Sujet Précédent Sujet Suivant

VIRUS et Kaspersky scanner report

germainh -  
 Utilisateur anonyme -
Bonjour,
après avoir attrapé un virus en téléchargant un soit-disant codec vidéo, j'ai fait une analyse en ligne avec Kaspersky. Le problème est que je ne sais pas l'interpréter. Est ce que ça a supprimé les virus, je ne pense pas puisque j'ai tout un tas de popups pour des trucs divers et pour des anti virus douteux.
Est ce que quelqu'un sur le forum aurait l'amabilité de me dire quoi faire et comment, s'il vous plait ?
Je poste le rapport d'analyse juste après.
Merci d'avance.

Monday, April 07, 2008 8:54:57 PM
Operating System: Microsoft Windows Vista Home Edition, (Build 6000)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 7/04/2008
Kaspersky Anti-Virus database records: 688619

Scan Settings
Scan using the following antivirus database extended
Scan Archives true
Scan Mail Bases true

Scan Target My Computer
C:\
D:\
E:\

Scan Statistics
Total number of scanned objects 79116
Number of viruses found 4
Number of infected objects 10
Number of suspicious objects 0
Duration of the scan process 01:44:25

Infected Object Name Virus Name Last Action
C:\Program Files\Alwil Software\Avast4\DATA\aswResp.dat Object is locked skipped

C:\Program Files\Alwil Software\Avast4\DATA\Avast4.db Object is locked skipped

C:\Program Files\Alwil Software\Avast4\DATA\integ\avast.int Object is locked skipped

C:\Program Files\Alwil Software\Avast4\DATA\log\AshWebSv.ws Object is locked skipped

C:\Program Files\Alwil Software\Avast4\DATA\log\aswMaiSv.log Object is locked skipped

C:\Program Files\Alwil Software\Avast4\DATA\log\nshield.log Object is locked skipped

C:\Program Files\Alwil Software\Avast4\DATA\report\Resident protection.txt Object is locked skipped

C:\Program Files\InstallShield Installation Information\{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2}\Setup.ilg Object is locked skipped

C:\Program Files\InstallShield Installation Information\{B145EC69-66F5-11D8-9D75-000129760D75}\setup.ilg Object is locked skipped

C:\Program Files\InstallShield Installation Information\{B7A0CE06-068E-11D6-97FD-0050BACBF861}\setup.ilg Object is locked skipped

C:\Program Files\InstallShield Installation Information\{B804C424-B66D-447A-84BD-C6B88C392C3A}\setup.ilg Object is locked skipped

C:\Program Files\InstallShield Installation Information\{EFBDC2B0-FAA8-4B78-8DE1-AEBE7958FA37}\setup.ilg Object is locked skipped

C:\Program Files\InstallShield Installation Information\{F79A208D-D929-11D9-9D77-000129760D75}\setup.ilg Object is locked skipped

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\296da3100d929ca8b889aef491766c31_c3ab0d23-0163-4c91-9b5c-ee9273eb12c2 Object is locked skipped

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\87c4cd7e54fd2318cf8466bf7e11c761_2ed9aa2a-bf32-4e89-a6fa-d211c10b423f Object is locked skipped

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\cbc5f6ecfbc2447702e71e698f883b66_c3ab0d23-0163-4c91-9b5c-ee9273eb12c2 Object is locked skipped

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e254c57c7777589a5b27c6c346629392_aa6ff3bd-a21b-4864-b7c9-737786b20fc0 Object is locked skipped

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e291d9d6ad2cb07052c4501b41fcc271_c3ab0d23-0163-4c91-9b5c-ee9273eb12c2 Object is locked skipped

C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f6b8612b42c9cc6eeb41c708f51896bf_c3ab0d23-0163-4c91-9b5c-ee9273eb12c2 Object is locked skipped

C:\ProgramData\Microsoft\User Account Pictures\Administrator.dat Object is locked skipped

C:\Users\Germain\AppData\Local\Last.fm\Client\Last.fm.log Object is locked skipped

C:\Users\Germain\AppData\Local\Last.fm\Client\lastfmhelper.log Object is locked skipped

C:\Users\Germain\AppData\Local\Microsoft\Feeds Cache\index.dat Object is locked skipped

C:\Users\Germain\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat Object is locked skipped

C:\Users\Germain\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012008040720080408\index.dat Object is locked skipped

C:\Users\Germain\AppData\Local\Microsoft\Windows\History\Low\History.IE5\index.dat Object is locked skipped

C:\Users\Germain\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\30J9LRLS\hctp[1] Infected: not-a-virus:AdWare.Win32.Virtumonde.mwq skipped

C:\Users\Germain\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped

C:\Users\Germain\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped

C:\Users\Germain\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\index.dat Object is locked skipped

C:\Users\Germain\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\MSIMGSIZ.DAT Object is locked skipped

C:\Users\Germain\AppData\Local\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Users\Germain\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG1 Object is locked skipped

C:\Users\Germain\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG2 Object is locked skipped

C:\Users\Germain\AppData\Local\Microsoft\Windows\UsrClass.dat{b37a6a89-edcd-11db-b956-0016d350b80b}.TM.blf Object is locked skipped

C:\Users\Germain\AppData\Local\Microsoft\Windows\UsrClass.dat{b37a6a89-edcd-11db-b956-0016d350b80b}.TMContainer00000000000000000001.regtrans-ms Object is locked skipped

C:\Users\Germain\AppData\Local\Microsoft\Windows\UsrClass.dat{b37a6a89-edcd-11db-b956-0016d350b80b}.TMContainer00000000000000000002.regtrans-ms Object is locked skipped

C:\Users\Germain\AppData\Local\Microsoft\Windows Defender\FileTracker\{4CFA965D-B0B0-44BB-81AD-E6C5E2AD22ED} Object is locked skipped

C:\Users\Germain\AppData\Local\Microsoft\Windows Sidebar\Settings.ini Object is locked skipped

C:\Users\Germain\AppData\Local\Temp\2c0bf1a9.exe Infected: not-a-virus:Downloader.Win32.UltimateFix.n skipped

C:\Users\Germain\AppData\Local\Temp\9bb97311.exe Infected: not-a-virus:Downloader.Win32.UltimateFix.n skipped

C:\Users\Germain\AppData\Local\Temp\efCTnLec.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.mxj skipped

C:\Users\Germain\AppData\Local\Temp\geBstuVm.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.mxi skipped

C:\Users\Germain\AppData\Local\Temp\Low\hsperfdata_Germain\4572 Object is locked skipped

C:\Users\Germain\AppData\Local\Temp\tmp0000a015 Infected: not-a-virus:AdWare.Win32.Virtumonde.mxj skipped

C:\Users\Germain\AppData\Local\Temp\tmp0000ce27 Infected: not-a-virus:AdWare.Win32.Virtumonde.mxj skipped

C:\Users\Germain\AppData\Local\Temp\tmp0000fb4e Infected: not-a-virus:AdWare.Win32.Virtumonde.mxj skipped

C:\Users\Germain\AppData\Local\Temp\tmp0001f68e Infected: not-a-virus:AdWare.Win32.Virtumonde.mxj skipped

C:\Users\Germain\AppData\Local\Temp\yejribbd.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.mwq skipped

C:\Users\Germain\AppData\Roaming\Microsoft\Windows\Cookies\index.dat Object is locked skipped

C:\Users\Germain\AppData\Roaming\Microsoft\Windows\Cookies\Low\index.dat Object is locked skipped

C:\Users\Germain\NTUSER.DAT Object is locked skipped

C:\Users\Germain\ntuser.dat.LOG1 Object is locked skipped

C:\Users\Germain\ntuser.dat.LOG2 Object is locked skipped

C:\Users\Germain\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf Object is locked skipped

C:\Users\Germain\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms Object is locked skipped

C:\Users\Germain\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000002.regtrans-ms Object is locked skipped

C:\Windows\Debug\PASSWD.LOG Object is locked skipped

C:\Windows\Debug\sam.log Object is locked skipped

C:\Windows\Debug\WIA\wiatrace.log Object is locked skipped

C:\Windows\Logs\CBS\CBS.log Object is locked skipped

C:\Windows\Logs\CBS\CBS.persist.log Object is locked skipped

C:\Windows\Logs\DPX\setupact.log Object is locked skipped

C:\Windows\Logs\DPX\setuperr.log Object is locked skipped

C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe.config Object is locked skipped

C:\Windows\Panther\UnattendGC\diagerr.xml Object is locked skipped

C:\Windows\Panther\UnattendGC\diagwrn.xml Object is locked skipped

C:\Windows\Panther\UnattendGC\setupact.log Object is locked skipped

C:\Windows\Panther\UnattendGC\setuperr.log Object is locked skipped

C:\Windows\security\database\secedit.sdb Object is locked skipped

C:\Windows\SoftwareDistribution\EventCache\{5DDD28F2-ED71-4D9D-A627-0C5F8391B85B}.bin Object is locked skipped

C:\Windows\SoftwareDistribution\ReportingEvents.log Object is locked skipped

C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 Object is locked skipped

C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 Object is locked skipped

C:\Windows\System32\catroot2\edb.log Object is locked skipped

C:\Windows\System32\catroot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb Object is locked skipped

C:\Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb Object is locked skipped

C:\Windows\System32\config\COMPONENTS Object is locked skipped

C:\Windows\System32\config\COMPONENTS.LOG1 Object is locked skipped

C:\Windows\System32\config\COMPONENTS.LOG2 Object is locked skipped

C:\Windows\System32\config\DEFAULT Object is locked skipped

C:\Windows\System32\config\DEFAULT.LOG1 Object is locked skipped

C:\Windows\System32\config\DEFAULT.LOG2 Object is locked skipped

C:\Windows\System32\config\SAM Object is locked skipped

C:\Windows\System32\config\SAM.LOG1 Object is locked skipped

C:\Windows\System32\config\SAM.LOG2 Object is locked skipped

C:\Windows\System32\config\SECURITY Object is locked skipped

C:\Windows\System32\config\SECURITY.LOG1 Object is locked skipped

C:\Windows\System32\config\SECURITY.LOG2 Object is locked skipped

C:\Windows\System32\config\SOFTWARE Object is locked skipped

C:\Windows\System32\config\SOFTWARE.LOG1 Object is locked skipped

C:\Windows\System32\config\SOFTWARE.LOG2 Object is locked skipped

C:\Windows\System32\config\SYSTEM Object is locked skipped

C:\Windows\System32\config\SYSTEM.LOG1 Object is locked skipped

C:\Windows\System32\config\SYSTEM.LOG2 Object is locked skipped

C:\Windows\System32\config\TxR\{250834b7-750c-494d-bdc3-da86b6e2101a}.TxR.0.regtrans-ms Object is locked skipped

C:\Windows\System32\config\TxR\{250834b7-750c-494d-bdc3-da86b6e2101a}.TxR.1.regtrans-ms Object is locked skipped

C:\Windows\System32\config\TxR\{250834b7-750c-494d-bdc3-da86b6e2101a}.TxR.2.regtrans-ms Object is locked skipped

C:\Windows\System32\config\TxR\{250834b7-750c-494d-bdc3-da86b6e2101a}.TxR.blf Object is locked skipped

C:\Windows\System32\config\TxR\{250834B7-750C-494d-BDC3-DA86B6E2101B}.TM.blf Object is locked skipped

C:\Windows\System32\config\TxR\{250834B7-750C-494d-BDC3-DA86B6E2101B}.TMContainer00000000000000000001.regtrans-ms Object is locked skipped

C:\Windows\System32\config\TxR\{250834B7-750C-494d-BDC3-DA86B6E2101B}.TMContainer00000000000000000002.regtrans-ms Object is locked skipped

C:\Windows\System32\LogFiles\Scm\SCM.EVM Object is locked skipped

C:\Windows\System32\LogFiles\WUDF\WUDFTrace.etl Object is locked skipped

C:\Windows\System32\restore\MachineGuid.txt Object is locked skipped

C:\Windows\System32\spool\SpoolerETW.etl Object is locked skipped

C:\Windows\System32\sysprep\Panther\diagerr.xml Object is locked skipped

C:\Windows\System32\sysprep\Panther\diagwrn.xml Object is locked skipped

C:\Windows\System32\sysprep\Panther\setupact.log Object is locked skipped

C:\Windows\System32\sysprep\Panther\setuperr.log Object is locked skipped

C:\Windows\System32\wbem\AutoRecover\3460B7617E0429A960E481B197F238A3.mof Object is locked skipped

C:\Windows\System32\wbem\AutoRecover\E478A5DB75C9721E744C05D78DBACFD3.mof Object is locked skipped

C:\Windows\System32\wbem\Logs\WMITracing.log Object is locked skipped

C:\Windows\System32\wbem\Repository\INDEX.BTR Object is locked skipped

C:\Windows\System32\wbem\Repository\MAPPING1.MAP Object is locked skipped

C:\Windows\System32\wbem\Repository\MAPPING2.MAP Object is locked skipped

C:\Windows\System32\wbem\Repository\OBJECTS.DATA Object is locked skipped

C:\Windows\System32\winevt\Logs\Antivirus.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Application.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\DFS Replication.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\HardwareEvents.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Internet Explorer.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Key Management Service.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Media Center.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Microsoft-Windows-CodeIntegrity%4Operational.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-PLA%4Operational.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnostics-Networking%4Operational.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Microsoft-Windows-DiskDiagnosticDataCollector%4Operational.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Microsoft-Windows-DriverFrameworks-UserMode%4Operational.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Microsoft-Windows-GroupPolicy%4Operational.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Microsoft-Windows-Help%4Operational.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Microsoft-Windows-International%4Operational.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WHEA.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Microsoft-Windows-LanguagePackSetup%4Operational.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Microsoft-Windows-MUI%4Operational.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Microsoft-Windows-NetworkAccessProtection%4Operational.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Microsoft-Windows-ParentalControls%4Operational.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Microsoft-Windows-Program-Compatibility-Assistant%4Operational.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Microsoft-Windows-ReadyBoost%4Operational.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Microsoft-Windows-ReliabilityAnalysisComponent%4Operational.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Microsoft-Windows-RemoteAssistance%4Admin.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Microsoft-Windows-RemoteAssistance%4Operational.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Exhaustion-Resolver%4Operational.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Leak-Diagnostic%4Operational.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Microsoft-Windows-RestartManager%4Operational.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Microsoft-Windows-TaskScheduler%4Operational.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Microsoft-Windows-UAC%4Operational.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Microsoft-Windows-UAC-FileVirtualization%4Operational.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Microsoft-Windows-WindowsUpdateClient%4Operational.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Microsoft-Windows-WLAN-AutoConfig%4Operational.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\ODiag.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\OSession.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Security.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\Setup.evtx Object is locked skipped

C:\Windows\System32\winevt\Logs\System.evtx Object is locked skipped

C:\Windows\Tasks\SCHEDLGU.TXT Object is locked skipped

C:\Windows\Temp\fwtsqmfile10.sqm Object is locked skipped

C:\Windows\Temp\fwtsqmfile11.sqm Object is locked skipped

C:\Windows\Temp\_avast4_\Webshlock.txt Object is locked skipped

C:\Windows\WindowsUpdate.log Object is locked skipped

C:\Windows\winsxs\x86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6000.16386_none_cef7ceb03914a67f\dnary.xsd Object is locked skipped

Scan process completed.
A voir également:

5 réponses

Réponse 1 / 5
Utilisateur anonyme
 
# Télécharger Vundofix.exe (par Atribune) sur votre Bureau : http://www.atribune.org/ccount/click.php?id=4

* Double-cliquer sur VundoFix.exe afin de le lancer.
* Cliquer sur le bouton Scan for Vundo.
* Lorsque le scan est complété, cliquer sur le bouton Remove Vundo.
* Une invite de commande demandera si l’on souhaite supprimer les fichiers, cliquer sur YES
* Après avoir cliqué "YES", le Bureau disparaîtra un moment lors de la suppression des fichiers. * Une nouvelle invite de commande annoncera que le PC devra s'éteindre ("shutdown"). Cliquer sur OK , puis laisser le redémarrer.
* Le contenu du rapport est situé dans C:\vundofix.txt, poste le stp
0
Réponse 2 / 5
germainh
 
Merci, mais...
'no infeted files were found'... strange, isn't it ?
Comme je l'ai dit j'ai à peu près un popup toute les minutes. Je ne comprends pas.
Est ce qu'il existe une autre solution ou bien autre chose à faire pour enlever ce virus ?
(Je n'avais jamais eu de popups avant)
Merci d'avance.
0
Réponse 3 / 5
Utilisateur anonyme
 
Fais un clic droit sur ce lien :
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe

Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
Fais un clic droit sur navilog1.zip et choisis "tout extraire"
Ensuite double clique sur navilog1.exe pour lancer l'installation.
Une fois l'installation terminée, le fix s'exécutera automatiquement.
(Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

Laisse-toi guider. Au menu principal, choisis 1 et valides.
(ne fais pas le choix 2,3 ou 4 sans notre avis/accord)
Patiente jusqu'au message :
*** Analyse Termine le ..... ***
Appuie sur une touche comme demandé, le blocnote va s'ouvrir.
Copie-colle l'intégralité dans une réponse. Referme le blocnote.
Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)

et poste le rapport cette fois merci
0
Réponse 4 / 5
germainh
 
J'ai bien suivi les instructions, mais le programme ne fonctionne pas.
Je choisis le français comme langue, tappe entrée, puis j'ai le message suivant :

Accès refusé.
Erreur en entrée : Impossble de trouver le fichier script "C:\GetPaths.vbs".
Impossible de trouver C:\GetPaths.vbs
'SetPaths.bat' n'est pas reconnu en tant que commnde interne
ou externe, un programme exécutable ou un fichier de commandes.
Impossible de trouver C:\GetPaths.bat

Et une boîte de dialogue s'ouvre "GetPaths.exe a cessé de fonctionner".
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 5
Utilisateur anonyme
 
desoler j'avais vu que tu etait sous vista il y a une procedure je te la transmet

https://www.zebulon.fr/astuces/pratique/220-desactiver-l-uac-dans-vista.html
0

Discussions similaires

Softonic,est-ce un virus ?
techmel1 -
techmel1 -

6 réponses
Orange message Successful Mail Delivery Repor
ACT -
Abadien -

16 réponses
Désinstaller Softonic
Diguimette -
lilidurhone -

5 réponses