Virus foto :D msn

Et comment on verifie si on a des spyware?

Logfile of random's system information tool 1.06 (written by random/random)
Run by Administrateur at 2010-02-07 12:57:16
Microsoft Windows XP Professionnel Service Pack 2
System drive C: has 25 GB (62%) free of 40 GB
Total RAM: 255 MB (22% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:57:35, on 07/02/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\WINDOWS\VM_STI.EXE
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\rmctrl.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\Program Files\Activ Software\Activdriver\ActivControl2.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\WINDOWS\rndll.exe
C:\WINDOWS\infocard.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\Program Files\Sony Corporation\Image Transfer\SonyTray.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Fichiers communs\Nikon\Monitor\NkMonitor.exe
C:\Program Files\Philips\SPC 200NC PC Camera\TrayMin200.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\WINDOWS\System32\svchost.exe
C:\documents and settings\administrateur\local settings\application data\tidlif.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Administrateur\Bureau\RSIT.exe
C:\Program Files\trend micro\Administrateur.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.fr/spbasic.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gllob.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: MSIEPlugin - {4B0FAF5A-67C4-4625-AE07-B0DBADA16EBF} - C:\Documents and Settings\All Users\Application Data\uPlayMe\plugins\MSIE.dll (file missing)
O2 - BHO: ALOT Toolbar - {5AA2BA46-9913-4dc7-9620-69AB0FA17AE7} - C:\Program Files\alot\bin\alot.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: ALOT Toolbar - {5AA2BA46-9913-4dc7-9620-69AB0FA17AE7} - C:\Program Files\alot\bin\alot.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Philips SPC 200NC PC Camera
O4 - HKLM\..\Run: [RemoteControl] C:\WINDOWS\system32\rmctrl.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [ActivControl] C:\Program Files\Activ Software\Activdriver\ActivControl2.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Firevall Administrating] rndll.exe
O4 - HKLM\..\Run: [Firewall Administrating] infocard.exe
O4 - HKCU\..\Run: [WOOKIT] C:\Program Files\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Miro] C:\Program Files\Participatory Culture Foundation\Miro\Miro.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [tidlif] "c:\documents and settings\administrateur\local settings\application data\tidlif.exe" tidlif
O4 - Global Startup: Image Transfer.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Nikon Monitor.lnk = C:\Program Files\Fichiers communs\Nikon\Monitor\NkMonitor.exe
O4 - Global Startup: TrayMin300.exe.lnk = ?
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.orange.fr (file missing) (HKCU)
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://go.divx.com/plugin/DivXBrowserPlugin.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {88764F69-3831-4EC1-B40B-FF21D8381345} (AdVerifierADPCtrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-2.0.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.11\bin\httpd.exe
O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.1.33\bin\mysqld.exe

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Version de la base de données: 4532

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

2010-09-02 20:01:32
mbam-log-2010-09-02 (20-01-32).txt

Type d'examen: Examen complet (C:\|D:\|E:\|)
Elément(s) analysé(s): 248103
Temps écoulé: 39 minute(s), 34 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 1
Fichier(s) infecté(s): 13

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Program Files (x86)\TSearch (Adware.TSearch) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\Program Files (x86)\TSearch\DBGHELP.DLL (Adware.TSearch) -> Quarantined and deleted successfully.
C:\Program Files (x86)\TSearch\English.Slg (Adware.TSearch) -> Quarantined and deleted successfully.
C:\Program Files (x86)\TSearch\French.Slg (Adware.TSearch) -> Quarantined and deleted successfully.
C:\Program Files (x86)\TSearch\imagehlp.dll (Adware.TSearch) -> Quarantined and deleted successfully.
C:\Program Files (x86)\TSearch\programme test.exe (Adware.TSearch) -> Quarantined and deleted successfully.
C:\Program Files (x86)\TSearch\README.TXT (Adware.TSearch) -> Quarantined and deleted successfully.
C:\Program Files (x86)\TSearch\THotkeys.dll (Adware.TSearch) -> Quarantined and deleted successfully.
C:\Program Files (x86)\TSearch\TSearch.chm (Adware.TSearch) -> Quarantined and deleted successfully.
C:\Program Files (x86)\TSearch\TSearch.exe (Adware.TSearch) -> Quarantined and deleted successfully.
C:\Program Files (x86)\TSearch\TSearchDll.dll (Adware.TSearch) -> Quarantined and deleted successfully.
C:\Program Files (x86)\TSearch\TSpeech.dll (Adware.TSearch) -> Quarantined and deleted successfully.
C:\Windows\wintybrd.png (Malware.Trace) -> Quarantined and deleted successfully.
C:\Windows\wintybrdf.jpg (Malware.Trace) -> Quarantined and deleted successfully.

Malwarebytes' Anti-Malware 1.44
Version de la base de données: 3700
Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180

07/02/2010 14:36:07
mbam-log-2010-02-07 (14-36-07).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 179715
Temps écoulé: 1 hour(s), 20 minute(s), 1 second(s)

Processus mémoire infecté(s): 2
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 9
Valeur(s) du Registre infectée(s): 7
Elément(s) de données du Registre infecté(s): 3
Dossier(s) infecté(s): 41
Fichier(s) infecté(s): 69

Processus mémoire infecté(s):
C:\WINDOWS\rndll.exe (BackdoorBot) -> Unloaded process successfully.
C:\WINDOWS\infocard.exe (Backdoor.IRCBot) -> Unloaded process successfully.

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\CLSID\{5aa2ba46-9913-4dc7-9620-69ab0fa17ae7} (Adware.ALOT) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5aa2ba46-9913-4dc7-9620-69ab0fa17ae7} (Adware.ALOT) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5aa2ba46-9913-4dc7-9620-69ab0fa17ae7} (Adware.ALOT) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\alotToolbar (Adware.ALOT) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\alot (Adware.ALOT) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\fcn (Rogue.Residue) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\IGB (Rogue.Residue) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\IGB (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InternetGameBox (Adware.Popup) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\tidlif (Trojan.Agent.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{5aa2ba46-9913-4dc7-9620-69ab0fa17ae7} (Adware.ALOT) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Desktop\host (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Desktop\id (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Services\del (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\firevall administrating (BackdoorBot) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\firewall administrating (Backdoor.IRCBot) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSMHelp (Hijack.Help) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
C:\Documents and Settings\Administrateur\Application Data\alot (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_0 (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_1 (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_10 (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_11 (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_2 (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_3 (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_4 (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_5 (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_6 (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_7 (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_8 (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_9 (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\configurator (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\postInstallLayout (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\products (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Button_0 (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Button_0\images (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Button_1 (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Button_1\images (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Button_2 (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Button_2\images (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Button_3 (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Button_3\images (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Button_4 (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Button_4\images (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Button_5 (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Button_5\images (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Button_6 (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Button_6\images (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Button_7 (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Button_7\images (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Shared (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Shared\images (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\TimerManager (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\ToolbarSearch (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Updater (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\NetworkService\Application Data\alot (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Program Files\alot (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Program Files\alot\bin (Adware.ALOT) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
c:\documents and settings\administrateur\local settings\application data\tidlif.exe (Trojan.Agent.H) -> Delete on reboot.
C:\Program Files\alot\bin\alot.dll (Adware.ALOT) -> Quarantined and deleted successfully.
C:\pkagnm.dll (Malware.Packer) -> Quarantined and deleted successfully.
C:\RECYCLER\S-1-5-21-842925246-152049171-1343024091-500\Dc143.exe (Adware.NaviPromo) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\toolbar.xml (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_0\Button_0.xml (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_0\Button_0.xml.backup (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_1\Button_1.xml (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_1\Button_1.xml.backup (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_10\Button_10.xml (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_10\Button_10.xml.backup (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_11\Button_11.xml (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_11\Button_11.xml.backup (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_2\Button_2.xml (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_2\Button_2.xml.backup (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_3\Button_3.xml (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_3\Button_3.xml.backup (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_4\Button_4.xml (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_4\Button_4.xml.backup (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_5\Button_5.xml (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_5\Button_5.xml.backup (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_6\Button_6.xml (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_6\Button_6.xml.backup (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_7\Button_7.xml (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_7\Button_7.xml.backup (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_8\Button_8.xml (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_8\Button_8.xml.backup (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_9\Button_9.xml (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Button_9\Button_9.xml.backup (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\configurator\configurator.xml (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\configurator\configurator.xml.backup (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\postInstallLayout\postInstallLayout.xml (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\postInstallLayout\postInstallLayout.xml.backup (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\products\products.xml (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\products\products.xml.backup (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Button_0\images\alot_icon_35x16.bmp (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Button_1\images\alot_search_24x16.bmp (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Button_2\images\default_226_alot_videos_videosearch.bmp (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Button_3\images\default_227_alot_videos_videovault.bmp (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Button_4\images\default_281_alot_weather_widget.bmp (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Button_4\images\shower.bmp (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Button_5\images\active_default_430_alot_cam_news.bmp (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Button_5\images\default_430_alot_cam_news.bmp (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Button_6\images\default_412_alot_cam_games.bmp (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Button_7\images\default_413_alot_mrkt_camfrog.bmp (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Shared\domains.dat (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Shared\images\alot_brand.png (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Shared\images\spinner.bmp (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Shared\images\widget_bottom.bmp (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Shared\images\widget_btnclose0.bmp (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Shared\images\widget_btnclose1.bmp (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Shared\images\widget_btnmin0.bmp (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Shared\images\widget_btnmin1.bmp (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Shared\images\widget_caption.bmp (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Shared\images\widget_error_bg.bmp (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Shared\images\widget_error_close.bmp (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Resources\Shared\images\widget_error_icon.bmp (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\TimerManager\TimerManager.xml (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\TimerManager\TimerManager.xml.backup (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\ToolbarSearch\ToolbarSearch.xml (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Updater\Updater.xml (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\alot\Updater\Updater.xml.backup (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Program Files\alot\alotUninst.exe (Adware.ALOT) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Application Data\wiaserva.log (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\nvs2.inf (Adware.EGDAccess) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\tidlif_nav.dat (Adware.NaviPromo) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\tidlif_navps.dat (Adware.NaviPromo) -> Quarantined and deleted successfully.
C:\WINDOWS\rndll.exe (BackdoorBot) -> Quarantined and deleted successfully.
C:\WINDOWS\infocard.exe (Backdoor.IRCBot) -> Quarantined and deleted successfully.

Ton lien ne marche pas

C'est normal qu'il faut que je l'installe?

en plus a la fin il me dit:

C:\Programme File\List_Kill'em\List_Kill'em.scr

Une erreur est survenue en essayant de renommer un fichier dans le dossier de destination :
MoveFile a échoué; code 2.
Le fichier spécifié est introuvable

C'est normal ou pas?

############################## | UsbFix V6.091 |

User : Administrateur (Administrateurs) # ORDI-XPSP2
Update on 05/02/2010 by El Desaparecido , C_XX & Chimay8
Start at: 17:04:41 | 07/02/2010
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

Processeur Intel Pentium III
Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 2
Internet Explorer 6.0.2900.2180
Windows Firewall Status : Enabled
AV : Symantec AntiVirus Corporate Edition 10.1.6.6000 [ (!) Disabled | Updated ]

A:\ -> Lecteur de disquettes 3 ½ pouces
C:\ -> Disque fixe local # 39,06 Go (24,3 Go free) # NTFS
D:\ -> Disque fixe local # 109,98 Go (99,01 Go free) # NTFS
E:\ -> Disque CD-ROM
F:\ -> Disque amovible
G:\ -> Disque amovible # 7,38 Go (2,92 Go free) [WALKMAN] # FAT32
H:\ -> Disque amovible
I:\ -> Disque amovible
J:\ -> Disque amovible

############################## | Processus actifs |

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\VM_STI.EXE
C:\WINDOWS\system32\rmctrl.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\Program Files\Activ Software\Activdriver\ActivControl2.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\Program Files\Sony Corporation\Image Transfer\SonyTray.exe
C:\Program Files\Fichiers communs\Nikon\Monitor\NkMonitor.exe
C:\Program Files\Philips\SPC 200NC PC Camera\TrayMin200.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\Wanadoo\Watch.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

################## | Elements infectieux |

C:\Documents and Settings\Administrateur\Mes documents\simon\IMG43310_09[1].JPG-www.facebook.com.exe
D:\autorun.inf
D:\autorun.inf
G:\autorun.inf
G:\autorun.inf -> fichier appelé : "G:\driver\usb\–¼‡‘Š•†‘Í€ŒŽ" ( Absent ! )
G:\driver\usb\Desktop.ini
G:\driver\usb
G:\driver
G:\autorun.inf

################## | Registre |

[HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoFolderOptions"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoRecentDocsMenu"

################## | Mountpoints2 |

HKCU\..\..\Explorer\MountPoints2\{3e204801-d29d-11dd-8a9a-000102f12899}
Shell\AutoRun\command =G:\driver\usb\–¼‡‘Š•†‘Í€ŒŽ
Shell\open\command =G:\driver\usb\–¼‡‘Š•†‘Í€ŒŽ

HKCU\..\..\Explorer\MountPoints2\{85b0aff6-896a-11dc-9be3-806d6172696f}
Shell\AutoRun\command =D:\setupSNK.exe

HKCU\..\..\Explorer\MountPoints2\{a53623e0-be42-11de-8c3e-000102f12899}
Shell\AutoRun\command =G:\driver\usb\–¼‡‘Š•†‘Í€ŒŽ
Shell\open\command =G:\driver\usb\–¼‡‘Š•†‘Í€ŒŽ

HKCU\..\..\Explorer\MountPoints2\{b42edd80-d290-11dd-8a95-000102f12899}
Shell\AutoRun\command =F:\LaunchU3.exe -a

HKCU\..\..\Explorer\MountPoints2\{cc89edf0-97bf-11de-8bf4-000102f12899}
Shell\AutoRun\command =G:\driver\usb\–¼‡‘Š•†‘Í€ŒŽ
Shell\open\command =G:\driver\usb\–¼‡‘Š•†‘Í€ŒŽ

HKCU\..\..\Explorer\MountPoints2\{dc0479d1-e195-11de-8c82-000102f12899}
Shell\AutoRun\command =G:\driver\usb\–¼‡‘Š•†‘Í€ŒŽ
Shell\open\command =G:\driver\usb\–¼‡‘Š•†‘Í€ŒŽ

################## | Vaccin |

(!) Cet ordinateur n'est pas vacciné !

################## | ! Fin du rapport # UsbFix V6.091 ! |

############################## | UsbFix V6.091 |

User : Administrateur (Administrateurs) # ORDI-XPSP2
Update on 05/02/2010 by El Desaparecido , C_XX & Chimay8
Start at: 17:21:21 | 07/02/2010
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

Processeur Intel Pentium III
Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 2
Internet Explorer 6.0.2900.2180
Windows Firewall Status : Enabled
AV : Symantec AntiVirus Corporate Edition 10.1.6.6000 [ (!) Disabled | Updated ]

A:\ -> Lecteur de disquettes 3 ½ pouces
C:\ -> Disque fixe local # 39,06 Go (24,29 Go free) # NTFS
D:\ -> Disque fixe local # 109,98 Go (99,01 Go free) # NTFS
E:\ -> Disque CD-ROM
F:\ -> Disque amovible
G:\ -> Disque amovible # 7,38 Go (2,92 Go free) [WALKMAN] # FAT32
H:\ -> Disque amovible
I:\ -> Disque amovible
J:\ -> Disque amovible

############################## | Processus actifs |

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

################## | Elements infectieux |

Supprimé ! C:\Documents and Settings\Administrateur\Mes documents\simon\IMG43310_09[1].JPG-www.facebook.com.exe
Supprimé ! C:\Recycler\S-1-5-21-842925246-152049171-1343024091-500
Supprimé ! D:\autorun.inf
Supprimé ! D:\Recycler\S-1-5-21-842925246-152049171-1343024091-500
G:\autorun.inf -> fichier appelé : "G:\driver\usb\–¼‡‘Š•†‘Í€ŒŽ" ( Absent ! )
Supprimé ! G:\driver\usb\Desktop.ini
Supprimé ! G:\driver\usb
Supprimé ! G:\driver
Supprimé ! G:\autorun.inf

################## | Registre |

Supprimé ! [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoFolderOptions"
Supprimé ! [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoRecentDocsMenu"

################## | Mountpoints2 |

Supprimé ! HKCU\...\Explorer\MountPoints2\{3e204801-d29d-11dd-8a9a-000102f12899}\Shell\AutoRun\Command
Supprimé ! HKCU\...\Explorer\MountPoints2\{85b0aff6-896a-11dc-9be3-806d6172696f}\Shell\AutoRun\Command
Supprimé ! HKCU\...\Explorer\MountPoints2\{a53623e0-be42-11de-8c3e-000102f12899}\Shell\AutoRun\Command
Supprimé ! HKCU\...\Explorer\MountPoints2\{b42edd80-d290-11dd-8a95-000102f12899}\Shell\AutoRun\Command
Supprimé ! HKCU\...\Explorer\MountPoints2\{cc89edf0-97bf-11de-8bf4-000102f12899}\Shell\AutoRun\Command
Supprimé ! HKCU\...\Explorer\MountPoints2\{dc0479d1-e195-11de-8c82-000102f12899}\Shell\AutoRun\Command

################## | Listing des fichiers présent |

[24/09/2008 11:00|--a------|0] C:\AILog.txt
[02/11/2007 18:05|--a------|0] C:\AUTOEXEC.BAT
[02/11/2007 17:59|---hs----|212] C:\boot.ini
[24/08/2001 12:00|-rahs----|4952] C:\Bootfont.bin
[27/04/2008 12:20|--a------|74] C:\CMLoader.log
[02/11/2007 18:05|--a------|0] C:\CONFIG.SYS
[21/01/2010 12:30|--a------|127118] C:\gdr.exe
[02/11/2007 18:05|-rahs----|0] C:\IO.SYS
[02/11/2007 18:05|-rahs----|0] C:\MSDOS.SYS
[03/08/2004 20:38|-rahs----|47564] C:\NTDETECT.COM
[03/08/2004 20:59|-rahs----|251712] C:\ntldr
[29/02/2004 16:44|--a------|52576] C:\orange.bmp
[?|?|?] C:\pagefile.sys
[22/06/2008 13:10|--a------|90] C:\Setup.log
[07/02/2010 17:27|--a------|3952] C:\UsbFix.txt
[15/03/2008 14:51|--a------|45254] D:\DUVALF-15-03-2008.nbml
[09/01/2008 21:22|--a------|399] D:\Raccourci vers recup-HD80G-AL.lnk
[03/08/2004 23:55|--a------|28672] D:\setupSNK.exe
[09/10/2009 16:32|--a------|25088] D:\Soir‚es 2009.2010.doc
[01/07/2008 00:00|--ahs----|212] G:\SETSTOR.DAT
[01/07/2008 00:00|--a------|0] G:\IPQ.TXT
[01/07/2008 00:00|--a------|128] G:\APQ.TXT
[01/07/2008 00:00|--a------|24] G:\VPQ.TXT
[01/07/2008 00:00|--a------|0] G:\BPQ.TXT
[01/01/1980 00:15|--ah-----|7864320] G:\STDBSTR.DAT
[01/01/1980 00:15|--ah-----|13144] G:\STDBSTR.IDX
[01/01/1980 00:15|--ah-----|4194304] G:\STDBDATA.DAT
[01/01/1980 00:15|--ah-----|1024] G:\STDBDATA.IDX
[01/01/1980 00:15|--ah-----|23313524] G:\RAMLIST.DAT
[01/01/1980 00:19|-ra------|5726] G:\capability_00.xml
[29/12/2008 15:52|---hs----|1052672] G:\STSTORE.HDS
[29/12/2008 15:52|---hs----|1052672] G:\SSTORE.HDS
[29/12/2008 15:54|--a------|296] G:\WMPInfo.xml
[02/08/2009 15:19|--a------|358443109] G:\Grafikart - Codage.mov

################## | Vaccination |

# C:\autorun.inf -> Dossier créé par UsbFix .
# D:\autorun.inf -> Dossier créé par UsbFix .
# G:\autorun.inf -> Dossier créé par UsbFix .

################## | Upload |

Veuillez envoyer le fichier : C:\UsbFix_Upload_Me_ORDI-XPSP2.zip : https://www.ionos.fr/?affiliate_id=77097
Merci pour votre contribution .

################## | ! Fin du rapport # UsbFix V6.091 ! |

Il va mieu il ne bug pas sur msn et gllob.com ne revien plus comme page d'acceuil.Merci beaucoup.
Mais sinon je n'utilise pas Norton mais symantec.Et lorsque j'avai une analyse pour voir d'ou provenait le virus il n'avait rien trouver donc sa m'etonnerais qu'il trouve quelque chose maintenant.

J'ai pas reussi a utilise bitdefender. mais le fichier texte qui c'est ouvert a la fin de l'analyse est


.
======= RAPPORT D'AD-REMOVER 1.1.4.6_J | UNIQUEMENT XP/VISTA/7 =======
.
Mis à jour par C_XX le 05.02.2010 à 17:34
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 18:03:59, 07/02/2010 | Mode Normal | Option: CLEAN
Exécuté de: C:\Ad-Remover\
Système d'exploitation: Microsoft® Windows XP™ Service Pack 2 v5.1.2600
Nom du PC: ORDI-XPSP2 | Utilisateur actuel: Administrateur
.
============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
.

C:\WINDOWS\Temp\msksetup.log
C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\InternetGameBox

(!) -- Fichiers temporaires supprimés.

.
HKCU\software\LanConfig
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{0E5CBF21-D15F-11D0-8301-00AA005B4383}
HKLM\software\microsoft\windows\currentversion\uninstall\tidlif
.
============== Scan additionnel ==============
.
.
* Mozilla FireFox Version [Impossible d'obtenir la version] *
.
Nom du profil: ix0gk5zi.default (Administrateur)
.
(ADMINI~1, prefs.js) Extensions.enabledItems, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5
.
.
* Internet Explorer Version 6.0.2900.2180 *
.
[HKEY_CURRENT_USER\..\Internet Explorer\Main]
.
Start Page: hxxp://fr.msn.com/
Search Bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Do404Search: 01000000
Local Page: C:\WINDOWS\system32\blank.htm
Show_ToolBar: yes
Use Custom Search URL: 1 (0x1)
Enable Browser Extensions: no
Default_search_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Default_page_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
.
[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
.
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: %SystemRoot%\system32\blank.htm
Start Page: hxxp://fr.msn.com/
Search bar: hxxp://search.msn.com/spbasic.htm
.
[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
.
Tabs: res://ieframe.dll/tabswelcome.htm
.
===================================
.
2211 Octet(s) - C:\Ad-Report-CLEAN[1].log
.
12085 Fichier(s) - C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp
10 Fichier(s) - C:\WINDOWS\Temp
0 Fichier(s) - C:\WINDOWS\Prefetch
.
17 Fichier(s) - C:\Ad-Remover\BACKUP
6 Fichier(s) - C:\Ad-Remover\QUARANTINE
.
Fin à: 18:12:33 | 07/02/2010 - CLEAN[1]
.
============== E.O.F ==============
.

Merci mais la les dernier logiciel ne marche pas chez moi.Je laisse tomber.En tout cas mss ne bug plus et Gllob.com ne revien plus comme page d'acceuil et c'est ce que je voulais!!
Encore merci tu ma beaucoup aider

C'est ou?

Bonsoir,


J'ai un virus sur mon ordinateur, en fait celui-ci est détecté par mon antivirus avast lorsque je connecte mon téléphone portable à mon pc.
nom du fichier: F:\AutoRun.inf
nom du logiciel: VBS:Malware-gen
Je ne suis qu'une débutante en informatique et je ne sais pas du tout ce que je dois faire. En plus, j'ai beau faire supprimer ou mettre en quarantaine, l'avertissement avast revient sans cesse! Par ailleurs,
quand je souhaite me connecter à internet, on m'affiche: page introuvable car la page d'acceuil n'est pas celle que j'utilise habituellment (on m'affiche celle-ci: http://www.freeart1cile.com/ ). Encore autre chose, quand je me connecte à msn, des liens (virus) sont envoyés à mes contacts et tout se bloque ce qui fait que je ne peux plus discuter avec eux, je suis obligée de me déconnecter et reconnecter.
J'ai vu que l'on pouvait télécharger usb fix mais étant donné que je n'y connais strictement rien en informatique, je préfère vous demander votre avis...

En bref, que dois-je faire ?

Merci de me répondre.