[xp] problème barre des tâches

Salut

# Télécharge ceci: (merci a S!RI pour ce petit programme).

http://siri.urz.free.fr/Fix/SmitfraudFix.zip

Exécute le, Double click sur Smitfraudfix.cmd choisit l’option 1,
voila a quoi cela ressemble : http://siri.urz.free.fr/Fix/SmitfraudFix.php
il va générer un rapport : copie/colle le sur le poste stp.

++

Voici, merci

SmitFraudFix v2.132

Rapport fait à 18:01:48,21, 16/01/2007
Executé à partir de D:\smitfraud\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» C:\

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\XP2600

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\XP2600\Application Data

»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\XP2600\Favoris

»»»»»»»»»»»»»»»»»»»»»»»» Bureau

»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"

»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""

»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""

»»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32

»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

»»»»»»»»»»»»»»»»»»»»»»»» Fin

Salut

ok,

Télécharge ceci sur ton bureau :

Lien : hijackthis

Démo : http://pageperso.aol.fr/balltrap34/demohijack.htm

Choisir l'option "do a scan and a logfile", et faire un copier/coller du rapport ainsi générer sur le forum

++

Voici , merci :

Logfile of HijackThis v1.99.1
Scan saved at 21:01:19, on 17/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
D:\applis\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\WINDOWS\system32\LVCOMSX.EXE
D:\applis\quickcam\LogiTray.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
D:\applis\quickcam\FxSvr2.exe
D:\applis\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\EssentialPIM\EssentialPIM.exe
C:\WINDOWS\system32\wuauclt.exe
D:\applis\Football365 Toolbar\Football365 Toolbar\launcher.exe
D:\applis\Football365 Toolbar\Football365 Toolbar\Football365 Toolbar.exe
C:\Program Files\Fichiers communs\Nosibay\RunningObjectRegistry.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\XP2600\Bureau\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll
O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] D:\sblive\PROGRAM\ADGJDet.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] D:\applis\quickcam\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] D:\applis\quickcam\LogiTray.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "D:\applis\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [EssentialPIM] "C:\Program Files\EssentialPIM\EssentialPIM.exe" /autorun
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] D:\applis\quickcam\ManifestEngine.exe boot
O4 - HKCU\..\Run: [Football365 Toolbar] "D:\applis\Football365 Toolbar\Football365 Toolbar\launcher.exe"
O4 - Global Startup: Corel Family & Friends Reminders.LNK = C:\Corel\Print House Magic\cffrem.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - D:\applis\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: DirectX Service (DirectXerf) - Unknown owner - C:\WINDOWS\system32\directx.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2007.SP1\Win32\RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2007.SP1\RpcSandraSrv.exe

re

fais le 1/ et 2/ de ce lien stp

virus methode preliminaire de desinfection version fr

@+

Bonjour, voici le rapport du scan en ligne :

BitDefender Online Scanner

Scan report generated at: Sat, Jan 20, 2007 - 03:30:54

Scan path: A:\;C:\;D:\;E:\;F:\;G:\;

Statistics

Time

03:36:31

Files

1207041

Folders

12747

Boot Sectors

5

Archives

61031

Packed Files

59566

Results

Identified Viruses

7

Infected Files

10

Suspect Files

9

Warnings

0

Disinfected

0

Deleted Files

19

Engines Info

Virus Definitions

389846

Engine build

AVCORE v1.0 (build 2371) (i386) (Dec 13 2006 11:16:42)

Scan plugins

14

Archive plugins

38

Unpack plugins

6

E-mail plugins

6

System plugins

1

Scan Settings

First Action

Disinfect

Second Action

Delete

Heuristics

Yes

Enable Warnings

Yes

Scanned Extensions

*;

Exclude Extensions

Scan Emails

Yes

Scan Archives

Yes

Scan Packed

Yes

Scan Files

Yes

Scan Boot

Yes

Scanned File

Status

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 104)=>[Subject: bug notice][Date: Mon, 03 Nov 2003 23:22:48 +0000]=>(MIME part)=>(message body)

Suspected of: Exploit.Iframe.Vulnerability

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 104)=>[Subject: bug notice][Date: Mon, 03 Nov 2003 23:22:48 +0000]=>(MIME part)=>(message body)

Disinfection failed

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 104)=>[Subject: bug notice][Date: Mon, 03 Nov 2003 23:22:48 +0000]=>(MIME part)=>(message body)

Deleted

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 104)=>[Subject: bug notice][Date: Mon, 03 Nov 2003 23:22:48 +0000]=>(MIME part)

Updated

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 104)

Updated

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 104)=>[Subject: bug notice][Date: Mon, 03 Nov 2003 23:22:48 +0000]=>(MIME part)=>emzwf.exe

Infected with: Win32.Swen.A@mm

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 104)=>[Subject: bug notice][Date: Mon, 03 Nov 2003 23:22:48 +0000]=>(MIME part)=>emzwf.exe

Deleted

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 104)=>[Subject: bug notice][Date: Mon, 03 Nov 2003 23:22:48 +0000]=>(MIME part)

Updated

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 104)

Updated

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx

Update failed

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 542)=>[Subject: Have you been naughty?][Date: Mon, 25 Nov 2002 19:19:28 +0100 (CET)]=>(MIME part)=>(message body)

Suspected of: Exploit.Iframe.Vulnerability

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 542)=>[Subject: Have you been naughty?][Date: Mon, 25 Nov 2002 19:19:28 +0100 (CET)]=>(MIME part)=>(message body)

Disinfection failed

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 542)=>[Subject: Have you been naughty?][Date: Mon, 25 Nov 2002 19:19:28 +0100 (CET)]=>(MIME part)=>(message body)

Deleted

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 542)=>[Subject: Have you been naughty?][Date: Mon, 25 Nov 2002 19:19:28 +0100 (CET)]=>(MIME part)

Updated

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 542)

Updated

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 542)=>[Subject: Have you been naughty?][Date: Mon, 25 Nov 2002 19:19:28 +0100 (CET)]=>(MIME part)=>Aspi

Infected with: Win32.Bugbear.A@mm.Dam.2

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 542)=>[Subject: Have you been naughty?][Date: Mon, 25 Nov 2002 19:19:28 +0100 (CET)]=>(MIME part)=>Aspi

Disinfection failed

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 542)=>[Subject: Have you been naughty?][Date: Mon, 25 Nov 2002 19:19:28 +0100 (CET)]=>(MIME part)=>Aspi

Deleted

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 542)=>[Subject: Have you been naughty?][Date: Mon, 25 Nov 2002 19:19:28 +0100 (CET)]=>(MIME part)

Updated

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 542)

Updated

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx

Update failed

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 893)=>[Subject: Microsoft Outlook Express 5][Date: Sun, 13 Oct 2002 03:40:30 +0200 (added]=>(MIME part)=>(message body)

Suspected of: Exploit.Iframe.Vulnerability

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 893)=>[Subject: Microsoft Outlook Express 5][Date: Sun, 13 Oct 2002 03:40:30 +0200 (added]=>(MIME part)=>(message body)

Disinfection failed

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 893)=>[Subject: Microsoft Outlook Express 5][Date: Sun, 13 Oct 2002 03:40:30 +0200 (added]=>(MIME part)=>(message body)

Deleted

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 893)=>[Subject: Microsoft Outlook Express 5][Date: Sun, 13 Oct 2002 03:40:30 +0200 (added]=>(MIME part)

Updated

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 893)

Updated

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 893)=>[Subject: Microsoft Outlook Express 5][Date: Sun, 13 Oct 2002 03:40:30 +0200 (added]=>(MIME part)=>Money.mny.exe

Infected with: Win32.Bugbear.A@mm.Dam.2

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 893)=>[Subject: Microsoft Outlook Express 5][Date: Sun, 13 Oct 2002 03:40:30 +0200 (added]=>(MIME part)=>Money.mny.exe

Disinfection failed

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 893)=>[Subject: Microsoft Outlook Express 5][Date: Sun, 13 Oct 2002 03:40:30 +0200 (added]=>(MIME part)=>Money.mny.exe

Deleted

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 893)=>[Subject: Microsoft Outlook Express 5][Date: Sun, 13 Oct 2002 03:40:30 +0200 (added]=>(MIME part)

Updated

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 893)

Updated

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx

Update failed

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 972)=>[Subject: LES POISSONS ][Date: Tue,10 Sep 2002 12:18:35 PM]=>(MIME part)=>(message body)

Suspected of: Exploit.Iframe.Vulnerability

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 972)=>[Subject: LES POISSONS ][Date: Tue,10 Sep 2002 12:18:35 PM]=>(MIME part)=>(message body)

Disinfection failed

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 972)=>[Subject: LES POISSONS ][Date: Tue,10 Sep 2002 12:18:35 PM]=>(MIME part)=>(message body)

Deleted

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 972)=>[Subject: LES POISSONS ][Date: Tue,10 Sep 2002 12:18:35 PM]=>(MIME part)

Updated

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 972)

Updated

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 972)=>[Subject: LES POISSONS ][Date: Tue,10 Sep 2002 12:18:35 PM]=>(MIME part)=>LES POISSONS .zip.bat

Infected with: Win32.Yahaa.E@mm

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 972)=>[Subject: LES POISSONS ][Date: Tue,10 Sep 2002 12:18:35 PM]=>(MIME part)=>LES POISSONS .zip.bat

Deleted

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 972)=>[Subject: LES POISSONS ][Date: Tue,10 Sep 2002 12:18:35 PM]=>(MIME part)

Updated

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 972)

Updated

D:\sauvi\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx

Update failed

D:\sauvj\download\Doc réseau\Talking Greeting\tgmaker.exe=>wise0027

Suspected of: BehavesLike:Trojan.Downloader

D:\sauvj\download\Doc réseau\Talking Greeting\tgmaker.exe=>wise0027

Disinfection failed

D:\sauvj\download\Doc réseau\Talking Greeting\tgmaker.exe=>wise0027

Deleted

D:\sauvj\download\Doc réseau\Talking Greeting\tgmaker.exe

Update failed

D:\sauvk\stockoutlook\listes_diff.dbx=>(message 34)=>[Subject: Registration Confirmation][Date: Tue, 03 May 2005 23:51:28 GMT]=>(MIME part)=>account_info.zip=>Winzipped-Text_Data.txt .pif

Infected with: Win32.Sober.P@mm

D:\sauvk\stockoutlook\listes_diff.dbx=>(message 34)=>[Subject: Registration Confirmation][Date: Tue, 03 May 2005 23:51:28 GMT]=>(MIME part)=>account_info.zip=>Winzipped-Text_Data.txt .pif

Disinfection failed

D:\sauvk\stockoutlook\listes_diff.dbx=>(message 34)=>[Subject: Registration Confirmation][Date: Tue, 03 May 2005 23:51:28 GMT]=>(MIME part)=>account_info.zip=>Winzipped-Text_Data.txt .pif

Deleted

D:\sauvk\stockoutlook\listes_diff.dbx=>(message 34)=>[Subject: Registration Confirmation][Date: Tue, 03 May 2005 23:51:28 GMT]=>(MIME part)=>account_info.zip

Updated

D:\sauvk\stockoutlook\listes_diff.dbx=>(message 34)=>[Subject: Registration Confirmation][Date: Tue, 03 May 2005 23:51:28 GMT]=>(MIME part)

Updated

D:\sauvk\stockoutlook\listes_diff.dbx=>(message 34)

Updated

D:\sauvk\stockoutlook\listes_diff.dbx

Update failed

D:\stockoutlookbis\listes_diff.dbx=>(message 34)=>[Subject: Registration Confirmation][Date: Tue, 03 May 2005 23:51:28 GMT]=>(MIME part)=>account_info.zip=>Winzipped-Text_Data.txt .pif

Infected with: Win32.Sober.P@mm

D:\stockoutlookbis\listes_diff.dbx=>(message 34)=>[Subject: Registration Confirmation][Date: Tue, 03 May 2005 23:51:28 GMT]=>(MIME part)=>account_info.zip=>Winzipped-Text_Data.txt .pif

Disinfection failed

D:\stockoutlookbis\listes_diff.dbx=>(message 34)=>[Subject: Registration Confirmation][Date: Tue, 03 May 2005 23:51:28 GMT]=>(MIME part)=>account_info.zip=>Winzipped-Text_Data.txt .pif

Deleted

D:\stockoutlookbis\listes_diff.dbx=>(message 34)=>[Subject: Registration Confirmation][Date: Tue, 03 May 2005 23:51:28 GMT]=>(MIME part)=>account_info.zip

Updated

D:\stockoutlookbis\listes_diff.dbx=>(message 34)=>[Subject: Registration Confirmation][Date: Tue, 03 May 2005 23:51:28 GMT]=>(MIME part)

Updated

D:\stockoutlookbis\listes_diff.dbx=>(message 34)

Updated

D:\stockoutlookbis\listes_diff.dbx

Update failed

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 104)=>[Subject: bug notice][Date: Mon, 03 Nov 2003 23:22:48 +0000]=>(MIME part)=>(message body)

Suspected of: Exploit.Iframe.Vulnerability

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 104)=>[Subject: bug notice][Date: Mon, 03 Nov 2003 23:22:48 +0000]=>(MIME part)=>(message body)

Disinfection failed

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 104)=>[Subject: bug notice][Date: Mon, 03 Nov 2003 23:22:48 +0000]=>(MIME part)=>(message body)

Deleted

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 104)=>[Subject: bug notice][Date: Mon, 03 Nov 2003 23:22:48 +0000]=>(MIME part)

Updated

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 104)

Updated

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 104)=>[Subject: bug notice][Date: Mon, 03 Nov 2003 23:22:48 +0000]=>(MIME part)=>emzwf.exe

Infected with: Win32.Swen.A@mm

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 104)=>[Subject: bug notice][Date: Mon, 03 Nov 2003 23:22:48 +0000]=>(MIME part)=>emzwf.exe

Deleted

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 104)=>[Subject: bug notice][Date: Mon, 03 Nov 2003 23:22:48 +0000]=>(MIME part)

Updated

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 104)

Updated

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx

Update failed

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 542)=>[Subject: Have you been naughty?][Date: Mon, 25 Nov 2002 19:19:28 +0100 (CET)]=>(MIME part)=>(message body)

Suspected of: Exploit.Iframe.Vulnerability

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 542)=>[Subject: Have you been naughty?][Date: Mon, 25 Nov 2002 19:19:28 +0100 (CET)]=>(MIME part)=>(message body)

Disinfection failed

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 542)=>[Subject: Have you been naughty?][Date: Mon, 25 Nov 2002 19:19:28 +0100 (CET)]=>(MIME part)=>(message body)

Deleted

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 542)=>[Subject: Have you been naughty?][Date: Mon, 25 Nov 2002 19:19:28 +0100 (CET)]=>(MIME part)

Updated

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 542)

Updated

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 542)=>[Subject: Have you been naughty?][Date: Mon, 25 Nov 2002 19:19:28 +0100 (CET)]=>(MIME part)=>Aspi

Infected with: Win32.Bugbear.A@mm.Dam.2

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 542)=>[Subject: Have you been naughty?][Date: Mon, 25 Nov 2002 19:19:28 +0100 (CET)]=>(MIME part)=>Aspi

Disinfection failed

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 542)=>[Subject: Have you been naughty?][Date: Mon, 25 Nov 2002 19:19:28 +0100 (CET)]=>(MIME part)=>Aspi

Deleted

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 542)=>[Subject: Have you been naughty?][Date: Mon, 25 Nov 2002 19:19:28 +0100 (CET)]=>(MIME part)

Updated

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 542)

Updated

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx

Update failed

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 893)=>[Subject: Microsoft Outlook Express 5][Date: Sun, 13 Oct 2002 03:40:30 +0200 (added]=>(MIME part)=>(message body)

Suspected of: Exploit.Iframe.Vulnerability

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 893)=>[Subject: Microsoft Outlook Express 5][Date: Sun, 13 Oct 2002 03:40:30 +0200 (added]=>(MIME part)=>(message body)

Disinfection failed

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 893)=>[Subject: Microsoft Outlook Express 5][Date: Sun, 13 Oct 2002 03:40:30 +0200 (added]=>(MIME part)=>(message body)

Deleted

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 893)=>[Subject: Microsoft Outlook Express 5][Date: Sun, 13 Oct 2002 03:40:30 +0200 (added]=>(MIME part)

Updated

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 893)

Updated

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 893)=>[Subject: Microsoft Outlook Express 5][Date: Sun, 13 Oct 2002 03:40:30 +0200 (added]=>(MIME part)=>Money.mny.exe

Infected with: Win32.Bugbear.A@mm.Dam.2

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 893)=>[Subject: Microsoft Outlook Express 5][Date: Sun, 13 Oct 2002 03:40:30 +0200 (added]=>(MIME part)=>Money.mny.exe

Disinfection failed

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 893)=>[Subject: Microsoft Outlook Express 5][Date: Sun, 13 Oct 2002 03:40:30 +0200 (added]=>(MIME part)=>Money.mny.exe

Deleted

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 893)=>[Subject: Microsoft Outlook Express 5][Date: Sun, 13 Oct 2002 03:40:30 +0200 (added]=>(MIME part)

Updated

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 893)

Updated

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx

Update failed

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 972)=>[Subject: LES POISSONS ][Date: Tue,10 Sep 2002 12:18:35 PM]=>(MIME part)=>(message body)

Suspected of: Exploit.Iframe.Vulnerability

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 972)=>[Subject: LES POISSONS ][Date: Tue,10 Sep 2002 12:18:35 PM]=>(MIME part)=>(message body)

Disinfection failed

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 972)=>[Subject: LES POISSONS ][Date: Tue,10 Sep 2002 12:18:35 PM]=>(MIME part)=>(message body)

Deleted

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 972)=>[Subject: LES POISSONS ][Date: Tue,10 Sep 2002 12:18:35 PM]=>(MIME part)

Updated

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 972)

Updated

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 972)=>[Subject: LES POISSONS ][Date: Tue,10 Sep 2002 12:18:35 PM]=>(MIME part)=>LES POISSONS .zip.bat

Infected with: Win32.Yahaa.E@mm

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 972)=>[Subject: LES POISSONS ][Date: Tue,10 Sep 2002 12:18:35 PM]=>(MIME part)=>LES POISSONS .zip.bat

Deleted

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 972)=>[Subject: LES POISSONS ][Date: Tue,10 Sep 2002 12:18:35 PM]=>(MIME part)

Updated

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx=>(message 972)

Updated

E:\sauvj\sauvegardes\180104.exe=>(ZIP Sfx 2o)=>OE/{DEFBCDA7-3DEA-40D5-9E83-0C7662D382AB}/dbx/BoŒte de r‚ception.dbx

Update failed

Salut

ok,

recupéré : le style XP :

télécharge ceci et décompresse le
http://pageperso.aol.fr/Balltrap34/luna.zip

ensuite met le dans C:\WINDOWS\Resources\Themes\Luna
et double clic dessus

Ensuite réessaye de remettre le style XP

@+