Zlob

neozis -  
Bonsoir,

et bien je suis infecter par un zlob (trojan downloader) et je n'arrive pas l'enlever.

j'ai scanner avec microsoft antispyware et j'ai donc eu cela
http://img95.imageshack.us/img95/2598/zlob1oe.jpg

alors si quelqu'un d'entre vous pouver me donner un coup de pouce.

merci de votre aide

ps: la page d'acceuil internet que je n'arrive pas a enlever a cause du zlob
https://imageshack.com/

7 réponses

  1. Utilisateur anonyme
    Salut,

    télécharges hijackthis:
    Téléchargement de HijackThis

    Installe le dans son propre dossier:
    -cliques droit sur le bureau, nouveau dossier, installes-le dedans.
    Lance le, cliques sur "do a system scan and save logfile"
    Puis copies et colles le rapport ici.
    0
    1. neozis
      salut,

      désolé pour le retard

      voila le rapport, je l'ai déjà fait mais je n'arrive pas a enlever la ligne (o2:BHO)

      Logfile of HijackThis v1.99.1
      Scan saved at 10:29:46, on 15/05/2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
      C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
      C:\WINDOWS\system32\RunDll32.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
      C:\Program Files\DAEMON Tools\daemon.exe
      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
      C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
      C:\WINDOWS\system32\RUNDLL32.EXE
      C:\WINDOWS\system32\ctfmon.exe
      C:\PROGRA~1\INCRED~1\bin\IMApp.exe
      C:\Program Files\Ensemble clavier et souris sans fil Labtec\MagicKey.exe
      C:\Program Files\Ensemble clavier et souris sans fil Labtec\OSD.EXE
      C:\WINDOWS\system32\inetsrv\inetinfo.exe
      C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
      C:\Program Files\Network Associates\VirusScan\Mcshield.exe
      C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
      C:\PROGRA~1\NETWOR~1\COMMON~1\naPrdMgr.exe
      C:\WINDOWS\System32\nvsvc32.exe
      C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
      C:\WINDOWS\System32\alg.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\atmclk.exe
      C:\WINDOWS\system32\dcomcfg.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Documents and Settings\NEOZIS\Bureau\HijackThis.exe

      O2 - BHO: Nothing - {b0398eca-0bcd-4645-8261-5e9dc70248d0} - C:\WINDOWS\system32\hpC5E3.tmp
      O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
      O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
      O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
      O4 - HKLM\..\Run: [DUControl] "C:\Program Files\DirectUpdate v4\DUControl.exe"
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
      O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
      O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
      O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_5 -reboot 1
      O4 - Global Startup: Activer l'ensemble clavier et souris sans fil Labtec.lnk = C:\Program Files\Ensemble clavier et souris sans fil Labtec\MagicKey.exe
      O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll (file missing)
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll (file missing)
      O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
      O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
      O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
      O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
      O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
      0
      1. Utilisateur anonyme
        Si tu touches sans connaître on va pas s'en sorti l'ami..

        Fait ce scan anti-virus en ligne avec Internet Explorer, accepte l'active X, pour le faire fonctionner,
        une fois qu'il a terminé colle le rapport ici stp, puis je pense que ça sera ok.

        https://www.bitdefender.com/toolbox/
        0
    2. neozis
      voici le resultat de bitdefender

      Results

      Identified Viruses
      11

      Infected Files
      12

      Suspect Files
      0

      Warnings
      0

      Disinfected
      0

      Deleted Files
      11

      Engines Info

      Virus Definitions
      375010

      Engine build
      AVCORE v1.0 (build 2310) (i386) (Apr 17 2006 16:24:38)

      Scan plugins
      13

      Archive plugins
      40

      Unpack plugins
      4

      E-mail plugins
      6

      System plugins
      1

      Scan Settings

      First Action
      Disinfect

      Second Action
      Delete

      Heuristics
      Yes

      Enable Warnings
      Yes

      Scanned Extensions
      *;

      Exclude Extensions

      Scan Emails
      Yes

      Scan Archives
      Yes

      Scan Packed
      Yes

      Scan Files
      Yes

      Scan Boot
      Yes

      Scanned File
      Status

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>GetAccess.class
      Infected with: Java.Trojan.Exploit.Bytverify

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>GetAccess.class
      Disinfection failed

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>GetAccess.class
      Deleted

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip
      Updated

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>Installer.class
      Infected with: Trojan.Downloader.Java.Openconnection.AJ

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>Installer.class
      Disinfection failed

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>Installer.class
      Deleted

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip
      Updated

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>NewSecurityClassLoader.class
      Infected with: Trojan.Exploit.Byteverify.G

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>NewSecurityClassLoader.class
      Disinfection failed

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>NewSecurityClassLoader.class
      Deleted

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip
      Updated

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>NewURLClassLoader.class
      Infected with: Trojan.Java.Byteverify.Exploit.C

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>NewURLClassLoader.class
      Disinfection failed

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip=>NewURLClassLoader.class
      Deleted

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-5f22f99-703332c4.zip
      Updated

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv470.jar-1ab62644-610d43d6.zip=>Matrix.class
      Infected with: Java.Trojan.Downloader.OpenStream.C

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv470.jar-1ab62644-610d43d6.zip=>Matrix.class
      Disinfection failed

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv470.jar-1ab62644-610d43d6.zip=>Matrix.class
      Deleted

      C:\Documents and Settings\NEOZIS\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv470.jar-1ab62644-610d43d6.zip
      Updated

      C:\Documents and Settings\NEOZIS\Local Settings\Temp\nsj3.tmp=>(NSIS o)=>lzma_nsis0004
      Infected with: Trojan.Downloader.IstBar.OK

      C:\Documents and Settings\NEOZIS\Local Settings\Temp\nsj3.tmp=>(NSIS o)=>lzma_nsis0004
      Disinfection failed

      C:\Documents and Settings\NEOZIS\Local Settings\Temp\nsj3.tmp=>(NSIS o)=>lzma_nsis0004
      Deleted

      C:\Documents and Settings\NEOZIS\Local Settings\Temp\nsj3.tmp=>(NSIS o)
      Update failed

      C:\Documents and Settings\NEOZIS\Mes documents\LOGICIEL\Native Instruments Traktor DJ Studio 3 Crack - Keygen - Serial.zip=>crackfix.exe
      Infected with: Trojan.Bho.B

      C:\Documents and Settings\NEOZIS\Mes documents\LOGICIEL\Native Instruments Traktor DJ Studio 3 Crack - Keygen - Serial.zip=>crackfix.exe
      Disinfection failed

      C:\Documents and Settings\NEOZIS\Mes documents\LOGICIEL\Native Instruments Traktor DJ Studio 3 Crack - Keygen - Serial.zip=>crackfix.exe
      Deleted

      C:\Documents and Settings\NEOZIS\Mes documents\LOGICIEL\Native Instruments Traktor DJ Studio 3 Crack - Keygen - Serial.zip
      Update failed

      C:\Program Files\Starforce\devsec.exe
      Infected with: Trojan.Delf.QS

      C:\Program Files\Starforce\devsec.exe
      Disinfection failed

      C:\Program Files\Starforce\devsec.exe
      Deleted

      C:\WINDOWS\system32\cheat_plugin.exe
      Infected with: Trojan.Downloader.Inservice.JZ

      C:\WINDOWS\system32\cheat_plugin.exe
      Disinfection failed

      C:\WINDOWS\system32\cheat_plugin.exe
      Deleted

      C:\WINDOWS\system32\expIorer.exe
      Infected with: Trojan.Downloader.Agent.BZ

      C:\WINDOWS\system32\expIorer.exe
      Disinfection failed

      C:\WINDOWS\system32\expIorer.exe
      Deleted

      C:\WINDOWS\system32\regperf.exe
      Infected with: BehavesLike:Win32.ExplorerHijack

      C:\WINDOWS\system32\regperf.exe
      Disinfection failed

      C:\WINDOWS\system32\regperf.exe
      Delete failed

      C:\WINDOWS\system32\swrtg.exe
      Infected with: Trojan.Delf.QS

      C:\WINDOWS\system32\swrtg.exe
      Disinfection failed

      C:\WINDOWS\system32\swrtg.exe
      Deleted
      0
      3. neozis
        salut,

        rapport 1

        SmitFraudFix v2.44

        Rapport fait à 10:34:12,76, 16/05/2006
        Executé à partir de C:\Documents and Settings\NEOZIS\Bureau\SmitfraudFix
        OS: Microsoft Windows XP [version 5.1.2600]

        »»»»»»»»»»»»»»»»»»»»»»»» C:\

        »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

        »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

        »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

        »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

        C:\WINDOWS\system32\atmclk.exe PRESENT !
        C:\WINDOWS\system32\dcomcfg.exe PRESENT !
        C:\WINDOWS\system32\hp????.tmp PRESENT !
        C:\WINDOWS\system32\ld????.tmp PRESENT !
        C:\WINDOWS\system32\ot.ico PRESENT !
        C:\WINDOWS\system32\regperf.exe PRESENT !
        C:\WINDOWS\system32\stdole3.tlb PRESENT !
        C:\WINDOWS\system32\ts.ico PRESENT !
        C:\WINDOWS\system32\1024\ PRESENT !

        »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles

        »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\NEOZIS\Application Data

        »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

        »»»»»»»»»»»»»»»»»»»»»»»»

        »»»»»»»»»»»»»»»»»»»»»»»» Bureau

        »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

        »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

        »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

        [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
        "Source"="About:Home"
        "SubscribedURL"="About:Home"
        "FriendlyName"="Ma page d'accueil"

        »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
        !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

        SrchSTS.exe by S!Ri
        Search SharedTaskScheduler's .dll

        »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

        »»»»»»»»»»»»»»»»»»»»»»»» Fin

        et bien pour le rapport 2, tout est parti.

        grand merci a toi bernie61 et aussi aux autres, toutes les saleté sont parti.
        0
        1. bernie61
          hello
          refais un hijackthis pour qu on termine le nettoyage
          a+
          0
          1. NEOZIS
            Logfile of HijackThis v1.99.1
            Scan saved at 22:31:07, on 16/05/2006
            Platform: Windows XP SP2 (WinNT 5.01.2600)
            MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

            Running processes:
            C:\WINDOWS\System32\smss.exe
            C:\WINDOWS\system32\winlogon.exe
            C:\WINDOWS\system32\services.exe
            C:\WINDOWS\system32\lsass.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\System32\svchost.exe
            C:\WINDOWS\system32\spoolsv.exe
            C:\WINDOWS\Explorer.EXE
            C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
            C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
            C:\WINDOWS\system32\RunDll32.exe
            C:\Program Files\DAEMON Tools\daemon.exe
            C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
            C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
            C:\WINDOWS\system32\RUNDLL32.EXE
            C:\WINDOWS\system32\ctfmon.exe
            C:\PROGRA~1\INCRED~1\bin\IMApp.exe
            C:\Program Files\Ensemble clavier et souris sans fil Labtec\MagicKey.exe
            C:\Program Files\Ensemble clavier et souris sans fil Labtec\OSD.EXE
            C:\WINDOWS\system32\inetsrv\inetinfo.exe
            C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
            C:\Program Files\Network Associates\VirusScan\Mcshield.exe
            C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
            C:\WINDOWS\System32\nvsvc32.exe
            C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
            C:\WINDOWS\System32\svchost.exe
            C:\Program Files\MSN Messenger\msnmsgr.exe
            C:\Program Files\eMule\emule.exe
            C:\Program Files\Internet Explorer\iexplore.exe
            C:\Documents and Settings\NEOZIS\Bureau\HijackThis.exe

            R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
            O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
            O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
            O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
            O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
            O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
            O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
            O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
            O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
            O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
            O4 - HKLM\..\Run: [DUControl] "C:\Program Files\DirectUpdate v4\DUControl.exe"
            O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
            O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
            O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
            O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
            O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
            O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_5 -reboot 1
            O4 - Global Startup: Activer l'ensemble clavier et souris sans fil Labtec.lnk = C:\Program Files\Ensemble clavier et souris sans fil Labtec\MagicKey.exe
            O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
            O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
            O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
            O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
            O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
            O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
            O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
            O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
            O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
            O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
            O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
            O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

            encore merci
            0
            1. Utilisateur anonyme
              Salut,

              c'est propre ;-) merci à Bernie

              A++
              0