Nokia_19_jpg.zip pas supprimé avec MSNFIX ???

bonjour Marie,
Voià le rapport MSN FIX

MSNFix 1.562

C:\Documents and Settings\proprietaire\Bureau\MSNFix
Fix exécuté le 05/11/2007 - 22:09:07,76 By proprietaire
mode sans échec

************************ Recherche les fichiers présents

... C:\DOCUME~1\ALLUSE~1\MENUDM~1\carlton
... C:\Program Files\Fichiers communs\Carlson\carlton
... C:\PROGRA~1\Insider\Insider.exe
... C:\PROGRA~1\Temporary\wininstall.exe
... C:\er-1-1148.exe
... C:\xr-1-1148.exe
... C:\zr-1-1148.exe
... C:\WINDOWS\b122.exe
... C:\WINDOWS\LBTWiz.exe
... C:\WINDOWS\mrofinu*.exe
... C:\WINDOWS\Nokia_19_jpg.zip
... C:\WINDOWS\system32\microsoft\backup.ftp
... C:\WINDOWS\system32\microsoft\backup.tftp
... C:\WINDOWS\Nokia_19_jpg.zip

************************ MSNCHK ***** /!\ beta test /!\

[!] C:\WINDOWS\Nokia_19_jpg.zip is INFECTED


************************ Recherche les dossiers présents

... C:\Program Files\Fichiers communs\Carlson\
... C:\PROGRA~1\InetGet2\
... C:\PROGRA~1\Insider\
... C:\PROGRA~1\Temporary\
... C:\PROGRA~1\WinAble\




************************ Suppression des fichiers

.. OK ... C:\DOCUME~1\ALLUSE~1\MENUDM~1\carlton
.. OK ... C:\Program Files\Fichiers communs\Carlson\carlton
.. OK ... C:\PROGRA~1\Insider\Insider.exe
.. OK ... C:\PROGRA~1\Temporary\wininstall.exe
.. OK ... C:\er-1-1148.exe
.. OK ... C:\xr-1-1148.exe
.. OK ... C:\zr-1-1148.exe
.. OK ... C:\WINDOWS\b122.exe
.. OK ... C:\WINDOWS\LBTWiz.exe
.. OK ... C:\WINDOWS\mrofinu*.exe
.. OK ... C:\WINDOWS\Nokia_19_jpg.zip
.. OK ... C:\WINDOWS\system32\microsoft\backup.ftp
.. OK ... C:\WINDOWS\system32\microsoft\backup.tftp
.. OK ... C:\WINDOWS\Nokia_19_jpg.zip


************************ Suppression des dossiers

.. OK ... C:\Program Files\Fichiers communs\Carlson\
.. OK ... C:\PROGRA~1\InetGet2\
.. OK ... C:\PROGRA~1\Insider\
.. OK ... C:\PROGRA~1\Temporary\
.. OK ... C:\PROGRA~1\WinAble\


************************ Nettoyage du registre



************************ Fichiers suspects

/!\ ces fichiers nécessitent un avis expérimenté avant toute intervention

[C:\3d3t4t8n7l.exe] 73D311A2F4B424C717154631FC7630CE

[color=#FF0000][b]==>[/b][/color] SVP merci d'envoyer le fichier [b] C:\DOCUME~1\PROPRI~1\Bureau\Upload_Me.zip [/b] sur http://upload.changelog.fr



Les fichiers et clés de registre supprimés ont été sauvegardés dans le fichier 05112007_22110062.zip


------------------------------------------------------------------------
Auteur : !aur3n7 Contact: https://www.ionos.fr/
------------------------------------------------------------------------

--------------------------------------------- END ---------------------------------------------

Et le rapport SDFIX
SDFix: Version 1.113

Run by proprietaire on 05/11/2007 at 23:10

Microsoft Windows XP [version 5.1.2600]

Running From: C:\DOCUME~1\PROPRI~1\Bureau\SDFix

Safe Mode:
Checking Services:


Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting...


Normal Mode:
Checking Files:

Trojan Files Found:

C:\WINDOWS\mrofinu1148.exe.tmp - Deleted
C:\WINDOWS\tsitra1148.exe.tmp - Deleted
C:\Program Files\Fichiers communs\Yazzle1122OinUninstaller.exe - Deleted
C:\WINDOWS\b147.exe - Deleted



Removing Temp Files...

ADS Check:

C:\WINDOWS
No streams found.

C:\WINDOWS\system32
No streams found.

C:\WINDOWS\system32\svchost.exe
No streams found.

C:\WINDOWS\system32\ntoskrnl.exe
No streams found.



Final Check:

catchme 0.3.1253 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-11-05 23:16:46
Windows 5.1.2600 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


Remaining Services:
------------------



Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpoli cy\standardprofile\authorizedapplications\list]

Remaining Files:
---------------

File Backups: - C:\DOCUME~1\PROPRI~1\Bureau\SDFix\backups\backups.zip

Files with Hidden Attributes:

Thu 21 Jun 2007 46,384 A..H. --- "C:\Program Files\AOL 9.0 VR\AOLphx.exe"
Thu 24 May 2007 54,832 A..H. --- "C:\Program Files\AOL 9.0 VR\AOLphxex.exe"
Thu 24 May 2007 33,328 A..H. --- "C:\Program Files\AOL 9.0 VR\rbm.exe"
Sun 4 Nov 2007 5,903,928 A..H. --- "C:\Program Files\Picasa2\setup.exe"
Wed 17 Oct 2007 4,348 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Mon 23 Jul 2007 45,056 ...H. --- "C:\Documents and Settings\proprietaire\Mes documents\~WRL0001.tmp"
Thu 16 Aug 2007 1,208,560 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\a0f278302673b24bbd86ed4c33f1d6b2\BIT10A.tmp "
Sun 12 Aug 2007 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\deb995e7b7d2953ec6904bd5047bd45f\BITF4.tmp& quot;
Sun 7 Oct 2007 96,072 ...H. --- "C:\Program Files\Fichiers communs\AOL\TopSpeed\3.0\WBUnins.exe"

Finished!

Merci pour ton aide.
Sandrine (SST27)1 message(s) posté(s) depuis le mercredi 7 novembre 2007