virus msn

Question

Bonjour,

il semblerait que quand je ne suis pas connecté un virus envoie à mes contacts d'MSN un lien sur lequel cliquer

pouvez vous me dire de quoi il s'agit ( c'est juste un lien pas un album Zip ) et surtout comment le supprimer?

Merci d'avance de votre aide

didi00704 · Answer

installation: spy boat search and destroy et trojan remover... tu a un anti virus ?? Ce virus est très fréquent...

gregoops · Answer

ha j'ai oublié de prevenir que je n'y comprend pas grand chose en informatique lol

il semble que cela soit tres frequent puisqu au moins 5 de mes contacts l on aussi mais je ne clique jamais sur le lien

sinon pr vous répondre j'ai : CCCLEANER ; MALWAREBYTES et ANTIVIR PE CLASSIC

didi00704 · Answer

lance une recherche...  et sur google tape télécharger  trojan remover et spy boat sarch and destroy

gregoops · Answer

ok 
il n y a pas de risque d interaction entre tout ces antivirus?

une fois telecharges je dois faire quoi?

MERCI

didi00704 · Answer

pour spy boat tu clique sur vérifier tout et pour trojan clique sur scan et non normalement aucun problèmes

gregoops · Answer

voila deja la copie du scan de TROJAN je vais maintenant m occuper de l autre logiciel...
***** NORMAL SCAN FOR ACTIVE MALWARE *****
Trojan Remover Ver 6.7.5.2559. For information, email support@simplysup1.com
[Unregistered version]
Scan started at: 18:27:27 05 janv. 2009
Using Database v7251
Operating System:  Windows XP SP3 [Windows XP Professional Service Pack 3 (Build 2600)]
File System:       FAT32
Data directory:     D:\Documents and Settings\gmajone\Application Data\Simply Super Software\Trojan Remover\
Database directory: C:\Program Files\Trojan Remover\
Logfile directory:  D:\Documents and Settings\gmajone\Mes documents\Simply Super Software\Trojan Remover Logfiles\
Program directory:  C:\Program Files\Trojan Remover\
Running with Administrator privileges

************************************************************

************************************************************
18:27:27: Scanning ----------WIN.INI-----------
WIN.INI found in C:\WINDOWS

************************************************************
18:27:27: Scanning --------SYSTEM.INI---------
SYSTEM.INI found in C:\WINDOWS

************************************************************
18:27:27: ----- SCANNING FOR ROOTKIT SERVICES -----
No hidden Services were detected.

************************************************************
18:27:28: Scanning -----WINDOWS REGISTRY-----
--------------------
Checking HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WinLogon
--------------------
Checking HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WinLogon
This key's "Shell" value calls the following program(s):
File: Explorer.exe
C:\WINDOWS\Explorer.exe
1037824 bytes
Created:  05/08/2004
Modified: 14/04/2008
Company:  Microsoft Corporation
----------
This key's "Userinit" value calls the following program(s):
File: C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\system32\userinit.exe
26624 bytes
Created:  05/08/2004
Modified: 14/04/2008
Company:  Microsoft Corporation
----------
This key's "System" value appears to be blank
----------
This key's "UIHost" value calls the following program:
File: logonui.exe
C:\WINDOWS\system32\logonui.exe
515584 bytes
Created:  05/08/2004
Modified: 14/04/2008
Company:  Microsoft Corporation
----------
--------------------
Checking HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
--------------------
Checking HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
--------------------
Checking HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Value Name: QuickTime Task
Value Data: "C:\Program Files\QuickTime\qttask.exe" -atboottime
C:\Program Files\QuickTime\qttask.exe
413696 bytes
Created:  27/05/2008
Modified: 27/05/2008
Company:  Apple Inc.
--------------------
Value Name: SPC230NC_Monitor
Value Data: C:\WINDOWS\Philips\SPC230NC\Monitor.exe
C:\WINDOWS\Philips\SPC230NC\Monitor.exe
323584 bytes
Created:  23/10/2008
Modified: 10/12/2007
Company:  PixArt Imaging Incorporation
--------------------
Value Name: SPC_Monitor
Value Data: C:\WINDOWS\Philips\SPC230NC\Monitor.exe
C:\WINDOWS\Philips\SPC230NC\Monitor.exe
323584 bytes
Created:  23/10/2008
Modified: 10/12/2007
Company:  PixArt Imaging Incorporation
--------------------
Value Name: SunJavaUpdateSched
Value Data: "C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe"
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
36975 bytes
Created:  06/03/2006
Modified: 10/11/2005
Company:  Sun Microsystems, Inc.
--------------------
Value Name: TrojanScanner
Value Data: C:\Program Files\Trojan Remover\Trjscan.exe /boot
C:\Program Files\Trojan Remover\Trjscan.exe
1231752 bytes
Created:  05/01/2009
Modified: 01/01/2009
Company:  Simply Super Software
--------------------
--------------------
Checking HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
This Registry Key appears to be empty
--------------------
Checking HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
This Registry Key appears to be empty
--------------------
Checking HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
This Registry Key appears to be empty
--------------------
Checking HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
This Registry Key appears to be empty
--------------------
Checking HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Value Name: msnmsgr
Value Data: "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [file not found to scan]
--------------------
Value Name: PanelApp
Value Data: D:\Documents and Settings\gmajone\Local Settings\Application Data\Votre Opinion\PanelApp\PanelApp.exe
D:\Documents and Settings\gmajone\Local Settings\Application Data\Votre Opinion\PanelApp\PanelApp.exe
31232 bytes
Created:  03/01/2007
Modified: 03/01/2007
Company:  [no info]
--------------------
Value Name: ctfmon.exe
Value Data: C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\ctfmon.exe
15360 bytes
Created:  05/08/2004
Modified: 14/04/2008
Company:  Microsoft Corporation
--------------------
--------------------
Checking HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce
This Registry Key appears to be empty
--------------------
Checking HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices
This Registry Key appears to be empty
--------------------
Checking HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
This Registry Key appears to be empty

************************************************************
18:27:30: Scanning -----SHELLEXECUTEHOOKS-----
ValueName: {AEB6717E-7E19-11d0-97EE-00C04FD91972}
File:      shell32.dll - this file is expected and has been left in place
----------

************************************************************
18:27:30: Scanning -----HIDDEN REGISTRY ENTRIES-----
Taskdir check completed
----------
No Hidden File-loading Registry Entries found
----------

************************************************************
18:27:30: Scanning -----ACTIVE SCREENSAVER-----
ScreenSaver: C:\WINDOWS\system32\logon.scr
C:\WINDOWS\system32\logon.scr
221696 bytes
Created:  05/08/2004
Modified: 14/04/2008
Company:  Microsoft Corporation
--------------------

************************************************************
18:27:30: Scanning ----- REGISTRY ACTIVE SETUP KEYS -----
Key:  {6BF52A52-394A-11d3-B153-00C04F79FAA6}
Path: rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub
C:\WINDOWS\INF\wmp11.inf
2441 bytes
Created:  03/11/2006
Modified: 03/11/2006
Company:  [no info]
----------

************************************************************
18:27:31: Scanning ----- SERVICEDLL REGISTRY KEYS -----
Key: HidServ
%SystemRoot%\System32\hidserv.dll - file is globally excluded (file cannot be found)
--------------------

************************************************************
18:27:34: Scanning ----- SERVICES REGISTRY KEYS -----
Key:       aeaudio
ImagePath: system32\drivers\aeaudio.sys
C:\WINDOWS\system32\drivers\aeaudio.sys
4816 bytes
Created:  13/05/2005
Modified: 01/04/2002
Company:  Andrea Electronics Corporation
----------
Key:       AmdK7
ImagePath: system32\DRIVERS\amdk7.sys
C:\WINDOWS\system32\DRIVERS\amdk7.sys
41856 bytes
Created:  04/08/2004
Modified: 14/04/2008
Company:  Microsoft Corporation
----------
Key:       AntiVirScheduler
ImagePath: "C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe"
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
68865 bytes
Created:  06/10/2008
Modified: 24/10/2008
Company:  Avira GmbH
----------
Key:       AntiVirService
ImagePath: "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe"
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
151297 bytes
Created:  06/10/2008
Modified: 24/10/2008
Company:  Avira GmbH
----------
Key:       Apple Mobile Device
ImagePath: "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe"
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
116040 bytes
Created:  22/07/2008
Modified: 22/07/2008
Company:  Apple Inc.
----------
Key:       atinrvxx
ImagePath: system32\DRIVERS\atinrvxx.sys
C:\WINDOWS\system32\DRIVERS\atinrvxx.sys
104960 bytes
Created:  25/04/2005
Modified: 03/08/2004
Company:  ATI Technologies Inc.
----------
Key:       avgio
ImagePath: \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys
11840 bytes
Created:  06/10/2008
Modified: 27/02/2007
Company:  Avira GmbH
----------
Key:       avgntflt
ImagePath: \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys
52032 bytes
Created:  06/10/2008
Modified: 20/05/2008
Company:  Avira GmbH
----------
Key:       avipbb
ImagePath: system32\DRIVERS\avipbb.sys
C:\WINDOWS\system32\DRIVERS\avipbb.sys
75072 bytes
Created:  06/10/2008
Modified: 26/11/2008
Company:  Avira GmbH
----------
Key:       getPlus(R) Helper
ImagePath: C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
33752 bytes
Created:  23/09/2008
Modified: 29/08/2008
Company:  NOS Microsystems Ltd.
----------
Key:       ialm
ImagePath: system32\DRIVERS\ialmnt5.sys
C:\WINDOWS\system32\DRIVERS\ialmnt5.sys
95579 bytes
Created:  13/05/2005
Modified: 16/12/2003
Company:  Intel Corporation
----------
Key:       ms_mpu401
ImagePath: system32\drivers\msmpu401.sys
C:\WINDOWS\system32\drivers\msmpu401.sys
2944 bytes
Created:  26/01/2005
Modified: 17/08/2001
Company:  Microsoft Corporation
----------
Key:       MVDCODEC
ImagePath: system32\DRIVERS\atinmdxx.sys
C:\WINDOWS\system32\DRIVERS\atinmdxx.sys
13824 bytes
Created:  25/04/2005
Modified: 03/08/2004
Company:  ATI Technologies Inc.
----------
Key:       PAEAFLT.sys
ImagePath: system32\DRIVERS\PAEAFLT.sys
C:\WINDOWS\system32\DRIVERS\PAEAFLT.sys
8576 bytes
Created:  15/09/2008
Modified: 26/09/2007
Company:  PixArt Imaging Incorporation
----------
Key:       PanelSvc
ImagePath: "C:\Program Files\Votre Opinion\PanelApp\PanelSvc.exe"
C:\Program Files\Votre Opinion\PanelApp\PanelSvc.exe
77312 bytes
Created:  17/05/2007
Modified: 17/05/2007
Company:  [no info]
----------
Key:       Pml Driver HPZ12
ImagePath: C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\HPZipm12.exe
C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\HPZipm12.exe
65536 bytes
Created:  16/05/2005
Modified: 27/12/2002
Company:  HP
----------
Key:       smwdm
ImagePath: system32\drivers\smwdm.sys
C:\WINDOWS\system32\drivers\smwdm.sys
578304 bytes
Created:  13/05/2005
Modified: 29/08/2003
Company:  Analog Devices, Inc.
----------
Key:       SoundMAX Agent Service (default)
ImagePath: C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
45056 bytes
Created:  13/05/2005
Modified: 20/09/2002
Company:  Analog Devices, Inc.
----------
Key:       SPC230NC
ImagePath: system32\DRIVERS\SPC230NC.SYS
C:\WINDOWS\system32\DRIVERS\SPC230NC.SYS
461056 bytes
Created:  15/09/2008
Modified: 31/12/2007
Company:  PixArt Imaging Inc.
----------
Key:       ssmdrv
ImagePath: system32\DRIVERS\ssmdrv.sys
C:\WINDOWS\system32\DRIVERS\ssmdrv.sys
28352 bytes
Created:  06/10/2008
Modified: 01/03/2007
Company:  Avira GmbH
----------
Key:       SwPrv
ImagePath: C:\WINDOWS\system32\dllhost.exe /Processid:{4293A321-04EF-4F58-AB6F-7E9F0462903E}
C:\WINDOWS\system32\dllhost.exe 
5120 bytes
Created:  05/08/2004
Modified: 14/04/2008
Company:  Microsoft Corporation
----------
Key:       usnjsvc
ImagePath: "C:\Program Files\MSN Messenger\usnsvc.exe"
C:\Program Files\MSN Messenger\usnsvc.exe
97136 bytes
Created:  19/01/2007
Modified: 19/01/2007
Company:  Microsoft Corporation
----------
Key:       viaagp
ImagePath: system32\DRIVERS\viaagp.sys
C:\WINDOWS\system32\DRIVERS\viaagp.sys
42240 bytes
Created:  25/04/2005
Modified: 13/04/2008
Company:  Microsoft Corporation
----------
Key:       VIAudio
ImagePath: system32\drivers\ac97via.sys
C:\WINDOWS\system32\drivers\ac97via.sys
84480 bytes
Created:  25/04/2005
Modified: 03/08/2004
Company:  VIA Technologies, Inc.
----------
Key:       {6080A529-897E-4629-A488-ABA0C29B635E}
ImagePath: system32\drivers\ialmsbw.sys
C:\WINDOWS\system32\drivers\ialmsbw.sys
122942 bytes
Created:  13/05/2005
Modified: 16/12/2003
Company:  Intel Corporation
----------
Key:       {D31A0762-0CEB-444e-ACFF-B049A1F6FE91}
ImagePath: system32\drivers\ialmkchw.sys
C:\WINDOWS\system32\drivers\ialmkchw.sys
99002 bytes
Created:  13/05/2005
Modified: 16/12/2003
Company:  Intel Corporation
----------

************************************************************
18:27:44: Scanning -----VXD ENTRIES-----

************************************************************
18:27:44: Scanning ----- WINLOGON\NOTIFY DLLS -----
Key    : igfxcui
DLLName: igfxsrvc.dll
C:\WINDOWS\system32\igfxsrvc.dll
323584 bytes
Created:  13/05/2005
Modified: 14/12/2003
Company:  Intel Corporation
----------

************************************************************
18:27:45: Scanning ----- CONTEXTMENUHANDLERS -----
Key:   7-Zip
CLSID: {23170F69-40C1-278A-1000-000100020000}
Path:  C:\Program Files\7-Zip\7-zipn.dll
C:\Program Files\7-Zip\7-zipn.dll
114176 bytes
Created:  16/05/2005
Modified: 11/12/2003
Company:  Igor Pavlov
----------
Key:   Shell Extension for Malware scanning
CLSID: {45AC2688-0253-4ED8-97DE-B5370FA7D48A}
Path:  C:\Program Files\Avira\AntiVir PersonalEdition Classic\shlext.dll
C:\Program Files\Avira\AntiVir PersonalEdition Classic\shlext.dll
65793 bytes
Created:  06/10/2008
Modified: 12/06/2008
Company:  Avira GmbH
----------

************************************************************
18:27:45: Scanning ----- FOLDER\COLUMNHANDLERS -----

************************************************************
18:27:46: Scanning ----- BROWSER HELPER OBJECTS -----
Key: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
BHO: C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
184423 bytes
Created:  10/11/2005
Modified: 10/11/2005
Company:  Sun Microsystems, Inc.
----------
Key: {9030D464-4C02-4ABF-8ECC-5164760863C6}
BHO: C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
322368 bytes
Created:  31/08/2006
Modified: 31/08/2006
Company:  Microsoft Corporation
----------

************************************************************
18:27:46: Scanning ----- SHELLSERVICEOBJECTS -----

************************************************************
18:27:46: Scanning ----- SHAREDTASKSCHEDULER ENTRIES -----

************************************************************
18:27:46: Scanning ----- IMAGEFILE DEBUGGERS -----
No "Debugger" entries found.

************************************************************
18:27:46: Scanning ----- APPINIT_DLLS -----
The AppInit_DLLs value is blank or does not exist

************************************************************
18:27:47: Scanning ----- SECURITY PROVIDER DLLS -----

************************************************************
18:27:47: Scanning ------ USER STARTUP GROUPS ------
Checking Startup Group for All Users
[C:\WINDOWS\Profiles\All Users\Start Menu\Programs\StartUp]
No Startup files for All Users were located to check

************************************************************
18:27:47: Scanning ------ COMMON STARTUP GROUP ------
[D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage]
The Common Startup Group attempts to load the following file(s) at boot time:
D:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\desktop.ini
-HS- 84 bytes
Created:  25/01/2005
Modified: 26/01/2005
Company:  [no info]
--------------------
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
29696 bytes
Created:  23/09/2005
Modified: 23/09/2005
Company:  Adobe Systems Incorporated
Lancement rapide d'Adobe Reader.lnk - links to C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
--------------------
C:\Program Files\Philips\Philips SPC230NC Webcam\TrayMin230.exe
241664 bytes
Created:  23/10/2008
Modified: 14/12/2007
Company:  
TrayMin230.lnk - links to C:\Program Files\Philips\Philips SPC230NC Webcam\TrayMin230.exe
--------------------

************************************************************
No User Startup Groups were located to check

************************************************************
18:27:48: Scanning ----- SCHEDULED TASKS -----
Taskname:      AppleSoftwareUpdate.job
File:          C:\Program Files\Apple Software Update\SoftwareUpdate.exe
C:\Program Files\Apple Software Update\SoftwareUpdate.exe
566592 bytes
Created:  11/04/2008
Modified: 11/04/2008
Company:  Apple Inc.
Parameters:    -task
Next Run Time: 12/01/2009 07:00:00
Status:        La tâche n'a pas encore été exécutée
Creator:       SYSTEM
Comments:      [blank]
----------

************************************************************
18:27:48: Scanning ----- SHELLICONOVERLAYIDENTIFIERS -----

************************************************************
18:27:48: ----- ADDITIONAL CHECKS -----
PE386 rootkit checks completed
----------
Winlogon registry rootkit checks completed
----------
Heuristic checks for hidden files/drivers completed
----------
Layered Service Provider entries checks completed
----------
Windows Explorer Policies checks completed
----------
Desktop Wallpaper: D:\Documents and Settings\gmajone\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
D:\Documents and Settings\gmajone\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
376910 bytes
Created:  15/12/2005
Modified: 12/12/2008
Company:  [no info]
----------
Web Desktop Wallpaper: %USERPROFILE%\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
D:\Documents and Settings\gmajone\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
376910 bytes
Created:  15/12/2005
Modified: 12/12/2008
Company:  [no info]
----------
Checking Drivers32 entries:
Value Name: MIDI3
File: SYNCOR11.DLL
C:\WINDOWS\system32\SYNCOR11.DLL
40820 bytes
Created:  13/05/2005
Modified: 06/11/2002
Company:  SoundMAX
----------
--------------------
DNS Server information:
Rogue DNS NameServers:
Interface:   Intel(R) PRO/100 VE Network Connection
NameServers: 10.34.251.2,195.13.32.2,195.13.34.35,62.39.83.4
Checks for rogue DNS NameServers completed
----------
Additional checks completed

************************************************************
18:27:49: Scanning ----- RUNNING PROCESSES -----

C:\WINDOWS\System32\smss.exe
--------------------
C:\WINDOWS\system32\csrss.exe
--------------------
C:\WINDOWS\system32\winlogon.exe
--------------------
C:\WINDOWS\system32\services.exe
--------------------
C:\WINDOWS\system32\lsass.exe
--------------------
C:\WINDOWS\system32\svchost.exe
--------------------
C:\WINDOWS\system32\svchost.exe - file already scanned
--------------------
C:\WINDOWS\System32\svchost.exe - file already scanned
--------------------
C:\WINDOWS\system32\svchost.exe - file already scanned
--------------------
C:\WINDOWS\system32\svchost.exe - file already scanned
--------------------
C:\WINDOWS\system32\spoolsv.exe
--------------------
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe - file already scanned
--------------------
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe - file already scanned
--------------------
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe - file already scanned
--------------------
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe - file already scanned
--------------------
C:\WINDOWS\system32\svchost.exe - file already scanned
--------------------
C:\WINDOWS\Explorer.EXE - file already scanned
--------------------
C:\WINDOWS\System32\alg.exe
--------------------
C:\WINDOWS\Philips\SPC230NC\Monitor.exe - file already scanned
--------------------
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe - file already scanned
--------------------
D:\Documents and Settings\gmajone\Local Settings\Application Data\Votre Opinion\PanelApp\PanelApp.exe - file already scanned
--------------------
C:\WINDOWS\system32\ctfmon.exe - file already scanned
--------------------
C:\WINDOWS\system32\wbem\wmiprvse.exe
--------------------
C:\Program Files\MSN Messenger\msnmsgr.exe
--------------------
C:\WINDOWS\system32\wuauclt.exe
--------------------
C:\Program Files\Spark\Spark.exe
--------------------
C:\Program Files\Internet Explorer\IEXPLORE.EXE
--------------------
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
--------------------
C:\PROGRA~1\MICROS~2\Office10\OUTLOOK.EXE
--------------------
C:\Program Files\Messenger\msmsgs.exe
--------------------
C:\Program Files\Microsoft Office\Office10\WINWORD.EXE
--------------------
C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
--------------------
C:\WINDOWS\system32\mstsc.exe
--------------------
D:\Documents and Settings\gmajone\Application Data\Simply Super Software\Trojan Remover\xcy48.exe
FileSize:          2913144
[This is a Trojan Remover component]
--------------------

************************************************************
18:27:54: Checking AUTOEXEC.BAT file
AUTOEXEC.BAT found in C:\
No malicious entries were found in the AUTOEXEC.BAT file

************************************************************
18:27:54: Checking AUTOEXEC.NT file
AUTOEXEC.NT found in C:\WINDOWS\system32
No malicious entries were found in the AUTOEXEC.NT file

************************************************************
18:27:54: Checking HOSTS file
No malicious entries were found in the HOSTS file

************************************************************
------ INTERNET EXPLORER HOME/START/SEARCH SETTINGS ------
HKLM\Software\Microsoft\Internet Explorer\Main\"Start Page":
https://www.msn.com/fr-fr/?ocid=iehp
HKLM\Software\Microsoft\Internet Explorer\Main\"Local Page":
%SystemRoot%\system32\blank.htm
HKLM\Software\Microsoft\Internet Explorer\Main\"Search Page":
https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
HKLM\Software\Microsoft\Internet Explorer\Main\"Default_Page_URL":
https://www.msn.com/fr-fr/?ocid=iehp
HKLM\Software\Microsoft\Internet Explorer\Main\"Default_Search_URL":
https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
HKLM\Software\Microsoft\Internet Explorer\Search\"CustomizeSearch":
https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchcust.htm
HKLM\Software\Microsoft\Internet Explorer\Search\"SearchAssistant":
This value is blank
HKCU\Software\Microsoft\Internet Explorer\Main\"Start Page":
https://www.google.fr/?gws_rd=ssl
HKCU\Software\Microsoft\Internet Explorer\Main\"Local Page":
C:\WINDOWS\system32\blank.htm
HKCU\Software\Microsoft\Internet Explorer\Main\"Search Page":
https://www.google.com/?gws_rd=ssl

************************************************************
=== NO CHANGES HAVE BEEN MADE TO YOUR SYSTEM FILES ===
Scan completed at: 18:27:54 05 janv. 2009
Total Scan time: 00:00:27
************************************************************

didi00704 · Answer

il a rien détecté... mais tu sais si tu a le virus sa veu dire que tu a deja cliquer sur le lien...

gregoops · Answer

bon voila j ai telecharge spybot mais que dois je faire avec?

didi00704 · Answer

clique sur verifier tout

gregoops · Answer

POur l instant il vaccine tout mais c est assez long
une fois que jaurai tout verifier peux tu m dire ce que je devrais faire ( au cas ou on ne serait plus connecte ce soir ;)

merci encore

didi00704 · Answer

bah normalement il va le suprimer mais... ce virsu te fait t'il quelque chose ?? normalement ces virus ouvre et ferme tout le temp tes converssations... est ce le cas ??

gregoops · Answer

non il ne me fait rien du tout

la seule chose c'est qu'il envoie ce lien internet à mes contacts qd je suis hors ligne

didi00704 · Answer

bah alors c'est un virus mineurs ...

gregoops · Answer

alors c'est deja une bonne nouvelle lol

c est trop long je ne peux pas attendre 
je vais le laisser faire sa recherche et reviendrait demain

au cas ou juste si vous pouvez deja me dire quoi faire une fois qu il aura tout verifié

merci

didi00704 · Answer

il te demandera si tu veu suprimer tu dit oui :)

gregoops · Answer

PARFAIT

merci pour tout ces renseignements en totu cas

ps : dois je conserver ces 2 logiciels tt le temps ou dois jeles supprimer?

didi00704 · Answer

comme tu veux il est préférable de les garder et de faire une vérification chaque mois

gregoops · Answer

d accord alors je les garde 

cela fera 4 logiciels a scanner par mois mais ok 

bonne soiree et merci de votre patience

didi00704 · Answer

de rien, je suis la pour sa... bonne soirée

Virus msn

19 réponses

Votre réponse

Discussions similaires

Newsletters