EL3
Messages postés106Date d'inscriptionsamedi 1 septembre 2007StatutMembreDernière intervention25 mars 2013
-
15 juil. 2008 à 13:26
romano599500
Messages postés1425Date d'inscriptionmercredi 16 janvier 2008StatutMembreDernière intervention17 novembre 2009
-
15 juil. 2008 à 22:06
bonjour
je viens de faire un scan avec antivir et il me detecte un trojan agent 49664 j !!!!
mais qu'est ce que je dois faire à un truc pareil ???
je met mon rapport antivir suivi d'un rapport hijackthis (si je me souviens bien ça peut faire avancer les choses !!)
à vot'bon coeur m'sieur dames !!
merci beaucoup
Avira AntiVir Personal
Report file date: mardi 15 juillet 2008 12:04
Scanning for 1431212 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Boot mode: Normally booted
Username: SYSTEM
Computer name: XPSP2-E448E373F
Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: C:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Start of the scan: mardi 15 juillet 2008 12:04
The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'wmiprvse.exe' - '1' Module(s) have been scanned
Scan process 'HelpSvc.exe' - '1' Module(s) have been scanned
Scan process 'COCIManager.exe' - '1' Module(s) have been scanned
Scan process 'MPAPI3s.exe' - '1' Module(s) have been scanned
Scan process 'NclRSSrv.exe' - '1' Module(s) have been scanned
Scan process 'NclUSBSrv.exe' - '1' Module(s) have been scanned
Scan process 'ServiceLayer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'GoogleUpdater.exe' - '1' Module(s) have been scanned
Scan process 'PhLeAutoRun.exe' - '1' Module(s) have been scanned
Scan process 'PCSuite.exe' - '1' Module(s) have been scanned
Scan process 'PcSync2.exe' - '1' Module(s) have been scanned
Scan process 'PersonalReminder.exe' - '1' Module(s) have been scanned
Scan process 'LogitechDesktopMessenger.exe' - '1' Module(s) have been scanned
Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'winampa.exe' - '1' Module(s) have been scanned
Scan process 'Quickcam.exe' - '1' Module(s) have been scanned
Scan process 'Communications_Helper.exe' - '1' Module(s) have been scanned
Scan process 'avgas.exe' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'SOUNDMAN.EXE' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'LVComSer.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'MDM.EXE' - '1' Module(s) have been scanned
Scan process 'LVComSer.exe' - '1' Module(s) have been scanned
Scan process 'GoogleUpdaterService.exe' - '1' Module(s) have been scanned
Scan process 'guard.exe' - '1' Module(s) have been scanned
Scan process 'AppleMobileDeviceService.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'LVPrcSrv.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
48 processes with 48 modules were scanned
Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Starting to scan the registry.
The registry was scanned ( '24' files ).
Starting the file scan:
Begin scan in 'C:\'
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\System Volume Information\_restore{6990F65B-B67C-44F2-AAD4-6FFE70464DC2}\RP376\A0063680.exe
[DETECTION] Is the Trojan horse TR/Agent.49664.J
[NOTE] The file was deleted!
C:\WINDOWS\system32\ftp.exe
[DETECTION] Is the Trojan horse TR/Agent.49664.J
[NOTE] The file was deleted!
End of the scan: mardi 15 juillet 2008 13:14
Used time: 1:10:03 min
The scan has been done completely.
6527 Scanning directories
279463 Files were scanned
2 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
2 files were deleted
0 files were repaired
0 files were moved to quarantine
0 files were renamed
1 Files cannot be scanned
279461 Files not concerned
1139 Archives were scanned
1 Warnings
2 Notes
hijackthis
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:17:10, on 15/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal
EL3
Messages postés106Date d'inscriptionsamedi 1 septembre 2007StatutMembreDernière intervention25 mars 20133 15 juil. 2008 à 14:05
salut romano599500
merci pour ta rapidité
et bien à vrai dire vu mon pauvre niveau je ne sais pas si il a été supprimé
antivir s'arrete à chaque fois qu'il le trouve dans le scan j'ai coché delete
mais je n'en sais pas plus !!
ce qui me surprend c'est que je me suis absenté ce matin et quand revenant
j'avais le panneau d'alerte affiché alors que toutes les applications étaient fermées
et c'est reapparu plusieur fois
EL3
Messages postés106Date d'inscriptionsamedi 1 septembre 2007StatutMembreDernière intervention25 mars 20133 15 juil. 2008 à 22:05
coucou
bon ça y'est j'ai tout fais comme tu m'as dit
j'avais mis par erreur les trojans en quarantaine j'ai donc supprimé
il n'y a eu aucune alerte en mode sans echec
j'espere que tout va bien aller maintenant
je te remercie beaucoup pour tes conseils
@++ manue
