Virus : 3 rapports et descrip.prob.

Bonjour,

J'ai des problèmes de virus ou je ne sais quoi...ça m'empêche de voir ma page d'accueil et il m'apparaît sans cesse différentes fenêtres de publicité (entre autres porno!)...ce qui est très désagréable !

- Il m'apparaît un icône jaune en forme de triangle qui clignote me donnant des avertissement de spyware, mais qui me réfère à un site d'achat de logiciel...
- System doctor ne cesse de vouloir s'installer seul, même si je refuse.
- Mc affee m'indique le virus NEWPOLY WIN32 sur des fichiers temp et ne peut les supprimer ou les mettre en quarantaine.
- J'ai un logiciel ICODEPAK qui est sur mon ordi et que j'aimerais bien supprimer puisque je ne sais pas à quoi il sert et les 3 test m'indique qu'il est infecté avec Trojan.
- On me dit aussi qu'il y a un virus sur C:windows\sys32\\oqabf.dll et je ne sais pas quoi faire.

J'ai réalisé la "méthode préliminaire de désinfection" qui est affiché sur le site, soit d'utiliser EWINDO, BITDEFENDER et HIJACK.

Voici les trois rapports...SVP JE suis nulle en informatique, aidez-moi !

***EWINDO***
---------------------------------------------------------
ewido anti-spyware - Scan Report
---------------------------------------------------------

+ Created at: 07:16:52 2006-09-15

+ Scan result:

C:\Program Files\Virus-Burst -> Adware.Generic : No action taken.
C:\Program Files\Virus-Burst\Virus-Burst.exe -> Adware.Generic : No action taken.
C:\Program Files\Virus-Burst\ignored.lst -> Adware.Generic : No action taken.
C:\Program Files\Virus-Burst\virbur.ini -> Adware.Generic : No action taken.
C:\Program Files\iCodecPack -> Adware.Generic : No action taken.
C:\Program Files\iCodecPack\isaddon.dll -> Adware.Generic : No action taken.
C:\Program Files\iCodecPack\isamini.exe -> Adware.Generic : No action taken.
C:\Program Files\iCodecPack\isamonitor.exe -> Adware.Generic : No action taken.
C:\Program Files\iCodecPack\ot.ico -> Adware.Generic : No action taken.
C:\Program Files\iCodecPack\pmmon.exe -> Adware.Generic : No action taken.
C:\Program Files\iCodecPack\pmsngr.exe -> Adware.Generic : No action taken.
C:\Program Files\iCodecPack\pmuninst.exe -> Adware.Generic : No action taken.
C:\Program Files\iCodecPack\ts.ico -> Adware.Generic : No action taken.
C:\Program Files\iCodecPack\uninst.exe -> Adware.Generic : No action taken.
C:\WINDOWS\system32\oqabf.dll -> Adware.Generic : No action taken.
HKLM\SOFTWARE\Classes\CLSID\{479fd0cf-5be9-4c63-8cda-b6d371c67bd5} -> Adware.Generic : No action taken.
HKLM\SOFTWARE\Classes\CLSID\{CCFB2B33-F4DB-B63D-ABDC-C7384ED93B34} -> Adware.Generic : No action taken.
HKLM\SOFTWARE\Classes\Interface\{016859C2-97B6-45FC-816B-A3B91BA10A0F} -> Adware.Generic : No action taken.
HKLM\SOFTWARE\Classes\Interface\{03713ADE-819C-43D9-B138-67828D4C0405} -> Adware.Generic : No action taken.
HKLM\SOFTWARE\Classes\Interface\{0BDF8F38-347C-4810-BDA6-2F85C1050B26} -> Adware.Generic : No action taken.
HKLM\SOFTWARE\Classes\Interface\{18A1A6BB-8AE3-47E3-B9D4-75ABFE0CAC03} -> Adware.Generic : No action taken.
HKLM\SOFTWARE\Classes\Interface\{2D1254A1-4A1A-4339-9DE5-D05CADD5C44C} -> Adware.Generic : No action taken.
HKLM\SOFTWARE\Classes\Interface\{2F34C08C-E0AF-4EB2-AFCF-3A13DC489FA6} -> Adware.Generic : No action taken.
HKLM\SOFTWARE\Classes\Interface\{49D486E8-1932-492D-B1BD-B4D638BEBD84} -> Adware.Generic : No action taken.
HKLM\SOFTWARE\Classes\Interface\{49E2EB9D-A5E6-450E-9708-251876BF3E7F} -> Adware.Generic : No action taken.
HKLM\SOFTWARE\Classes\Interface\{68C625EA-B8E3-4FC1-9F6E-8A1B50AA9C8C} -> Adware.Generic : No action taken.
HKLM\SOFTWARE\Classes\Interface\{6F821290-E277-4F87-B4BD-AE48564EF21D} -> Adware.Generic : No action taken.
HKLM\SOFTWARE\Classes\Interface\{9BA6B541-EB04-44C9-9156-9573DB5345A5} -> Adware.Generic : No action taken.
HKLM\SOFTWARE\Classes\Interface\{A8718256-70C8-4914-8F64-B8B9C1A64AAA} -> Adware.Generic : No action taken.
HKLM\SOFTWARE\Classes\Interface\{C3A42538-303B-4541-915D-C79AD9C75EB8} -> Adware.Generic : No action taken.
HKLM\SOFTWARE\Classes\Interface\{C48AE974-0D27-47D6-A3E9-881CF3301F72} -> Adware.Generic : No action taken.
HKLM\SOFTWARE\Classes\Interface\{DA02B168-8841-4248-BF22-67E2EC5958C3} -> Adware.Generic : No action taken.
HKLM\SOFTWARE\Classes\Interface\{E505FB9B-6CB3-44C5-9F0E-B01121076CC9} -> Adware.Generic : No action taken.
HKLM\SOFTWARE\Classes\TypeLib\{00B3D2B1-1EAD-4611-A348-9ECBC4C565A7} -> Adware.Generic : No action taken.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{479fd0cf-5be9-4c63-8cda-b6d371c67bd5} -> Adware.Generic : No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Internet Explorer Security Plugin 2006 -> Adware.Generic : No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Internet Security Add-On -> Adware.Generic : No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Public Messenger ver 2.03 -> Adware.Generic : No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iCodecPack -> Adware.Generic : No action taken.
HKU\S-1-5-21-1078081533-746137067-1060284298-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{479FD0CF-5BE9-4C63-8CDA-B6D371C67BD5} -> Adware.Generic : No action taken.
HKU\S-1-5-21-1078081533-746137067-1060284298-1003\Software\Internet Security -> Adware.IntCodec : No action taken.
C:\Documents and Settings\C\Local Settings\Temp\tmp99.tmp -> Not-A-Virus.Hoax.Win32.Renos.es : No action taken.
C:\Documents and Settings\C\Cookies\c@247realmedia[1].txt -> TrackingCookie.247realmedia : No action taken.
C:\Documents and Settings\C\Cookies\c@partygaming.122.2o7[1].txt -> TrackingCookie.2o7 : No action taken.
C:\Documents and Settings\Emmy et Nicolas\Cookies\emmy et nicolas@2o7[2].txt -> TrackingCookie.2o7 : No action taken.
C:\Documents and Settings\C\Cookies\c@atdmt[1].txt -> TrackingCookie.Atdmt : No action taken.
C:\Documents and Settings\Emmy et Nicolas\Cookies\emmy et nicolas@atdmt[1].txt -> TrackingCookie.Atdmt : No action taken.
C:\Documents and Settings\C\Cookies\c@clickbank[2].txt -> TrackingCookie.Clickbank : No action taken.
C:\Documents and Settings\Emmy et Nicolas\Cookies\emmy et nicolas@data.coremetrics[1].txt -> TrackingCookie.Coremetrics : No action taken.
C:\Documents and Settings\C\Cookies\c@cpvfeed[2].txt -> TrackingCookie.Cpvfeed : No action taken.
C:\Documents and Settings\C\Cookies\c@doubleclick[1].txt -> TrackingCookie.Doubleclick : No action taken.
C:\Documents and Settings\C\Cookies\c@a.as-us.falkag[1].txt -> TrackingCookie.Falkag : No action taken.
C:\Documents and Settings\C\Cookies\c@as-us.falkag[2].txt -> TrackingCookie.Falkag : No action taken.
C:\Documents and Settings\C\Cookies\c@mediaplex[1].txt -> TrackingCookie.Mediaplex : No action taken.
C:\Documents and Settings\C\Cookies\c@stats1.reliablestats[2].txt -> TrackingCookie.Reliablestats : No action taken.
C:\Documents and Settings\C\Cookies\c@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : No action taken.
C:\Documents and Settings\C\Cookies\c@weborama[1].txt -> TrackingCookie.Weborama : No action taken.
C:\Documents and Settings\Emmy et Nicolas\Cookies\emmy et nicolas@weborama[2].txt -> TrackingCookie.Weborama : No action taken.
C:\Documents and Settings\C\Cookies\c@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : No action taken.

::Report end

***BITDEFENDER***
BitDefender Online Scanner

Scan report generated at: Fri, Sep 15, 2006 - 12:05:21

Scan path: A:\;C:\;D:\;E:\;F:\;

Statistics

Time
04:44:45

Files
225203

Folders
4173

Boot Sectors
3

Archives
1495

Packed Files
24847

Results

Identified Viruses
4

Infected Files
5

Suspect Files
0

Warnings
0

Disinfected
0

Deleted Files
0

Engines Info

Virus Definitions
454296

Engine build
AVCORE v1.0 (build 2310) (i386) (Apr 17 2006 16:24:38)

Scan plugins
13

Archive plugins
38

Unpack plugins
6

E-mail plugins
6

System plugins
1

Scan Settings

First Action
Disinfect

Second Action
Delete

Heuristics
Yes

Enable Warnings
Yes

Scanned Extensions
*;

Exclude Extensions

Scan Emails
Yes

Scan Archives
Yes

Scan Packed
Yes

Scan Files
Yes

Scan Boot
Yes

Scanned File
Status

C:\Program Files\iCodecPack\isaddon.dll
Infected with: Trojan.Zlob.CG

C:\Program Files\iCodecPack\isaddon.dll
Disinfection failed

C:\Program Files\iCodecPack\isaddon.dll
Delete failed

C:\Program Files\iCodecPack\isamini.exe
Infected with: Trojan.Zlob.BZ

C:\Program Files\iCodecPack\isamini.exe
Disinfection failed

C:\Program Files\iCodecPack\isamini.exe
Delete failed

C:\Program Files\iCodecPack\isamonitor.exe
Infected with: Trojan.Zlob.CG

C:\Program Files\iCodecPack\isamonitor.exe
Disinfection failed

C:\Program Files\iCodecPack\isamonitor.exe
Delete failed

C:\Program Files\iCodecPack\pmmon.exe
Infected with: Trojan.Zlob.CD

C:\Program Files\iCodecPack\pmmon.exe
Disinfection failed

C:\Program Files\iCodecPack\pmmon.exe
Delete failed

C:\Program Files\iCodecPack\pmsngr.exe
Infected with: Trojan.Zlob.CH

C:\Program Files\iCodecPack\pmsngr.exe
Disinfection failed

C:\Program Files\iCodecPack\pmsngr.exe
Delete failed

***HIJACK***

Logfile of HijackThis v1.99.1
Scan saved at 12:19:29, on 2006-09-15
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\iCodecPack\pmsngr.exe
C:\Program Files\iCodecPack\isamonitor.exe
C:\Program Files\iCodecPack\pmmon.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Lexmark X6100 Series\lxbfbmgr.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Lexmark X6100 Series\lxbfbmon.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\McAfee.com\VSO\mcvsshld.exe
C:\Program Files\iCodecPack\isamini.exe
C:\Program Files\McAfee.com\VSO\oasclnt.exe
c:\program files\mcafee.com\agent\mcagent.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\sécurité Sandra\ewido anti-spyware 4.0\guard.exe
C:\Program Files\sécurité Sandra\ewido anti-spyware 4.0\ewido.exe
C:\Program Files\sécurité Sandra\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_BAND_SEARCHBAR_HTML
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://accweb.mouv.desjardins.com/identifiantunique/identification?langueCible=fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {BE89472C-B803-4D1D-9A9A-0A63660E0FE3} - C:\PROGRA~1\COPERN~1\COPERN~1.DLL
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {202a961f-23ae-42b1-9505-ffe3c818d717} - C:\Program Files\iCodecPack\isaddon.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\Program Files\Copernic Agent\CopernicAgentExt.dll
O3 - Toolbar: Protection Bar - {479fd0cf-5be9-4c63-8cda-b6d371c67bd5} - C:\Program Files\iCodecPack\iesplugin.dll (file missing)
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [RoxioEngineUtility] "C:\Program Files\Fichiers communs\Roxio Shared\System\EngUtil.exe"
O4 - HKLM\..\Run: [Lexmark X6100 Series] "C:\Program Files\Lexmark X6100 Series\lxbfbmgr.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe
O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] c:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [!ewido] "C:\Program Files\sécurité Sandra\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: Chercher avec Copernic Agent - res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_MENU_SEARCHEXT
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0F7A9297-7268-11D1-B81A-00A076C01B0A} (CPC View ax Control) - http://www.registrefoncier.gouv.qc.ca/Sirf/Script/14_05_04/CPCViewAX/CpcViewAX.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by104fd.bay104.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {F5D98C43-DB16-11CF-8ECA-0000C0FD59C7} (ActiveCGM Control) - http://www.registrefoncier.gouv.qc.ca/Sirf/Script/14_05_04/ActiveCGM/Acgm.cab
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\sécurité Sandra\ewido anti-spyware 4.0\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe

Voilà, merci à ceux qui prendront le temps de m'aider.
Sandra