Virus win32:adware-gen

tehaquent -  
Bonjour,
Cela fait quelques jours que mon ordi marchait au ralenti et en fait aprés avoir téléchargé avast j' ai trouvé un fichier infecté par win32:adware-gen.Cela me met un avertissement et je voudrais le mettre en quarantaine mais je ne peux pas.
Cela me dit que le serveur de la zone de quarantaine n' est pas actif.
Le fichier contaminé est c:\System Volume Information\_restore et autre chose derrière.Ne m ' y connaissant pas du tout que dois-je faire.
Merci beaucoup de vos aides.
Configuration: Windows XP
Internet Explorer 6.0

17 réponses

Résumé de la discussion

Le fil décrit un PC sous Windows XP qui ralentit après qu Avast a détecté win32:adware-gen et bloque la mise en quarantaine faute d'un serveur de zone de quarantaine actif. Le fichier infecté se situe dans c:\System Volume Information\_restore et une autre composante, ce qui complique l’isolement du fichier contaminé et suggère des risques liés à la restauration système. Plusieurs réponses privilégient la première option proposée comme solution la plus simple, tandis que d’autres évoquent l’analyse via HijackThis et des outils tiers pour nettoyer la configuration. Le message rassemble aussi un rapport HijackThis et des éléments de démarrage indésirables, indiquant une contamination potentiellement étendue nécessitant une désinfection plus approfondie et une révision des programmes au démarrage.

Bobot (l’IA à votre service)
  1. green day Modérateur
    Salut

    fais ce qui est indiqué ici stp :

    virus methode preliminaire de desinfection version fr

    ++
    2. tehaquent
      Voilà aprèe un peu de temps perdu j' ai essayé de faire ce qui m' avait été conseillé voilà le rapport du logiciel avg spyware si je ne me trompe pas.
      Les autr---------------------------------------------------------
      AVG Anti-Spyware - Rapport d'analyse
      ---------------------------------------------------------

      + Créé à: 20:50:08 08/05/2007

      + Résultat de l'analyse:

      C:\WINDOWS1\system32\dataclen.dll -> Adware.BetterInternet : Ignoré.
      HKU\S-1-5-21-448539723-616249376-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5929CD6E-2062-44A4-B2C5-2C7E78FBAB38} -> Adware.Generic : Ignoré.
      C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP678\A0406664.exe -> Adware.NewDotNet : Ignoré.
      C:\WINDOWS\Downloaded Program Files\CONFLICT.1\Install.dll -> Adware.SpywareStorm : Ignoré.
      C:\WINDOWS\Downloaded Program Files\Install.dll -> Adware.SpywareStorm : Ignoré.
      HKLM\SOFTWARE\Classes\CLSID\{2178F3FB-2560-458f-BDEE-631E2FE0DFE4} -> Adware.WinAntiVirus : Ignoré.
      C:\Documents and Settings\olivier1\Cookies\olivier1@247realmedia[1].txt -> TrackingCookie.247realmedia : Ignoré.
      C:\Documents and Settings\laetitia.OLIVIER\Cookies\laetitia@2o7[2].txt -> TrackingCookie.2o7 : Ignoré.
      C:\Documents and Settings\laetitia.OLIVIER\Cookies\laetitia@aolfr.122.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
      C:\Documents and Settings\olivier1\Cookies\olivier1@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
      :mozilla.79:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Advertising : Ignoré.
      :mozilla.80:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Advertising : Ignoré.
      :mozilla.84:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Advertising : Ignoré.
      :mozilla.85:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Advertising : Ignoré.
      :mozilla.86:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Advertising : Ignoré.
      C:\Documents and Settings\laetitia.OLIVIER\Cookies\laetitia@advertising[1].txt -> TrackingCookie.Advertising : Ignoré.
      :mozilla.50:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Atdmt : Ignoré.
      C:\Documents and Settings\laetitia.OLIVIER\Cookies\laetitia@atdmt[1].txt -> TrackingCookie.Atdmt : Ignoré.
      :mozilla.41:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Bluestreak : Ignoré.
      C:\Documents and Settings\laetitia.OLIVIER\Cookies\laetitia@bluestreak[1].txt -> TrackingCookie.Bluestreak : Ignoré.
      C:\Documents and Settings\olivier1\Cookies\olivier1@bluestreak[2].txt -> TrackingCookie.Bluestreak : Ignoré.
      C:\Documents and Settings\olivier1\Cookies\olivier1@fl01.ct2.comclick[1].txt -> TrackingCookie.Comclick : Ignoré.
      :mozilla.38:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Doubleclick : Ignoré.
      C:\Documents and Settings\laetitia.OLIVIER\Cookies\laetitia@doubleclick[1].txt -> TrackingCookie.Doubleclick : Ignoré.
      C:\Documents and Settings\olivier1\Cookies\olivier1@doubleclick[1].txt -> TrackingCookie.Doubleclick : Ignoré.
      :mozilla.23:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Estat : Ignoré.
      C:\Documents and Settings\laetitia.OLIVIER\Cookies\laetitia@estat[1].txt -> TrackingCookie.Estat : Ignoré.
      C:\Documents and Settings\olivier1\Cookies\olivier1@estat[1].txt -> TrackingCookie.Estat : Ignoré.
      C:\Documents and Settings\teha\Cookies\teha@estat[1].txt -> TrackingCookie.Estat : Ignoré.
      :mozilla.20:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Falkag : Ignoré.
      :mozilla.21:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Falkag : Ignoré.
      :mozilla.22:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Falkag : Ignoré.
      :mozilla.70:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Falkag : Ignoré.
      :mozilla.71:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Falkag : Ignoré.
      :mozilla.72:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Falkag : Ignoré.
      :mozilla.7:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Falkag : Ignoré.
      :mozilla.94:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Falkag : Ignoré.
      C:\Documents and Settings\laetitia.OLIVIER\Cookies\laetitia@as1.falkag[2].txt -> TrackingCookie.Falkag : Ignoré.
      :mozilla.48:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Googleadservices : Ignoré.
      :mozilla.51:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Googleadservices : Ignoré.
      :mozilla.57:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Googleadservices : Ignoré.
      :mozilla.60:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Googleadservices : Ignoré.
      :mozilla.37:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Mediaplex : Ignoré.
      C:\Documents and Settings\quentin.OLIVIER\Cookies\quentin@banner.newyorkcasino[1].txt -> TrackingCookie.Newyorkcasino : Ignoré.
      C:\Documents and Settings\olivier1\Cookies\olivier1@overture[1].txt -> TrackingCookie.Overture : Ignoré.
      C:\Documents and Settings\olivier1\Cookies\olivier1@stats1.reliablestats[1].txt -> TrackingCookie.Reliablestats : Ignoré.
      C:\Documents and Settings\laetitia.OLIVIER\Cookies\laetitia@serving-sys[2].txt -> TrackingCookie.Serving-sys : Ignoré.
      C:\Documents and Settings\olivier1\Cookies\olivier1@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Ignoré.
      C:\Documents and Settings\olivier1\Cookies\olivier1@serving-sys[1].txt -> TrackingCookie.Serving-sys : Ignoré.
      :mozilla.32:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Smartadserver : Ignoré.
      :mozilla.33:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Smartadserver : Ignoré.
      :mozilla.34:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Smartadserver : Ignoré.
      C:\Documents and Settings\laetitia.OLIVIER\Cookies\laetitia@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Ignoré.
      C:\Documents and Settings\olivier1\Cookies\olivier1@smartadserver[1].txt -> TrackingCookie.Smartadserver : Ignoré.
      C:\Documents and Settings\olivier1\Cookies\olivier1@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Ignoré.
      C:\Documents and Settings\olivier1\Cookies\olivier1@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Ignoré.
      C:\Documents and Settings\olivier1\Cookies\olivier1@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Ignoré.
      :mozilla.39:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Valueclick : Ignoré.
      :mozilla.40:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Valueclick : Ignoré.
      :mozilla.67:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Weborama : Ignoré.
      :mozilla.68:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Weborama : Ignoré.
      :mozilla.69:C:\Documents and Settings\olivier\Application Data\Mozilla\Firefox\Profiles\53fd29jy.default\cookies.txt -> TrackingCookie.Weborama : Ignoré.
      C:\Documents and Settings\olivier1\Cookies\olivier1@weborama[1].txt -> TrackingCookie.Weborama : Ignoré.
      C:\Documents and Settings\olivier1\Cookies\olivier1@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Ignoré.
      C:\Documents and Settings\olivier1\Cookies\olivier1@zedo[1].txt -> TrackingCookie.Zedo : Ignoré.

      Fin du rapport

      es sont en cours.
      1. tehaquent Auteur
        Voici le rapport d hijacktis.
        Logfile of HijackThis v1.99.1
        Scan saved at 21:30:27, on 08/05/2007
        Platform: Windows XP SP2 (WinNT 5.01.2600)
        MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
        C:\Program Files\Alwil Software\Avast4\ashServ.exe
        C:\WINDOWS\system32\spoolsv.exe
        c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
        C:\WINDOWS\System32\drivers\CDAC11BA.EXE
        C:\WINDOWS\System32\cisvc.exe
        C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
        C:\WINDOWS\system32\nvsvc32.exe
        C:\Program Files\SiteAdvisor\6066\SAService.exe
        C:\WINDOWS\System32\PAStiSvc.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
        C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
        C:\WINDOWS\Explorer.EXE
        C:\WINDOWS\system32\wscntfy.exe
        C:\WINDOWS\SOUNDMAN.EXE
        C:\Program Files\MessengerPlus! 3\MsgPlus.exe
        C:\WINDOWS\system32\RUNDLL32.EXE
        C:\Program Files\SiteAdvisor\6066\SiteAdv.exe
        C:\Program Files\Fichiers communs\LogiShrd\LComMgr\LVComSX.exe
        C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
        C:\Program Files\Logitech\QuickCam10\QuickCam10.exe
        C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
        C:\Program Files\DriveCleaner Free\UDC6cw.exe
        C:\Program Files\Fichiers communs\DriveCleaner Free\udcsdr.exe
        C:\Program Files\Fichiers communs\DriveCleaner Free\udcwap.exe
        C:\Program Files\MSN Messenger\msnmsgr.exe
        C:\Program Files\Messenger\msmsgs.exe
        C:\Program Files\MessengerSkinner\MessengerSkinner.exe
        C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
        C:\Program Files\RALINK\RT2500 Wireless LAN Card\Installer\WINXP\RaConfig2500.exe
        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\Club-Internet\Lanceur\lanceur.exe
        C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
        C:\WINDOWS\system32\svchost.exe
        C:\Program Files\Internet Explorer\iexplore.exe
        C:\WINDOWS\system32\cidaemon.exe
        C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
        C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
        C:\Program Files\Internet Explorer\iexplore.exe
        C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=D4322FEE7CF74A348CB9CE970F098EF5
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://actus.sfr.fr
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet
        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=proxy.club-internet.fr:8080
        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
        O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
        O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - (no file)
        O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
        O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
        O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
        O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
        O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
        O3 - Toolbar: (no name) - {014DA6C9-189F-421a-88CD-07CFE51CFF10} - (no file)
        O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
        O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
        O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
        O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
        O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
        O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
        O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
        O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
        O4 - HKLM\..\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor\6066\SiteAdv.exe
        O4 - HKLM\..\Run: [LVCOMSX] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\LVComSX.exe"
        O4 - HKLM\..\Run: [LogitechRegisterVideoApplications] "C:\Program Files\Logitech\Video\InstallHelper.exe" /register /runnow
        O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
        O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide
        O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
        O4 - HKLM\..\Run: [DriveCleaner Free] "C:\Program Files\DriveCleaner Free\UDC.exe" /min
        O4 - HKLM\..\Run: [UDC6cw] "C:\Program Files\DriveCleaner Free\UDC6cw.exe" -c
        O4 - HKLM\..\Run: [SDR6V_Check] "C:\Program Files\Fichiers communs\DriveCleaner Free\udcsdr.exe"
        O4 - HKLM\..\Run: [WA6PV_Check] "C:\Program Files\Fichiers communs\DriveCleaner Free\udcwap.exe"
        O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
        O4 - HKCU\..\Run: [Steam] "c:\progra~1\steam\steam.exe" -silent
        O4 - HKCU\..\Run: [SOProc_RegSoAlertWxSzNn] rundll32 shell32.dll,ShellExec_RunDLL C:\Program Files\SoftwareOnline\soproc.exe -pack RegSoAlertWxSzNn
        O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
        O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
        O4 - HKCU\..\Run: [messengerskinner] C:\Program Files\MessengerSkinner\MessengerSkinner.exe
        O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
        O4 - Startup: Club Internet.lnk = C:\Program Files\Club-Internet\Lanceur\lanceur.exe
        O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV02.EXE
        O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
        O4 - Global Startup: RaConfig2500.lnk = C:\Program Files\RALINK\RT2500 Wireless LAN Card\Installer\WINXP\RaConfig2500.exe
        O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
        O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
        O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
        O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O16 - DPF: fdjeux - https://www.fdjeux.net/classes/fdjeux.cab
        O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
        O16 - DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM ActiveX Control) - http://minitelweb.minitel.com/imin_data/ocx/MDM.cab
        O16 - DPF: {09F1ADAC-76D8-4D0F-99A5-5C907DADB988} - https://www.afternic.com/domains/drivecleaner.com
        O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
        O16 - DPF: {205FF73B-CA67-11D5-99DD-444553540013} - http://adserver.sharewareonline.com/adserver/Install.cab
        O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
        O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
        O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase8300.cab
        O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
        O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
        O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP.cab
        O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
        O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
        O18 - Protocol: bw+0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw+0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw-0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw-0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw00 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw00s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw10 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw10s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw20 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw20s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw30 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw30s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw40 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw40s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw50 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw50s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw60 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw60s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw70 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw70s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw80 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw80s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw90 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw90s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwa0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwa0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwb0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwb0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwc0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwc0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwd0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwd0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwe0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwe0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwf0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwf0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
        O18 - Protocol: bwg0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwg0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwh0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwh0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwi0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwi0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwj0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwj0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwk0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwk0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwl0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwl0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwm0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwm0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwn0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwn0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwo0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwo0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwp0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwp0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwq0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwq0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwr0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwr0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bws0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bws0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwt0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwt0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwu0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwu0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwv0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwv0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bww0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bww0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwx0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwx0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwy0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwy0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwz0 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwz0s - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
        O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
        O18 - Protocol: offline-8876480 - {AC9CAE02-B426-431C-ABD4-8228CABEC774} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
        O20 - AppInit_DLLs: MsgPlusLoader.dll
        O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
        O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
        O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
        O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
        O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
        O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
        O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
        O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
        O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
        O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
        O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
        O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
        O23 - Service: SC Test Branding Service 1 - SC Test Branding 1 - C:\Program Files\Fichiers communs\SC Test Branding 1 Shared\Service\SCTestService1.exe
        O23 - Service: SiteAdvisor Service - McAfee, Inc. - C:\Program Files\SiteAdvisor\6066\SAService.exe
        O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe
        2. tehaquent Auteur
          et voilà le rapport suite bitdefender:
             
          Scanned File
           Status
          C:\Documents and Settings\olivier1\Menu Démarrer\Programmes\MessengerSkinner\MessengerSkinner.lnk=>C:\Program Files\MessengerSkinner\MessengerSkinner.exe
          Infected with: Backdoor.Skinymes.Agent.A
          C:\Documents and Settings\olivier1\Menu Démarrer\Programmes\MessengerSkinner\MessengerSkinner.lnk=>C:\Program Files\MessengerSkinner\MessengerSkinner.exe
          Disinfection failed
          C:\Documents and Settings\olivier1\Menu Démarrer\Programmes\MessengerSkinner\MessengerSkinner.lnk=>C:\Program Files\MessengerSkinner\MessengerSkinner.exe
          Deleted
          C:\Documents and Settings\olivier1\Menu Démarrer\Programmes\MessengerSkinner\MessengerSkinner.lnk
          Updated
          C:\Documents and Settings\olivier1\Mes documents\messengerskinner.exe=>(NSIS 2o)=>lzma_solid_nsis0009
          Infected with: Backdoor.Skinymes.Agent.A
          C:\Documents and Settings\olivier1\Mes documents\messengerskinner.exe=>(NSIS 2o)=>lzma_solid_nsis0009
          Disinfection failed
          C:\Documents and Settings\olivier1\Mes documents\messengerskinner.exe=>(NSIS 2o)=>lzma_solid_nsis0009
          Deleted
          C:\Documents and Settings\olivier1\Mes documents\messengerskinner.exe=>(NSIS 2o)
          Update failed
          C:\Program Files\DriveCleaner Free\InstHelp.exe
          Infected with: Trojan.Fakealert.DU
          C:\Program Files\DriveCleaner Free\InstHelp.exe
          Disinfection failed
          C:\Program Files\DriveCleaner Free\InstHelp.exe
          Deleted
          C:\Program Files\DriveCleaner Free\UDC6cw.exe
          Infected with: Trojan.Fakealert.FB
          C:\Program Files\DriveCleaner Free\UDC6cw.exe
          Disinfection failed
          C:\Program Files\DriveCleaner Free\UDC6cw.exe
          Delete failed
          C:\Program Files\Fichiers communs\DriveCleaner Free\udcsdr.exe
          Infected with: Trojan.Downloader.Winfixer.E
          C:\Program Files\Fichiers communs\DriveCleaner Free\udcsdr.exe
          Disinfection failed
          C:\Program Files\Fichiers communs\DriveCleaner Free\udcsdr.exe
          Delete failed
          C:\Program Files\Fichiers communs\DriveCleaner Free\udcwap.exe
          Infected with: Trojan.Downloader.Winfixer.E
          C:\Program Files\Fichiers communs\DriveCleaner Free\udcwap.exe
          Disinfection failed
          C:\Program Files\Fichiers communs\DriveCleaner Free\udcwap.exe
          Delete failed
          C:\Program Files\MessengerSkinner\MessengerSkinner.exe
          Infected with: Backdoor.Skinymes.Agent.A
          C:\Program Files\MessengerSkinner\MessengerSkinner.exe
          Disinfection failed
          C:\Program Files\MessengerSkinner\MessengerSkinner.exe
          Delete failed
          C:\Program Files\The All-Seeing Eye\movenrun.exe
          Infected with: Trojan.Zapchast.H
          C:\Program Files\The All-Seeing Eye\movenrun.exe
          Disinfection failed
          C:\Program Files\The All-Seeing Eye\movenrun.exe
          Deleted
          C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP678\A0406663.exe
          Detected with: Application.VTesttool.C
          C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP678\A0406663.exe
          Deleted
          C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP678\A0406669.exe=>(Embedded EXE o)=>wise0013
          Detected with: Adware.MyWebSearch.AE
          C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP678\A0406669.exe=>(Embedded EXE o)=>wise0013
          Disinfection failed
          C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP678\A0406669.exe=>(Embedded EXE o)=>wise0013
          Deleted
          C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP678\A0406669.exe=>(Embedded EXE o)
          Update failed
          C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP685\A0408459.exe
          Infected with: Trojan.Fakealert.FB
          C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP685\A0408459.exe
          Disinfection failed
          C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP685\A0408459.exe
          Deleted
          C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP685\A0408460.exe
          Infected with: Trojan.Fakealert.DU
          C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP685\A0408460.exe
          Disinfection failed
          C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP685\A0408460.exe
          Deleted
          C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP686\A0408536.exe
          Infected with: Trojan.Fakealert.DU
          C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP686\A0408536.exe
          Disinfection failed
          C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP686\A0408536.exe
          Deleted
          C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP686\A0408537.exe
          Infected with: Trojan.Zapchast.H
          C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP686\A0408537.exe
          Disinfection failed
          C:\System Volume Information\_restore{E3286D79-EC5C-4C78-81DE-12384AD238DA}\RP686\A0408537.exe
          Deleted
          C:\WINDOWS\system32\cmesys.exe
          Detected with: Application.VTesttool.A
          C:\WINDOWS\system32\cmesys.exe
          Deleted

           
          1. tehaquent Auteur
            Voilà je crois que j 'ai tout fait mais pour moi c 'est du charabia.
            Que dois -je faire après.Merci
            1. green day Modérateur
              Salut

              as tu supprimé tout ce qu'avg a trouvé ???

              où en sont tes soucis ???

              ++
              1. tehaquent Auteur
                non je n ai rien fait encore car je ne m' y connais pas du tout.Je peux tout supprimer?
              2. rudyrital
                supprime tout ce qu'AVG a detecté
              3.  rudyrital
                ensuite

                Prends connaissance du contenu le lien suivant:
                http://www.f-secure.com/products/license-terms/eult_fra.pdf
                Tu as donc pris connaissance et accepté les conditions d'utilisations du programme blacklight qui est inclus dans le dossier compressé navilog1.zip que tu vas télécharger.
                Maintenant fais un clic droit sur ce lien :
                http://perso.orange.fr/il.mafioso/Navifix/navilog1.zip
                Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
                Fais un clic droit sur navilog1.zip et choisis "tout extraire"
                Ensuite double clique sur navilog1.bat
                Laisses-toi guider. Au menu principal, choisis 1 et valides.
                (ne fais pas le choix 2 sans notre avis/accord)
                Patientes jusqu'au message :
                *** Analyse Termine le ..... ***
                Appuies sur une touche comme demandé, le blocnote va s'ouvrir.
                Copies-colles l'intégralité dans une réponse. Refermes le blocnote.
                Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)
              4. green day Modérateur
                Je te laisse le poste ??? :-)
            2.  green day Modérateur
              Voici le tuto en image :

              http://www.kachouri.com/tuto/tuto-161-avg-anti-spyware-75-pour-votre-securite.html

              ++
              1. green day Modérateur
                Fais ce qui est demander au poste 10, pour voir stp !

                ++
                1. tehaquent Auteur
                  Ok je relanec une analyse .Est ce qu' aprés c 'est tout et je suis débarassée ou alors non il faut que je fasse autre chose?
                  2. tehaquent Auteur
                    Il propose extraire vers un dossier spécifié ou alors extraire vers autre chose mais pas tout extraire je prends quoi?
                    2. tehaquent Auteur
                      Désolée mais je me perds! Il faut que je désarchive navilog1.zip et que je le recrée dans un fichier ou pas du tout car je vois bien le fichier navilog1.bat mais apres je n' ai pas la proposition 1 .
                      Me suis -je trompée (cela m' étonnerait guère)!
                      1. tehaquent Auteur
                        Pour ce soir je coupe je reprends mes investigations demain.
                        Merci pour tout et surtout pardonnez mon ignorance.
                        1. tehaquent Auteur
                          bonsoir,
                          toujours pour dire que je suis toujours infestée par ce maudit virus et il apparait sous le nom de drivecleaner.
                          Moi qui croyait que cela etait un antivirus je me suis plantée apparemment.
                          Je vais surement pensé au formatage je ne vois plus que ca mais je ne sais pas encore comment on fait.
                          Merci à tous

                          Discussions similaires

                          Problème avec "PUADIManager:Win32/OfferCore
                          Knaki

                          3 réponses
                          Softonic,est-ce un virus ?
                          techmel1

                          6 réponses
                          Chrome://newtab
                          Nova

                          14 réponses
                          Désinstaller Softonic
                          Diguimette

                          5 réponses
                          PUADlManager:Win32/OfferCore
                          tenmalade

                          2 réponses