Virus nokia...

gazoui Messages postés 2 Statut Membre -  
 gazoui -
Bonjour, bonjour!

mon ordinateur est infecté par le virus nokia...(sic)
alors,
suivant les conseils prodigués dans les autres posts;

j'ai téléchargé msnfix,
rapport ci-dessous:

MSNFix 1.556

C:\Documents and Settings\Admin\Bureau\MSNFix\MSNFix
Fix exécuté le 03/11/2007 - 19:34:31,56 By Admin
mode normal

************************ Recherche les fichiers présents

... C:\log.txt

************************ MSNCHK ***** /!\ beta test /!\

************************ Recherche les dossiers présents

Aucun dossier trouvé

************************ Suppression des fichiers

/!\ ... C:\log.txt

************************ Nettoyage du registre

Les fichiers encore présents seront supprimés au prochain redémarrage

************************ Suppression des fichiers

/!\ ... C:\log.txt

Les fichiers encore présents seront supprimés au prochain redémarrage

************************ Suppression des fichiers

/!\ ... C:\log.txt

************************ Fichiers suspects

Aucun Fichier trouvé

Les fichiers et clés de registre supprimés ont été sauvegardés dans le fichier

03112007_19381448.zip

------------------------------------------------------------------------
Auteur : !aur3n7 Contact: https://www.ionos.fr/
------------------------------------------------------------------------

--------------------------------------------- END

---------------------------------------------

Spybot n'à rien trouvé,
Avast non plus,
et je suis en train de rescanner avec Antivir,
voilà, voilà...
merci pour vos conseils...
Configuration: Windows XP
Firefox 2.0.0.9

3 réponses

  1. gazoui Messages postés 2 Statut Membre
     
    voici le rapport du scan avec Antivir:

    AntiVir PersonalEdition Classic
    Report file date: samedi 3 novembre 2007 19:46

    Scanning for 913479 virus strains and unwanted programs.

    Licensed to: Avira AntiVir PersonalEdition Classic
    Serial number: 0000149996-ADJIE-0001
    Platform: Windows XP
    Windows version: (Service Pack 2) [5.1.2600]
    Username: SYSTEM
    Computer name: XPSP2-CD0986C18

    Version information:
    BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00
    AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 13:16:29
    AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 12:23:51
    LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 15:32:47
    LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 12:35:20
    ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 14:27:15
    ANTIVIR1.VDF : 7.0.0.0 1640448 Bytes 13/09/2007 14:26:55
    ANTIVIR2.VDF : 7.0.0.140 940544 Bytes 26/10/2007 10:52:51
    ANTIVIR3.VDF : 7.0.0.165 129536 Bytes 02/11/2007 20:55:23
    AVEWIN32.DLL : 7.6.0.30 3056128 Bytes 30/10/2007 10:52:51
    AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:26
    AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 07:39:17
    AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24
    AVPACK32.DLL : 7.3.0.15 360488 Bytes 03/08/2007 08:46:00
    AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 07:17:06
    AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 12:26:33
    AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 07:10:18
    NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:42
    RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 12:38:13
    RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 12:50:37
    SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 09:37:21

    Configuration settings for the scan:
    Jobname..........................: Complete system scan
    Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
    Logging..........................: low
    Primary action...................: interactive
    Secondary action.................: ignore
    Scan master boot sector..........: off
    Scan boot sector.................: on
    Boot sectors.....................: D:,
    Scan memory......................: on
    Process scan.....................: on
    Scan registry....................: on
    Search for rootkits..............: off
    Scan all files...................: Intelligent file selection
    Scan archives....................: on
    Recursion depth..................: 20
    Smart extensions.................: on
    Macro heuristic..................: on
    File heuristic...................: medium

    Start of the scan: samedi 3 novembre 2007 19:46

    The scan of running processes will be started
    Scan process 'avscan.exe' - '1' Module(s) have been scanned
    Scan process 'avcenter.exe' - '1' Module(s) have been scanned
    Scan process 'SpybotSD.exe' - '1' Module(s) have been scanned
    Scan process 'firefox.exe' - '1' Module(s) have been scanned
    Scan process 'notepad.exe' - '1' Module(s) have been scanned
    Scan process 'iPodService.exe' - '1' Module(s) have been scanned
    Scan process 'TeaTimer.exe' - '1' Module(s) have been scanned
    Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
    Scan process 'avgnt.exe' - '1' Module(s) have been scanned
    Scan process 'iTunesHelper.exe' - '1' Module(s) have been scanned
    Scan process 'atiptaxx.exe' - '1' Module(s) have been scanned
    Scan process 'alg.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'AppleMobileDeviceService.exe' - '1' Module(s) have been scanned
    Scan process 'sched.exe' - '1' Module(s) have been scanned
    Scan process 'avguard.exe' - '1' Module(s) have been scanned
    Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
    Scan process 'explorer.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'lsass.exe' - '1' Module(s) have been scanned
    Scan process 'services.exe' - '1' Module(s) have been scanned
    Scan process 'winlogon.exe' - '1' Module(s) have been scanned
    Scan process 'csrss.exe' - '1' Module(s) have been scanned
    Scan process 'smss.exe' - '1' Module(s) have been scanned
    26 processes with 26 modules were scanned

    Start scanning boot sectors:
    Boot sector 'C:\'
    [NOTE] No virus was found!
    Boot sector 'D:\'
    [NOTE] No virus was found!

    Starting to scan the registry.
    The registry was scanned ( '32' files ).

    Starting the file scan:

    Begin scan in 'C:\' <prog>
    C:\pagefile.sys
    [WARNING] The file could not be opened!
    C:\Documents and Settings\Admin\Bureau\MSNFix\MSNFix\29102007_21300556.zip
    [0] Archive type: ZIP
    --> backup/carlton
    [DETECTION] Is the Trojan horse TR/Dialer.VUY.4
    --> backup/k3d3t4t8n7l.exe
    [DETECTION] Is the Trojan horse TR/Dialer.VUY.4
    --> backup/LBTWiz.exe
    [DETECTION] Contains detection pattern of the worm WORM/SdBot.561152.2
    --> backup/Nokia_19_jpg.zip
    [1] Archive type: ZIP
    --> www.Nokia_19_jpg-msn.com
    [DETECTION] Contains detection pattern of the worm WORM/SdBot.561152.2
    [INFO] The file was moved to '475dc598.qua'!
    C:\Documents and Settings\Admin\Local Settings\Temporary Internet Files\Content.IE5\KRBV2O1D\dual[1].jpg
    [DETECTION] Is the Trojan horse TR/Dialer.VUY.4
    [INFO] The file was moved to '478dc9a0.qua'!
    Begin scan in 'D:\' <taf>

    End of the scan: samedi 3 novembre 2007 20:37
    Used time: 50:52 min

    The scan has been done completely.

    10227 Scanning directories
    291473 Files were scanned
    5 viruses and/or unwanted programs were found
    0 Files were classified as suspicious:
    0 files were deleted
    0 files were repaired
    2 files were moved to quarantine
    0 files were renamed
    1 Files cannot be scanned
    291468 Files not concerned
    2855 Archives were scanned
    1 Warnings
    1 Notes
    0
  2. tribun Messages postés 64900 Date d'inscription   Statut Membre Dernière intervention   12 686
     
    bonjour

    suis cette procédure, d'autres ont été aidés !
    moi je ne suis pas un spécialiste de la désinfection !

    http://www.vista-xp.fr/forum/topic115.html
    0
  3. gazoui
     
    merci,
    je crois que je l'ai éradiqué en suivant la marche à suivre!
    encore merci à tous le forum!
    0