Virus
Fermé
26fab26
-
12 nov. 2007 à 23:24
jlpjlp Messages postés 51580 Date d'inscription vendredi 18 mai 2007 Statut Contributeur sécurité Dernière intervention 3 mai 2022 - 13 nov. 2007 à 09:58
jlpjlp Messages postés 51580 Date d'inscription vendredi 18 mai 2007 Statut Contributeur sécurité Dernière intervention 3 mai 2022 - 13 nov. 2007 à 09:58
A voir également:
- Virus
- Youtu.be virus - Accueil - Guide virus
- Svchost.exe virus - Guide
- Faux message virus ordinateur - Accueil - Arnaque
- Virus mcafee - Accueil - Piratage
- Tinyurl.com virus - Forum Virus
5 réponses
jlpjlp
Messages postés
51580
Date d'inscription
vendredi 18 mai 2007
Statut
Contributeur sécurité
Dernière intervention
3 mai 2022
5 040
12 nov. 2007 à 23:27
12 nov. 2007 à 23:27
tu as avast et antivir!
desinstalle avast
ensuite colle un rapport avec antivir , msnfix pour voir
desinstalle avast
ensuite colle un rapport avec antivir , msnfix pour voir
Cesel45
Messages postés
13152
Date d'inscription
mardi 24 avril 2007
Statut
Contributeur
Dernière intervention
29 novembre 2023
2 817
12 nov. 2007 à 23:32
12 nov. 2007 à 23:32
Bonjour
Fixe cette ligne
Et purge ta restauration système
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
Si çà te cause un problème tu peux la récupérer.
Fixe cette ligne
Et purge ta restauration système
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
Si çà te cause un problème tu peux la récupérer.
merci pour ton aide rapide,
j'ai desinstallé avast
pour le rapport antivir je ne sais pas faire, je viens de l'installer et j'ai un scan en cours
voici mon rapport msnfix :
MSNFix 1.575
D:\Documents and Settings\famille.fabrice.000\Mes documents\Mes fichiers re‡us\MSNFix
Fix exécuté le 12/11/2007 - 23:37:22,90 By famille
mode normal
************************ Recherche les fichiers présents
Aucun Fichier trouvé
************************ Recherche les dossiers présents
Aucun dossier trouvé
************************ Fichiers suspects
/!\ ces fichiers nécessitent un avis expérimenté avant toute intervention
[C:\PROGRA~1\ECB.exe] 6344642E6CBEFABB7E367388D09900E8
[color=#FF0000][b]==>[/b][/color] SVP merci d'envoyer le fichier [b] D:\DOCUME~1\FAMILL~1.000\Bureau\Upload_Me.zip [/b] sur http://upload.changelog.fr
------------------------------------------------------------------------
Auteur : !aur3n7 Contact: https://www.ionos.fr/
------------------------------------------------------------------------
--------------------------------------------- END ---------------------------------------------
j'ai desinstallé avast
pour le rapport antivir je ne sais pas faire, je viens de l'installer et j'ai un scan en cours
voici mon rapport msnfix :
MSNFix 1.575
D:\Documents and Settings\famille.fabrice.000\Mes documents\Mes fichiers re‡us\MSNFix
Fix exécuté le 12/11/2007 - 23:37:22,90 By famille
mode normal
************************ Recherche les fichiers présents
Aucun Fichier trouvé
************************ Recherche les dossiers présents
Aucun dossier trouvé
************************ Fichiers suspects
/!\ ces fichiers nécessitent un avis expérimenté avant toute intervention
[C:\PROGRA~1\ECB.exe] 6344642E6CBEFABB7E367388D09900E8
[color=#FF0000][b]==>[/b][/color] SVP merci d'envoyer le fichier [b] D:\DOCUME~1\FAMILL~1.000\Bureau\Upload_Me.zip [/b] sur http://upload.changelog.fr
------------------------------------------------------------------------
Auteur : !aur3n7 Contact: https://www.ionos.fr/
------------------------------------------------------------------------
--------------------------------------------- END ---------------------------------------------
merci de t'interesser à mon problème,
malheureusement je ne suis pas un pro et je ne sais pas trop comment faire ce que tu me demande
malheureusement je ne suis pas un pro et je ne sais pas trop comment faire ce que tu me demande
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
jlpjlp
Messages postés
51580
Date d'inscription
vendredi 18 mai 2007
Statut
Contributeur sécurité
Dernière intervention
3 mai 2022
5 040
13 nov. 2007 à 09:58
13 nov. 2007 à 09:58
analyse ce fichier sur virus total et colle le rapport: C:\PROGRA~1\ECB.exe
https://www.virustotal.com/gui/
_________________
vire tes crack inféctés: dans poste de travail puis D .... si presents
D:\Documents and Settings\famille.fabrice.000\Mes documents\jeux\Toca-2-Touring_Cars_NOCD_Crack.zip
D:\Documents and Settings\famille.fabrice.000\Mes documents\jeux\Toca-2-Touring_Cars_NOCD_Crack\setup.exe
__________________
desinstalle multimedia toolbar via AJOUT/SUPPRESSION DE PROG si tu ne l'utilise pas
_________________
Relance HijackThis, choisis "do a scan only" coche la case devant les lignes ci-dessous et clic en bas sur "fix checked".
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [Omnipage] C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
_________________
pour virer les virus de ta restauration:
désactive la restauration système pour purger les virus qui seraient dedans puis réactive là (dans DEMARRER puis TOUS LES PROGRAMMES puis ACCESSOIRE puis OUTILS SYSTEME puis RESTAURATION SYSTEME puis paramètre)
___________________
recolle un scan antivir et recolle un rapport hijackthis et surtout dis tes problemes
https://www.virustotal.com/gui/
_________________
vire tes crack inféctés: dans poste de travail puis D .... si presents
D:\Documents and Settings\famille.fabrice.000\Mes documents\jeux\Toca-2-Touring_Cars_NOCD_Crack.zip
D:\Documents and Settings\famille.fabrice.000\Mes documents\jeux\Toca-2-Touring_Cars_NOCD_Crack\setup.exe
__________________
desinstalle multimedia toolbar via AJOUT/SUPPRESSION DE PROG si tu ne l'utilise pas
_________________
Relance HijackThis, choisis "do a scan only" coche la case devant les lignes ci-dessous et clic en bas sur "fix checked".
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [Omnipage] C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
_________________
pour virer les virus de ta restauration:
désactive la restauration système pour purger les virus qui seraient dedans puis réactive là (dans DEMARRER puis TOUS LES PROGRAMMES puis ACCESSOIRE puis OUTILS SYSTEME puis RESTAURATION SYSTEME puis paramètre)
___________________
recolle un scan antivir et recolle un rapport hijackthis et surtout dis tes problemes
12 nov. 2007 à 23:53
merci pour ton aide rapide,
j'ai desinstallé avast
pour le rapport antivir je ne sais pas faire, je viens de l'installer et j'ai un scan en cours
voici mon rapport msnfix :
MSNFix 1.575
D:\Documents and Settings\famille.fabrice.000\Mes documents\Mes fichiers re‡us\MSNFix
Fix exécuté le 12/11/2007 - 23:37:22,90 By famille
mode normal
************************ Recherche les fichiers présents
Aucun Fichier trouvé
************************ Recherche les dossiers présents
Aucun dossier trouvé
************************ Fichiers suspects
/!\ ces fichiers nécessitent un avis expérimenté avant toute intervention
[C:\PROGRA~1\ECB.exe] 6344642E6CBEFABB7E367388D09900E8
[color=#FF0000][b]==>[/b][/color] SVP merci d'envoyer le fichier [b] D:\DOCUME~1\FAMILL~1.000\Bureau\Upload_Me.zip [/b] sur http://upload.changelog.fr
13 nov. 2007 à 00:02
et voilà mon scan antivir
AntiVir PersonalEdition Classic
Report file date: lundi 12 novembre 2007 23:03
Scanning for 927083 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Username: SYSTEM
Computer name: fabrice
Version information:
BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00
AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 13:16:29
AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 12:23:51
LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 15:32:47
LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 12:35:20
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 14:27:15
ANTIVIR1.VDF : 7.0.0.0 1640448 Bytes 13/09/2007 14:26:55
ANTIVIR2.VDF : 7.0.0.198 1206272 Bytes 11/11/2007 19:23:22
ANTIVIR3.VDF : 7.0.0.206 29696 Bytes 12/11/2007 19:23:22
AVEWIN32.DLL : 7.6.0.34 3125760 Bytes 12/11/2007 19:23:23
AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:26
AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 07:39:17
AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24
AVPACK32.DLL : 7.3.0.15 360488 Bytes 03/08/2007 08:46:00
AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 07:17:06
AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 12:26:33
AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 07:10:18
NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:42
RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 12:38:13
RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 12:50:37
SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 09:37:21
Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: D:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Start of the scan: lundi 12 novembre 2007 23:03
The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'WLLoginProxy.exe' - '1' Module(s) have been scanned
Scan process 'IEXPLORE.EXE' - '1' Module(s) have been scanned
Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
Scan process 'usnsvc.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'BrMfcMon.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'BrMfcWnd.exe' - '1' Module(s) have been scanned
Scan process 'SuperCopier2.exe' - '1' Module(s) have been scanned
Scan process 'mnyexpr.exe' - '1' Module(s) have been scanned
Scan process 'GoogleToolbarNotifier.exe' - '1' Module(s) have been scanned
Scan process 'LowLight.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'avgas.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'HOMERunner.exe' - '1' Module(s) have been scanned
Scan process 'daemon.exe' - '1' Module(s) have been scanned
Scan process 'CLSched.exe' - '1' Module(s) have been scanned
Scan process 'ULCDRSvr.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned
Scan process 'LogiTray.exe' - '1' Module(s) have been scanned
Scan process 'HidService.exe' - '1' Module(s) have been scanned
Scan process 'opware32.exe' - '1' Module(s) have been scanned
Scan process 'CLMLService.exe' - '1' Module(s) have been scanned
Scan process 'PCMService.exe' - '1' Module(s) have been scanned
Scan process 'qttask.exe' - '1' Module(s) have been scanned
Scan process 'CLMLServer.exe' - '1' Module(s) have been scanned
Scan process 'CLCapSvc.exe' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'DWCU.exe' - '1' Module(s) have been scanned
Scan process 'guard.exe' - '0' Module(s) have been scanned
Scan process 'ashDisp.exe' - '1' Module(s) have been scanned
Scan process 'brctrcen.exe' - '1' Module(s) have been scanned
Scan process 'AOSD.EXE' - '1' Module(s) have been scanned
Scan process 'AOLacsd.exe' - '1' Module(s) have been scanned
Scan process 'pptd40nt.exe' - '1' Module(s) have been scanned
Scan process 'rundll32.exe' - '1' Module(s) have been scanned
Scan process 'LVComS.exe' - '1' Module(s) have been scanned
Scan process 'ECB.exe' - '1' Module(s) have been scanned
Scan process 'rundll32.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'ABOARD.EXE' - '1' Module(s) have been scanned
Scan process 'Monitor.exe' - '1' Module(s) have been scanned
Scan process 'RTHDCPL.EXE' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'acs.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'brss01a.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'brsvc01a.exe' - '1' Module(s) have been scanned
Scan process 'ashServ.exe' - '1' Module(s) have been scanned
Scan process 'aswUpdSv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
64 processes with 64 modules were scanned
Start scanning boot sectors:
Boot sector 'C:\'
[NOTE] No virus was found!
Boot sector 'D:\'
[NOTE] No virus was found!
Starting to scan the registry.
The registry was scanned ( '48' files ).
Starting the file scan:
Begin scan in 'C:\' <HDD>
C:\hiberfil.sys
[WARNING] The file could not be opened!
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP457\A0054272.exe
[DETECTION] Is the Trojan horse TR/Win9x.Flashkiller.G
[INFO] The file was moved to '4768d4e1.qua'!
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP457\A0054275.exe
[DETECTION] Is the Trojan horse TR/Win9x.Flashkiller.G
[INFO] The file was moved to '4768d4e8.qua'!
C:\WINDOWS\system32\drivers\sptd.sys
[WARNING] The file could not be opened!
Begin scan in 'D:\' <DATA>
D:\Documents and Settings\famille.fabrice.000\Mes documents\jeux\Toca-2-Touring_Cars_NOCD_Crack.zip
[0] Archive type: ZIP
--> setup.exe
[DETECTION] Is the Trojan horse TR/Win9x.Flashkiller.G
[INFO] The file was moved to '479bd8d0.qua'!
D:\Documents and Settings\famille.fabrice.000\Mes documents\jeux\Toca-2-Touring_Cars_NOCD_Crack\setup.exe
[DETECTION] Is the Trojan horse TR/Win9x.Flashkiller.G
[INFO] The file was moved to '47acd908.qua'!
End of the scan: lundi 12 novembre 2007 23:56
Used time: 52:22 min
The scan has been done completely.
8628 Scanning directories
402745 Files were scanned
4 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
4 files were moved to quarantine
0 files were renamed
3 Files cannot be scanned
402741 Files not concerned
7816 Archives were scanned
3 Warnings
1 Notes