[Virus] Scan avec ediwo de linkys125

Question

Désolé j'edit ce message car je pensai que l'autre n'avai pas fonctionner, desolé d'avoir poster 2 fois le meme message... Bonjour, Je viens de lire sur le forum : (Virus] Méthode préliminaire de désinfection - Version Fr une methode pour nettoyer mon pc suite a un plantage de zone alarm qui ne s'affichai plus, et que je n'est pas pu reinstaller. Emule ne fonctionnait plus egalement. j'ai donc fait comme il est dis sur le forum scanné avec ewido et vous postez le resultat sur ce forum, donc le voici en sperant avoir fait tout ce qu'il fallai: --------------------------------------------------------- ewido anti-spyware - Scan Report --------------------------------------------------------- + Created at: 21:02:05 22/08/2006 + Scan result: C:\Program Files\INSTAFINK -> Adware.404Search : No action taken. C:\Program Files\INSTAFINK\Cache -> Adware.404Search : No action taken. C:\Program Files\INSTAFINK\Cache\ErrorLog.txt -> Adware.404Search : No action taken. F:\logiciel\logiciel telecharger\gozilla.exe -> Adware.EZula : No action taken. F:\logiciel\logiciel telecharger\fond decran\AquaticDashbar_s_Inst-44.exe -> Adware.Gator : No action taken. F:\jeux\billard\ShowcaseSnookerSetup-dm.exe -> Adware.Trymedia : No action taken. F:\logiciel\logiciel telecharger\msn\MsgPlus-221.exe/70000011.exe -> Downloader.Swizzor.g : No action taken. C:\Documents and Settings\linkys125\Local Settings\Temporary Internet Files\Content.IE5\GH0SBU4E\popup[1].htm -> Hijacker.Agent.a : No action taken. F:\logiciel\logiciel telecharger\edonkey\maj_auto_edonkey_server.exe/URL2FILE.exe -> Not-A-Virus.Downloader.Win32.Url2File.a : No action taken. C:\Documents and Settings\linkys125\Cookies\linkys125@247realmedia[2].txt -> TrackingCookie.247realmedia : No action taken. C:\Documents and Settings\linkys125\Cookies\linkys125@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : No action taken. C:\Documents and Settings\linkys125\Cookies\linkys125@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : No action taken. C:\Documents and Settings\linkys125\Cookies\linkys125@weborama[2].txt -> TrackingCookie.Weborama : No action taken. ::Report end apres j'ai fait le scan de bitdefender: BitDefender Online Scanner -Scan Report

BitDefender Online Scanner

Scan report generated at: Tue, Aug 22, 2006 - 23:40:42

Scan path: C:\;D:\;E:\;F:\;G:\;H:\;I:\;J:\;K:\;L:\;

Statistics
Time	02:33:04
Files	583755
Folders	7635
Boot Sectors	9
Archives	5013
Packed Files	39162

Results
Identified Viruses	3
Infected Files	3
Suspect Files	0
Warnings	0
Disinfected	0
Deleted Files	3

Engines Info
Virus Definitions	450210
Engine build	AVCORE v1.0 (build 2310) (i386) (Apr 17 2006 16:24:38)
Scan plugins	13
Archive plugins	39
Unpack plugins	5
E-mail plugins	6
System plugins	1

Scan Settings
First Action	Disinfect
Second Action	Delete
Heuristics	Yes
Enable Warnings	Yes
Scanned Extensions	*;
Exclude Extensions
Scan Emails	Yes
Scan Archives	Yes
Scan Packed	Yes
Scan Files	Yes
Scan Boot	Yes

Scanned File	Status
C:\Documents and Settings\linkys125\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv612.jar-1b06d86c-4b9bf343.zip=>Matrix.class	Infected with: Java.Trojan.Downloader.OpenStream.C
C:\Documents and Settings\linkys125\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv612.jar-1b06d86c-4b9bf343.zip=>Matrix.class	Disinfection failed
C:\Documents and Settings\linkys125\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv612.jar-1b06d86c-4b9bf343.zip=>Matrix.class	Deleted
C:\Documents and Settings\linkys125\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv612.jar-1b06d86c-4b9bf343.zip	Updated
C:\Program Files\ewido anti-spyware 4.0\Quarantine\fil10A24040.dat=>(gzip)=>REMOVED_NULLS	Detected with: Application.JS.ForcePopup.A
C:\Program Files\ewido anti-spyware 4.0\Quarantine\fil10A24040.dat=>(gzip)=>REMOVED_NULLS	Disinfection failed
C:\Program Files\ewido anti-spyware 4.0\Quarantine\fil10A24040.dat=>(gzip)=>REMOVED_NULLS	Deleted
C:\Program Files\ewido anti-spyware 4.0\Quarantine\fil10A24040.dat=>(gzip)	Update failed
F:\logiciel\logiciel telecharger\kazaa lite\kazaaspeedup.exe=>(VISE Installer o)=>msbb.exe	Infected with: Trojan.Dialer.BJ
F:\logiciel\logiciel telecharger\kazaa lite\kazaaspeedup.exe=>(VISE Installer o)=>msbb.exe	Disinfection failed
F:\logiciel\logiciel telecharger\kazaa lite\kazaaspeedup.exe=>(VISE Installer o)=>msbb.exe	Deleted
F:\logiciel\logiciel telecharger\kazaa lite\kazaaspeedup.exe=>(VISE Installer o)	Update failed

apres jai fait le scan de hjackthis: Logfile of HijackThis v1.99.1 Scan saved at 17:08:11, on 23/08/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\SYSTEM32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\drivers\CDAC11BA.EXE C:\WINDOWS\system32\CTsvcCDA.EXE C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe C:\WINDOWS\system32 vsvc32.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\MsPMSPSv.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\system32\CTHELPER.EXE C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\D-Tools\daemon.exe C:\Program Files\eoRezo\EoEngine.exe C:\Program Files\QuickTime\qttask.exe C:\WINDOWS\system32\devldr32.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Logitech\SetPoint\SetPoint.exe C:\Program Files\Aide mémoire\TrayIcon.exe C:\Program Files\WinBar\WinBar.exe C:\Program Files\Fichiers communs\Logitech\KHAL\KHALMNPR.EXE C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\ewido anti-spyware 4.0\guard.exe C:\Program Files\ewido anti-spyware 4.0\ewido.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\WINDOWS\system32\NOTEPAD.EXE C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE C:\WINDOWS\system32\NOTEPAD.EXE R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.free.fr/freebox/index.html R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\PROGRA~1\eoRezo\EoAdv\EOREZO~1.DLL O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe O4 - HKLM\..\Run: [DevconDefaultDB] C:\WINDOWS\READREG /PSCONV={NO} /NO_DEFPS O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe" O4 - HKLM\..\Run: [Norman ZANDA] C:\Norman\Nvc\BIN\ZLH.EXE /LOAD /SPLASH O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\eoRezo\EoEngine.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized O4 - HKCU\..\Run: [SetDefaultMIDI] MIDIDef.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NVMCTRAY.DLL,NvTaskbarInit O4 - Startup: Aide mémoire.lnk = ? O4 - Startup: WinBar.lnk = C:\Program Files\WinBar\WinBar.exe O4 - Global Startup: eMule.lnk = C:\Program Files\eMule\emule.exe O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader eader_sl.exe O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar oolbar.dll/SEARCH.HTML O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing) O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing) O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O14 - IERESET.INF: START_PAGE_URL=https://www.free.fr/freebox/index.html O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://linkys125.spaces.live.com//PhotoUpload/MsnPUpld.cab O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_s... O16 - DPF: {745395C8-D0E1-4227-8586-624CA9A10A8D} (AxisMediaControl Class) - http://2speed119.axiscam.net:7000/activex/AMC.cab O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://drivers1.free.fr/hardwaredetection.cab O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://camacvt.vmail.ch:82/activex/AxisCamControl.cab O16 - DPF: {9B03C5F1-F5AB-47EE-937D-A8EDA626F876} (Anonymizer Anti-Spyware Scanner) - https://www.zonealarm.com/ O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\NORMAN\Nvc\BIN ipsvc.exe (file missing) O23 - Service: Norman ZANDA - Unknown owner - C:\Norman\Nvc\BIN\Zanda.exe (file missing) O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32 vsvc32.exe Voila en esperant avoir fait tout ce qu'il fallai et ayant bien compris la marche a suivre et que vous allez me repondre. Merci d'avance en tout cas...j'atttend vos reponse avec impatience ...

Regis59 · Answer

Salutrelance ewido et choisis deletecopie colle le rapporta+

[Virus] Scan avec ediwo de linkys125

1 réponse

Votre réponse

Discussions similaires

Newsletters