Virus a 360

bonjour,

j'ai installé l'antivirus que vous m'avez conseillé, celui-ci à détecté un virus mais n'a pas détecté le A360, donc pas supprimé, j'ai ensuite fais un scan avec malwar.
par contre, j'ai bien réussi à installer malwarebytes' mais je ne peux faire un scan avec celui-ci, le programme ne peut aboutir

Norman Malware Cleaner
Copyright © 1990 - 2008, Norman ASA. Built 2009/02/06 10:23:47

Norman Scanner Engine Version: 6.00.02
Nvcbin.def Version: 6.00.00, Date: 2009/02/06 10:23:47, Variants: 2728428

Running pre-scan cleanup routine:
Operating System: Microsoft Windows Vista 6.0.6001 Service Pack 1
Logged on user: PC-de-amandarou\amanda rousseau

Set registry value: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLS = "C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL" -> ""

Scan started: 08/02/2009 20:43:54


Scanning running processes and process memory...

Number of processes/threads found: 3584
Number of processes/threads scanned: 3584
Number of processes/threads not scanned: 0
Number of infected processes/threads terminated: 0
Total scanning time: 1m 24s


Scanning file system...

Scanning: C:\*.*

C:\System Volume Information\{0407d077-f354-11dd-8c9e-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{0a34b2f7-f4f4-11dd-8c30-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{21f8fa1c-f604-11dd-bef6-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{222aea1c-ec41-11dd-aab2-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{2de9fa77-ea18-11dd-91d1-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{58fd9f77-ee99-11dd-a755-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{5f734efa-f032-11dd-b5af-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{648794a4-f208-11dd-86f5-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{6d52221c-ee26-11dd-b25c-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{9cdb031d-eb76-11dd-8948-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{a3dd60f6-f41d-11dd-9659-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{abfe1a1c-f14f-11dd-9259-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{abfe1a25-f14f-11dd-9259-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{ac9972f7-eabe-11dd-a845-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{adb6ad50-f123-11dd-acd1-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{ae336d9d-efc3-11dd-93bd-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{b54a9e77-eca2-11dd-9670-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{b723d09e-f5bb-11dd-8314-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{b723d0bc-f5bb-11dd-8314-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{b8784f7b-f5fd-11dd-b4e9-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{b8784f81-f5fd-11dd-b4e9-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{cb42151d-ed13-11dd-b256-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{cb89bca5-f5ff-11dd-9a67-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{cb89bcab-f5ff-11dd-9a67-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{e1b207f6-edd3-11dd-8400-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{f8a13c9d-f298-11dd-af83-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{f91d3676-f1c1-11dd-969d-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\Users\amanda rousseau\SmitfraudFix\VACFix.exe (Infected with W32/Smalldrp.APNN)
Deleted file

C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTDiagLog.etl (Error opening file: Access denied)

C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-Application.etl (Error opening file: Access denied)

C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventlog-Security.etl (Error opening file: Access denied)

C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-System.etl (Error opening file: Access denied)

C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTkerberos.etl (Error opening file: Access denied)

C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTMsMpPsSession.etl (Error opening file: Access denied)

Scanning: D:\*.*


Running post-scan cleanup routine:

Number of files found: 294306
Number of archives unpacked: 2533
Number of files scanned: 294091
Number of files not scanned: 215
Number of files skipped due to exclude list: 0
Number of infected files found: 1
Number of infected files repaired/deleted: 1
Number of infections removed: 1
Total scanning time: 1h 5m 14s


Norman Malware Cleaner
Copyright © 1990 - 2008, Norman ASA. Built 2009/02/06 10:23:47

Norman Scanner Engine Version: 6.00.02
Nvcbin.def Version: 6.00.00, Date: 2009/02/06 10:23:47, Variants: 2728428

Running pre-scan cleanup routine:
Operating System: Microsoft Windows Vista 6.0.6001 Service Pack 1
Logged on user: PC-de-amandarou\amanda rousseau


Scan started: 08/02/2009 22:51:35


Scanning running processes and process memory...

Number of processes/threads found: 3385
Number of processes/threads scanned: 3385
Number of processes/threads not scanned: 0
Number of infected processes/threads terminated: 0
Total scanning time: 1m 5s


Scanning file system...

Scanning: C:\*.*

C:\System Volume Information\{0407d077-f354-11dd-8c9e-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{0a34b2f7-f4f4-11dd-8c30-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{21f8fa1c-f604-11dd-bef6-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{222aea1c-ec41-11dd-aab2-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{2de9fa77-ea18-11dd-91d1-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{58fd9f77-ee99-11dd-a755-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{5f734efa-f032-11dd-b5af-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{648794a4-f208-11dd-86f5-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{6d52221c-ee26-11dd-b25c-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{9cdb031d-eb76-11dd-8948-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{a3dd60f6-f41d-11dd-9659-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{abfe1a1c-f14f-11dd-9259-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{abfe1a25-f14f-11dd-9259-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{ac9972f7-eabe-11dd-a845-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{adb6ad50-f123-11dd-acd1-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{ae336d9d-efc3-11dd-93bd-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{b54a9e77-eca2-11dd-9670-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{b723d09e-f5bb-11dd-8314-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{b723d0bc-f5bb-11dd-8314-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{b8784f7b-f5fd-11dd-b4e9-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{b8784f81-f5fd-11dd-b4e9-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{cb42151d-ed13-11dd-b256-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{cb89bca5-f5ff-11dd-9a67-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{cb89bcab-f5ff-11dd-9a67-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{e1b207f6-edd3-11dd-8400-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{f8a13c9d-f298-11dd-af83-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\System Volume Information\{f91d3676-f1c1-11dd-969d-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTDiagLog.etl (Error opening file: Access denied)

C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-Application.etl (Error opening file: Access denied)

C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventlog-Security.etl (Error opening file: Access denied)

C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-System.etl (Error opening file: Access denied)

C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTkerberos.etl (Error opening file: Access denied)

C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTMsMpPsSession.etl (Error opening file: Access denied)

Scanning: D:\*.*

Scanning: c:\System Volume Information\*.*

c:\System Volume Information\{0407d077-f354-11dd-8c9e-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

c:\System Volume Information\{0a34b2f7-f4f4-11dd-8c30-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

c:\System Volume Information\{21f8fa1c-f604-11dd-bef6-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

c:\System Volume Information\{222aea1c-ec41-11dd-aab2-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

c:\System Volume Information\{2de9fa77-ea18-11dd-91d1-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

c:\System Volume Information\{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

c:\System Volume Information\{58fd9f77-ee99-11dd-a755-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

c:\System Volume Information\{5f734efa-f032-11dd-b5af-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

c:\System Volume Information\{648794a4-f208-11dd-86f5-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

c:\System Volume Information\{6d52221c-ee26-11dd-b25c-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

c:\System Volume Information\{9cdb031d-eb76-11dd-8948-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

c:\System Volume Information\{a3dd60f6-f41d-11dd-9659-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

c:\System Volume Information\{abfe1a1c-f14f-11dd-9259-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

c:\System Volume Information\{abfe1a25-f14f-11dd-9259-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

c:\System Volume Information\{ac9972f7-eabe-11dd-a845-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

c:\System Volume Information\{adb6ad50-f123-11dd-acd1-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

c:\System Volume Information\{ae336d9d-efc3-11dd-93bd-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

c:\System Volume Information\{b54a9e77-eca2-11dd-9670-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

c:\System Volume Information\{b723d09e-f5bb-11dd-8314-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

c:\System Volume Information\{b723d0bc-f5bb-11dd-8314-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

c:\System Volume Information\{b8784f7b-f5fd-11dd-b4e9-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

c:\System Volume Information\{b8784f81-f5fd-11dd-b4e9-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

c:\System Volume Information\{cb42151d-ed13-11dd-b256-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

c:\System Volume Information\{cb89bca5-f5ff-11dd-9a67-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

c:\System Volume Information\{cb89bcab-f5ff-11dd-9a67-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

c:\System Volume Information\{e1b207f6-edd3-11dd-8400-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

c:\System Volume Information\{f8a13c9d-f298-11dd-af83-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)

c:\System Volume Information\{f91d3676-f1c1-11dd-969d-001a924cbad5}{3808876b-c176-4e48-b7ae-04046e6cc752} (Error opening file: Access denied)


Running post-scan cleanup routine:

Number of files found: 303835
Number of archives unpacked: 3356
Number of files scanned: 303600
Number of files not scanned: 235
Number of files skipped due to exclude list: 0
Number of infected files found: 0
Number of infected files repaired/deleted: 0
Number of infections removed: 0
Total scanning time: 1h 2m 34s

que puis je faire ?

merci

bonjour,

j'ai tout d'abord était cherché des conseils sur des forums sans m'y inscrire, le seul où je suis enregistré c'est celui-ci comment ca marche.

je crois que j'ai enfin réussi à enlever ce virus, j'ai tout d'abord changer d'anti virus, puis fait un scan comme on me l'a conseillé, puis j'ai télècharger et exécuter l'outil de suppression Norton et depuis plus rien.

encore merci

Malwarebytes' Anti-Malware 1.33
Version de la base de données: 1654
Windows 6.0.6001 Service Pack 1

09/02/2009 10:41:24
mbam-log-2009-02-09 (10-41-20).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 155586
Temps écoulé: 1 hour(s), 9 minute(s), 51 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 2

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\$WINDOWS.~Q\DATA\Users\amanda rousseau\AppData\Local\Temp\uneb.exe (Adware.Eurobarre) -> No action taken.
C:\Program Files\EoRezo (Rogue.Eorezo) -> No action taken.

suite à votre message, voici ce que cela donne



Logfile of random's system information tool 1.05 (written by random/random)
Run by amanda rousseau at 2009-02-09 16:23:58
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
System drive C: has 154 GB (67%) free of 231 GB
Total RAM: 1022 MB (46% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:24:12, on 09/02/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\vVX3000.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\System32\p2phost.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\System32\spool\drivers\w32x86\3\E_FATICAE.EXE
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\MaxiMemo\MaxiMemo.exe
C:\Program Files\MySurvey Messenger\MySurveyMessenger.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Windows\system32\conime.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Windows Mail\WinMail.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10a.exe
C:\Users\amanda rousseau\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SCDB3BLV\RSIT[1].exe
C:\Program Files\Trend Micro\HijackThis\amanda rousseau.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ww17.ads.eorezo.com/cgi-bin/advert/getads.cgi?x_dp_id=18&x_format=redirect
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer optimisé pour MSN
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (file missing)
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [VX3000] C:\Windows\vVX3000.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [CollaborationHost] C:\Windows\system32\p2phost.exe -s
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [EPSON Stylus DX4400 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE /FU "C:\Windows\TEMP\E_S8A9.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background (User 'Default user')
O4 - Startup: MySurvey Messenger.lnk = ?
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: MaxiMemo.lnk = C:\Program Files\MaxiMemo\MaxiMemo.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~4.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~4.0_0\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {104B0A37-AB99-4F06-8032-8BBDC3B77DDB} (Telechargement Control) - http://www.photoweb.fr/moncompte/Account/LogOn?ReturnUrl=%2ftransfert
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.fr/SnapfishActivia.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/pr02/resources/VistaMSNPUpldfr-fr.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://www.extrafilm.fr/ImageUploader5.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.girafoto.fr/uploaders/aurigma_4_6/ImageUploader4.cab
O16 - DPF: {6F750202-1362-4815-A476-88533DE61D0C} (Kodak Gallery Easy Upload Manager Class) - http://www.kodakgallery.fr/
O16 - DPF: {8731163E-77B9-4F91-9122-F112521C28AF} (MMSPlayerX Class) - http://62.201.137.56/mmawap/jsp/composer/player/mmsPlayer.cab
O16 - DPF: {A73BAEFA-EE65-494D-BEDB-DD3E5A34FA98} (Image Uploader) - http://www.extrafilm.fr/ImageUploader4.cab
O16 - DPF: {BA162249-F2C5-4851-8ADC-FC58CB424243} (Image Uploader Control) - http://copainsdavant.linternaute.com/html_include_bibliotheque/objimageuploader/5.1.1.0/ImageUploader5.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {DEB21AD3-FDA4-42F6-B57D-EE696A675EE8} (IPSUploader Control) - http://as.photoprintit.de/ips-opdata/layout/default01/activex/IPSUploader.cab
O16 - DPF: {EDFCB7CB-942C-4822-AF14-F0B687409848} (Image Uploader Control) - http://www.mypix.com/fr/fr/importer/ImageUploader4.cab
O18 - Protocol: CDS300 - {AD43AA67-6860-4531-AC8A-0E68F9CF023E} - E:\Player\__CDS2.dll (file missing)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\Program Files\Common Files\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Orange Contrôle Parental (OPTENET_FILTER) - Orange - C:\Program Files\Controle Parental\bin\optproxy.exe
O23 - Service: Fujitsu Siemens Computers Diagnostic Testhandler (TestHandler) - Fujitsu Siemens Computers - C:\firststeps\OnlineDiagnostic\TestManager\TestHandler.exe

j'ai relancé MBAM, mis en quarantaine et supprimer
voici le rapport

Malwarebytes' Anti-Malware 1.33
Version de la base de données: 1654
Windows 6.0.6001 Service Pack 1

09/02/2009 18:12:07
mbam-log-2009-02-09 (18-12-07).txt

Type de recherche: Examen rapide
Eléments examinés: 48589
Temps écoulé: 4 minute(s), 8 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Program Files\EoRezo (Rogue.Eorezo) -> Delete on reboot.

qu'est ce qu'un rapport RSIT ?

merci

Malwarebytes' Anti-Malware 1.33
Version de la base de données: 1654
Windows 6.0.6001 Service Pack 1

09/02/2009 20:19:01
mbam-log-2009-02-09 (20-19-01).txt

Type de recherche: Examen rapide
Eléments examinés: 48402
Temps écoulé: 5 minute(s), 4 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Program Files\EoRezo (Rogue.Eorezo) -> Quarantined and deleted successfully.

Malwarebytes' Anti-Malware 1.33
Version de la base de données: 1654
Windows 6.0.6001 Service Pack 1

09/02/2009 20:28:40
mbam-log-2009-02-09 (20-28-40).txt

Type de recherche: Examen rapide
Eléments examinés: 48118
Temps écoulé: 5 minute(s), 19 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)