Se connecter avec
S'enregistrer | Connectez-vous

Win32.Stration.Gen@mm?

Dernière réponse : dans Sécurité

bonjours, evidament, comme par hasard il ya de nouveau un nouveau virus qui traine, et comme par mal chance, je l'ai choppé!

celui si rend dingue mon antivirus,et il m'est impossible de me rendre manuellement dans le répertoire indiqué, ou de lancé un scan de mon anti virus, sans que celui ci, ce regénère des autres fichiers tmp!

il s'est pas installer dans le répertoire normale des fichiers temporairer, mais il s'est installé dans le répertoire C:\WINDOWS\system32\config\systemprofile\Local Settings\temp!

donc comment puis je le retirer?
es ce que ont peut simplement supprimer ce répertoire et recréer un nouveau?

Autres pages sur : win32 stration gen

Lassé par la pub ? Créez un compte

salut angeldark!

je l'ai dejas passé sous hijackthis!

et le nom du virus, il figure en temp que titre de mon sujet!

  1. Logfile of HijackThis v1.97.7
    

  2. Scan saved at 02:21:43, on 27/12/2006
    

  3. Platform: Windows XP SP2 (WinNT 5.01.2600)
    

  4. MSIE: Internet Explorer v7.00 (7.00.5730.0011)
    

  5.  
  6. Running processes:
    

  7. C:\WINDOWS\System32\smss.exe
    

  8. C:\WINDOWS\system32\winlogon.exe
    

  9. C:\WINDOWS\system32\services.exe
    

  10. C:\WINDOWS\system32\lsass.exe
    

  11. C:\WINDOWS\system32\svchost.exe
    

  12. C:\WINDOWS\System32\svchost.exe
    

  13. C:\WINDOWS\Explorer.EXE
    

  14. C:\WINDOWS\system32\spoolsv.exe
    

  15. C:\Program Files\Eset\nod32kui.exe
    

  16. C:\WINDOWS\system32\RUNDLL32.EXE
    

  17. C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
    

  18. C:\Program Files\Softwin\BitDefender10\bdmcon.exe
    

  19. C:\Program Files\Softwin\BitDefender10\bdagent.exe
    

  20. E:\system\Dtool\daemon.exe
    

  21. C:\WINDOWS\system32\ctfmon.exe
    

  22. C:\Program Files\MSN Messenger\MsnMsgr.Exe
    

  23. C:\Program Files\Rainmeter\Rainmeter.exe
    

  24. C:\Program Files\OpenOffice.org 2.1\program\soffice.exe
    

  25. C:\Program Files\OpenOffice.org 2.1\program\soffice.BIN
    

  26. C:\Program Files\Eset\nod32krn.exe
    

  27. C:\WINDOWS\system32\nvsvc32.exe
    

  28. C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe
    

  29. C:\WINDOWS\system32\svchost.exe
    

  30. C:\Program Files\Common Files\Softwin\BitDefender Update Service\livesrv.exe
    

  31. C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe
    

  32. C:\Program Files\Softwin\BitDefender10\vsserv.exe
    

  33. E:\graphisme\video\VLC\vlc.exe
    

  34. C:\Program Files\Mozilla Firefox\firefox.exe
    

  35. D:\sauvegarde 2\HijackThis.exe
    

  36.  
  37. R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = <a href="http://www.islamway.com" target="_blank">http://www.islamway.com</a>
    

  38. R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = <a href="http://go.microsoft.com/fwlink/?LinkId=69157" target="_blank">http://go.microsoft.com/fwlink/?LinkId=69157</a>
    

  39. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = <a href="http://go.microsoft.com/fwlink/?LinkId=54896" target="_blank">http://go.microsoft.com/fwlink/?LinkId=54896</a>
    

  40. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = <a href="http://go.microsoft.com/fwlink/?LinkId=69157" target="_blank">http://go.microsoft.com/fwlink/?LinkId=69157</a>
    

  41. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = <a href="http://go.microsoft.com/fwlink/?LinkId=54896" target="_blank">http://go.microsoft.com/fwlink/?LinkId=54896</a>
    

  42. R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
    

  43. R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = pepsi_labeb Internet Explorer
    

  44. R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Favorites
    

  45. O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    

  46. O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    

  47. O2 - BHO: (no name) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    

  48. O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
    

  49. O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    

  50. O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    

  51. O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    

  52. O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
    

  53. O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg
    

  54. O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
    

  55. O4 - HKLM\..\Run: [DAEMON Tools-1033] "E:\system\Dtool\daemon.exe"  -lang 1033
    

  56. O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    

  57. O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    

  58. O4 - Startup: OpenOffice.org 2.1.lnk = C:\Program Files\OpenOffice.org 2.1\program\quickstart.exe
    

  59. O4 - Global Startup: Rainmeter.lnk = C:\Program Files\Rainmeter\Rainmeter.exe
    

  60. O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
    

  61. O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 (HKLM)
    

  62. O11 - Options group: [INTERNATIONAL] International*
    

  63. O11 - Options group: [TABS] Tabbed Browsing


et j'ai dejas rechercher sur le net, sous le nom du virus, mais pas grand chose!

bon apparement cela c'est calmer, en premier lieu il avait attaquer tout ce qui concerne mon anti virus nod!
donc tout les fichiers temp qui appartenais à nod, ont été attaquer par ce virus!

et nod 32, ne l'a même pas detecter, heureusement que je disposait de bitdefender, lui au moins il a de suite crier gâre!
mais j'ai aussi essayer de lancer bitdefender en mode sans echec, mais là il refuse carrément de se lancer!

et je l'ai passer sous spybot, rien de rien trouvé!

bit defender ma bien annoncé, que le virus n'a pas infecter les fichiers, et que il ma mis en quarantaines, et il m'affichais bien le chemin énumerer précédement, ou il se trouvait!! 

  1. Logfile of HijackThis v1.99.1
    

  2. Scan saved at 13:35:21, on 27/12/2006
    

  3. Platform: Windows XP SP2 (WinNT 5.01.2600)
    

  4. MSIE: Internet Explorer v7.00 (7.00.5730.0011)
    

  5.  
  6. Running processes:
    

  7. C:\WINDOWS\System32\smss.exe
    

  8. C:\WINDOWS\system32\winlogon.exe
    

  9. C:\WINDOWS\system32\services.exe
    

  10. C:\WINDOWS\system32\lsass.exe
    

  11. C:\WINDOWS\system32\svchost.exe
    

  12. C:\WINDOWS\System32\svchost.exe
    

  13. C:\WINDOWS\Explorer.EXE
    

  14. C:\WINDOWS\system32\spoolsv.exe
    

  15. C:\Program Files\Eset\nod32kui.exe
    

  16. C:\WINDOWS\system32\RUNDLL32.EXE
    

  17. C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
    

  18. C:\Program Files\Softwin\BitDefender10\bdmcon.exe
    

  19. C:\Program Files\Softwin\BitDefender10\bdagent.exe
    

  20. E:\system\Dtool\daemon.exe
    

  21. C:\WINDOWS\system32\ctfmon.exe
    

  22. C:\Program Files\MSN Messenger\MsnMsgr.Exe
    

  23. C:\Program Files\Rainmeter\Rainmeter.exe
    

  24. C:\Program Files\OpenOffice.org 2.1\program\soffice.exe
    

  25. C:\Program Files\OpenOffice.org 2.1\program\soffice.BIN
    

  26. C:\Program Files\Eset\nod32krn.exe
    

  27. C:\WINDOWS\system32\nvsvc32.exe
    

  28. C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe
    

  29. C:\Program Files\Mozilla Firefox\firefox.exe
    

  30. C:\Program Files\Common Files\Softwin\BitDefender Update Service\livesrv.exe
    

  31. C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe
    

  32. C:\Program Files\Softwin\BitDefender10\vsserv.exe
    

  33. C:\Program Files\WinRAR\WinRAR.exe
    

  34. C:\DOCUME~1\crystal\LOCALS~1\Temp\Rar$EX00.924\HijackThis.exe
    

  35.  
  36. R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = <a href="http://www.islamway.com" target="_blank">http://www.islamway.com</a>
    

  37. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = <a href="http://go.microsoft.com/fwlink/?LinkId=69157" target="_blank">http://go.microsoft.com/fwlink/?LinkId=69157</a>
    

  38. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = <a href="http://go.microsoft.com/fwlink/?LinkId=54896" target="_blank">http://go.microsoft.com/fwlink/?LinkId=54896</a>
    

  39. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = <a href="http://go.microsoft.com/fwlink/?LinkId=54896" target="_blank">http://go.microsoft.com/fwlink/?LinkId=54896</a>
    

  40. R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = <a href="http://go.microsoft.com/fwlink/?LinkId=69157" target="_blank">http://go.microsoft.com/fwlink/?LinkId=69157</a>
    

  41. R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
    

  42. R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = pepsi_labeb Internet Explorer
    

  43. R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Favorites
    

  44. O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    

  45. O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    

  46. O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    

  47. O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
    

  48. O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    

  49. O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    

  50. O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    

  51. O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
    

  52. O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg
    

  53. O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
    

  54. O4 - HKLM\..\Run: [DAEMON Tools-1033] "E:\system\Dtool\daemon.exe"  -lang 1033
    

  55. O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    

  56. O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    

  57. O4 - Startup: OpenOffice.org 2.1.lnk = C:\Program Files\OpenOffice.org 2.1\program\quickstart.exe
    

  58. O4 - Global Startup: Rainmeter.lnk = C:\Program Files\Rainmeter\Rainmeter.exe
    

  59. O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    

  60. O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    

  61. O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    

  62. O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    

  63. O11 - Options group: [INTERNATIONAL] International*
    

  64. O11 - Options group: [TABS] Tabbed Browsing
    

  65. O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    

  66. O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    

  67. O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    

  68. O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
    

  69. O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)
    

  70. O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset  - C:\Program Files\Eset\nod32krn.exe
    

  71. O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    

  72. O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender10\vsserv.exe" /service (file missing)
    

  73. O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)


oui je vois une legère différence, la version précédente m'affichait uniquement jusqu'au 011

après desinstallation!

  1. Logfile of HijackThis v1.99.1
    

  2. Scan saved at 13:47:31, on 27/12/2006
    

  3. Platform: Windows XP SP2 (WinNT 5.01.2600)
    

  4. MSIE: Internet Explorer v7.00 (7.00.5730.0011)
    

  5.  
  6. Running processes:
    

  7. C:\WINDOWS\System32\smss.exe
    

  8. C:\WINDOWS\system32\winlogon.exe
    

  9. C:\WINDOWS\system32\services.exe
    

  10. C:\WINDOWS\system32\lsass.exe
    

  11. C:\WINDOWS\system32\svchost.exe
    

  12. C:\WINDOWS\System32\svchost.exe
    

  13. C:\WINDOWS\system32\spoolsv.exe
    

  14. C:\WINDOWS\Explorer.EXE
    

  15. C:\WINDOWS\system32\RUNDLL32.EXE
    

  16. C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
    

  17. C:\Program Files\Softwin\BitDefender10\bdmcon.exe
    

  18. C:\Program Files\Softwin\BitDefender10\bdagent.exe
    

  19. E:\system\Dtool\daemon.exe
    

  20. C:\WINDOWS\system32\ctfmon.exe
    

  21. C:\Program Files\MSN Messenger\MsnMsgr.Exe
    

  22. C:\Program Files\Rainmeter\Rainmeter.exe
    

  23. C:\Program Files\OpenOffice.org 2.1\program\soffice.exe
    

  24. C:\Program Files\OpenOffice.org 2.1\program\soffice.BIN
    

  25. C:\WINDOWS\system32\nvsvc32.exe
    

  26. C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe
    

  27. C:\Program Files\Common Files\Softwin\BitDefender Update Service\livesrv.exe
    

  28. C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe
    

  29. C:\Program Files\Softwin\BitDefender10\vsserv.exe
    

  30. C:\Program Files\Mozilla Firefox\firefox.exe
    

  31. C:\Program Files\WinRAR\WinRAR.exe
    

  32. C:\DOCUME~1\crystal\LOCALS~1\Temp\Rar$EX00.713\HijackThis.exe
    

  33.  
  34. R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = <a href="http://www.islamway.com" target="_blank">http://www.islamway.com</a>
    

  35. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = <a href="http://go.microsoft.com/fwlink/?LinkId=69157" target="_blank">http://go.microsoft.com/fwlink/?LinkId=69157</a>
    

  36. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = <a href="http://go.microsoft.com/fwlink/?LinkId=54896" target="_blank">http://go.microsoft.com/fwlink/?LinkId=54896</a>
    

  37. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = <a href="http://go.microsoft.com/fwlink/?LinkId=54896" target="_blank">http://go.microsoft.com/fwlink/?LinkId=54896</a>
    

  38. R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = <a href="http://go.microsoft.com/fwlink/?LinkId=69157" target="_blank">http://go.microsoft.com/fwlink/?LinkId=69157</a>
    

  39. R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
    

  40. R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = pepsi_labeb Internet Explorer
    

  41. R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Favorites
    

  42. O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    

  43. O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    

  44. O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    

  45. O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    

  46. O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    

  47. O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    

  48. O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
    

  49. O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg
    

  50. O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
    

  51. O4 - HKLM\..\Run: [DAEMON Tools-1033] "E:\system\Dtool\daemon.exe"  -lang 1033
    

  52. O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    

  53. O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    

  54. O4 - Startup: OpenOffice.org 2.1.lnk = C:\Program Files\OpenOffice.org 2.1\program\quickstart.exe
    

  55. O4 - Global Startup: Rainmeter.lnk = C:\Program Files\Rainmeter\Rainmeter.exe
    

  56. O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll

oops!

  1. Logfile of HijackThis v1.99.1
    

  2. Scan saved at 13:47:31, on 27/12/2006
    

  3. Platform: Windows XP SP2 (WinNT 5.01.2600)
    

  4. MSIE: Internet Explorer v7.00 (7.00.5730.0011)
    

  5.  
  6. Running processes:
    

  7. C:\WINDOWS\System32\smss.exe
    

  8. C:\WINDOWS\system32\winlogon.exe
    

  9. C:\WINDOWS\system32\services.exe
    

  10. C:\WINDOWS\system32\lsass.exe
    

  11. C:\WINDOWS\system32\svchost.exe
    

  12. C:\WINDOWS\System32\svchost.exe
    

  13. C:\WINDOWS\system32\spoolsv.exe
    

  14. C:\WINDOWS\Explorer.EXE
    

  15. C:\WINDOWS\system32\RUNDLL32.EXE
    

  16. C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
    

  17. C:\Program Files\Softwin\BitDefender10\bdmcon.exe
    

  18. C:\Program Files\Softwin\BitDefender10\bdagent.exe
    

  19. E:\system\Dtool\daemon.exe
    

  20. C:\WINDOWS\system32\ctfmon.exe
    

  21. C:\Program Files\MSN Messenger\MsnMsgr.Exe
    

  22. C:\Program Files\Rainmeter\Rainmeter.exe
    

  23. C:\Program Files\OpenOffice.org 2.1\program\soffice.exe
    

  24. C:\Program Files\OpenOffice.org 2.1\program\soffice.BIN
    

  25. C:\WINDOWS\system32\nvsvc32.exe
    

  26. C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe
    

  27. C:\Program Files\Common Files\Softwin\BitDefender Update Service\livesrv.exe
    

  28. C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe
    

  29. C:\Program Files\Softwin\BitDefender10\vsserv.exe
    

  30. C:\Program Files\Mozilla Firefox\firefox.exe
    

  31. C:\Program Files\WinRAR\WinRAR.exe
    

  32. C:\DOCUME~1\crystal\LOCALS~1\Temp\Rar$EX00.713\HijackThis.exe
    

  33.  
  34. R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = <a href="http://www.islamway.com" target="_blank">http://www.islamway.com</a>
    

  35. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = <a href="http://go.microsoft.com/fwlink/?LinkId=69157" target="_blank">http://go.microsoft.com/fwlink/?LinkId=69157</a>
    

  36. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = <a href="http://go.microsoft.com/fwlink/?LinkId=54896" target="_blank">http://go.microsoft.com/fwlink/?LinkId=54896</a>
    

  37. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = <a href="http://go.microsoft.com/fwlink/?LinkId=54896" target="_blank">http://go.microsoft.com/fwlink/?LinkId=54896</a>
    

  38. R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = <a href="http://go.microsoft.com/fwlink/?LinkId=69157" target="_blank">http://go.microsoft.com/fwlink/?LinkId=69157</a>
    

  39. R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
    

  40. R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = pepsi_labeb Internet Explorer
    

  41. R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Favorites
    

  42. O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    

  43. O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    

  44. O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    

  45. O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    

  46. O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    

  47. O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    

  48. O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
    

  49. O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg
    

  50. O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
    

  51. O4 - HKLM\..\Run: [DAEMON Tools-1033] "E:\system\Dtool\daemon.exe"  -lang 1033
    

  52. O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    

  53. O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    

  54. O4 - Startup: OpenOffice.org 2.1.lnk = C:\Program Files\OpenOffice.org 2.1\program\quickstart.exe
    

  55. O4 - Global Startup: Rainmeter.lnk = C:\Program Files\Rainmeter\Rainmeter.exe
    

  56. O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    

  57. O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    

  58. O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    

  59. O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    

  60. O11 - Options group: [INTERNATIONAL] International*
    

  61. O11 - Options group: [TABS] Tabbed Browsing
    

  62. O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    

  63. O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    

  64. O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    

  65. O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
    

  66. O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)
    

  67. O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    

  68. O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender10\vsserv.exe" /service (file missing)
    

  69. O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)
Lassé par la pub ? Créez un compte

Créer un nouveau sujet

Tom's guide dans le monde