start Page:https://www.broadcom.com/support/security-center
HKEY_USERS\S-1-5-21-2787409279-860696490-2509712036-1006\Software\Microsoft\Internet Explorer\Main->Search Page:http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Main->Search Page:http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Main->Search Page:http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main->Search Page:http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKEY_LOCAL_MACHINE
Système :
A voir également:

43 réponses

bbrunmontreuil Messages postés 33 Statut Membre
 
oki donc je fais koi avec le dernier rapport hijack?
-1
Utilisateur anonyme
 
devine .....
-1
E..T Messages postés 6565 Statut Contributeur 428
 
Soir chiqui ;-)
Pour moi je pense qu'il ne pourra pas, en vue de tout ce qu'on dit sur cette m***** oups!
++
-1
bbrunmontreuil Messages postés 33 Statut Membre
 
je veux bien suivre cette procédure mais à votre avis, faut télécharger combien de programmes avant de killer cette plaie????

pcq on en est déjà à 3 là!
-1
sKe69 Messages postés 21955 Statut Contributeur sécurité 463
 
Tout cela sera nettoyer en fin de procédure ;)

T'inquiètes pô ... Suite les indiquation de Chimay8 ...


A+
-1