Virus win32:adware-gen

tehaquent -  
Bonjour,
Cela fait quelques jours que mon ordi marchait au ralenti et en fait aprés avoir téléchargé avast j' ai trouvé un fichier infecté par win32:adware-gen.Cela me met un avertissement et je voudrais le mettre en quarantaine mais je ne peux pas.
Cela me dit que le serveur de la zone de quarantaine n' est pas actif.
Le fichier contaminé est c:\System Volume Information\_restore et autre chose derrière.Ne m ' y connaissant pas du tout que dois-je faire.
Merci beaucoup de vos aides.
Configuration: Windows XP
Internet Explorer 6.0

17 réponses

Résumé de la discussion

Le fil décrit un PC sous Windows XP qui ralentit après qu Avast a détecté win32:adware-gen et bloque la mise en quarantaine faute d'un serveur de zone de quarantaine actif. Le fichier infecté se situe dans c:\System Volume Information\_restore et une autre composante, ce qui complique l’isolement du fichier contaminé et suggère des risques liés à la restauration système. Plusieurs réponses privilégient la première option proposée comme solution la plus simple, tandis que d’autres évoquent l’analyse via HijackThis et des outils tiers pour nettoyer la configuration. Le message rassemble aussi un rapport HijackThis et des éléments de démarrage indésirables, indiquant une contamination potentiellement étendue nécessitant une désinfection plus approfondie et une révision des programmes au démarrage.

Bobot (l’IA à votre service)
  1. green day Modérateur
    Salut

    fais ce qui est indiqué ici stp :

    virus methode preliminaire de desinfection version fr

    ++
    0
    1. tehaquent Auteur
      ok merci j 'essaie de suite
      0
      1. tehaquent
        Voilà aprèe un peu de temps perdu j' ai essayé de faire ce qui m' avait été conseillé voilà le rapport du logiciel avg spyware si je ne me trompe pas.
        Les autr---------------------------------------------------------
        AVG Anti-Spyware - Rapport d'analyse
        ---------------------------------------------------------

        + Créé à: 20:50:08 08/05/2007

        + Résultat de l'analyse:

        C:\WINDOWS1\system32\dataclen.dll -> Adware.BetterInternet : Ignoré.
        HKU\S-1-5-21-448539723-616249376-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5929CD6E-2062-44A4-B2C5-2C7E78FBAB38} -> Adware.Generic : Ignoré.
        C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP678\A0406664.exe -> Adware.NewDotNet : Ignoré.
        C:\WINDOWS\Downloaded Program Files\CONFLICT.1\Install.dll -> Adware.SpywareStorm : Ignoré.
        C:\WINDOWS\Downloaded Program Files\Install.dll -> Adware.SpywareStorm : Ignoré.
        HKLM\SOFTWARE\Classes\CLSID\{2178F3FB-2560-458f-BDEE-631E2FE0DFE4} -> Adware.WinAntiVirus : Ignoré.
        C:\Documents and Settings\olivier1\Cookies\olivier1@247realmedia[1].txt -> TrackingCookie.247realmedia : Ignoré.
        C:\Documents and Settings\laetitia.OLIVIER\Cookies\laetitia@2o7[2].txt -> TrackingCookie.2o7 : Ignoré.
        C:\Documents and Settings\laetitia.OLIVIER\Cookies\laetitia@aolfr.122.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
        C:\Documents and Settings\olivier1\Cookies\olivier1@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
        :mozilla.79:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Advertising : Ignoré.
        :mozilla.80:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Advertising : Ignoré.
        :mozilla.84:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Advertising : Ignoré.
        :mozilla.85:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Advertising : Ignoré.
        :mozilla.86:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Advertising : Ignoré.
        C:\Documents and Settings\laetitia.OLIVIER\Cookies\laetitia@advertising[1].txt -> TrackingCookie.Advertising : Ignoré.
        :mozilla.50:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Atdmt : Ignoré.
        C:\Documents and Settings\laetitia.OLIVIER\Cookies\laetitia@atdmt[1].txt -> TrackingCookie.Atdmt : Ignoré.
        :mozilla.41:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Bluestreak : Ignoré.
        C:\Documents and Settings\laetitia.OLIVIER\Cookies\laetitia@bluestreak[1].txt -> TrackingCookie.Bluestreak : Ignoré.
        C:\Documents and Settings\olivier1\Cookies\olivier1@bluestreak[2].txt -> TrackingCookie.Bluestreak : Ignoré.
        C:\Documents and Settings\olivier1\Cookies\olivier1@fl01.ct2.comclick[1].txt -> TrackingCookie.Comclick : Ignoré.
        :mozilla.38:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Doubleclick : Ignoré.
        C:\Documents and Settings\laetitia.OLIVIER\Cookies\laetitia@doubleclick[1].txt -> TrackingCookie.Doubleclick : Ignoré.
        C:\Documents and Settings\olivier1\Cookies\olivier1@doubleclick[1].txt -> TrackingCookie.Doubleclick : Ignoré.
        :mozilla.23:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Estat : Ignoré.
        C:\Documents and Settings\laetitia.OLIVIER\Cookies\laetitia@estat[1].txt -> TrackingCookie.Estat : Ignoré.
        C:\Documents and Settings\olivier1\Cookies\olivier1@estat[1].txt -> TrackingCookie.Estat : Ignoré.
        C:\Documents and Settings\teha\Cookies\teha@estat[1].txt -> TrackingCookie.Estat : Ignoré.
        :mozilla.20:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Falkag : Ignoré.
        :mozilla.21:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Falkag : Ignoré.
        :mozilla.22:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Falkag : Ignoré.
        :mozilla.70:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Falkag : Ignoré.
        :mozilla.71:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Falkag : Ignoré.
        :mozilla.72:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Falkag : Ignoré.
        :mozilla.7:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Falkag : Ignoré.
        :mozilla.94:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Falkag : Ignoré.
        C:\Documents and Settings\laetitia.OLIVIER\Cookies\laetitia@as1.falkag[2].txt -> TrackingCookie.Falkag : Ignoré.
        :mozilla.48:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Googleadservices : Ignoré.
        :mozilla.51:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Googleadservices : Ignoré.
        :mozilla.57:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Googleadservices : Ignoré.
        :mozilla.60:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Googleadservices : Ignoré.
        :mozilla.37:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Mediaplex : Ignoré.
        C:\Documents and Settings\quentin.OLIVIER\Cookies\quentin@banner.newyorkcasino[1].txt -> TrackingCookie.Newyorkcasino : Ignoré.
        C:\Documents and Settings\olivier1\Cookies\olivier1@overture[1].txt -> TrackingCookie.Overture : Ignoré.
        C:\Documents and Settings\olivier1\Cookies\olivier1@stats1.reliablestats[1].txt -> TrackingCookie.Reliablestats : Ignoré.
        C:\Documents and Settings\laetitia.OLIVIER\Cookies\laetitia@serving-sys[2].txt -> TrackingCookie.Serving-sys : Ignoré.
        C:\Documents and Settings\olivier1\Cookies\olivier1@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Ignoré.
        C:\Documents and Settings\olivier1\Cookies\olivier1@serving-sys[1].txt -> TrackingCookie.Serving-sys : Ignoré.
        :mozilla.32:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Smartadserver : Ignoré.
        :mozilla.33:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Smartadserver : Ignoré.
        :mozilla.34:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Smartadserver : Ignoré.
        C:\Documents and Settings\laetitia.OLIVIER\Cookies\laetitia@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Ignoré.
        C:\Documents and Settings\olivier1\Cookies\olivier1@smartadserver[1].txt -> TrackingCookie.Smartadserver : Ignoré.
        C:\Documents and Settings\olivier1\Cookies\olivier1@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Ignoré.
        C:\Documents and Settings\olivier1\Cookies\olivier1@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Ignoré.
        C:\Documents and Settings\olivier1\Cookies\olivier1@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Ignoré.
        :mozilla.39:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Valueclick : Ignoré.
        :mozilla.40:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Valueclick : Ignoré.
        :mozilla.67:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Weborama : Ignoré.
        :mozilla.68:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Weborama : Ignoré.
        :mozilla.69:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Weborama : Ignoré.
        C:\Documents and Settings\olivier1\Cookies\olivier1@weborama[1].txt -> TrackingCookie.Weborama : Ignoré.
        C:\Documents and Settings\olivier1\Cookies\olivier1@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Ignoré.
        C:\Documents and Settings\olivier1\Cookies\olivier1@zedo[1].txt -> TrackingCookie.Zedo : Ignoré.

        Fin du rapport

        es sont en cours.
        0
        1. tehaquent Auteur
          Voici le rapport d hijacktis.
          Logfile of HijackThis v1.99.1
          Scan saved at 21:30:27, on 08/05/2007
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          C:\Program Files\Alwil Software\Avast4\ashServ.exe
          C:\WINDOWS\system32\spoolsv.exe
          c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
          C:\WINDOWS\System32\drivers\CDAC11BA.EXE
          C:\WINDOWS\System32\cisvc.exe
          C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
          C:\WINDOWS\system32\nvsvc32.exe
          C:\Program Files\SiteAdvisor\6066\SAService.exe
          C:\WINDOWS\System32\PAStiSvc.exe
          C:\WINDOWS\System32\svchost.exe
          C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
          C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
          C:\WINDOWS\Explorer.EXE
          C:\WINDOWS\system32\wscntfy.exe
          C:\WINDOWS\SOUNDMAN.EXE
          C:\Program Files\MessengerPlus! 3\MsgPlus.exe
          C:\WINDOWS\system32\RUNDLL32.EXE
          C:\Program Files\SiteAdvisor\6066\SiteAdv.exe
          C:\Program Files\Fichiers communs\LogiShrd\LComMgr\LVComSX.exe
          C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
          C:\Program Files\Logitech\QuickCam10\QuickCam10.exe
          C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
          C:\Program Files\DriveCleaner Free\UDC6cw.exe
          C:\Program Files\Fichiers communs\DriveCleaner Free\udcsdr.exe
          C:\Program Files\Fichiers communs\DriveCleaner Free\udcwap.exe
          C:\Program Files\MSN Messenger\msnmsgr.exe
          C:\Program Files\Messenger\msmsgs.exe
          C:\Program Files\MessengerSkinner\MessengerSkinner.exe
          C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
          C:\Program Files\RALINK\RT2500 Wireless LAN Card\Installer\WINXP\RaConfig2500.exe
          C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE
          C:\WINDOWS\System32\svchost.exe
          C:\Program Files\Club-Internet\Lanceur\lanceur.exe
          C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
          C:\WINDOWS\system32\svchost.exe
          C:\Program Files\Internet Explorer\iexplore.exe
          C:\WINDOWS\system32\cidaemon.exe
          C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
          C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
          C:\Program Files\Internet Explorer\iexplore.exe
          C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=D4322FEE7CF74A348CB9CE970F098EF5
          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://actus.sfr.fr
          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet
          R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=proxy.club-internet.fr:8080
          R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
          O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - (no file)
          O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
          O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
          O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
          O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
          O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
          O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
          O3 - Toolbar: (no name) - {014DA6C9-189F-421a-88CD-07CFE51CFF10} - (no file)
          O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
          O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
          O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
          O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
          O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
          O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
          O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
          O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
          O4 - HKLM\..\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor\6066\SiteAdv.exe
          O4 - HKLM\..\Run: [LVCOMSX] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\LVComSX.exe"
          O4 - HKLM\..\Run: [LogitechRegisterVideoApplications] "C:\Program Files\Logitech\Video\InstallHelper.exe" /register /runnow
          O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
          O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide
          O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
          O4 - HKLM\..\Run: [DriveCleaner Free] "C:\Program Files\DriveCleaner Free\UDC.exe" /min
          O4 - HKLM\..\Run: [UDC6cw] "C:\Program Files\DriveCleaner Free\UDC6cw.exe" -c
          O4 - HKLM\..\Run: [SDR6V_Check] "C:\Program Files\Fichiers communs\DriveCleaner Free\udcsdr.exe"
          O4 - HKLM\..\Run: [WA6PV_Check] "C:\Program Files\Fichiers communs\DriveCleaner Free\udcwap.exe"
          O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
          O4 - HKCU\..\Run: [Steam] "c:\progra~1\steam\steam.exe" -silent
          O4 - HKCU\..\Run: [SOProc_RegSoAlertWxSzNn] rundll32 shell32.dll,ShellExec_RunDLL C:\Program Files\SoftwareOnline\soproc.exe -pack RegSoAlertWxSzNn
          O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
          O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
          O4 - HKCU\..\Run: [messengerskinner] C:\Program Files\MessengerSkinner\MessengerSkinner.exe
          O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
          O4 - Startup: Club Internet.lnk = C:\Program Files\Club-Internet\Lanceur\lanceur.exe
          O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV02.EXE
          O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
          O4 - Global Startup: RaConfig2500.lnk = C:\Program Files\RALINK\RT2500 Wireless LAN Card\Installer\WINXP\RaConfig2500.exe
          O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
          O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
          O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O16 - DPF: fdjeux - https://www.fdjeux.net/classes/fdjeux.cab
          O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
          O16 - DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM ActiveX Control) - http://minitelweb.minitel.com/imin_data/ocx/MDM.cab
          O16 - DPF: {09F1ADAC-76D8-4D0F-99A5-5C907DADB988} - https://www.afternic.com/domains/drivecleaner.com
          O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
          O16 - DPF: {205FF73B-CA67-11D5-99DD-444553540013} - http://adserver.sharewareonline.com/adserver/Install.cab
          O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
          O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
          O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase8300.cab
          O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
          O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
          O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP.cab
          O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
          O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
          O18 - Protocol: bw+0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw+0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw-0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw-0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw00 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw00s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw10 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw10s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw20 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw20s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw30 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw30s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw40 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw40s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw50 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw50s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw60 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw60s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw70 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw70s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw80 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw80s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw90 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw90s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwa0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwa0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwb0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwb0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwc0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwc0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwd0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwd0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwe0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwe0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwf0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwf0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
          O18 - Protocol: bwg0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwg0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwh0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwh0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwi0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwi0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwj0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwj0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwk0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwk0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwl0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwl0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwm0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwm0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwn0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwn0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwo0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwo0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwp0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwp0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwq0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwq0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwr0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwr0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bws0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bws0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwt0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwt0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwu0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwu0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwv0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwv0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bww0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bww0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwx0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwx0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwy0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwy0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwz0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwz0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
          O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
          O18 - Protocol: offline-8876480 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
          O20 - AppInit_DLLs: MsgPlusLoader.dll
          O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
          O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
          O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
          O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
          O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
          O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
          O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
          O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
          O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
          O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
          O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
          O23 - Service: SC Test Branding Service 1 - SC Test Branding 1 - C:\Program Files\Fichiers communs\SC Test Branding 1 Shared\Service\SCTestService1.exe
          O23 - Service: SiteAdvisor Service - McAfee, Inc. - C:\Program Files\SiteAdvisor\6066\SAService.exe
          O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe
          0
          2. tehaquent Auteur
            et voilà le rapport suite bitdefender:
               
            Scanned File
             Status
            C:\Documents and Settings\olivier1\Menu Démarrer\Programmes\MessengerSkinner\MessengerSkinner.lnk=>C:\Program Files\MessengerSkinner\MessengerSkinner.exe
            Infected with: Backdoor.Skinymes.Agent.A
            C:\Documents and Settings\olivier1\Menu Démarrer\Programmes\MessengerSkinner\MessengerSkinner.lnk=>C:\Program Files\MessengerSkinner\MessengerSkinner.exe
            Disinfection failed
            C:\Documents and Settings\olivier1\Menu Démarrer\Programmes\MessengerSkinner\MessengerSkinner.lnk=>C:\Program Files\MessengerSkinner\MessengerSkinner.exe
            Deleted
            C:\Documents and Settings\olivier1\Menu Démarrer\Programmes\MessengerSkinner\MessengerSkinner.lnk
            Updated
            C:\Documents and Settings\olivier1\Mes documents\messengerskinner.exe=>(NSIS 2o)=>lzma_solid_nsis0009
            Infected with: Backdoor.Skinymes.Agent.A
            C:\Documents and Settings\olivier1\Mes documents\messengerskinner.exe=>(NSIS 2o)=>lzma_solid_nsis0009
            Disinfection failed
            C:\Documents and Settings\olivier1\Mes documents\messengerskinner.exe=>(NSIS 2o)=>lzma_solid_nsis0009
            Deleted
            C:\Documents and Settings\olivier1\Mes documents\messengerskinner.exe=>(NSIS 2o)
            Update failed
            C:\Program Files\DriveCleaner Free\InstHelp.exe
            Infected with: Trojan.Fakealert.DU
            C:\Program Files\DriveCleaner Free\InstHelp.exe
            Disinfection failed
            C:\Program Files\DriveCleaner Free\InstHelp.exe
            Deleted
            C:\Program Files\DriveCleaner Free\UDC6cw.exe
            Infected with: Trojan.Fakealert.FB
            C:\Program Files\DriveCleaner Free\UDC6cw.exe
            Disinfection failed
            C:\Program Files\DriveCleaner Free\UDC6cw.exe
            Delete failed
            C:\Program Files\Fichiers communs\DriveCleaner Free\udcsdr.exe
            Infected with: Trojan.Downloader.Winfixer.E
            C:\Program Files\Fichiers communs\DriveCleaner Free\udcsdr.exe
            Disinfection failed
            C:\Program Files\Fichiers communs\DriveCleaner Free\udcsdr.exe
            Delete failed
            C:\Program Files\Fichiers communs\DriveCleaner Free\udcwap.exe
            Infected with: Trojan.Downloader.Winfixer.E
            C:\Program Files\Fichiers communs\DriveCleaner Free\udcwap.exe
            Disinfection failed
            C:\Program Files\Fichiers communs\DriveCleaner Free\udcwap.exe
            Delete failed
            C:\Program Files\MessengerSkinner\MessengerSkinner.exe
            Infected with: Backdoor.Skinymes.Agent.A
            C:\Program Files\MessengerSkinner\MessengerSkinner.exe
            Disinfection failed
            C:\Program Files\MessengerSkinner\MessengerSkinner.exe
            Delete failed
            C:\Program Files\The All-Seeing Eye\movenrun.exe
            Infected with: Trojan.Zapchast.H
            C:\Program Files\The All-Seeing Eye\movenrun.exe
            Disinfection failed
            C:\Program Files\The All-Seeing Eye\movenrun.exe
            Deleted
            C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP678\A0406663.exe
            Detected with: Application.VTesttool.C
            C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP678\A0406663.exe
            Deleted
            C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP678\A0406669.exe=>(Embedded EXE o)=>wise0013
            Detected with: Adware.MyWebSearch.AE
            C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP678\A0406669.exe=>(Embedded EXE o)=>wise0013
            Disinfection failed
            C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP678\A0406669.exe=>(Embedded EXE o)=>wise0013
            Deleted
            C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP678\A0406669.exe=>(Embedded EXE o)
            Update failed
            C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP685\A0408459.exe
            Infected with: Trojan.Fakealert.FB
            C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP685\A0408459.exe
            Disinfection failed
            C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP685\A0408459.exe
            Deleted
            C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP685\A0408460.exe
            Infected with: Trojan.Fakealert.DU
            C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP685\A0408460.exe
            Disinfection failed
            C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP685\A0408460.exe
            Deleted
            C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP686\A0408536.exe
            Infected with: Trojan.Fakealert.DU
            C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP686\A0408536.exe
            Disinfection failed
            C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP686\A0408536.exe
            Deleted
            C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP686\A0408537.exe
            Infected with: Trojan.Zapchast.H
            C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP686\A0408537.exe
            Disinfection failed
            C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP686\A0408537.exe
            Deleted
            C:\WINDOWS\system32\cmesys.exe
            Detected with: Application.VTesttool.A
            C:\WINDOWS\system32\cmesys.exe
            Deleted

             
            0
            1. tehaquent Auteur
              Voilà je crois que j 'ai tout fait mais pour moi c 'est du charabia.
              Que dois -je faire après.Merci
              0
              1. green day Modérateur
                Salut

                as tu supprimé tout ce qu'avg a trouvé ???

                où en sont tes soucis ???

                ++
                0
                1. tehaquent Auteur
                  non je n ai rien fait encore car je ne m' y connais pas du tout.Je peux tout supprimer?
                  0
                2. rudyrital
                  supprime tout ce qu'AVG a detecté
                  0
                3. rudyrital
                  ensuite

                  Prends connaissance du contenu le lien suivant:
                  http://www.f-secure.com/products/license-terms/eult_fra.pdf
                  Tu as donc pris connaissance et accepté les conditions d'utilisations du programme blacklight qui est inclus dans le dossier compressé navilog1.zip que tu vas télécharger.
                  Maintenant fais un clic droit sur ce lien :
                  http://perso.orange.fr/il.mafioso/Navifix/navilog1.zip
                  Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
                  Fais un clic droit sur navilog1.zip et choisis "tout extraire"
                  Ensuite double clique sur navilog1.bat
                  Laisses-toi guider. Au menu principal, choisis 1 et valides.
                  (ne fais pas le choix 2 sans notre avis/accord)
                  Patientes jusqu'au message :
                  *** Analyse Termine le ..... ***
                  Appuies sur une touche comme demandé, le blocnote va s'ouvrir.
                  Copies-colles l'intégralité dans une réponse. Refermes le blocnote.
                  Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)
                  0
                4. green day Modérateur
                  Je te laisse le poste ??? :-)
                  0
                5. rudyrital
                  @green daynon , c'etait pour avancer, désolé ;)
                  0
              2. green day Modérateur
                Voici le tuto en image :

                http://www.kachouri.com/tuto/tuto-161-avg-anti-spyware-75-pour-votre-securite.html

                ++
                0
                1. green day Modérateur
                  Fais ce qui est demander au poste 10, pour voir stp !

                  ++
                  0
                  1. tehaquent Auteur
                    Ok je relanec une analyse .Est ce qu' aprés c 'est tout et je suis débarassée ou alors non il faut que je fasse autre chose?
                    0
                    1. green day Modérateur
                      ça dépendra du résultat !

                      ++
                      0
                      1. tehaquent Auteur
                        Il propose extraire vers un dossier spécifié ou alors extraire vers autre chose mais pas tout extraire je prends quoi?
                        0
                        1. green day Modérateur
                          la 1er option, ça sera plus simple

                          ++
                          0
                          1. tehaquent Auteur
                            Désolée mais je me perds! Il faut que je désarchive navilog1.zip et que je le recrée dans un fichier ou pas du tout car je vois bien le fichier navilog1.bat mais apres je n' ai pas la proposition 1 .
                            Me suis -je trompée (cela m' étonnerait guère)!
                            0
                            1. tehaquent Auteur
                              Pour ce soir je coupe je reprends mes investigations demain.
                              Merci pour tout et surtout pardonnez mon ignorance.
                              0
                              1. tehaquent Auteur
                                bonsoir,
                                toujours pour dire que je suis toujours infestée par ce maudit virus et il apparait sous le nom de drivecleaner.
                                Moi qui croyait que cela etait un antivirus je me suis plantée apparemment.
                                Je vais surement pensé au formatage je ne vois plus que ca mais je ne sais pas encore comment on fait.
                                Merci à tous
                                0
                                1. green day Modérateur
                                  Salut

                                  qu'est ce que ça donne avec navilog ???

                                  ++
                                  0

                                  Discussions similaires

                                  Problème avec "PUADIManager:Win32/OfferCore
                                  Knaki

                                  3 réponses
                                  Softonic,est-ce un virus ?
                                  techmel1

                                  6 réponses
                                  Chrome://newtab
                                  Nova

                                  14 réponses
                                  Désinstaller Softonic
                                  Diguimette

                                  5 réponses
                                  PUADlManager:Win32/OfferCore
                                  tenmalade

                                  2 réponses