Trojan.Win32.Obfuscated.gx

Bonjour!!!
J'ai vraiment besoin de votre aide et j'espère que je l'aurai aujourd'hui.
Ce sujet est déjà passé sur ce site ,mais je n'ai pas du tout compris comment il faut poursuivre pour supprimer le virus comme celui-ci: Trojan.Win32.Obfuscated.gx...
Il est toujours présent dans mon système.J'ai déjà essayé plein de logiciels et ça ne marche toujours pas.Donc je demande à ceux qui pourriont m'aider à resoudre ce problème.Je ne dors pas depuis hier juste à cause de ce virus.Aidez-moi s'il vous plaît!
Merci d'avance....

Edit modo : veuillez ne plus remodifier suite à une intervention de modération !!!

merci de ne pas utiliser abusivement les Fonts en gras

Télécharge HijackThis

Tuto réalisé par Bruce Lee : http://cybersecurite.xooit.com/t138-HijackThis-2-0-2.htm

Clique alors sur "Do a system scan and save a logfile"
Le scan se fait très rapidement, puis un bloc-note apparaît
(le "logfile")
Dans ce bloc-note, va dans "Edition", puis "Selectionner Tout",
le texte est alors séléctionné, retourne dans "Edition" toujours
en laissant le texte séléctionné, et clique sur copier.
Colle le contenu ici dans ta prochaine réponse

Bojour,déjà je vous dit merci!
Voici le rapport que j'ai eu:


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:52:52, on 16/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Apps\Powercinema\PCMService.exe
C:\apps\ABoard\ABoard.exe
C:\APPS\OD2\OD2DLEngine.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\APPS\OD2\OD2State.exe
C:\apps\ABoard\AOSD.exe
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\ICQ6\ICQ.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://google.icq.com/search/search_frame.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://google.icq.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.01net.com/telecharger/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {83821C2B-32A8-4DD7-B6D4-44309A78E668} - C:\Documents and Settings\yulia\Application Data\Mra\Update\mrasearch.dll (file missing)
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: IE plugin - {17A1DBB5-DAD8-4E78-BF7E-9BE4B965408B} - C:\WINDOWS\pmspl.dll
O2 - BHO: ConnectionServices Class - {6D7B211A-88EA-490c-BAB9-3600D8D7C503} - C:\Program Files\ConnectionServices\ConnectionServices.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: CNisExtBho Class - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [DOWNLOAD MANAGER] C:\APPS\OD2\OD2DLEngine.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [MAgent] C:\Program Files\Mail.Ru\Agent\magent.exe -LM
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [WINSOS VERIFY] "C:\Program Files\WINSOS\WINSOS.EXE" MINI
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: VP-EYE.lnk = C:\VP-EYE\control\vpeyev1.exe
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: AMV convert tool grab multimedia file - grab.html
O8 - Extra context menu item: Download all links using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Download link using &BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: MediaManager tool grab multimedia file - grab.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\npjpi150_10.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\npjpi150_10.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Mail.Ru ????? - {7558B7E5-7B26-4201-BEDB-00D5FF534523} - C:\Program Files\Mail.Ru\Agent\magent.exe
O9 - Extra 'Tools' menuitem: Mail.Ru ????? - {7558B7E5-7B26-4201-BEDB-00D5FF534523} - C:\Program Files\Mail.Ru\Agent\magent.exe
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O15 - Trusted Zone: *.od2.com
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {09CC593B-E8A9-4491-927D-A3E33534DDD4} (InstallerObj Class) - http://www.1-click.com/common/files/installer2.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {1754A1BA-A1DF-4F10-B199-AA55AA1A120F} (InstallerBehaviorFactory Class) - https://signup.msn.com/pages/MsnInstC.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://my.foto.mail.ru/ImageUploader4.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.(...)
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://195.5.16.158/activex/AxisCamControl.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab47946.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://register3.valueactive.com/574/webolr/OCX/FlashAX.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: MysqlInventime - Unknown owner - c:\mysql\bin\mysqld-nt.exe
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe

--
End of file - 17054 bytes

Telecharge AVGanti-spy

Avant tout: Mise à jour ( via l'onglet & connexion internet): si la maj ne fonctionne pas fais le scan qd meme

puis lance un scan complet

à la fin du scan , supprime les objets trouvés selon ceci

post le rapport AVG

AIDE : http://mickael.barroux.free.fr/securite/avg_as.php

Je n'ai pas compris de quelle maj vous parlez et est-ce que je devrais redemarrer mon ordi en mode sans echec? Parce que dans l'aide donné ils le conseillent...
SVP,je suis trop pas bien dans l'informatique donc pourriez-vous être plus précis?
Merci...

Bon,là déjà je suis en train de faire l'analyse complet et après je vous envois e rapport,c'est ça?

oui mais le rapport aprés suppression des éléments trouvés

L'analyse n'est tjrs pas terminé,ça prend trop de temps chez moi,je ne sais pas pourquoi.Il a déjà détécté 67 infections dont il n'y a tjrs pas de Trojan... :-(

Au fait,j'ai également téléchargé spyware doctor encore la nuit,quand j'étais complétement perdue et c'est lui qui m'affiche à chaque conneaxion à l'internet le message où il dit que Trojan était bloqué.Donc si je supprime maintenant ce logiciel j'aurai de nouveau le message dans une fenêtre qui va apparaître et qui est très génant :(((( Bon.je dis tout cela juste pour que vous ayez plus d'information et même ça ne vous sert à rien,je suis quand même tranquile que je l'ai dit :))

J'ai un souci,au lieu de supprimer ils me proposent de l'ignorer,,,c'est de ma faute,j'ai pas mis au tout début dans les paramètre "supprimer" ,que dois-je donc faire?

Enfin,voici le rapport de AVG:



---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 11:41:39 16/12/2007

+ Résultat de l'analyse:



HKLM\SOFTWARE\Classes\CLSID\{4E7BD74F-2B8D-469E-A0E8-ED6AB685FA7D} -> Adware.2020Search : Nettoyé.
HKU\S-1-5-21-291744901-1050214551-598504246-1008\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{4E7BD74F-2B8D-469E-A0E8-ED6AB685FA7D} -> Adware.2020Search : Nettoyé.
HKU\S-1-5-21-291744901-1050214551-598504246-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4E7BD74F-2B8D-469E-A0E8-ED6AB685FA7D} -> Adware.2020Search : Nettoyé.
C:\WINDOWS\Downloaded Program Files\installer2.dll -> Adware.ClickMedia : Nettoyé.
C:\Documents and Settings\yulia\Local Settings\Temporary Internet Files\Content.IE5\W3D87XMF\song[1].htm -> Downloader.Iframe.u : Nettoyé.
C:\Documents and Settings\yulia\Local Settings\Temp\Temporary Internet Files\Content.IE5\VY47B5K1\scatal[1].swf -> Hijacker.Small.c : Nettoyé.
C:\Program Files\ConnectionServices\ConnectionServices.dll -> Not-A-Virus.Adware.BHO : Nettoyé et sauvegardé (mise en quarantaine).
[3848] C:\Program Files\ConnectionServices\ConnectionServices.dll -> Not-A-Virus.Adware.BHO : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\yulia\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-7e09d0a6-4694a6b2.zip/NewSecurityClassLoader.class -> Not-A-Virus.Exploit.ByteVerify : Nettoyé.
C:\Documents and Settings\yulia\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-7e09d0a6-4694a6b2.zip/NewURLClassLoader.class -> Not-A-Virus.Exploit.ByteVerify : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@4.adbrite[2].txt -> TrackingCookie.Adbrite : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@adbrite[1].txt -> TrackingCookie.Adbrite : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@ads.adbrite[1].txt -> TrackingCookie.Adbrite : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@axa.addcontrol[1].txt -> TrackingCookie.Addcontrol : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@www.adobe[2].txt -> TrackingCookie.Adobe : Nettoyé.
C:\Documents and Settings\yulia\Local Settings\Temp\Cookies\yulia@adtech[2].txt -> TrackingCookie.Adtech : Nettoyé.
C:\Documents and Settings\yulia\Local Settings\Temp\Cookies\yulia@advertising[2].txt -> TrackingCookie.Advertising : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@ad.agava.tbn[1].txt -> TrackingCookie.Agava : Nettoyé.
C:\Documents and Settings\yulia\Local Settings\Temp\Cookies\yulia@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@www.belstat[1].txt -> TrackingCookie.Belstat : Nettoyé.
C:\Documents and Settings\yulia\Local Settings\Temp\Cookies\yulia@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@promo.casinotropez[1].txt -> TrackingCookie.Casinotropez : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@www.casinotropez[2].txt -> TrackingCookie.Casinotropez : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@clickbank[1].txt -> TrackingCookie.Clickbank : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@ad1.clickhype[1].txt -> TrackingCookie.Clickhype : Nettoyé.
C:\Documents and Settings\yulia\Local Settings\Temp\Cookies\yulia@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@e-2dj6wfliqhazsbo.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Nettoyé.
C:\Documents and Settings\yulia\Local Settings\Temp\Cookies\yulia@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@www.etracker[1].txt -> TrackingCookie.Etracker : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@adopt.euroclick[1].txt -> TrackingCookie.Euroclick : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@findwhat[1].txt -> TrackingCookie.Findwhat : Nettoyé.
C:\Documents and Settings\yulia\Local Settings\Temp\Cookies\yulia@hotlog[1].txt -> TrackingCookie.Hotlog : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@info[1].txt -> TrackingCookie.Info : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@web.info[1].txt -> TrackingCookie.Info : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@searchportal.information[2].txt -> TrackingCookie.Information : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@intelli-direct[1].txt -> TrackingCookie.Intelli-direct : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@ivwbox[2].txt -> TrackingCookie.Ivwbox : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@komtrack[2].txt -> TrackingCookie.Komtrack : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@search.msn[3].txt -> TrackingCookie.Msn : Nettoyé.
C:\Documents and Settings\yulia\Local Settings\Temp\Cookies\yulia@search.msn[3].txt -> TrackingCookie.Msn : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@ssl-hints.netflame[2].txt -> TrackingCookie.Netflame : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@ads.planetactive[1].txt -> TrackingCookie.Planetactive : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@ppms.popularix[1].txt -> TrackingCookie.Popularix : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@messagesignup.real[1].txt -> TrackingCookie.Real : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@real[3].txt -> TrackingCookie.Real : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@realguide-fr.real[1].txt -> TrackingCookie.Real : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@realguide.real[2].txt -> TrackingCookie.Real : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@revsci[1].txt -> TrackingCookie.Revsci : Nettoyé.
C:\Documents and Settings\yulia\Local Settings\Temp\Cookies\yulia@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\yulia\Local Settings\Temp\Cookies\yulia@serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@secure.skype[1].txt -> TrackingCookie.Skype : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@site.skype[2].txt -> TrackingCookie.Skype : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@skype[2].txt -> TrackingCookie.Skype : Nettoyé.
C:\WINDOWS\system32\config\systemprofile\Cookies\system@skype[2].txt -> TrackingCookie.Skype : Nettoyé.
C:\Documents and Settings\yulia\Local Settings\Temp\Cookies\yulia@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\yulia\Local Settings\Temp\Cookies\yulia@spylog[2].txt -> TrackingCookie.Spylog : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@tacoda[1].txt -> TrackingCookie.Tacoda : Nettoyé.
C:\Documents and Settings\yulia\Local Settings\Temp\Cookies\yulia@tacoda[1].txt -> TrackingCookie.Tacoda : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@ad.text.tbn[2].txt -> TrackingCookie.Texttbnru : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@ad.text.tbn[3].txt -> TrackingCookie.Texttbnru : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@ad.text.tbn[4].txt -> TrackingCookie.Texttbnru : Nettoyé.
C:\Documents and Settings\yulia\Local Settings\Temp\Cookies\yulia@ad.text.tbn[2].txt -> TrackingCookie.Texttbnru : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@sales.tfag[1].txt -> TrackingCookie.Tfag : Nettoyé.
C:\Documents and Settings\yulia\Local Settings\Temp\Cookies\yulia@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@webstat[2].txt -> TrackingCookie.Web-stat : Nettoyé.
C:\Documents and Settings\yulia\Cookies\yulia@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\yulia\Local Settings\Temp\Cookies\yulia@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\yulia\Local Settings\Temp\Cookies\yulia@statse.webtrendslive[1].txt -> TrackingCookie.Webtrendslive : Nettoyé.
C:\Documents and Settings\yulia\Local Settings\Temp\Cookies\yulia@yadro[1].txt -> TrackingCookie.Yadro : Nettoyé.
C:\Documents and Settings\yulia\Local Settings\Temp\msnmsgs.exe -> Worm.Agent.ac : Nettoyé.


Fin du rapport

Ce que j'arrive pas à comprendre c'est que cet analyse n'a pas trouvé Trojan........quoi faiiiireeee...................snifffffffff

...on va etre fixé

fais ceci

scan panda en ligne

préalablement , desactive antivirus actuel

Une fois sur le site Panda
décoche la case "me tenir au courant des dernières nouvelles ..." avant de lancer le scan, pour ne pas reçevoir de mails de leur part.
accepte de renseigner les champs, effectue le scan , poste le rapport de scan dans prochain message

details Panda use:
"Analyser votre pc" -> "suivant" -> remplir adresse mail -> Pays/Etat-région -> envoyer -> laisser se dérouler le téléchargement du contrôle ActiveX -> sélectionner "Poste de Travail" -> fermer la popup

Je ne vois aucune case avec cette phrase...j'ai essayé de lancer l'analyse et il ne me demandait pas d'écrire mon adresse mail etc... :((((((((((((((( et le message de Trojan s'affiche tjrs là,,,nooooonnnn :(((

je crois qued je vais mourir là maintenant............j'essaye de supprimer ce virus dépuis 10 heurs ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,

c'est bon,c'est parti l'analyse...j'ai enfin trouvé...

non,,,,j'ai pas arrivé à faire l'analyse,,,enfin à avoir le rapport,,,le message qui s'affiche tout le temps ne m'a pas laissé le faire,,,,,,,,,,,,,,,,,,,,,!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

j'ai aussi trouvé qch,,,j'ai un problème avec IE plugin BHO

Desactive Avast

ensuite seulement fais le scan

reste zen

mais il est désactivé!!!!!!!!! :(((( j'ai fini de scanner et après j'ai pas de rapport...........

Croyez-vous qu'on va y arriver? :((( Je comprends plus rien,,,,,,,,,,,,,,

c'est en train d'analyser "poste de travail"..............

Ok

alors voilà ce que l'on va faire

a. Tu vas virer Avast

Desinstallation de Avast

b. Tu vas installer Antivir ( gratuit aussi et nettement mieux)

http://www.malekal.com//tutorial_antivir_security_suite.php

c. Tu fais un scan complet avec avira , tu recupere le resultat de scan et tu me le post

...cela ira bien mieux ensuite tu verra

il y a déjà marqué que mon ordi est infecté..........un logiciel espion,,,,,,à la fin de l'analyse je devrai cliquer sur désinfecter?

oui

termine le scan Panda , recupère le rapport ou bien note ce qu'il te donne

ensuite tu me post les éléments puis tu fais ce que je t'ai dis pour migrer de avast--> Antivir

Avira AntiVir PersonalEdition Classic 7.06.00.268

je télécharge ceci,c'est bon?

looool...........

alors,ça ira,ce que je télécharge?

bon,,,,d'abord je termine avec Panda,j'ai déjà 1 virus et 14 logiciel espions,,,

ah,,,c'est trop long avec Panda,mais j'espère que c'est au moins efficace.........vous ne me quitterez pas???

là,vous vous demandez "Oh non.pourquoi je lui ai écrit?" :))))


noooooooon,l'analyse s'est arrêté et toutes les fenêtres se sont fermées :s:s
donc il faut recommencer et le message apparaît plus souvent :(((

STOP STOP STOP STOP

veuillez arrèter de poster messages sur messages !!!

il y a une fonction "éditer" pour complèter vos commentaires en un seul message

Yuliaha

calme toi. Merci

Fais exactement ce que je t'ai demandé à savoir
desinstaller AVAST
Installer Avira
Faire un scan et le poster

inutile d'envoyer des Posts inutiles

à +

Donc,d'après Panda c'est tout ce que j'ai peu avoir car l'analyse s'arrête tout le temps au moment précis et ne marche plus:


Incident Statut Analyse

Spyware:spyware/searchcentrix No Désinfecté Registre Windows
Spyware:Cookie/Toplist No Désinfecté C:\Documents and Settings\yulia\Application Data\Mozilla\Firefox\Profiles\y97twncq.default\cookies.txt[.toplist.cz/]
Spyware:Cookie/888 No Désinfecté C:\Documents and Settings\yulia\Cookies\yulia@888[2].txt
Spyware:Cookie/BannerBank No Désinfecté C:\Documents and Settings\yulia\Cookies\yulia@ad10.bannerbank[1].txt
Spyware:Cookie/Adserver No Désinfecté C:\Documents and Settings\yulia\Cookies\yulia@adserver.easyad[2].txt
Spyware:Cookie/Apmebf No Désinfecté C:\Documents and Settings\yulia\Cookies\yulia@apmebf[2].txt
Spyware:Cookie/Atlas DMT No Désinfecté C:\Documents and Settings\yulia\Cookies\yulia@atdmt[1].txt
Spyware:Cookie/Serving-sys No Désinfecté C:\Documents and Settings\yulia\Cookies\yulia@bs.serving-sys[2].txt
Spyware:Cookie/Com.com No Désinfecté C:\Documents and Settings\yulia\Cookies\yulia@com[1].txt
Spyware:Cookie/Doubleclick No Désinfecté C:\Documents and Settings\yulia\Cookies\yulia@doubleclick[1].txt
Spyware:Cookie/fe.lea.lycos No Désinfecté C:\Documents and Settings\yulia\Cookies\yulia@fe.lea.lycos[2].txt
Spyware:Cookie/Adrevolver No Désinfecté C:\Documents and Settings\yulia\Cookies\yulia@mbe[1].txt
Spyware:Cookie/Lop No Désinfecté C:\Documents and Settings\yulia\Cookies\yulia@mp3search[2].txt
Spyware:Cookie/AspinallsOnlineCasino No Désinfecté C:\Documents and Settings\yulia\Cookies\yulia@pacificpoker[2].txt
Spyware:Cookie/Serving-sys No Désinfecté C:\Documents and Settings\yulia\Cookies\yulia@serving-sys[1].txt
Spyware:Cookie/Smartadserver No Désinfecté C:\Documents and Settings\yulia\Cookies\yulia@smartadserver[1].txt
Spyware:Cookie/Toplist No Désinfecté C:\Documents and Settings\yulia\Cookies\yulia@toplist[1].txt
Spyware:Cookie/Weborama No Désinfecté C:\Documents and Settings\yulia\Cookies\yulia@weborama[2].txt
Spyware:Cookie/Xiti No Désinfecté C:\Documents and Settings\yulia\Local Settings\Temp\Cookies\yulia@xiti[1].txt
Virus Eventuel. No Désinfecté C:\Documents and Settings\yulia\Local Settings\Temporary Internet Files\Content.IE5\RSFF4IY7\videomp3_setup_3913107[1].exe

Oki

passe à l'étape Antivir maintenant

Je télécharge Avira Premium Security Suite,,,c'est bien ça?

tu lis le tuto de malekal ( lien dans mon message) , tu telecharges depuis ce tuto

ohla,j'ai tout un problème pour installer ce logiciel,maintenant je scanne le système...
Vous m'avez dit de me calmer.J'essaye,mais vous comprenez,je dors pas depuis hier soir à cause de ce virus,imaginez comment je me sens après avoir passé autant de temps sur ce problème et ne l'avoir tjrs pas résolu! Je vous envois tout de suite le rapport dès que ça soit fait!
Et excusez-moi sinon.je vous remercie pour toute votre aide...

Voilà,c'est fait l'analyse!!!





AntiVir PersonalEdition Classic
Report file date: dimanche 16 décembre 2007 15:01

Scanning for 972845 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Username: SYSTEM
Computer name: SN402489320004

Version information:
BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00
AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 13:16:29
AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 12:23:51
LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 15:32:47
LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 12:35:20
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 14:27:15
ANTIVIR1.VDF : 7.0.1.95 3367424 Bytes 14/12/2007 13:53:10
ANTIVIR2.VDF : 7.0.1.96 2048 Bytes 14/12/2007 13:53:10
ANTIVIR3.VDF : 7.0.1.98 4096 Bytes 14/12/2007 13:53:10
AVEWIN32.DLL : 7.6.0.45 3084800 Bytes 16/12/2007 13:53:12
AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:26
AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 07:39:17
AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24
AVPACK32.DLL : 7.3.0.15 360488 Bytes 03/08/2007 08:46:00
AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 07:17:06
AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 12:26:33
AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 07:10:18
NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:42
RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 12:38:13
RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 12:50:37
SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 09:37:21

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: C:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: dimanche 16 décembre 2007 15:01

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'msmsgs.exe' - '1' Module(s) have been scanned
Scan process 'WLLoginProxy.exe' - '1' Module(s) have been scanned
Scan process 'iexplore.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'hpoevm08.exe' - '1' Module(s) have been scanned
Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
Scan process 'GoogleUpdater.exe' - '1' Module(s) have been scanned
Scan process 'LogitechDesktopMessenger.exe' - '1' Module(s) have been scanned
Scan process 'hpotdd01.exe' - '1' Module(s) have been scanned
Scan process 'hpohmr08.exe' - '1' Module(s) have been scanned
Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'mm_tray.exe' - '1' Module(s) have been scanned
Scan process 'mmtask.exe' - '1' Module(s) have been scanned
Scan process 'EM_EXEC.EXE' - '1' Module(s) have been scanned
Scan process 'iTouch.exe' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'PicasaMediaDetector.exe' - '1' Module(s) have been scanned
Scan process 'AOSD.EXE' - '1' Module(s) have been scanned
Scan process 'OD2State.exe' - '1' Module(s) have been scanned
Scan process 'qttask.exe' - '1' Module(s) have been scanned
Scan process 'OD2DLEngine.exe' - '1' Module(s) have been scanned
Scan process 'ABOARD.EXE' - '1' Module(s) have been scanned
Scan process 'PCMService.exe' - '1' Module(s) have been scanned
Scan process 'ccApp.exe' - '1' Module(s) have been scanned
Scan process 'atiptaxx.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'ccEvtMgr.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'slserv.exe' - '1' Module(s) have been scanned
Scan process 'mdm.exe' - '1' Module(s) have been scanned
Scan process 'GoogleUpdaterService.exe' - '1' Module(s) have been scanned
Scan process 'ccSetMgr.exe' - '1' Module(s) have been scanned
Scan process 'CCPROXY.EXE' - '1' Module(s) have been scanned
Scan process 'guard.exe' - '0' Module(s) have been scanned
Scan process 'AOLacsd.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
51 processes with 51 modules were scanned

Start scanning boot sectors:
Boot sector 'C:\'
[NOTE] No virus was found!

Starting to scan the registry.
The registry was scanned ( '39' files ).


Starting the file scan:

Begin scan in 'C:\' <HDD>
C:\hiberfil.sys
[WARNING] The file could not be opened!
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\b0933d9139a10789d6\update\idndl.exe
[WARNING] The file could not be opened!
C:\b0933d9139a10789d6\update\iecustom.dll
[WARNING] The file could not be opened!
C:\b0933d9139a10789d6\update\iereseticons.exe
[WARNING] The file could not be opened!
C:\b0933d9139a10789d6\update\iesetup.exe
[WARNING] The file could not be opened!
C:\b0933d9139a10789d6\update\legitlibm.dll
[WARNING] The file could not be opened!
C:\b0933d9139a10789d6\update\nlsdl.exe
[WARNING] The file could not be opened!
C:\b0933d9139a10789d6\update\update.exe
[WARNING] The file could not be opened!
C:\b0933d9139a10789d6\update\updspapi.dll
[WARNING] The file could not be opened!
C:\b0933d9139a10789d6\update\xmllitesetup.exe
[WARNING] The file could not be opened!
C:\Documents and Settings\yulia\Local Settings\Temp\Temporary Internet Files\Content.IE5\CNMVKHIH\iframen[1].htm
[DETECTION] Contains detection pattern of the HTML script virus HTML/Malicious.ActiveX.Gen
[INFO] The file was moved to '47d733a5.qua'!
C:\Documents and Settings\yulia\Local Settings\Temp\Temporary Internet Files\Content.IE5\WHABOX6N\iframen[1].htm
[DETECTION] Contains detection pattern of the HTML script virus HTML/Malicious.ActiveX.Gen
[INFO] The file was moved to '47d7344a.qua'!
C:\Documents and Settings\yulia\Local Settings\Temporary Internet Files\Content.IE5\2DOZY4YY\2570[1].htm
[DETECTION] Contains detection pattern of the HTML script virus HTML/Iframe
[INFO] The file was deleted!
C:\Documents and Settings\yulia\Local Settings\Temporary Internet Files\Content.IE5\9J34V68M\Xp[1].htm
[DETECTION] Contains detection pattern of the HTML script virus HTML/Psyme.Gen
[INFO] The file was moved to '47c034fc.qua'!
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\062C0D11.exe
[DETECTION] Is the Trojan horse TR/Dldr.Small.ON.2
[INFO] The file was deleted!
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\07A95220
[DETECTION] Contains detection pattern of the worm WORM/Netsky.Z
[INFO] The file was deleted!
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\105D2E84.exe
[DETECTION] Is the Trojan horse TR/Dldr.Small.ON.2
[INFO] The file was deleted!
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1064027C.class
[DETECTION] Contains detection pattern of the Java virus JAVA/ClassLoader.C
[INFO] The file was deleted!
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\106A5675.class
[DETECTION] Contains detection pattern of the Java virus JAVA/ClassLoader.C
[INFO] The file was deleted!
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\107B2863.class
[DETECTION] Contains detection pattern of the Java virus JAVA/ClassLoader.C
[INFO] The file was deleted!
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\10885055.class
[DETECTION] Contains detection pattern of the Java virus JAVA/ClassLoader.C
[INFO] The file was deleted!
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\286D02A8
[DETECTION] Contains detection pattern of the worm WORM/Netsky.Z
[INFO] The file was deleted!
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\78050F95
[DETECTION] Contains detection pattern of the worm WORM/Netsky.Z
[INFO] The file was deleted!
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\785818BB
[DETECTION] Is the Trojan horse TR/Agent.Blkhl.dam
[INFO] The file was deleted!
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\786F3EA1
[DETECTION] Is the Trojan horse TR/Agent.Blkhl.dam
[INFO] The file was deleted!
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\78793C97
[DETECTION] Is the Trojan horse TR/Agent.Blkhl.dam
[INFO] The file was deleted!
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\78823A8C
[DETECTION] Is the Trojan horse TR/Agent.Blkhl.dam
[INFO] The file was deleted!
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\788C3881
[DETECTION] Is the Trojan horse TR/Agent.Blkhl.dam
[INFO] The file was deleted!
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\78930C7A
[DETECTION] Is the Trojan horse TR/Agent.Blkhl.dam
[INFO] The file was deleted!
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\78996073
[DETECTION] Is the Trojan horse TR/Agent.Blkhl.dam
[INFO] The file was deleted!
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\78A0346C
[DETECTION] Is the Trojan horse TR/Agent.Blkhl.dam
[INFO] The file was deleted!
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\78AD5C5D
[DETECTION] Is the Trojan horse TR/Agent.Blkhl.dam
[INFO] The file was deleted!
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\78B75A52
[DETECTION] Is the Trojan horse TR/Agent.Blkhl.dam
[INFO] The file was deleted!
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\78C40244
[DETECTION] Is the Trojan horse TR/Agent.Blkhl.dam
[INFO] The file was deleted!
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\78D77E2F
[DETECTION] Is the Trojan horse TR/Agent.Blkhl.dam
[INFO] The file was moved to '47a93bad.qua'!
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\78DE5227
[DETECTION] Is the Trojan horse TR/Agent.Blkhl.dam
[INFO] The file was deleted!
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\78E8501D
[DETECTION] Is the Trojan horse TR/Agent.Blkhl.dam
[INFO] The file was deleted!
C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\78FB4C07
[DETECTION] Is the Trojan horse TR/Agent.Blkhl.dam
[INFO] The file was deleted!
C:\Program Files\Panda Security\NanoScan\Engine\psnflg.dll
[DETECTION] Is the Trojan horse TR/Agent.bux.1
[INFO] The file was deleted!
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP695\A0373588.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP702\A0376213.exe
[DETECTION] Is the Trojan horse TR/Dldr.Small.ON.2
[INFO] The file was deleted!
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP702\A0376214.exe
[DETECTION] Is the Trojan horse TR/Dldr.Small.ON.2
[INFO] The file was deleted!
C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP702\A0376215.dll
[DETECTION] Is the Trojan horse TR/Agent.bux.1
[INFO] The file was deleted!
C:\WINDOWS\system32\ohxaxec.exe.ren
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was deleted!
C:\WINDOWS\system32\ActiveScan\pskavs.dll
[DETECTION] Contains detection pattern of the Windows virus W95/Blumblebee.1738
[INFO] The file was deleted!
C:\WINDOWS\Temp\NSIS_Install_WMP.exe
[DETECTION] Contains detection pattern of the dropper DR/Agent.bdo.1
[INFO] The file was deleted!
C:\WINDOWS\Temp\NSIS_SpywareSecure_trial_setup.exe
[DETECTION] Contains detection pattern of the dropper DR/NaviPromo.BV.24
[INFO] The file was deleted!


End of the scan: dimanche 16 décembre 2007 16:11
Used time: 1:09:38 min

The scan has been done completely.

8295 Scanning directories
313677 Files were scanned
34 viruses and/or unwanted programs were found
3 Files were classified as suspicious:
33 files were deleted
0 files were repaired
4 files were moved to quarantine
0 files were renamed
11 Files cannot be scanned
313643 Files not concerned
8705 Archives were scanned
11 Warnings
7 Notes



Je fais quoi maintenant,parce que le message continue de s'afficher?

relance ton PC

si le message apparait tu me fais un screenshot du probleme