[Virus msn wlm] www.Nokia_19_jpg-msn.com

Bonjour,

Je viens d'être infecté par un virus qui arrive dans une discussion msn windows live messenger, j'ai l'impression que les gens qui l'envoient ne sont même pas au courant. Un message instantané est apparu d'un ami, il me dit que c'est sa soeur qui voulait me montrer ca, c'est un fichier zip envoyé, donc j'accepte et j'arrive pas à ouvrir le fichier dézipé en question et même pas 2 minutes + tard avast m'alerte que je suis infecté par un virus.

Le fichier en question est sur mon bureau, il s'appelle www.Nokia_19_jpg-msn.com

Voici mon rapport SDFIX

SDFix: Version 1.104

Run by Niko admin on 12/10/2007 at 20:22

Microsoft Windows XP [version 5.1.2600]

Running From: H:\DOCUME~1\NIKOAD~1\Bureau\sdfix\SDFix

Safe Mode:
Checking Services:

Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting...

Normal Mode:
Checking Files:

No Trojan Files Found

Removing Temp Files...

ADS Check:

H:\WINDOWS
No streams found.

H:\WINDOWS\system32
No streams found.

H:\WINDOWS\system32\svchost.exe
No streams found.

H:\WINDOWS\system32\ntoskrnl.exe
No streams found.

Final Check:

Remaining Services:
------------------

Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"H:\\Program Files\\Azureus\\Azureus.exe"="H:\\Program Files\\Azureus\\Azureus.exe:*:Enabled:Azureus"
"H:\\Program Files\\Soulseek\\slsk.exe"="H:\\Program Files\\Soulseek\\slsk.exe:*:Enabled:SoulSeek"
"H:\\Program Files\\Mozilla Firefox\\firefox.exe"="H:\\Program Files\\Mozilla Firefox\\firefox.exe:*:Enabled:Firefox"
"H:\\Program Files\\Internet Explorer\\iexplore.exe"="H:\\Program Files\\Internet Explorer\\iexplore.exe:*:Enabled:Internet Explorer"
"H:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"="H:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
"H:\\Program Files\\utorrent\\utorrent.exe"="H:\\Program Files\\utorrent\\utorrent.exe:*:Enabled:æTorrent"
"H:\\WINDOWS\\system32\\dpvsetup.exe"="H:\\WINDOWS\\system32\\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"H:\\WINDOWS\\system32\\rundll32.exe"="H:\\WINDOWS\\system32\\rundll32.exe:*:Disabled:Ex‚cuter une DLL en tant qu'application"
"H:\\Program Files\\MSN Messenger\\msncall.exe"="H:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"H:\\Documents and Settings\\Nicolas\\Bureau\\volley.exe"="H:\\Documents and Settings\\Nicolas\\Bureau\\volley.exe:*:Enabled:volley"
"H:\\Program Files\\blobby volley\\volley.exe"="H:\\Program Files\\blobby volley\\volley.exe:*:Enabled:volley"
"H:\\Program Files\\Real\\RealPlayer\\realplay.exe"="H:\\Program Files\\Real\\RealPlayer\\realplay.exe:*:Enabled:RealPlayer"
"H:\\WINDOWS\\system32\\dplaysvr.exe"="H:\\WINDOWS\\system32\\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"C:\\AdobeR.exe"="C:\\AdobeR.exe:*:Disabled:AdobeR"
"H:\\Program Files\\MSN Messenger\\msnmsgr.exe"="H:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"H:\\Program Files\\MSN Messenger\\livecall.exe"="H:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"H:\\Program Files\\Messenger\\MsMsgs.EXE"="H:\\Program Files\\Messenger\\MsMsgs.EXE:*:Enabled:Windows Messenger"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"H:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"="H:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
"H:\\Program Files\\MSN Messenger\\msncall.exe"="H:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"H:\\Program Files\\MSN Messenger\\msnmsgr.exe"="H:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"H:\\Program Files\\MSN Messenger\\livecall.exe"="H:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

Remaining Files:
---------------

Files with Hidden Attributes:

H:\Documents and Settings\Nicolas\Local Settings\Application Data\Microsoft\Messenger\aurorecothereau@hotmail.com\Sharing Folders\manon_c19@hotmail.fr\Thumbs.db
H:\Documents and Settings\Nicolas\Local Settings\Application Data\Microsoft\Messenger\strictlyhiphoptsf98@hotmail.com\Sharing Folders\brice107@msn.com\Radio Phenix 15 juin 2007\Thumbs.db
H:\Documents and Settings\Nicolas\Local Settings\Application Data\Microsoft\Messenger\strictlyhiphoptsf98@hotmail.com\Sharing Folders\brice107@msn.com\Video radio Phoenix\Thumbs.db
H:\Program Files\eRightSoft\SUPER\cygwin1.dll
H:\Program Files\eRightSoft\SUPER\cygz.dll
H:\Program Files\eRightSoft\SUPER\_Setup.dll
H:\Program Files\eRightSoft\SUPER\mencoder\14_43260.dll
H:\Program Files\eRightSoft\SUPER\mencoder\28_83260.dll
H:\Program Files\eRightSoft\SUPER\mencoder\atrc3260.dll
H:\Program Files\eRightSoft\SUPER\mencoder\cook3260.dll
H:\Program Files\eRightSoft\SUPER\mencoder\ddnt3260.dll
H:\Program Files\eRightSoft\SUPER\mencoder\dnet3260.dll
H:\Program Files\eRightSoft\SUPER\mencoder\drv13260.dll
H:\Program Files\eRightSoft\SUPER\mencoder\drv23260.dll
H:\Program Files\eRightSoft\SUPER\mencoder\drv33260.dll
H:\Program Files\eRightSoft\SUPER\mencoder\drv43260.dll
H:\Program Files\eRightSoft\SUPER\mencoder\dspr3260.dll
H:\Program Files\eRightSoft\SUPER\mencoder\ivvideo.dll
H:\Program Files\eRightSoft\SUPER\mencoder\qtmlClient.dll
H:\Program Files\eRightSoft\SUPER\mencoder\raac.dll
H:\Program Files\eRightSoft\SUPER\mencoder\rnco3260.dll
H:\Program Files\eRightSoft\SUPER\mencoder\rnlt3260.dll
H:\Program Files\eRightSoft\SUPER\mencoder\rv103260.dll
H:\Program Files\eRightSoft\SUPER\mencoder\rv203260.dll
H:\Program Files\eRightSoft\SUPER\mencoder\rv303260.dll
H:\Program Files\eRightSoft\SUPER\mencoder\rv403260.dll
H:\Program Files\eRightSoft\SUPER\mencoder\sipr3260.dll
H:\Program Files\eRightSoft\SUPER\mencoder\tokr3260.dll
H:\WINDOWS\system32\flvDX.dll
H:\Program Files\eRightSoft\SUPER\Setup.exe
H:\Program Files\Windows Media Player\mplayer2.exe
H:\Program Files\Windows Media Player\wmplayer.exe
H:\WINDOWS\system32\KGyGaAvL.sys
H:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp

Finished!

Pouvez vous m'aider svp, sachant que j'ai supprimé le zip mais j'arrive pas à supprimé le fichier, que j'ai mis en quarantaine avec avast

Merci d'avance

Nicolas