Mbam-log rapport d'analyse besoin d'aide svp
sephyroth21 Messages postés 842 Statut Membre -
voici mon rapport d'analyse je n'y comprend pas grand chose quelqun peu m'aider svp
Malwarebytes' Anti-Malware 1.41
Version de la base de données: 3281
Windows 5.1.2600 Service Pack 2
02/12/2009 22:27:36
mbam-log-2009-12-02 (22-27-35).txt
Type de recherche: Examen rapide
Eléments examinés: 113676
Temps écoulé: 12 minute(s), 40 second(s)
Processus mémoire infecté(s): 3
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 6
Valeur(s) du Registre infectée(s): 6
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 1
Fichier(s) infecté(s): 13
Processus mémoire infecté(s):
C:\WINDOWS\system32\av_md.exe (Trojan.Inject) -> Unloaded process successfully.
C:\Documents and Settings\btis\av_md.exe (Trojan.Inject) -> Unloaded process successfully.
C:\WINDOWS\wind7upd.exe (Trojan.Agent) -> Unloaded process successfully.
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{19127ad2-394b-70f5-c650-b97867baa1f7} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{43bf8cd1-c5d5-2230-7bb2-98f22c2b7dc6} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{494e6cec-7483-a4ee-0938-895519a84bc7} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{19127ad2-394b-70f5-c650-b97867baa1f7} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{43bf8cd1-c5d5-2230-7bb2-98f22c2b7dc6} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{494e6cec-7483-a4ee-0938-895519a84bc7} (Backdoor.Bot) -> Quarantined and deleted successfully.
Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\av_md (Trojan.Inject) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\av_md (Trojan.Inject) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network\UID (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Microsoft Driver Setup (Worm.Palevo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Microsoft Driver Setup (Worm.Palevo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Regedit32 (Trojan.Agent) -> Delete on reboot.
Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Hijack.Userinit) -> Bad: (C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\sdra64.exe,) Good: (Userinit.exe) -> Quarantined and deleted successfully.
Dossier(s) infecté(s):
C:\Documents and Settings\btis\Application Data\DriveCleaner 2006 Free (Rogue.DriveCleaner) -> Quarantined and deleted successfully.
Fichier(s) infecté(s):
C:\WINDOWS\system32\av_md.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Documents and Settings\btis\av_md.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\iehn.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\0.exe (Trojan.Buzus) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\autorun.inf (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\bEvtService.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\btis\oashdihasidhasuidhiasdhiashdiuasdhasd (Malware.Trace) -> Quarantined and deleted successfully.
C:\Documents and Settings\LocalService.AUTORITE NT\oashdihasidhasuidhiasdhiashdiuasdhasd (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\msdrv32.exe (Worm.Palevo) -> Quarantined and deleted successfully.
C:\WINDOWS\wind7upd.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\250.exe (Rootkit.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\390.exe (Rootkit.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\859.exe (Rootkit.Agent) -> Quarantined and deleted successfully.
Configuration: Windows XP Internet Explorer 8.0
- Mbam-log rapport d'analyse besoin d'aide svp
- Rapport de stage - Guide
- Ti college plus log - Forum calculatrices
- Echec de l'analyse antivirus - Astuces et Solutions
- Échec de l'analyse antivirus. ✓ - Forum Antivirus
- Logiciel analyse image - Télécharger - Photo & Graphisme
66 réponses
- 1
- 2
- 3
- 4
Un rapport d'analyse indique une détection par Malwarebytes' Anti-Malware 1.41 sur Windows XP, révélant plusieurs éléments infectés tels que Trojan.Inject et Backdoor.Bot et des modifications du registre. Des fichiers, clés et valeurs du registre ont été mis en quarantaine ou supprimés, notamment des entrées Run et des composants Backdoor.Bot, ainsi que des éléments rootkit détectés. Des conseils recommandent d'effectuer l'analyse en mode sans échec et de prévoir une réinstallation du système après sauvegarde, afin d'éviter des perturbations et des infections récurrentes. Le rapport évoque des processus et des fichiers encore utilisés par le système, et suggère de vérifier des analyses complémentaires et les rapports d'un antivirus supplémentaire comme Bitdefender.
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre questionC:\WINDOWS\system32\drivers\390.exe (Rootkit.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\859.exe (Rootkit.Agent) -> Quarantined and deleted successfully.
je pense qu'il va falloir passer autre chose que bit defender
- 1
- 2
- 3
- 4