Rapport ordinateur

bonjour,
j'ai suivi les instructions pour la désinfection de mon ordinateur, voici les rapports :

avec AVG Anti-Spyware:

AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 07:05:07 06/03/2007

+ Résultat de l'analyse:

C:\Program Files\TBONBin -> Adware.BetterInternet : Ignoré.
C:\Program Files\TBONBin\TBONInst.cfg -> Adware.BetterInternet : Ignoré.
C:\Program Files\TBONBin\TBONUnst.htm -> Adware.BetterInternet : Ignoré.
C:\Program Files\TBONBin\TBONWnd.EXE -> Adware.BetterInternet : Ignoré.
C:\WINDOWS\Downloaded Program Files\installer2.dll -> Adware.ClickMedia : Ignoré.
C:\Program Files\Media Access -> Adware.MediaAccess : Ignoré.
C:\Program Files\Media Access\Info.txt -> Adware.MediaAccess : Ignoré.
C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0196459.dll -> Adware.NaviPromo : Ignoré.
C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0196905.dll -> Adware.NaviPromo : Ignoré.
C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197089.dll -> Adware.NaviPromo : Ignoré.
C:\WINDOWS\NDNuninstall6_98.exe -> Adware.NewDotNet : Ignoré.
C:\Program Files\PerfectNav -> Adware.PerfectNav : Ignoré.
C:\Program Files\PerfectNav\BHO -> Adware.PerfectNav : Ignoré.
C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197107.dll -> Adware.RXBar : Ignoré.
C:\Program Files\RXToolBar -> Adware.RXToolbar : Ignoré.
C:\Program Files\RXToolBar\RXToolBar.dll -> Adware.RXToolbar : Ignoré.
C:\Program Files\RXToolBar\__delete_on_reboot__s_f_c_o_n_t_._d_l_l_ -> Adware.RXToolbar : Ignoré.
C:\Program Files\RXToolBar\sfcont.bin -> Adware.RXToolbar : Ignoré.
C:\WINDOWS\SYSTEM32:lzx32.sys -> Hijacker.Costrat.ab : Ignoré.
C:\WINDOWS\Downloaded Program Files\UWA5PNetInstaller.exe -> Not-A-Virus.Downloader.Win32.Agent.e : Ignoré.
C:\WINDOWS\Downloaded Program Files\UWFX5LP_0001_0614NetInstaller.exe -> Not-A-Virus.Downloader.Win32.Agent.e : Ignoré.
C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197106.scr -> Trojan.Delf.tm : Ignoré.
C:\WINDOWS\Downloaded Program Files\PackageHtml.dll -> Trojan.Dialer.qu : Ignoré.
C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197105.exe -> Trojan.Sinowal.bf : Ignoré.

Fin du rapport

avec bitdefender :

BitDefender Online Scanner
Scan report generated
Scan path: C:\;E:\;
Files
507254
Folders
5588
Boot Sectors
4
Archives
4340

Packed Files
65033

Results

Identified Viruses
13

Infected Files
74

Suspect Files
0

Warnings
0

Disinfected
0

Deleted Files
74

Engines Info

Virus Definitions
402866

Engine build
AVCORE v1.0 (build 2397) (i386) (Feb 8 2007 14:24:08)

Scan plugins
14

Archive plugins
38

Unpack plugins
6

E-mail plugins
6

System plugins
1

Scan Settings

First Action
Disinfect

Second Action
Delete

Heuristics
Yes

Enable Warnings
Yes

Scanned Extensions
*;

Exclude Extensions

Scan Emails
Yes

Scan Archives
Yes

Scan Packed
Yes

Scan Files
Yes

Scan Boot
Yes

Scanned File
Status

C:\1.exe
Infected with: Trojan.Dropper.Delf.JM

C:\1.exe
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Re: Mail Error][From: Auto-Mailer@senat.fr]=>senat.bat
Infected with: Win32.Sober.I@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Re: Mail Error][From: Auto-Mailer@senat.fr]=>senat.bat
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Re: Mail Error][From: Auto-Mailer@senat.fr]=>senat.bat
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: mailing error][From: hostmaster@poikosoft.com]=>mail_info.zip=>Winzipped-Text_Data.txt .pif
Infected with: Win32.Sober.O@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: mailing error][From: hostmaster@poikosoft.com]=>mail_info.zip=>Winzipped-Text_Data.txt .pif
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: mailing error][From: hostmaster@poikosoft.com]=>mail_info.zip
Updated

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: FwD: Registration Confirmation][From: info@wanadoo.fr]=>account_info-text.zip=>Winzipped-Text_Data.txt .pif
Infected with: Win32.Sober.O@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: FwD: Registration Confirmation][From: info@wanadoo.fr]=>account_info-text.zip=>Winzipped-Text_Data.txt .pif
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: FwD: Registration Confirmation][From: info@wanadoo.fr]=>account_info-text.zip
Updated

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: You visit illegal websites][From: Office@fbi.gov]=>list.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: You visit illegal websites][From: Office@fbi.gov]=>list.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: You visit illegal websites][From: Office@fbi.gov]=>list.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: Admin@yahoo.fr]=>reg_pass.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: Admin@yahoo.fr]=>reg_pass.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: Admin@yahoo.fr]=>reg_pass.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Your_Password][From: postmaster@eureka-centrum.edu.pl]=>reg_pass-data.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Your_Password][From: postmaster@eureka-centrum.edu.pl]=>reg_pass-data.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Your_Password][From: postmaster@eureka-centrum.edu.pl]=>reg_pass-data.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Mail delivery failed][From: Admin@lenntech.com]=>mail.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Mail delivery failed][From: Admin@lenntech.com]=>mail.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Mail delivery failed][From: Admin@lenntech.com]=>mail.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Paris Hilton & Nicole Richie][From: hostmaster@thawte.com]=>downloadm.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Paris Hilton & Nicole Richie][From: hostmaster@thawte.com]=>downloadm.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Paris Hilton & Nicole Richie][From: hostmaster@thawte.com]=>downloadm.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: You_visit_illegal_websites][From: Department@fbi.gov]=>list.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: You_visit_illegal_websites][From: Department@fbi.gov]=>list.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: You_visit_illegal_websites][From: Department@fbi.gov]=>list.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: smtp mail failed][From: office@adresseemail.com]=>mail.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: smtp mail failed][From: office@adresseemail.com]=>mail.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: smtp mail failed][From: office@adresseemail.com]=>mail.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: smtp mail failed][From: hostmaster@lists.indymedia.org]=>mail.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: smtp mail failed][From: hostmaster@lists.indymedia.org]=>mail.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: smtp mail failed][From: hostmaster@lists.indymedia.org]=>mail.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: office@cnr.tm.fr]=>reg_pass-data.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: office@cnr.tm.fr]=>reg_pass-data.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: office@cnr.tm.fr]=>reg_pass-data.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: office@infoiasi.ro]=>reg_pass.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: office@infoiasi.ro]=>reg_pass.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: office@infoiasi.ro]=>reg_pass.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: Admin@ebay.com]=>reg_pass.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: Admin@ebay.com]=>reg_pass.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: Admin@ebay.com]=>reg_pass.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: office@wanadoo.fr]=>reg_pass-data.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: office@wanadoo.fr]=>reg_pass-data.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: office@wanadoo.fr]=>reg_pass-data.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: postman@triton.lemonde.fr]=>reg_pass-data.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: postman@triton.lemonde.fr]=>reg_pass-data.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: postman@triton.lemonde.fr]=>reg_pass-data.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: info@wanadoo.fr]=>reg_pass.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: info@wanadoo.fr]=>reg_pass.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: info@wanadoo.fr]=>reg_pass.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: hostmaster@saf-helico.com]=>reg_pass.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: hostmaster@saf-helico.com]=>reg_pass.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: hostmaster@saf-helico.com]=>reg_pass.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: hostmaster@lemal.fr]=>reg_pass.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: hostmaster@lemal.fr]=>reg_pass.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: hostmaster@lemal.fr]=>reg_pass.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: office@illesbalearsteam.com]=>reg_pass.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: office@illesbalearsteam.com]=>reg_pass.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: office@illesbalearsteam.com]=>reg_pass.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: hostmaster@maths.uq.edu.au]=>reg_pass-data.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: hostmaster@maths.uq.edu.au]=>reg_pass-data.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: hostmaster@maths.uq.edu.au]=>reg_pass-data.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: office@ea.com]=>reg_pass-data.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: office@ea.com]=>reg_pass-data.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: office@ea.com]=>reg_pass-data.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: postmaster@wanadoo.fr]=>reg_pass-data.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: postmaster@wanadoo.fr]=>reg_pass-data.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: postmaster@wanadoo.fr]=>reg_pass-data.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: postman@saint-gobain.com]=>reg_pass-data.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: postman@saint-gobain.com]=>reg_pass-data.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: postman@saint-gobain.com]=>reg_pass-data.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: smtp mail failed][From: postmaster@wanadoo.fr]=>mail_body.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: smtp mail failed][From: postmaster@wanadoo.fr]=>mail_body.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: smtp mail failed][From: postmaster@wanadoo.fr]=>mail_body.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: You visit illegal websites][From: Mail@cia.gov]=>question_list.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: You visit illegal websites][From: Mail@cia.gov]=>question_list.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: You visit illegal websites][From: Mail@cia.gov]=>question_list.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Mail delivery failed][From: postmaster@wanadoo.fr]=>mail.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Mail delivery failed][From: postmaster@wanadoo.fr]=>mail.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Mail delivery failed][From: postmaster@wanadoo.fr]=>mail.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: hi, ive a new mail address][From: poussin999@hotmail.com]=>mailtext.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: hi, ive a new mail address][From: poussin999@hotmail.com]=>mailtext.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: hi, ive a new mail address][From: poussin999@hotmail.com]=>mailtext.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Mail_delivery_failed][From: Admin@hotmail.com]=>mail_body.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Mail_delivery_failed][From: Admin@hotmail.com]=>mail_body.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Mail_delivery_failed][From: Admin@hotmail.com]=>mail_body.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Mail delivery failed][From: office@trust.com]=>mail.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Mail delivery failed][From: office@trust.com]=>mail.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Mail delivery failed][From: office@trust.com]=>mail.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Mail delivery failed][From: info@netscape.com]=>mail_body.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Mail delivery failed][From: info@netscape.com]=>mail_body.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Mail delivery failed][From: info@netscape.com]=>mail_body.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: postmaster@wanadoo.fr]=>reg_pass.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: postmaster@wanadoo.fr]=>reg_pass.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: postmaster@wanadoo.fr]=>reg_pass.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: office@club-internet.fr]=>reg_pass.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: office@club-internet.fr]=>reg_pass.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: office@club-internet.fr]=>reg_pass.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: postman@wanadoo.fr]=>reg_pass.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: postman@wanadoo.fr]=>reg_pass.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: postman@wanadoo.fr]=>reg_pass.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: hostmaster@caramail.com]=>reg_pass-data.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: hostmaster@caramail.com]=>reg_pass-data.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: hostmaster@caramail.com]=>reg_pass-data.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: Admin@pertuis.com]=>reg_pass.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: Admin@pertuis.com]=>reg_pass.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: Admin@pertuis.com]=>reg_pass.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: postman@unss.org]=>reg_pass-data.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: postman@unss.org]=>reg_pass-data.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: postman@unss.org]=>reg_pass-data.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: office@fht-esslingen.de]=>reg_pass.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: office@fht-esslingen.de]=>reg_pass.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: office@fht-esslingen.de]=>reg_pass.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: info@laposte.net]=>reg_pass-data.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: info@laposte.net]=>reg_pass-data.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: info@laposte.net]=>reg_pass-data.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: Admin@rar.cz]=>reg_pass-data.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: Admin@rar.cz]=>reg_pass-data.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: Admin@rar.cz]=>reg_pass-data.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: postman@aillon.com]=>reg_pass-data.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: postman@aillon.com]=>reg_pass-data.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: postman@aillon.com]=>reg_pass-data.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: office@maili.bp06.net]=>reg_pass-data.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: office@maili.bp06.net]=>reg_pass-data.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: office@maili.bp06.net]=>reg_pass-data.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: postmaster@hotmail.com]=>reg_pass.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: postmaster@hotmail.com]=>reg_pass.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: postmaster@hotmail.com]=>reg_pass.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: Admin@hotmail.com]=>reg_pass-data.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: Admin@hotmail.com]=>reg_pass-data.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: Admin@hotmail.com]=>reg_pass-data.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: postmaster@planethalflife.com]=>reg_pass-data.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: postmaster@planethalflife.com]=>reg_pass-data.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: postmaster@planethalflife.com]=>reg_pass-data.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: Admin@maili.bp06.net]=>reg_pass-data.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: Admin@maili.bp06.net]=>reg_pass-data.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: Admin@maili.bp06.net]=>reg_pass-data.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: Admin@maili.bp06.net]=>reg_pass-data.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: Admin@maili.bp06.net]=>reg_pass-data.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: Admin@maili.bp06.net]=>reg_pass-data.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: hostmaster@pro-at.com]=>reg_pass-data.zip
Infected with: Win32.Sober.Y@mm

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: hostmaster@pro-at.com]=>reg_pass-data.zip
Disinfection failed

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst=>[Subject: Registration Confirmation][From: hostmaster@pro-at.com]=>reg_pass-data.zip
Deleted

C:\Documents and Settings\michel 2\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst
Update failed

C:\Documents and Settings\michel 2\Mes documents\Mes fichiers reçus\bisous.exe
Detected with: Application.Joke.Justakiss.B

C:\Documents and Settings\michel 2\Mes documents\Mes fichiers reçus\bisous.exe
Disinfection failed

C:\Documents and Settings\michel 2\Mes documents\Mes fichiers reçus\bisous.exe
Deleted

C:\eentq.exe
Infected with: Trojan.Spy.Sheriff.C

C:\eentq.exe
Disinfection failed

C:\eentq.exe
Deleted

C:\mdjoa.exe
Infected with: Trojan.Proxy.Small.BO

C:\mdjoa.exe
Disinfection failed

C:\mdjoa.exe
Deleted

C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\ibm00001.dll
Infected with: Generic.PWStealer.A0B40F68

C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\ibm00001.dll
Disinfection failed

C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\ibm00001.dll
Deleted

C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\ibm00001.exe
Infected with: Trojan.PWS.Sinowal.AP

C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\ibm00001.exe
Disinfection failed

C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\ibm00001.exe
Deleted

C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\ibm00002.dll
Infected with: Trojan.Pws.Sinowal.BF

C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\ibm00002.dll
Disinfection failed

C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\ibm00002.dll
Deleted

C:\Program Files\MailSkinner\OESkinner.dll
Infected with: Trojan.Mailskinner.B

C:\Program Files\MailSkinner\OESkinner.dll
Disinfection failed

C:\Program Files\MailSkinner\OESkinner.dll
Deleted

C:\Program Files\MailSkinner\OLSkinner.dll
Infected with: Trojan.Agent.IY

C:\Program Files\MailSkinner\OLSkinner.dll
Disinfection failed

C:\Program Files\MailSkinner\OLSkinner.dll
Deleted

C:\Program Files\TBONBin\tbon.exe
Infected with: Trojan.Clicker.Agent.AM

C:\Program Files\TBONBin\tbon.exe
Disinfection failed

C:\Program Files\TBONBin\tbon.exe
Deleted

C:\Program Files\TBONBin\Uninstall.exe
Infected with: Trojan.Clicker.Agent.AM

C:\Program Files\TBONBin\Uninstall.exe
Disinfection failed

C:\Program Files\TBONBin\Uninstall.exe
Deleted

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0196460.exe
Infected with: Trojan.Clicker.Agent.AM

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0196460.exe
Disinfection failed

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0196460.exe
Deleted

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0196906.exe
Infected with: Trojan.Clicker.Agent.AM

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0196906.exe
Disinfection failed

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0196906.exe
Deleted

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197094.exe
Infected with: Trojan.Proxy.Small.BO

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197094.exe
Disinfection failed

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197094.exe
Deleted

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197095.exe
Infected with: Trojan.Dropper.Delf.JM

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197095.exe
Deleted

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197096.exe
Infected with: Trojan.Spy.Sheriff.C

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197096.exe
Disinfection failed

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197096.exe
Deleted

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197097.exe
Infected with: Trojan.Proxy.Small.BO

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197097.exe
Disinfection failed

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197097.exe
Deleted

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197098.dll
Infected with: Generic.PWStealer.A0B40F68

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197098.dll
Disinfection failed

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197098.dll
Deleted

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197099.exe
Infected with: Trojan.PWS.Sinowal.AP

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197099.exe
Disinfection failed

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197099.exe
Deleted

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197100.dll
Infected with: Trojan.Pws.Sinowal.BF

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197100.dll
Disinfection failed

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197100.dll
Deleted

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197101.dll
Infected with: Trojan.Mailskinner.B

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197101.dll
Disinfection failed

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197101.dll
Deleted

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197102.dll
Infected with: Trojan.Agent.IY

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197102.dll
Disinfection failed

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197102.dll
Deleted

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197103.exe
Infected with: Trojan.Clicker.Agent.AM

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197103.exe
Disinfection failed

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197103.exe
Deleted

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197104.exe
Infected with: Trojan.Clicker.Agent.AM

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197104.exe
Disinfection failed

C:\System Volume Information\_restore{2D081E92-40B0-4D11-86A6-AF667022EB05}\RP573\A0197104.exe
Deleted

C:\vyti.exe
Infected with: Trojan.PWS.Sinowal.AP

C:\vyti.exe
Disinfection failed

C:\vyti.exe
Deleted

C:\WINDOWS\Kusje.scr
Detected with: Application.Joke.Justakiss.B

C:\WINDOWS\Kusje.scr
Disinfection failed

C:\WINDOWS\Kusje.scr
Deleted

avec HijackThis :
Logfile of HijackThis v1.99.1
Scan saved at 06:29:15, on 06/03/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\WINDOWS\System32\hphmon05.exe
C:\WINDOWS\System32\LVCOMSX.EXE
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
c:\program files\mcafee.com\agent\mcagent.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.euro.dell.com/countries/fr/fra/gen/default.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fwww.msn.fr%2fhelp%2fHelp4%2f%3f
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
F3 - REG:win.ini: run= C:\nav\splash.exe
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: MSEvents Object - {44240BB5-BD7D-4D49-A1AA-8AB0F3D3CB44} - (no file)
O2 - BHO: phoneaccess Class - {5054F860-748D-4840-B7B4-DDDB428421AF} - C:\WINDOWS\DOWNLO~1\PHONEA~1.DLL (file missing)
O2 - BHO: RXResultTracker Class - {59879FA4-4790-461c-A1CC-4EC4DE4CA483} - C:\PROGRA~1\RXTOOL~1\sfcont.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {826B2228-BC09-49F2-B5F8-42CE26B1B711} - (no file)
O2 - BHO: (no name) - {826B2228-BC09-49F2-B5F8-42CE26B1B712} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb12.exe
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\\{5372B9A6-6E51-4f90-9B40-E0A3B8475C4E}\hphupd05.exe
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan] c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\McUpdate.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [Instant Access] rundll32.exe EGDACCESS_1069.dll,InstantAccess
O4 - HKCU\..\Run: [tbon] C:\Program Files\TBONBin\tbon.exe /r
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O15 - Trusted Zone: *.coolwebsearch.com
O15 - Trusted Zone: *.searchmeup.com
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {01BE5BD7-B2DD-48B3-A759-59265A91E787} - https://www.afternic.com/domains/downloadv3.com
O16 - DPF: {09CC593B-E8A9-4491-927D-A3E33534DDD4} (InstallerObj Class) - http://mm.tf1.fr/superdistribution/installer2.cab
O16 - DPF: {2D2BEE6E-3C9A-4D58-B9EC-458EDB28D0F6} - https://www.afternic.com/domains/drivecleaner.com
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4208FB4D-4E53-4F5A-BF7A-3E047DDB5281} - http://www.icannnews.com/app/ST/ActiveX.ocx
O16 - DPF: {5054F860-748D-4840-B7B4-DDDB428421AF} (phoneaccess Class) - http://ip.sponsoradulto.com/cab/4/fr/phoneaccess.cab
O16 - DPF: {511F9316-771B-4953-A268-1C36DA667FE9} - http://ip.sponsoradulto.com/cab/2/fr/SysWebTelecomInt.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {95460ABD-946A-46FF-9F56-268718323EEE} - https://www.afternic.com/domains/downloadv3.com
O16 - DPF: {B64F4A7C-97C9-11DA-8BDE-F66BAD1E3F3A} - https://www.afternic.com/domains/errorsafe.com
O16 - DPF: {BA749BC1-143E-430D-B1DA-1D2AF67A3658} - https://www.afternic.com/domains/downloadv3.com
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://www.photoways.com/clients/uploader_v2.1.0.56.cab
O16 - DPF: {E114CD5B-17CE-4807-890E-7B1EDF9F2E5E} - https://www.afternic.com/domains/downloadv3.com
O16 - DPF: {E1AF091A-9F23-4059-89D7-C05EE073285D} (Canal+ Active MSWAY) - https://www.canalplus.com/canalplay/
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Filter: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - C:\PROGRA~1\RXTOOL~1\sfcont.dll
O20 - Winlogon Notify: gs - C:\WINDOWS\
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: runurl - C:\WINDOWS\
O20 - Winlogon Notify: st3 - C:\WINDOWS\
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - Networks Associates Technology, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: WLTRYSVC - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE

voilà, je ne sais pas trop que faire maintenant

merci