C est grave?

pepe -  
 pepe -
salu voila un peu tout les trucs louche qui me sont aparu apres un scan si qlq 1 c dechiffrer sa aparement j orai attraper des virus pouvai vs m indiquer les virus qui aurai etai eradiquer et se qui son encor actif MERCI

Fri Oct 22 22:28:52 2004 => *** SOFTWARE\Microsoft\Windows\CurrentVersion\Run has RunningProcess defined as C:\WINDOWS\System32\vpc32.exe.mwt (which is infected)!
Fri Oct 22 22:28:52 2004 => *** Reg Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Microsoft Update deFri Oct 22 22:28:52 2004 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce

Fri Oct 22 22:28:52 2004 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx

Fri Oct 22 22:28:52 2004 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
Fri Oct 22 22:28:52 2004 => Scanning File C:\WINDOWS\system32\DivXPlayer.exe
Fri Oct 22 22:28:52 2004 => *** SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices has RunningProcess defined as C:\WINDOWS\System32\vpc32.exe.mwt (which is infected)!
Fri Oct 22 22:28:52 2004 => *** Reg Value SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\Microsoft Update deleted because it is infected by a Virus

Fri Oct 22 22:28:52 2004 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Fri Oct 22 22:28:52 2004 => Scanning File C:\WINDOWS\system32\RUNDLL32.EXE
Fri Oct 22 22:28:52 2004 => *** File C:\PROGRA~1\MSNMES~1\MsnMsgr.Exe having Size Restriction ***
Fri Oct 22 22:28:52 2004 => Scanning File C:\PROGRA~1\MSNMES~1\MsnMsgr.Exe [**]
Fri Oct 22 22:28:52 2004 => Scanning File C:\PROGRA~1\McAfee\MCAFEE~2\INSTAN~1\RuLaunch.exe
Fri Oct 22 22:28:52 2004 => Scanning File C:\WINDOWS\system32\DivXPlayer.exe
Fri Oct 22 22:28:52 2004 => *** SOFTWARE\Microsoft\Windows\CurrentVersion\Run has RunningProcess defined as C:\WINDOWS\System32\vpc32.exe.mwt (which is infected)!
Fri Oct 22 22:28:52 2004 => *** Reg Value SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Microsoft Update deleted because it is infected by a Virus
leted because it is infected by a VirusFri Oct 22 22:29:02 2004 => Scanning File C:\WINDOWS\msg.zip
Fri Oct 22 22:29:02 2004 => File C:\WINDOWS\msg.zip infected by "TrojanDropper.JS.Mimail.b" Virus. Action Taken: File Deleted.
Fri Oct 22 22:29:04 2004 => File C:\WINDOWS\System32\12338_up.exe infected by "Worm.Win32.Sasser.a" Virus. Action Taken: File Deleted.Fri Oct 22 22:30:36 2004 => File C:\WINDOWS\System32\wuampd.exe infected by "Backdoor.Rbot.gen" Virus. Action Taken: File Renamed.
Fri Oct 22 22:35:57 2004 => Scanning Folder: C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\*.*
Fri Oct 22 22:35:57 2004 => Scanning File C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ADS[5].HTM.VIR [**]
Fri Oct 22 22:35:57 2004 => Scanning File C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ads[9].htm
Fri Oct 22 22:36:14 2004 => C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ads[9].htm possibly infected and removed by background antivirus package!
Fri Oct 22 22:36:14 2004 => Result: ERROR!!! File C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ads[9].htm: Scanning Failure!!!
Fri Oct 22 22:36:14 2004 => C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ads[9].htm possibly infected and removed by background antivirus package!
Fri Oct 22 22:36:14 2004 => File C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ads[9].htm infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.

Fri Oct 22 22:36:14 2004 => Scanning File C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[1].htm
Fri Oct 22 22:36:16 2004 => C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[1].htm possibly infected and removed by background antivirus package!
Fri Oct 22 22:36:16 2004 => Result: ERROR!!! File C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[1].htm: Scanning Failure!!!
Fri Oct 22 22:36:16 2004 => C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[1].htm possibly infected and removed by background antivirus package!
Fri Oct 22 22:36:16 2004 => File C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[1].htm infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.

Fri Oct 22 22:36:16 2004 => Scanning File C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[2].htm
Fri Oct 22 22:36:25 2004 => C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[2].htm possibly infected and removed by background antivirus package!
Fri Oct 22 22:36:25 2004 => Result: ERROR!!! File C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[2].htm: Scanning Failure!!!
Fri Oct 22 22:36:25 2004 => C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[2].htm possibly infected and removed by background antivirus package!
Fri Oct 22 22:36:25 2004 => File C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[2].htm infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.

Fri Oct 22 22:36:25 2004 => Scanning File C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[3].htm
Fri Oct 22 22:36:30 2004 => ERROR!!! ScanFile fails for C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[3].htm
Fri Oct 22 22:36:30 2004 => Scanning File C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[4].htm
Fri Oct 22 22:37:06 2004 => C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[4].htm possibly infected and removed by background antivirus package!
Fri Oct 22 22:37:06 2004 => Result: ERROR!!! File C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[4].htm: Scanning Failure!!!
Fri Oct 22 22:37:06 2004 => C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[4].htm possibly infected and removed by background antivirus package!
Fri Oct 22 22:37:06 2004 => File C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[4].htm infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.

Fri Oct 22 22:37:06 2004 => Scanning File C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[5].htm
Fri Oct 22 22:37:08 2004 => C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[5].htm possibly infected and removed by background antivirus package!
Fri Oct 22 22:37:08 2004 => Result: ERROR!!! File C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[5].htm: Scanning Failure!!!
Fri Oct 22 22:37:08 2004 => C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[5].htm possibly infected and removed by background antivirus package!
Fri Oct 22 22:37:08 2004 => File C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[5].htm infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.

Fri Oct 22 22:37:08 2004 => Scanning File C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[6].htm
Fri Oct 22 22:37:08 2004 => C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[6].htm possibly infected and removed by background antivirus package!
Fri Oct 22 22:37:08 2004 => Result: ERROR!!! File C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[6].htm: Scanning Failure!!!
Fri Oct 22 22:37:08 2004 => C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[6].htm possibly infected and removed by background antivirus package!
Fri Oct 22 22:37:08 2004 => File C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[6].htm infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.

Fri Oct 22 22:37:08 2004 => Scanning File C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[7].htm
Fri Oct 22 22:37:09 2004 => C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[7].htm possibly infected and removed by background antivirus package!
Fri Oct 22 22:37:09 2004 => Result: ERROR!!! File C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[7].htm: Scanning Failure!!!
Fri Oct 22 22:37:09 2004 => C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[7].htm possibly infected and removed by background antivirus package!
Fri Oct 22 22:37:09 2004 => File C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[7].htm infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.

Fri Oct 22 22:37:09 2004 => Scanning File C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[8].htm
Fri Oct 22 22:37:12 2004 => C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[8].htm possibly infected and removed by background antivirus package!
Fri Oct 22 22:37:12 2004 => Result: ERROR!!! File C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[8].htm: Scanning Failure!!!
Fri Oct 22 22:37:12 2004 => C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[8].htm possibly infected and removed by background antivirus package!
Fri Oct 22 22:37:12 2004 => File C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad[8].htm infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.

Fri Oct 22 22:37:12 2004 => Scanning File C:\WINDOWS\.{21EC2020-3AEA-1069-A2DD-08002B30309D}\ad_120x600[1].htm
Fri Oct 22 22:38:45 2004 => Please Wait... Scanning File
Fri Oct 22 22:40:18 2004 => Please Wait... Scanning File

4 réponses

BmV Messages postés 92715 Date d'inscription   Statut Modérateur Dernière intervention   4 849
 
Salut.

Bon alors :
1 - http://www.commentcamarche.net/ccmguide/ccmcharte.php3
2 - http://cjoint.com/?kxae1kdOk8
3 - quelle est ta version de Windows ?
4 - qu'as-tu comme antivirus ? Qu'as-tu comme firewall ?
5 - ce résultat ci-dessus provient d'un scan ; lequel ? Avec quel outil ?
6 - "aparement j orai attraper des virus" : comment arrives-tu à cette conclusion ?

A+

-=O(_BmV_)O=-  L'amour comme épée,
      ||       ||       l'humour comme bouclier. 
0
pepe
 
salut merci d avoir passer un peu de ton temp a regarder mon cas j vai te repondre:

3: windowsXP

4:antivir

5:sacan avec "escan"

6: j arrive a cette conclusion car etant novice en informatique et ayant quelque souci avec mon pc depui peu en faisant le scan j ai resorti les prases ou il est indiquer "virus", "infected".... pour moi tou sa c est de l hebreu et j orai voulu en savoir un peu plus sur cette analyse voila en te remerciant amicalemen. merci. bonne soiree!
0
BmV Messages postés 92715 Date d'inscription   Statut Modérateur Dernière intervention   4 849
 
Bon.
Donc si j'ai bien compris, les alertes viennent d' escan et non d'antivir ???
Curieux ...
Tu es sûr qu'il est bien à jour et bien configuré ?
As-tu bien fait les dernières mises à jour Windows (hors SP2 ...)
Car apparemment tu aurais un ou deux trojans (ce qui n'est pas très grave, mais faudra les virer aussi un jour ....) mais surtout tu as (ou tu as eu) Sasser http://www.commentcamarche.net/virus/sasser.php3 .

Dans un premier temps, je te suggère :
1 - faire une mise à jour Windows (toutes les mises à jour "critiques" sauf le SP2 -en attendant-)
2 - faire un scan antivirus en ligne ici par exemple : http://www.secuser.com/outils/antivirus.htm (c'est un parmi les bons, tu pourras en choisir au autre quand tu auras le temps ...) ; sur le même site, il y aura plein de correctifs antivirus, faciles à appliquer.
3 - lire ça http://sebsauvage.net/safehex.html

Pour en savoir plus sur tout ça, visiter régulièrement :
- http://assiste.free.fr/index.html
- http://sebsauvage.net/
- http://www.secuser.com/

Si tu t'en sors pas, tu reviens bien sûr.

Mais peut-être plutôt dans le forum "virus" ...

Bon courage.

A+

-=O(_BmV_)O=-  L'amour comme épée,
      ||       ||       l'humour comme bouclier. 
0
pepe
 
salut j te remercie d avoir pri un peu de ton temp pour avoir repondu a mon sujet en effet g eu le virus sasser ya quelque temp et pas mal d autre virus mai bon g fai pas mal de manipulation q on m avait conseillé et apparement sa va mieux je peu me recervir normalement de mon pc alor q un temp il m était impossible d exploiter tous mes fichier "exe" . passe une bonne journné et merci pour l analyse
0