Une nouvelle version de SmitfraudFix vient de voir le jour. En effet, le programme de S!Ri a subit trois mises à jour coup sur coup. Rappelons que ce petit utilitaire corrige les infections de type Desktop Hijack (détournement du bureau).
Voici les différents changements apportés à la version 2.195 :
Version 2.195 (June 09, 2007)
Update: Generic Renos Fix 1.14
%SYSTEM%yesgnhr.dll
[HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{6f396a67-f473-48c9-9950-636ce17e584e}]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerSharedTaskScheduler]
“{6f396a67-f473-48c9-9950-636ce17e584e}”=”hellenophile”
%SYSTEM%xpuupdate.exe
O3 – Toolbar: Protection Bar – {DF4E7A0C-E233-4906-B4C1-A404356541FF} – C:Program FilesVideo ActiveX Accessiesbpl.dll
[-HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{DF4E7A0C-E233-4906-B4C1-A404356541FF}]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
“{DF4E7A0C-E233-4906-B4C1-A404356541FF}”=-
%WINDOWS%wincom27.dll
%SYSTEM%ext32inc.dll
Version 2.194 (June 09, 2007)
%SYSTEM%gsrnxgh.dll
[HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{c704547b-26c0-4222-a034-81653c07b494}]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerSharedTaskScheduler]
“{c704547b-26c0-4222-a034-81653c07b494}”=”debugs”
Version 2.193 (June 08, 2007)
%SYSTEM%ckimzeb.dll
[HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{5bf53d50-b1ec-47b6-a00a-0bd32baeb7ef}]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerSharedTaskScheduler]
“{5bf53d50-b1ec-47b6-a00a-0bd32baeb7ef}”=”damkjernite”
%USERPROFILE%Application DataAdProtect NoSpam
%USERPROFILE%Application DataMicrosoftInternet ExplorerQuick LaunchContraVirus 2.0.lnk
%STARTMENU%ContraVirus 2.0.lnk
%STARTMENU%ProgramsContraVirus
%DESKTOP%ContraVirus 2.0.lnk
%PROGRAMFILES%ContraVirus
%SYSTEM%xpuupdate.exe
[-HKEY_LOCAL_MACHINESOFTWAREClassesAppIDad-protect.EXE] (Already Removed)
[-HKEY_LOCAL_MACHINESOFTWAREClassesAppIDIEControl.DLL] (Already Removed)
[-HKEY_LOCAL_MACHINESOFTWAREClassesAppIDspamdet.DLL]
[-HKEY_LOCAL_MACHINESOFTWAREClassesAppIDToolBarNotifier.EXE]
[-HKEY_LOCAL_MACHINESOFTWAREClassesAppID{6B677F1F-F86C-4757-BF24-7D865EF20639}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesAppID{7C11C36C-2AE0-4489-9B09-A6129139D52D}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesAppID{9DA1990B-9BCA-4c80-AEFB-11A40FA849F9}] (Already Removed)
[-HKEY_LOCAL_MACHINESOFTWAREClassesAppID{C628512D-A058-4BD4-B47B-B036F45FA02B}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{1BE8C6A5-A75F-4e33-89C3-18CC58A0B952}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{61877300-54DB-4746-BA42-03E03A2B269C}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{BBBD3E11-D201-46C9-8471-091D33159287}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{BFCBB188-18E3-1DEB-59D5-BACE1CE655A4}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{D2C1986A-FBEC-4472-AABF-6D42F08DBC8E}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{D7ABE914-B8CF-4602-9145-6BDAAEDA21AA}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{DBE5BEE8-F032-11DB-826A-C4BB56D89593}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{E6B4AB50-F423-4EE6-9839-B35DCFCDFA49}] (Already Removed)
[-HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{EA038DDD-0FE0-41f5-BA60-FC3660529E71}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesInterface{214345B8-BB69-498D-A168-29F58F15D806}] (Already Removed)
[-HKEY_LOCAL_MACHINESOFTWAREClassesInterface{61877300-54DB-4746-BA42-03E03A2B269C}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesInterface{63321A5C-D8FE-432C-8D2F-61C0FC264320}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesInterface{D2C1986A-FBEC-4472-AABF-6D42F08DBC8E}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesInterface{E6B4AB50-F423-4EE6-9839-B35DCFCDFA49}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesInterface{F51BC478-D997-4C56-988D-79D9EEAAD1EC}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesInterface{F82FD7D4-2EC8-40B3-A141-DE051C98DCE9}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesInterface{FD4DCB8B-C33A-4E70-A351-6FAB7E1071A4}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesTypeLib{283ED043-D403-4808-BF28-FCDE29DCF1FB}] (Already Removed)
[-HKEY_LOCAL_MACHINESOFTWAREClassesTypeLib{2C02E5FC-7FE3-4122-911F-829314FE9BBC}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesTypeLib{32BD20FD-41FD-47FB-9BC9-28DCBD7D55D7}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesTypeLib{6B677F1F-F86C-4757-BF24-7D865EF20639}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesTypeLib{DFCDA823-80C5-4F55-B328-7EFD4AFBD9A0}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesAd-Protect.Addin]
[-HKEY_LOCAL_MACHINESOFTWAREClassesAd-Protect.Addin.1]
[-HKEY_LOCAL_MACHINESOFTWAREClassesAd-Protect.Server]
[-HKEY_LOCAL_MACHINESOFTWAREClassesAd-Protect.Server.1]
[-HKEY_LOCAL_MACHINESOFTWAREClassesIEControl.IEExtension] (Already Removed)
[-HKEY_LOCAL_MACHINESOFTWAREClassesIEControl.IEExtension.1] (Already Removed)
[-HKEY_LOCAL_MACHINESOFTWAREClassesSCToolBand.SCToolBandObj]
[-HKEY_LOCAL_MACHINESOFTWAREClassesSCToolBand.SCToolBandObj.1]
[-HKEY_LOCAL_MACHINESOFTWAREClassesspamdet.SpamDetector]
[-HKEY_LOCAL_MACHINESOFTWAREClassesspamdet.SpamDetector.1]
[-HKEY_LOCAL_MACHINESOFTWAREClassesToolBarNotifier.Notifier]
[-HKEY_LOCAL_MACHINESOFTWAREClassesToolBarNotifier.Notifier.1]
[-HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionApp PathsContraVirus.exe]
[-HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{DBE5BEE8-F032-11DB-826A-C4BB56D89593}]
[-HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallContraVirus] (C:Program FilesContraVirusuninst.exe)
[-HKEY_LOCAL_MACHINESOFTWAREContraVirus]
[-HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionShell ExtensionsAdLoader]
[-HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionShell ExtensionsTrace7]
[-HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionShell1das]
[-HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionShelldnl7]
[-HKEY_CURRENT_USERSoftwareMicrosoftOfficeOutlookAddinsAd-Protect.Addin.1]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
“{EA038DDD-0FE0-41f5-BA60-FC3660529E71}”=-
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
“ContraVirus”=-
“Windows Updater Servc”=-
%USERPROFILE%Application DataMicrosoftInternet ExplorerQuick LaunchSpyCrush 3.1.lnk
%STARTMENU%SpyCrush 3.1.lnk
%STARTMENU%ProgramsSpyCrush (Already Removed)
%DESKTOP%SpyCrush 3.1.lnk
%PROGRAMFILES%SpyCrush 3.1
[-HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{3820350F-5092-2ADD-8A4C-8DE2C609FAE5}] (Already Removed)
[-HKEY_LOCAL_MACHINESOFTWAREClassesInterface{14D6736F-9918-46D2-A96B-75713158DC9C}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesInterface{33220D50-BB09-4F83-ABC2-E94011D088B5}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesInterface{35A2B3DD-3B38-4E9E-A547-6E459A6E91AA}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesInterface{472B58B5-B00C-4DC5-83ED-FE8185FFBCBE}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesInterface{4CB98812-6071-4D01-BC87-7E2CECB9C248}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesInterface{4DBE72DB-B023-47C2-AB01-D2323AADFA5A}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesInterface{60F366A1-5D3B-4D3E-ACE3-CB8C25474FF6}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesInterface{754E70B2-E0DF-45CE-9429-CCFE0DD7AEA5}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesInterface{7583195C-5F83-4AD6-82D1-3C2F553F93E2}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesInterface{77CAC444-50CC-4E1C-955C-55E325360864}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesInterface{7DF4D9FC-1B6F-4093-8BC7-6A0F750B59D8}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesInterface{91EF3AD8-9373-4B3F-AAF5-2984E3E34385}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesInterface{EAD385C7-7B45-43FC-BF4E-EABB990337FF}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesInterface{EC2A49C8-5970-4DA5-B784-32CD8617B6B8}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesInterface{F3FAE2B3-0961-40A7-94C7-67A28967BE58}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesInterface{FB65F713-07A1-404D-889A-5789E383AB02}]
[-HKEY_LOCAL_MACHINESOFTWAREClassesTypeLib{3C4CCBFA-2ADA-43F3-9A40-F729DD31EC5A}]
[-HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionApp PathsSpyCrush 3.1.exe 3.1]
[-HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallSpyCrush 3.1] (C:Program FilesSpyCrush 3.1uninst.exe)
[-HKEY_LOCAL_MACHINESOFTWARESpyCrush 3.1]
[-HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
“SpyCrush 3.1″=-
– Télécharger SmitfraudFix 2.195
– Consulter le tutorial sur SmitfraudFix
Dernière mise à jour le 20 août 2018