Infection

alcath94 Messages postés 201 Statut Membre -  
jlpjlp Messages postés 52399 Statut Contributeur sécurité -
Bonjour,
Suite a un scan effectué avec AVIRA ANTIVIR,celui ci a detecté plusieurs problèmes.
Quelqu'un peut il m'aidé à solutionner ce souci.
je joint le rapport et vous remercie d'avance.

Avira AntiVir Personal
Report file date: jeudi 21 mai 2009 18:53

Scanning for 1354886 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 3) [5.1.2600]
Boot mode: Normally booted
Username: SYSTEM
Computer name: PC1ALAIN

Version information:
BUILD.DAT : 8.1.00.295 16479 Bytes 09/04/2008 16:24:00
AVSCAN.EXE : 8.1.2.12 311553 Bytes 18/03/2008 09:02:56
AVSCAN.DLL : 8.1.1.0 53505 Bytes 07/02/2008 08:43:37
LUKE.DLL : 8.1.2.9 151809 Bytes 28/02/2008 08:41:23
LUKERES.DLL : 8.1.2.1 12033 Bytes 21/02/2008 08:28:40
ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 10:29:38
ANTIVIR1.VDF : 7.1.2.12 3336192 Bytes 11/02/2009 18:32:40
ANTIVIR2.VDF : 7.1.3.0 1330176 Bytes 01/04/2009 11:09:26
ANTIVIR3.VDF : 7.1.3.59 273920 Bytes 16/04/2009 07:11:34
Engineversion : 8.2.0.143
AEVDF.DLL : 8.1.1.0 106868 Bytes 30/01/2009 14:56:18
AESCRIPT.DLL : 8.1.1.75 373113 Bytes 14/04/2009 11:42:02
AESCN.DLL : 8.1.1.10 127348 Bytes 03/04/2009 16:20:00
AERDL.DLL : 8.1.1.3 438645 Bytes 05/11/2008 06:43:26
AEPACK.DLL : 8.1.3.12 397687 Bytes 03/04/2009 16:19:58
AEOFFICE.DLL : 8.1.0.36 196987 Bytes 26/02/2009 18:56:12
AEHEUR.DLL : 8.1.0.116 1708407 Bytes 14/04/2009 11:42:02
AEHELP.DLL : 8.1.2.2 119158 Bytes 26/02/2009 18:56:12
AEGEN.DLL : 8.1.1.34 340340 Bytes 14/04/2009 11:42:00
AEEMU.DLL : 8.1.0.9 393588 Bytes 15/10/2008 09:49:36
AECORE.DLL : 8.1.6.9 176500 Bytes 14/04/2009 11:42:00
AEBB.DLL : 8.1.0.3 53618 Bytes 15/10/2008 09:49:34
AVWINLL.DLL : 1.0.0.7 14593 Bytes 23/01/2008 17:07:53
AVPREF.DLL : 8.0.0.1 25857 Bytes 18/02/2008 10:37:50
AVREP.DLL : 8.0.0.2 98344 Bytes 10/12/2008 16:46:45
AVREG.DLL : 8.0.0.0 30977 Bytes 23/01/2008 17:07:49
AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23
AVEVTLOG.DLL : 8.0.0.11 114945 Bytes 28/02/2008 08:31:31
SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02
SMTPLIB.DLL : 1.2.0.19 28929 Bytes 23/01/2008 17:08:39
NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10
RCIMAGE.DLL : 8.0.0.35 2371841 Bytes 10/03/2008 14:37:25
RCTEXT.DLL : 8.0.32.0 86273 Bytes 06/03/2008 12:02:11

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Deviating risk categories........: +APPL,+GAME,+JOKE,+PCK,+SPR,

Start of the scan: jeudi 21 mai 2009 18:53

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
Scan process 'realsched.exe' - '1' Module(s) have been scanned
Scan process 'OUTLOOK.EXE' - '1' Module(s) have been scanned
Scan process 'WINWORD.EXE' - '1' Module(s) have been scanned
Scan process 'jucheck.exe' - '1' Module(s) have been scanned
Scan process 'usnsvc.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'wmiprvse.exe' - '1' Module(s) have been scanned
Scan process 'wscntfy.exe' - '1' Module(s) have been scanned
Scan process 'vialogsv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'StarWindServiceAE.exe' - '1' Module(s) have been scanned
Scan process 'soffice.bin' - '1' Module(s) have been scanned
Scan process 'soffice.exe' - '1' Module(s) have been scanned
Scan process 'EM_EXEC.EXE' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'GoogleToolbarNotifier.exe' - '1' Module(s) have been scanned
Scan process 'FxSvr2.exe' - '1' Module(s) have been scanned
Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned
Scan process 'TeaTimer.exe' - '1' Module(s) have been scanned
Scan process 'NielsenOnline.exe' - '1' Module(s) have been scanned
Scan process 'jqs.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'NielsenOnline.exe' - '1' Module(s) have been scanned
Scan process 'rundll32.exe' - '1' Module(s) have been scanned
Scan process 'agrsmsvc.exe' - '1' Module(s) have been scanned
Scan process 'raid_tool.exe' - '1' Module(s) have been scanned
Scan process 'MaAgent.exe' - '1' Module(s) have been scanned
Scan process 'SMSTray.exe' - '1' Module(s) have been scanned
Scan process 'AGRSMMSG.exe' - '1' Module(s) have been scanned
Scan process 'mixer.exe' - '1' Module(s) have been scanned
Scan process 'E_FATIADE.EXE' - '1' Module(s) have been scanned
Scan process 'LogiTray.exe' - '1' Module(s) have been scanned
Scan process 'LVCOMSX.EXE' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'iTouch.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
54 processes with 54 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!
Master boot sector HD1
[INFO] No virus was found!
[WARNING] Le périphérique n'est pas prêt.
Master boot sector HD2
[INFO] No virus was found!
[WARNING] Le périphérique n'est pas prêt.
Master boot sector HD3
[INFO] No virus was found!
[WARNING] Le périphérique n'est pas prêt.
Master boot sector HD4
[INFO] No virus was found!
[WARNING] Le périphérique n'est pas prêt.
Master boot sector HD5
[INFO] No virus was found!
[WARNING] Le périphérique n'est pas prêt.

Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!

Starting to scan the registry.
The registry was scanned ( '47' files ).

Starting the file scan:

Begin scan in 'C:\'
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\Program Files\eMule\Incoming\paulo gonzo espelho de agua.mp3
[DETECTION] Contains detection pattern of the exploits EXP/ASF.GetCodec.Gen
[NOTE] The file was moved to '4a8a895a.qua'!
C:\System Volume Information\_restore{395DE750-528D-4EE5-B8BE-64F33A14E0E5}\RP125\A0070072.exe
[DETECTION] Is the Trojan horse TR/Dldr.Agent.49152.K
[NOTE] The file was moved to '4a458c39.qua'!
C:\System Volume Information\_restore{395DE750-528D-4EE5-B8BE-64F33A14E0E5}\RP127\A0070177.exe
[0] Archive type: CAB SFX (self extracting)
--> nswatchdog.exe
[DETECTION] Is the Trojan horse TR/Dldr.Agent.49152.K
[NOTE] The file was moved to '4a458c4d.qua'!
C:\System Volume Information\_restore{395DE750-528D-4EE5-B8BE-64F33A14E0E5}\RP186\A0079300.exe
[DETECTION] Is the Trojan horse TR/Dldr.Agent.49152.K
[NOTE] The file was moved to '4a458d82.qua'!
C:\System Volume Information\_restore{395DE750-528D-4EE5-B8BE-64F33A14E0E5}\RP186\A0079301.dll
[DETECTION] Is the Trojan horse TR/PSW.Magania.awhl
[NOTE] The file was moved to '4a458d85.qua'!
C:\System Volume Information\_restore{395DE750-528D-4EE5-B8BE-64F33A14E0E5}\RP186\A0079302.exe
[DETECTION] Is the Trojan horse TR/Drop.Agent.ahdz
[NOTE] The file was moved to '4a458d87.qua'!
C:\WINDOWS\system32\drivers\sptd.sys
[WARNING] The file could not be opened!

End of the scan: jeudi 21 mai 2009 19:34
Used time: 41:16 min

The scan has been done completely.

5056 Scanning directories
318381 Files were scanned
6 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
6 files were moved to quarantine
0 files were renamed
2 Files cannot be scanned
318375 Files not concerned
1643 Archives were scanned
7 Warnings
6 Notes

1 réponse

jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 040
 
slt

pour antivir active la recherche des rootkits!

Search for rootkits..............: off

__________________

évite de télécharger sur emule ...

___________________

vire ce qui est en quarantaine dans antivir

__________________

Désactive ta restauration systeme puis redemarre ton ordi puis réactive là comme ceci:
https://www.informatruc.com

__________________
internet explorer 8 est sorti ...

___________________

vérifie que antivir ne trouve plus rien

a plus
0