Mbam-log rapport d'analyse besoin d'aide svp
titebrunette75
-
sephyroth21 Messages postés 842 Statut Membre -
sephyroth21 Messages postés 842 Statut Membre -
Bonjour,
voici mon rapport d'analyse je n'y comprend pas grand chose quelqun peu m'aider svp
Malwarebytes' Anti-Malware 1.41
Version de la base de données: 3281
Windows 5.1.2600 Service Pack 2
02/12/2009 22:27:36
mbam-log-2009-12-02 (22-27-35).txt
Type de recherche: Examen rapide
Eléments examinés: 113676
Temps écoulé: 12 minute(s), 40 second(s)
Processus mémoire infecté(s): 3
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 6
Valeur(s) du Registre infectée(s): 6
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 1
Fichier(s) infecté(s): 13
Processus mémoire infecté(s):
C:\WINDOWS\system32\av_md.exe (Trojan.Inject) -> Unloaded process successfully.
C:\Documents and Settings\btis\av_md.exe (Trojan.Inject) -> Unloaded process successfully.
C:\WINDOWS\wind7upd.exe (Trojan.Agent) -> Unloaded process successfully.
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{19127ad2-394b-70f5-c650-b97867baa1f7} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{43bf8cd1-c5d5-2230-7bb2-98f22c2b7dc6} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{494e6cec-7483-a4ee-0938-895519a84bc7} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{19127ad2-394b-70f5-c650-b97867baa1f7} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{43bf8cd1-c5d5-2230-7bb2-98f22c2b7dc6} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{494e6cec-7483-a4ee-0938-895519a84bc7} (Backdoor.Bot) -> Quarantined and deleted successfully.
Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\av_md (Trojan.Inject) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\av_md (Trojan.Inject) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network\UID (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Microsoft Driver Setup (Worm.Palevo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Microsoft Driver Setup (Worm.Palevo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Regedit32 (Trojan.Agent) -> Delete on reboot.
Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Hijack.Userinit) -> Bad: (C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\sdra64.exe,) Good: (Userinit.exe) -> Quarantined and deleted successfully.
Dossier(s) infecté(s):
C:\Documents and Settings\btis\Application Data\DriveCleaner 2006 Free (Rogue.DriveCleaner) -> Quarantined and deleted successfully.
Fichier(s) infecté(s):
C:\WINDOWS\system32\av_md.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Documents and Settings\btis\av_md.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\iehn.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\0.exe (Trojan.Buzus) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\autorun.inf (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\bEvtService.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\btis\oashdihasidhasuidhiasdhiashdiuasdhasd (Malware.Trace) -> Quarantined and deleted successfully.
C:\Documents and Settings\LocalService.AUTORITE NT\oashdihasidhasuidhiasdhiashdiuasdhasd (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\msdrv32.exe (Worm.Palevo) -> Quarantined and deleted successfully.
C:\WINDOWS\wind7upd.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\250.exe (Rootkit.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\390.exe (Rootkit.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\859.exe (Rootkit.Agent) -> Quarantined and deleted successfully.
voici mon rapport d'analyse je n'y comprend pas grand chose quelqun peu m'aider svp
Malwarebytes' Anti-Malware 1.41
Version de la base de données: 3281
Windows 5.1.2600 Service Pack 2
02/12/2009 22:27:36
mbam-log-2009-12-02 (22-27-35).txt
Type de recherche: Examen rapide
Eléments examinés: 113676
Temps écoulé: 12 minute(s), 40 second(s)
Processus mémoire infecté(s): 3
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 6
Valeur(s) du Registre infectée(s): 6
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 1
Fichier(s) infecté(s): 13
Processus mémoire infecté(s):
C:\WINDOWS\system32\av_md.exe (Trojan.Inject) -> Unloaded process successfully.
C:\Documents and Settings\btis\av_md.exe (Trojan.Inject) -> Unloaded process successfully.
C:\WINDOWS\wind7upd.exe (Trojan.Agent) -> Unloaded process successfully.
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{19127ad2-394b-70f5-c650-b97867baa1f7} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{43bf8cd1-c5d5-2230-7bb2-98f22c2b7dc6} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{494e6cec-7483-a4ee-0938-895519a84bc7} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{19127ad2-394b-70f5-c650-b97867baa1f7} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{43bf8cd1-c5d5-2230-7bb2-98f22c2b7dc6} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{494e6cec-7483-a4ee-0938-895519a84bc7} (Backdoor.Bot) -> Quarantined and deleted successfully.
Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\av_md (Trojan.Inject) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\av_md (Trojan.Inject) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network\UID (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Microsoft Driver Setup (Worm.Palevo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Microsoft Driver Setup (Worm.Palevo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Regedit32 (Trojan.Agent) -> Delete on reboot.
Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Hijack.Userinit) -> Bad: (C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\sdra64.exe,) Good: (Userinit.exe) -> Quarantined and deleted successfully.
Dossier(s) infecté(s):
C:\Documents and Settings\btis\Application Data\DriveCleaner 2006 Free (Rogue.DriveCleaner) -> Quarantined and deleted successfully.
Fichier(s) infecté(s):
C:\WINDOWS\system32\av_md.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Documents and Settings\btis\av_md.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\iehn.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\0.exe (Trojan.Buzus) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\autorun.inf (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\bEvtService.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\btis\oashdihasidhasuidhiasdhiashdiuasdhasd (Malware.Trace) -> Quarantined and deleted successfully.
C:\Documents and Settings\LocalService.AUTORITE NT\oashdihasidhasuidhiasdhiashdiuasdhasd (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\msdrv32.exe (Worm.Palevo) -> Quarantined and deleted successfully.
C:\WINDOWS\wind7upd.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\250.exe (Rootkit.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\390.exe (Rootkit.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\859.exe (Rootkit.Agent) -> Quarantined and deleted successfully.
A voir également:
- Mbam-log rapport d'analyse besoin d'aide svp
- Analyse composant pc - Guide
- Analyse disque dur - Télécharger - Informations & Diagnostic
- Echec de l'analyse antivirus - Astuces et Solutions
- Un exemple de rapport de travail ✓ - Forum Word
- Analyse performance pc - Guide
66 réponses
salut ! donc voila, en quelques mots, malwarebytes vient de detecter des trojans sur ton pc et a nettoyés les fichiers infectés et les clefs de registres incriminées ....
merci de me repondre si rapidement c'est cool.... le truc c'est qu'il ma dit que y a des trucs qui na pas pu supprimer
ok c'est normal car le système est demarré et que les fichiers incriminés sont en cours d'utilisation par le système! essaie de faire une analyse en mode sans echec
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
je vais vider de suite merci pour le conseil;) Sinon la maintenant je suis entrain de scanner l'ordi avec bitdefender je mettrais le rapport ensuite merci de votre aide je me sent moins seul d'un coup lol
oki faut que je demarre l'ordi en mode sans echec c'est ca? ensuite je relance l'analyse si j'ai bien compris....
oui tu demarre en mode sans echec et tu relance une analyse! a savoir que bitdefender ne fonctionne pas en mode sans echec donc lance une analyse avec malwarebyte's
oki merci à la base j'ai fait ca parceque mon ordi étais trop lent il rame trop la je sent deja que ca lui à fait du bien l'analyse
lol deja hier soir j'ai galerer avec mon ordi parcequ'il ramer trop et se soir c'est pas finit mdr non mais bon si c'est pour le nettoyer tant mieux apres ca iras mieux;)
C:\WINDOWS\system32\drivers\250.exe (Rootkit.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\390.exe (Rootkit.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\859.exe (Rootkit.Agent) -> Quarantined and deleted successfully.
je pense qu'il va falloir passer autre chose que bit defender
C:\WINDOWS\system32\drivers\390.exe (Rootkit.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\859.exe (Rootkit.Agent) -> Quarantined and deleted successfully.
je pense qu'il va falloir passer autre chose que bit defender