Trop de pub! g l'impression d'etre espionnée
Résolu/Fermé
emmaka
Messages postés
161
Date d'inscription
vendredi 14 mars 2008
Statut
Membre
Dernière intervention
12 mai 2011
-
14 mars 2008 à 17:42
emmaka Messages postés 161 Date d'inscription vendredi 14 mars 2008 Statut Membre Dernière intervention 12 mai 2011 - 20 mars 2008 à 19:31
emmaka Messages postés 161 Date d'inscription vendredi 14 mars 2008 Statut Membre Dernière intervention 12 mai 2011 - 20 mars 2008 à 19:31
A voir également:
- Trop de pub! g l'impression d'etre espionnée
- Spouleur d'impression - Guide
- Youtube sans pub - Accueil - Streaming
- Netflix avec pub avis - Accueil - Streaming
- Stop pub gratuit - Télécharger - Divers Utilitaires
- Impression livret a5 - Guide
59 réponses
emmaka
Messages postés
161
Date d'inscription
vendredi 14 mars 2008
Statut
Membre
Dernière intervention
12 mai 2011
4
16 mars 2008 à 10:24
16 mars 2008 à 10:24
MAIJIN eh oui c encore moi !! c'est juste pour te signaler que depuis hier ANTIVIR ma détecter 7 TR/ DROPPER .GEN
dans le fichier C:/ System volume information/_ restore..... et plein de chiffre ...
est ce que c normal ds avoir autant??
est ce que c grave??
je les mets tous en quarantaine !
merci
dans le fichier C:/ System volume information/_ restore..... et plein de chiffre ...
est ce que c normal ds avoir autant??
est ce que c grave??
je les mets tous en quarantaine !
merci
gil le fantom
Messages postés
2799
Date d'inscription
vendredi 18 janvier 2008
Statut
Membre
Dernière intervention
17 octobre 2010
25
16 mars 2008 à 10:46
16 mars 2008 à 10:46
bonjour je fais que passer
en attendant maijin
colle le rapport d'antivir c sera plus facile pour analyser ton probleme
a+
en attendant maijin
colle le rapport d'antivir c sera plus facile pour analyser ton probleme
a+
emmaka
Messages postés
161
Date d'inscription
vendredi 14 mars 2008
Statut
Membre
Dernière intervention
12 mai 2011
4
17 mars 2008 à 09:33
17 mars 2008 à 09:33
je viens de faire 1 scan ANTIVIR il me trouve DR/ FraudTool-SpywareSecure
et toujours TR/DROPPER .GEN mais cet fois ci j'essaie de le mettre en quarantaine met il veut pas ; le messsage reviens toujours !!!
quoi faire ???
et comment faire pour metre le rapport de scan ANTIVIR ( car moi et l'anglais ...)
merci
et toujours TR/DROPPER .GEN mais cet fois ci j'essaie de le mettre en quarantaine met il veut pas ; le messsage reviens toujours !!!
quoi faire ???
et comment faire pour metre le rapport de scan ANTIVIR ( car moi et l'anglais ...)
merci
^^Marie^^
Messages postés
113901
Date d'inscription
mardi 6 septembre 2005
Statut
Membre
Dernière intervention
28 août 2020
3 275
17 mars 2008 à 10:51
17 mars 2008 à 10:51
Où et la désinfection de ce rapport ??
emmaka
Messages postés
161
Date d'inscription
vendredi 14 mars 2008
Statut
Membre
Dernière intervention
12 mai 2011
4
17 mars 2008 à 11:03
17 mars 2008 à 11:03
ok MARIE mais comme ce poste est mis "résolu" je pensais que je devais en ouvrir 1 autres voila !!
je débute sur se forum !!
est ce qu'il faut que je fasse la desinfection ?
je débute sur se forum !!
est ce qu'il faut que je fasse la desinfection ?
^^Marie^^
Messages postés
113901
Date d'inscription
mardi 6 septembre 2005
Statut
Membre
Dernière intervention
28 août 2020
3 275
>
emmaka
Messages postés
161
Date d'inscription
vendredi 14 mars 2008
Statut
Membre
Dernière intervention
12 mai 2011
17 mars 2008 à 11:04
17 mars 2008 à 11:04
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
emmaka
Messages postés
161
Date d'inscription
vendredi 14 mars 2008
Statut
Membre
Dernière intervention
12 mai 2011
4
17 mars 2008 à 11:28
17 mars 2008 à 11:28
alors j'essaye mais arriver a 99% ça bip il me retrouve des virus que je met en quarantaine apres " impossible de copier Navilog acces refuser , verifier que le disque n'est pas plein ou proteger en ecriture et que le fichier n'est pas utiliser en ce moment"
quoi faire ??
merci
quoi faire ??
merci
AntiVir PersonalEdition Classic
Report file date: lundi 17 mars 2008 09:08
Scanning for 1147670 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Username: SYSTEM
Computer name: NOM-EB85C523610
Version information:
BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00
AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 13:16:29
AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 12:23:51
LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 15:32:47
LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 12:35:20
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 14:27:15
ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 07/03/2008 14:19:55
ANTIVIR2.VDF : 7.0.3.3 2048 Bytes 07/03/2008 14:19:55
ANTIVIR3.VDF : 7.0.3.31 158208 Bytes 14/03/2008 14:19:55
AVEWIN32.DLL : 7.6.0.73 3334656 Bytes 15/03/2008 14:19:56
AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:26
AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 07:39:17
AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24
AVPACK32.DLL : 7.6.0.3 360488 Bytes 15/03/2008 14:19:56
AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 07:17:06
AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 12:26:33
AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 07:10:18
NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:42
RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 12:38:13
RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 12:50:37
SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 09:37:21
Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: D:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Start of the scan: lundi 17 mars 2008 09:08
The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'hpsysdrv.exe' - '1' Module(s) have been scanned
Scan process 'atiptaxx.exe' - '1' Module(s) have been scanned
Scan process 'ALCXMNTR.EXE' - '1' Module(s) have been scanned
Scan process 'kbd.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'msmsgs.exe' - '1' Module(s) have been scanned
Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'vsnpstd2.exe' - '1' Module(s) have been scanned
Scan process 'realsched.exe' - '1' Module(s) have been scanned
Scan process 'qttask.exe' - '1' Module(s) have been scanned
Scan process 'hpwuSchd2.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
35 processes with 35 modules were scanned
Start scanning boot sectors:
Boot sector 'C:\'
[NOTE] No virus was found!
Boot sector 'D:\'
[NOTE] No virus was found!
Starting to scan the registry.
The registry was scanned ( '25' files ).
Starting the file scan:
Begin scan in 'C:\' <PRESARIO>
C:\hiberfil.sys
[WARNING] The file could not be opened!
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\karen0676@hotmail.fr\Sharing Folders\SpywareSecure_trial_setup.exe
[DETECTION] Contains detection pattern of the dropper DR/FraudTool.SpywareSecure.A
[INFO] The file was moved to '485727de.qua'!
C:\Program Files\Navilog1\Backupnavi\acdmwvsi.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '48422bd6.qua'!
C:\Program Files\Navilog1\Backupnavi\bcfpzryn.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '48442bde.qua'!
C:\Program Files\Navilog1\Backupnavi\bpgswuau.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '48452bff.qua'!
C:\Program Files\Navilog1\Backupnavi\cpgyhkf.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '48452e36.qua'!
C:\Program Files\Navilog1\Backupnavi\eoywfkvk.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '48573391.qua'!
C:\Program Files\Navilog1\Backupnavi\esjcsuqif.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484834c7.qua'!
C:\Program Files\Navilog1\Backupnavi\etegmzr.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484334c9.qua'!
C:\Program Files\Navilog1\Backupnavi\evttnh.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '485234cb.qua'!
C:\Program Files\Navilog1\Backupnavi\georxa.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484d34ba.qua'!
C:\Program Files\Navilog1\Backupnavi\gkahvitkr.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '483f34c1.qua'!
C:\Program Files\Navilog1\Backupnavi\gmrkfli.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '485034c3.qua'!
C:\Program Files\Navilog1\Backupnavi\henrgfzlmk.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484c34bc.qua'!
C:\Program Files\Navilog1\Backupnavi\hhjkqfxqo.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484834bf.qua'!
C:\Program Files\Navilog1\Backupnavi\hplwznahya.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484a34c8.qua'!
C:\Program Files\Navilog1\Backupnavi\ipmfeevdgd.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484b34c8.qua'!
C:\Program Files\Navilog1\Backupnavi\ipzbapze.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '485834c9.qua'!
C:\Program Files\Navilog1\Backupnavi\itnqam.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484c34cd.qua'!
C:\Program Files\Navilog1\Backupnavi\jkxykav.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '485634c4.qua'!
C:\Program Files\Navilog1\Backupnavi\kxjqth.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484834d2.qua'!
C:\Program Files\Navilog1\Backupnavi\lemiwg.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484b34c0.qua'!
C:\Program Files\Navilog1\Backupnavi\lezludsqgz.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '485834c0.qua'!
C:\Program Files\Navilog1\Backupnavi\lnpwtfj.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484e34c9.qua'!
C:\Program Files\Navilog1\Backupnavi\miqlepgnir.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484f34c5.qua'!
C:\Program Files\Navilog1\Backupnavi\nhwdxglli.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '485534c5.qua'!
C:\Program Files\Navilog1\Backupnavi\njmkeqntu.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484b34c7.qua'!
C:\Program Files\Navilog1\Backupnavi\pbgvgrdszp.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484534bf.qua'!
C:\Program Files\Navilog1\Backupnavi\ppynftzjy.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '485734ce.qua'!
C:\Program Files\Navilog1\Backupnavi\swgwzfcayi.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484534d6.qua'!
C:\Program Files\Navilog1\Backupnavi\syajej.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '483f34d8.qua'!
C:\Program Files\Navilog1\Backupnavi\tkssamf.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '485134cb.qua'!
C:\Program Files\Navilog1\Backupnavi\tncxolseb.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484134ce.qua'!
C:\Program Files\Navilog1\Backupnavi\uzhwbuussh.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484634db.qua'!
C:\Program Files\Navilog1\Backupnavi\vcrkie.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '485034c4.qua'!
C:\Program Files\Navilog1\Backupnavi\vfwzejr.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '485534c7.qua'!
C:\Program Files\Navilog1\Backupnavi\wjcqxptuj.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484134cc.qua'!
C:\Program Files\Navilog1\Backupnavi\wohztc.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484634d1.qua'!
C:\Program Files\Navilog1\Backupnavi\xksctpc.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '485134cd.qua'!
C:\Program Files\Navilog1\Backupnavi\xmxjkq.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '485634d0.qua'!
C:\Program Files\Navilog1\Backupnavi\zqibyjtgol.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484734d4.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP324\A0041036.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e34f9.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055943.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35d5.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055944.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c746.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055946.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35d6.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055948.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c747.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055949.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35d8.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055950.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35d7.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055952.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c748.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055955.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c749.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055957.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35da.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055958.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35d9.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055959.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c74a.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055965.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c74b.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055969.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35db.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055970.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c74c.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055972.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35dc.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055973.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c74d.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055975.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35de.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055976.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35dd.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055977.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c74e.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055978.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c74f.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055981.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35c0.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055982.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c751.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055983.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35df.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055984.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c770.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055985.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35e1.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055986.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35e0.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055987.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c771.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055989.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35e2.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056184.exe
[DETECTION] Contains detection pattern of the dropper DR/FraudTool.SpywareSecure.A
[INFO] The file was moved to '480e35eb.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056185.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c77c.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056186.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35ec.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056187.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c77d.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056188.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35ee.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056189.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35ed.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056190.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c77e.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056191.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35ef.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056192.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c77f.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056193.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e3510.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056194.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c781.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056195.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c760.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056196.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35f1.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056197.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c762.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056198.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35f0.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056199.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c761.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056200.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35f2.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056201.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35f3.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056202.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c764.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056203.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35f5.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056204.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c763.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056205.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35f4.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056206.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c765.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056207.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c766.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056208.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35f7.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056209.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c768.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056210.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35f9.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056211.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35f6.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056212.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c767.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056213.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c76a.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056214.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35fb.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056215.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35f8.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056216.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c769.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056217.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35fa.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056218.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c76c.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056219.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35fd.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056220.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c76e.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056221.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c76b.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056222.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35fc.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056223.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c76d.qua'!
Begin scan in 'D:\' <PRESARIO_RP>
donc voila le rapport :
End of the scan: lundi 17 mars 2008 10:30
Used time: 1:21:47 min
The scan has been done completely.
5007 Scanning directories
326694 Files were scanned
109 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
109 files were moved to quarantine
0 files were renamed
2 Files cannot be scanned
326585 Files not concerned
14017 Archives were scanned
2 Warnings
0 Notes
Report file date: lundi 17 mars 2008 09:08
Scanning for 1147670 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Username: SYSTEM
Computer name: NOM-EB85C523610
Version information:
BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00
AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 13:16:29
AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 12:23:51
LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 15:32:47
LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 12:35:20
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 14:27:15
ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 07/03/2008 14:19:55
ANTIVIR2.VDF : 7.0.3.3 2048 Bytes 07/03/2008 14:19:55
ANTIVIR3.VDF : 7.0.3.31 158208 Bytes 14/03/2008 14:19:55
AVEWIN32.DLL : 7.6.0.73 3334656 Bytes 15/03/2008 14:19:56
AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:26
AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 07:39:17
AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24
AVPACK32.DLL : 7.6.0.3 360488 Bytes 15/03/2008 14:19:56
AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 07:17:06
AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 12:26:33
AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 07:10:18
NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:42
RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 12:38:13
RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 12:50:37
SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 09:37:21
Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: D:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Start of the scan: lundi 17 mars 2008 09:08
The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'hpsysdrv.exe' - '1' Module(s) have been scanned
Scan process 'atiptaxx.exe' - '1' Module(s) have been scanned
Scan process 'ALCXMNTR.EXE' - '1' Module(s) have been scanned
Scan process 'kbd.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'msmsgs.exe' - '1' Module(s) have been scanned
Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'vsnpstd2.exe' - '1' Module(s) have been scanned
Scan process 'realsched.exe' - '1' Module(s) have been scanned
Scan process 'qttask.exe' - '1' Module(s) have been scanned
Scan process 'hpwuSchd2.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
35 processes with 35 modules were scanned
Start scanning boot sectors:
Boot sector 'C:\'
[NOTE] No virus was found!
Boot sector 'D:\'
[NOTE] No virus was found!
Starting to scan the registry.
The registry was scanned ( '25' files ).
Starting the file scan:
Begin scan in 'C:\' <PRESARIO>
C:\hiberfil.sys
[WARNING] The file could not be opened!
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Microsoft\Messenger\karen0676@hotmail.fr\Sharing Folders\SpywareSecure_trial_setup.exe
[DETECTION] Contains detection pattern of the dropper DR/FraudTool.SpywareSecure.A
[INFO] The file was moved to '485727de.qua'!
C:\Program Files\Navilog1\Backupnavi\acdmwvsi.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '48422bd6.qua'!
C:\Program Files\Navilog1\Backupnavi\bcfpzryn.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '48442bde.qua'!
C:\Program Files\Navilog1\Backupnavi\bpgswuau.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '48452bff.qua'!
C:\Program Files\Navilog1\Backupnavi\cpgyhkf.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '48452e36.qua'!
C:\Program Files\Navilog1\Backupnavi\eoywfkvk.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '48573391.qua'!
C:\Program Files\Navilog1\Backupnavi\esjcsuqif.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484834c7.qua'!
C:\Program Files\Navilog1\Backupnavi\etegmzr.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484334c9.qua'!
C:\Program Files\Navilog1\Backupnavi\evttnh.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '485234cb.qua'!
C:\Program Files\Navilog1\Backupnavi\georxa.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484d34ba.qua'!
C:\Program Files\Navilog1\Backupnavi\gkahvitkr.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '483f34c1.qua'!
C:\Program Files\Navilog1\Backupnavi\gmrkfli.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '485034c3.qua'!
C:\Program Files\Navilog1\Backupnavi\henrgfzlmk.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484c34bc.qua'!
C:\Program Files\Navilog1\Backupnavi\hhjkqfxqo.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484834bf.qua'!
C:\Program Files\Navilog1\Backupnavi\hplwznahya.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484a34c8.qua'!
C:\Program Files\Navilog1\Backupnavi\ipmfeevdgd.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484b34c8.qua'!
C:\Program Files\Navilog1\Backupnavi\ipzbapze.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '485834c9.qua'!
C:\Program Files\Navilog1\Backupnavi\itnqam.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484c34cd.qua'!
C:\Program Files\Navilog1\Backupnavi\jkxykav.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '485634c4.qua'!
C:\Program Files\Navilog1\Backupnavi\kxjqth.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484834d2.qua'!
C:\Program Files\Navilog1\Backupnavi\lemiwg.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484b34c0.qua'!
C:\Program Files\Navilog1\Backupnavi\lezludsqgz.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '485834c0.qua'!
C:\Program Files\Navilog1\Backupnavi\lnpwtfj.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484e34c9.qua'!
C:\Program Files\Navilog1\Backupnavi\miqlepgnir.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484f34c5.qua'!
C:\Program Files\Navilog1\Backupnavi\nhwdxglli.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '485534c5.qua'!
C:\Program Files\Navilog1\Backupnavi\njmkeqntu.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484b34c7.qua'!
C:\Program Files\Navilog1\Backupnavi\pbgvgrdszp.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484534bf.qua'!
C:\Program Files\Navilog1\Backupnavi\ppynftzjy.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '485734ce.qua'!
C:\Program Files\Navilog1\Backupnavi\swgwzfcayi.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484534d6.qua'!
C:\Program Files\Navilog1\Backupnavi\syajej.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '483f34d8.qua'!
C:\Program Files\Navilog1\Backupnavi\tkssamf.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '485134cb.qua'!
C:\Program Files\Navilog1\Backupnavi\tncxolseb.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484134ce.qua'!
C:\Program Files\Navilog1\Backupnavi\uzhwbuussh.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484634db.qua'!
C:\Program Files\Navilog1\Backupnavi\vcrkie.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '485034c4.qua'!
C:\Program Files\Navilog1\Backupnavi\vfwzejr.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '485534c7.qua'!
C:\Program Files\Navilog1\Backupnavi\wjcqxptuj.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484134cc.qua'!
C:\Program Files\Navilog1\Backupnavi\wohztc.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484634d1.qua'!
C:\Program Files\Navilog1\Backupnavi\xksctpc.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '485134cd.qua'!
C:\Program Files\Navilog1\Backupnavi\xmxjkq.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '485634d0.qua'!
C:\Program Files\Navilog1\Backupnavi\zqibyjtgol.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '484734d4.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP324\A0041036.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e34f9.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055943.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35d5.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055944.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c746.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055946.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35d6.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055948.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c747.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055949.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35d8.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055950.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35d7.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055952.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c748.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055955.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c749.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055957.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35da.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055958.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35d9.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055959.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c74a.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055965.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c74b.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055969.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35db.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055970.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c74c.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055972.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35dc.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055973.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c74d.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055975.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35de.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055976.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35dd.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055977.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c74e.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055978.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c74f.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055981.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35c0.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055982.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c751.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055983.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35df.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055984.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c770.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055985.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35e1.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055986.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35e0.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055987.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c771.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP401\A0055989.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35e2.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056184.exe
[DETECTION] Contains detection pattern of the dropper DR/FraudTool.SpywareSecure.A
[INFO] The file was moved to '480e35eb.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056185.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c77c.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056186.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35ec.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056187.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c77d.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056188.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35ee.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056189.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35ed.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056190.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c77e.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056191.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35ef.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056192.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c77f.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056193.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e3510.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056194.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c781.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056195.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c760.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056196.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35f1.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056197.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c762.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056198.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35f0.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056199.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c761.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056200.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35f2.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056201.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35f3.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056202.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c764.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056203.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35f5.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056204.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c763.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056205.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35f4.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056206.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c765.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056207.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c766.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056208.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35f7.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056209.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c768.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056210.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35f9.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056211.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35f6.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056212.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c767.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056213.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c76a.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056214.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35fb.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056215.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35f8.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056216.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c769.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056217.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35fa.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056218.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c76c.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056219.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35fd.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056220.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c76e.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056221.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c76b.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056222.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480e35fc.qua'!
C:\System Volume Information\_restore{F75EEC69-6E97-419B-93B4-6A3A275301C4}\RP403\A0056223.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '4b55c76d.qua'!
Begin scan in 'D:\' <PRESARIO_RP>
donc voila le rapport :
End of the scan: lundi 17 mars 2008 10:30
Used time: 1:21:47 min
The scan has been done completely.
5007 Scanning directories
326694 Files were scanned
109 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
109 files were moved to quarantine
0 files were renamed
2 Files cannot be scanned
326585 Files not concerned
14017 Archives were scanned
2 Warnings
0 Notes
^^Marie^^
Messages postés
113901
Date d'inscription
mardi 6 septembre 2005
Statut
Membre
Dernière intervention
28 août 2020
3 275
17 mars 2008 à 11:50
17 mars 2008 à 11:50
emmaka
Messages postés
161
Date d'inscription
vendredi 14 mars 2008
Statut
Membre
Dernière intervention
12 mai 2011
4
17 mars 2008 à 11:55
17 mars 2008 à 11:55
eh bien pourtant g tout fait comme il faut !
et quand je vais sur mon disque dur ds POSTE DE TRAVAIL disque C je trouve Tcleaner document texte
c'est celui la que je t'ai mis !!
et quand je vais sur mon disque dur ds POSTE DE TRAVAIL disque C je trouve Tcleaner document texte
c'est celui la que je t'ai mis !!
^^Marie^^
Messages postés
113901
Date d'inscription
mardi 6 septembre 2005
Statut
Membre
Dernière intervention
28 août 2020
3 275
17 mars 2008 à 11:56
17 mars 2008 à 11:56
Non
C'est le rapport Antivir que tu m'as mis
AntiVir PersonalEdition Classic
Report file date: lundi 17 mars 2008 09:08
C'est le rapport Antivir que tu m'as mis
AntiVir PersonalEdition Classic
Report file date: lundi 17 mars 2008 09:08
emmaka
Messages postés
161
Date d'inscription
vendredi 14 mars 2008
Statut
Membre
Dernière intervention
12 mai 2011
4
17 mars 2008 à 12:02
17 mars 2008 à 12:02
j'ai refait la manip. et maintenat il ne trouve plus rien ; il fait RECHERCHE mais y'a rien
et ds mon poste de travail il n'y a plus rien non plus DS TCLEANER !!
désoler d'etre si compliquer!!
et ds mon poste de travail il n'y a plus rien non plus DS TCLEANER !!
désoler d'etre si compliquer!!
^^Marie^^
Messages postés
113901
Date d'inscription
mardi 6 septembre 2005
Statut
Membre
Dernière intervention
28 août 2020
3 275
17 mars 2008 à 12:04
17 mars 2008 à 12:04
Poste moi le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur( C:\).
emmaka
Messages postés
161
Date d'inscription
vendredi 14 mars 2008
Statut
Membre
Dernière intervention
12 mai 2011
4
17 mars 2008 à 12:08
17 mars 2008 à 12:08
je veux bien mais comment aller a la racine de mon disque ??
^^Marie^^
Messages postés
113901
Date d'inscription
mardi 6 septembre 2005
Statut
Membre
Dernière intervention
28 août 2020
3 275
17 mars 2008 à 12:16
17 mars 2008 à 12:16
Dans C:\ lorsque tu es dans l'explorateur
Sinon tu fais
démarrer
rechercher
tous les fichier
► TCleaner.txt
Sinon tu fais
démarrer
rechercher
tous les fichier
► TCleaner.txt
emmaka
Messages postés
161
Date d'inscription
vendredi 14 mars 2008
Statut
Membre
Dernière intervention
12 mai 2011
4
17 mars 2008 à 12:22
17 mars 2008 à 12:22
ek bien oui c se que je fais !
mais maintenat il n'ya plus rien ds Tcleaner
c juste mis RECHERCHE
PUI S PLUS RIEN
mais maintenat il n'ya plus rien ds Tcleaner
c juste mis RECHERCHE
PUI S PLUS RIEN
^^Marie^^
Messages postés
113901
Date d'inscription
mardi 6 septembre 2005
Statut
Membre
Dernière intervention
28 août 2020
3 275
17 mars 2008 à 12:23
17 mars 2008 à 12:23
Supprime le complètement et refais le
emmaka
Messages postés
161
Date d'inscription
vendredi 14 mars 2008
Statut
Membre
Dernière intervention
12 mai 2011
4
17 mars 2008 à 13:29
17 mars 2008 à 13:29
je le supprime ou ? car je ne trouve pas TCLEANER dans mon panneau de configuration quand je fais ajouter ou supprimer progarmme
emmaka
Messages postés
161
Date d'inscription
vendredi 14 mars 2008
Statut
Membre
Dernière intervention
12 mai 2011
4
17 mars 2008 à 17:18
17 mars 2008 à 17:18
euh MARIE t'est plus là ??
qui peut m'aider ??
car là je suis bloquer ! je ne sai splus quoi faire
qui peut m'aider ??
car là je suis bloquer ! je ne sai splus quoi faire
emmaka
Messages postés
161
Date d'inscription
vendredi 14 mars 2008
Statut
Membre
Dernière intervention
12 mai 2011
4
18 mars 2008 à 10:20
18 mars 2008 à 10:20
qu'est ce que je fait maintenant?
qu'elqu'un peut m'aider?
SVP
qu'elqu'un peut m'aider?
SVP
^^Marie^^
Messages postés
113901
Date d'inscription
mardi 6 septembre 2005
Statut
Membre
Dernière intervention
28 août 2020
3 275
18 mars 2008 à 10:30
18 mars 2008 à 10:30
Slt
Faudrait quand mm que tu arrives à faire TOOL
Refais un log hijackthis -- stp
Faudrait quand mm que tu arrives à faire TOOL
Refais un log hijackthis -- stp
emmaka
Messages postés
161
Date d'inscription
vendredi 14 mars 2008
Statut
Membre
Dernière intervention
12 mai 2011
4
18 mars 2008 à 10:36
18 mars 2008 à 10:36
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:36:01, on 18/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\vsnpstd2.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
c:\windows\system\hpsysdrv.exe
C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://portail.free.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: &Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SNPSTD2] C:\WINDOWS\vsnpstd2.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?bc29c86bdd74499bb894523124ec3097
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?bc29c86bdd74499bb894523124ec3097
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.fr/SnapfishActivia.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://copainsdavant.linternaute.com/html_include_bibliotheque/objimageuploader/ImageUploader4.cab
O16 - DPF: {A73BAEFA-EE65-494D-BEDB-DD3E5A34FA98} (Image Uploader) - http://www.extrafilm.fr/ImageUploader4.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O24 - Desktop Component 0: (no name) - http://www.aliceadsl.fr/inchome2006/img/ang_haut_462.gif
Scan saved at 10:36:01, on 18/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\vsnpstd2.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
c:\windows\system\hpsysdrv.exe
C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://portail.free.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: &Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SNPSTD2] C:\WINDOWS\vsnpstd2.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?bc29c86bdd74499bb894523124ec3097
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?bc29c86bdd74499bb894523124ec3097
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.fr/SnapfishActivia.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://copainsdavant.linternaute.com/html_include_bibliotheque/objimageuploader/ImageUploader4.cab
O16 - DPF: {A73BAEFA-EE65-494D-BEDB-DD3E5A34FA98} (Image Uploader) - http://www.extrafilm.fr/ImageUploader4.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O24 - Desktop Component 0: (no name) - http://www.aliceadsl.fr/inchome2006/img/ang_haut_462.gif
16 mars 2008 à 12:20