VBS malware-gen

Re-bonjour,
Voici le log Active scan...




ANALYSIS: 2009-12-14 17:32:29
PROTECTIONS: 1
MALWARE: 32
SUSPECTS: 6
;***********************************************************­************************************************************­************************************************************­
PROTECTIONS
Description Version Active Updated
;===========================================================­============================================================­============================================================­
avast! antivirus 4.8.1368 [VPS 091213-0] 4.8.1368 Yes Yes
;===========================================================­============================================================­============================================================­
MALWARE
Id Description Type Active Severity Disinfectable Disinfected Location
;===========================================================­============================================================­============================================================­
00007810 JV/FixJava Virus No 0 Yes No c:\documents and settings\ms-net\application data\sun\java\deployment\cache\6.0\60\5d80c5bc-5b013dcd[com/­tolstoy/meister1/fixjava.class]
00007811 JV/ImageBank Virus No 0 Yes No c:\documents and settings\ms-net\application data\sun\java\deployment\cache\6.0\60\5d80c5bc-5b013dcd[com/­tolstoy/meister1/imagebank.class]
00007812 JV/LetterBoard Virus No 0 Yes No c:\documents and settings\ms-net\application data\sun\java\deployment\cache\6.0\60\5d80c5bc-5b013dcd[com/­tolstoy/meister1/letterboard.class]
00007813 JV/LetterButton Virus No 0 Yes No c:\documents and settings\ms-net\application data\sun\java\deployment\cache\6.0\60\5d80c5bc-5b013dcd[com/­tolstoy/meister1/letterbutton.class]
00007814 JV/MyTimer Virus No 0 Yes No c:\documents and settings\ms-net\application data\sun\java\deployment\cache\6.0\60\5d80c5bc-5b013dcd[com/­tolstoy/meister1/mytimer.class]
00007815 JV/ValueBox Virus No 0 Yes No c:\documents and settings\ms-net\application data\sun\java\deployment\cache\6.0\60\5d80c5bc-5b013dcd[com/­tolstoy/meister1/valuebox.class]
00007816 JV/Widget Virus No 0 Yes No c:\documents and settings\ms-net\application data\sun\java\deployment\cache\6.0\60\5d80c5bc-5b013dcd[com/­tolstoy/meister1/widget.class]
00007817 JV/WordManager Virus No 0 Yes No c:\documents and settings\ms-net\application data\sun\java\deployment\cache\6.0\60\5d80c5bc-5b013dcd[com/­tolstoy/meister1/wordmanager.class]
00007818 JV/WordMeister Virus No 0 Yes No c:\documents and settings\ms-net\application data\sun\java\deployment\cache\6.0\60\5d80c5bc-5b013dcd[com/­tolstoy/meister1/wordmeister.class]
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@doubleclick[2].txt
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@atdmt[1].txt
00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@tradedoubler[3].txt
00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@tradedoubler[2].txt
00145405 Cookie/RealMedia TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@247realmedia[1].txt
00145457 Cookie/FastClick TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@fastclick[1].txt
00145457 Cookie/FastClick TrackingCookie No 0 Yes No c:\found.000\file0000.chk
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@tribalfusion[2].txt
00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@mediaplex[1].txt
00167704 Cookie/Xiti TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@xiti[1].txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@serving-sys[1].txt
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@bs.serving-sys[1].txt
00168106 Cookie/Weborama TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@weborama[1].txt
00168109 Cookie/Adtech TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@adtech[1].txt
00168116 Cookie/Comclick TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@fl01.ct2.comclick[1].txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@advertising[1].txt
00171982 Cookie/QuestionMarket TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@questionmarket[1].txt
00172221 Cookie/Zedo TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@zedo[2].txt
00173520 Cookie/Bluestreak TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@bluestreak[2].txt
00207936 Cookie/Adviva TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@adviva[2].txt
00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@smartadserver[1].txt
00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@smartadserver[3].txt
00328284 Adware/NaviPromo Adware No 1 Yes No c:\system volume information\_restore{5e93a78f-4618-4c57-be80-d9c7e8452686}\r­p1059\a0508701.exe
00328284 Adware/NaviPromo Adware No 1 Yes No c:\program files\navilog1\backupnavi\idihdcq.exe
00366244 Application/NirCmd.A HackTools No 0 Yes No c:\windows\nircmd.exe
03074964 Trj/CI.A Virus/Trojan No 0 Yes No c:\program files\navilog1\backupnavi\wtypan.exe
03074964 Trj/CI.A Virus/Trojan No 0 Yes No c:\program files\navilog1\backupnavi\mqsjjn.exe
03919024 Generic Malware Virus/Trojan No 0 Yes No c:\windows\ubisoft\setupubi.exe
;===========================================================­============================================================­============================================================­
SUSPECTS
Sent Location
;===========================================================­============================================================­============================================================­
No c:\program files\rnamfler\naomf.exe
No c:\documents and settings\ms-net\bureau\usbfix.exe
No c:\system volume information\_restore{5e93a78f-4618-4c57-be80-d9c7e8452686}\r­p1059\a0508815.exe
No c:\system volume information\_restore{5e93a78f-4618-4c57-be80-d9c7e8452686}\r­p1059\a0508816.exe
No c:\usbfix\quarantine\c\usbfix\quarantine\c\recycler\s-1-5-21­-507921405-436374069-1343024091-1003.usbfix\dc152.tmp\hnfgd.­exe.usbfix
No c:\usbfix\quarantine\c\windows\rndll.exe.usbfix
;===========================================================­============================================================­============================================================­
VULNERABILITIES
Id Severity Description

Re-bonjour,
Voici le log Active scan...




ANALYSIS: 2009-12-14 17:32:29
PROTECTIONS: 1
MALWARE: 32
SUSPECTS: 6
;***********************************************************­************************************************************­************************************************************­
PROTECTIONS
Description Version Active Updated
;===========================================================­============================================================­============================================================­
avast! antivirus 4.8.1368 [VPS 091213-0] 4.8.1368 Yes Yes
;===========================================================­============================================================­============================================================­
MALWARE
Id Description Type Active Severity Disinfectable Disinfected Location
;===========================================================­============================================================­============================================================­
00007810 JV/FixJava Virus No 0 Yes No c:\documents and settings\ms-net\application data\sun\java\deployment\cache\6.0\60\5d80c5bc-5b013dcd[com/­tolstoy/meister1/fixjava.class]
00007811 JV/ImageBank Virus No 0 Yes No c:\documents and settings\ms-net\application data\sun\java\deployment\cache\6.0\60\5d80c5bc-5b013dcd[com/­tolstoy/meister1/imagebank.class]
00007812 JV/LetterBoard Virus No 0 Yes No c:\documents and settings\ms-net\application data\sun\java\deployment\cache\6.0\60\5d80c5bc-5b013dcd[com/­tolstoy/meister1/letterboard.class]
00007813 JV/LetterButton Virus No 0 Yes No c:\documents and settings\ms-net\application data\sun\java\deployment\cache\6.0\60\5d80c5bc-5b013dcd[com/­tolstoy/meister1/letterbutton.class]
00007814 JV/MyTimer Virus No 0 Yes No c:\documents and settings\ms-net\application data\sun\java\deployment\cache\6.0\60\5d80c5bc-5b013dcd[com/­tolstoy/meister1/mytimer.class]
00007815 JV/ValueBox Virus No 0 Yes No c:\documents and settings\ms-net\application data\sun\java\deployment\cache\6.0\60\5d80c5bc-5b013dcd[com/­tolstoy/meister1/valuebox.class]
00007816 JV/Widget Virus No 0 Yes No c:\documents and settings\ms-net\application data\sun\java\deployment\cache\6.0\60\5d80c5bc-5b013dcd[com/­tolstoy/meister1/widget.class]
00007817 JV/WordManager Virus No 0 Yes No c:\documents and settings\ms-net\application data\sun\java\deployment\cache\6.0\60\5d80c5bc-5b013dcd[com/­tolstoy/meister1/wordmanager.class]
00007818 JV/WordMeister Virus No 0 Yes No c:\documents and settings\ms-net\application data\sun\java\deployment\cache\6.0\60\5d80c5bc-5b013dcd[com/­tolstoy/meister1/wordmeister.class]
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@doubleclick[2].txt
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@atdmt[1].txt
00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@tradedoubler[3].txt
00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@tradedoubler[2].txt
00145405 Cookie/RealMedia TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@247realmedia[1].txt
00145457 Cookie/FastClick TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@fastclick[1].txt
00145457 Cookie/FastClick TrackingCookie No 0 Yes No c:\found.000\file0000.chk
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@tribalfusion[2].txt
00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@mediaplex[1].txt
00167704 Cookie/Xiti TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@xiti[1].txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@serving-sys[1].txt
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@bs.serving-sys[1].txt
00168106 Cookie/Weborama TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@weborama[1].txt
00168109 Cookie/Adtech TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@adtech[1].txt
00168116 Cookie/Comclick TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@fl01.ct2.comclick[1].txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@advertising[1].txt
00171982 Cookie/QuestionMarket TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@questionmarket[1].txt
00172221 Cookie/Zedo TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@zedo[2].txt
00173520 Cookie/Bluestreak TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@bluestreak[2].txt
00207936 Cookie/Adviva TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@adviva[2].txt
00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@smartadserver[1].txt
00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No c:\documents and settings\ms-net\cookies\ms-net@smartadserver[3].txt
00328284 Adware/NaviPromo Adware No 1 Yes No c:\system volume information\_restore{5e93a78f-4618-4c57-be80-d9c7e8452686}\r­p1059\a0508701.exe
00328284 Adware/NaviPromo Adware No 1 Yes No c:\program files\navilog1\backupnavi\idihdcq.exe
00366244 Application/NirCmd.A HackTools No 0 Yes No c:\windows\nircmd.exe
03074964 Trj/CI.A Virus/Trojan No 0 Yes No c:\program files\navilog1\backupnavi\wtypan.exe
03074964 Trj/CI.A Virus/Trojan No 0 Yes No c:\program files\navilog1\backupnavi\mqsjjn.exe
03919024 Generic Malware Virus/Trojan No 0 Yes No c:\windows\ubisoft\setupubi.exe
;===========================================================­============================================================­============================================================­
SUSPECTS
Sent Location
;===========================================================­============================================================­============================================================­
No c:\program files\rnamfler\naomf.exe
No c:\documents and settings\ms-net\bureau\usbfix.exe
No c:\system volume information\_restore{5e93a78f-4618-4c57-be80-d9c7e8452686}\r­p1059\a0508815.exe
No c:\system volume information\_restore{5e93a78f-4618-4c57-be80-d9c7e8452686}\r­p1059\a0508816.exe
No c:\usbfix\quarantine\c\usbfix\quarantine\c\recycler\s-1-5-21­-507921405-436374069-1343024091-1003.usbfix\dc152.tmp\hnfgd.­exe.usbfix
No c:\usbfix\quarantine\c\windows\rndll.exe.usbfix
;===========================================================­============================================================­============================================================­
VULNERABILITIES
Id Severity Description