Virus sur msn - Page 2

Logfile of HijackThis v1.99.1
Scan saved at 22:29:50, on 15/09/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\a-squared free\a2service.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\JMRaidTool.exe
C:\WINDOWS\SkyTel.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\MSI\Live Update 3\LMonitor.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\Program Files\Brother\ControlCenter2\brctrcen.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\WINDOWS\FixCamera.exe
C:\WINDOWS\tsnp2std.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\WINDOWS\vsnp2std.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\Program Files\Copernic Desktop Search 2\DesktopSearchService.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\PROGRA~1\Wanadoo\Watch.exe
C:\Program Files\eMule\eMule.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Copernic Desktop Search 2 - {968631B6-4729-440D-9BF4-251F5593EC9A} - C:\Program Files\Copernic Desktop Search 2\DesktopSearchBand201013011.dll
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [Copernic Desktop Search 2] "C:\Program Files\Copernic Desktop Search 2\DesktopSearchService.exe" /tray
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?71422339126146d2a96aebc02f627548
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?71422339126146d2a96aebc02f627548
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - c:\program files\a-squared free\a2service.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe

j etais long mais sang et or oblige!!

J'ai regardé le match, c etait pas top top ! Heureusement qu'Hilton est la.

Sinon, je te conseille de changer avast pour antivir et d installer un pare feu comme zone alarm.

Ou en sont tes soucis?

A+

ok tout vas bien antivir ok je vais le faire mais zone alarm je l ai deja

Ouep

Ok, une fois installé, dis moi si tout est ok.

a+

voila j ai mis antivir et voici apres mon scan
AntiVir PersonalEdition Classic
Report file date: samedi 15 septembre 2007 23:08

Scanning for 1071077 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Username: SYSTEM
Computer name: XPSP2-1C0E67B68

Version information:
BUILD.DAT : 268 15604 Bytes 31/08/2007 13:04:00
AVSCAN.EXE : 7.0.6.1 290856 Bytes 15/09/2007 21:05:48
AVSCAN.DLL : 7.0.6.0 49192 Bytes 15/09/2007 21:05:48
LUKE.DLL : 7.0.5.3 147496 Bytes 15/09/2007 21:05:48
LUKERES.DLL : 7.0.6.1 10280 Bytes 15/09/2007 21:05:48
ANTIVIR0.VDF : 6.35.0.1 7371264 Bytes 31/05/2006 13:08:58
ANTIVIR1.VDF : 6.39.0.129 7251968 Bytes 10/07/2007 21:05:53
ANTIVIR2.VDF : 6.39.1.120 1918464 Bytes 12/09/2007 21:05:53
ANTIVIR3.VDF : 6.39.1.134 111104 Bytes 14/09/2007 21:05:53
AVEWIN32.DLL : 7.6.0.10 2789888 Bytes 15/09/2007 21:05:54
AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 09:36:26
AVPREF.DLL : 7.0.2.2 25640 Bytes 15/09/2007 21:05:48
AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 12:16:24
AVPACK32.DLL : 7.3.0.15 360488 Bytes 15/09/2007 21:05:55
AVREG.DLL : 7.0.1.6 30760 Bytes 15/09/2007 21:05:48
AVARKT.DLL : 1.0.0.20 278568 Bytes 15/09/2007 21:05:48
AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 15/09/2007 21:05:48
NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 10:09:42
RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 15/09/2007 21:05:39
RCTEXT.DLL : 7.0.62.0 86056 Bytes 15/09/2007 21:05:39
SQLITE3.DLL : 3.3.17.1 339968 Bytes 15/09/2007 21:05:48

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: C:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: samedi 15 septembre 2007 23:08

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'usnsvc.exe' - '1' Module(s) have been scanned
Scan process 'eMule.exe' - '1' Module(s) have been scanned
Scan process 'Watch.exe' - '1' Module(s) have been scanned
Scan process 'ALERTM~1.EXE' - '1' Module(s) have been scanned
Scan process 'RocketDock.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'PollingModule.exe' - '1' Module(s) have been scanned
Scan process 'FxSvr2.exe' - '1' Module(s) have been scanned
Scan process 'Inactivity.exe' - '1' Module(s) have been scanned
Scan process 'Toaster.exe' - '1' Module(s) have been scanned
Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
Scan process 'ComComp.exe' - '1' Module(s) have been scanned
Scan process 'DesktopSearchService.exe' - '1' Module(s) have been scanned
Scan process 'GestionnaireInternet.exe' - '1' Module(s) have been scanned
Scan process 'avgas.exe' - '1' Module(s) have been scanned
Scan process 'zlclient.exe' - '0' Module(s) have been scanned
Scan process 'ashDisp.exe' - '1' Module(s) have been scanned
Scan process 'vsnp2std.exe' - '1' Module(s) have been scanned
Scan process 'TaskBarIcon.exe' - '1' Module(s) have been scanned
Scan process 'tsnp2std.exe' - '1' Module(s) have been scanned
Scan process 'FixCamera.exe' - '1' Module(s) have been scanned
Scan process 'LogiTray.exe' - '1' Module(s) have been scanned
Scan process 'LVCOMSX.EXE' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'winampa.exe' - '1' Module(s) have been scanned
Scan process 'brctrcen.exe' - '1' Module(s) have been scanned
Scan process 'pptd40nt.exe' - '1' Module(s) have been scanned
Scan process 'rundll32.exe' - '1' Module(s) have been scanned
Scan process 'LMonitor.exe' - '1' Module(s) have been scanned
Scan process 'RTHDCPL.EXE' - '1' Module(s) have been scanned
Scan process 'SkyTel.exe' - '1' Module(s) have been scanned
Scan process 'JMRaidTool.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'StarWindService.exe' - '1' Module(s) have been scanned
Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned
Scan process 'MDM.EXE' - '1' Module(s) have been scanned
Scan process 'guard.exe' - '1' Module(s) have been scanned
Scan process 'a2service.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'brss01a.exe' - '1' Module(s) have been scanned
Scan process 'brsvc01a.exe' - '1' Module(s) have been scanned
Scan process 'ashServ.exe' - '1' Module(s) have been scanned
Scan process 'aswUpdSv.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'vsmon.exe' - '0' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
58 processes with 58 modules were scanned

Start scanning boot sectors:
Boot sector 'C:\'
[NOTE] No virus was found!

Starting to scan the registry.
The registry was scanned ( '24' files ).

Starting the file scan:

Begin scan in 'C:\'
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\Documents and Settings\Admin\Bureau\Upload_Me.zip
[0] Archive type: ZIP
--> DOCUME~1/Admin/Bureau/Upload_Me/downloadme0.zip
[1] Archive type: ZIP
--> downloadme0.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/downloadme18.zip
[1] Archive type: ZIP
--> downloadme18.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/downloadme21.zip
[1] Archive type: ZIP
--> downloadme21.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/downloadme27.zip
[1] Archive type: ZIP
--> downloadme27.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/downloadme3.zip
[1] Archive type: ZIP
--> downloadme3.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/downloadme30.zip
[1] Archive type: ZIP
--> downloadme30.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/downloadme33.zip
[1] Archive type: ZIP
--> downloadme33.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/downloadme39.zip
[1] Archive type: ZIP
--> downloadme39.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/downloadme45.zip
[1] Archive type: ZIP
--> downloadme45.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/downloadme48.zip
[1] Archive type: ZIP
--> downloadme48.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/downloadme51.zip
[1] Archive type: ZIP
--> downloadme51.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/downloadme54.zip
[1] Archive type: ZIP
--> downloadme54.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/downloadme57.zip
[1] Archive type: ZIP
--> downloadme57.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/downloadme6.zip
[1] Archive type: ZIP
--> downloadme6.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/downloadme60.zip
[1] Archive type: ZIP
--> downloadme60.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/downloadme66.zip
[1] Archive type: ZIP
--> downloadme66.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/downloadme69.zip
[1] Archive type: ZIP
--> downloadme69.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/downloadme72.zip
[1] Archive type: ZIP
--> downloadme72.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/downloadme75.zip
[1] Archive type: ZIP
--> downloadme75.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/downloadme84.zip
[1] Archive type: ZIP
--> downloadme84.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/downloadme87.zip
[1] Archive type: ZIP
--> downloadme87.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/downloadme9.zip
[1] Archive type: ZIP
--> downloadme9.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/downloadme93.zip
[1] Archive type: ZIP
--> downloadme93.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/downloadme96.zip
[1] Archive type: ZIP
--> downloadme96.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/file1.zip
[1] Archive type: ZIP
--> file1.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/file10.zip
[1] Archive type: ZIP
--> file10.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/file13.zip
[1] Archive type: ZIP
--> file13.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/file19.zip
[1] Archive type: ZIP
--> file19.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/file22.zip
[1] Archive type: ZIP
--> file22.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/file31.zip
[1] Archive type: ZIP
--> file31.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/file34.zip
[1] Archive type: ZIP
--> file34.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/file37.zip
[1] Archive type: ZIP
--> file37.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/file40.zip
[1] Archive type: ZIP
--> file40.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/file43.zip
[1] Archive type: ZIP
--> file43.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/file46.zip
[1] Archive type: ZIP
--> file46.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/file49.zip
[1] Archive type: ZIP
--> file49.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/file52.zip
[1] Archive type: ZIP
--> file52.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/file61.zip
[1] Archive type: ZIP
--> file61.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/file64.zip
[1] Archive type: ZIP
--> file64.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/file67.zip
[1] Archive type: ZIP
--> file67.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/file70.zip
[1] Archive type: ZIP
--> file70.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/file76.zip
[1] Archive type: ZIP
--> file76.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/file85.zip
[1] Archive type: ZIP
--> file85.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/file88.zip
[1] Archive type: ZIP
--> file88.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/file91.zip
[1] Archive type: ZIP
--> file91.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/file94.zip
[1] Archive type: ZIP
--> file94.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/file97.zip
[1] Archive type: ZIP
--> file97.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage11.zip
[1] Archive type: ZIP
--> JPGimage11.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage14.zip
[1] Archive type: ZIP
--> JPGimage14.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage17.zip
[1] Archive type: ZIP
--> JPGimage17.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage26.zip
[1] Archive type: ZIP
--> JPGimage26.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage29.zip
[1] Archive type: ZIP
--> JPGimage29.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage32.zip
[1] Archive type: ZIP
--> JPGimage32.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage35.zip
[1] Archive type: ZIP
--> JPGimage35.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage41.zip
[1] Archive type: ZIP
--> JPGimage41.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage44.zip
[1] Archive type: ZIP
--> JPGimage44.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage47.zip
[1] Archive type: ZIP
--> JPGimage47.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage5.zip
[1] Archive type: ZIP
--> JPGimage5.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage53.zip
[1] Archive type: ZIP
--> JPGimage53.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage56.zip
[1] Archive type: ZIP
--> JPGimage56.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage59.zip
[1] Archive type: ZIP
--> JPGimage59.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage62.zip
[1] Archive type: ZIP
--> JPGimage62.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage65.zip
[1] Archive type: ZIP
--> JPGimage65.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage68.zip
[1] Archive type: ZIP
--> JPGimage68.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage71.zip
[1] Archive type: ZIP
--> JPGimage71.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage74.zip
[1] Archive type: ZIP
--> JPGimage74.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage77.zip
[1] Archive type: ZIP
--> JPGimage77.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage80.zip
[1] Archive type: ZIP
--> JPGimage80.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage83.zip
[1] Archive type: ZIP
--> JPGimage83.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage86.zip
[1] Archive type: ZIP
--> JPGimage86.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage92.zip
[1] Archive type: ZIP
--> JPGimage92.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage95.zip
[1] Archive type: ZIP
--> JPGimage95.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/JPGimage98.zip
[1] Archive type: ZIP
--> JPGimage98.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/look0.zip
[1] Archive type: ZIP
--> look0.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/look12.zip
[1] Archive type: ZIP
--> look12.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/look15.zip
[1] Archive type: ZIP
--> look15.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/look18.zip
[1] Archive type: ZIP
--> look18.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/look24.zip
[1] Archive type: ZIP
--> look24.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/look27.zip
[1] Archive type: ZIP
--> look27.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/look36.zip
[1] Archive type: ZIP
--> look36.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/look39.zip
[1] Archive type: ZIP
--> look39.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/look42.zip
[1] Archive type: ZIP
--> look42.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/look48.zip
[1] Archive type: ZIP
--> look48.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/look51.zip
[1] Archive type: ZIP
--> look51.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/look57.zip
[1] Archive type: ZIP
--> look57.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/look6.zip
[1] Archive type: ZIP
--> look6.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/look60.zip
[1] Archive type: ZIP
--> look60.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/look63.zip
[1] Archive type: ZIP
--> look63.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/look66.zip
[1] Archive type: ZIP
--> look66.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/look69.zip
[1] Archive type: ZIP
--> look69.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/look72.zip
[1] Archive type: ZIP
--> look72.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/look75.zip
[1] Archive type: ZIP
--> look75.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/look78.zip
[1] Archive type: ZIP
--> look78.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/look84.zip
[1] Archive type: ZIP
--> look84.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/look93.zip
[1] Archive type: ZIP
--> look93.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> DOCUME~1/Admin/Bureau/Upload_Me/look96.zip
[1] Archive type: ZIP
--> look96.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '47584aeb.qua'!
C:\Documents and Settings\Admin\Bureau\MSNFix\MSNFix\15092007_14572832.zip
[0] Archive type: ZIP
--> backup/directxd.exe
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/files1.zip
[1] Archive type: ZIP
--> files1.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/files10.zip
[1] Archive type: ZIP
--> files10.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/files16.zip
[1] Archive type: ZIP
--> files16.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/files22.zip
[1] Archive type: ZIP
--> files22.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/files28.zip
[1] Archive type: ZIP
--> files28.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/files31.zip
[1] Archive type: ZIP
--> files31.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/files37.zip
[1] Archive type: ZIP
--> files37.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/files4.zip
[1] Archive type: ZIP
--> files4.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/files43.zip
[1] Archive type: ZIP
--> files43.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/files49.zip
[1] Archive type: ZIP
--> files49.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/files52.zip
[1] Archive type: ZIP
--> files52.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/files55.zip
[1] Archive type: ZIP
--> files55.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/files58.zip
[1] Archive type: ZIP
--> files58.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/files61.zip
[1] Archive type: ZIP
--> files61.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/files67.zip
[1] Archive type: ZIP
--> files67.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/files70.zip
[1] Archive type: ZIP
--> files70.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/files73.zip
[1] Archive type: ZIP
--> files73.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/files76.zip
[1] Archive type: ZIP
--> files76.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/files79.zip
[1] Archive type: ZIP
--> files79.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/files82.zip
[1] Archive type: ZIP
--> files82.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/files85.zip
[1] Archive type: ZIP
--> files85.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/files94.zip
[1] Archive type: ZIP
--> files94.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/news11.zip
[1] Archive type: ZIP
--> news11.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/news14.zip
[1] Archive type: ZIP
--> news14.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/news2.zip
[1] Archive type: ZIP
--> news2.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/news20.zip
[1] Archive type: ZIP
--> news20.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/news29.zip
[1] Archive type: ZIP
--> news29.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/news35.zip
[1] Archive type: ZIP
--> news35.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/news38.zip
[1] Archive type: ZIP
--> news38.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/news41.zip
[1] Archive type: ZIP
--> news41.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/news44.zip
[1] Archive type: ZIP
--> news44.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/news47.zip
[1] Archive type: ZIP
--> news47.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/news5.zip
[1] Archive type: ZIP
--> news5.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/news50.zip
[1] Archive type: ZIP
--> news50.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/news53.zip
[1] Archive type: ZIP
--> news53.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/news56.zip
[1] Archive type: ZIP
--> news56.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/news59.zip
[1] Archive type: ZIP
--> news59.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/news62.zip
[1] Archive type: ZIP
--> news62.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/news65.zip
[1] Archive type: ZIP
--> news65.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/news68.zip
[1] Archive type: ZIP
--> news68.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/news71.zip
[1] Archive type: ZIP
--> news71.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/news74.zip
[1] Archive type: ZIP
--> news74.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/news80.zip
[1] Archive type: ZIP
--> news80.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/news83.zip
[1] Archive type: ZIP
--> news83.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/news86.zip
[1] Archive type: ZIP
--> news86.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/news89.zip
[1] Archive type: ZIP
--> news89.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/news92.zip
[1] Archive type: ZIP
--> news92.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/news95.zip
[1] Archive type: ZIP
--> news95.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
--> backup/news98.zip
[1] Archive type: ZIP
--> news98.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '471c4abd.qua'!
C:\Documents and Settings\Admin\Mes documents\utilitaires sécurité\SmitfraudFix.exe
[DETECTION] Contains detection pattern of the dropper DR/Tool.Reboot.F.14
[INFO] The file was moved to '47554c13.qua'!
C:\Program Files\Navilog1\navilog1.bat
[DETECTION] Contains suspicious code HEUR/Exploit.HTML
[INFO] The file was moved to '47624eca.qua'!
C:\System Volume Information\_restore{40B0236C-64A9-48F5-9C42-CB61A6F548FB}\RP2\A0001080.exe
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '471c4ee8.qua'!
C:\System Volume Information\_restore{40B0236C-64A9-48F5-9C42-CB61A6F548FB}\RP4\A0001249.bat
[DETECTION] Contains suspicious code HEUR/Exploit.HTML
[INFO] The file was moved to '471c4eec.qua'!
C:\WINDOWS\system32\drivers\sptd.sys
[WARNING] The file could not be opened!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme0.zip
[0] Archive type: ZIP
--> downloadme0.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '4763508a.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme18.zip
[0] Archive type: ZIP
--> downloadme18.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '4763508b.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme21.zip
[0] Archive type: ZIP
--> downloadme21.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '461e2024.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme27.zip
[0] Archive type: ZIP
--> downloadme27.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '4763508d.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme3.zip
[0] Archive type: ZIP
--> downloadme3.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '4763508c.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme30.zip
[0] Archive type: ZIP
--> downloadme30.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '461e2025.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme33.zip
[0] Archive type: ZIP
--> downloadme33.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '4763508e.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme39.zip
[0] Archive type: ZIP
--> downloadme39.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '461e2027.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme45.zip
[0] Archive type: ZIP
--> downloadme45.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '461e2026.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme48.zip
[0] Archive type: ZIP
--> downloadme48.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '4763508f.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme51.zip
[0] Archive type: ZIP
--> downloadme51.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '461e2038.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme54.zip
[0] Archive type: ZIP
--> downloadme54.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '47635080.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme57.zip
[0] Archive type: ZIP
--> downloadme57.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '461e2029.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme6.zip
[0] Archive type: ZIP
--> downloadme6.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '47635082.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme60.zip
[0] Archive type: ZIP
--> downloadme60.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '461e202b.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme66.zip
[0] Archive type: ZIP
--> downloadme66.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '47635091.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme69.zip
[0] Archive type: ZIP
--> downloadme69.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '461e203a.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme72.zip
[0] Archive type: ZIP
--> downloadme72.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '47635093.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme75.zip
[0] Archive type: ZIP
--> downloadme75.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '47635090.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme84.zip
[0] Archive type: ZIP
--> downloadme84.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '461e2039.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme87.zip
[0] Archive type: ZIP
--> downloadme87.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '47635092.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme9.zip
[0] Archive type: ZIP
--> downloadme9.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '461e203b.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme93.zip
[0] Archive type: ZIP
--> downloadme93.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '461e203c.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\downloadme96.zip
[0] Archive type: ZIP
--> downloadme96.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '47635095.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file1.zip
[0] Archive type: ZIP
--> file1.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '4758508b.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file10.zip
[0] Archive type: ZIP
--> file10.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '4758508c.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file13.zip
[0] Archive type: ZIP
--> file13.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '46252025.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file19.zip
[0] Archive type: ZIP
--> file19.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '4758508e.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file22.zip
[0] Archive type: ZIP
--> file22.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '46252027.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file31.zip
[0] Archive type: ZIP
--> file31.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '4758508d.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file34.zip
[0] Archive type: ZIP
--> file34.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '46252026.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file37.zip
[0] Archive type: ZIP
--> file37.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '4758508f.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file40.zip
[0] Archive type: ZIP
--> file40.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '47585080.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file43.zip
[0] Archive type: ZIP
--> file43.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '46252029.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file46.zip
[0] Archive type: ZIP
--> file46.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '47585082.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file49.zip
[0] Archive type: ZIP
--> file49.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '4625202b.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file52.zip
[0] Archive type: ZIP
--> file52.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '46252038.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file61.zip
[0] Archive type: ZIP
--> file61.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '47585091.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file64.zip
[0] Archive type: ZIP
--> file64.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '4625203a.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file67.zip
[0] Archive type: ZIP
--> file67.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '47585090.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file70.zip
[0] Archive type: ZIP
--> file70.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '46252039.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file76.zip
[0] Archive type: ZIP
--> file76.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '47585092.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file85.zip
[0] Archive type: ZIP
--> file85.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '47585093.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file88.zip
[0] Archive type: ZIP
--> file88.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '4625203c.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file91.zip
[0] Archive type: ZIP
--> file91.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '47585095.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file94.zip
[0] Archive type: ZIP
--> file94.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '4625203e.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\file97.zip
[0] Archive type: ZIP
--> file97.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '4625203b.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage11.zip
[0] Archive type: ZIP
--> JPGimage11.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '47335079.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage14.zip
[0] Archive type: ZIP
--> JPGimage14.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '464e20d2.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage17.zip
[0] Archive type: ZIP
--> JPGimage17.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '4733507a.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage26.zip
[0] Archive type: ZIP
--> JPGimage26.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '464e20d3.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage29.zip
[0] Archive type: ZIP
--> JPGimage29.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '4733507c.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage32.zip
[0] Archive type: ZIP
--> JPGimage32.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '4733507b.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage35.zip
[0] Archive type: ZIP
--> JPGimage35.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '464e20d4.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage41.zip
[0] Archive type: ZIP
--> JPGimage41.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '4733507d.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage44.zip
[0] Archive type: ZIP
--> JPGimage44.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '464e20d5.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage47.zip
[0] Archive type: ZIP
--> JPGimage47.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '4733507e.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage5.zip
[0] Archive type: ZIP
--> JPGimage5.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '464e20d7.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage53.zip
[0] Archive type: ZIP
--> JPGimage53.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '464e20d6.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage56.zip
[0] Archive type: ZIP
--> JPGimage56.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '4733507f.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage59.zip
[0] Archive type: ZIP
--> JPGimage59.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '464e2028.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage62.zip
[0] Archive type: ZIP
--> JPGimage62.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '47335081.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage65.zip
[0] Archive type: ZIP
--> JPGimage65.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '47335070.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage68.zip
[0] Archive type: ZIP
--> JPGimage68.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '464e20d9.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage71.zip
[0] Archive type: ZIP
--> JPGimage71.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '47335072.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage74.zip
[0] Archive type: ZIP
--> JPGimage74.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '464e202a.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage77.zip
[0] Archive type: ZIP
--> JPGimage77.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '47335083.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage80.zip
[0] Archive type: ZIP
--> JPGimage80.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '464e202c.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage83.zip
[0] Archive type: ZIP
--> JPGimage83.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '47335085.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage86.zip
[0] Archive type: ZIP
--> JPGimage86.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '47335080.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage92.zip
[0] Archive type: ZIP
--> JPGimage92.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '464e2029.qua'!
C:\_OTMoveIt\MovedFiles\WINDOWS\JPGimage95.zip
[0] Archive type: ZIP
--> JPGimage95.scr
[DETECTION] Contains detection pattern of the worm WORM/IRCBot.26112.3
[INFO] The file was moved to '47335082.qua'!

End of the scan: samedi 15 septembre 2007 23:35
Used time: 27:12 min

The scan has been done completely.

3942 Scanning directories
172973 Files were scanned
220 viruses and/or unwanted programs were found
2 Files were classified as suspicious:
0 files were deleted
0 files were repaired
78 files were moved to quarantine
0 files were renamed
2 Files cannot be scanned
172753 Files not concerned
1176 Archives were scanned
2 Warnings
2 Notes

Rien de grave.
C'est soit des backups soit des sauvegardes. Donc c'est ok.

Ou en sont tes soucis?

A+

mais antivir a quand meme sonner et il a ecris: worm/ircbot.26112.3
dr/tool.reboot.f.14
heur/exploit.html
et les a mis en quarantaine pas grave?

Oui, pas grave !
Supprime les fichiers en quarantaine !
Si vraiment t'es pas rassuré lance un nouveau scan d'antivir et copie colle le rapport.

A+

ok c est bon je te crois en tout cas j ai tout viré de la quarantaine et tout a l air d aller normalement c est fini . hein c est fini?

Ouais c est finit :-)

Confirmes moi demain que tout est ok, d accord?

A+

Bonsoir Régis

J'ai été infectée par le virus sur msn; j'ai été conseillée sur le site, j'ai fait MSNFix, Hijackthis et installé et exécuté : spyware, ccleaner, spybot, et ad ware, je ne sais plus trop les noms;
j'ai redemarré mon ordin et voici mon rapport msnfix:
Pouvez-vous me donner votre avis?
Merci d'avance.

MSNFix 1.495

C:\Documents and Settings\Compaq_Propri‚taire\Bureau\MSNFix
Fix exécuté le 16/09/2007 - 0:08:21,31 By Compaq_Propri‚taire
mode normal

************************ Recherche les fichiers présents

... C:\WINDOWS\system32\microsoft\backup.ftp
... C:\WINDOWS\system32\microsoft\backup.tftp
... C:\WINDOWS\W139_jpg.zip

************************ Recherche les dossiers présents

Aucun dossier trouvé

************************ Suppression des fichiers

.. OK ... C:\WINDOWS\system32\microsoft\backup.ftp
.. OK ... C:\WINDOWS\system32\microsoft\backup.tftp
.. OK ... C:\WINDOWS\W139_jpg.zip

************************ Nettoyage du registre

************************ Fichiers suspects

Aucun Fichier trouvé

Les fichiers et clés de registre supprimés ont été sauvegardés dans le fichier 16092007_ 0083300.zip

------------------------------------------------------------------------
Auteur : !aur3n7 Contact: https://www.ionos.fr/
------------------------------------------------------------------------

--------------------------------------------- END ---------------------------------------------

C'est ok mais il serait mieux que tu suives ce conseil:

Il serait préférable que tu fasses ton message personnel, cela rendra les postes plus compréhensibles et la réponse à ton problème sera plus efficace
Procèdes comme ceci :
http://pageperso.aol.fr/balltrap34/demofairesontmessage.htm

A bientôt

ok tout va bien je te remercie mille fois d avoir pris le temps de m aider encore une fois merci a plus

De rien :-)

vala pour moi!merci encor pour ton aide

MSNFix 1.516

C:\Documents and Settings\perso\Mes documents\MSNFix
Fix exécuté le 22/09/2007 - 21:44:09,56 By perso
mode normal

************************ Recherche les fichiers présents

... C:\WINDOWS\system32\direct3dx.dll
... C:\WINDOWS\system32\directxd.exe
... C:\WINDOWS\system32\drivers\oreans32.sys
... C:\WINDOWS\files13.zip
... C:\WINDOWS\files19.zip
... C:\WINDOWS\files25.zip
... C:\WINDOWS\files31.zip
... C:\WINDOWS\files43.zip
... C:\WINDOWS\files67.zip
... C:\WINDOWS\files91.zip
... C:\WINDOWS\files94.zip
... C:\WINDOWS\news32.zip
... C:\WINDOWS\news38.zip
... C:\WINDOWS\news59.zip
... C:\WINDOWS\news62.zip
... C:\WINDOWS\news65.zip
... C:\WINDOWS\news98.zip
... C:\WINDOWS\JPGimage11.zip
... C:\WINDOWS\JPGimage44.zip
... C:\WINDOWS\JPGimage5.zip
... C:\WINDOWS\JPGimage56.zip
... C:\WINDOWS\JPGimage59.zip
... C:\WINDOWS\JPGimage62.zip
... C:\WINDOWS\JPGimage65.zip
... C:\WINDOWS\JPGimage71.zip
... C:\WINDOWS\JPGimage77.zip
... C:\WINDOWS\JPGimage86.zip
... C:\WINDOWS\JPGimage89.zip
... C:\WINDOWS\file16.zip
... C:\WINDOWS\file31.zip
... C:\WINDOWS\file46.zip
... C:\WINDOWS\file55.zip
... C:\WINDOWS\file76.zip
... C:\WINDOWS\file79.zip
... C:\WINDOWS\file82.zip
... C:\WINDOWS\file91.zip
... C:\WINDOWS\files13.zip
... C:\WINDOWS\files19.zip
... C:\WINDOWS\files25.zip
... C:\WINDOWS\files31.zip
... C:\WINDOWS\files43.zip
... C:\WINDOWS\files67.zip
... C:\WINDOWS\files91.zip
... C:\WINDOWS\files94.zip
... C:\WINDOWS\downloadme15.zip
... C:\WINDOWS\downloadme27.zip
... C:\WINDOWS\downloadme3.zip
... C:\WINDOWS\downloadme39.zip
... C:\WINDOWS\downloadme42.zip
... C:\WINDOWS\downloadme45.zip
... C:\WINDOWS\downloadme48.zip
... C:\WINDOWS\downloadme81.zip
... C:\WINDOWS\downloadme84.zip
... C:\WINDOWS\downloadme87.zip
... C:\WINDOWS\news32.zip
... C:\WINDOWS\news38.zip
... C:\WINDOWS\news59.zip
... C:\WINDOWS\news62.zip
... C:\WINDOWS\news65.zip
... C:\WINDOWS\news98.zip

************************ MSNCHK ***** /!\ beta test /!\

[!] C:\WINDOWS\downloadme15.zip is INFECTED
[!] C:\WINDOWS\downloadme27.zip is INFECTED
[!] C:\WINDOWS\downloadme3.zip is INFECTED
[!] C:\WINDOWS\downloadme39.zip is INFECTED
[!] C:\WINDOWS\downloadme42.zip is INFECTED
[!] C:\WINDOWS\downloadme45.zip is INFECTED
[!] C:\WINDOWS\downloadme48.zip is INFECTED
[!] C:\WINDOWS\downloadme81.zip is INFECTED
[!] C:\WINDOWS\downloadme84.zip is INFECTED
[!] C:\WINDOWS\downloadme87.zip is INFECTED
[!] C:\WINDOWS\file16.zip is INFECTED
[!] C:\WINDOWS\file31.zip is INFECTED
[!] C:\WINDOWS\file46.zip is INFECTED
[!] C:\WINDOWS\file55.zip is INFECTED
[!] C:\WINDOWS\file76.zip is INFECTED
[!] C:\WINDOWS\file79.zip is INFECTED
[!] C:\WINDOWS\file82.zip is INFECTED
[!] C:\WINDOWS\file91.zip is INFECTED
[!] C:\WINDOWS\files13.zip is INFECTED
[!] C:\WINDOWS\files19.zip is INFECTED
[!] C:\WINDOWS\files25.zip is INFECTED
[!] C:\WINDOWS\files31.zip is INFECTED
[!] C:\WINDOWS\files43.zip is INFECTED
[!] C:\WINDOWS\files67.zip is INFECTED
[!] C:\WINDOWS\files91.zip is INFECTED
[!] C:\WINDOWS\files94.zip is INFECTED
[!] C:\WINDOWS\JPGimage11.zip is INFECTED
[!] C:\WINDOWS\JPGimage44.zip is INFECTED
[!] C:\WINDOWS\JPGimage5.zip is INFECTED
[!] C:\WINDOWS\JPGimage56.zip is INFECTED
[!] C:\WINDOWS\JPGimage59.zip is INFECTED
[!] C:\WINDOWS\JPGimage62.zip is INFECTED
[!] C:\WINDOWS\JPGimage65.zip is INFECTED
[!] C:\WINDOWS\JPGimage71.zip is INFECTED
[!] C:\WINDOWS\JPGimage77.zip is INFECTED
[!] C:\WINDOWS\JPGimage86.zip is INFECTED
[!] C:\WINDOWS\JPGimage89.zip is INFECTED
[!] C:\WINDOWS\news32.zip is INFECTED
[!] C:\WINDOWS\news38.zip is INFECTED
[!] C:\WINDOWS\news59.zip is INFECTED
[!] C:\WINDOWS\news62.zip is INFECTED
[!] C:\WINDOWS\news65.zip is INFECTED
[!] C:\WINDOWS\news98.zip is INFECTED

************************ Recherche les dossiers présents

Aucun dossier trouvé

************************ Suppression des fichiers

/!\ ... C:\WINDOWS\system32\direct3dx.dll
.. OK ... C:\WINDOWS\system32\directxd.exe
.. OK ... C:\WINDOWS\system32\drivers\oreans32.sys
.. OK ... C:\WINDOWS\files13.zip
.. OK ... C:\WINDOWS\files19.zip
.. OK ... C:\WINDOWS\files25.zip
.. OK ... C:\WINDOWS\files31.zip
.. OK ... C:\WINDOWS\files43.zip
.. OK ... C:\WINDOWS\files67.zip
.. OK ... C:\WINDOWS\files91.zip
.. OK ... C:\WINDOWS\files94.zip
.. OK ... C:\WINDOWS\news32.zip
.. OK ... C:\WINDOWS\news38.zip
.. OK ... C:\WINDOWS\news59.zip
.. OK ... C:\WINDOWS\news62.zip
.. OK ... C:\WINDOWS\news65.zip
.. OK ... C:\WINDOWS\news98.zip
.. OK ... C:\WINDOWS\JPGimage11.zip
.. OK ... C:\WINDOWS\JPGimage44.zip
.. OK ... C:\WINDOWS\JPGimage5.zip
.. OK ... C:\WINDOWS\JPGimage56.zip
.. OK ... C:\WINDOWS\JPGimage59.zip
.. OK ... C:\WINDOWS\JPGimage62.zip
.. OK ... C:\WINDOWS\JPGimage65.zip
.. OK ... C:\WINDOWS\JPGimage71.zip
.. OK ... C:\WINDOWS\JPGimage77.zip
.. OK ... C:\WINDOWS\JPGimage86.zip
.. OK ... C:\WINDOWS\JPGimage89.zip
.. OK ... C:\WINDOWS\file16.zip
.. OK ... C:\WINDOWS\file31.zip
.. OK ... C:\WINDOWS\file46.zip
.. OK ... C:\WINDOWS\file55.zip
.. OK ... C:\WINDOWS\file76.zip
.. OK ... C:\WINDOWS\file79.zip
.. OK ... C:\WINDOWS\file82.zip
.. OK ... C:\WINDOWS\file91.zip
.. OK ... C:\WINDOWS\files13.zip
.. OK ... C:\WINDOWS\files19.zip
.. OK ... C:\WINDOWS\files25.zip
.. OK ... C:\WINDOWS\files31.zip
.. OK ... C:\WINDOWS\files43.zip
.. OK ... C:\WINDOWS\files67.zip
.. OK ... C:\WINDOWS\files91.zip
.. OK ... C:\WINDOWS\files94.zip
.. OK ... C:\WINDOWS\downloadme15.zip
.. OK ... C:\WINDOWS\downloadme27.zip
.. OK ... C:\WINDOWS\downloadme3.zip
.. OK ... C:\WINDOWS\downloadme39.zip
.. OK ... C:\WINDOWS\downloadme42.zip
.. OK ... C:\WINDOWS\downloadme45.zip
.. OK ... C:\WINDOWS\downloadme48.zip
.. OK ... C:\WINDOWS\downloadme81.zip
.. OK ... C:\WINDOWS\downloadme84.zip
.. OK ... C:\WINDOWS\downloadme87.zip
.. OK ... C:\WINDOWS\news32.zip
.. OK ... C:\WINDOWS\news38.zip
.. OK ... C:\WINDOWS\news59.zip
.. OK ... C:\WINDOWS\news62.zip
.. OK ... C:\WINDOWS\news65.zip
.. OK ... C:\WINDOWS\news98.zip

************************ Nettoyage du registre

Les fichiers encore présents seront supprimés au prochain redémarrage

************************ Suppression des fichiers

.. OK ... C:\WINDOWS\system32\direct3dx.dll

************************ Fichiers suspects

Aucun Fichier trouvé

Les fichiers et clés de registre supprimés ont été sauvegardés dans le fichier 22092007_21500637.zip

------------------------------------------------------------------------
Auteur : !aur3n7 Contact: https://www.ionos.fr/
------------------------------------------------------------------------

--------------------------------------------- END ---------------------------------------------

Ouch.

Bonjour,

Il serait préférable que tu fasses ton message personnel, cela rendra les postes plus compréhensibles et la réponse à ton problème sera plus efficace
Procèdes comme ceci :
http://pageperso.aol.fr/balltrap34/demofairesontmessage.htm

A bientôt