Bonjour, j'ai reçu ça sur mon adresse msn http://Shelby-gt-500picthanks.com de la part de ma femme alors qu'elle n'étais pas connecté ( on vit ensemble ) j'ai lancé une analyse antivirus il a trouvé quelque-choses. au cas ou voici le rapport de l'antivirus : Avira AntiVir Personal Report file date: dimanche 10 août 2008 14:50 Scanning for 1542141 virus strains and unwanted programs. Licensed to: Avira AntiVir PersonalEdition Classic Serial number: 0000149996-ADJIE-0001 Platform: Windows XP Windows version: (Service Pack 3) [5.1.2600] Boot mode: Normally booted Username: SYSTEM Computer name: ORDI-F5074112FC Version information: BUILD.DAT : 8.1.0.326 16933 Bytes 11/07/2008 12:57:00 AVSCAN.EXE : 8.1.4.7 315649 Bytes 17/07/2008 15:37:44 AVSCAN.DLL : 8.1.4.0 40705 Bytes 17/07/2008 15:37:44 LUKE.DLL : 8.1.4.5 164097 Bytes 17/07/2008 15:37:44 LUKERES.DLL : 8.1.4.0 12033 Bytes 17/07/2008 15:37:44 ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 10:33:34 ANTIVIR1.VDF : 7.0.5.1 8182784 Bytes 24/06/2008 15:33:53 ANTIVIR2.VDF : 7.0.5.207 2316800 Bytes 04/08/2008 07:54:58 ANTIVIR3.VDF : 7.0.5.235 160256 Bytes 09/08/2008 09:21:54 Engineversion : 8.1.1.19 AEVDF.DLL : 8.1.0.5 102772 Bytes 25/02/2008 09:58:21 AESCRIPT.DLL : 8.1.0.63 311673 Bytes 07/08/2008 07:55:01 AESCN.DLL : 8.1.0.23 119156 Bytes 15/07/2008 15:34:17 AERDL.DLL : 8.1.0.20 418165 Bytes 15/07/2008 15:34:16 AEPACK.DLL : 8.1.2.1 364917 Bytes 15/07/2008 15:34:14 AEOFFICE.DLL : 8.1.0.21 192891 Bytes 18/07/2008 15:33:02 AEHEUR.DLL : 8.1.0.47 1368437 Bytes 07/08/2008 07:55:00 AEHELP.DLL : 8.1.0.15 115063 Bytes 15/07/2008 15:34:07 AEGEN.DLL : 8.1.0.35 315764 Bytes 07/08/2008 07:54:56 AEEMU.DLL : 8.1.0.7 430452 Bytes 01/08/2008 07:28:46 AECORE.DLL : 8.1.1.8 172406 Bytes 01/08/2008 07:28:45 AEBB.DLL : 8.1.0.1 53617 Bytes 17/07/2008 15:37:45 AVWINLL.DLL : 1.0.0.12 15105 Bytes 17/07/2008 15:37:44 AVPREF.DLL : 8.0.2.0 38657 Bytes 17/07/2008 15:37:44 AVREP.DLL : 8.0.0.2 98344 Bytes 01/08/2008 07:28:44 AVREG.DLL : 8.0.0.1 33537 Bytes 17/07/2008 15:37:44 AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23 AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 17/07/2008 15:37:43 SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02 SMTPLIB.DLL : 1.2.0.23 28929 Bytes 17/07/2008 15:37:45 NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10 RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 17/07/2008 15:37:39 RCTEXT.DLL : 8.0.52.0 86273 Bytes 17/07/2008 15:37:39 Configuration settings for the scan: Jobname..........................: Complete system scan Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp Logging..........................: low Primary action...................: interactive Secondary action.................: ignore Scan master boot sector..........: on Scan boot sector.................: on Boot sectors.....................: C:, E:, Process scan.....................: on Scan registry....................: on Search for rootkits..............: off Scan all files...................: Intelligent file selection Scan archives....................: on Recursion depth..................: 20 Smart extensions.................: on Macro heuristic..................: on File heuristic...................: medium Start of the scan: dimanche 10 août 2008 14:50 The scan of running processes will be started Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'avcenter.exe' - '1' Module(s) have been scanned Scan process 'usnsvc.exe' - '1' Module(s) have been scanned Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'wmiprvse.exe' - '1' Module(s) have been scanned Scan process 'FTCOMModule.exe' - '1' Module(s) have been scanned Scan process 'OraConfigRecover.exe' - '1' Module(s) have been scanned Scan process 'CoreCom.exe' - '1' Module(s) have been scanned Scan process 'ConnectivityManager.exe' - '1' Module(s) have been scanned Scan process 'SystrayApp.exe' - '1' Module(s) have been scanned Scan process 'hpqste08.exe' - '1' Module(s) have been scanned Scan process 'RtkBtMnt.exe' - '1' Module(s) have been scanned Scan process 'AlertModule.exe' - '1' Module(s) have been scanned Scan process 'TrdLaunch.exe' - '1' Module(s) have been scanned Scan process 'hpqtra08.exe' - '1' Module(s) have been scanned Scan process 'Launcher.exe' - '1' Module(s) have been scanned Scan process 'TrasWord.exe' - '1' Module(s) have been scanned Scan process 'btdna.exe' - '1' Module(s) have been scanned Scan process 'TeaTimer.exe' - '1' Module(s) have been scanned Scan process 'ctfmon.exe' - '1' Module(s) have been scanned Scan process 'avgnt.exe' - '1' Module(s) have been scanned Scan process 'zlclient.exe' - '0' Module(s) have been scanned Scan process 'realsched.exe' - '1' Module(s) have been scanned Scan process 'SearchSettings.exe' - '1' Module(s) have been scanned Scan process 'jusched.exe' - '1' Module(s) have been scanned Scan process 'hpwuSchd2.exe' - '1' Module(s) have been scanned Scan process 'igfxpers.exe' - '1' Module(s) have been scanned Scan process 'hkcmd.exe' - '1' Module(s) have been scanned Scan process 'igfxtray.exe' - '1' Module(s) have been scanned Scan process 'RTHDCPL.exe' - '1' Module(s) have been scanned Scan process 'alg.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'FTRTSVC.exe' - '1' Module(s) have been scanned Scan process 'avguard.exe' - '1' Module(s) have been scanned Scan process 'sched.exe' - '1' Module(s) have been scanned Scan process 'spoolsv.exe' - '1' Module(s) have been scanned Scan process 'explorer.exe' - '1' Module(s) have been scanned Scan process 'vsmon.exe' - '0' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'lsass.exe' - '1' Module(s) have been scanned Scan process 'services.exe' - '1' Module(s) have been scanned Scan process 'winlogon.exe' - '1' Module(s) have been scanned Scan process 'csrss.exe' - '1' Module(s) have been scanned Scan process 'smss.exe' - '1' Module(s) have been scanned 50 processes with 50 modules were scanned Starting master boot sector scan: Master boot sector HD0 [INFO] No virus was found! Master boot sector HD1 [INFO] No virus was found! Start scanning boot sectors: Boot sector 'C:\' [INFO] No virus was found! Boot sector 'E:\' [INFO] No virus was found! Starting to scan the registry. The registry was scanned ( '72' files ). Starting the file scan: Begin scan in 'C:\' C:\pagefile.sys [WARNING] The file could not be opened! C:\System Volume Information\_restore{9CD757D3-F00B-433B-82B7-9A97D4C828B6}\RP12\A0006160.exe [DETECTION] Is the TR/Agent.3584.D Trojan [NOTE] The file was moved to '48cee891.qua'! Begin scan in 'E:\' <OneTouch4> End of the scan: dimanche 10 août 2008 15:34 Used time: 44:36 Minute(s) The scan has been done completely. 7649 Scanning directories 295059 Files were scanned 1 viruses and/or unwanted programs were found 0 Files were classified as suspicious: 0 files were deleted 0 files were repaired 1 files were moved to quarantine 0 files were renamed 1 Files cannot be scanned 295057 Files not concerned 1975 Archives were scanned 1 Warnings 1 Notes Par avance merci

Salut, C'est un nouveau trojan se répandant depuis aujourd'hui par msn. Il progresse très vite. Il s'agit d'un lien qui est envoyé via msn à tous les contacts. Tout d'abord, changez votre mot de passe : Commencez par arrêter msn, puis aller sur le site de Microsoft : https://accountservices.passport.net/?lc=1036&id=10 Entrez vos identifiants et mot de passe msn (l'ancien mot de passe donc), puis à droite, cliquez sur Changer mon mot de passe. Ensuite, utilisez un antivirus gratuit en ligne pour trouver et supprimer le trojan : par exemple http://www.secuser.com/antivirus/ à utiliser avec IE. Il en existe d'autres, il suffit de chercher sur gogol "antivirus gratuit en ligne" Lorsque le scan est terminé, vous devrez à nouveau changer votre mot de passe msn pour plus de sécurité, et ne pas mettre l'un des 2 précédents.

C'est assez bizarre, puisque pour être infecté il faut rentrer ton adresse et ton passe... Je ne connais pas assez le virus pour t'aider , désolée. Sinon, je rajoute ce lien: http://(adresse).pics.frieendz.com

Aussi celle ci: http://(adresse).RealDealzz.com

Je rajoute ce lien: http://(mon adresse).mynustuff4u.com Précédé de cette phrase: (adresse de l'autre) check out these awesome pics from the awesome party LOL

Picthanks.com - Page 2

Résolu

Réponse 21 / 23
SandrOu Messages postés 56 Statut Membre 5

C'est assez bizarre, puisque pour être infecté il faut rentrer ton adresse et ton passe...
Je ne connais pas assez le virus pour t'aider , désolée.

Sinon, je rajoute ce lien:
http://(adresse).pics.frieendz.com
0
Réponse 22 / 23
SandrOu Messages postés 56 Statut Membre 5

Aussi celle ci:

http://(adresse).RealDealzz.com
0
Réponse 23 / 23
SandrOu Messages postés 56 Statut Membre 5

Je rajoute ce lien:

http://(mon adresse).mynustuff4u.com

Précédé de cette phrase:

(adresse de l'autre) check out these awesome pics from the awesome party LOL
0

Forum Virus

Trouvez des solutions pour détecter et éliminer les menaces, des astuces pour prévenir les infections, et discutez des dernières menaces en ligne

Newsletters

Actu du jour

Voir un exemple