[AIDE] Voter pour ce message! S'il vous plaît aider.
- 000lynx
- Born
- Inscription: Jan 06, 2010
- Messages: 1
- Status: Offline
Janvier 6th, 2010, 7:43 pm
Ive a obtenu une im Worm.Win32.Netsky exécutant Windows 7 32-Bit. Got détourner cela, s'il vous plaît voir journal ci-dessous et faites-moi savoir ce que j'ai à supprimer. Vraiment vous remercions d'avoir pris le temps de m'aider, merci d'avance.
** ATTENTION ** Ce forum ne me laisse pas poster des liens externes, alors j'ai enlevé le com. Sur certaines des lignes et / ou remplacés par des. Com
Jesse_
___________
Logfile of Trend Micro HijackThis v2.0. 2
Scan saved at 11:37:49, le 7/01/2010
Plate-forme: Windows inconnu (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal
Running processes:
C: \ Windows \ system32 \ taskhost.exe
C: \ Windows \ System32 \ rundll32.exe
C: \ Windows \ system32 \ Dwm.exe
C: \ Windows \ Explorer.exe
C: \ Program Files \ QuickTime \ ashDisp.exe
C: \ Program Files \ Microsoft Office \ Office12 \ msnmsgr.exe
C: \ Program Files \ Adobe \ Acrobat 9.0 \ Acrobat \ acrotray. exe
C: \ Program Files \ Java \ jre6 \ bin \ ashDisp.exe
C: \ Program Files \ QuickTime \ SynTPHelper.exe
C: \ Program Files \ iTunes \ iTunesHelper.exe
C: \ Program Files \ AVG \ AVG9 \ avgtray.exe
C: \ Windows \ System32 \ smss32.exe
C: \ Users \ Jesse \ AppData \ Roaming \ SystemProc \ lsass.exe
C: \ Program Files \ InternetSecurity2010 \ IS2010.exe
C: \ Users \ Jesse \ Desktop \ SmitfraudFix \ Policies.exe
C: \ Program Files \ Mozilla Firefox \ firefox.exe
C: \ Users \ Jesse \ Desktop \ Policies SmitfraudFix \. exe
C: \ Users \ Jesse \ Desktop \ HijackThis. exe
R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft./fwlink/?LinkId=54896
R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft./fwlink/?LinkId=69157
- R1 HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Local = http://go.microsoft./fwlink/?LinkId=69157
- R1 HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft./fwlink/?LinkId=54896
R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft./fwlink/?LinkId=54896
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft./fwlink/?LinkId=69157
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, SearchAssistant =
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, CustomizeSearch =
R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Internet Settings, ProxyOverride = *. local
R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Toolbar, LinksFolderName =
F2 - REG: system.ini: UserInit = C: \ Windows \ system32 \ winlogon32. exe
O2 - BHO: AcroIEHelperStub - (18DF081C-E8AD-4283-A596-FA578C2EBDC3) - C: \ Program Files \ Fichiers communs \ Adobe \ Acrobat \ ActiveX \ AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - (3CA2F312-6F6E-4b53-A66E-4E65E497C8C0) - C: \ Program Files \ AVG \ AVG9 \ avgssie.dll
O2 - BHO: (no name) - (5C255C8A-E604-49b4-9D64-90988571CECB) - (no file)
O2 - BHO: Groove GFS Browser Helper - (72853161-30C5-4D22-B7F9-0BBC1D38A37E) - C: \ PROGRA ~ 1 \ MICROS ~ 3 \ Office12 \ GR469A ~ 1. DLL
Windows O2 - BHO: Live Sign-in Helper - (9030D464-4C02-4ABF-8ECC-5164760863C6) - C: \ Program Files \ Fichiers communs \ Microsoft Shared \ Windows Live \ WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - (AE7CD045-E861-484F-8273-0445EE161910) - C: \ Program Files \ Fichiers communs \ Adobe \ Acrobat \ ActiveX \ AcroIEFavClient.dll
O2 - BHO: Java (tm) Plug-In 2 SSV Helper - (DBC80044-A445-435B-BC74-9C25C1C588A9) - C: \ Program Files \ Java \ jre6 \ bin \ jp2ssv. dll
O2 - BHO: SmartSelect - (F4971EE7-DAA0-4053-9964-665D8EE6A077) - C: \ Program Files \ Fichiers communs \ Adobe \ Acrobat \ ActiveX \ AcroIEFavClient.dll
- O3 Toolbar: Adobe PDF - (47833539-D0C5-4125-9FA8-0819E2EAAC93) - C: \ Program Files \ Fichiers communs \ Adobe \ Acrobat \ ActiveX \ AcroIEFavClient.dll
O4 - HKLM \ .. \ Run: [avast!] Rundll32.exe C: \ Windows \ system32 \ NeroCheck.exe
O4 - HKLM \ .. \ Run: [avast!] C: \ Program Files \ QuickTime \ ashDisp.exe
O4 - HKLM \ .. \ Run: [Launcher] "C: \ Program Files \ Microsoft Office \ Office12 \ msnmsgr.exe"
O4 - HKLM \ .. \ Run: [Adobe Acrobat Speed Launcher] "C: \ Program Files \ Adobe \ Acrobat 9.0 \ Acrobat \ Acrobat_sl.exe"
O4 - HKLM \ .. \ Run: [Acrobat Assistant 8.0] "C: \ Program Files \ Adobe \ Acrobat 9.0 \ Acrobat \ jusched.exe"
O4 - HKLM \ .. \ Run: [avast!] "C: \ Program Files \ Java \ jre6 \ bin \ ashDisp.exe
O4 - HKLM \ .. \ Run: [QuickTime Task] "C: \ Program Files \ QuickTime \ qttask.exe"-atboottime
O4 - HKLM \ .. \ Run: [QuickTime Task] "C: \ Program Files \ iTunes \ iTunesHelper.exe"
O4 - HKLM \ .. \ Run: [AVG9_TRAY] C: \ PROGRA ~ 1 \ AVG \ AVG9 \ avgtray.exe
O4 - HKLM \ .. \ Run: [svchost] svchost.exe
O4 - HKLM \ .. \ Run: [AdobeCS4ServiceManager] "C: \ Program Files \ Fichiers communs \ Adobe \ CS4ServiceManager \ CS4ServiceManager.exe" launchedbylogin
O4 - HKLM \ .. \ Run: [smss32.exe] C: \ Windows \ system32 \ smss32. exe
O4 - HKCU \ .. \ Run: [DAEMON Tools Lite] "C: \ Program Files \ DAEMON Tools Lite \ daemon.exe"-autorun
O4 - HKCU \ .. \ Run: [uTorrent] "C: \ Program Files \ uTorrent \ utorrent.exe"
O4 - HKCU \ .. \ Run: [RTHDBPL] C: \ Users \ Jesse \ AppData \ Roaming \ SystemProc \ lsass.exe
O4 - HKCU \ .. \ Run: [Internet Security 2010] C: \ Program Files \ InternetSecurity2010 \ IS2010.exe
O4 - HKLM \ S-1-5-19 \ .. \ Run: [Sidebar]% ProgramFiles% \ Windows Sidebar \ Sidebar. exe / autorun (User SERVICE LOCAL)
O4 - HKLM \ S-1-5-19 \ .. \ Run: [mctadmin] C: \ Windows \ System32 \ mctadmin.exe (User SERVICE LOCAL)
O4 - HKLM \ S-1-5-20 \ .. \ Run: [Sidebar]% ProgramFiles% \ Windows Sidebar \ ehTray.exe (User SERVICE RÉSEAU)
O4 - HKLM \ S-1-5-20 \ .. \ Run: [mctadmin] C: \ Windows \ System32 \ mctadmin. exe (User SERVICE RÉSEAU)
O8 - Extra context menu item: Ajouter la cible du lien au format PDF existant -- res://C : \ Program Files \ Fichiers communs \ Adobe \ Acrobat \ ActiveX \ AcroIEFavClient.dll / AcroIEAppendSelLinks.html
O8 - Extra context menu item: Ajouter au PDF existant -- res://C : \ Program Files \ Fichiers communs \ Adobe \ Acrobat \ ActiveX \ AcroIEFavClient.dll / AcroIEAppend. html
O8 - Extra context menu item: Convertir la cible du lien au format Adobe PDF -- res://C : \ Program Files \ Fichiers communs \ Adobe \ Acrobat \ ActiveX \ AcroIEFavClient.dll / AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convertir au format Adobe PDF -- res://C : \ Program Files \ Fichiers communs \ Adobe \ Acrobat \ ActiveX \ AcroIEFavClient.dll / AcroIECapture.html
O8 - Extra context menu item: E & xporter vers Microsoft Excel -- res://C : \ PROGRA ~ 1 \ MICROS ~ 3 \ Office12 \ EXCEL. EXE/3000
O9 - Extra button: Envoyer à OneNote - (2670000A-7350-4f3c-8081-5663EE0C6C49) - C: \ PROGRA ~ 1 \ MICROS ~ 3 \ Office12 \ ONBttnIE.dll
O9 - Extra "Outils" menuitem: S & end to OneNote - (2670000A-7350-4f3c-8081-5663EE0C6C49) - C: \ PROGRA ~ 1 \ MICROS ~ 3 \ Office12 \ ONBttnIE.dll
O9 - Extra button: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ MICROS ~ 3 \ Office12 \ REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: (74DBCB52-F298-4110-951D-AD2FF67BC8AB) (NVIDIA Smart Scan) - nvidia.co m / content / DriverDownload / nForce / NvidiaSmartScan.cab
O16 - DPF: (8100D56A-5661-482C-BEE8-AFECE305D968) (Facebook Photo Uploader 5 Control) - upload.facebook./controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
O16 - DPF: (D27CDB6E-AE6D-11CF-96B8-444553540000) (Shockwave Flash Object) -- http://fpdownload2.macromedia./get/shoc ... wflash.cab
- Ø18 Protocol: livecall - (88FED34C-F0CA-4636-A375-3CB6248B04CD) - C: \ PROGRA ~ 1 \ MICROS ~ 3 \ Office12 \ GRA32A ~ 1. DLL
- Ø18 Protocole: LinkScanner - (F274614C-63F8-47D5-A4D1-FBDDE494F8D1) - C: \ Program Files \ AVG \ AVG9 \ avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Apple Mobile Device - Apple Inc - C: \ Program Files \ Fichiers communs \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe
O23 - Service: AVG Free Watchdog (avg9wd) - AVG Technologies CZ, sro - C: \ Program Files \ AVG \ AVG9 \ avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc - C: \ Program Files \ Bonjour \ mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc - C: \ Program Files \ Fichiers communs \ Macrovision Shared \ FLEXnet Publisher \ FNPLicensingService.exe
O23 - Service: iPod Service - Apple Inc - C: \ Program Files \ iPod \ bin \ iPodService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C: \ Windows \ system32 \ nvvsvc.exe
--
End of file - 7670 bytes
** ATTENTION ** Ce forum ne me laisse pas poster des liens externes, alors j'ai enlevé le com. Sur certaines des lignes et / ou remplacés par des. Com
Jesse_
___________
Logfile of Trend Micro HijackThis v2.0. 2
Scan saved at 11:37:49, le 7/01/2010
Plate-forme: Windows inconnu (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal
Running processes:
C: \ Windows \ system32 \ taskhost.exe
C: \ Windows \ System32 \ rundll32.exe
C: \ Windows \ system32 \ Dwm.exe
C: \ Windows \ Explorer.exe
C: \ Program Files \ QuickTime \ ashDisp.exe
C: \ Program Files \ Microsoft Office \ Office12 \ msnmsgr.exe
C: \ Program Files \ Adobe \ Acrobat 9.0 \ Acrobat \ acrotray. exe
C: \ Program Files \ Java \ jre6 \ bin \ ashDisp.exe
C: \ Program Files \ QuickTime \ SynTPHelper.exe
C: \ Program Files \ iTunes \ iTunesHelper.exe
C: \ Program Files \ AVG \ AVG9 \ avgtray.exe
C: \ Windows \ System32 \ smss32.exe
C: \ Users \ Jesse \ AppData \ Roaming \ SystemProc \ lsass.exe
C: \ Program Files \ InternetSecurity2010 \ IS2010.exe
C: \ Users \ Jesse \ Desktop \ SmitfraudFix \ Policies.exe
C: \ Program Files \ Mozilla Firefox \ firefox.exe
C: \ Users \ Jesse \ Desktop \ Policies SmitfraudFix \. exe
C: \ Users \ Jesse \ Desktop \ HijackThis. exe
R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft./fwlink/?LinkId=54896
R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft./fwlink/?LinkId=69157
- R1 HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Local = http://go.microsoft./fwlink/?LinkId=69157
- R1 HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft./fwlink/?LinkId=54896
R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft./fwlink/?LinkId=54896
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft./fwlink/?LinkId=69157
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, SearchAssistant =
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, CustomizeSearch =
R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Internet Settings, ProxyOverride = *. local
R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Toolbar, LinksFolderName =
F2 - REG: system.ini: UserInit = C: \ Windows \ system32 \ winlogon32. exe
O2 - BHO: AcroIEHelperStub - (18DF081C-E8AD-4283-A596-FA578C2EBDC3) - C: \ Program Files \ Fichiers communs \ Adobe \ Acrobat \ ActiveX \ AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - (3CA2F312-6F6E-4b53-A66E-4E65E497C8C0) - C: \ Program Files \ AVG \ AVG9 \ avgssie.dll
O2 - BHO: (no name) - (5C255C8A-E604-49b4-9D64-90988571CECB) - (no file)
O2 - BHO: Groove GFS Browser Helper - (72853161-30C5-4D22-B7F9-0BBC1D38A37E) - C: \ PROGRA ~ 1 \ MICROS ~ 3 \ Office12 \ GR469A ~ 1. DLL
Windows O2 - BHO: Live Sign-in Helper - (9030D464-4C02-4ABF-8ECC-5164760863C6) - C: \ Program Files \ Fichiers communs \ Microsoft Shared \ Windows Live \ WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - (AE7CD045-E861-484F-8273-0445EE161910) - C: \ Program Files \ Fichiers communs \ Adobe \ Acrobat \ ActiveX \ AcroIEFavClient.dll
O2 - BHO: Java (tm) Plug-In 2 SSV Helper - (DBC80044-A445-435B-BC74-9C25C1C588A9) - C: \ Program Files \ Java \ jre6 \ bin \ jp2ssv. dll
O2 - BHO: SmartSelect - (F4971EE7-DAA0-4053-9964-665D8EE6A077) - C: \ Program Files \ Fichiers communs \ Adobe \ Acrobat \ ActiveX \ AcroIEFavClient.dll
- O3 Toolbar: Adobe PDF - (47833539-D0C5-4125-9FA8-0819E2EAAC93) - C: \ Program Files \ Fichiers communs \ Adobe \ Acrobat \ ActiveX \ AcroIEFavClient.dll
O4 - HKLM \ .. \ Run: [avast!] Rundll32.exe C: \ Windows \ system32 \ NeroCheck.exe
O4 - HKLM \ .. \ Run: [avast!] C: \ Program Files \ QuickTime \ ashDisp.exe
O4 - HKLM \ .. \ Run: [Launcher] "C: \ Program Files \ Microsoft Office \ Office12 \ msnmsgr.exe"
O4 - HKLM \ .. \ Run: [Adobe Acrobat Speed Launcher] "C: \ Program Files \ Adobe \ Acrobat 9.0 \ Acrobat \ Acrobat_sl.exe"
O4 - HKLM \ .. \ Run: [Acrobat Assistant 8.0] "C: \ Program Files \ Adobe \ Acrobat 9.0 \ Acrobat \ jusched.exe"
O4 - HKLM \ .. \ Run: [avast!] "C: \ Program Files \ Java \ jre6 \ bin \ ashDisp.exe
O4 - HKLM \ .. \ Run: [QuickTime Task] "C: \ Program Files \ QuickTime \ qttask.exe"-atboottime
O4 - HKLM \ .. \ Run: [QuickTime Task] "C: \ Program Files \ iTunes \ iTunesHelper.exe"
O4 - HKLM \ .. \ Run: [AVG9_TRAY] C: \ PROGRA ~ 1 \ AVG \ AVG9 \ avgtray.exe
O4 - HKLM \ .. \ Run: [svchost] svchost.exe
O4 - HKLM \ .. \ Run: [AdobeCS4ServiceManager] "C: \ Program Files \ Fichiers communs \ Adobe \ CS4ServiceManager \ CS4ServiceManager.exe" launchedbylogin
O4 - HKLM \ .. \ Run: [smss32.exe] C: \ Windows \ system32 \ smss32. exe
O4 - HKCU \ .. \ Run: [DAEMON Tools Lite] "C: \ Program Files \ DAEMON Tools Lite \ daemon.exe"-autorun
O4 - HKCU \ .. \ Run: [uTorrent] "C: \ Program Files \ uTorrent \ utorrent.exe"
O4 - HKCU \ .. \ Run: [RTHDBPL] C: \ Users \ Jesse \ AppData \ Roaming \ SystemProc \ lsass.exe
O4 - HKCU \ .. \ Run: [Internet Security 2010] C: \ Program Files \ InternetSecurity2010 \ IS2010.exe
O4 - HKLM \ S-1-5-19 \ .. \ Run: [Sidebar]% ProgramFiles% \ Windows Sidebar \ Sidebar. exe / autorun (User SERVICE LOCAL)
O4 - HKLM \ S-1-5-19 \ .. \ Run: [mctadmin] C: \ Windows \ System32 \ mctadmin.exe (User SERVICE LOCAL)
O4 - HKLM \ S-1-5-20 \ .. \ Run: [Sidebar]% ProgramFiles% \ Windows Sidebar \ ehTray.exe (User SERVICE RÉSEAU)
O4 - HKLM \ S-1-5-20 \ .. \ Run: [mctadmin] C: \ Windows \ System32 \ mctadmin. exe (User SERVICE RÉSEAU)
O8 - Extra context menu item: Ajouter la cible du lien au format PDF existant -- res://C : \ Program Files \ Fichiers communs \ Adobe \ Acrobat \ ActiveX \ AcroIEFavClient.dll / AcroIEAppendSelLinks.html
O8 - Extra context menu item: Ajouter au PDF existant -- res://C : \ Program Files \ Fichiers communs \ Adobe \ Acrobat \ ActiveX \ AcroIEFavClient.dll / AcroIEAppend. html
O8 - Extra context menu item: Convertir la cible du lien au format Adobe PDF -- res://C : \ Program Files \ Fichiers communs \ Adobe \ Acrobat \ ActiveX \ AcroIEFavClient.dll / AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convertir au format Adobe PDF -- res://C : \ Program Files \ Fichiers communs \ Adobe \ Acrobat \ ActiveX \ AcroIEFavClient.dll / AcroIECapture.html
O8 - Extra context menu item: E & xporter vers Microsoft Excel -- res://C : \ PROGRA ~ 1 \ MICROS ~ 3 \ Office12 \ EXCEL. EXE/3000
O9 - Extra button: Envoyer à OneNote - (2670000A-7350-4f3c-8081-5663EE0C6C49) - C: \ PROGRA ~ 1 \ MICROS ~ 3 \ Office12 \ ONBttnIE.dll
O9 - Extra "Outils" menuitem: S & end to OneNote - (2670000A-7350-4f3c-8081-5663EE0C6C49) - C: \ PROGRA ~ 1 \ MICROS ~ 3 \ Office12 \ ONBttnIE.dll
O9 - Extra button: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ MICROS ~ 3 \ Office12 \ REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: (74DBCB52-F298-4110-951D-AD2FF67BC8AB) (NVIDIA Smart Scan) - nvidia.co m / content / DriverDownload / nForce / NvidiaSmartScan.cab
O16 - DPF: (8100D56A-5661-482C-BEE8-AFECE305D968) (Facebook Photo Uploader 5 Control) - upload.facebook./controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
O16 - DPF: (D27CDB6E-AE6D-11CF-96B8-444553540000) (Shockwave Flash Object) -- http://fpdownload2.macromedia./get/shoc ... wflash.cab
- Ø18 Protocol: livecall - (88FED34C-F0CA-4636-A375-3CB6248B04CD) - C: \ PROGRA ~ 1 \ MICROS ~ 3 \ Office12 \ GRA32A ~ 1. DLL
- Ø18 Protocole: LinkScanner - (F274614C-63F8-47D5-A4D1-FBDDE494F8D1) - C: \ Program Files \ AVG \ AVG9 \ avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Apple Mobile Device - Apple Inc - C: \ Program Files \ Fichiers communs \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe
O23 - Service: AVG Free Watchdog (avg9wd) - AVG Technologies CZ, sro - C: \ Program Files \ AVG \ AVG9 \ avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc - C: \ Program Files \ Bonjour \ mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc - C: \ Program Files \ Fichiers communs \ Macrovision Shared \ FLEXnet Publisher \ FNPLicensingService.exe
O23 - Service: iPod Service - Apple Inc - C: \ Program Files \ iPod \ bin \ iPodService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C: \ Windows \ system32 \ nvvsvc.exe
--
End of file - 7670 bytes
- Anonymous
- Bot
- Inscription: 25 Feb 2008
- Messages: ?
- Loc: Ozzuland
- Status: Online
Janvier 6th, 2010, 7:43 pm
- Don2007
- Web Master
- Inscription: Nov 21, 2006
- Messages: 4924
- Loc: NY
- Status: Offline
Janvier 7th, 2010, 8:39 am
C: \ Program Files \ InternetSecurity2010 \ IS2010.exe
O2 - BHO: (no name) - (5C255C8A-E604-49b4-9D64-90988571CECB) - (no file)
O4 - HKCU \ .. \ Run: [Internet Security 2010] C: \ Program Files \ InternetSecurity2010 \ IS2010.exe
O4 - HKLM \ S-1-5-19 \ .. \ Run: [mctadmin] C: \ Windows \ System32 \ mctadmin.exe (User SERVICE LOCAL)
O4 - HKLM \ S-1-5-20 \ .. \ Run: [mctadmin] C: \ Windows \ System32 \ mctadmin. exe (User SERVICE RÉSEAU)
O16 - DPF: (8100D56A-5661-482C-BEE8-AFECE305D968) (Facebook Photo Uploader 5 Control) - upload.facebook./controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
O2 - BHO: (no name) - (5C255C8A-E604-49b4-9D64-90988571CECB) - (no file)
O4 - HKCU \ .. \ Run: [Internet Security 2010] C: \ Program Files \ InternetSecurity2010 \ IS2010.exe
O4 - HKLM \ S-1-5-19 \ .. \ Run: [mctadmin] C: \ Windows \ System32 \ mctadmin.exe (User SERVICE LOCAL)
O4 - HKLM \ S-1-5-20 \ .. \ Run: [mctadmin] C: \ Windows \ System32 \ mctadmin. exe (User SERVICE RÉSEAU)
O16 - DPF: (8100D56A-5661-482C-BEE8-AFECE305D968) (Facebook Photo Uploader 5 Control) - upload.facebook./controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
How do you know when a politician is lying? His mouth is moving.
- grinch2171
- Moderator
- Inscription: Fév 11, 2004
- Messages: 6744
- Loc: Martinsburg, WV
- Status: Offline
Janvier 7th, 2010, 8:42 am
Vous devez supprimer les entrées suivantes via Hijack This
Si cela ne notr Fix You Up, télécharger, installer et exécuter à partir de MalwareBytes http://www.malwarebytes.org
Quote:
C: \ Users \ Jesse \ AppData \ Roaming \ SystemProc \ lsass.exe
F2 - REG: system.ini: UserInit = C: \ Windows \ system32 \ winlogon32.exe
O2 - BHO: (no name) - (5C255C8A-E604-49b4-9D64-90988571CECB) - (no file)
O4 - HKLM \ .. \ Run: [svchost] svchost.exe
O4 - HKCU \ .. \ Run: [RTHDBPL] C: \ Users \ Jesse \ AppData \ Roaming \ SystemProc \ lsass.exe
O4 - HKCU \ .. \ Run: [Internet Security 2010] C: \ Program Files \ InternetSecurity2010 \ IS2010.exe
F2 - REG: system.ini: UserInit = C: \ Windows \ system32 \ winlogon32.exe
O2 - BHO: (no name) - (5C255C8A-E604-49b4-9D64-90988571CECB) - (no file)
O4 - HKLM \ .. \ Run: [svchost] svchost.exe
O4 - HKCU \ .. \ Run: [RTHDBPL] C: \ Users \ Jesse \ AppData \ Roaming \ SystemProc \ lsass.exe
O4 - HKCU \ .. \ Run: [Internet Security 2010] C: \ Program Files \ InternetSecurity2010 \ IS2010.exe
Si cela ne notr Fix You Up, télécharger, installer et exécuter à partir de MalwareBytes http://www.malwarebytes.org
"Be polite, be professional, but have a plan to kill everybody you meet." Maj. Gen. James Mattis
Page 1 sur 1
Pour répondre à ce sujet, vous devez vous connecter ou vous enregistrer. Il est gratuit.
Afficher de l'information
- Total des messages de ce sujet: 3 messages
- Utilisateurs parcourant ce forum: Aucun utilisateur enregistré et 170 invités
- Vous ne pouvez pas poster de nouveaux sujets
- Vous ne pouvez pas répondre aux sujets
- Vous ne pouvez pas éditer vos messages
- Vous ne pouvez pas supprimer vos messages
- Vous ne pouvez pas joindre des fichiers
