Zlob

neozis -  
Bonsoir,

et bien je suis infecter par un zlob (trojan downloader) et je n'arrive pas l'enlever.

j'ai scanner avec microsoft antispyware et j'ai donc eu cela
http://img95.imageshack.us/img95/2598/zlob1oe.jpg

alors si quelqu'un d'entre vous pouver me donner un coup de pouce.

merci de votre aide

ps: la page d'acceuil internet que je n'arrive pas a enlever a cause du zlob
https://imageshack.com/

7 réponses

  1. NEOZIS
    Logfile of HijackThis v1.99.1
    Scan saved at 22:31:07, on 16/05/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
    C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
    C:\WINDOWS\system32\RunDll32.exe
    C:\Program Files\DAEMON Tools\daemon.exe
    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\WINDOWS\system32\ctfmon.exe
    C:\PROGRA~1\INCRED~1\bin\IMApp.exe
    C:\Program Files\Ensemble clavier et souris sans fil Labtec\MagicKey.exe
    C:\Program Files\Ensemble clavier et souris sans fil Labtec\OSD.EXE
    C:\WINDOWS\system32\inetsrv\inetinfo.exe
    C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
    C:\Program Files\Network Associates\VirusScan\Mcshield.exe
    C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
    C:\WINDOWS\System32\nvsvc32.exe
    C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\eMule\emule.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Documents and Settings\NEOZIS\Bureau\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
    O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
    O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
    O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
    O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
    O4 - HKLM\..\Run: [DUControl] "C:\Program Files\DirectUpdate v4\DUControl.exe"
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
    O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
    O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
    O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_5 -reboot 1
    O4 - Global Startup: Activer l'ensemble clavier et souris sans fil Labtec.lnk = C:\Program Files\Ensemble clavier et souris sans fil Labtec\MagicKey.exe
    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
    O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
    O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
    O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
    O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

    encore merci
    0
    1. Utilisateur anonyme
      Salut,

      c'est propre ;-) merci à Bernie

      A++
      0
  2. bernie61
    hello
    refais un hijackthis pour qu on termine le nettoyage
    a+
    0
    1. neozis
      salut,

      rapport 1

      SmitFraudFix v2.44

      Rapport fait à 10:34:12,76, 16/05/2006
      Executé à partir de C:\Documents and Settings\NEOZIS\Bureau\SmitfraudFix
      OS: Microsoft Windows XP [version 5.1.2600]

      »»»»»»»»»»»»»»»»»»»»»»»» C:\

      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

      C:\WINDOWS\system32\atmclk.exe PRESENT !
      C:\WINDOWS\system32\dcomcfg.exe PRESENT !
      C:\WINDOWS\system32\hp????.tmp PRESENT !
      C:\WINDOWS\system32\ld????.tmp PRESENT !
      C:\WINDOWS\system32\ot.ico PRESENT !
      C:\WINDOWS\system32\regperf.exe PRESENT !
      C:\WINDOWS\system32\stdole3.tlb PRESENT !
      C:\WINDOWS\system32\ts.ico PRESENT !
      C:\WINDOWS\system32\1024\ PRESENT !

      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles

      »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\NEOZIS\Application Data

      »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

      »»»»»»»»»»»»»»»»»»»»»»»»

      »»»»»»»»»»»»»»»»»»»»»»»» Bureau

      »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

      »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

      »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
      "Source"="About:Home"
      "SubscribedURL"="About:Home"
      "FriendlyName"="Ma page d'accueil"

      »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      SrchSTS.exe by S!Ri
      Search SharedTaskScheduler's .dll

      »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

      »»»»»»»»»»»»»»»»»»»»»»»» Fin

      et bien pour le rapport 2, tout est parti.

      grand merci a toi bernie61 et aussi aux autres, toutes les saleté sont parti.
      0
      3. neozis
        voici le resultat de bitdefender

        Results

        Identified Viruses
        11

        Infected Files
        12

        Suspect Files
        0

        Warnings
        0

        Disinfected
        0

        Deleted Files
        11

        Engines Info

        Virus Definitions
        375010

        Engine build
        AVCORE v1.0 (build 2310) (i386) (Apr 17 2006 16:24:38)

        Scan plugins
        13

        Archive plugins
        40

        Unpack plugins
        4

        E-mail plugins
        6

        System plugins
        1

        Scan Settings

        First Action
        Disinfect

        Second Action
        Delete

        Heuristics
        Yes

        Enable Warnings
        Yes

        Scanned Extensions
        *;

        Exclude Extensions

        Scan Emails
        Yes

        Scan Archives
        Yes

        Scan Packed
        Yes

        Scan Files
        Yes

        Scan Boot
        Yes

        Scanned File
        Status

        C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>GetAccess.class
        Infected with: Java.Trojan.Exploit.Bytverify

        C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>GetAccess.class
        Disinfection failed

        C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>GetAccess.class
        Deleted

        C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip
        Updated

        C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>Installer.class
        Infected with: Trojan.Downloader.Java.Openconnection.AJ

        C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>Installer.class
        Disinfection failed

        C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>Installer.class
        Deleted

        C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip
        Updated

        C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>NewSecurityClassLoader.class
        Infected with: Trojan.Exploit.Byteverify.G

        C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>NewSecurityClassLoader.class
        Disinfection failed

        C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>NewSecurityClassLoader.class
        Deleted

        C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip
        Updated

        C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>NewURLClassLoader.class
        Infected with: Trojan.Java.Byteverify.Exploit.C

        C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>NewURLClassLoader.class
        Disinfection failed

        C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>NewURLClassLoader.class
        Deleted

        C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip
        Updated

        C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv470.jar-1ab62644-610d43d6.zip=>Matrix.class
        Infected with: Java.Trojan.Downloader.OpenStream.C

        C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv470.jar-1ab62644-610d43d6.zip=>Matrix.class
        Disinfection failed

        C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv470.jar-1ab62644-610d43d6.zip=>Matrix.class
        Deleted

        C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv470.jar-1ab62644-610d43d6.zip
        Updated

        C:\Documents and Settings\NEOZIS\Local Settings\Temp\nsj3.tmp=>(NSIS o)=>lzma_nsis0004
        Infected with: Trojan.Downloader.IstBar.OK

        C:\Documents and Settings\NEOZIS\Local Settings\Temp\nsj3.tmp=>(NSIS o)=>lzma_nsis0004
        Disinfection failed

        C:\Documents and Settings\NEOZIS\Local Settings\Temp\nsj3.tmp=>(NSIS o)=>lzma_nsis0004
        Deleted

        C:\Documents and Settings\NEOZIS\Local Settings\Temp\nsj3.tmp=>(NSIS o)
        Update failed

        C:\Documents and Settings\NEOZIS\Mes documents\LOGICIEL\Native Instruments Traktor DJ Studio 3 Crack - Keygen - Serial.zip=>crackfix.exe
        Infected with: Trojan.Bho.B

        C:\Documents and Settings\NEOZIS\Mes documents\LOGICIEL\Native Instruments Traktor DJ Studio 3 Crack - Keygen - Serial.zip=>crackfix.exe
        Disinfection failed

        C:\Documents and Settings\NEOZIS\Mes documents\LOGICIEL\Native Instruments Traktor DJ Studio 3 Crack - Keygen - Serial.zip=>crackfix.exe
        Deleted

        C:\Documents and Settings\NEOZIS\Mes documents\LOGICIEL\Native Instruments Traktor DJ Studio 3 Crack - Keygen - Serial.zip
        Update failed

        C:\Program Files\Starforce\devsec.exe
        Infected with: Trojan.Delf.QS

        C:\Program Files\Starforce\devsec.exe
        Disinfection failed

        C:\Program Files\Starforce\devsec.exe
        Deleted

        C:\WINDOWS\system32\cheat_plugin.exe
        Infected with: Trojan.Downloader.Inservice.JZ

        C:\WINDOWS\system32\cheat_plugin.exe
        Disinfection failed

        C:\WINDOWS\system32\cheat_plugin.exe
        Deleted

        C:\WINDOWS\system32\expIorer.exe
        Infected with: Trojan.Downloader.Agent.BZ

        C:\WINDOWS\system32\expIorer.exe
        Disinfection failed

        C:\WINDOWS\system32\expIorer.exe
        Deleted

        C:\WINDOWS\system32\regperf.exe
        Infected with: BehavesLike:Win32.ExplorerHijack

        C:\WINDOWS\system32\regperf.exe
        Disinfection failed

        C:\WINDOWS\system32\regperf.exe
        Delete failed

        C:\WINDOWS\system32\swrtg.exe
        Infected with: Trojan.Delf.QS

        C:\WINDOWS\system32\swrtg.exe
        Disinfection failed

        C:\WINDOWS\system32\swrtg.exe
        Deleted
        0
        1. neozis
          salut,

          désolé pour le retard

          voila le rapport, je l'ai déjà fait mais je n'arrive pas a enlever la ligne (o2:BHO)

          Logfile of HijackThis v1.99.1
          Scan saved at 10:29:46, on 15/05/2006
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\csrss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\spoolsv.exe
          C:\WINDOWS\Explorer.EXE
          C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
          C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
          C:\WINDOWS\system32\RunDll32.exe
          C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
          C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
          C:\Program Files\DAEMON Tools\daemon.exe
          C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
          C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
          C:\WINDOWS\system32\RUNDLL32.EXE
          C:\WINDOWS\system32\ctfmon.exe
          C:\PROGRA~1\INCRED~1\bin\IMApp.exe
          C:\Program Files\Ensemble clavier et souris sans fil Labtec\MagicKey.exe
          C:\Program Files\Ensemble clavier et souris sans fil Labtec\OSD.EXE
          C:\WINDOWS\system32\inetsrv\inetinfo.exe
          C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
          C:\Program Files\Network Associates\VirusScan\Mcshield.exe
          C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
          C:\PROGRA~1\NETWOR~1\COMMON~1\naPrdMgr.exe
          C:\WINDOWS\System32\nvsvc32.exe
          C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
          C:\WINDOWS\System32\alg.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\atmclk.exe
          C:\WINDOWS\system32\dcomcfg.exe
          C:\Program Files\Internet Explorer\iexplore.exe
          C:\Documents and Settings\NEOZIS\Bureau\HijackThis.exe

          O2 - BHO: Nothing - {b0398eca-0bcd-4645-8261-5e9dc70248d0} - C:\WINDOWS\system32\hpC5E3.tmp
          O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
          O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
          O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
          O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
          O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
          O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
          O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
          O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
          O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
          O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
          O4 - HKLM\..\Run: [DUControl] "C:\Program Files\DirectUpdate v4\DUControl.exe"
          O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
          O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
          O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
          O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
          O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_5 -reboot 1
          O4 - Global Startup: Activer l'ensemble clavier et souris sans fil Labtec.lnk = C:\Program Files\Ensemble clavier et souris sans fil Labtec\MagicKey.exe
          O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
          O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
          O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll (file missing)
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll (file missing)
          O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
          O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
          O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
          O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
          O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
          O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
          O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
          0
          1. Utilisateur anonyme
            Si tu touches sans connaître on va pas s'en sorti l'ami..

            Fait ce scan anti-virus en ligne avec Internet Explorer, accepte l'active X, pour le faire fonctionner,
            une fois qu'il a terminé colle le rapport ici stp, puis je pense que ça sera ok.

            https://www.bitdefender.com/toolbox/
            0
        2. Utilisateur anonyme
          Salut,

          télécharges hijackthis:
          Téléchargement de HijackThis

          Installe le dans son propre dossier:
          -cliques droit sur le bureau, nouveau dossier, installes-le dedans.
          Lance le, cliques sur "do a system scan and save logfile"
          Puis copies et colles le rapport ici.
          0