page de garde IE

[gayboyfr]

je t contacté par icq, c bien dommage que tu sois au québec... tu viens à paris un jour ?

[babyjane]

sa me surprendrais beaucoup , as tu recu le ti message , mon icq es ouvert la

[gayboyfr]

oui, merci bcp

[Phoenix]

Hello,

 

Babyjane, peut tu m'expliquer !!!!

 

This worked for me:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs

 

You have to remove this key. The value of this key may look blank for you, but it is not. They hide the value so you can't see it. This registry key tells Windows to load the trojan DLL every time ANY application is run giving it complete control to do whatever it wants. So you need to remove it so that the trojan DLL cannot load and keep re-infecting your pc.

 

The way to remove the registry key is not obvious. If you just delete it from regedit, since the trojan DLL is loaded, it will re-add it right back. (Try it. Delete the AppInit_DLLs registry key and hit F5. Notice that it's added right back by the trojan). So what you have to do is the following which worked for me.

 

1. Rename the HLM\Software\Microsoft\Windows NT\CurrentVersion\Windows folder to Windows2.

2. Now delete the AppInit_DLLs key under the Windows2 folder.

3. Hit F5 and notice that AppInit_DLLs doesn't come back.

4. Rename the Windows2 folder back to Windows.

 

Now that AppInit_DLLs is gone, run the latest Adaware 6 to remove the trojan for good. Reboot your machine. Check the registry and make sure AppInit_DLLs is still gone. Your computer should be free of this for good now."

 

Car moi comprend rien de cette langue !!!!!!!!!!!

 

Merci si tu peu m'expliquer car je" n'arrive opas a virer cette foutu page de démarage, @ +++

[Laubean]

Regarde ici, sujet déjà traité :

http://forum.zebulon.fr/index.php?showtopi...2&hl=aboutblank

http://forum.zebulon.fr/index.php?showtopi...8&hl=aboutblank

http://forum.zebulon.fr/index.php?showtopi...7&hl=aboutblank