Zlob

Bonsoir,

et bien je suis infecter par un zlob (trojan downloader) et je n'arrive pas l'enlever.

j'ai scanner avec microsoft antispyware et j'ai donc eu cela
http://img95.imageshack.us/img95/2598/zlob1oe.jpg

alors si quelqu'un d'entre vous pouver me donner un coup de pouce.

merci de votre aide

ps: la page d'acceuil internet que je n'arrive pas a enlever a cause du zlob
https://imageshack.com/

7 réponses

  • Votes
  • Date
  • Date décroissante
  1. Logfile of HijackThis v1.99.1
    Scan saved at 22:31:07, on 16/05/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
    C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
    C:\WINDOWS\system32\RunDll32.exe
    C:\Program Files\DAEMON Tools\daemon.exe
    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\WINDOWS\system32\ctfmon.exe
    C:\PROGRA~1\INCRED~1\bin\IMApp.exe
    C:\Program Files\Ensemble clavier et souris sans fil Labtec\MagicKey.exe
    C:\Program Files\Ensemble clavier et souris sans fil Labtec\OSD.EXE
    C:\WINDOWS\system32\inetsrv\inetinfo.exe
    C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
    C:\Program Files\Network Associates\VirusScan\Mcshield.exe
    C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
    C:\WINDOWS\System32\nvsvc32.exe
    C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\eMule\emule.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Documents and Settings\NEOZIS\Bureau\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
    O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
    O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
    O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
    O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
    O4 - HKLM\..\Run: [DUControl] "C:\Program Files\DirectUpdate v4\DUControl.exe"
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
    O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
    O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
    O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_5 -reboot 1
    O4 - Global Startup: Activer l'ensemble clavier et souris sans fil Labtec.lnk = C:\Program Files\Ensemble clavier et souris sans fil Labtec\MagicKey.exe
    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
    O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
    O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
    O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
    O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

    encore merci
    1. Salut,

      c'est propre ;-) merci à Bernie

      A++
  2. salut,

    rapport 1

    SmitFraudFix v2.44

    Rapport fait à 10:34:12,76, 16/05/2006
    Executé à partir de C:\Documents and Settings\NEOZIS\Bureau\SmitfraudFix
    OS: Microsoft Windows XP [version 5.1.2600]

    »»»»»»»»»»»»»»»»»»»»»»»» C:\

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

    C:\WINDOWS\system32\atmclk.exe PRESENT !
    C:\WINDOWS\system32\dcomcfg.exe PRESENT !
    C:\WINDOWS\system32\hp????.tmp PRESENT !
    C:\WINDOWS\system32\ld????.tmp PRESENT !
    C:\WINDOWS\system32\ot.ico PRESENT !
    C:\WINDOWS\system32\regperf.exe PRESENT !
    C:\WINDOWS\system32\stdole3.tlb PRESENT !
    C:\WINDOWS\system32\ts.ico PRESENT !
    C:\WINDOWS\system32\1024\ PRESENT !

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\NEOZIS\Application Data

    »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

    »»»»»»»»»»»»»»»»»»»»»»»»

    »»»»»»»»»»»»»»»»»»»»»»»» Bureau

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

    »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

    »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
    "Source"="About:Home"
    "SubscribedURL"="About:Home"
    "FriendlyName"="Ma page d'accueil"

    »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

    »»»»»»»»»»»»»»»»»»»»»»»» Fin

    et bien pour le rapport 2, tout est parti.

    grand merci a toi bernie61 et aussi aux autres, toutes les saleté sont parti.
    1. voici le resultat de bitdefender

      Results

      Identified Viruses
      11

      Infected Files
      12

      Suspect Files
      0

      Warnings
      0

      Disinfected
      0

      Deleted Files
      11

      Engines Info

      Virus Definitions
      375010

      Engine build
      AVCORE v1.0 (build 2310) (i386) (Apr 17 2006 16:24:38)

      Scan plugins
      13

      Archive plugins
      40

      Unpack plugins
      4

      E-mail plugins
      6

      System plugins
      1

      Scan Settings

      First Action
      Disinfect

      Second Action
      Delete

      Heuristics
      Yes

      Enable Warnings
      Yes

      Scanned Extensions
      *;

      Exclude Extensions

      Scan Emails
      Yes

      Scan Archives
      Yes

      Scan Packed
      Yes

      Scan Files
      Yes

      Scan Boot
      Yes

      Scanned File
      Status

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>GetAccess.class
      Infected with: Java.Trojan.Exploit.Bytverify

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>GetAccess.class
      Disinfection failed

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>GetAccess.class
      Deleted

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip
      Updated

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>Installer.class
      Infected with: Trojan.Downloader.Java.Openconnection.AJ

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>Installer.class
      Disinfection failed

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>Installer.class
      Deleted

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip
      Updated

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>NewSecurityClassLoader.class
      Infected with: Trojan.Exploit.Byteverify.G

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>NewSecurityClassLoader.class
      Disinfection failed

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>NewSecurityClassLoader.class
      Deleted

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip
      Updated

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>NewURLClassLoader.class
      Infected with: Trojan.Java.Byteverify.Exploit.C

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>NewURLClassLoader.class
      Disinfection failed

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>NewURLClassLoader.class
      Deleted

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip
      Updated

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv470.jar-1ab62644-610d43d6.zip=>Matrix.class
      Infected with: Java.Trojan.Downloader.OpenStream.C

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv470.jar-1ab62644-610d43d6.zip=>Matrix.class
      Disinfection failed

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv470.jar-1ab62644-610d43d6.zip=>Matrix.class
      Deleted

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv470.jar-1ab62644-610d43d6.zip
      Updated

      C:\Documents and Settings\NEOZIS\Local Settings\Temp\nsj3.tmp=>(NSIS o)=>lzma_nsis0004
      Infected with: Trojan.Downloader.IstBar.OK

      C:\Documents and Settings\NEOZIS\Local Settings\Temp\nsj3.tmp=>(NSIS o)=>lzma_nsis0004
      Disinfection failed

      C:\Documents and Settings\NEOZIS\Local Settings\Temp\nsj3.tmp=>(NSIS o)=>lzma_nsis0004
      Deleted

      C:\Documents and Settings\NEOZIS\Local Settings\Temp\nsj3.tmp=>(NSIS o)
      Update failed

      C:\Documents and Settings\NEOZIS\Mes documents\LOGICIEL\Native Instruments Traktor DJ Studio 3 Crack - Keygen - Serial.zip=>crackfix.exe
      Infected with: Trojan.Bho.B

      C:\Documents and Settings\NEOZIS\Mes documents\LOGICIEL\Native Instruments Traktor DJ Studio 3 Crack - Keygen - Serial.zip=>crackfix.exe
      Disinfection failed

      C:\Documents and Settings\NEOZIS\Mes documents\LOGICIEL\Native Instruments Traktor DJ Studio 3 Crack - Keygen - Serial.zip=>crackfix.exe
      Deleted

      C:\Documents and Settings\NEOZIS\Mes documents\LOGICIEL\Native Instruments Traktor DJ Studio 3 Crack - Keygen - Serial.zip
      Update failed

      C:\Program Files\Starforce\devsec.exe
      Infected with: Trojan.Delf.QS

      C:\Program Files\Starforce\devsec.exe
      Disinfection failed

      C:\Program Files\Starforce\devsec.exe
      Deleted

      C:\WINDOWS\system32\cheat_plugin.exe
      Infected with: Trojan.Downloader.Inservice.JZ

      C:\WINDOWS\system32\cheat_plugin.exe
      Disinfection failed

      C:\WINDOWS\system32\cheat_plugin.exe
      Deleted

      C:\WINDOWS\system32\expIorer.exe
      Infected with: Trojan.Downloader.Agent.BZ

      C:\WINDOWS\system32\expIorer.exe
      Disinfection failed

      C:\WINDOWS\system32\expIorer.exe
      Deleted

      C:\WINDOWS\system32\regperf.exe
      Infected with: BehavesLike:Win32.ExplorerHijack

      C:\WINDOWS\system32\regperf.exe
      Disinfection failed

      C:\WINDOWS\system32\regperf.exe
      Delete failed

      C:\WINDOWS\system32\swrtg.exe
      Infected with: Trojan.Delf.QS

      C:\WINDOWS\system32\swrtg.exe
      Disinfection failed

      C:\WINDOWS\system32\swrtg.exe
      Deleted
      1. salut,

        désolé pour le retard

        voila le rapport, je l'ai déjà fait mais je n'arrive pas a enlever la ligne (o2:BHO)

        Logfile of HijackThis v1.99.1
        Scan saved at 10:29:46, on 15/05/2006
        Platform: Windows XP SP2 (WinNT 5.01.2600)
        MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\csrss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\spoolsv.exe
        C:\WINDOWS\Explorer.EXE
        C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
        C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
        C:\WINDOWS\system32\RunDll32.exe
        C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
        C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
        C:\Program Files\DAEMON Tools\daemon.exe
        C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
        C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
        C:\WINDOWS\system32\RUNDLL32.EXE
        C:\WINDOWS\system32\ctfmon.exe
        C:\PROGRA~1\INCRED~1\bin\IMApp.exe
        C:\Program Files\Ensemble clavier et souris sans fil Labtec\MagicKey.exe
        C:\Program Files\Ensemble clavier et souris sans fil Labtec\OSD.EXE
        C:\WINDOWS\system32\inetsrv\inetinfo.exe
        C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
        C:\Program Files\Network Associates\VirusScan\Mcshield.exe
        C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
        C:\PROGRA~1\NETWOR~1\COMMON~1\naPrdMgr.exe
        C:\WINDOWS\System32\nvsvc32.exe
        C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
        C:\WINDOWS\System32\alg.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\atmclk.exe
        C:\WINDOWS\system32\dcomcfg.exe
        C:\Program Files\Internet Explorer\iexplore.exe
        C:\Documents and Settings\NEOZIS\Bureau\HijackThis.exe

        O2 - BHO: Nothing - {b0398eca-0bcd-4645-8261-5e9dc70248d0} - C:\WINDOWS\system32\hpC5E3.tmp
        O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
        O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
        O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
        O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
        O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
        O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
        O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
        O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
        O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
        O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
        O4 - HKLM\..\Run: [DUControl] "C:\Program Files\DirectUpdate v4\DUControl.exe"
        O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
        O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
        O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
        O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
        O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
        O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_5 -reboot 1
        O4 - Global Startup: Activer l'ensemble clavier et souris sans fil Labtec.lnk = C:\Program Files\Ensemble clavier et souris sans fil Labtec\MagicKey.exe
        O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
        O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
        O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll (file missing)
        O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll (file missing)
        O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
        O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
        O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
        O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
        O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
        O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
        O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
        1. Si tu touches sans connaître on va pas s'en sorti l'ami..

          Fait ce scan anti-virus en ligne avec Internet Explorer, accepte l'active X, pour le faire fonctionner,
          une fois qu'il a terminé colle le rapport ici stp, puis je pense que ça sera ok.

          https://www.bitdefender.com/toolbox/
      2. Salut,

        télécharges hijackthis:
        Téléchargement de HijackThis

        Installe le dans son propre dossier:
        -cliques droit sur le bureau, nouveau dossier, installes-le dedans.
        Lance le, cliques sur "do a system scan and save logfile"
        Puis copies et colles le rapport ici.