virus sur msn Résolu

Question

bonjour a tous .hier j ai recu un fichier zip(par msn) intitule"des photos de toi" je l ai ouvert et rien a l interieur.mais maintenant mes amis connecté ou  non a msn le recoivent de ma part et je ne peut rien faire je suis infecté .meme mon MSN se connecte tout seul .
que faire ?merci

!^^![ME] · Answer

salut,
c'est un ver fait ceci:

Téléchargez MSNFix.zip (de !aur3n7) sur votre bureau: 
http://sosvirus.changelog.fr/MSNFix.zip 
Décompressez-le (clic droit >> Extraire ici) et double cliquer sur le fichier MSNFix.bat. 
- Exécutez l'option R. 
-- Si l'infection est détectée, exécutez l'option N. 
--- Sauvegardez ce rapport puis faites un copier/coller de ce rapport sur le forum, ainsi qu'un nouveau scan HijackThis fait en mode normal. 

Note : 
Si une erreur de suppression est détectée un message s'affichera demandant de redémarrer l'ordinateur afin de terminer les opérations. Dans ce cas il suffit de redémarrer l'ordinateur en mode normal 
Sauvegarder et fermer le rapport pour que Windows termine de se lancer normalement.

sparadra62 · Answer

MSNFix 1.499  
 
C:\Documents and Settings\Admin\Bureau\MSNFix\MSNFix 
Fix exécuté le 14/09/2007 - 16:37:41,10 By Admin 
mode normal    
    
************************ Recherche les fichiers présents      
    
... C:\WINDOWS\Z058_jpg.zip 
... C:\WINDOWS\system32\microsoft\backup.ftp 
... C:\WINDOWS\system32\microsoft\backup.tftp 
... C:\WINDOWS\Z058_jpg.zip 
 
************************ Recherche les dossiers présents       
 
Aucun dossier trouvé 
 
 
 
 
************************ Suppression des fichiers       
    
.. OK ... C:\WINDOWS\Z058_jpg.zip  
.. OK ... C:\WINDOWS\system32\microsoft\backup.ftp  
.. OK ... C:\WINDOWS\system32\microsoft\backup.tftp  
.. OK ... C:\WINDOWS\Z058_jpg.zip 
 
 
 
************************ Nettoyage du registre 
 
 
 
************************ Fichiers suspects 
 
/!\ ces fichiers nécessitent un avis expérimenté avant toute intervention 
 
[C:\WINDOWS\downloadme0.zip] B2AB3A5366854D7083DE74860BE27C6E 
[C:\WINDOWS\downloadme18.zip] 46A3FA5F27AF5545E335F047DB745942 
[C:\WINDOWS\downloadme21.zip] D35FF86D9DA9B4DCE5387C90B7A10A8C 
[C:\WINDOWS\downloadme27.zip] 3943674672C66C01E7B10A90CE0CD4BA 
[C:\WINDOWS\downloadme3.zip] 97E346E992AB198786F81F7E1A5D5DED 
[C:\WINDOWS\downloadme30.zip] 34825C0FF3339A5F47A3AABB429CEDC5 
[C:\WINDOWS\downloadme33.zip] 2B34E36987AE6A5553C53813FD27B1C5 
[C:\WINDOWS\downloadme39.zip] E9631065D045E109D6F60CBE6FB0A4A0 
[C:\WINDOWS\downloadme45.zip] 2C322D06A84920B34D81994CE8B76E5D 
[C:\WINDOWS\downloadme48.zip] 1C01821A00B513F000EB4DDD8C8C52CA 
[C:\WINDOWS\downloadme51.zip] 9A4B87C3BF24FF3480DF4BAE06DE0B2F 
[C:\WINDOWS\downloadme54.zip] 7E514F67DF1EA45F500D0B0F63BB4DDA 
[C:\WINDOWS\downloadme57.zip] 93D502B81E64EC1B5712189D6C73FA6C 
[C:\WINDOWS\downloadme6.zip] F8681F82E07611B05EFF870E7C00808B 
[C:\WINDOWS\downloadme60.zip] C30AED390AD9BA123066C6CEEE29C365 
[C:\WINDOWS\downloadme66.zip] B404E846D36733E5BEE9EFAC3EEFB1A4 
[C:\WINDOWS\downloadme69.zip] D554A94D5897EAC4A5BF82174A432A82 
[C:\WINDOWS\downloadme72.zip] 9B02A0D3CBDDF93E5390656B24EE7C88 
[C:\WINDOWS\downloadme75.zip] B9992F2720E4618936F0981E52FE243B 
[C:\WINDOWS\downloadme84.zip] 22889439DC29D18598ADB35EE28F9913 
[C:\WINDOWS\downloadme87.zip] 623C6F3B33083EF01F87AB4797916B1E 
[C:\WINDOWS\downloadme9.zip] 4326A5C37116F5B15F53DD6AB6FC5066 
[C:\WINDOWS\downloadme93.zip] 53C787BED14BC25E4C63194230CEA035 
[C:\WINDOWS\downloadme96.zip] 47289900D6AADD1D3DCE42BAFA93C692 
[C:\WINDOWS\file1.zip] E840380C5DF9CCFCD95F1CB5E3155FFF 
[C:\WINDOWS\file10.zip] FEBE03C526D45D1445AB7CED0BEEB74C 
[C:\WINDOWS\file13.zip] A2B4410DA2B5BDDD750B9FE45ECC3617 
[C:\WINDOWS\file19.zip] 839743D98F9C558F3B4DC3C9E487C6E2 
[C:\WINDOWS\file22.zip] 1CE9948564EA0B8A685036F6570F47C8 
[C:\WINDOWS\file31.zip] B06C770FB99B4E7B79D97BE939C5BCA3 
[C:\WINDOWS\file34.zip] B46353EBBC649F049E06C2F5A15FC407 
[C:\WINDOWS\file37.zip] 4DF070F1480FFC852B1787BD2EE6ECC4 
[C:\WINDOWS\file40.zip] 1F84C6A1A9DAAFEFD3DD166322F9AFAC 
[C:\WINDOWS\file43.zip] AA50BEA7648BE0786864210F8862A0A8 
[C:\WINDOWS\file46.zip] 65C204C76957E22FB8B8B6B093EB4FDD 
[C:\WINDOWS\file49.zip] 0867D5CE8965596E433659B8593C657C 
[C:\WINDOWS\file52.zip] CC9374A347F22404193CAC0D982A854B 
[C:\WINDOWS\file61.zip] EC3590A5BCA45BF71E4230B2D7558079 
[C:\WINDOWS\file64.zip] 9912C68C943A19A469253244C427586C 
[C:\WINDOWS\file67.zip] 1848499F62895F73AD2AD0796EFAFCA2 
[C:\WINDOWS\file70.zip] 23BE245CF31A62D19DF75809C7D89DE4 
[C:\WINDOWS\file76.zip] 5D1F5362EBCF352A8424DDF5492322A4 
[C:\WINDOWS\file85.zip] 64CD7AC46F9F756388A8D3224AAD08AC 
[C:\WINDOWS\file88.zip] 34B86C528892F4E5ECC5CB69846750AF 
[C:\WINDOWS\file91.zip] E54563252E4C9C2AB4C2F58DB2BDF451 
[C:\WINDOWS\file94.zip] 0F26CEA46D0748B611DF16DDB0816404 
[C:\WINDOWS\file97.zip] 8375B7AAFEB546A103ADB3C29AE53C62 
[C:\WINDOWS\files1.zip] 30EF8F11EC068CFCD90137F5B987400A 
[C:\WINDOWS\files10.zip] CB9F5CD758D7EDCF0E01F0C90F71FB60 
[C:\WINDOWS\files16.zip] 8BA740307335532C97190966D3B81A0B 
[C:\WINDOWS\files22.zip] 1B3E1FFF93C7D749EC591F468FC52394 
[C:\WINDOWS\files28.zip] 54BB5F0E38694C407C64ECDC61D818B3 
[C:\WINDOWS\files31.zip] 2829022466EC295C908EEA7A47327397 
[C:\WINDOWS\files37.zip] 8E9642027198F26A1A3A8089F8F45590 
[C:\WINDOWS\files4.zip] 0BA47C8FA9F0D579C231FFFBBDF47AD9 
[C:\WINDOWS\files43.zip] 99BAD8BD6D31C48B1BEB6DBAFEB1F98F 
[C:\WINDOWS\files49.zip] 23625A8D926AF84C4AFC31C4E6ED3879 
[C:\WINDOWS\files52.zip] 3920A3FEAA7B4E5533F61F3553C12051 
[C:\WINDOWS\files55.zip] 8F7B9C68233F5A6394063E26CF860474 
[C:\WINDOWS\files58.zip] 29D4005FD0A5D23268CA237290CA554B 
[C:\WINDOWS\files61.zip] 0034CBBA2E513B10A3491B899F611B32 
[C:\WINDOWS\files67.zip] 4954DE8AFC3BFAD40BF83BDD7EAFB93A 
[C:\WINDOWS\files70.zip] B9CD0EFA8AD64890F97197BFD3F48E1B 
[C:\WINDOWS\files73.zip] E48C6E70D5EB85D6A691BBE8F2DE81D9 
[C:\WINDOWS\files76.zip] FE0669B2BB69FC89772A04429DD16580 
[C:\WINDOWS\files79.zip] 1D87347162FDCF85AB37A3B60FE10962 
[C:\WINDOWS\files82.zip] 5CA02344C6051C28DD146AD25758189A 
[C:\WINDOWS\files85.zip] 8AD70B9F36754302D5A2B83D4D5A8850 
[C:\WINDOWS\files94.zip] 8C0F24FC63A7BA0BEE8F420F7EE7E8EA 
[C:\WINDOWS\JPGimage11.zip] 30A04EF37E8B02099900E970A7BCB0A4 
[C:\WINDOWS\JPGimage14.zip] 4CC02619F55F97DC43ECD97A1568A8DA 
[C:\WINDOWS\JPGimage17.zip] FA4F5FEDB6E6F97B035BDFDC5949F4E3 
[C:\WINDOWS\JPGimage26.zip] F86A8FEDC2302107128AC9FD8D453D15 
[C:\WINDOWS\JPGimage29.zip] 12BFF3F08ECD09F689A514065A1D6DD1 
[C:\WINDOWS\JPGimage32.zip] 5E28B31871767C96A4D99D137EE33145 
[C:\WINDOWS\JPGimage35.zip] 8209E992ACCCB13ACD8E687A5C2EF23A 
[C:\WINDOWS\JPGimage41.zip] 3AABFEA4DF96A5FDD4411818C8B4F30C 
[C:\WINDOWS\JPGimage44.zip] A9A8D0E48C5C8E88A32791CB3C48BEEF 
[C:\WINDOWS\JPGimage47.zip] A7BCED1B5CAB3F5913E6EBD523772FE7 
[C:\WINDOWS\JPGimage5.zip] 05600AAA24D796CE81869649FD59B02F 
[C:\WINDOWS\JPGimage53.zip] 010F70B93826CF7CDAA353A919E638E8 
[C:\WINDOWS\JPGimage56.zip] 21E2E43E4CA408271C6667AB9F9AE7B9 
[C:\WINDOWS\JPGimage59.zip] B08D30CC28D63C0E330219364E85A8A1 
[C:\WINDOWS\JPGimage62.zip] 8C801174BAEEA694B7F3519850664E0A 
[C:\WINDOWS\JPGimage65.zip] 32F5BED7CA0BE14FCCE7900B6870D3D4 
[C:\WINDOWS\JPGimage68.zip] 6A4180EB75DFFE3EEF2B53893368F35C 
[C:\WINDOWS\JPGimage71.zip] 0B1440A67427E39B255EED90D17301EB 
[C:\WINDOWS\JPGimage74.zip] 90C11F39901EE427468F23583827EB1D 
[C:\WINDOWS\JPGimage77.zip] 3626D99C3940937C4C4232DB122A72B8 
[C:\WINDOWS\JPGimage80.zip] D822ADF9034095713CD0A34419FD8BDC 
[C:\WINDOWS\JPGimage83.zip] E1B73600EA193AE9E6E54CCA4D93FDA6 
[C:\WINDOWS\JPGimage86.zip] 8C06D5DCE46CF3EC1EAC66A0EFFCA529 
[C:\WINDOWS\JPGimage92.zip] 1E13E557991E039F96DE06F63694739C 
[C:\WINDOWS\JPGimage95.zip] D51B088F3E81541B072CC51E0CE78494 
[C:\WINDOWS\JPGimage98.zip] 0AE6137E16B97C2A4B66919CC28709FF 
[C:\WINDOWS\look0.zip] 71ED0134E285CD71D2FEEDE500FB4BAB 
[C:\WINDOWS\look12.zip] E2109711B3CEEB6560BE0CA014D781B8 
[C:\WINDOWS\look15.zip] 2D972DE28CD08074FFC6C645B364D2DF 
[C:\WINDOWS\look18.zip] E40A8CAB609F6AD3CF9A0DC62B37163F 
[C:\WINDOWS\look24.zip] A6D7FE9E68F2E77DB626B2B403DC2CFE 
[C:\WINDOWS\look27.zip] 1E792FD40F021C6C9BD1AACEF53C1801 
[C:\WINDOWS\look36.zip] 479CC1CF861254AF8E31648D88D0D1EC 
[C:\WINDOWS\look39.zip] 2CE498549253C800ED9F05730098BE09 
[C:\WINDOWS\look42.zip] 7356E05CC5B9B7C668C026F82F008B9F 
[C:\WINDOWS\look48.zip] 382B1B284C685B833F8EB8E8FC210377 
[C:\WINDOWS\look51.zip] A5CF2D7B560FDC157EE2DA812ED52522 
[C:\WINDOWS\look57.zip] 23C0F50E610862A23E3A5C4F14FB7651 
[C:\WINDOWS\look6.zip] 62D7443B92BA1757C619D6B0B30A8EAE 
[C:\WINDOWS\look60.zip] 9AA6A253C3F8A4059D9B61087D51CF6E 
[C:\WINDOWS\look63.zip] 14E3B09DB306D7DD0410A25728E08C6C 
[C:\WINDOWS\look66.zip] 250D5AD840941E1423297D4933FAB344 
[C:\WINDOWS\look69.zip] 4F5A9C44F60DD6E7E0552EDF6286D529 
[C:\WINDOWS\look72.zip] C0FA78EFD370DD4061302759AEB59617 
[C:\WINDOWS\look75.zip] B12186950D1C4F6243CC1193BB01FE55 
[C:\WINDOWS\look78.zip] 477BD7CE3AF4B6A3F60F5E9ED50E6BAE 
[C:\WINDOWS\look84.zip] A8BDB892E6A9B80BDB661565960040B2 
[C:\WINDOWS\look93.zip] BF9C25FEAD3F4392215885EB33BEA5CD 
[C:\WINDOWS\look96.zip] FD53E0B1C665243711B5D61E4E53ED6B 
[C:\WINDOWS
ews11.zip] 43CE04ADDFFF53DE294256A366D5D67A 
[C:\WINDOWS
ews14.zip] FE7A6A330ABA99E622D3E9B99DC5ECE3 
[C:\WINDOWS
ews2.zip] CA32DF75F6436F6CB16438F8216EBC0A 
[C:\WINDOWS
ews20.zip] FFA2663EC497845D0AE31F6C7FA0D339 
[C:\WINDOWS
ews29.zip] E6B6412F0FF4F96A254EC40A4911C77B 
[C:\WINDOWS
ews35.zip] 0A5C13F72C47CB5443E7BBD44CEE9BF0 
[C:\WINDOWS
ews38.zip] 5B6724EFD74465ECA5CD2989F961A394 
[C:\WINDOWS
ews41.zip] 88397CDEDB6B1705B54E5116E260E89B 
[C:\WINDOWS
ews44.zip] DA26F984CB5FB7E972801ED08A4FA4D1 
[C:\WINDOWS
ews47.zip] AE0EE5FF9FB50D4F4DAFA859BAC06823 
[C:\WINDOWS
ews5.zip] E663625761BB4974E2D7239B30AFA204 
[C:\WINDOWS
ews50.zip] 43A69A7ED0E9EB6B8DC670C5E2CA6959 
[C:\WINDOWS
ews53.zip] D2229B25E1A8B1E97BC4061957D782B5 
[C:\WINDOWS
ews56.zip] B4F7611407A85C165C7A780A322EB933 
[C:\WINDOWS
ews59.zip] 28897F3AD5FC00232CE0A40B6E55B27F 
[C:\WINDOWS
ews62.zip] 5D6A7A92D4021446BD0FCA3B72464C5E 
[C:\WINDOWS
ews65.zip] 50AA233D1576A43A596CFEBFB3DF6C10 
[C:\WINDOWS
ews68.zip] 5B6D02D5AD0C1C3B7307556F9A193384 
[C:\WINDOWS
ews71.zip] 2E80BD70EA466E4456E3318938A273BF 
[C:\WINDOWS
ews74.zip] 540D3CE826054B8A2C16531B03DAB1BA 
[C:\WINDOWS
ews80.zip] 5EBE1284F6EF7ACEF57D7D7F50AB6118 
[C:\WINDOWS
ews83.zip] C98F2C0BC193C454801A64C0F15BBFD5 
[C:\WINDOWS
ews86.zip] 0FAB05D3CD051BC4921451616DDF81FD 
[C:\WINDOWS
ews89.zip] AB98C579A85CF898C6FDF43945C7FE08 
[C:\WINDOWS
ews92.zip] 0977099F9FA036A9B9ADD8AA471D7DDF 
[C:\WINDOWS
ews95.zip] 55F52663E369E7C969BC6D04CE613A30 
[C:\WINDOWS
ews98.zip] D088CAA9AD2C3231B6D2F0CE8B6B9BE4 
[C:\WINDOWS\system32\ACDSee.scr] 80A299C1EBC79FA2F24C26DF93543A64 
 
  
Les fichiers et clés de registre supprimés ont été sauvegardés dans le fichier 14092007_16382732.zip
 
 
------------------------------------------------------------------------  
Auteur : !aur3n7                     Contact: https://www.ionos.fr/     
------------------------------------------------------------------------   
 
---------------------------------------------   END   ---------------------------------------------

sparadra62 · Answer

Logfile of HijackThis v1.99.1
Scan saved at 16:41:11, on 14/09/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\a-squared free\a2service.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\JMRaidTool.exe
C:\WINDOWS\SkyTel.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\MSI\Live Update 3\LMonitor.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\Program Files\Brother\ControlCenter2\brctrcen.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\WINDOWS\FixCamera.exe
C:\WINDOWS	snp2std.exe
C:\WINDOWS\vsnp2std.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Copernic Desktop Search 2\DesktopSearchService.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\PROGRA~1\Wanadoo\Watch.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\ENJOY Plus!\ENJOY Plus!.exe
C:\Program Files\eMule\eMule.exe
C:\WINDOWS\system32\WISPTIS.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Copernic Desktop Search 2 - {968631B6-4729-440D-9BF4-251F5593EC9A} - C:\Program Files\Copernic Desktop Search 2\DesktopSearchBand201013011.dll
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [Copernic Desktop Search 2] "C:\Program Files\Copernic Desktop Search 2\DesktopSearchService.exe" /tray
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?71422339126146d2a96aebc02f627548
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?71422339126146d2a96aebc02f627548
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
O21 - SSODL: Version3 - {810E7B33-8930-493C-9C8F-32C399F2BD54} - (no file)
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - c:\program files\a-squared free\a2service.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe

sparadra62 · Answer

plus personne?

Regis59 · Answer

!^^![ME], Peux tu faire uploader les zip détectés dans MSNfix?

A+

sparadra62 · Answer

ok ,voila ce que j ai donc fait ensuite tout seul comme un grand

telecharger avg antispyware,installer et mettre a jour tres important de mettre a jour
redemarrer en mode sans echec et analyser avec AVG
ensuite supprimer les tracking cookies et j ai mis le reste en quarantaine
apres j ai redemarrer en mode normal et supprimer ma quarantaine et voila msn sent moins mauvais !
je ne sais pas si tout sa est juste je ne suis qu un debutant alors si vous avez envie de faire comme moi demandez d abord a un oeil plus expert sa ne vous coutera pas plus cher 
a plus

Regis59 · Answer

Relance msnfix et copie colle le rapport stp

a+

sparadra62 · Answer

MSNFix 1.505  
 
C:\Documents and Settings\Admin\Bureau\MSNFix\MSNFix 
Fix exécuté le 15/09/2007 - 14:56:49,56 By Admin 
mode normal    
    
************************ Recherche les fichiers présents      
    
... C:\WINDOWS\system32\direct3dx.dll 
... C:\WINDOWS\system32\directxd.exe 
... C:\WINDOWS\files1.zip 
... C:\WINDOWS\files10.zip 
... C:\WINDOWS\files16.zip 
... C:\WINDOWS\files22.zip 
... C:\WINDOWS\files28.zip 
... C:\WINDOWS\files31.zip 
... C:\WINDOWS\files37.zip 
... C:\WINDOWS\files4.zip 
... C:\WINDOWS\files43.zip 
... C:\WINDOWS\files49.zip 
... C:\WINDOWS\files52.zip 
... C:\WINDOWS\files55.zip 
... C:\WINDOWS\files58.zip 
... C:\WINDOWS\files61.zip 
... C:\WINDOWS\files67.zip 
... C:\WINDOWS\files70.zip 
... C:\WINDOWS\files73.zip 
... C:\WINDOWS\files76.zip 
... C:\WINDOWS\files79.zip 
... C:\WINDOWS\files82.zip 
... C:\WINDOWS\files85.zip 
... C:\WINDOWS\files94.zip 
... C:\WINDOWS
ews11.zip 
... C:\WINDOWS
ews14.zip 
... C:\WINDOWS
ews2.zip 
... C:\WINDOWS
ews20.zip 
... C:\WINDOWS
ews29.zip 
... C:\WINDOWS
ews35.zip 
... C:\WINDOWS
ews38.zip 
... C:\WINDOWS
ews41.zip 
... C:\WINDOWS
ews44.zip 
... C:\WINDOWS
ews47.zip 
... C:\WINDOWS
ews5.zip 
... C:\WINDOWS
ews50.zip 
... C:\WINDOWS
ews53.zip 
... C:\WINDOWS
ews56.zip 
... C:\WINDOWS
ews59.zip 
... C:\WINDOWS
ews62.zip 
... C:\WINDOWS
ews65.zip 
... C:\WINDOWS
ews68.zip 
... C:\WINDOWS
ews71.zip 
... C:\WINDOWS
ews74.zip 
... C:\WINDOWS
ews80.zip 
... C:\WINDOWS
ews83.zip 
... C:\WINDOWS
ews86.zip 
... C:\WINDOWS
ews89.zip 
... C:\WINDOWS
ews92.zip 
... C:\WINDOWS
ews95.zip 
... C:\WINDOWS
ews98.zip 

************************  heur. MSNCHK.exe ***** /!\ beta test /!\

[!] C:\WINDOWS\downloadme0.zip is INFECTED
[!] C:\WINDOWS\downloadme18.zip is INFECTED
[!] C:\WINDOWS\downloadme21.zip is INFECTED
[!] C:\WINDOWS\downloadme27.zip is INFECTED
[!] C:\WINDOWS\downloadme3.zip is INFECTED
[!] C:\WINDOWS\downloadme30.zip is INFECTED
[!] C:\WINDOWS\downloadme33.zip is INFECTED
[!] C:\WINDOWS\downloadme39.zip is INFECTED
[!] C:\WINDOWS\downloadme45.zip is INFECTED
[!] C:\WINDOWS\downloadme48.zip is INFECTED
[!] C:\WINDOWS\downloadme51.zip is INFECTED
[!] C:\WINDOWS\downloadme54.zip is INFECTED
[!] C:\WINDOWS\downloadme57.zip is INFECTED
[!] C:\WINDOWS\downloadme6.zip is INFECTED
[!] C:\WINDOWS\downloadme60.zip is INFECTED
[!] C:\WINDOWS\downloadme66.zip is INFECTED
[!] C:\WINDOWS\downloadme69.zip is INFECTED
[!] C:\WINDOWS\downloadme72.zip is INFECTED
[!] C:\WINDOWS\downloadme75.zip is INFECTED
[!] C:\WINDOWS\downloadme84.zip is INFECTED
[!] C:\WINDOWS\downloadme87.zip is INFECTED
[!] C:\WINDOWS\downloadme9.zip is INFECTED
[!] C:\WINDOWS\downloadme93.zip is INFECTED
[!] C:\WINDOWS\downloadme96.zip is INFECTED
[!] C:\WINDOWS\file1.zip is INFECTED
[!] C:\WINDOWS\file10.zip is INFECTED
[!] C:\WINDOWS\file13.zip is INFECTED
[!] C:\WINDOWS\file19.zip is INFECTED
[!] C:\WINDOWS\file22.zip is INFECTED
[!] C:\WINDOWS\file31.zip is INFECTED
[!] C:\WINDOWS\file34.zip is INFECTED
[!] C:\WINDOWS\file37.zip is INFECTED
[!] C:\WINDOWS\file40.zip is INFECTED
[!] C:\WINDOWS\file43.zip is INFECTED
[!] C:\WINDOWS\file46.zip is INFECTED
[!] C:\WINDOWS\file49.zip is INFECTED
[!] C:\WINDOWS\file52.zip is INFECTED
[!] C:\WINDOWS\file61.zip is INFECTED
[!] C:\WINDOWS\file64.zip is INFECTED
[!] C:\WINDOWS\file67.zip is INFECTED
[!] C:\WINDOWS\file70.zip is INFECTED
[!] C:\WINDOWS\file76.zip is INFECTED
[!] C:\WINDOWS\file85.zip is INFECTED
[!] C:\WINDOWS\file88.zip is INFECTED
[!] C:\WINDOWS\file91.zip is INFECTED
[!] C:\WINDOWS\file94.zip is INFECTED
[!] C:\WINDOWS\file97.zip is INFECTED
[!] C:\WINDOWS\files1.zip is INFECTED
[!] C:\WINDOWS\files10.zip is INFECTED
[!] C:\WINDOWS\files16.zip is INFECTED
[!] C:\WINDOWS\files22.zip is INFECTED
[!] C:\WINDOWS\files28.zip is INFECTED
[!] C:\WINDOWS\files31.zip is INFECTED
[!] C:\WINDOWS\files37.zip is INFECTED
[!] C:\WINDOWS\files4.zip is INFECTED
[!] C:\WINDOWS\files43.zip is INFECTED
[!] C:\WINDOWS\files49.zip is INFECTED
[!] C:\WINDOWS\files52.zip is INFECTED
[!] C:\WINDOWS\files55.zip is INFECTED
[!] C:\WINDOWS\files58.zip is INFECTED
[!] C:\WINDOWS\files61.zip is INFECTED
[!] C:\WINDOWS\files67.zip is INFECTED
[!] C:\WINDOWS\files70.zip is INFECTED
[!] C:\WINDOWS\files73.zip is INFECTED
[!] C:\WINDOWS\files76.zip is INFECTED
[!] C:\WINDOWS\files79.zip is INFECTED
[!] C:\WINDOWS\files82.zip is INFECTED
[!] C:\WINDOWS\files85.zip is INFECTED
[!] C:\WINDOWS\files94.zip is INFECTED
[!] C:\WINDOWS\JPGimage11.zip is INFECTED
[!] C:\WINDOWS\JPGimage14.zip is INFECTED
[!] C:\WINDOWS\JPGimage17.zip is INFECTED
[!] C:\WINDOWS\JPGimage26.zip is INFECTED
[!] C:\WINDOWS\JPGimage29.zip is INFECTED
[!] C:\WINDOWS\JPGimage32.zip is INFECTED
[!] C:\WINDOWS\JPGimage35.zip is INFECTED
[!] C:\WINDOWS\JPGimage41.zip is INFECTED
[!] C:\WINDOWS\JPGimage44.zip is INFECTED
[!] C:\WINDOWS\JPGimage47.zip is INFECTED
[!] C:\WINDOWS\JPGimage5.zip is INFECTED
[!] C:\WINDOWS\JPGimage53.zip is INFECTED
[!] C:\WINDOWS\JPGimage56.zip is INFECTED
[!] C:\WINDOWS\JPGimage59.zip is INFECTED
[!] C:\WINDOWS\JPGimage62.zip is INFECTED
[!] C:\WINDOWS\JPGimage65.zip is INFECTED
[!] C:\WINDOWS\JPGimage68.zip is INFECTED
[!] C:\WINDOWS\JPGimage71.zip is INFECTED
[!] C:\WINDOWS\JPGimage74.zip is INFECTED
[!] C:\WINDOWS\JPGimage77.zip is INFECTED
[!] C:\WINDOWS\JPGimage80.zip is INFECTED
[!] C:\WINDOWS\JPGimage83.zip is INFECTED
[!] C:\WINDOWS\JPGimage86.zip is INFECTED
[!] C:\WINDOWS\JPGimage92.zip is INFECTED
[!] C:\WINDOWS\JPGimage95.zip is INFECTED
[!] C:\WINDOWS\JPGimage98.zip is INFECTED
[!] C:\WINDOWS\look0.zip is INFECTED
[!] C:\WINDOWS\look12.zip is INFECTED
[!] C:\WINDOWS\look15.zip is INFECTED
[!] C:\WINDOWS\look18.zip is INFECTED
[!] C:\WINDOWS\look24.zip is INFECTED
[!] C:\WINDOWS\look27.zip is INFECTED
[!] C:\WINDOWS\look36.zip is INFECTED
[!] C:\WINDOWS\look39.zip is INFECTED
[!] C:\WINDOWS\look42.zip is INFECTED
[!] C:\WINDOWS\look48.zip is INFECTED
[!] C:\WINDOWS\look51.zip is INFECTED
[!] C:\WINDOWS\look57.zip is INFECTED
[!] C:\WINDOWS\look6.zip is INFECTED
[!] C:\WINDOWS\look60.zip is INFECTED
[!] C:\WINDOWS\look63.zip is INFECTED
[!] C:\WINDOWS\look66.zip is INFECTED
[!] C:\WINDOWS\look69.zip is INFECTED
[!] C:\WINDOWS\look72.zip is INFECTED
[!] C:\WINDOWS\look75.zip is INFECTED
[!] C:\WINDOWS\look78.zip is INFECTED
[!] C:\WINDOWS\look84.zip is INFECTED
[!] C:\WINDOWS\look93.zip is INFECTED
[!] C:\WINDOWS\look96.zip is INFECTED
[!] C:\WINDOWS
ews11.zip is INFECTED
[!] C:\WINDOWS
ews14.zip is INFECTED
[!] C:\WINDOWS
ews2.zip is INFECTED
[!] C:\WINDOWS
ews20.zip is INFECTED
[!] C:\WINDOWS
ews29.zip is INFECTED
[!] C:\WINDOWS
ews35.zip is INFECTED
[!] C:\WINDOWS
ews38.zip is INFECTED
[!] C:\WINDOWS
ews41.zip is INFECTED
[!] C:\WINDOWS
ews44.zip is INFECTED
[!] C:\WINDOWS
ews47.zip is INFECTED
[!] C:\WINDOWS
ews5.zip is INFECTED
[!] C:\WINDOWS
ews50.zip is INFECTED
[!] C:\WINDOWS
ews53.zip is INFECTED
[!] C:\WINDOWS
ews56.zip is INFECTED
[!] C:\WINDOWS
ews59.zip is INFECTED
[!] C:\WINDOWS
ews62.zip is INFECTED
[!] C:\WINDOWS
ews65.zip is INFECTED
[!] C:\WINDOWS
ews68.zip is INFECTED
[!] C:\WINDOWS
ews71.zip is INFECTED
[!] C:\WINDOWS
ews74.zip is INFECTED
[!] C:\WINDOWS
ews80.zip is INFECTED
[!] C:\WINDOWS
ews83.zip is INFECTED
[!] C:\WINDOWS
ews86.zip is INFECTED
[!] C:\WINDOWS
ews89.zip is INFECTED
[!] C:\WINDOWS
ews92.zip is INFECTED
[!] C:\WINDOWS
ews95.zip is INFECTED
[!] C:\WINDOWS
ews98.zip is INFECTED

 
************************ Recherche les dossiers présents       
 
Aucun dossier trouvé 
 
 
 
 
************************ Suppression des fichiers       
    
.. OK ... C:\WINDOWS\system32\direct3dx.dll  
.. OK ... C:\WINDOWS\system32\directxd.exe  
.. OK ... C:\WINDOWS\files1.zip 
.. OK ... C:\WINDOWS\files10.zip 
.. OK ... C:\WINDOWS\files16.zip 
.. OK ... C:\WINDOWS\files22.zip 
.. OK ... C:\WINDOWS\files28.zip 
.. OK ... C:\WINDOWS\files31.zip 
.. OK ... C:\WINDOWS\files37.zip 
.. OK ... C:\WINDOWS\files4.zip 
.. OK ... C:\WINDOWS\files43.zip 
.. OK ... C:\WINDOWS\files49.zip 
.. OK ... C:\WINDOWS\files52.zip 
.. OK ... C:\WINDOWS\files55.zip 
.. OK ... C:\WINDOWS\files58.zip 
.. OK ... C:\WINDOWS\files61.zip 
.. OK ... C:\WINDOWS\files67.zip 
.. OK ... C:\WINDOWS\files70.zip 
.. OK ... C:\WINDOWS\files73.zip 
.. OK ... C:\WINDOWS\files76.zip 
.. OK ... C:\WINDOWS\files79.zip 
.. OK ... C:\WINDOWS\files82.zip 
.. OK ... C:\WINDOWS\files85.zip 
.. OK ... C:\WINDOWS\files94.zip 
.. OK ... C:\WINDOWS
ews11.zip 
.. OK ... C:\WINDOWS
ews14.zip 
.. OK ... C:\WINDOWS
ews2.zip 
.. OK ... C:\WINDOWS
ews20.zip 
.. OK ... C:\WINDOWS
ews29.zip 
.. OK ... C:\WINDOWS
ews35.zip 
.. OK ... C:\WINDOWS
ews38.zip 
.. OK ... C:\WINDOWS
ews41.zip 
.. OK ... C:\WINDOWS
ews44.zip 
.. OK ... C:\WINDOWS
ews47.zip 
.. OK ... C:\WINDOWS
ews5.zip 
.. OK ... C:\WINDOWS
ews50.zip 
.. OK ... C:\WINDOWS
ews53.zip 
.. OK ... C:\WINDOWS
ews56.zip 
.. OK ... C:\WINDOWS
ews59.zip 
.. OK ... C:\WINDOWS
ews62.zip 
.. OK ... C:\WINDOWS
ews65.zip 
.. OK ... C:\WINDOWS
ews68.zip 
.. OK ... C:\WINDOWS
ews71.zip 
.. OK ... C:\WINDOWS
ews74.zip 
.. OK ... C:\WINDOWS
ews80.zip 
.. OK ... C:\WINDOWS
ews83.zip 
.. OK ... C:\WINDOWS
ews86.zip 
.. OK ... C:\WINDOWS
ews89.zip 
.. OK ... C:\WINDOWS
ews92.zip 
.. OK ... C:\WINDOWS
ews95.zip 
.. OK ... C:\WINDOWS
ews98.zip 
 
 
 
************************ Nettoyage du registre 
 
 
 
************************ Fichiers suspects 
 
/!\ ces fichiers nécessitent un avis expérimenté avant toute intervention 
 
[C:\WINDOWS\downloadme0.zip] B2AB3A5366854D7083DE74860BE27C6E 
[C:\WINDOWS\downloadme18.zip] 46A3FA5F27AF5545E335F047DB745942 
[C:\WINDOWS\downloadme21.zip] D35FF86D9DA9B4DCE5387C90B7A10A8C 
[C:\WINDOWS\downloadme27.zip] 3943674672C66C01E7B10A90CE0CD4BA 
[C:\WINDOWS\downloadme3.zip] 97E346E992AB198786F81F7E1A5D5DED 
[C:\WINDOWS\downloadme30.zip] 34825C0FF3339A5F47A3AABB429CEDC5 
[C:\WINDOWS\downloadme33.zip] 2B34E36987AE6A5553C53813FD27B1C5 
[C:\WINDOWS\downloadme39.zip] E9631065D045E109D6F60CBE6FB0A4A0 
[C:\WINDOWS\downloadme45.zip] 2C322D06A84920B34D81994CE8B76E5D 
[C:\WINDOWS\downloadme48.zip] 1C01821A00B513F000EB4DDD8C8C52CA 
[C:\WINDOWS\downloadme51.zip] 9A4B87C3BF24FF3480DF4BAE06DE0B2F 
[C:\WINDOWS\downloadme54.zip] 7E514F67DF1EA45F500D0B0F63BB4DDA 
[C:\WINDOWS\downloadme57.zip] 93D502B81E64EC1B5712189D6C73FA6C 
[C:\WINDOWS\downloadme6.zip] F8681F82E07611B05EFF870E7C00808B 
[C:\WINDOWS\downloadme60.zip] C30AED390AD9BA123066C6CEEE29C365 
[C:\WINDOWS\downloadme66.zip] B404E846D36733E5BEE9EFAC3EEFB1A4 
[C:\WINDOWS\downloadme69.zip] D554A94D5897EAC4A5BF82174A432A82 
[C:\WINDOWS\downloadme72.zip] 9B02A0D3CBDDF93E5390656B24EE7C88 
[C:\WINDOWS\downloadme75.zip] B9992F2720E4618936F0981E52FE243B 
[C:\WINDOWS\downloadme84.zip] 22889439DC29D18598ADB35EE28F9913 
[C:\WINDOWS\downloadme87.zip] 623C6F3B33083EF01F87AB4797916B1E 
[C:\WINDOWS\downloadme9.zip] 4326A5C37116F5B15F53DD6AB6FC5066 
[C:\WINDOWS\downloadme93.zip] 53C787BED14BC25E4C63194230CEA035 
[C:\WINDOWS\downloadme96.zip] 47289900D6AADD1D3DCE42BAFA93C692 
[C:\WINDOWS\file1.zip] E840380C5DF9CCFCD95F1CB5E3155FFF 
[C:\WINDOWS\file10.zip] FEBE03C526D45D1445AB7CED0BEEB74C 
[C:\WINDOWS\file13.zip] A2B4410DA2B5BDDD750B9FE45ECC3617 
[C:\WINDOWS\file19.zip] 839743D98F9C558F3B4DC3C9E487C6E2 
[C:\WINDOWS\file22.zip] 1CE9948564EA0B8A685036F6570F47C8 
[C:\WINDOWS\file31.zip] B06C770FB99B4E7B79D97BE939C5BCA3 
[C:\WINDOWS\file34.zip] B46353EBBC649F049E06C2F5A15FC407 
[C:\WINDOWS\file37.zip] 4DF070F1480FFC852B1787BD2EE6ECC4 
[C:\WINDOWS\file40.zip] 1F84C6A1A9DAAFEFD3DD166322F9AFAC 
[C:\WINDOWS\file43.zip] AA50BEA7648BE0786864210F8862A0A8 
[C:\WINDOWS\file46.zip] 65C204C76957E22FB8B8B6B093EB4FDD 
[C:\WINDOWS\file49.zip] 0867D5CE8965596E433659B8593C657C 
[C:\WINDOWS\file52.zip] CC9374A347F22404193CAC0D982A854B 
[C:\WINDOWS\file61.zip] EC3590A5BCA45BF71E4230B2D7558079 
[C:\WINDOWS\file64.zip] 9912C68C943A19A469253244C427586C 
[C:\WINDOWS\file67.zip] 1848499F62895F73AD2AD0796EFAFCA2 
[C:\WINDOWS\file70.zip] 23BE245CF31A62D19DF75809C7D89DE4 
[C:\WINDOWS\file76.zip] 5D1F5362EBCF352A8424DDF5492322A4 
[C:\WINDOWS\file85.zip] 64CD7AC46F9F756388A8D3224AAD08AC 
[C:\WINDOWS\file88.zip] 34B86C528892F4E5ECC5CB69846750AF 
[C:\WINDOWS\file91.zip] E54563252E4C9C2AB4C2F58DB2BDF451 
[C:\WINDOWS\file94.zip] 0F26CEA46D0748B611DF16DDB0816404 
[C:\WINDOWS\file97.zip] 8375B7AAFEB546A103ADB3C29AE53C62 
[C:\WINDOWS\JPGimage11.zip] 30A04EF37E8B02099900E970A7BCB0A4 
[C:\WINDOWS\JPGimage14.zip] 4CC02619F55F97DC43ECD97A1568A8DA 
[C:\WINDOWS\JPGimage17.zip] FA4F5FEDB6E6F97B035BDFDC5949F4E3 
[C:\WINDOWS\JPGimage26.zip] F86A8FEDC2302107128AC9FD8D453D15 
[C:\WINDOWS\JPGimage29.zip] 12BFF3F08ECD09F689A514065A1D6DD1 
[C:\WINDOWS\JPGimage32.zip] 5E28B31871767C96A4D99D137EE33145 
[C:\WINDOWS\JPGimage35.zip] 8209E992ACCCB13ACD8E687A5C2EF23A 
[C:\WINDOWS\JPGimage41.zip] 3AABFEA4DF96A5FDD4411818C8B4F30C 
[C:\WINDOWS\JPGimage44.zip] A9A8D0E48C5C8E88A32791CB3C48BEEF 
[C:\WINDOWS\JPGimage47.zip] A7BCED1B5CAB3F5913E6EBD523772FE7 
[C:\WINDOWS\JPGimage5.zip] 05600AAA24D796CE81869649FD59B02F 
[C:\WINDOWS\JPGimage53.zip] 010F70B93826CF7CDAA353A919E638E8 
[C:\WINDOWS\JPGimage56.zip] 21E2E43E4CA408271C6667AB9F9AE7B9 
[C:\WINDOWS\JPGimage59.zip] B08D30CC28D63C0E330219364E85A8A1 
[C:\WINDOWS\JPGimage62.zip] 8C801174BAEEA694B7F3519850664E0A 
[C:\WINDOWS\JPGimage65.zip] 32F5BED7CA0BE14FCCE7900B6870D3D4 
[C:\WINDOWS\JPGimage68.zip] 6A4180EB75DFFE3EEF2B53893368F35C 
[C:\WINDOWS\JPGimage71.zip] 0B1440A67427E39B255EED90D17301EB 
[C:\WINDOWS\JPGimage74.zip] 90C11F39901EE427468F23583827EB1D 
[C:\WINDOWS\JPGimage77.zip] 3626D99C3940937C4C4232DB122A72B8 
[C:\WINDOWS\JPGimage80.zip] D822ADF9034095713CD0A34419FD8BDC 
[C:\WINDOWS\JPGimage83.zip] E1B73600EA193AE9E6E54CCA4D93FDA6 
[C:\WINDOWS\JPGimage86.zip] 8C06D5DCE46CF3EC1EAC66A0EFFCA529 
[C:\WINDOWS\JPGimage92.zip] 1E13E557991E039F96DE06F63694739C 
[C:\WINDOWS\JPGimage95.zip] D51B088F3E81541B072CC51E0CE78494 
[C:\WINDOWS\JPGimage98.zip] 0AE6137E16B97C2A4B66919CC28709FF 
[C:\WINDOWS\look0.zip] 71ED0134E285CD71D2FEEDE500FB4BAB 
[C:\WINDOWS\look12.zip] E2109711B3CEEB6560BE0CA014D781B8 
[C:\WINDOWS\look15.zip] 2D972DE28CD08074FFC6C645B364D2DF 
[C:\WINDOWS\look18.zip] E40A8CAB609F6AD3CF9A0DC62B37163F 
[C:\WINDOWS\look24.zip] A6D7FE9E68F2E77DB626B2B403DC2CFE 
[C:\WINDOWS\look27.zip] 1E792FD40F021C6C9BD1AACEF53C1801 
[C:\WINDOWS\look36.zip] 479CC1CF861254AF8E31648D88D0D1EC 
[C:\WINDOWS\look39.zip] 2CE498549253C800ED9F05730098BE09 
[C:\WINDOWS\look42.zip] 7356E05CC5B9B7C668C026F82F008B9F 
[C:\WINDOWS\look48.zip] 382B1B284C685B833F8EB8E8FC210377 
[C:\WINDOWS\look51.zip] A5CF2D7B560FDC157EE2DA812ED52522 
[C:\WINDOWS\look57.zip] 23C0F50E610862A23E3A5C4F14FB7651 
[C:\WINDOWS\look6.zip] 62D7443B92BA1757C619D6B0B30A8EAE 
[C:\WINDOWS\look60.zip] 9AA6A253C3F8A4059D9B61087D51CF6E 
[C:\WINDOWS\look63.zip] 14E3B09DB306D7DD0410A25728E08C6C 
[C:\WINDOWS\look66.zip] 250D5AD840941E1423297D4933FAB344 
[C:\WINDOWS\look69.zip] 4F5A9C44F60DD6E7E0552EDF6286D529 
[C:\WINDOWS\look72.zip] C0FA78EFD370DD4061302759AEB59617 
[C:\WINDOWS\look75.zip] B12186950D1C4F6243CC1193BB01FE55 
[C:\WINDOWS\look78.zip] 477BD7CE3AF4B6A3F60F5E9ED50E6BAE 
[C:\WINDOWS\look84.zip] A8BDB892E6A9B80BDB661565960040B2 
[C:\WINDOWS\look93.zip] BF9C25FEAD3F4392215885EB33BEA5CD 
[C:\WINDOWS\look96.zip] FD53E0B1C665243711B5D61E4E53ED6B 

[color=#FF0000][b]==>[/b][/color] SVP merci d'envoyer le fichier  [b] C:\DOCUME~1\Admin\Bureau\Upload_Me.zip [/b] sur http://upload.changelog.fr

 
  
Les fichiers et clés de registre supprimés ont été sauvegardés dans le fichier 15092007_14572832.zip
 
 
------------------------------------------------------------------------  
Auteur : !aur3n7                     Contact: https://www.ionos.fr/     
------------------------------------------------------------------------   
 
---------------------------------------------   END   ---------------------------------------------

Regis59 · Answer

Salut,

Clique ici:
 http://upload.changelog.fr 

Pseudo, met Regis59

Clique sur Parcourir et recherche:
C:\DOCUME~1\Admin\Bureau\Upload_Me.zip

Clique sur Envoyer.

télécharge OTMoveIt http://download.bleepingcomputer.com/oldtimer/OTMoveIt.exe (de Old_Timer) sur ton Bureau.
double-clique sur OTMoveIt.exe pour le lancer.
copie la liste qui se trouve ci-dessous,

C:\WINDOWS\downloadme0.zip
C:\WINDOWS\downloadme18.zip
C:\WINDOWS\downloadme21.zip
C:\WINDOWS\downloadme27.zip
C:\WINDOWS\downloadme3.zip
C:\WINDOWS\downloadme30.zip
C:\WINDOWS\downloadme33.zip
C:\WINDOWS\downloadme39.zip
C:\WINDOWS\downloadme45.zip
C:\WINDOWS\downloadme48.zip
C:\WINDOWS\downloadme51.zip
C:\WINDOWS\downloadme54.zip
C:\WINDOWS\downloadme57.zip
C:\WINDOWS\downloadme6.zip
C:\WINDOWS\downloadme60.zip
C:\WINDOWS\downloadme66.zip
C:\WINDOWS\downloadme69.zip
C:\WINDOWS\downloadme72.zip
C:\WINDOWS\downloadme75.zip
C:\WINDOWS\downloadme84.zip
C:\WINDOWS\downloadme87.zip
C:\WINDOWS\downloadme9.zip
C:\WINDOWS\downloadme93.zip
C:\WINDOWS\downloadme96.zip
C:\WINDOWS\file1.zip
C:\WINDOWS\file10.zip
C:\WINDOWS\file13.zip
C:\WINDOWS\file19.zip
C:\WINDOWS\file22.zip
C:\WINDOWS\file31.zip
C:\WINDOWS\file34.zip
C:\WINDOWS\file37.zip
C:\WINDOWS\file40.zip
C:\WINDOWS\file43.zip
C:\WINDOWS\file46.zip
C:\WINDOWS\file49.zip
C:\WINDOWS\file52.zip
C:\WINDOWS\file61.zip
C:\WINDOWS\file64.zip
C:\WINDOWS\file67.zip
C:\WINDOWS\file70.zip
C:\WINDOWS\file76.zip
C:\WINDOWS\file85.zip
C:\WINDOWS\file88.zip
C:\WINDOWS\file91.zip
C:\WINDOWS\file94.zip
C:\WINDOWS\file97.zip
C:\WINDOWS\JPGimage11.zip
C:\WINDOWS\JPGimage14.zip
C:\WINDOWS\JPGimage17.zip
C:\WINDOWS\JPGimage26.zip
C:\WINDOWS\JPGimage29.zip
C:\WINDOWS\JPGimage32.zip
C:\WINDOWS\JPGimage35.zip
C:\WINDOWS\JPGimage41.zip
C:\WINDOWS\JPGimage44.zip
C:\WINDOWS\JPGimage47.zip
C:\WINDOWS\JPGimage5.zip
C:\WINDOWS\JPGimage53.zip
C:\WINDOWS\JPGimage56.zip
C:\WINDOWS\JPGimage59.zip
C:\WINDOWS\JPGimage62.zip
C:\WINDOWS\JPGimage65.zip
C:\WINDOWS\JPGimage68.zip
C:\WINDOWS\JPGimage71.zip
C:\WINDOWS\JPGimage74.zip
C:\WINDOWS\JPGimage77.zip
C:\WINDOWS\JPGimage80.zip
C:\WINDOWS\JPGimage83.zip
C:\WINDOWS\JPGimage86.zip
C:\WINDOWS\JPGimage92.zip
C:\WINDOWS\JPGimage95.zip
[C:\WINDOWS\JPGimage98.zip
[C:\WINDOWS\look0.zip
[C:\WINDOWS\look12.zip
[C:\WINDOWS\look15.zip
[C:\WINDOWS\look18.zip
[C:\WINDOWS\look24.zip
[C:\WINDOWS\look27.zip
[C:\WINDOWS\look36.zip
[C:\WINDOWS\look39.zip
[C:\WINDOWS\look42.zip
[C:\WINDOWS\look48.zip
[C:\WINDOWS\look51.zip
[C:\WINDOWS\look57.zip
[C:\WINDOWS\look6.zip
[C:\WINDOWS\look60.zip
[C:\WINDOWS\look63.zip
[C:\WINDOWS\look66.zip
[C:\WINDOWS\look69.zip
[C:\WINDOWS\look72.zip
[C:\WINDOWS\look75.zip
[C:\WINDOWS\look78.zip
[C:\WINDOWS\look84.zip
[C:\WINDOWS\look93.zip
[C:\WINDOWS\look96.zip

et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.
[quote]liste chemin des fichiers/et ou dossiers à supprimer
clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre "Results".
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.

A+

sparadra62 · Answer

C:\WINDOWS\downloadme0.zip moved successfully.
C:\WINDOWS\downloadme18.zip moved successfully.
C:\WINDOWS\downloadme21.zip moved successfully.
C:\WINDOWS\downloadme27.zip moved successfully.
C:\WINDOWS\downloadme3.zip moved successfully.
C:\WINDOWS\downloadme30.zip moved successfully.
C:\WINDOWS\downloadme33.zip moved successfully.
C:\WINDOWS\downloadme39.zip moved successfully.
C:\WINDOWS\downloadme45.zip moved successfully.
C:\WINDOWS\downloadme48.zip moved successfully.
C:\WINDOWS\downloadme51.zip moved successfully.
C:\WINDOWS\downloadme54.zip moved successfully.
C:\WINDOWS\downloadme57.zip moved successfully.
C:\WINDOWS\downloadme6.zip moved successfully.
C:\WINDOWS\downloadme60.zip moved successfully.
C:\WINDOWS\downloadme66.zip moved successfully.
C:\WINDOWS\downloadme69.zip moved successfully.
C:\WINDOWS\downloadme72.zip moved successfully.
C:\WINDOWS\downloadme75.zip moved successfully.
C:\WINDOWS\downloadme84.zip moved successfully.
C:\WINDOWS\downloadme87.zip moved successfully.
C:\WINDOWS\downloadme9.zip moved successfully.
C:\WINDOWS\downloadme93.zip moved successfully.
C:\WINDOWS\downloadme96.zip moved successfully.
C:\WINDOWS\file1.zip moved successfully.
C:\WINDOWS\file10.zip moved successfully.
C:\WINDOWS\file13.zip moved successfully.
C:\WINDOWS\file19.zip moved successfully.
C:\WINDOWS\file22.zip moved successfully.
C:\WINDOWS\file31.zip moved successfully.
C:\WINDOWS\file34.zip moved successfully.
C:\WINDOWS\file37.zip moved successfully.
C:\WINDOWS\file40.zip moved successfully.
C:\WINDOWS\file43.zip moved successfully.
C:\WINDOWS\file46.zip moved successfully.
C:\WINDOWS\file49.zip moved successfully.
C:\WINDOWS\file52.zip moved successfully.
C:\WINDOWS\file61.zip moved successfully.
C:\WINDOWS\file64.zip moved successfully.
C:\WINDOWS\file67.zip moved successfully.
C:\WINDOWS\file70.zip moved successfully.
C:\WINDOWS\file76.zip moved successfully.
C:\WINDOWS\file85.zip moved successfully.
C:\WINDOWS\file88.zip moved successfully.
C:\WINDOWS\file91.zip moved successfully.
C:\WINDOWS\file94.zip moved successfully.
C:\WINDOWS\file97.zip moved successfully.
C:\WINDOWS\JPGimage11.zip moved successfully.
C:\WINDOWS\JPGimage14.zip moved successfully.
C:\WINDOWS\JPGimage17.zip moved successfully.
C:\WINDOWS\JPGimage26.zip moved successfully.
C:\WINDOWS\JPGimage29.zip moved successfully.
C:\WINDOWS\JPGimage32.zip moved successfully.
C:\WINDOWS\JPGimage35.zip moved successfully.
C:\WINDOWS\JPGimage41.zip moved successfully.
C:\WINDOWS\JPGimage44.zip moved successfully.
C:\WINDOWS\JPGimage47.zip moved successfully.
C:\WINDOWS\JPGimage5.zip moved successfully.
C:\WINDOWS\JPGimage53.zip moved successfully.
C:\WINDOWS\JPGimage56.zip moved successfully.
C:\WINDOWS\JPGimage59.zip moved successfully.
C:\WINDOWS\JPGimage62.zip moved successfully.
C:\WINDOWS\JPGimage65.zip moved successfully.
C:\WINDOWS\JPGimage68.zip moved successfully.
C:\WINDOWS\JPGimage71.zip moved successfully.
C:\WINDOWS\JPGimage74.zip moved successfully.
C:\WINDOWS\JPGimage77.zip moved successfully.
C:\WINDOWS\JPGimage80.zip moved successfully.
C:\WINDOWS\JPGimage83.zip moved successfully.
C:\WINDOWS\JPGimage86.zip moved successfully.
C:\WINDOWS\JPGimage92.zip moved successfully.
C:\WINDOWS\JPGimage95.zip moved successfully.
File/Folder [C:\WINDOWS\JPGimage98.zip not found.
File/Folder [C:\WINDOWS\look0.zip not found.
File/Folder [C:\WINDOWS\look12.zip not found.
File/Folder [C:\WINDOWS\look15.zip not found.
File/Folder [C:\WINDOWS\look18.zip not found.
File/Folder [C:\WINDOWS\look24.zip not found.
File/Folder [C:\WINDOWS\look27.zip not found.
File/Folder [C:\WINDOWS\look36.zip not found.
File/Folder [C:\WINDOWS\look39.zip not found.
File/Folder [C:\WINDOWS\look42.zip not found.
File/Folder [C:\WINDOWS\look48.zip not found.
File/Folder [C:\WINDOWS\look51.zip not found.
File/Folder [C:\WINDOWS\look57.zip not found.
File/Folder [C:\WINDOWS\look6.zip not found.
File/Folder [C:\WINDOWS\look60.zip not found.
File/Folder [C:\WINDOWS\look63.zip not found.
File/Folder [C:\WINDOWS\look66.zip not found.
File/Folder [C:\WINDOWS\look69.zip not found.
File/Folder [C:\WINDOWS\look72.zip not found.
File/Folder [C:\WINDOWS\look75.zip not found.
File/Folder [C:\WINDOWS\look78.zip not found.
File/Folder [C:\WINDOWS\look84.zip not found.
File/Folder [C:\WINDOWS\look93.zip not found.
File/Folder [C:\WINDOWS\look96.zip not found.
 
Created on 09/15/2007 17:02:06

Regis59 · Answer

Impec.

Relance msnfix et copie colle le rapport + un nouveau HijackThis.

a+

sparadra62 · Answer

la en ce moment la personne continue a m envoyer des fichier zip piegé (que je n ouvre pas bien entendu)du style "regarde ta tete avec un crane rasé..." pourtant son adresse n est pas dans mais contact je l ai prevenu mais elle ma dit qu elle s en foutai

sparadra62 · Answer

MSNFix 1.505  
 
C:\Documents and Settings\Admin\Bureau\MSNFix\MSNFix 
Fix exécuté le 15/09/2007 - 17:09:08,09 By Admin 
mode normal    
    
************************ Recherche les fichiers présents      
    
Aucun Fichier trouvé 
 
************************ Recherche les dossiers présents       
 
Aucun dossier trouvé 
 
 
************************ Fichiers suspects 
 
/!\ ces fichiers nécessitent un avis expérimenté avant toute intervention 
 
[C:\WINDOWS\JPGimage98.zip] 0AE6137E16B97C2A4B66919CC28709FF 
[C:\WINDOWS\look0.zip] 71ED0134E285CD71D2FEEDE500FB4BAB 
[C:\WINDOWS\look12.zip] E2109711B3CEEB6560BE0CA014D781B8 
[C:\WINDOWS\look15.zip] 2D972DE28CD08074FFC6C645B364D2DF 
[C:\WINDOWS\look18.zip] E40A8CAB609F6AD3CF9A0DC62B37163F 
[C:\WINDOWS\look24.zip] A6D7FE9E68F2E77DB626B2B403DC2CFE 
[C:\WINDOWS\look27.zip] 1E792FD40F021C6C9BD1AACEF53C1801 
[C:\WINDOWS\look36.zip] 479CC1CF861254AF8E31648D88D0D1EC 
[C:\WINDOWS\look39.zip] 2CE498549253C800ED9F05730098BE09 
[C:\WINDOWS\look42.zip] 7356E05CC5B9B7C668C026F82F008B9F 
[C:\WINDOWS\look48.zip] 382B1B284C685B833F8EB8E8FC210377 
[C:\WINDOWS\look51.zip] A5CF2D7B560FDC157EE2DA812ED52522 
[C:\WINDOWS\look57.zip] 23C0F50E610862A23E3A5C4F14FB7651 
[C:\WINDOWS\look6.zip] 62D7443B92BA1757C619D6B0B30A8EAE 
[C:\WINDOWS\look60.zip] 9AA6A253C3F8A4059D9B61087D51CF6E 
[C:\WINDOWS\look63.zip] 14E3B09DB306D7DD0410A25728E08C6C 
[C:\WINDOWS\look66.zip] 250D5AD840941E1423297D4933FAB344 
[C:\WINDOWS\look69.zip] 4F5A9C44F60DD6E7E0552EDF6286D529 
[C:\WINDOWS\look72.zip] C0FA78EFD370DD4061302759AEB59617 
[C:\WINDOWS\look75.zip] B12186950D1C4F6243CC1193BB01FE55 
[C:\WINDOWS\look78.zip] 477BD7CE3AF4B6A3F60F5E9ED50E6BAE 
[C:\WINDOWS\look84.zip] A8BDB892E6A9B80BDB661565960040B2 
[C:\WINDOWS\look93.zip] BF9C25FEAD3F4392215885EB33BEA5CD 
[C:\WINDOWS\look96.zip] FD53E0B1C665243711B5D61E4E53ED6B 

[color=#FF0000][b]==>[/b][/color] SVP merci d'envoyer le fichier  [b] C:\DOCUME~1\Admin\Bureau\Upload_Me.zip [/b] sur http://upload.changelog.fr

 
  
 
------------------------------------------------------------------------  
Auteur : !aur3n7                     Contact: https://www.ionos.fr/     
------------------------------------------------------------------------   
 
---------------------------------------------   END   ---------------------------------------------

sparadra62 · Answer

Logfile of HijackThis v1.99.1
Scan saved at 17:10:36, on 15/09/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\a-squared free\a2service.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\JMRaidTool.exe
C:\WINDOWS\SkyTel.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\MSI\Live Update 3\LMonitor.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\Program Files\Brother\ControlCenter2\brctrcen.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\WINDOWS\FixCamera.exe
C:\WINDOWS	snp2std.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\WINDOWS\vsnp2std.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\Program Files\Copernic Desktop Search 2\DesktopSearchService.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\PROGRA~1\Wanadoo\Watch.exe
C:\Program Files\eMule\eMule.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Copernic Desktop Search 2 - {968631B6-4729-440D-9BF4-251F5593EC9A} - C:\Program Files\Copernic Desktop Search 2\DesktopSearchBand201013011.dll
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [Copernic Desktop Search 2] "C:\Program Files\Copernic Desktop Search 2\DesktopSearchService.exe" /tray
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?71422339126146d2a96aebc02f627548
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?71422339126146d2a96aebc02f627548
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - c:\program files\a-squared free\a2service.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe

Regis59 · Answer

Ok

Donne moi son adresse MSN en privé stp

Par contre;MSNfix detecte des fichiers suspects, regarde s'ils sont presents sur ton pc

a+

sparadra62 · Answer

oui ces fichiers je les ai trouvé il sont dans windows effectivement

julro · Answer

MSNFix 1.505  
 
C:\Documents and Settings\Administrateur\Bureau\MSNFix\MSNFix 
Fix exécuté le 15/09/2007 - 19:57:53,50 By Administrateur 
mode normal    
    
************************ Recherche les fichiers présents      
    
... C:\WINDOWS\services.exe 

************************  heur. MSNCHK.exe ***** /!\ beta test /!\


 
************************ Recherche les dossiers présents       
 
Aucun dossier trouvé 
 
 
 
 
************************ Suppression des fichiers       
    
.. OK ... C:\WINDOWS\services.exe  
 
 
 
************************ Nettoyage du registre 
 
 
 
************************ Fichiers suspects 
 
/!\ ces fichiers nécessitent un avis expérimenté avant toute intervention 
 
[C:\WINDOWS\system32\aurora.scr] 56410EA0E47E1133041025973BC2C7D2 
[C:\WINDOWS\system32\bubbles.scr] 019AC8E7BC6E56FFC1471CF0CEB3998D 
[C:\WINDOWS\system32\euphoria.scr] 2DF6E747B64F9401CE2238B31046C993 
[C:\WINDOWS\system32\mystify.scr] D1CABA33D2CD02CA6E96F5B4A92121EA 
[C:\WINDOWS\system32\plasma.scr] B448DE0F1F8EEAA41EDAC45F297F0ADE 

[color=#FF0000][b]==>[/b][/color] SVP merci d'envoyer le fichier  [b] C:\DOCUME~1\ADMINI~1\Bureau\Upload_Me.zip [/b] sur http://upload.changelog.fr

 
  
Les fichiers et clés de registre supprimés ont été sauvegardés dans le fichier 15092007_19582929.zip
 
 
------------------------------------------------------------------------  
Auteur : !aur3n7                     Contact: https://www.ionos.fr/     
------------------------------------------------------------------------   
 
---------------------------------------------   END   ---------------------------------------------

Regis59 · Answer

Ok comme ils sont présents, supprime les.

Puis relance MSNfix.

a+

sparadra62 · Answer

MSNFix 1.505  
 
C:\Documents and Settings\Admin\Bureau\MSNFix\MSNFix 
Fix exécuté le 15/09/2007 - 20:54:38,62 By Admin 
mode normal    
    
************************ Recherche les fichiers présents      
    
Aucun Fichier trouvé 
 
************************ Recherche les dossiers présents       
 
Aucun dossier trouvé 
 
 
************************ Fichiers suspects 
 
Aucun Fichier trouvé 
 
  
 
------------------------------------------------------------------------  
Auteur : !aur3n7                     Contact: https://www.ionos.fr/     
------------------------------------------------------------------------   
 
---------------------------------------------   END   ---------------------------------

Regis59 · Answer

Impec,

remet un hijackthis

a+

sparadra62 · Answer

Logfile of HijackThis v1.99.1
Scan saved at 22:29:50, on 15/09/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\a-squared free\a2service.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\JMRaidTool.exe
C:\WINDOWS\SkyTel.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\MSI\Live Update 3\LMonitor.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\Program Files\Brother\ControlCenter2\brctrcen.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\WINDOWS\FixCamera.exe
C:\WINDOWS	snp2std.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\WINDOWS\vsnp2std.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\Program Files\Copernic Desktop Search 2\DesktopSearchService.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\PROGRA~1\Wanadoo\Watch.exe
C:\Program Files\eMule\eMule.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Copernic Desktop Search 2 - {968631B6-4729-440D-9BF4-251F5593EC9A} - C:\Program Files\Copernic Desktop Search 2\DesktopSearchBand201013011.dll
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [Copernic Desktop Search 2] "C:\Program Files\Copernic Desktop Search 2\DesktopSearchService.exe" /tray
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?71422339126146d2a96aebc02f627548
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?71422339126146d2a96aebc02f627548
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - c:\program files\a-squared free\a2service.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe

j etais long mais sang et or oblige!!

Regis59 · Answer

J'ai regardé le match, c etait pas top top ! Heureusement qu'Hilton est la.

Sinon, je te conseille de changer avast pour antivir et d installer un pare feu comme zone alarm.

Ou en sont tes soucis?

A+

sparadra62 · Answer

ok tout vas bien antivir ok je vais le faire mais zone alarm je l ai deja

Regis59 · Answer

Ouep

Ok, une fois installé, dis moi si tout est ok.

a+

sparadra62 · Answer

voila j ai mis antivir et voici apres mon scan
AntiVir PersonalEdition Classic
Report file date: samedi 15 septembre 2007  23:08

Scanning for 1071077 virus strains and unwanted programs.

Licensed to:      Avira AntiVir PersonalEdition Classic
Serial number:    0000149996-ADJIE-0001
Platform:         Windows XP
Windows version:  (Service Pack 2)  [5.1.2600]
Username:         SYSTEM
Computer name:    XPSP2-1C0E67B68

Version information:
BUILD.DAT    : 268           15604 Bytes  31/08/2007 13:04:00
AVSCAN.EXE   : 7.0.6.1      290856 Bytes  15/09/2007 21:05:48
AVSCAN.DLL   : 7.0.6.0       49192 Bytes  15/09/2007 21:05:48
LUKE.DLL     : 7.0.5.3      147496 Bytes  15/09/2007 21:05:48
LUKERES.DLL  : 7.0.6.1       10280 Bytes  15/09/2007 21:05:48
ANTIVIR0.VDF : 6.35.0.1    7371264 Bytes  31/05/2006 13:08:58
ANTIVIR1.VDF : 6.39.0.129  7251968 Bytes  10/07/2007 21:05:53
ANTIVIR2.VDF : 6.39.1.120  1918464 Bytes  12/09/2007 21:05:53
ANTIVIR3.VDF : 6.39.1.134   111104 Bytes  14/09/2007 21:05:53
AVEWIN32.DLL : 7.6.0.10    2789888 Bytes  15/09/2007 21:05:54
AVWINLL.DLL  : 1.0.0.7       14376 Bytes  26/02/2007 09:36:26
AVPREF.DLL   : 7.0.2.2       25640 Bytes  15/09/2007 21:05:48
AVREP.DLL    : 7.0.0.1      155688 Bytes  16/04/2007 12:16:24
AVPACK32.DLL : 7.3.0.15     360488 Bytes  15/09/2007 21:05:55
AVREG.DLL    : 7.0.1.6       30760 Bytes  15/09/2007 21:05:48
AVARKT.DLL   : 1.0.0.20     278568 Bytes  15/09/2007 21:05:48
AVEVTLOG.DLL : 7.0.0.20      86056 Bytes  15/09/2007 21:05:48
NETNT.DLL    : 7.0.0.0        7720 Bytes  08/03/2007 10:09:42
RCIMAGE.DLL  : 7.0.1.30    2342952 Bytes  15/09/2007 21:05:39
RCTEXT.DLL   : 7.0.62.0      86056 Bytes  15/09/2007 21:05:39
SQLITE3.DLL  : 3.3.17.1     339968 Bytes  15/09/2007 21:05:48

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: C:, 
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: samedi 15 septembre 2007  23:08

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'usnsvc.exe' - '1' Module(s) have been scanned
Scan process 'eMule.exe' - '1' Module(s) have been scanned
Scan process 'Watch.exe' - '1' Module(s) have been scanned
Scan process 'ALERTM~1.EXE' - '1' Module(s) have been scanned
Scan process 'RocketDock.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'PollingModule.exe' - '1' Module(s) have been scanned
Scan process 'FxSvr2.exe' - '1' Module(s) have been scanned
Scan process 'Inactivity.exe' - '1' Module(s) have been scanned
Scan process 'Toaster.exe' - '1' Module(s) have been scanned
Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
Scan process 'ComComp.exe' - '1' Module(s) have been scanned
Scan process 'DesktopSearchService.exe' - '1' Module(s) have been scanned
Scan process 'GestionnaireInternet.exe' - '1' Module(s) have been scanned
Scan process 'avgas.exe' - '1' Module(s) have been scanned
Scan process 'zlclient.exe' - '0' Module(s) have been scanned
Scan process 'ashDisp.exe' - '1' Module(s) have been scanned
Scan process 'vsnp2std.exe' - '1' Module(s) have been scanned
Scan process 'TaskBarIcon.exe' - '1' Module(s) have been scanned
Scan process 'tsnp2std.exe' - '1' Module(s) have been scanned
Scan process 'FixCamera.exe' - '1' Module(s) have been scanned
Scan process 'LogiTray.exe' - '1' Module(s) have been scanned
Scan process 'LVCOMSX.EXE' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'winampa.exe' - '1' Module(s) have been scanned
Scan process 'brctrcen.exe' - '1' Module(s) have been scanned
Scan process 'pptd40nt.exe' - '1' Module(s) have been scanned
Scan process 'rundll32.exe' - '1' Module(s) have been scanned
Scan process 'LMonitor.exe' - '1' Module(s) have been scanned
Scan process 'RTHDCPL.EXE' - '1' Module(s) have been scanned
Scan process 'SkyTel.exe' - '1' Module(s) have been scanned
Scan process 'JMRaidTool.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'StarWindService.exe' - '1' Module(s) have been scanned
Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned
Scan process 'MDM.EXE' - '1' Module(s) have been scanned
Scan process 'guard.exe' - '1' Module(s) have been scanned
Scan process 'a2service.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'brss01a.exe' - '1' Module(s) have been scanned
Scan process 'brsvc01a.exe' - '1' Module(s) have been scanned
Scan process 'ashServ.exe' - '1' Module(s) have been scanned
Scan process 'aswUpdSv.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'vsmon.exe' - '0' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
58 processes with 58 modules were scanned

Start scanning boot sectors:
Boot sector 'C:\'
      [NOTE]      No virus was found!

Starting to scan the registry.
The registry was scanned ( '24' files ).


Starting the file scan:

Begin scan in 'C:\'
C:\pagefile.sys
      [WARNING]   The file could not be opened!
C:\Documents and Settings\Admin\Bureau\Upload_Me.zip
  [0] Archive type: ZIP
    --> DOCUME~1/Admin/Bureau/Upload_Me/downloadme0.zip
      [1] Archive type: ZIP
      --> downloadme0.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/downloadme18.zip
      [1] Archive type: ZIP
      --> downloadme18.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/downloadme21.zip
      [1] Archive type: ZIP
      --> downloadme21.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/downloadme27.zip
      [1] Archive type: ZIP
      --> downloadme27.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/downloadme3.zip
      [1] Archive type: ZIP
      --> downloadme3.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/downloadme30.zip
      [1] Archive type: ZIP
      --> downloadme30.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/downloadme33.zip
      [1] Archive type: ZIP
      --> downloadme33.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/downloadme39.zip
      [1] Archive type: ZIP
      --> downloadme39.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/downloadme45.zip
      [1] Archive type: ZIP
      --> downloadme45.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/downloadme48.zip
      [1] Archive type: ZIP
      --> downloadme48.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/downloadme51.zip
      [1] Archive type: ZIP
      --> downloadme51.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/downloadme54.zip
      [1] Archive type: ZIP
      --> downloadme54.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/downloadme57.zip
      [1] Archive type: ZIP
      --> downloadme57.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/downloadme6.zip
      [1] Archive type: ZIP
      --> downloadme6.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/downloadme60.zip
      [1] Archive type: ZIP
      --> downloadme60.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/downloadme66.zip
      [1] Archive type: ZIP
      --> downloadme66.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/downloadme69.zip
      [1] Archive type: ZIP
      --> downloadme69.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/downloadme72.zip
      [1] Archive type: ZIP
      --> downloadme72.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/downloadme75.zip
      [1] Archive type: ZIP
      --> downloadme75.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/downloadme84.zip
      [1] Archive type: ZIP
      --> downloadme84.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/downloadme87.zip
      [1] Archive type: ZIP
      --> downloadme87.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/downloadme9.zip
      [1] Archive type: ZIP
      --> downloadme9.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/downloadme93.zip
      [1] Archive type: ZIP
      --> downloadme93.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/downloadme96.zip
      [1] Archive type: ZIP
      --> downloadme96.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/file1.zip
      [1] Archive type: ZIP
      --> file1.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/file10.zip
      [1] Archive type: ZIP
      --> file10.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/file13.zip
      [1] Archive type: ZIP
      --> file13.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/file19.zip
      [1] Archive type: ZIP
      --> file19.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/file22.zip
      [1] Archive type: ZIP
      --> file22.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/file31.zip
      [1] Archive type: ZIP
      --> file31.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/file34.zip
      [1] Archive type: ZIP
      --> file34.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/file37.zip
      [1] Archive type: ZIP
      --> file37.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/file40.zip
      [1] Archive type: ZIP
      --> file40.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/file43.zip
      [1] Archive type: ZIP
      --> file43.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/file46.zip
      [1] Archive type: ZIP
      --> file46.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/file49.zip
      [1] Archive type: ZIP
      --> file49.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/file52.zip
      [1] Archive type: ZIP
      --> file52.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/file61.zip
      [1] Archive type: ZIP
      --> file61.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/file64.zip
      [1] Archive type: ZIP
      --> file64.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/file67.zip
      [1] Archive type: ZIP
      --> file67.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/file70.zip
      [1] Archive type: ZIP
      --> file70.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/file76.zip
      [1] Archive type: ZIP
      --> file76.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/file85.zip
      [1] Archive type: ZIP
      --> file85.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/file88.zip
      [1] Archive type: ZIP
      --> file88.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/file91.zip
      [1] Archive type: ZIP
      --> file91.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/file94.zip
      [1] Archive type: ZIP
      --> file94.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/file97.zip
      [1] Archive type: ZIP
      --> file97.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage11.zip
      [1] Archive type: ZIP
      --> JPGimage11.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage14.zip
      [1] Archive type: ZIP
      --> JPGimage14.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage17.zip
      [1] Archive type: ZIP
      --> JPGimage17.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage26.zip
      [1] Archive type: ZIP
      --> JPGimage26.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage29.zip
      [1] Archive type: ZIP
      --> JPGimage29.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage32.zip
      [1] Archive type: ZIP
      --> JPGimage32.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage35.zip
      [1] Archive type: ZIP
      --> JPGimage35.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage41.zip
      [1] Archive type: ZIP
      --> JPGimage41.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage44.zip
      [1] Archive type: ZIP
      --> JPGimage44.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage47.zip
      [1] Archive type: ZIP
      --> JPGimage47.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage5.zip
      [1] Archive type: ZIP
      --> JPGimage5.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage53.zip
      [1] Archive type: ZIP
      --> JPGimage53.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage56.zip
      [1] Archive type: ZIP
      --> JPGimage56.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage59.zip
      [1] Archive type: ZIP
      --> JPGimage59.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage62.zip
      [1] Archive type: ZIP
      --> JPGimage62.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage65.zip
      [1] Archive type: ZIP
      --> JPGimage65.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage68.zip
      [1] Archive type: ZIP
      --> JPGimage68.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage71.zip
      [1] Archive type: ZIP
      --> JPGimage71.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage74.zip
      [1] Archive type: ZIP
      --> JPGimage74.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage77.zip
      [1] Archive type: ZIP
      --> JPGimage77.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage80.zip
      [1] Archive type: ZIP
      --> JPGimage80.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage83.zip
      [1] Archive type: ZIP
      --> JPGimage83.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage86.zip
      [1] Archive type: ZIP
      --> JPGimage86.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage92.zip
      [1] Archive type: ZIP
      --> JPGimage92.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage95.zip
      [1] Archive type: ZIP
      --> JPGimage95.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage98.zip
      [1] Archive type: ZIP
      --> JPGimage98.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/look0.zip
      [1] Archive type: ZIP
      --> look0.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/look12.zip
      [1] Archive type: ZIP
      --> look12.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/look15.zip
      [1] Archive type: ZIP
      --> look15.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/look18.zip
      [1] Archive type: ZIP
      --> look18.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/look24.zip
      [1] Archive type: ZIP
      --> look24.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/look27.zip
      [1] Archive type: ZIP
      --> look27.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/look36.zip
      [1] Archive type: ZIP
      --> look36.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/look39.zip
      [1] Archive type: ZIP
      --> look39.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/look42.zip
      [1] Archive type: ZIP
      --> look42.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/look48.zip
      [1] Archive type: ZIP
      --> look48.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/look51.zip
      [1] Archive type: ZIP
      --> look51.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/look57.zip
      [1] Archive type: ZIP
      --> look57.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/look6.zip
      [1] Archive type: ZIP
      --> look6.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/look60.zip
      [1] Archive type: ZIP
      --> look60.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/look63.zip
      [1] Archive type: ZIP
      --> look63.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/look66.zip
      [1] Archive type: ZIP
      --> look66.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/look69.zip
      [1] Archive type: ZIP
      --> look69.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/look72.zip
      [1] Archive type: ZIP
      --> look72.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/look75.zip
      [1] Archive type: ZIP
      --> look75.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/look78.zip
      [1] Archive type: ZIP
      --> look78.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/look84.zip
      [1] Archive type: ZIP
      --> look84.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/look93.zip
      [1] Archive type: ZIP
      --> look93.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> DOCUME~1/Admin/Bureau/Upload_Me/look96.zip
      [1] Archive type: ZIP
      --> look96.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '47584aeb.qua'!
C:\Documents and Settings\Admin\Bureau\MSNFix\MSNFix\15092007_14572832.zip
  [0] Archive type: ZIP
  --> backup/directxd.exe
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/files1.zip
      [1] Archive type: ZIP
      --> files1.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/files10.zip
      [1] Archive type: ZIP
      --> files10.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/files16.zip
      [1] Archive type: ZIP
      --> files16.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/files22.zip
      [1] Archive type: ZIP
      --> files22.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/files28.zip
      [1] Archive type: ZIP
      --> files28.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/files31.zip
      [1] Archive type: ZIP
      --> files31.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/files37.zip
      [1] Archive type: ZIP
      --> files37.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/files4.zip
      [1] Archive type: ZIP
      --> files4.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/files43.zip
      [1] Archive type: ZIP
      --> files43.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/files49.zip
      [1] Archive type: ZIP
      --> files49.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/files52.zip
      [1] Archive type: ZIP
      --> files52.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/files55.zip
      [1] Archive type: ZIP
      --> files55.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/files58.zip
      [1] Archive type: ZIP
      --> files58.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/files61.zip
      [1] Archive type: ZIP
      --> files61.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/files67.zip
      [1] Archive type: ZIP
      --> files67.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/files70.zip
      [1] Archive type: ZIP
      --> files70.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/files73.zip
      [1] Archive type: ZIP
      --> files73.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/files76.zip
      [1] Archive type: ZIP
      --> files76.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/files79.zip
      [1] Archive type: ZIP
      --> files79.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/files82.zip
      [1] Archive type: ZIP
      --> files82.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/files85.zip
      [1] Archive type: ZIP
      --> files85.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/files94.zip
      [1] Archive type: ZIP
      --> files94.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/news11.zip
      [1] Archive type: ZIP
      --> news11.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/news14.zip
      [1] Archive type: ZIP
      --> news14.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/news2.zip
      [1] Archive type: ZIP
      --> news2.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/news20.zip
      [1] Archive type: ZIP
      --> news20.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/news29.zip
      [1] Archive type: ZIP
      --> news29.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/news35.zip
      [1] Archive type: ZIP
      --> news35.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/news38.zip
      [1] Archive type: ZIP
      --> news38.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/news41.zip
      [1] Archive type: ZIP
      --> news41.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/news44.zip
      [1] Archive type: ZIP
      --> news44.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/news47.zip
      [1] Archive type: ZIP
      --> news47.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/news5.zip
      [1] Archive type: ZIP
      --> news5.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/news50.zip
      [1] Archive type: ZIP
      --> news50.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/news53.zip
      [1] Archive type: ZIP
      --> news53.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/news56.zip
      [1] Archive type: ZIP
      --> news56.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/news59.zip
      [1] Archive type: ZIP
      --> news59.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/news62.zip
      [1] Archive type: ZIP
      --> news62.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/news65.zip
      [1] Archive type: ZIP
      --> news65.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/news68.zip
      [1] Archive type: ZIP
      --> news68.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/news71.zip
      [1] Archive type: ZIP
      --> news71.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/news74.zip
      [1] Archive type: ZIP
      --> news74.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/news80.zip
      [1] Archive type: ZIP
      --> news80.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/news83.zip
      [1] Archive type: ZIP
      --> news83.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/news86.zip
      [1] Archive type: ZIP
      --> news86.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/news89.zip
      [1] Archive type: ZIP
      --> news89.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/news92.zip
      [1] Archive type: ZIP
      --> news92.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/news95.zip
      [1] Archive type: ZIP
      --> news95.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
    --> backup/news98.zip
      [1] Archive type: ZIP
      --> news98.scr
          [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '471c4abd.qua'!
C:\Documents and Settings\Admin\Mes documents\utilitaires sécurité\SmitfraudFix.exe
      [DETECTION] Contains detection pattern of the dropper DR/Tool.Reboot.F.14
      [INFO]      The file was moved to '47554c13.qua'!
C:\Program Files\Navilog1
avilog1.bat
      [DETECTION] Contains suspicious code HEUR/Exploit.HTML
      [INFO]      The file was moved to '47624eca.qua'!
C:\System Volume Information\_restore{40B0236C-64A9-48F5-9C42-CB61A6F548FB}\RP2\A0001080.exe
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '471c4ee8.qua'!
C:\System Volume Information\_restore{40B0236C-64A9-48F5-9C42-CB61A6F548FB}\RP4\A0001249.bat
      [DETECTION] Contains suspicious code HEUR/Exploit.HTML
      [INFO]      The file was moved to '471c4eec.qua'!
C:\WINDOWS\system32\drivers\sptd.sys
      [WARNING]   The file could not be opened!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme0.zip
  [0] Archive type: ZIP
  --> downloadme0.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '4763508a.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme18.zip
  [0] Archive type: ZIP
  --> downloadme18.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '4763508b.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme21.zip
  [0] Archive type: ZIP
  --> downloadme21.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '461e2024.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme27.zip
  [0] Archive type: ZIP
  --> downloadme27.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '4763508d.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme3.zip
  [0] Archive type: ZIP
  --> downloadme3.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '4763508c.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme30.zip
  [0] Archive type: ZIP
  --> downloadme30.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '461e2025.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme33.zip
  [0] Archive type: ZIP
  --> downloadme33.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '4763508e.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme39.zip
  [0] Archive type: ZIP
  --> downloadme39.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '461e2027.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme45.zip
  [0] Archive type: ZIP
  --> downloadme45.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '461e2026.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme48.zip
  [0] Archive type: ZIP
  --> downloadme48.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '4763508f.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme51.zip
  [0] Archive type: ZIP
  --> downloadme51.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '461e2038.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme54.zip
  [0] Archive type: ZIP
  --> downloadme54.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '47635080.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme57.zip
  [0] Archive type: ZIP
  --> downloadme57.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '461e2029.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme6.zip
  [0] Archive type: ZIP
  --> downloadme6.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '47635082.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme60.zip
  [0] Archive type: ZIP
  --> downloadme60.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '461e202b.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme66.zip
  [0] Archive type: ZIP
  --> downloadme66.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '47635091.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme69.zip
  [0] Archive type: ZIP
  --> downloadme69.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '461e203a.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme72.zip
  [0] Archive type: ZIP
  --> downloadme72.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '47635093.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme75.zip
  [0] Archive type: ZIP
  --> downloadme75.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '47635090.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme84.zip
  [0] Archive type: ZIP
  --> downloadme84.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '461e2039.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme87.zip
  [0] Archive type: ZIP
  --> downloadme87.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '47635092.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme9.zip
  [0] Archive type: ZIP
  --> downloadme9.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '461e203b.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme93.zip
  [0] Archive type: ZIP
  --> downloadme93.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '461e203c.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme96.zip
  [0] Archive type: ZIP
  --> downloadme96.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '47635095.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file1.zip
  [0] Archive type: ZIP
  --> file1.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '4758508b.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file10.zip
  [0] Archive type: ZIP
  --> file10.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '4758508c.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file13.zip
  [0] Archive type: ZIP
  --> file13.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '46252025.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file19.zip
  [0] Archive type: ZIP
  --> file19.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '4758508e.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file22.zip
  [0] Archive type: ZIP
  --> file22.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '46252027.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file31.zip
  [0] Archive type: ZIP
  --> file31.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '4758508d.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file34.zip
  [0] Archive type: ZIP
  --> file34.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '46252026.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file37.zip
  [0] Archive type: ZIP
  --> file37.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '4758508f.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file40.zip
  [0] Archive type: ZIP
  --> file40.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '47585080.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file43.zip
  [0] Archive type: ZIP
  --> file43.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '46252029.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file46.zip
  [0] Archive type: ZIP
  --> file46.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '47585082.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file49.zip
  [0] Archive type: ZIP
  --> file49.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '4625202b.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file52.zip
  [0] Archive type: ZIP
  --> file52.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '46252038.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file61.zip
  [0] Archive type: ZIP
  --> file61.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '47585091.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file64.zip
  [0] Archive type: ZIP
  --> file64.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '4625203a.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file67.zip
  [0] Archive type: ZIP
  --> file67.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '47585090.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file70.zip
  [0] Archive type: ZIP
  --> file70.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '46252039.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file76.zip
  [0] Archive type: ZIP
  --> file76.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '47585092.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file85.zip
  [0] Archive type: ZIP
  --> file85.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '47585093.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file88.zip
  [0] Archive type: ZIP
  --> file88.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '4625203c.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file91.zip
  [0] Archive type: ZIP
  --> file91.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '47585095.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file94.zip
  [0] Archive type: ZIP
  --> file94.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '4625203e.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file97.zip
  [0] Archive type: ZIP
  --> file97.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '4625203b.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage11.zip
  [0] Archive type: ZIP
  --> JPGimage11.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '47335079.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage14.zip
  [0] Archive type: ZIP
  --> JPGimage14.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '464e20d2.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage17.zip
  [0] Archive type: ZIP
  --> JPGimage17.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '4733507a.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage26.zip
  [0] Archive type: ZIP
  --> JPGimage26.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '464e20d3.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage29.zip
  [0] Archive type: ZIP
  --> JPGimage29.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '4733507c.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage32.zip
  [0] Archive type: ZIP
  --> JPGimage32.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '4733507b.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage35.zip
  [0] Archive type: ZIP
  --> JPGimage35.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '464e20d4.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage41.zip
  [0] Archive type: ZIP
  --> JPGimage41.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '4733507d.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage44.zip
  [0] Archive type: ZIP
  --> JPGimage44.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '464e20d5.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage47.zip
  [0] Archive type: ZIP
  --> JPGimage47.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '4733507e.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage5.zip
  [0] Archive type: ZIP
  --> JPGimage5.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '464e20d7.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage53.zip
  [0] Archive type: ZIP
  --> JPGimage53.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '464e20d6.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage56.zip
  [0] Archive type: ZIP
  --> JPGimage56.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '4733507f.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage59.zip
  [0] Archive type: ZIP
  --> JPGimage59.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '464e2028.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage62.zip
  [0] Archive type: ZIP
  --> JPGimage62.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '47335081.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage65.zip
  [0] Archive type: ZIP
  --> JPGimage65.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '47335070.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage68.zip
  [0] Archive type: ZIP
  --> JPGimage68.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '464e20d9.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage71.zip
  [0] Archive type: ZIP
  --> JPGimage71.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '47335072.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage74.zip
  [0] Archive type: ZIP
  --> JPGimage74.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '464e202a.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage77.zip
  [0] Archive type: ZIP
  --> JPGimage77.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '47335083.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage80.zip
  [0] Archive type: ZIP
  --> JPGimage80.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '464e202c.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage83.zip
  [0] Archive type: ZIP
  --> JPGimage83.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '47335085.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage86.zip
  [0] Archive type: ZIP
  --> JPGimage86.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '47335080.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage92.zip
  [0] Archive type: ZIP
  --> JPGimage92.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '464e2029.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage95.zip
  [0] Archive type: ZIP
  --> JPGimage95.scr
      [DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
      [INFO]      The file was moved to '47335082.qua'!


End of the scan: samedi 15 septembre 2007  23:35
Used time: 27:12 min

The scan has been done completely.

   3942 Scanning directories
 172973 Files were scanned
    220 viruses and/or unwanted programs were found
      2 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
     78 files were moved to quarantine
      0 files were renamed
      2 Files cannot be scanned
 172753 Files not concerned
   1176 Archives were scanned
      2 Warnings
      2 Notes

Regis59 · Answer

Rien de grave.
C'est soit des backups soit des sauvegardes. Donc c'est ok.

Ou en sont tes soucis?

A+

sparadra62 · Answer

mais antivir a quand meme sonner et il a ecris: worm/ircbot.26112.3
dr/tool.reboot.f.14
heur/exploit.html
et les a mis en quarantaine pas grave?

Regis59 · Answer

Oui, pas grave !
Supprime les fichiers en quarantaine !
Si vraiment t'es pas rassuré lance un nouveau scan d'antivir et copie colle le rapport.

A+

sparadra62 · Answer

ok c est bon je te crois en tout cas j ai tout viré de la quarantaine et tout a l air d aller normalement c est fini . hein c est fini?

Regis59 · Answer

Ouais c est finit :-)

Confirmes moi demain que tout est ok, d accord?

A+

steph1731 · Answer

Bonsoir Régis

J'ai été infectée par le virus sur msn; j'ai été conseillée sur le site, j'ai fait MSNFix, Hijackthis et installé et exécuté : spyware, ccleaner, spybot, et ad ware, je ne sais plus trop les noms;
j'ai redemarré mon ordin et voici mon rapport msnfix:
Pouvez-vous me donner votre avis?
Merci d'avance.




MSNFix 1.495  
 
C:\Documents and Settings\Compaq_Propri‚taire\Bureau\MSNFix 
Fix exécuté le 16/09/2007 -  0:08:21,31 By Compaq_Propri‚taire 
mode normal    
    
************************ Recherche les fichiers présents      
    
... C:\WINDOWS\system32\microsoft\backup.ftp 
... C:\WINDOWS\system32\microsoft\backup.tftp 
... C:\WINDOWS\W139_jpg.zip 
 
************************ Recherche les dossiers présents       
 
Aucun dossier trouvé 
 
 
 
 
************************ Suppression des fichiers       
    
.. OK ... C:\WINDOWS\system32\microsoft\backup.ftp  
.. OK ... C:\WINDOWS\system32\microsoft\backup.tftp  
.. OK ... C:\WINDOWS\W139_jpg.zip 
 
 
 
************************ Nettoyage du registre 
 
 
 
************************ Fichiers suspects 
 
Aucun Fichier trouvé 
 
  
Les fichiers et clés de registre supprimés ont été sauvegardés dans le fichier 16092007_ 0083300.zip
 
 
------------------------------------------------------------------------  
Auteur : !aur3n7                     Contact: https://www.ionos.fr/     
------------------------------------------------------------------------   
 
---------------------------------------------   END   ---------------------------------------------

Regis59 · Answer

C'est ok mais il serait mieux que tu suives ce conseil:

Il serait préférable que tu fasses ton message personnel, cela rendra les postes plus compréhensibles et la réponse à ton problème sera plus efficace
Procèdes comme ceci :
http://pageperso.aol.fr/balltrap34/demofairesontmessage.htm

A bientôt

sparadra62 · Answer

ok tout va bien je te remercie mille fois d avoir pris le temps de m aider encore une fois merci a plus

Regis59 · Answer

De rien :-)

un gars qui te remerci · Answer

vala pour moi!merci encor pour ton aide


MSNFix 1.516  
 
C:\Documents and Settings\perso\Mes documents\MSNFix 
Fix exécuté le 22/09/2007 - 21:44:09,56 By perso 
mode normal    
    
************************ Recherche les fichiers présents      
    
... C:\WINDOWS\system32\direct3dx.dll 
... C:\WINDOWS\system32\directxd.exe 
... C:\WINDOWS\system32\drivers\oreans32.sys 
... C:\WINDOWS\files13.zip 
... C:\WINDOWS\files19.zip 
... C:\WINDOWS\files25.zip 
... C:\WINDOWS\files31.zip 
... C:\WINDOWS\files43.zip 
... C:\WINDOWS\files67.zip 
... C:\WINDOWS\files91.zip 
... C:\WINDOWS\files94.zip 
... C:\WINDOWS
ews32.zip 
... C:\WINDOWS
ews38.zip 
... C:\WINDOWS
ews59.zip 
... C:\WINDOWS
ews62.zip 
... C:\WINDOWS
ews65.zip 
... C:\WINDOWS
ews98.zip 
... C:\WINDOWS\JPGimage11.zip 
... C:\WINDOWS\JPGimage44.zip 
... C:\WINDOWS\JPGimage5.zip 
... C:\WINDOWS\JPGimage56.zip 
... C:\WINDOWS\JPGimage59.zip 
... C:\WINDOWS\JPGimage62.zip 
... C:\WINDOWS\JPGimage65.zip 
... C:\WINDOWS\JPGimage71.zip 
... C:\WINDOWS\JPGimage77.zip 
... C:\WINDOWS\JPGimage86.zip 
... C:\WINDOWS\JPGimage89.zip 
... C:\WINDOWS\file16.zip 
... C:\WINDOWS\file31.zip 
... C:\WINDOWS\file46.zip 
... C:\WINDOWS\file55.zip 
... C:\WINDOWS\file76.zip 
... C:\WINDOWS\file79.zip 
... C:\WINDOWS\file82.zip 
... C:\WINDOWS\file91.zip 
... C:\WINDOWS\files13.zip 
... C:\WINDOWS\files19.zip 
... C:\WINDOWS\files25.zip 
... C:\WINDOWS\files31.zip 
... C:\WINDOWS\files43.zip 
... C:\WINDOWS\files67.zip 
... C:\WINDOWS\files91.zip 
... C:\WINDOWS\files94.zip 
... C:\WINDOWS\downloadme15.zip 
... C:\WINDOWS\downloadme27.zip 
... C:\WINDOWS\downloadme3.zip 
... C:\WINDOWS\downloadme39.zip 
... C:\WINDOWS\downloadme42.zip 
... C:\WINDOWS\downloadme45.zip 
... C:\WINDOWS\downloadme48.zip 
... C:\WINDOWS\downloadme81.zip 
... C:\WINDOWS\downloadme84.zip 
... C:\WINDOWS\downloadme87.zip 
... C:\WINDOWS
ews32.zip 
... C:\WINDOWS
ews38.zip 
... C:\WINDOWS
ews59.zip 
... C:\WINDOWS
ews62.zip 
... C:\WINDOWS
ews65.zip 
... C:\WINDOWS
ews98.zip 

************************  MSNCHK ***** /!\ beta test /!\

[!] C:\WINDOWS\downloadme15.zip is INFECTED
[!] C:\WINDOWS\downloadme27.zip is INFECTED
[!] C:\WINDOWS\downloadme3.zip is INFECTED
[!] C:\WINDOWS\downloadme39.zip is INFECTED
[!] C:\WINDOWS\downloadme42.zip is INFECTED
[!] C:\WINDOWS\downloadme45.zip is INFECTED
[!] C:\WINDOWS\downloadme48.zip is INFECTED
[!] C:\WINDOWS\downloadme81.zip is INFECTED
[!] C:\WINDOWS\downloadme84.zip is INFECTED
[!] C:\WINDOWS\downloadme87.zip is INFECTED
[!] C:\WINDOWS\file16.zip is INFECTED
[!] C:\WINDOWS\file31.zip is INFECTED
[!] C:\WINDOWS\file46.zip is INFECTED
[!] C:\WINDOWS\file55.zip is INFECTED
[!] C:\WINDOWS\file76.zip is INFECTED
[!] C:\WINDOWS\file79.zip is INFECTED
[!] C:\WINDOWS\file82.zip is INFECTED
[!] C:\WINDOWS\file91.zip is INFECTED
[!] C:\WINDOWS\files13.zip is INFECTED
[!] C:\WINDOWS\files19.zip is INFECTED
[!] C:\WINDOWS\files25.zip is INFECTED
[!] C:\WINDOWS\files31.zip is INFECTED
[!] C:\WINDOWS\files43.zip is INFECTED
[!] C:\WINDOWS\files67.zip is INFECTED
[!] C:\WINDOWS\files91.zip is INFECTED
[!] C:\WINDOWS\files94.zip is INFECTED
[!] C:\WINDOWS\JPGimage11.zip is INFECTED
[!] C:\WINDOWS\JPGimage44.zip is INFECTED
[!] C:\WINDOWS\JPGimage5.zip is INFECTED
[!] C:\WINDOWS\JPGimage56.zip is INFECTED
[!] C:\WINDOWS\JPGimage59.zip is INFECTED
[!] C:\WINDOWS\JPGimage62.zip is INFECTED
[!] C:\WINDOWS\JPGimage65.zip is INFECTED
[!] C:\WINDOWS\JPGimage71.zip is INFECTED
[!] C:\WINDOWS\JPGimage77.zip is INFECTED
[!] C:\WINDOWS\JPGimage86.zip is INFECTED
[!] C:\WINDOWS\JPGimage89.zip is INFECTED
[!] C:\WINDOWS
ews32.zip is INFECTED
[!] C:\WINDOWS
ews38.zip is INFECTED
[!] C:\WINDOWS
ews59.zip is INFECTED
[!] C:\WINDOWS
ews62.zip is INFECTED
[!] C:\WINDOWS
ews65.zip is INFECTED
[!] C:\WINDOWS
ews98.zip is INFECTED

 
************************ Recherche les dossiers présents       
 
Aucun dossier trouvé 
 
 
 
 
************************ Suppression des fichiers       
    
/!\ ...  C:\WINDOWS\system32\direct3dx.dll   
.. OK ... C:\WINDOWS\system32\directxd.exe  
.. OK ... C:\WINDOWS\system32\drivers\oreans32.sys  
.. OK ... C:\WINDOWS\files13.zip 
.. OK ... C:\WINDOWS\files19.zip 
.. OK ... C:\WINDOWS\files25.zip 
.. OK ... C:\WINDOWS\files31.zip 
.. OK ... C:\WINDOWS\files43.zip 
.. OK ... C:\WINDOWS\files67.zip 
.. OK ... C:\WINDOWS\files91.zip 
.. OK ... C:\WINDOWS\files94.zip 
.. OK ... C:\WINDOWS
ews32.zip 
.. OK ... C:\WINDOWS
ews38.zip 
.. OK ... C:\WINDOWS
ews59.zip 
.. OK ... C:\WINDOWS
ews62.zip 
.. OK ... C:\WINDOWS
ews65.zip 
.. OK ... C:\WINDOWS
ews98.zip 
.. OK ... C:\WINDOWS\JPGimage11.zip 
.. OK ... C:\WINDOWS\JPGimage44.zip 
.. OK ... C:\WINDOWS\JPGimage5.zip 
.. OK ... C:\WINDOWS\JPGimage56.zip 
.. OK ... C:\WINDOWS\JPGimage59.zip 
.. OK ... C:\WINDOWS\JPGimage62.zip 
.. OK ... C:\WINDOWS\JPGimage65.zip 
.. OK ... C:\WINDOWS\JPGimage71.zip 
.. OK ... C:\WINDOWS\JPGimage77.zip 
.. OK ... C:\WINDOWS\JPGimage86.zip 
.. OK ... C:\WINDOWS\JPGimage89.zip 
.. OK ... C:\WINDOWS\file16.zip 
.. OK ... C:\WINDOWS\file31.zip 
.. OK ... C:\WINDOWS\file46.zip 
.. OK ... C:\WINDOWS\file55.zip 
.. OK ... C:\WINDOWS\file76.zip 
.. OK ... C:\WINDOWS\file79.zip 
.. OK ... C:\WINDOWS\file82.zip 
.. OK ... C:\WINDOWS\file91.zip 
.. OK ... C:\WINDOWS\files13.zip 
.. OK ... C:\WINDOWS\files19.zip 
.. OK ... C:\WINDOWS\files25.zip 
.. OK ... C:\WINDOWS\files31.zip 
.. OK ... C:\WINDOWS\files43.zip 
.. OK ... C:\WINDOWS\files67.zip 
.. OK ... C:\WINDOWS\files91.zip 
.. OK ... C:\WINDOWS\files94.zip 
.. OK ... C:\WINDOWS\downloadme15.zip 
.. OK ... C:\WINDOWS\downloadme27.zip 
.. OK ... C:\WINDOWS\downloadme3.zip 
.. OK ... C:\WINDOWS\downloadme39.zip 
.. OK ... C:\WINDOWS\downloadme42.zip 
.. OK ... C:\WINDOWS\downloadme45.zip 
.. OK ... C:\WINDOWS\downloadme48.zip 
.. OK ... C:\WINDOWS\downloadme81.zip 
.. OK ... C:\WINDOWS\downloadme84.zip 
.. OK ... C:\WINDOWS\downloadme87.zip 
.. OK ... C:\WINDOWS
ews32.zip 
.. OK ... C:\WINDOWS
ews38.zip 
.. OK ... C:\WINDOWS
ews59.zip 
.. OK ... C:\WINDOWS
ews62.zip 
.. OK ... C:\WINDOWS
ews65.zip 
.. OK ... C:\WINDOWS
ews98.zip 
 
 
 
************************ Nettoyage du registre 
 
 
 
Les fichiers encore présents seront supprimés au prochain redémarrage 
 
 
************************ Suppression des fichiers       
    
.. OK ... C:\WINDOWS\system32\direct3dx.dll  
 
 
 
************************ Fichiers suspects 
 
Aucun Fichier trouvé 
 
  
Les fichiers et clés de registre supprimés ont été sauvegardés dans le fichier 22092007_21500637.zip
 
 
------------------------------------------------------------------------  
Auteur : !aur3n7                     Contact: https://www.ionos.fr/     
------------------------------------------------------------------------   
 
---------------------------------------------   END   ---------------------------------------------

Regis59 · Answer

Ouch.

Bonjour,

Il serait préférable que tu fasses ton message personnel, cela rendra les postes plus compréhensibles et la réponse à ton problème sera plus efficace
Procèdes comme ceci :
http://pageperso.aol.fr/balltrap34/demofairesontmessage.htm

A bientôt

Virus sur msn

36 réponses

Discussions similaires

Newsletters