<https://forum.zebulon.fr/topic/80101-probleme-trojan-trojzlob-bc/#comment-612626>
<http://schema.org/text>
"voila la procedure est faite \n  \nLogfile of HijackThis v1.99.1 \nScan saved at 19:13:12, on 19/11/2005 \nPlatform: Windows XP SP2 (WinNT 5.01.2600) \nMSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) \n  \nRunning processes: \nC:\\WINDOWS\\System32\\smss.exe \nC:\\WINDOWS\\system32\\winlogon.exe \nC:\\WINDOWS\\system32\\services.exe \nC:\\WINDOWS\\system32\\lsass.exe \nC:\\WINDOWS\\system32\\svchost.exe \nC:\\WINDOWS\\system32\\svchost.exe \nC:\\WINDOWS\\Explorer.EXE \nC:\\Program Files\\HijackThis\\HijackThis.exe \n  \nR0 - HKCU\\Software\\Microsoft\\Internet Explorer\\Main,Start Page = http://www.google.fr/ \nR0 - HKCU\\Software\\Microsoft\\Internet Explorer\\Toolbar,LinksFolderName = Liens \nO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\\Program Files\\Adobe\\Acrobat 7.0\\ActiveX\\AcroIEHelper.dll (file missing) \nO2 - BHO: IE Privacy Keeper - Last IE Window Detector - {1201333E-BAD9-481C-BCF5-6904498CF85B} - C:\\Program Files\\UnH Solutions\\IE Privacy Keeper\\IEPKbho.dll \nO2 - BHO: URLLink - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - C:\\Program Files\\NewDotNet\\newdotnet6_98.dll \nO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\\PROGRA~1\\SPYBOT~1\\SDHelper.dll \nO2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\\program files\\google\\googletoolbar1.dll \nO2 - BHO: NTIECatcher Class - {C56CB6B0-0D96-11D6-8C65-B2868B609932} - C:\\Program Files\\Xi\\NetTransport 2\\NTIEHelper.dll \nO3 - Toolbar: &amp;Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\\program files\\google\\googletoolbar1.dll \nO4 - HKLM\\..\\Run: [AVG7_CC] C:\\PROGRA~1\\Grisoft\\AVG7\\avgcc.exe /STARTUP \nO4 - HKLM\\..\\Run: [AVG7_EMC] C:\\PROGRA~1\\Grisoft\\AVG7\\avgemc.exe \nO4 - HKLM\\..\\Run: [NvCplDaemon] RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup \nO4 - HKLM\\..\\Run: [nwiz] nwiz.exe /install \nO4 - HKLM\\..\\Run: [QuickTime Task] \"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime \nO4 - HKLM\\..\\Run: [NeroCheck] C:\\WINDOWS\\system32\\\\NeroCheck.exe \nO4 - HKLM\\..\\Run: [sunJavaUpdateSched] C:\\Program Files\\Java\\jre1.5.0_04\\bin\\jusched.exe \nO4 - HKLM\\..\\Run: [TkBellExe] \"C:\\Program Files\\Fichiers communs\\Real\\Update_OB\\realsched.exe\"  -osboot \nO4 - HKLM\\..\\Run: [New.net Startup] rundll32 C:\\PROGRA~1\\NEWDOT~1\\NEWDOT~2.DLL,ClientStartup -s \nO4 - HKLM\\..\\Run: [iE Privacy Keeper] \"C:\\Program Files\\UnH Solutions\\IE Privacy Keeper\\IEPrivacyKeeper.exe\" -stcleanup \nO4 - HKLM\\..\\Run: [ssAAD.exe] C:\\PROGRA~1\\Sony\\SONICS~1\\SsAAD.exe \nO4 - HKLM\\..\\Run: [NvMediaCenter] RUNDLL32.EXE C:\\WINDOWS\\system32\\NvMcTray.dll,NvTaskbarInit \nO4 - HKLM\\..\\Run: [Anti-Blaxx Manager] C:\\Program Files\\Anti-Blaxx\\Anti-Blaxx.exe \nO4 - HKLM\\..\\Run: [avast!] C:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe \nO4 - HKLM\\..\\Run: [AVGCtrl] \"C:\\Program Files\\AVPersonal\\AVGNT.EXE\" /min \nO4 - HKCU\\..\\Run: [skype] \"C:\\Program Files\\Skype\\Phone\\Skype.exe\" /nosplash /minimized \nO4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\\Program Files\\InterVideo\\Common\\Bin\\WinCinemaMgr.exe \nO4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\\Program Files\\Adobe\\Acrobat 7.0\\Reader\\reader_sl.exe \nO4 - Global Startup: Microsoft Office.lnk = C:\\Program Files\\Microsoft Office\\Office\\OSA9.EXE \nO8 - Extra context menu item: &amp;Traduire à partir de l'anglais - res://C:\\Program Files\\Google\\GoogleToolbar1.dll/cmwordtrans.html \nO8 - Extra context menu item: Bloquer ce serveur... - c:\\progra~1\\avantb~1\\AddAllToADBlackList.htm \nO8 - Extra context menu item: Bloquer cette publicité... - c:\\progra~1\\avantb~1\\AddToADBlackList.htm \nO8 - Extra context menu item: Ouvrir dans une nouvelle fenêtre d'Avant Browser - c:\\progra~1\\avantb~1\\OpenInNewBrowser.htm \nO8 - Extra context menu item: Ouvrir tous les liens de la page... - c:\\progra~1\\avantb~1\\OpenAllLinks.htm \nO8 - Extra context menu item: Pages liées - res://C:\\Program Files\\Google\\GoogleToolbar1.dll/cmbacklinks.html \nO8 - Extra context menu item: Pages similaires - res://C:\\Program Files\\Google\\GoogleToolbar1.dll/cmsimilar.html \nO8 - Extra context menu item: Recherche &amp;Google - res://C:\\Program Files\\Google\\GoogleToolbar1.dll/cmsearch.html \nO8 - Extra context menu item: Rechercher sur le Web... - c:\\progra~1\\avantb~1\\Search.htm \nO8 - Extra context menu item: Surligner - c:\\progra~1\\avantb~1\\Highlight.htm \nO8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://C:\\Program Files\\Google\\GoogleToolbar1.dll/cmcache.html \nO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\\Program Files\\Java\\jre1.5.0_04\\bin\\npjpi150_04.dll \nO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\\Program Files\\Java\\jre1.5.0_04\\bin\\npjpi150_04.dll \nO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\\Program Files\\Messenger\\msmsgs.exe \nO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\\Program Files\\Messenger\\msmsgs.exe \nO10 - Hijacked Internet access by New.Net \nO10 - Hijacked Internet access by New.Net \nO10 - Hijacked Internet access by New.Net \nO10 - Hijacked Internet access by New.Net \nO10 - Hijacked Internet access by New.Net \nO16 - DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM ActiveX Control) - http://minitelweb.minitel.com/imin_data/ocx/MDM.cab \nO16 - DPF: {11111111-1111-1111-1111-111191113457} - file://c:\\ied_s7.cab \nO16 - DPF: {11111111-1111-1111-1111-511111193457} - file://c:\\x.cab \nO16 - DPF: {11111111-1111-1111-1111-511111193458} - file://c:\\x.cab \nO16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 \nO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co...b?1105648067171 \nO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse...pDownloader.cab \nO17 - HKLM\\System\\CCS\\Services\\Tcpip\\..\\{86AA2B9E-CF0A-4726-B74B-7AEBFFD8F5ED}: NameServer = 80.10.246.1,80.10.246.136 \nO17 - HKLM\\System\\CCS\\Services\\Tcpip\\..\\{8DF9C412-2384-44A1-ABEA-B074DF5532D9}: NameServer = 80.10.246.1,80.10.246.132 \nO20 - Winlogon Notify: msctl32.dll - C:\\WINDOWS\\system32\\msctl32.dll \nO23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\\Program Files\\AVPersonal\\AVGUARD.EXE \nO23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\\Program Files\\Alwil Software\\Avast4\\aswUpdSv.exe \nO23 - Service: avast! Antivirus - Unknown owner - C:\\Program Files\\Alwil Software\\Avast4\\ashServ.exe \nO23 - Service: avast! Mail Scanner - Unknown owner - C:\\Program Files\\Alwil Software\\Avast4\\ashMaiSv.exe\" /service (file missing) \nO23 - Service: avast! Web Scanner - Unknown owner - C:\\Program Files\\Alwil Software\\Avast4\\ashWebSv.exe\" /service (file missing) \nO23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\\PROGRA~1\\Grisoft\\AVG7\\avgamsvr.exe \nO23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\\PROGRA~1\\Grisoft\\AVG7\\avgupsvc.exe \nO23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\\Program Files\\AVPersonal\\AVWUPSRV.EXE \nO23 - Service: C-DillaCdaC11BA - Macrovision - C:\\WINDOWS\\system32\\drivers\\CDAC11BA.EXE \nO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\\Program Files\\Fichiers communs\\InstallShield\\Driver\\1050\\Intel 32\\IDriverT.exe \nO23 - Service: MSCSPTISRV - Sony Corporation - C:\\Program Files\\Fichiers communs\\Sony Shared\\AVLib\\MSCSPTISRV.exe \nO23 - Service: MD Simple Burner Service (NetMDSB) - Sony Corporation - C:\\Program Files\\Sony\\MD Simple Burner\\NetMDSB.exe \nO23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\\WINDOWS\\system32\\nvsvc32.exe \nO23 - Service: PACSPTISVR - Sony Corporation - C:\\Program Files\\Fichiers communs\\Sony Shared\\AVLib\\PACSPTISVR.exe \nO23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\\Program Files\\Fichiers communs\\Sony Shared\\AVLib\\SPTISRV.exe \nO23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\\Program Files\\Fichiers communs\\Sony Shared\\AVLib\\SSScsiSV.exe \n  \n  \nmerci pour la solution \n"
<https://forum.zebulon.fr/topic/80101-probleme-trojan-trojzlob-bc/>