2 virus détectés!!

Résolu/Fermé
Ayme12 - 28 févr. 2009 à 11:43
 Utilisateur anonyme - 28 févr. 2009 à 12:18
Bonjour,
hier j'ai fait une analyse de mon PC avec antivir, et surprise, il m'a trouvé 2 virus, alors que je ne m'était pas servi de mon PC depuis 2 semaines et que je n'avait rien avant. Donc voila j'ai supprimé les 2 avec antivir, mais je ne sais pas si je suis toujours infecté ou pas. Si ca peut vous aider, je poste le rapport d'antivir à la fin. Il y a 1 des 2 virus que j'ai d'abord placé en quarantaine, puis supprimé.



Avira AntiVir Personal
Report file date: vendredi 27 février 2009 19:29

Scanning for 1270875 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows Vista
Windows version: (Service Pack 1) [6.0.6001]
Boot mode: Normally booted
Username: SYSTEM
Computer name: PC-DE-AYMERIC

Version information:
BUILD.DAT : 8.2.0.337 16934 Bytes 18/11/2008 13:05:00
AVSCAN.EXE : 8.1.4.10 315649 Bytes 25/11/2008 18:48:05
AVSCAN.DLL : 8.1.4.0 40705 Bytes 23/07/2008 09:38:24
LUKE.DLL : 8.1.4.5 164097 Bytes 23/07/2008 09:38:24
LUKERES.DLL : 8.1.4.0 12033 Bytes 23/07/2008 09:38:24
ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 15:49:48
ANTIVIR1.VDF : 7.1.2.12 3336192 Bytes 11/02/2009 19:44:21
ANTIVIR2.VDF : 7.1.2.55 248832 Bytes 20/02/2009 18:26:48
ANTIVIR3.VDF : 7.1.2.95 183808 Bytes 27/02/2009 18:26:56
Engineversion : 8.2.0.98
AEVDF.DLL : 8.1.1.0 106868 Bytes 30/01/2009 18:45:23
AESCRIPT.DLL : 8.1.1.56 352634 Bytes 27/02/2009 18:28:10
AESCN.DLL : 8.1.1.7 127347 Bytes 13/02/2009 19:44:38
AERDL.DLL : 8.1.1.3 438645 Bytes 06/11/2008 19:27:50
AEPACK.DLL : 8.1.3.8 397684 Bytes 05/02/2009 16:59:53
AEOFFICE.DLL : 8.1.0.36 196987 Bytes 27/02/2009 18:27:56
AEHEUR.DLL : 8.1.0.100 1618295 Bytes 27/02/2009 18:27:44
AEHELP.DLL : 8.1.2.2 119158 Bytes 27/02/2009 18:27:24
AEGEN.DLL : 8.1.1.22 336245 Bytes 27/02/2009 18:27:20
AEEMU.DLL : 8.1.0.9 393588 Bytes 15/10/2008 16:13:15
AECORE.DLL : 8.1.6.6 176501 Bytes 27/02/2009 18:27:03
AEBB.DLL : 8.1.0.3 53618 Bytes 15/10/2008 16:13:13
AVWINLL.DLL : 1.0.0.12 15105 Bytes 23/07/2008 09:38:24
AVPREF.DLL : 8.0.2.0 38657 Bytes 23/07/2008 09:38:24
AVREP.DLL : 8.0.0.2 98344 Bytes 04/08/2008 15:59:54
AVREG.DLL : 8.0.0.1 33537 Bytes 23/07/2008 09:38:24
AVARKT.DLL : 1.0.0.23 307457 Bytes 25/05/2008 13:41:23
AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 23/07/2008 09:38:24
SQLITE3.DLL : 3.3.17.1 339968 Bytes 25/05/2008 13:41:26
SMTPLIB.DLL : 1.2.0.23 28929 Bytes 23/07/2008 09:38:24
NETNT.DLL : 8.0.0.1 7937 Bytes 25/05/2008 13:41:26
RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 23/07/2008 09:38:19
RCTEXT.DLL : 8.0.52.0 86273 Bytes 23/07/2008 09:38:19

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, E:,
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: on
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: vendredi 27 février 2009 19:29

Starting search for hidden objects.
'73918' objects were checked, '0' hidden objects were found.

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'TrustedInstaller.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
Scan process 'SynTPHelper.exe' - '1' Module(s) have been scanned
Scan process 'CCC.exe' - '1' Module(s) have been scanned
Scan process 'Adobe AIR Updater.exe' - '1' Module(s) have been scanned
Scan process 'unsecapp.exe' - '1' Module(s) have been scanned
Scan process 'CFSwMgr.exe' - '1' Module(s) have been scanned
Scan process 'CEC_MAIN.exe' - '1' Module(s) have been scanned
Scan process 'wmpnetwk.exe' - '1' Module(s) have been scanned
Scan process 'GoogleDesktop.exe' - '1' Module(s) have been scanned
Scan process 'ehmsas.exe' - '1' Module(s) have been scanned
Scan process 'soffice.bin' - '1' Module(s) have been scanned
Scan process 'sidebar.exe' - '1' Module(s) have been scanned
Scan process 'soffice.exe' - '1' Module(s) have been scanned
Scan process 'Canal Widget.exe' - '1' Module(s) have been scanned
Scan process 'wmpnscfg.exe' - '1' Module(s) have been scanned
Scan process 'TeaTimer.exe' - '1' Module(s) have been scanned
Scan process 'ehtray.exe' - '1' Module(s) have been scanned
Scan process 'TOSCDSPD.exe' - '1' Module(s) have been scanned
Scan process 'sidebar.exe' - '1' Module(s) have been scanned
Scan process 'AAWTray.exe' - '1' Module(s) have been scanned
Scan process 'TCrdMain.exe' - '1' Module(s) have been scanned
Scan process 'SmoothView.exe' - '1' Module(s) have been scanned
Scan process 'TPwrMain.exe' - '1' Module(s) have been scanned
Scan process 'HDMICtrlMan.exe' - '1' Module(s) have been scanned
Scan process 'MOM.exe' - '1' Module(s) have been scanned
Scan process 'traybar.exe' - '1' Module(s) have been scanned
Scan process 'SynTPEnh.exe' - '1' Module(s) have been scanned
Scan process 'GoogleDesktop.exe' - '1' Module(s) have been scanned
Scan process 'PicasaMediaDetector.exe' - '1' Module(s) have been scanned
Scan process 'NDSTray.exe' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'MSASCui.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'dwm.exe' - '1' Module(s) have been scanned
Scan process 'taskeng.exe' - '1' Module(s) have been scanned
Scan process 'WmiPrvSE.exe' - '1' Module(s) have been scanned
Scan process 'unsecapp.exe' - '1' Module(s) have been scanned
Scan process 'SDWinSec.exe' - '1' Module(s) have been scanned
Scan process 'XAudio.exe' - '1' Module(s) have been scanned
Scan process 'SearchIndexer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'ULCDRSvr.exe' - '1' Module(s) have been scanned
Scan process 'TosIPCSrv.exe' - '1' Module(s) have been scanned
Scan process 'TosCoSrv.exe' - '1' Module(s) have been scanned
Scan process 'TODDSrv.exe' - '1' Module(s) have been scanned
Scan process 'TNaviSrv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'o2flash.exe' - '1' Module(s) have been scanned
Scan process 'taskeng.exe' - '1' Module(s) have been scanned
Scan process 'CFSvcs.exe' - '1' Module(s) have been scanned
Scan process 'CanalPlus.VOD.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'AAWService.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'Ati2evxx.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'SLsvc.exe' - '1' Module(s) have been scanned
Scan process 'audiodg.exe' - '0' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'Ati2evxx.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'PresentationFontCache.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsm.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'wininit.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
81 processes with 81 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!

Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Boot sector 'E:\'
[INFO] No virus was found!

Starting to scan the registry.
The registry was scanned ( '47' files ).


Starting the file scan:

Begin scan in 'C:\' <Vista>
C:\hiberfil.sys
[WARNING] The file could not be opened!
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avnotify.exe
[WARNING] The file could not be opened!
C:\Program Files\Navilog1\Backupnavi\zuytgrm.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE] The file was deleted!
C:\Users\metro\AppData\Local\Microsoft\Windows\WER\ReportArchive\Report0c05e556\Report.cab
[0] Archive type: CAB (Microsoft)
--> zuytgrm.exe.xor
[1] Archive type: HIDDEN
--> MEM\AV00023773.AV$
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE] The file was moved to '4a1843a1.qua'!
Begin scan in 'E:\' <Data>


End of the scan: vendredi 27 février 2009 21:05
Used time: 1:36:08 Hour(s)

The scan has been done completely.

16643 Scanning directories
326614 Files were scanned
2 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
1 files were deleted
0 files were repaired
1 files were moved to quarantine
0 files were renamed
3 Files cannot be scanned
326609 Files not concerned
2403 Archives were scanned
3 Warnings
2 Notes
73918 Objects were scanned with rootkit scan
0 Hidden objects were found
A voir également:

7 réponses

Utilisateur anonyme
28 févr. 2009 à 11:48
Tu as participé a une désinfection il y a longtemps ?
C'est rien, c'est juste un outils de désinfection donc un faux positif
0
Qu'ententez-vous par "participé à une désinfection"?
0
Utilisateur anonyme
28 févr. 2009 à 11:54
Tu t'ai fait aidé a nettoyer ton ordi
0
Oui, il y a environ 1 mois. On m'a fait utiliser Ccleaner et HijackThis.
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Utilisateur anonyme
28 févr. 2009 à 12:01
Et Navilog1 je parie
0
Non, mais à une précédente désinfection on me l'avait fait utiliser. Mais bon c'était il y a longtemps, et j'ai fait beaucoup d'analyses entre-temps. C'est pas bizarre que ça me le détecte que maintenant?
0
Utilisateur anonyme
28 févr. 2009 à 12:18
Pas grave, tu n'a pas de virus !
0