Pc infecté par trojan downloader. Perdu. - Page 2

Précédent
  • 1
  • 2
  1. typhon30
     
    voici le hijack

    Logfile of HijackThis v1.99.1
    Scan saved at 15:35:30, on 29/11/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Windows Defender\MsMpEng.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\WINDOWS\AGRSMMSG.exe
    C:\Program Files\Elantech\ktp3.exe
    C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    C:\Program Files\Picasa2\PicasaMediaDetector.exe
    C:\Program Files\CyberLink\PowerCinema\PCMService.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\LaCie\Backup Software\LaCieBackup.exe
    C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe
    C:\Program Files\Fichiers communs\DataViz\DvzIncMsgr.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Palm\Hotsync.exe
    C:\Program Files\a-squared Free\a2service.exe
    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
    C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
    C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
    C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\wbem\wmiapsrv.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\PROGRA~1\INCRED~1\bin\IMApp.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.lemonde.fr/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll
    O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.0.0.0\PDFCreator_Toolbar.dll
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM\..\Run: [KTPWare] C:\Program Files\Elantech\ktp3.exe
    O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
    O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
    O4 - HKCU\..\Run: [LaCie Backup] C:\Program Files\LaCie\Backup Software\\LaCieBackup.exe /background
    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O4 - Startup: Palm Registration.lnk = C:\Program Files\Palm\register.exe
    O4 - Global Startup: BlueSoleil.lnk = C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe
    O4 - Global Startup: DataViz Inc Messenger.lnk = C:\Program Files\Fichiers communs\DataViz\DvzIncMsgr.exe
    O4 - Global Startup: HotSync Manager.lnk = C:\Program Files\Palm\Hotsync.exe
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
    O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {1FF43AD5-2262-4C2F-81D4-26D710C3F305} (VB2S Mannequin Virtuel Control) - http://mannequin.redoute.fr/activex/Mannequin.cab
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1109001892015
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
    O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
    O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
    O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
    O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    0
  2. g!rly Messages postés 18462 Statut Contributeur 407
     
    re,

    supprime les deux fichiers/dossiers manuellement :

    C:\WINDOWS\system32\wintems.exe
    C:\Documents and Settings\Isabelle\Application Data\??stem\logonui.exe
    C:\Documents and Settings\Isabelle\Application Data\??stem

    si ils resistent supprime les en mode sans echec

    puis fais le reste

    par feu

    antivir

    @+
    0
  3. typhon30
     
    g!rly, je vois enfin le bout des procédures.
    J'ai rencontré quelques soucis.
    - j'ai bien téléchargé kerio,mais lorsque je clique sur l'icone, elle ne se lance pas. Du coup, je n'ai pas pu le configurer.
    - j'ai téléchargé antivir. Le problème c'est que mon pc ne veut se lancer en mode sans échec. A chaque fois que je sélectionne le mode sans echec, il se relance en me proposant plutôt le mode normal. J'ai refait la procédure 3 fois, sans succès.
    - j'ai quand même lancé un scan antivir, mais pas en mode sans échec. Voici le rapport.

    AntiVir PersonalEdition Classic
    Report file date: jeudi 29 novembre 2007 17:03

    Scanning for 954582 virus strains and unwanted programs.

    Licensed to: Avira AntiVir PersonalEdition Classic
    Serial number: 0000149996-ADJIE-0001
    Platform: Windows XP
    Windows version: (Service Pack 2) [5.1.2600]
    Username: Isabelle
    Computer name: NOM-76CD68BE923

    Version information:
    BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00
    AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 13:16:29
    AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 12:23:51
    LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 15:32:47
    LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 12:35:20
    ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 14:27:15
    ANTIVIR1.VDF : 7.0.0.0 1640448 Bytes 13/09/2007 14:26:55
    ANTIVIR2.VDF : 7.0.1.0 1393152 Bytes 23/11/2007 15:46:15
    ANTIVIR3.VDF : 7.0.1.24 188416 Bytes 29/11/2007 15:46:15
    AVEWIN32.DLL : 7.6.0.34 3125760 Bytes 29/11/2007 15:46:16
    AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:26
    AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 07:39:17
    AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24
    AVPACK32.DLL : 7.3.0.15 360488 Bytes 03/08/2007 08:46:00
    AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 07:17:06
    AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 12:26:33
    AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 07:10:18
    NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:42
    RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 12:38:13
    RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 12:50:37
    SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 09:37:21

    Configuration settings for the scan:
    Jobname..........................: Local Drives
    Configuration file...............: c:\program files\avira\antivir personaledition classic\alldrives.avp
    Logging..........................: low
    Primary action...................: interactive
    Secondary action.................: ignore
    Scan master boot sector..........: on
    Scan boot sector.................: on
    Boot sectors.....................: E:,
    Scan memory......................: on
    Process scan.....................: on
    Scan registry....................: on
    Search for rootkits..............: off
    Scan all files...................: All files
    Scan archives....................: on
    Recursion depth..................: 20
    Smart extensions.................: on
    Macro heuristic..................: on
    File heuristic...................: medium

    Start of the scan: jeudi 29 novembre 2007 17:03

    The scan of running processes will be started
    Scan process 'avscan.exe' - '1' Module(s) have been scanned
    Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
    Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
    Scan process 'avcenter.exe' - '1' Module(s) have been scanned
    Scan process 'alg.exe' - '1' Module(s) have been scanned
    Scan process 'wmiprvse.exe' - '1' Module(s) have been scanned
    Scan process 'kpf4gui.exe' - '1' Module(s) have been scanned
    Scan process 'wmiapsrv.exe' - '1' Module(s) have been scanned
    Scan process 'iPodService.exe' - '1' Module(s) have been scanned
    Scan process 'kpf4gui.exe' - '1' Module(s) have been scanned
    Scan process 'CLSched.exe' - '1' Module(s) have been scanned
    Scan process 'wdfmgr.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'CLMLService.exe' - '1' Module(s) have been scanned
    Scan process 'kpf4ss.exe' - '1' Module(s) have been scanned
    Scan process 'CLMLServer.exe' - '1' Module(s) have been scanned
    Scan process 'CLCapSvc.exe' - '1' Module(s) have been scanned
    Scan process 'BTNtService.exe' - '1' Module(s) have been scanned
    Scan process 'AppleMobileDeviceService.exe' - '1' Module(s) have been scanned
    Scan process 'sched.exe' - '1' Module(s) have been scanned
    Scan process 'aawservice.exe' - '1' Module(s) have been scanned
    Scan process 'LogitechDesktopMessenger.exe' - '1' Module(s) have been scanned
    Scan process 'Hotsync.exe' - '1' Module(s) have been scanned
    Scan process 'DvzIncMsgr.exe' - '1' Module(s) have been scanned
    Scan process 'BlueSoleil.exe' - '1' Module(s) have been scanned
    Scan process 'LacieBackup.exe' - '1' Module(s) have been scanned
    Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
    Scan process 'avgnt.exe' - '1' Module(s) have been scanned
    Scan process 'iTunesHelper.exe' - '1' Module(s) have been scanned
    Scan process 'PCMService.exe' - '1' Module(s) have been scanned
    Scan process 'PicasaMediaDetector.exe' - '1' Module(s) have been scanned
    Scan process 'realsched.exe' - '1' Module(s) have been scanned
    Scan process 'jusched.exe' - '1' Module(s) have been scanned
    Scan process 'Ktp3.exe' - '1' Module(s) have been scanned
    Scan process 'AGRSMMSG.exe' - '1' Module(s) have been scanned
    Scan process 'atiptaxx.exe' - '1' Module(s) have been scanned
    Scan process 'explorer.exe' - '1' Module(s) have been scanned
    Scan process 'avguard.exe' - '1' Module(s) have been scanned
    Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'MsMpEng.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'lsass.exe' - '1' Module(s) have been scanned
    Scan process 'services.exe' - '1' Module(s) have been scanned
    Scan process 'winlogon.exe' - '1' Module(s) have been scanned
    Scan process 'csrss.exe' - '1' Module(s) have been scanned
    Scan process 'smss.exe' - '1' Module(s) have been scanned
    50 processes with 50 modules were scanned

    Starting master boot sector scan:
    Master boot sector HD0
    [NOTE] No virus was found!

    Start scanning boot sectors:
    Boot sector 'C:\'
    [NOTE] No virus was found!
    Boot sector 'D:\'
    [NOTE] No virus was found!

    Starting to scan the registry.
    The registry was scanned ( '49' files ).

    Starting the file scan:

    Begin scan in 'C:\' <C:>
    C:\hiberfil.sys
    [WARNING] The file could not be opened!
    C:\pagefile.sys
    [WARNING] The file could not be opened!
    C:\Documents and Settings\Isabelle\Bureau\Upload_Me.zip
    [0] Archive type: ZIP
    --> DOCUME~1/Isabelle/Bureau/Upload_Me/1148.exe
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    --> DOCUME~1/Isabelle/Bureau/Upload_Me/d8e9w3l6u1g1.exe
    [DETECTION] Is the Trojan horse TR/Dialer.VUY.5
    --> DOCUME~1/Isabelle/Bureau/Upload_Me/mrofinu1148.exe
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    --> DOCUME~1/Isabelle/Bureau/Upload_Me/msimn.exe
    [DETECTION] Contains detection pattern of the worm WORM/SdBot.547840
    --> DOCUME~1/Isabelle/Bureau/Upload_Me/party_jpg.zip
    [1] Archive type: ZIP
    --> www.party_jpg_Msn.com
    [DETECTION] Contains detection pattern of the worm WORM/SdBot.547840
    [WARNING] An error has occurred and the file was not deleted. ErrorID: 16001
    [WARNING] Failed!
    C:\Program Files\Windows Media Player\horyfyz77798.exe
    [DETECTION] Is the Trojan horse TR/Dldr.AW.awk
    [INFO] The file was moved to '47c0f6bd.qua'!
    C:\qoobox\Quarantine\C\Program Files\WinAble\winable.exe.vir
    [DETECTION] Is the Trojan horse TR/Dldr.Adload.NI
    [INFO] The file was moved to '47bcf6d0.qua'!
    C:\RECYCLER\S-1-5-21-1519654425-2511347248-2016265858-1006\Dc3.vir
    [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
    [INFO] The file was moved to '4781f6d9.qua'!
    C:\RECYCLER\S-1-5-21-1519654425-2511347248-2016265858-1006\Dc8\28112007_193810.39.zip
    [0] Archive type: ZIP
    --> backup/1148.exe
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    --> backup/carlton
    [DETECTION] Is the Trojan horse TR/Dialer.VUY.5
    --> backup/d8e9w3l6u1g1.exe
    [DETECTION] Is the Trojan horse TR/Dialer.VUY.5
    --> backup/mrofinu1148.exe
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    --> backup/mrofinu1148.exe.tmp
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    --> backup/msimn.exe
    [DETECTION] Contains detection pattern of the worm WORM/SdBot.547840
    --> backup/party_jpg.zip
    [1] Archive type: ZIP
    --> www.party_jpg_Msn.com
    [DETECTION] Contains detection pattern of the worm WORM/SdBot.547840
    [INFO] The file was moved to '477ff6ba.qua'!
    Begin scan in 'D:\' <INSTALL>
    Begin scan in 'E:\'
    Search path E:\ could not be opened!
    Le périphérique n'est pas prêt.

    End of the scan: jeudi 29 novembre 2007 18:44
    Used time: 1:41:42 min

    The scan has been done completely.

    7708 Scanning directories
    352743 Files were scanned
    15 viruses and/or unwanted programs were found
    0 Files were classified as suspicious:
    0 files were deleted
    0 files were repaired
    4 files were moved to quarantine
    0 files were renamed
    2 Files cannot be scanned
    352728 Files not concerned
    8572 Archives were scanned
    28 Warnings
    0 Notes
    0
  4. g!rly Messages postés 18462 Statut Contributeur 407
     
    re,

    peux tu refair msnfix stp et poster le rapport ici stp

    Téléchargez MSNFix.zip (de !aur3n7) sur votre bureau:
    http://sosvirus.changelog.fr/MSNFix.zip
    Décompressez-le (clic droit >> Extraire ici) et double cliquer sur le fichier MSNFix.bat.
    - Exécutez l'option R.
    -- Si l'infection est détectée, un message l'indiquera et il suffira de presser une touche pour lancer le nettoyage

    Note :
    Si une erreur de suppression est détectée un message s'affichera demandant de redémarrer l'ordinateur afin de terminer les opérations. Dans ce cas il suffit de redémarrer l'ordinateur en mode normal

    - Le rapport sera enregistré dans le même dossier que MSNFix sous forme date_heure.txt
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. typhon30
     
    Alors, le résultat donné c'est qu'il n'y a pas d'infection trouvée.

    Voici le rapport

    aaw-lang-pack.exe
    aaw2007.exe
    aawsepersonal.exe
    AdbeRdr810_fr_FR.exe
    aisbackup.exe
    antivir-personal-edition-7_antivir_personal_edition_classic_7_7.06.00.270_anglais_10821.exe
    ASDsetup.exe
    audacity-win-1.2.6.exe
    dialang.exe
    DivXPlayer.exe
    easyrecovery.exe
    EB2install.exe
    eMule0.46c-Installer.exe
    eMule0.47a-Installer.exe
    eMule0.48a-Installer.exe
    FileFormatConverters.exe
    FileZilla_2_2_25_setup.exe
    Firefox Setup 2.0.0.3.exe
    Firefox Setup 2.0.0.6.exe
    GoogleEarthSetup.exe
    GoogleVideoUploaderInstaller.exe
    Google_Updater.exe
    HijackThisInstall.exe
    ie6setup.exe
    IE7-WindowsXP-x86-fra.exe
    IE7Setup_G_FR.exe
    incredimail_install.exe
    instala-emule.exe
    Install.exe
    InstallPersoNotes.exe
    install_flash_player.exe
    Install_Messenger.exe
    instmsia.exe
    instmsiw.exe
    instprof10.exe
    IRTSetup.exe
    iTunesSetup.exe
    jre-1_5_0_04-windows-i586-p-iftw.exe
    kav5.0trial_personalfr.exe
    kazaa_setup.exe
    klitekpp243f.exe
    lame.exe
    MediaMonkey_Setup_2_5_4.exe
    motherboard_monitor_motherboard_monitor_5.3.7.0_francais_9626.exe
    nl_setup.exe
    nortonsystemworks.exe
    NVE2content.exe
    NVE3content.exe
    pf600016.exe
    Phonmap5Setup.exe
    photoways.exe
    picasa2-current.exe
    PPVIEWER.EXE
    QuicktracksInstaller3027.exe
    RealPlayer10-5GOLD_fr.exe
    setup.exe
    SetupCloneCD5261.exe
    showshifter_showshifter_3.11_francais_11024.exe
    spamfighter_web.exe
    sun_jre_installer.exe
    thedancer.exe
    uninstaller.exe
    URLAUNCH.EXE
    UStorageWin98Driver2.0.exe
    utorrent.exe
    vbplayer6_0_1_0_fre_1.exe
    vlc-0.8.1-win32.exe
    vlc-0.8.6b-win32.exe
    WGAPluginInstall.exe
    winzip9_vnu.exe
    wrar362fr.exe
    wrdemo.exe
    wz100fev.exe
    0
  7. g!rly Messages postés 18462 Statut Contributeur 407
     
    re,

    peux tu envoyé ce fichier

    C:\DOCUME~1\Isabelle\Bureau\Upload_Me.zip

    sur http://upload.changelog.fr stp en suite tu le supprime

    supprime aussi ceci :

    C:\WINDOWS\party_jpg.zip
    www.party_jpg_Msn.com

    si tu le trouve

    dis moi si tu le trouve
    0
  8. typhon30
     
    Salut G!rly,
    j'ai uploadé puis supprimé upload me zip. Par contre je ne trouve pas les 2 autres...
    Le grand dadet de 16 ans vient de me dire qu'il a effectivement cliqué, sur msn, sur une photo. Mais que celle-ci ne s'était pas affichée...
    A bientôt et merci pour ta patience.
    0
  9. typhon30
     
    Salut G!rly,
    j'ai uploadé puis supprimé upload me zip. Par contre je ne trouve pas les 2 autres...
    Le grand dadet de 16 ans vient de me dire qu'il a effectivement cliqué, sur msn, sur une photo. Mais que celle-ci ne s'était pas affichée...
    A bientôt et merci pour ta patience.
    0
  10. g!rly Messages postés 18462 Statut Contributeur 407
     
    ok

    je sais que ca va etre long mais j´aimerais m´assurer que tout est ok

    peux tu refair un scan comlet avec antivir et poster le rapport ici...

    pour kerio, y a une amelioration ? sinon pour le lancer passe par demarrer > tous les programmes et click sur kerio > firewall engine
    0
  11. typhon30
     
    Salut G!rly, voilà le travail :
    apparemment, il reste des trucs, dialer et autres

    AntiVir PersonalEdition Classic
    Report file date: jeudi 29 novembre 2007 20:32

    Scanning for 954582 virus strains and unwanted programs.

    Licensed to: Avira AntiVir PersonalEdition Classic
    Serial number: 0000149996-ADJIE-0001
    Platform: Windows XP
    Windows version: (Service Pack 2) [5.1.2600]
    Username: Isabelle
    Computer name: NOM-76CD68BE923

    Version information:
    BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00
    AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 13:16:29
    AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 12:23:51
    LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 15:32:47
    LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 12:35:20
    ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 14:27:15
    ANTIVIR1.VDF : 7.0.0.0 1640448 Bytes 13/09/2007 14:26:55
    ANTIVIR2.VDF : 7.0.1.0 1393152 Bytes 23/11/2007 15:46:15
    ANTIVIR3.VDF : 7.0.1.24 188416 Bytes 29/11/2007 15:46:15
    AVEWIN32.DLL : 7.6.0.34 3125760 Bytes 29/11/2007 15:46:16
    AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:26
    AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 07:39:17
    AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24
    AVPACK32.DLL : 7.3.0.15 360488 Bytes 03/08/2007 08:46:00
    AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 07:17:06
    AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 12:26:33
    AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 07:10:18
    NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:42
    RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 12:38:13
    RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 12:50:37
    SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 09:37:21

    Configuration settings for the scan:
    Jobname..........................: Local Drives
    Configuration file...............: c:\program files\avira\antivir personaledition classic\alldrives.avp
    Logging..........................: low
    Primary action...................: interactive
    Secondary action.................: ignore
    Scan master boot sector..........: on
    Scan boot sector.................: on
    Boot sectors.....................: E:,
    Scan memory......................: on
    Process scan.....................: on
    Scan registry....................: on
    Search for rootkits..............: off
    Scan all files...................: All files
    Scan archives....................: on
    Recursion depth..................: 20
    Smart extensions.................: on
    Macro heuristic..................: on
    File heuristic...................: medium

    Start of the scan: jeudi 29 novembre 2007 20:32

    The scan of running processes will be started
    Scan process 'avscan.exe' - '1' Module(s) have been scanned
    Scan process 'avcenter.exe' - '1' Module(s) have been scanned
    Scan process 'IMApp.exe' - '1' Module(s) have been scanned
    Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
    Scan process 'alg.exe' - '1' Module(s) have been scanned
    Scan process 'kpf4gui.exe' - '1' Module(s) have been scanned
    Scan process 'wmiapsrv.exe' - '1' Module(s) have been scanned
    Scan process 'iPodService.exe' - '1' Module(s) have been scanned
    Scan process 'kpf4gui.exe' - '1' Module(s) have been scanned
    Scan process 'CLSched.exe' - '1' Module(s) have been scanned
    Scan process 'wdfmgr.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'CLMLService.exe' - '1' Module(s) have been scanned
    Scan process 'kpf4ss.exe' - '1' Module(s) have been scanned
    Scan process 'CLMLServer.exe' - '1' Module(s) have been scanned
    Scan process 'CLCapSvc.exe' - '1' Module(s) have been scanned
    Scan process 'BTNtService.exe' - '1' Module(s) have been scanned
    Scan process 'AppleMobileDeviceService.exe' - '1' Module(s) have been scanned
    Scan process 'sched.exe' - '1' Module(s) have been scanned
    Scan process 'aawservice.exe' - '1' Module(s) have been scanned
    Scan process 'LogitechDesktopMessenger.exe' - '1' Module(s) have been scanned
    Scan process 'Hotsync.exe' - '1' Module(s) have been scanned
    Scan process 'DvzIncMsgr.exe' - '1' Module(s) have been scanned
    Scan process 'BlueSoleil.exe' - '1' Module(s) have been scanned
    Scan process 'LacieBackup.exe' - '1' Module(s) have been scanned
    Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
    Scan process 'avgnt.exe' - '1' Module(s) have been scanned
    Scan process 'iTunesHelper.exe' - '1' Module(s) have been scanned
    Scan process 'PCMService.exe' - '1' Module(s) have been scanned
    Scan process 'PicasaMediaDetector.exe' - '1' Module(s) have been scanned
    Scan process 'realsched.exe' - '1' Module(s) have been scanned
    Scan process 'jusched.exe' - '1' Module(s) have been scanned
    Scan process 'Ktp3.exe' - '1' Module(s) have been scanned
    Scan process 'AGRSMMSG.exe' - '1' Module(s) have been scanned
    Scan process 'atiptaxx.exe' - '1' Module(s) have been scanned
    Scan process 'explorer.exe' - '1' Module(s) have been scanned
    Scan process 'avguard.exe' - '1' Module(s) have been scanned
    Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'MsMpEng.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'lsass.exe' - '1' Module(s) have been scanned
    Scan process 'services.exe' - '1' Module(s) have been scanned
    Scan process 'winlogon.exe' - '1' Module(s) have been scanned
    Scan process 'csrss.exe' - '1' Module(s) have been scanned
    Scan process 'smss.exe' - '1' Module(s) have been scanned
    49 processes with 49 modules were scanned

    Starting master boot sector scan:
    Master boot sector HD0
    [NOTE] No virus was found!

    Start scanning boot sectors:
    Boot sector 'C:\'
    [NOTE] No virus was found!
    Boot sector 'D:\'
    [NOTE] No virus was found!

    Starting to scan the registry.
    The registry was scanned ( '49' files ).

    Starting the file scan:

    Begin scan in 'C:\' <C:>
    C:\hiberfil.sys
    [WARNING] The file could not be opened!
    C:\pagefile.sys
    [WARNING] The file could not be opened!
    C:\RECYCLER\S-1-5-21-1519654425-2511347248-2016265858-1006\Dc13.zip
    [0] Archive type: ZIP
    --> DOCUME~1/Isabelle/Bureau/Upload_Me/1148.exe
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    --> DOCUME~1/Isabelle/Bureau/Upload_Me/d8e9w3l6u1g1.exe
    [DETECTION] Is the Trojan horse TR/Dialer.VUY.5
    --> DOCUME~1/Isabelle/Bureau/Upload_Me/mrofinu1148.exe
    [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    --> DOCUME~1/Isabelle/Bureau/Upload_Me/msimn.exe
    [DETECTION] Contains detection pattern of the worm WORM/SdBot.547840
    --> DOCUME~1/Isabelle/Bureau/Upload_Me/party_jpg.zip
    [1] Archive type: ZIP
    --> www.party_jpg_Msn.com
    [DETECTION] Contains detection pattern of the worm WORM/SdBot.547840
    [WARNING] An error has occurred and the file was not deleted. ErrorID: 16001
    [WARNING] Failed!
    Begin scan in 'D:\' <INSTALL>
    Begin scan in 'E:\'
    Search path E:\ could not be opened!
    Le périphérique n'est pas prêt.

    End of the scan: jeudi 29 novembre 2007 21:54
    Used time: 1:21:46 min

    The scan has been done completely.

    7696 Scanning directories
    353205 Files were scanned
    5 viruses and/or unwanted programs were found
    0 Files were classified as suspicious:
    0 files were deleted
    0 files were repaired
    0 files were moved to quarantine
    0 files were renamed
    2 Files cannot be scanned
    353200 Files not concerned
    8579 Archives were scanned
    28 Warnings
    0 Notes
    0
  12. g!rly Messages postés 18462 Statut Contributeur 407
     
    tu n´as pas supprimé ceci :

    DOCUME~1/Isabelle/Bureau/Upload_Me.zip
    0
  13. typhon30
     
    En effet, je l'avais laissé dans la corbeille.....
    0
  14. g!rly Messages postés 18462 Statut Contributeur 407
     
    ok ;-)

    comment ce porte le pc maintenant?

    ca c´est arrangé avec kerio?
    0
  15. typhon30
     
    Bonjour G!rly,
    Le PC se porte bien mieux. J'ai désinstallé kerio, et j'ai refait une installation. C'est super, ça fonctionne. Il ne me reste plus qu'à me former au firewall...
    Quelques questions toutefois :
    - je me rends compte que mon disque dur externe n'est pas passé au "nettoyage". Qu'est-ce que je fais avec ? Je l'analyse avec quel programme ?
    - sur mon bureau, il y a le dossier upload me (ce n'est pas le zip). Il y a plein de programmes dedans. Je le garde ou je le vire aussi ?
    Merci encore !
    0
  16. g!rly Messages postés 18462 Statut Contributeur 407
     
    salut typhon30,

    oui c´est embetant pour le disque dur externe, esperont qu´il n´a pas été touché; refais une analyse du pc au complet en ayant branché le disque dur externe au prealable, et post le rapport ici.

    regarde le tutoriel :

    http://mickael.barroux.free.fr/securite/antivir.php <- tutoriel configuration du scanner...

    le dossier upload me sur le bureau contient quoi comme programme?

    @+
    0
  17. typhon30
     
    Bonsoir G!irly,
    j'ai fait le scan antivir avec le disque dur externe branché. Voici ce que ça donne.

    Tout à la fin, j'ai eu un message disant
    C:\Volume Information \A0462941.exe
    is the trojan horse TR/gendal.72704
    J'ai cliqué deny access

    Cela signifie-t'il qu'il y a toujours un cheval de Troie ? Bref, voici le rapport.
    nb : faut-il que je scanne mon palm également ?
    Merci pour ton aide.

    AntiVir PersonalEdition Classic
    Report file date: vendredi 30 novembre 2007 17:54

    Scanning for 954582 virus strains and unwanted programs.

    Licensed to: Avira AntiVir PersonalEdition Classic
    Serial number: 0000149996-ADJIE-0001
    Platform: Windows XP
    Windows version: (Service Pack 2) [5.1.2600]
    Username: Isabelle
    Computer name: NOM-76CD68BE923

    Version information:
    BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00
    AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 13:16:29
    AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 12:23:51
    LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 15:32:47
    LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 12:35:20
    ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 14:27:15
    ANTIVIR1.VDF : 7.0.0.0 1640448 Bytes 13/09/2007 14:26:55
    ANTIVIR2.VDF : 7.0.1.0 1393152 Bytes 23/11/2007 15:46:15
    ANTIVIR3.VDF : 7.0.1.24 188416 Bytes 29/11/2007 15:46:15
    AVEWIN32.DLL : 7.6.0.34 3125760 Bytes 29/11/2007 15:46:16
    AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:26
    AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 07:39:17
    AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24
    AVPACK32.DLL : 7.3.0.15 360488 Bytes 03/08/2007 08:46:00
    AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 07:17:06
    AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 12:26:33
    AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 07:10:18
    NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:42
    RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 12:38:13
    RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 12:50:37
    SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 09:37:21

    Configuration settings for the scan:
    Jobname..........................: Local Drives
    Configuration file...............: c:\program files\avira\antivir personaledition classic\alldrives.avp
    Logging..........................: low
    Primary action...................: interactive
    Secondary action.................: ignore
    Scan master boot sector..........: on
    Scan boot sector.................: on
    Boot sectors.....................: E:,
    Scan memory......................: on
    Process scan.....................: on
    Scan registry....................: on
    Search for rootkits..............: off
    Scan all files...................: All files
    Scan archives....................: on
    Recursion depth..................: 20
    Smart extensions.................: on
    Macro heuristic..................: on
    File heuristic...................: medium

    Start of the scan: vendredi 30 novembre 2007 17:54

    The scan of running processes will be started
    Scan process 'avscan.exe' - '1' Module(s) have been scanned
    Scan process 'avcenter.exe' - '1' Module(s) have been scanned
    Scan process 'IMApp.exe' - '1' Module(s) have been scanned
    Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
    Scan process 'kpf4gui.exe' - '1' Module(s) have been scanned
    Scan process 'alg.exe' - '1' Module(s) have been scanned
    Scan process 'wmiapsrv.exe' - '1' Module(s) have been scanned
    Scan process 'kpf4gui.exe' - '1' Module(s) have been scanned
    Scan process 'iPodService.exe' - '1' Module(s) have been scanned
    Scan process 'CLSched.exe' - '1' Module(s) have been scanned
    Scan process 'wdfmgr.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'kpf4ss.exe' - '1' Module(s) have been scanned
    Scan process 'CLMLService.exe' - '1' Module(s) have been scanned
    Scan process 'CLMLServer.exe' - '1' Module(s) have been scanned
    Scan process 'CLCapSvc.exe' - '1' Module(s) have been scanned
    Scan process 'BTNtService.exe' - '1' Module(s) have been scanned
    Scan process 'AppleMobileDeviceService.exe' - '1' Module(s) have been scanned
    Scan process 'sched.exe' - '1' Module(s) have been scanned
    Scan process 'aawservice.exe' - '1' Module(s) have been scanned
    Scan process 'Hotsync.exe' - '1' Module(s) have been scanned
    Scan process 'DvzIncMsgr.exe' - '1' Module(s) have been scanned
    Scan process 'BlueSoleil.exe' - '1' Module(s) have been scanned
    Scan process 'LacieBackup.exe' - '1' Module(s) have been scanned
    Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
    Scan process 'avgnt.exe' - '1' Module(s) have been scanned
    Scan process 'iTunesHelper.exe' - '1' Module(s) have been scanned
    Scan process 'PCMService.exe' - '1' Module(s) have been scanned
    Scan process 'PicasaMediaDetector.exe' - '1' Module(s) have been scanned
    Scan process 'realsched.exe' - '1' Module(s) have been scanned
    Scan process 'jusched.exe' - '1' Module(s) have been scanned
    Scan process 'Ktp3.exe' - '1' Module(s) have been scanned
    Scan process 'AGRSMMSG.exe' - '1' Module(s) have been scanned
    Scan process 'atiptaxx.exe' - '1' Module(s) have been scanned
    Scan process 'explorer.exe' - '1' Module(s) have been scanned
    Scan process 'avguard.exe' - '1' Module(s) have been scanned
    Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'MsMpEng.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'lsass.exe' - '1' Module(s) have been scanned
    Scan process 'services.exe' - '1' Module(s) have been scanned
    Scan process 'winlogon.exe' - '1' Module(s) have been scanned
    Scan process 'csrss.exe' - '1' Module(s) have been scanned
    Scan process 'smss.exe' - '1' Module(s) have been scanned
    48 processes with 48 modules were scanned

    Starting master boot sector scan:
    Master boot sector HD0
    [NOTE] No virus was found!
    Master boot sector HD1
    [NOTE] No virus was found!

    Start scanning boot sectors:
    Boot sector 'C:\'
    [NOTE] No virus was found!
    Boot sector 'D:\'
    [NOTE] No virus was found!
    Boot sector 'F:\'
    [NOTE] No virus was found!

    Starting to scan the registry.
    The registry was scanned ( '46' files ).

    Starting the file scan:

    Begin scan in 'C:\' <C:>
    C:\hiberfil.sys
    [WARNING] The file could not be opened!
    C:\pagefile.sys
    [WARNING] The file could not be opened!
    Begin scan in 'D:\' <INSTALL>
    Begin scan in 'F:\' <LACIE>
    Begin scan in 'E:\'
    Search path E:\ could not be opened!
    Le périphérique n'est pas prêt.

    End of the scan: vendredi 30 novembre 2007 19:26
    Used time: 1:31:59 min

    The scan has been done completely.

    8209 Scanning directories
    367825 Files were scanned
    0 viruses and/or unwanted programs were found
    0 Files were classified as suspicious:
    0 files were deleted
    0 files were repaired
    0 files were moved to quarantine
    0 files were renamed
    2 Files cannot be scanned
    367825 Files not concerned
    9016 Archives were scanned
    40 Warnings
    1 Notes
    0
  18. g!rly Messages postés 18462 Statut Contributeur 407
     
    re,

    ca me parait ok

    comment ca va maintenant?

    @+
    0
Précédent
  • 1
  • 2