Virus MSN

Bonjour,

Voici le rapport après avoir passé Antivir. J'ai enlevé les 3 virus en fesant repair all.

Avira AntiVir Personal
Report file date: 5 mai 2009 17:02

Scanning for 1379404 virus strains and unwanted programs.

Licensee : Avira AntiVir Personal - FREE Antivirus
Serial number : 0000149996-ADJIE-0000001
Platform : Windows Vista
Windows version : (plain) [6.0.6000]
Boot mode : Normally booted
Username : SYSTEM
Computer name : PC-DE-PIPEFY

Version information:
BUILD.DAT : 9.0.0.394 17962 Bytes 2009-04-17 11:20:00
AVSCAN.EXE : 9.0.3.5 466689 Bytes 2009-05-05 21:01:16
AVSCAN.DLL : 9.0.3.0 40705 Bytes 2009-02-27 14:58:24
LUKE.DLL : 9.0.3.2 209665 Bytes 2009-02-20 15:35:49
LUKERES.DLL : 9.0.2.0 12033 Bytes 2009-02-27 14:58:52
ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 2008-10-27 16:30:36
ANTIVIR1.VDF : 7.1.2.12 3336192 Bytes 2009-02-11 00:33:26
ANTIVIR2.VDF : 7.1.3.137 1810944 Bytes 2009-04-30 21:01:15
ANTIVIR3.VDF : 7.1.3.157 99840 Bytes 2009-05-05 21:01:15
Engineversion : 8.2.0.160
AEVDF.DLL : 8.1.1.1 106868 Bytes 2009-05-05 21:01:16
AESCRIPT.DLL : 8.1.1.79 385403 Bytes 2009-05-05 21:01:16
AESCN.DLL : 8.1.1.10 127348 Bytes 2009-05-05 21:01:16
AERDL.DLL : 8.1.1.3 438645 Bytes 2008-10-29 22:24:41
AEPACK.DLL : 8.1.3.14 397685 Bytes 2009-05-05 21:01:15
AEOFFICE.DLL : 8.1.0.36 196987 Bytes 2009-02-27 00:01:56
AEHEUR.DLL : 8.1.0.122 1737080 Bytes 2009-05-05 21:01:15
AEHELP.DLL : 8.1.2.2 119158 Bytes 2009-02-27 00:01:56
AEGEN.DLL : 8.1.1.39 348532 Bytes 2009-05-05 21:01:15
AEEMU.DLL : 8.1.0.9 393588 Bytes 2008-10-09 18:32:40
AECORE.DLL : 8.1.6.9 176500 Bytes 2009-05-05 21:01:15
AEBB.DLL : 8.1.0.3 53618 Bytes 2008-10-09 18:32:40
AVWINLL.DLL : 9.0.0.3 18177 Bytes 2008-12-12 12:47:59
AVPREF.DLL : 9.0.0.1 43777 Bytes 2008-12-05 14:32:15
AVREP.DLL : 8.0.0.3 155905 Bytes 2009-01-20 18:34:28
AVREG.DLL : 9.0.0.0 36609 Bytes 2008-12-05 14:32:09
AVARKT.DLL : 9.0.0.3 292609 Bytes 2009-05-05 21:01:16
AVEVTLOG.DLL : 9.0.0.7 167169 Bytes 2009-01-30 14:37:08
SQLITE3.DLL : 3.6.1.0 326401 Bytes 2009-01-28 19:03:49
SMTPLIB.DLL : 9.2.0.25 28417 Bytes 2009-02-02 12:21:33
NETNT.DLL : 9.0.0.0 11521 Bytes 2008-12-05 14:32:10
RCIMAGE.DLL : 9.0.0.21 2438401 Bytes 2009-02-09 15:45:45
RCTEXT.DLL : 9.0.37.0 86785 Bytes 2009-05-05 21:01:14

Configuration settings for the scan:
Jobname.............................: Complete system scan
Configuration file..................: c:\program files\avira\antivir desktop\sysscan.avp
Logging.............................: low
Primary action......................: interactive
Secondary action....................: ignore
Scan master boot sector.............: on
Scan boot sector....................: on
Boot sectors........................: C:, D:,
Process scan........................: on
Scan registry.......................: on
Search for rootkits.................: on
Integrity checking of system files..: off
Scan all files......................: All files
Scan archives.......................: on
Recursion depth.....................: 20
Smart extensions....................: on
Macro heuristic.....................: on
File heuristic......................: medium

Start of the scan: 5 mai 2009 17:02

Starting search for hidden objects.
'81945' objects were checked, '0' hidden objects were found.

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'infocard.exe' - '1' Module(s) have been scanned
Scan process 'iexplore.exe' - '1' Module(s) have been scanned
Scan process 'iexplore.exe' - '1' Module(s) have been scanned
Scan process 'agent.exe' - '1' Module(s) have been scanned
Scan process 'ISUSPM.exe' - '1' Module(s) have been scanned
Scan process 'BndCore.exe' - '1' Module(s) have been scanned
Scan process 'wlcomm.exe' - '1' Module(s) have been scanned
Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
Scan process 'CCC.exe' - '1' Module(s) have been scanned
Scan process 'NMIndexingService.exe' - '1' Module(s) have been scanned
Scan process 'wmpnetwk.exe' - '1' Module(s) have been scanned
Scan process 'lsnfier.exe' - '1' Module(s) have been scanned
Scan process 'quickset.exe' - '1' Module(s) have been scanned
Scan process 'DLG.exe' - '1' Module(s) have been scanned
Scan process 'TeaTimer.exe' - '1' Module(s) have been scanned
Scan process 'wmpnscfg.exe' - '1' Module(s) have been scanned
Scan process 'AAWTray.exe' - '1' Module(s) have been scanned
Scan process 'NMIndexStoreSvr.exe' - '1' Module(s) have been scanned
Scan process 'WeatherEye.exe' - '1' Module(s) have been scanned
Scan process 'ashDisp.exe' - '1' Module(s) have been scanned
Scan process 'lxdjamon.exe' - '1' Module(s) have been scanned
Scan process 'MOM.exe' - '1' Module(s) have been scanned
Scan process 'PCMService.exe' - '1' Module(s) have been scanned
Scan process 'issch.exe' - '1' Module(s) have been scanned
Scan process 'DellWMgr.exe' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'sttray.exe' - '1' Module(s) have been scanned
Scan process 'OEM02Mon.exe' - '1' Module(s) have been scanned
Scan process 'SynTPEnh.exe' - '1' Module(s) have been scanned
Scan process 'MSASCui.exe' - '1' Module(s) have been scanned
Scan process 'taskeng.exe' - '1' Module(s) have been scanned
Scan process 'WmiPrvSE.exe' - '1' Module(s) have been scanned
Scan process 'ashWebSv.exe' - '1' Module(s) have been scanned
Scan process 'ashMaiSv.exe' - '1' Module(s) have been scanned
Scan process 'unsecapp.exe' - '1' Module(s) have been scanned
Scan process 'SDWinSec.exe' - '1' Module(s) have been scanned
Scan process 'Bandoo.exe' - '1' Module(s) have been scanned
Scan process 'XAudio.exe' - '1' Module(s) have been scanned
Scan process 'SearchIndexer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'stacsv.exe' - '1' Module(s) have been scanned
Scan process 'SeaPort.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'IoctlSvc.exe' - '1' Module(s) have been scanned
Scan process 'NBService.exe' - '1' Module(s) have been scanned
Scan process 'lxdjcoms.exe' - '1' Module(s) have been scanned
Scan process 'AEstSrv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'taskeng.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'AAWService.exe' - '1' Module(s) have been scanned
Scan process 'ashServ.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'dwm.exe' - '1' Module(s) have been scanned
Scan process 'Ati2evxx.exe' - '1' Module(s) have been scanned
Scan process 'wlanext.exe' - '1' Module(s) have been scanned
Scan process 'aswUpdSv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'SLsvc.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'audiodg.exe' - '0' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'Ati2evxx.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'lsm.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'wininit.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
84 processes with 84 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!

Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Boot sector 'D:\'
[INFO] No virus was found!

Starting to scan executable files (registry).
The registry was scanned ( '52' files ).

Starting the file scan:

Begin scan in 'C:\' <OS>
C:\hiberfil.sys
[WARNING] The file could not be opened!
[NOTE] This file is a Windows system file.
[NOTE] This file cannot be opened for scanning.
C:\pagefile.sys
[WARNING] The file could not be opened!
[NOTE] This file is a Windows system file.
[NOTE] This file cannot be opened for scanning.
C:\Users\Pipefy\Downloads\Eset Nod32 Antivirus 3.0.621 + Fix ( Vista + XP )24647 days.rar
[0] Archive type: RAR
--> Eset Nod32 Antivirus 3.0.621 + Fix ( Vista + XP )24647 days\G.R_ESET.BREAK.v1.0.exe
[DETECTION] Contains recognition pattern of the DR/Vundo.flg.5 dropper
Begin scan in 'D:\' <RECOVERY>
D:\Nero Ultra Edition 8.3.2.1-KeyGen + Activation + Serials\Nero+Keygen\keymaker.exe
[DETECTION] Is the TR/Agent.126976.F Trojan
D:\Nero Ultra Edition 8.3.2.1-KeyGen + Activation + Serials\Nero+Keygen\Nero-8.3.2.1_eng_trial_2.exe
[DETECTION] Is the TR/Dropper.Gen Trojan

Beginning disinfection:
C:\Users\Pipefy\Downloads\Eset Nod32 Antivirus 3.0.621 + Fix ( Vista + XP )24647 days.rar
[NOTE] The file was moved to '4a65b779.qua'!
D:\Nero Ultra Edition 8.3.2.1-KeyGen + Activation + Serials\Nero+Keygen\keymaker.exe
[DETECTION] Is the TR/Agent.126976.F Trojan
[NOTE] The file was moved to '4a79b774.qua'!
D:\Nero Ultra Edition 8.3.2.1-KeyGen + Activation + Serials\Nero+Keygen\Nero-8.3.2.1_eng_trial_2.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE] The file was moved to '4a72b77b.qua'!

End of the scan: 5 mai 2009 18:01
Used time: 57:20 Minute(s)

The scan has been done completely.

18710 Scanned directories
224303 Files were scanned
3 Viruses and/or unwanted programs were found
0 Files were classified as suspicious
0 files were deleted
0 Viruses and unwanted programs were repaired
3 Files were moved to quarantine
0 Files were renamed
2 Files cannot be scanned
224298 Files not concerned
1110 Archives were scanned
2 Warnings
5 Notes
81945 Objects were scanned with rootkit scan
0 Hidden objects were found

Bonjour,

Télécharge et installe Antivir : clique sur ce lien ( https://www.clubic.com/telecharger-fiche10821-avira-antivir-personal-free-antivirus.html ), et clique sur "Lancer le téléchargement".

Installe le programme, et lance une analyse complète.
Normalement, Antivir devrait trouver et éradiquer les virus et/ou chevaux de troie.

jvé t'aidé, surtout ne click pa sur ce lien, sinon c'est l'infection directe

Attention, tes virus ont simplement été désactivés et déplacés en quarantaine. Il te faut les supprimer pour avoir l'esprit tranquille (je n'ai pas confiance en la quarantaine...).

Ouvre Antivir, cherche la quarantaine, ouvre la, et supprime tes trois fichiers.

Cette fois c'est bon !

Bonjour,

J'ai tout fait ce que vous m'avez dit et il envoyait encore des liens sur msn. Il possède un portable DELL alors j'ai fait la restauration à la sortie de l'usine. Je croyais que mon problème serait règlé, mais non ce matin il envoie d'autre lien. Ce n'est plus le même...

Pourquoi après un formatage il le fait encore...

Merci!