Registre

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Service Agent"=-
"msnmgnr"=-
"System Fetch DLL Runtime"=-
"Windows MSN Live Messanger"=-
"Windows UDP Control Centert"=-
"Windows UDP Control Managerngert"=-


Fichiers / Files

C:\u8i4w9q6b7w2.exe
C:\WINDOWS\winudpmgr.exe
C:\WINDOWS\system32\wplayer.exe
C:\WINDOWS\livemsngs.exe

Une très forte recrudescence des arnaques sur Internet visant les utilisateurs du logiciel MSN Messenger se faisant de plus en plus pressante il est très important de relayer cette information le plus largement possible.

Lire la suite

Controle, mise à jour, Ajout

%Temp%\361.dat
%winsys%\winupdatr.exe
%winsys%\winupdatr.exe
%winsys%\netbioy.exe
%winsys%\cliconfig.exe
%winsys%\winsyser.exe
%winsys%\msnbooster.exe
%winsys%\microsoft.exe

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{28ABC5C0-4FCB-11CF-AAX5-81CX1C635612}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2bf41072-b2b1-21c1-b5c1-0305f4155515}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
"Windowfdgfds DasdLL Verifier"=-

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windowfdgfds DasdLL Verifier"=-
"NetBioy Client"=-
"Cli Confg"=-
"Windows Update"=-
"MSN Booster"=-
"Microsoft Information Check"=-

controle, Mise à jour, Ajout

%winsys%\rhdsa.exe
%winsys%\msese.exe
%winsys%\mssee.exe
%winsys%\wafps.exe
%winsys%\wagfxds.exe
%winsys%\wclis.exe
%winsys%\msnapp.exe
%winsys%\msnstartup.exe
%winsys%\wssl.exe


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Csrss Host"=-
"Remote Heacle Deamon Security Audit"=-
"Microsoft Exchange Server Resource"=-
"Microsoft Service Evaluator Engin"=-
"Windows Advance Firewall Protection Service"=-
"Windows Advanced GFX Devolping Software"=-
"Windows Client Login Identafacation System"=-
"MSN Application"=-
"MSN Startup"=-
"Windows Shutdown Service Launcher"=-
"User Login Function Service"=-
"System"=-
"Microsoft AntiVirus User Service"=-
"Terminal Execution Exchange Deamon Service"=-
"Windows Recovery Service Manager"=-
"MSN SHARE"=-
"Ci Svr"=-

Controle, Mise à jour

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"scrss"=-
"DDE Sharer"=-
"Defrag FAT32"=-
"Logon Agent"=-
"MNM Srv"=-
"Modifiet Amateur"=-
"service.exe"=-
"Win Updates"=-
"Windows Updates"=-
"WinLiveMessanger"=-
"Windows Temperate Services"=-


[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Carlson]
[-HKEY_CURRENT_USER\Software\Carlson\Connection\carlton]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Carlson]
[-HKEY_CURRENT_USER\Software\Carlson\Connection\carlton]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\delsim]
[-HKEY_CURRENT_USER\Software\Delsim]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9708507C-FEAB-B55C-E0FF-9B4E39378EE8}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Bifrost]
[-HKEY_CURRENT_USER\Software\Bifrost]


%AppData%\addon.dat
%Windir%\Wild_Party_jpg.zip
%Windir%\Bifrost\klog.dat
%Windir%\Bifrost\serveur.exe
%ProgramFiles%\Common Files\delsim\del.exe
%systemdrive%\wen6j4d5.exe
%systemdrive%\9w3l6u1g1.exe
%systemdrive%\v1r6j8q4s5j5.exe
%systemdrive%\o5w1b5a9j5p4.exe
%systemdrive%\x9e7f6y6j2k7.exe
%systemdrive%\a5c3x8p2r8t8.exe
%systemdrive%\m9r2h2z5l7v8.exe
%systemdrive%\d5t6jb6k8f8.exe
%systemdrive%\xx7c7c3n5d8d.exe
%systemdrive%\7c3n5d8d.exe
%systemdrive%\c3n5d8d.exe
%TEMP%\New-Photo-*.zip
%winsys%\Microsoft\svchost.exe
%winsys%\ddesharer.exe
%winsys%\dfrgfat32.exe
%winsys%\logonagt.exe
%winsys%\mnmsrv.exe
%winsys%\msl.exe
%winsys%\service.exe