Virus nokia...

Bonjour, bonjour!

mon ordinateur est infecté par le virus nokia...(sic)
alors,
suivant les conseils prodigués dans les autres posts;

j'ai téléchargé msnfix,
rapport ci-dessous:

MSNFix 1.556

C:\Documents and Settings\Admin\Bureau\MSNFix\MSNFix
Fix exécuté le 03/11/2007 - 19:34:31,56 By Admin
mode normal

************************ Recherche les fichiers présents

... C:\log.txt

************************ MSNCHK ***** /!\ beta test /!\

************************ Recherche les dossiers présents

Aucun dossier trouvé

************************ Suppression des fichiers

/!\ ... C:\log.txt

************************ Nettoyage du registre

Les fichiers encore présents seront supprimés au prochain redémarrage

************************ Suppression des fichiers

/!\ ... C:\log.txt

Les fichiers encore présents seront supprimés au prochain redémarrage

************************ Suppression des fichiers

/!\ ... C:\log.txt

************************ Fichiers suspects

Aucun Fichier trouvé

Les fichiers et clés de registre supprimés ont été sauvegardés dans le fichier

03112007_19381448.zip

------------------------------------------------------------------------
Auteur : !aur3n7 Contact: https://www.ionos.fr/
------------------------------------------------------------------------

--------------------------------------------- END

---------------------------------------------

Spybot n'à rien trouvé,
Avast non plus,
et je suis en train de rescanner avec Antivir,
voilà, voilà...
merci pour vos conseils...
Configuration: Windows XP
Firefox 2.0.0.9

3 réponses

  1. merci,
    je crois que je l'ai éradiqué en suivant la marche à suivre!
    encore merci à tous le forum!
    1. bonjour

      suis cette procédure, d'autres ont été aidés !
      moi je ne suis pas un spécialiste de la désinfection !

      http://www.vista-xp.fr/forum/topic115.html
      1. voici le rapport du scan avec Antivir:

        AntiVir PersonalEdition Classic
        Report file date: samedi 3 novembre 2007 19:46

        Scanning for 913479 virus strains and unwanted programs.

        Licensed to: Avira AntiVir PersonalEdition Classic
        Serial number: 0000149996-ADJIE-0001
        Platform: Windows XP
        Windows version: (Service Pack 2) [5.1.2600]
        Username: SYSTEM
        Computer name: XPSP2-CD0986C18

        Version information:
        BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00
        AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 13:16:29
        AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 12:23:51
        LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 15:32:47
        LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 12:35:20
        ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 14:27:15
        ANTIVIR1.VDF : 7.0.0.0 1640448 Bytes 13/09/2007 14:26:55
        ANTIVIR2.VDF : 7.0.0.140 940544 Bytes 26/10/2007 10:52:51
        ANTIVIR3.VDF : 7.0.0.165 129536 Bytes 02/11/2007 20:55:23
        AVEWIN32.DLL : 7.6.0.30 3056128 Bytes 30/10/2007 10:52:51
        AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:26
        AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 07:39:17
        AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24
        AVPACK32.DLL : 7.3.0.15 360488 Bytes 03/08/2007 08:46:00
        AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 07:17:06
        AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 12:26:33
        AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 07:10:18
        NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:42
        RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 12:38:13
        RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 12:50:37
        SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 09:37:21

        Configuration settings for the scan:
        Jobname..........................: Complete system scan
        Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
        Logging..........................: low
        Primary action...................: interactive
        Secondary action.................: ignore
        Scan master boot sector..........: off
        Scan boot sector.................: on
        Boot sectors.....................: D:,
        Scan memory......................: on
        Process scan.....................: on
        Scan registry....................: on
        Search for rootkits..............: off
        Scan all files...................: Intelligent file selection
        Scan archives....................: on
        Recursion depth..................: 20
        Smart extensions.................: on
        Macro heuristic..................: on
        File heuristic...................: medium

        Start of the scan: samedi 3 novembre 2007 19:46

        The scan of running processes will be started
        Scan process 'avscan.exe' - '1' Module(s) have been scanned
        Scan process 'avcenter.exe' - '1' Module(s) have been scanned
        Scan process 'SpybotSD.exe' - '1' Module(s) have been scanned
        Scan process 'firefox.exe' - '1' Module(s) have been scanned
        Scan process 'notepad.exe' - '1' Module(s) have been scanned
        Scan process 'iPodService.exe' - '1' Module(s) have been scanned
        Scan process 'TeaTimer.exe' - '1' Module(s) have been scanned
        Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
        Scan process 'avgnt.exe' - '1' Module(s) have been scanned
        Scan process 'iTunesHelper.exe' - '1' Module(s) have been scanned
        Scan process 'atiptaxx.exe' - '1' Module(s) have been scanned
        Scan process 'alg.exe' - '1' Module(s) have been scanned
        Scan process 'svchost.exe' - '1' Module(s) have been scanned
        Scan process 'AppleMobileDeviceService.exe' - '1' Module(s) have been scanned
        Scan process 'sched.exe' - '1' Module(s) have been scanned
        Scan process 'avguard.exe' - '1' Module(s) have been scanned
        Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
        Scan process 'explorer.exe' - '1' Module(s) have been scanned
        Scan process 'svchost.exe' - '1' Module(s) have been scanned
        Scan process 'svchost.exe' - '1' Module(s) have been scanned
        Scan process 'svchost.exe' - '1' Module(s) have been scanned
        Scan process 'lsass.exe' - '1' Module(s) have been scanned
        Scan process 'services.exe' - '1' Module(s) have been scanned
        Scan process 'winlogon.exe' - '1' Module(s) have been scanned
        Scan process 'csrss.exe' - '1' Module(s) have been scanned
        Scan process 'smss.exe' - '1' Module(s) have been scanned
        26 processes with 26 modules were scanned

        Start scanning boot sectors:
        Boot sector 'C:\'
        [NOTE] No virus was found!
        Boot sector 'D:\'
        [NOTE] No virus was found!

        Starting to scan the registry.
        The registry was scanned ( '32' files ).

        Starting the file scan:

        Begin scan in 'C:\' <prog>
        C:\pagefile.sys
        [WARNING] The file could not be opened!
        C:\Documents and Settings\Admin\Bureau\MSNFix\MSNFix\29102007_21300556.zip
        [0] Archive type: ZIP
        --> backup/carlton
        [DETECTION] Is the Trojan horse TR/Dialer.VUY.4
        --> backup/k3d3t4t8n7l.exe
        [DETECTION] Is the Trojan horse TR/Dialer.VUY.4
        --> backup/LBTWiz.exe
        [DETECTION] Contains detection pattern of the worm WORM/SdBot.561152.2
        --> backup/Nokia_19_jpg.zip
        [1] Archive type: ZIP
        --> www.Nokia_19_jpg-msn.com
        [DETECTION] Contains detection pattern of the worm WORM/SdBot.561152.2
        [INFO] The file was moved to '475dc598.qua'!
        C:\Documents and Settings\Admin\Local Settings\Temporary Internet Files\Content.IE5\KRBV2O1D\dual[1].jpg
        [DETECTION] Is the Trojan horse TR/Dialer.VUY.4
        [INFO] The file was moved to '478dc9a0.qua'!
        Begin scan in 'D:\' <taf>

        End of the scan: samedi 3 novembre 2007 20:37
        Used time: 50:52 min

        The scan has been done completely.

        10227 Scanning directories
        291473 Files were scanned
        5 viruses and/or unwanted programs were found
        0 Files were classified as suspicious:
        0 files were deleted
        0 files were repaired
        2 files were moved to quarantine
        0 files were renamed
        1 Files cannot be scanned
        291468 Files not concerned
        2855 Archives were scanned
        1 Warnings
        1 Notes