Martin66

Bonjour & merci pour la réponse. J'ai une intrusion probable ou bien execution d'un trojan car certaines de mes données se retrouvent sur le net sans les avoir diffusées. Précaution avant re-formatage si solution non trouvée. Hier, Avast m'a trouvé: Sign of "Win32:Bifrose-EGW [Trj]" has been found in "C:\WINDOWS\Installer\cea50.msp" file. Je n'ai rien sur sujet ??? Merci & A+

HiJackThis 2.02 Spybot & Avast faits hier Merci par avance pour votre aide Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 12:21:37, on 20/07/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRAM FILES\A-SQUARED ANTI-DIALER\a2service.exe C:\Program Files\a-squared Anti-Malware\a2service.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\dllhost.exe C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe C:\WINDOWS\System32\vssvc.exe C:\Program Files\Windows Media Player\WMPNetwk.exe C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\WINDOWS\System32\wbem\unsecapp.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\System32\dllhost.exe C:\WINDOWS\System32\wbem\wmiprvse.exe C:\WINDOWS\System32\alg.exe C:\WINDOWS\System32\msdtc.exe C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe C:\Program Files\Google\Update\GoogleUpdate.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Multimedia Card Reader\shwicon2k.exe C:\PROGRA~1\PHILIP~1\VProperty.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\a-squared Anti-Dialer\a2adguard.exe C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe C:\WINDOWS\RTHDCPL.EXE C:\Program Files\Glary Utilities\Integrator.exe C:\PROGRAM FILES\A-SQUARED ANTI-MALWARE\a2guard.exe C:\Program Files\Microsoft IntelliPoint\ipoint.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\Windows Media Player\WMPNSCFG.exe C:\Program Files\Thoosje Vista Sidebar\Thoosje Vista Sidebar.exe C:\Program Files\Microsoft Office\Office10\msoffice.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe C:\WINDOWS\System32\wbem\wmiprvse.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - (no file) O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: QFX Software KeyScrambler - {2B9F5787-88A5-4945-90E7-C4B18563BC5E} - C:\Program Files\KeyScrambler\KeyScramblerIE.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O3 - Toolbar: Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\Orbitdownloader\GrabPro.dll O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [sunkist2k] C:\Program Files\Multimedia Card Reader\shwicon2k.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [ToUcamVProperty] C:\PROGRA~1\PHILIP~1\VProperty.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [a-squared Anti-Dialer] "C:\Program Files\a-squared Anti-Dialer\a2adguard.exe" /d=60 O4 - HKLM\..\Run: [uVS10 Preload] C:\Program Files\Ulead Systems\Ulead VideoStudio SE DVD\uvPL.exe O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [startCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [a-squared] "C:\PROGRAM FILES\A-SQUARED ANTI-MALWARE\a2guard.exe" /d=60 O4 - HKLM\..\Run: [intelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe" O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - Startup: Poids-4juin09.lnk = C:\Documents and Settings\Gda\Mes documents\Poids-4juin09a.xls O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: Thoosje Vista Sidebar.lnk = C:\Program Files\Thoosje Vista Sidebar\Thoosje Vista Sidebar.exe O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201 O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204 O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200 O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203 O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202 O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll O9 - Extra button: (no name) - {5C106A59-CC3C-4caa-81A4-6D909B5ACE23} - C:\Program Files\KeyScrambler\KeyScramblerIE.dll O9 - Extra 'Tools' menuitem: &KeyScrambler... - {5C106A59-CC3C-4caa-81A4-6D909B5ACE23} - C:\Program Files\KeyScrambler\KeyScramblerIE.dll O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O15 - Trusted Zone: http://asia.msi.com.tw O15 - Trusted Zone: http://global.msi.com.tw O15 - Trusted Zone: http://www.msi.com.tw O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1241970665484 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1245506407625 O16 - DPF: {8167C273-DF59-4416-B647-C8BB2C7EE83E} (WebSDev Control) - http://liveupdate.msi.com.tw/autobios/LOnline/install.cab O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://dl8-cdn-03.sun.com/s/ESD5/JSCDL/jre...ows-i586-jc.cab O23 - Service: a-squared Anti-Dialer Service (a2AntiDialer) - Emsi Software GmbH - C:\PROGRAM FILES\A-SQUARED ANTI-DIALER\a2service.exe O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Service Google Update (gupdate1c99050bf90efa0) (gupdate1c99050bf90efa0) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Fichiers communs\SureThing Shared\stllssvr.exe O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe -- End of file - 11754 bytes Rapport Trend Micro: TrendSecure Trend Micro Your current Web browser may not display this site properly. TrendSecure performs best when opened with the latest version of either Microsoft Internet Explorer or Mozilla Firefox. Comparison of your HijackThis log file items to others The table below compares the items HijackThis found on your computer with those on other people's computers. The column "% of PCs with item" indicates what percent of other people's HijackThis log files contain the item in that row of the table. Additional information will be provided as more HijackThis log files are added to the AnalyzeThis database. Each entry is coded to indicate the type of item it is on your computer. An explanation of these codes may be found at the bottom of this page. Index % of PCs with item Code Data 1 0.0% O15 http://www.msi.com.tw 2 0.0% O15 http://global.msi.com.tw 3 0.0% O15 http://asia.msi.com.tw 54 0.0% O6 HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present 55 0.0% O6 HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present 56 0.0% O8 E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 57 0.0% O8 Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200 58 0.0% O8 &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201 59 0.0% O8 &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204 60 0.0% O8 Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203 61 0.0% O8 Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202 73 0.0% P01 C:\WINDOWS\Explorer.EXE 74 0.0% P01 C:\WINDOWS\system32\svchost.exe 75 0.0% P01 C:\WINDOWS\system32\lsass.exe 76 0.0% P01 C:\WINDOWS\system32\winlogon.exe 77 0.0% P01 C:\WINDOWS\system32\services.exe 78 0.0% P01 C:\WINDOWS\System32\smss.exe 79 0.0% P01 C:\WINDOWS\system32\spoolsv.exe 80 0.0% P01 C:\WINDOWS\system32\ctfmon.exe 81 0.0% P01 C:\Program Files\Internet Explorer\iexplore.exe 82 0.0% P01 C:\WINDOWS\system32\Ati2evxx.exe 83 0.0% P01 C:\WINDOWS\system32\NOTEPAD.EXE 84 0.0% P01 C:\WINDOWS\system32\csrss.exe 85 0.0% P01 C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe 86 0.0% P01 C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe 87 0.0% P01 C:\Program Files\Alwil Software\Avast4\ashServ.exe 88 0.0% P01 C:\WINDOWS\System32\alg.exe 89 0.0% P01 C:\Program Files\Alwil Software\Avast4\ashWebSv.exe 90 0.0% P01 C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe 91 0.0% P01 C:\WINDOWS\System32\dllhost.exe 92 0.0% P01 C:\WINDOWS\system32\wbem\wmiprvse.exe 93 0.0% P01 C:\WINDOWS\RTHDCPL.EXE 94 0.0% P01 C:\Program Files\Windows Media Player\wmpnscfg.exe 95 0.0% P01 C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe 96 0.0% P01 C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe 97 0.0% P01 C:\Windows\system32\wbem\unsecapp.exe 98 0.0% P01 C:\Program Files\Microsoft IntelliPoint\ipoint.exe 99 0.0% P01 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe 100 0.0% P01 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\mom.exe 101 0.0% P01 C:\Program Files\Windows Media Player\WMPNetwk.exe 102 0.0% P01 C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe 103 0.0% P01 C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe 104 0.0% P01 C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe 105 0.0% P01 C:\WINDOWS\System32\vssvc.exe 106 0.0% P01 C:\WINDOWS\System32\msdtc.exe 107 0.0% P01 C:\Program Files\Multimedia Card Reader\shwicon2k.exe 108 0.0% P01 C:\Program Files\Microsoft Office\Office10\msoffice.exe 109 0.0% P01 C:\Program Files\a-squared Anti-Malware\a2guard.exe 110 0.0% P01 C:\PROGRA~1\PHILIP~1\VProperty.exe 111 0.0% P01 C:\Program Files\a-squared Anti-Dialer\a2adguard.exe 112 0.0% P01 C:\Program Files\a-squared Anti-Malware\a2service.exe 113 0.0% P01 C:\Program Files\Trend Micro\HijackThis\HijackThis.exe 114 0.0% P01 C:\Program Files\Google\Update\GoogleUpdate.exe 115 0.0% P01 C:\Program Files\Thoosje Vista Sidebar\Thoosje Vista Sidebar.exe 116 0.0% P01 C:\Program Files\a-squared Anti-Dialer\a2service.exe 117 0.0% P01 C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe 118 0.0% P01 C:\Program Files\Glary Utilities\Integrator.exe 119 0.0% P01 C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe 120 0.0% P01 C:\Program Files\Java\jre6\bin\jqs.exe 121 0.0% P01 C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe 122 0.0% R0 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 123 0.0% R0 HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens 124 0.0% R0 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank 125 0.0% R1 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 126 0.0% R1 HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 127 0.0% R1 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 128 0.0% R1 HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local Explanation of the codes R - Registry, StartPage/SearchPage changes •R0 - Changed registry value •R1 - Created registry value •R2 - Created registry key •R3 - Created extra registry value where only one should be F - IniFiles, autoloading entries •F0 - Changed inifile value •F1 - Created inifile value •F2 - Changed inifile value, mapped to Registry •F3 - Created inifile value, mapped to Registry N - Netscape/Mozilla StartPage/SearchPage changes •N1 - Change in prefs.js of Netscape 4.x •N2 - Change in prefs.js of Netscape 6 •N3 - Change in prefs.js of Netscape 7 •N4 - Change in prefs.js of Mozilla O - Other, several sections which represent: •O1 - Hijack of auto.search.msn.com with Hosts file •O2 - Enumeration of existing MSIE BHO's •O3 - Enumeration of existing MSIE toolbars •O4 - Enumeration of suspicious autoloading Registry entries •O5 - Blocking of loading Internet Options in Control Panel •O6 - Disabling of 'Internet Options' Main tab with Policies •O7 - Disabling of Regedit with Policies •O8 - Extra MSIE context menu items •O9 - Extra 'Tools' menuitems and buttons •O10 - Breaking of Internet access by New.Net or WebHancer •O11 - Extra options in MSIE 'Advanced' settings tab •O12 - MSIE plugins for file extensions or MIME types •O13 - Hijack of default URL prefixes •O14 - Changing of IERESET.INF •O15 - Trusted Zone Autoadd •O16 - Download Program Files item •O17 - Domain hijack •O18 - Enumeration of existing protocols and filters •O19 - User stylesheet hijack •O20 - AppInit_DLLs autorun Registry value, Winlogon Notify Registry keys •O21 - ShellServiceObjectDelayLoad (SSODL) autorun Registry key •O22 - SharedTaskScheduler autorun Registry key •O23 - Enumeration of NT Services •O24 - Enumeration of ActiveX Desktop Components Privacy Policy | About Trend Micro | Contact Us Copyright © 2007 Trend Micro, Inc.