Virus msn "fotos052"

coco -  
fredlille59 Messages postés 282 Statut Membre -
Bonjour,j ai recu un fichier zip nomme"fotos052" par wlm je l ai pris et depuis je l envoi a tous mes contacts tout seul connaissez vous ce virus merci
Configuration: Windows XP
Internet Explorer 6.0

14 réponses

  1. fredlille59 Messages postés 282 Statut Membre 25
     
    une seule solution, telecharger ANTIVIR et faire un scan, ton antiviraus (peut etre avast) ne protege pas msn
    ... bonjour
    0
    1. coco
       
      merci je fais et met une reponse
      0
    2. coco
       
      ok fredille59 je l installe je fais un scan et je le laisse installe ou supprime y a pas de risque avec mon antivirus actuel"avast" merci
      0
  2. fredlille59 Messages postés 282 Statut Membre 25
     
    vas y mais attention neutralise ton antivirus, il peut y avoir des problemes entre eux ...
    0
    1. coco
       
      ok merci je fais et donne une reponse merci fredille59
      0
  3. fredlille59 Messages postés 282 Statut Membre 25
     
    CLIC GAUCHE sur avast en bas a droite et arretter protection residente ...
    0
    1. coco
       
      excuse moi je suis pas tres fort et peux tu me dire comment faire un scan avec antivir
      0
  4. fredlille59 Messages postés 282 Statut Membre 25
     
    TU CLIQUES sur le parapluie en bas a droite et apres "scan system now" tu passes en quarantaine tes fichiers infectes ...
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. fredlille59 Messages postés 282 Statut Membre 25
     
    tu me dis koi selon ce qu il y a en quarantaine tu pourras les effacer ... a mon avis ceela vient de fichiers d intallation msn ou de mise à jour infectées ... ceux la vires les de suite
    0
    1. coco
       
      ok je met en quarantaine et quand c est fini je te di ce qu il y a merci
      0
    2. coco
       
      excuse moi y a t il un rapport a la fin du scan si oui ou est il pour que je le copie
      0
  7. fredlille59 Messages postés 282 Statut Membre 25
     
    lol
    0
  8. fredlille59 Messages postés 282 Statut Membre 25
     
    apres nettoies ton pc avec ccleaner, facile a utiliser, deux utilitaire, un pour nettoyer les cookies et un autre pour nettoyer les rreurs de ta base de registre ... ton pc va prendre de la vitesse ...
    https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html
    et un anti spyware
    http://www.commentcamarche.net/telecharger/telecharger 218 avg anti spyware
    avec ca deja si tu es novice tu peux avoir un pc propre
    0
  9. fredlille59 Messages postés 282 Statut Membre 25
     
    Vindiuuuu sais nin mi !!! as tu eu des virus en qurantaine ? SI I L Y EN A EU il y a eu une question a chaque fois
    0
    1. coco
       
      oui j ai mi en quarantaine je suis a 99,8% du scan a la fin je te di ce qu il y a dedans j ai bien fait de mettre en quarantaine?
      0
  10. fredlille59 Messages postés 282 Statut Membre 25
     
    oui, bien sur, a mon avis tout est sur des fichiers d instal msn mais bon, tu vois qu avast c une passoire ... a mon avis pas besoin de booter, essaies de suite msn ... et ne plus ouvrir de message sur le live sauf si tu sais que c qq qui te l a envoyer
    0
    1. coco
       
      oui pourtant j ai avast depuis plusieurs annee et jamais de probleme et pour le dossier fotos052 c est d une amie que je l ai recu je pense que c ete un fichier photo et c est pas la premiere fois que j envoi et recoi des fichiers de cette personne merci je te met le rapport si tu peux m aide merci
      0
    2. coco
       
      AntiVir PersonalEdition Classic
      Report file date: dimanche 16 mars 2008 18:58

      Scanning for 1149506 virus strains and unwanted programs.

      Licensed to: Avira AntiVir PersonalEdition Classic
      Serial number: 0000149996-ADJIE-0001
      Platform: Windows XP
      Windows version: (Service Pack 2) [5.1.2600]
      Username: SYSTEM
      Computer name: SN012345678912

      Version information:
      BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00
      AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 13:16:29
      AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 12:23:51
      LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 15:32:47
      LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 12:35:20
      ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 14:27:15
      ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 07/03/2008 17:54:28
      ANTIVIR2.VDF : 7.0.3.3 2048 Bytes 07/03/2008 17:54:28
      ANTIVIR3.VDF : 7.0.3.33 180736 Bytes 16/03/2008 17:54:28
      AVEWIN32.DLL : 7.6.0.73 3334656 Bytes 16/03/2008 17:54:30
      AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:26
      AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 07:39:17
      AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24
      AVPACK32.DLL : 7.6.0.3 360488 Bytes 16/03/2008 17:54:30
      AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 07:17:06
      AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 12:26:33
      AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 07:10:18
      NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:42
      RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 12:38:13
      RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 12:50:37
      SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 09:37:21

      Configuration settings for the scan:
      Jobname..........................: Complete system scan
      Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
      Logging..........................: low
      Primary action...................: interactive
      Secondary action.................: ignore
      Scan master boot sector..........: off
      Scan boot sector.................: on
      Boot sectors.....................: C:,
      Scan memory......................: on
      Process scan.....................: on
      Scan registry....................: on
      Search for rootkits..............: off
      Scan all files...................: Intelligent file selection
      Scan archives....................: on
      Recursion depth..................: 20
      Smart extensions.................: on
      Macro heuristic..................: on
      File heuristic...................: medium

      Start of the scan: dimanche 16 mars 2008 18:58

      The scan of running processes will be started
      Scan process 'avscan.exe' - '1' Module(s) have been scanned
      Scan process 'avcenter.exe' - '1' Module(s) have been scanned
      Scan process 'sched.exe' - '1' Module(s) have been scanned
      Scan process 'avgnt.exe' - '1' Module(s) have been scanned
      Scan process 'avguard.exe' - '1' Module(s) have been scanned
      Scan process 'WLLoginProxy.exe' - '1' Module(s) have been scanned
      Scan process 'IEXPLORE.EXE' - '1' Module(s) have been scanned
      Scan process 'usnsvc.exe' - '1' Module(s) have been scanned
      Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
      Scan process 'dllhost.exe' - '1' Module(s) have been scanned
      Scan process 'GoogleDesktop.exe' - '1' Module(s) have been scanned
      Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
      Scan process 'NMIndexStoreSvr.exe' - '1' Module(s) have been scanned
      Scan process 'NMBgMonitor.exe' - '1' Module(s) have been scanned
      Scan process 'SuperCopier2.exe' - '1' Module(s) have been scanned
      Scan process 'GoogleDesktop.exe' - '1' Module(s) have been scanned
      Scan process 'GoogleDesktop.exe' - '1' Module(s) have been scanned
      Scan process 'alg.exe' - '1' Module(s) have been scanned
      Scan process 'MWSOEMON.EXE' - '1' Module(s) have been scanned
      Scan process 'winampa.exe' - '1' Module(s) have been scanned
      Scan process 'ashDisp.exe' - '1' Module(s) have been scanned
      Scan process 'jusched.exe' - '1' Module(s) have been scanned
      Scan process 'RTHDCPL.exe' - '1' Module(s) have been scanned
      Scan process 'SynTPEnh.exe' - '1' Module(s) have been scanned
      Scan process 'ehmsas.exe' - '1' Module(s) have been scanned
      Scan process 'ehtray.exe' - '1' Module(s) have been scanned
      Scan process 'ashWebSv.exe' - '1' Module(s) have been scanned
      Scan process 'ashMaiSv.exe' - '1' Module(s) have been scanned
      Scan process 'mcrdsvc.exe' - '1' Module(s) have been scanned
      Scan process 'svchost.exe' - '1' Module(s) have been scanned
      Scan process 'PAStiSvc.exe' - '1' Module(s) have been scanned
      Scan process 'svchost.exe' - '1' Module(s) have been scanned
      Scan process 'ehSched.exe' - '1' Module(s) have been scanned
      Scan process 'ehrecvr.exe' - '1' Module(s) have been scanned
      Scan process 'ADCDLicSvc.exe' - '1' Module(s) have been scanned
      Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
      Scan process 'explorer.exe' - '1' Module(s) have been scanned
      Scan process 'ashServ.exe' - '1' Module(s) have been scanned
      Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned
      Scan process 'aswUpdSv.exe' - '1' Module(s) have been scanned
      Scan process 'svchost.exe' - '1' Module(s) have been scanned
      Scan process 'svchost.exe' - '1' Module(s) have been scanned
      Scan process 'svchost.exe' - '1' Module(s) have been scanned
      Scan process 'svchost.exe' - '1' Module(s) have been scanned
      Scan process 'svchost.exe' - '1' Module(s) have been scanned
      Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned
      Scan process 'lsass.exe' - '1' Module(s) have been scanned
      Scan process 'services.exe' - '1' Module(s) have been scanned
      Scan process 'winlogon.exe' - '1' Module(s) have been scanned
      Scan process 'csrss.exe' - '1' Module(s) have been scanned
      Scan process 'smss.exe' - '1' Module(s) have been scanned
      51 processes with 51 modules were scanned

      Start scanning boot sectors:
      Boot sector 'C:\'
      [NOTE] No virus was found!

      Starting to scan the registry.
      The registry was scanned ( '37' files ).


      Starting the file scan:

      Begin scan in 'C:\' <HDD>
      C:\hiberfil.sys
      [WARNING] The file could not be opened!
      C:\pagefile.sys
      [WARNING] The file could not be opened!
      C:\Documents and Settings\rivault colette\Bureau\MSNFix\16032008_18204450.zip
      [0] Archive type: ZIP
      --> backup/foto052.zip
      [1] Archive type: ZIP
      --> foto052.JPG-www.facebook.com
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [INFO] The file was moved to '480d61e7.qua'!
      C:\Documents and Settings\rivault colette\Local Settings\Temporary Internet Files\Content.IE5\TKQOGJ3W\c13[1].exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [INFO] The file was moved to '48106321.qua'!
      C:\System Volume Information\_restore{B3BF5352-B406-412E-936E-A9436F19C528}\RP119\A0012253.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [INFO] The file was moved to '480d69e7.qua'!
      C:\System Volume Information\_restore{B3BF5352-B406-412E-936E-A9436F19C528}\RP120\A0012392.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [INFO] The file was moved to '480d69ed.qua'!
      C:\System Volume Information\_restore{B3BF5352-B406-412E-936E-A9436F19C528}\RP37\A0005991.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO] The file was moved to '480d6a18.qua'!
      C:\System Volume Information\_restore{B3BF5352-B406-412E-936E-A9436F19C528}\RP37\A0006000.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO] The file was moved to '480d6a1a.qua'!
      C:\System Volume Information\_restore{B3BF5352-B406-412E-936E-A9436F19C528}\RP40\A0006031.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO] The file was moved to '480d6a1f.qua'!
      C:\System Volume Information\_restore{B3BF5352-B406-412E-936E-A9436F19C528}\RP40\A0006054.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO] The file was moved to '480d6a22.qua'!
      C:\System Volume Information\_restore{B3BF5352-B406-412E-936E-A9436F19C528}\RP40\A0006055.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO] The file was moved to '480d6a24.qua'!


      End of the scan: dimanche 16 mars 2008 20:13
      Used time: 1:15:03 min

      The scan has been done completely.

      4618 Scanning directories
      222908 Files were scanned
      9 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      9 files were moved to quarantine
      0 files were renamed
      2 Files cannot be scanned
      222899 Files not concerned
      10865 Archives were scanned
      2 Warnings
      0 Notes
      0
  11. fredlille59 Messages postés 282 Statut Membre 25
     
    BEN VOILA, tu dois etre tranquille la, tu peux tout virer c que des fichiers temps ou d install
    0
    1. coco
       
      ok merci je supprime tout sans risque et normalement plus de problrme?? merci de ton aide
      0
  12. fredlille59 Messages postés 282 Statut Membre 25
     
    pas de soucis, de rien bonne soiree
    0
  13. fredlille59 Messages postés 282 Statut Membre 25
     
    desinstalle avast aussi ...
    0
    1. coco
       
      ok merci a toi si je retire avast je met lequel antivirus??
      0
  14. fredlille59 Messages postés 282 Statut Membre 25
     
    ANTIVIR

    Avast! est loin de ce que l'on a fait de mieux en matière de protection, voir ce lien pour plus d'informations : http://forum.malekal.com/ftopic3123.php

    Clairement, Antivir est beaucoup plus performant, c'est pourquoi, je te conseille TRES VIVEMENT de désinstaller Avast! et installer Antivir à la place : https://www.malekal.com/avira-free-security-antivirus-gratuit/ ( ce n est pas une obligation)
    - Après l'installation, mets le à jour - si ton firewall fait une alerte.. accepte la connexion.
    - Assure toi qu'Antivir est bien à jour, vérifie la date d'update. Tu dois avoir antivir d intallé maintenant
    0
    1. coco
       
      ok merci a toi je fais ca et te souhaite une bonne soiree
      0
  15. fredlille59 Messages postés 282 Statut Membre 25
     
    de rien biloutte
    0