Virus WORM/Klez.E
Résolu
Utilisateur anonyme
-
Utilisateur anonyme -
Utilisateur anonyme -
Bonjour,
Une personne a-t-elle une solution pour éradiquer ce virus ?
Merci pour votre concours
Rapport Antivir
Avira AntiVir Personal
Report file date: dimanche 1 février 2009 07:44
Scanning for 1302306 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 3) [5.1.2600]
Boot mode: Save mode
Username: HP_Propriétaire
Computer name: NOM-B0A1C0A3909
Version information:
BUILD.DAT : 8.2.0.337 16934 Bytes 18/11/2008 13:05:00
AVSCAN.EXE : 8.1.4.10 315649 Bytes 27/11/2008 07:58:39
AVSCAN.DLL : 8.1.4.0 40705 Bytes 26/05/2008 07:56:40
LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 12:44:19
LUKERES.DLL : 8.1.4.0 12033 Bytes 26/05/2008 07:58:52
ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 19:29:20
ANTIVIR1.VDF : 7.1.1.113 2817536 Bytes 14/01/2009 19:51:10
ANTIVIR2.VDF : 7.1.1.207 1359360 Bytes 30/01/2009 22:10:36
ANTIVIR3.VDF : 7.1.1.208 2048 Bytes 30/01/2009 22:10:37
Engineversion : 8.2.0.70
AEVDF.DLL : 8.1.1.0 106868 Bytes 31/01/2009 22:10:45
AESCRIPT.DLL : 8.1.1.39 344443 Bytes 31/01/2009 22:10:44
AESCN.DLL : 8.1.1.6 127348 Bytes 31/01/2009 22:10:43
AERDL.DLL : 8.1.1.3 438645 Bytes 06/11/2008 11:23:16
AEPACK.DLL : 8.1.3.5 393588 Bytes 09/01/2009 14:10:43
AEOFFICE.DLL : 8.1.0.33 196987 Bytes 12/12/2008 07:44:17
AEHEUR.DLL : 8.1.0.89 1569143 Bytes 31/01/2009 22:10:43
AEHELP.DLL : 8.1.2.0 119159 Bytes 18/11/2008 19:09:08
AEGEN.DLL : 8.1.1.12 328053 Bytes 31/01/2009 22:10:40
AEEMU.DLL : 8.1.0.9 393588 Bytes 16/10/2008 07:09:49
AECORE.DLL : 8.1.6.3 176501 Bytes 31/01/2009 22:10:38
AEBB.DLL : 8.1.0.3 53618 Bytes 16/10/2008 07:09:47
AVWINLL.DLL : 1.0.0.12 15105 Bytes 09/07/2008 08:40:05
AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 09:28:01
AVREP.DLL : 8.0.0.2 98344 Bytes 26/09/2008 19:36:52
AVREG.DLL : 8.0.0.1 33537 Bytes 09/05/2008 11:26:40
AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23
AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 12:27:49
SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02
SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 12:49:40
NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10
RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 12/06/2008 13:48:07
RCTEXT.DLL : 8.0.52.0 86273 Bytes 27/06/2008 13:34:37
Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: delete
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, D:,
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: on
Scan all files...................: All files
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Deviating archive types..........: +BSD Mailbox, +Netscape/Mozilla Mailbox, +Eudora Mailbox, +Squid cache, +Pegasus Mailbox, +MS Outlook Mailbox,
Macro heuristic..................: on
File heuristic...................: medium
Deviating risk categories........: +APPL,+GAME,+JOKE,+PCK,+SPR,
Start of the scan: dimanche 1 février 2009 07:44
Starting search for hidden objects.
The driver could not be initialized.
The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
11 processes with 11 modules were scanned
Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!
Master boot sector HD1
[INFO] No virus was found!
[WARNING] System error [21]: Le périphérique n'est pas prêt.
Master boot sector HD2
[INFO] No virus was found!
[WARNING] System error [21]: Le périphérique n'est pas prêt.
Master boot sector HD3
[INFO] No virus was found!
[WARNING] System error [21]: Le périphérique n'est pas prêt.
Master boot sector HD4
[INFO] No virus was found!
[WARNING] System error [21]: Le périphérique n'est pas prêt.
Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Boot sector 'D:\'
[INFO] No virus was found!
Starting to scan the registry.
The registry was scanned ( '66' files ).
Starting the file scan:
Begin scan in 'C:\' <HP_PAVILION>
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\Documents and Settings\HP_Propriétaire\Application Data\Thunderbird\Profiles\6zdggmr1.default\Mail\Local Folders\Inbox
[0] Archive type: Netscape/Mozilla Mailbox
--> Mailbox_[Message-ID: <200901300524.n0U5Owgn019815@smtp05.msg.oleane.][From: 06271JH <06271JH@AAO.R>][Subject: LANGUAGE]6282.mim
[1] Archive type: MIME
--> rowspan.bat
[DETECTION] Contains recognition pattern of the WORM/Klez.E worm
[WARNING] This file is a mailbox. To avoid damaging your emails this file will not be repaired or deleted!
C:\Documents and Settings\HP_Propriétaire\Application Data\Thunderbird\Profiles\6zdggmr1.default\Mail\Local Folders\Trash
[0] Archive type: Netscape/Mozilla Mailbox
--> Mailbox_[Message-ID: <200901300524.n0U5Owgn019815@smtp05.msg.oleane.][From: 06271JH <06271JH@AAO.R>][Subject: LANGUAGE]3928.mim
[1] Archive type: MIME
--> rowspan.bat
[DETECTION] Contains recognition pattern of the WORM/Klez.E worm
[WARNING] This file is a mailbox. To avoid damaging your emails this file will not be repaired or deleted!
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avnotify.exe
[WARNING] The file could not be opened!
Begin scan in 'D:\' <HP_RECOVERY>
End of the scan: dimanche 1 février 2009 09:22
Used time: 1:38:49 Hour(s)
The scan has been done completely.
4209 Scanning directories
369355 Files were scanned
2 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
0 files were moved to quarantine
0 files were renamed
2 Files cannot be scanned
369351 Files not concerned
24246 Archives were scanned
8 Warnings
0 Notes
Une personne a-t-elle une solution pour éradiquer ce virus ?
Merci pour votre concours
Rapport Antivir
Avira AntiVir Personal
Report file date: dimanche 1 février 2009 07:44
Scanning for 1302306 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 3) [5.1.2600]
Boot mode: Save mode
Username: HP_Propriétaire
Computer name: NOM-B0A1C0A3909
Version information:
BUILD.DAT : 8.2.0.337 16934 Bytes 18/11/2008 13:05:00
AVSCAN.EXE : 8.1.4.10 315649 Bytes 27/11/2008 07:58:39
AVSCAN.DLL : 8.1.4.0 40705 Bytes 26/05/2008 07:56:40
LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 12:44:19
LUKERES.DLL : 8.1.4.0 12033 Bytes 26/05/2008 07:58:52
ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 19:29:20
ANTIVIR1.VDF : 7.1.1.113 2817536 Bytes 14/01/2009 19:51:10
ANTIVIR2.VDF : 7.1.1.207 1359360 Bytes 30/01/2009 22:10:36
ANTIVIR3.VDF : 7.1.1.208 2048 Bytes 30/01/2009 22:10:37
Engineversion : 8.2.0.70
AEVDF.DLL : 8.1.1.0 106868 Bytes 31/01/2009 22:10:45
AESCRIPT.DLL : 8.1.1.39 344443 Bytes 31/01/2009 22:10:44
AESCN.DLL : 8.1.1.6 127348 Bytes 31/01/2009 22:10:43
AERDL.DLL : 8.1.1.3 438645 Bytes 06/11/2008 11:23:16
AEPACK.DLL : 8.1.3.5 393588 Bytes 09/01/2009 14:10:43
AEOFFICE.DLL : 8.1.0.33 196987 Bytes 12/12/2008 07:44:17
AEHEUR.DLL : 8.1.0.89 1569143 Bytes 31/01/2009 22:10:43
AEHELP.DLL : 8.1.2.0 119159 Bytes 18/11/2008 19:09:08
AEGEN.DLL : 8.1.1.12 328053 Bytes 31/01/2009 22:10:40
AEEMU.DLL : 8.1.0.9 393588 Bytes 16/10/2008 07:09:49
AECORE.DLL : 8.1.6.3 176501 Bytes 31/01/2009 22:10:38
AEBB.DLL : 8.1.0.3 53618 Bytes 16/10/2008 07:09:47
AVWINLL.DLL : 1.0.0.12 15105 Bytes 09/07/2008 08:40:05
AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 09:28:01
AVREP.DLL : 8.0.0.2 98344 Bytes 26/09/2008 19:36:52
AVREG.DLL : 8.0.0.1 33537 Bytes 09/05/2008 11:26:40
AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23
AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 12:27:49
SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02
SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 12:49:40
NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10
RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 12/06/2008 13:48:07
RCTEXT.DLL : 8.0.52.0 86273 Bytes 27/06/2008 13:34:37
Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: delete
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, D:,
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: on
Scan all files...................: All files
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Deviating archive types..........: +BSD Mailbox, +Netscape/Mozilla Mailbox, +Eudora Mailbox, +Squid cache, +Pegasus Mailbox, +MS Outlook Mailbox,
Macro heuristic..................: on
File heuristic...................: medium
Deviating risk categories........: +APPL,+GAME,+JOKE,+PCK,+SPR,
Start of the scan: dimanche 1 février 2009 07:44
Starting search for hidden objects.
The driver could not be initialized.
The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
11 processes with 11 modules were scanned
Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!
Master boot sector HD1
[INFO] No virus was found!
[WARNING] System error [21]: Le périphérique n'est pas prêt.
Master boot sector HD2
[INFO] No virus was found!
[WARNING] System error [21]: Le périphérique n'est pas prêt.
Master boot sector HD3
[INFO] No virus was found!
[WARNING] System error [21]: Le périphérique n'est pas prêt.
Master boot sector HD4
[INFO] No virus was found!
[WARNING] System error [21]: Le périphérique n'est pas prêt.
Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Boot sector 'D:\'
[INFO] No virus was found!
Starting to scan the registry.
The registry was scanned ( '66' files ).
Starting the file scan:
Begin scan in 'C:\' <HP_PAVILION>
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\Documents and Settings\HP_Propriétaire\Application Data\Thunderbird\Profiles\6zdggmr1.default\Mail\Local Folders\Inbox
[0] Archive type: Netscape/Mozilla Mailbox
--> Mailbox_[Message-ID: <200901300524.n0U5Owgn019815@smtp05.msg.oleane.][From: 06271JH <06271JH@AAO.R>][Subject: LANGUAGE]6282.mim
[1] Archive type: MIME
--> rowspan.bat
[DETECTION] Contains recognition pattern of the WORM/Klez.E worm
[WARNING] This file is a mailbox. To avoid damaging your emails this file will not be repaired or deleted!
C:\Documents and Settings\HP_Propriétaire\Application Data\Thunderbird\Profiles\6zdggmr1.default\Mail\Local Folders\Trash
[0] Archive type: Netscape/Mozilla Mailbox
--> Mailbox_[Message-ID: <200901300524.n0U5Owgn019815@smtp05.msg.oleane.][From: 06271JH <06271JH@AAO.R>][Subject: LANGUAGE]3928.mim
[1] Archive type: MIME
--> rowspan.bat
[DETECTION] Contains recognition pattern of the WORM/Klez.E worm
[WARNING] This file is a mailbox. To avoid damaging your emails this file will not be repaired or deleted!
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avnotify.exe
[WARNING] The file could not be opened!
Begin scan in 'D:\' <HP_RECOVERY>
End of the scan: dimanche 1 février 2009 09:22
Used time: 1:38:49 Hour(s)
The scan has been done completely.
4209 Scanning directories
369355 Files were scanned
2 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
0 files were moved to quarantine
0 files were renamed
2 Files cannot be scanned
369351 Files not concerned
24246 Archives were scanned
8 Warnings
0 Notes
A voir également:
- Virus WORM/Klez.E
- Virus mcafee - Accueil - Piratage
- Virus informatique - Guide
- Panda anti virus gratuit - Télécharger - Antivirus & Antimalwares
- Undisclosed-recipients virus - Guide
- Ordinateur bloqué virus - Accueil - Arnaque
14 réponses
Bonjour
fait un scan avec le lien suivant.Il doit t'éliminer se satané virus.
https://www.trendmicro.com/en_us/forHome/products/housecall.html
a+
fait un scan avec le lien suivant.Il doit t'éliminer se satané virus.
https://www.trendmicro.com/en_us/forHome/products/housecall.html
a+
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
Ai effectué
-Antikez
-FixKlez
Windows Live Onecare
Tous mes logiciels sont à jour
Virus toujours là, continue à chercher
Merci de votre coopération
-Antikez
-FixKlez
Windows Live Onecare
Tous mes logiciels sont à jour
Virus toujours là, continue à chercher
Merci de votre coopération
J'ai arrêté trend micro, il ne fait pas le scan en ligne.
Il,m'a fait supprimer ZoneAlarm, Antivir et j'arrivais à Spybot lorsque j'ai pris la décision de stopper l'installation de Trend.
J'ai vidé ma boite inbox mais Worm/klez.E est toujours là
Il,m'a fait supprimer ZoneAlarm, Antivir et j'arrivais à Spybot lorsque j'ai pris la décision de stopper l'installation de Trend.
J'ai vidé ma boite inbox mais Worm/klez.E est toujours là
N'ai pas compris le principe vue que l'analyse se fait sur C mais ai fait la manipulation tout en étant en mode expert. Analyse terminée, ai supprimé ce que Spybot m'a trouvé et ai redémarrer le PC et Klez toujours présent.
Supprimer les messages ne suffit pas dans Thundebird.
En vidant la poubelle le mail devient invisible mais est toujours présent.
Pour le supprimer complètement, il faut compacter le dossier dans lequel il se trouve.
Perso j'ai compacté courrier entrant, envoyé et corbeille par un clique droit de la souris sur chacun des dossiers
et compacter
Ceci étant fait, le virus Worm/Klez.E a disparu
Merci à Nanard et Redbart pour s'être attardé sur mon problème
En vidant la poubelle le mail devient invisible mais est toujours présent.
Pour le supprimer complètement, il faut compacter le dossier dans lequel il se trouve.
Perso j'ai compacté courrier entrant, envoyé et corbeille par un clique droit de la souris sur chacun des dossiers
et compacter
Ceci étant fait, le virus Worm/Klez.E a disparu
Merci à Nanard et Redbart pour s'être attardé sur mon problème
n'oublie pas de supprimer les points de restauration dans lesquels le ver a pus être sauvegardé à ton insu
pour les infections futures :
http://www.inoculer.com/antivirus.php3
pour les infections futures :
http://www.inoculer.com/antivirus.php3