Page qui ouvre seul - Page 2

Précédent
  • 1
  • 2
  1. Hadrienen Messages postés 723 Statut Membre 25
     
    d'ac.
    0
  2. kaleenna Messages postés 18 Statut Membre 1
     
    je ai presque fini d installer l antivirus que tu ma conseiller apres je fais une analyse ?
    0
  3. Hadrienen Messages postés 723 Statut Membre 25
     
    heu oui STP analyse avec Antivir

    Après je te dirai quoi faire.
    0
  4. kaleenna Messages postés 18 Statut Membre 1
     
    voila l analyse es t terminée je t envoie le rapport

    Avira AntiVir Personal
    Report file date: 18 août 2008 11:50

    Scanning for 1562121 virus strains and unwanted programs.

    Licensed to: Avira AntiVir PersonalEdition Classic
    Serial number: 0000149996-ADJIE-0001
    Platform: Windows XP
    Windows version: (Service Pack 2) [5.1.2600]
    Boot mode: Normally booted
    Username: SYSTEM
    Computer name: SALON-MVNX7FXUF

    Version information:
    BUILD.DAT : 8.1.0.331 16934 Bytes 12/08/2008 11:46:00
    AVSCAN.EXE : 8.1.4.7 315649 Bytes 26/06/2008 14:57:53
    AVSCAN.DLL : 8.1.4.0 40705 Bytes 26/05/2008 13:56:40
    LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 18:44:19
    LUKERES.DLL : 8.1.4.0 12033 Bytes 26/05/2008 13:58:52
    ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 16:33:34
    ANTIVIR1.VDF : 7.0.5.1 8182784 Bytes 24/06/2008 19:54:15
    ANTIVIR2.VDF : 7.0.6.10 2587136 Bytes 14/08/2008 15:42:24
    ANTIVIR3.VDF : 7.0.6.30 146944 Bytes 18/08/2008 15:42:25
    Engineversion : 8.1.1.19
    AEVDF.DLL : 8.1.0.5 102772 Bytes 09/07/2008 14:46:50
    AESCRIPT.DLL : 8.1.0.63 311673 Bytes 18/08/2008 15:42:32
    AESCN.DLL : 8.1.0.23 119156 Bytes 18/08/2008 15:42:32
    AERDL.DLL : 8.1.0.20 418165 Bytes 09/07/2008 14:46:50
    AEPACK.DLL : 8.1.2.1 364917 Bytes 18/08/2008 15:42:31
    AEOFFICE.DLL : 8.1.0.21 192891 Bytes 18/08/2008 15:42:30
    AEHEUR.DLL : 8.1.0.47 1368437 Bytes 18/08/2008 15:42:30
    AEHELP.DLL : 8.1.0.15 115063 Bytes 09/07/2008 14:46:50
    AEGEN.DLL : 8.1.0.35 315764 Bytes 18/08/2008 15:42:28
    AEEMU.DLL : 8.1.0.7 430452 Bytes 18/08/2008 15:42:27
    AECORE.DLL : 8.1.1.8 172406 Bytes 18/08/2008 15:42:26
    AEBB.DLL : 8.1.0.1 53617 Bytes 24/04/2008 14:50:42
    AVWINLL.DLL : 1.0.0.12 15105 Bytes 09/07/2008 14:40:05
    AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 15:28:01
    AVREP.DLL : 8.0.0.2 98344 Bytes 18/08/2008 15:42:26
    AVREG.DLL : 8.0.0.1 33537 Bytes 09/05/2008 17:26:40
    AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 14:29:23
    AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 18:27:49
    SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 23:28:02
    SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 18:49:40
    NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 18:05:10
    RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 12/06/2008 19:48:07
    RCTEXT.DLL : 8.0.52.0 86273 Bytes 27/06/2008 19:34:37

    Configuration settings for the scan:
    Jobname..........................: Complete system scan
    Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
    Logging..........................: low
    Primary action...................: interactive
    Secondary action.................: ignore
    Scan master boot sector..........: on
    Scan boot sector.................: on
    Boot sectors.....................: C:,
    Process scan.....................: on
    Scan registry....................: on
    Search for rootkits..............: off
    Scan all files...................: Intelligent file selection
    Scan archives....................: on
    Recursion depth..................: 20
    Smart extensions.................: on
    Macro heuristic..................: on
    File heuristic...................: medium

    Start of the scan: 18 août 2008 11:50

    The scan of running processes will be started
    Scan process 'avscan.exe' - '1' Module(s) have been scanned
    Scan process 'avcenter.exe' - '1' Module(s) have been scanned
    Scan process 'iexplore.exe' - '1' Module(s) have been scanned
    Scan process 'sched.exe' - '1' Module(s) have been scanned
    Scan process 'avgnt.exe' - '1' Module(s) have been scanned
    Scan process 'avguard.exe' - '1' Module(s) have been scanned
    Scan process 'alg.exe' - '1' Module(s) have been scanned
    Scan process 'lxcycoms.exe' - '1' Module(s) have been scanned
    Scan process 'NMIndexingService.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'IoctlSvc.exe' - '1' Module(s) have been scanned
    Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned
    Scan process 'NBService.exe' - '1' Module(s) have been scanned
    Scan process 'GoogleUpdaterService.exe' - '1' Module(s) have been scanned
    Scan process 'GoogleToolbarNotifier.exe' - '1' Module(s) have been scanned
    Scan process 'NMIndexStoreSvr.exe' - '1' Module(s) have been scanned
    Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
    Scan process 'zlclient.exe' - '0' Module(s) have been scanned
    Scan process 'SOUNDMAN.EXE' - '1' Module(s) have been scanned
    Scan process 'jusched.exe' - '1' Module(s) have been scanned
    Scan process 'ezprint.exe' - '1' Module(s) have been scanned
    Scan process 'lxcymon.exe' - '1' Module(s) have been scanned
    Scan process 'explorer.exe' - '1' Module(s) have been scanned
    Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
    Scan process 'vsmon.exe' - '0' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'lsass.exe' - '1' Module(s) have been scanned
    Scan process 'services.exe' - '1' Module(s) have been scanned
    Scan process 'winlogon.exe' - '1' Module(s) have been scanned
    Scan process 'csrss.exe' - '1' Module(s) have been scanned
    Scan process 'smss.exe' - '1' Module(s) have been scanned
    33 processes with 33 modules were scanned

    Starting master boot sector scan:
    Master boot sector HD0
    [INFO] No virus was found!
    Master boot sector HD1
    [INFO] No virus was found!
    [WARNING] System error [21]: Le périphérique n'est pas prêt.

    Start scanning boot sectors:
    Boot sector 'C:\'
    [INFO] No virus was found!

    Starting to scan the registry.
    The registry was scanned ( '52' files ).

    Starting the file scan:

    Begin scan in 'C:\'
    C:\ARK5.tmp
    [DETECTION] Is the TR/Crypt.FKM.Gen Trojan
    [WARNING] An error has occurred and the file was not deleted. ErrorID: 26003
    [WARNING] The file could not be deleted!
    [NOTE] Attempting to perform action using the ARK lib.
    [NOTE] The file was moved to '4ac25a6a.qua'!
    C:\pagefile.sys
    [WARNING] The file could not be opened!
    C:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\zylom\AcesSquare\fr-FR\acessquare.1.0.1.fr-FR.cab
    [0] Archive type: CAB (Microsoft)
    --> fmod.dll
    [WARNING] No further files can be extracted from this archive. The archive will be closed
    C:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\zylom\BigIslandBlends\fr-FR\bigislandblends.1.0.0.fr-FR.cab
    [0] Archive type: CAB (Microsoft)
    --> BigIslandBlends.dll
    [WARNING] No further files can be extracted from this archive. The archive will be closed
    C:\Program Files\Trend Micro\HijackThis\backups\backup-20080818-070055-729.dll
    [DETECTION] Is the TR/BHO.Gen Trojan
    [NOTE] The file was moved to '490c9e47.qua'!
    C:\QooBox\Quarantine\C\WINDOWS\308.exe.vir
    [DETECTION] Is the TR/Agent.8192.292 Trojan
    [NOTE] The file was moved to '48e19e38.qua'!
    C:\System Volume Information\_restore{30036372-E149-43DF-BD73-D8801AC66423}\RP2\A0000009.exe
    [DETECTION] Is the TR/Agent.8192.292 Trojan
    [NOTE] The file was moved to '48d99e41.qua'!
    C:\System Volume Information\_restore{30036372-E149-43DF-BD73-D8801AC66423}\RP6\A0003350.dll
    [DETECTION] Is the TR/BHO.Gen Trojan
    [NOTE] The file was moved to '48d99e87.qua'!

    End of the scan: 18 août 2008 12:20
    Used time: 29:54 Minute(s)

    The scan has been done completely.

    4988 Scanning directories
    287624 Files were scanned
    5 viruses and/or unwanted programs were found
    0 Files were classified as suspicious:
    0 files were deleted
    0 files were repaired
    5 files were moved to quarantine
    0 files were renamed
    1 Files cannot be scanned
    287618 Files not concerned
    3811 Archives were scanned
    5 Warnings
    5 Notes
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Hadrienen Messages postés 723 Statut Membre 25
     
    Supprime tout ce que tu as trouvé. (dans quarantaine)

    Télécharge maintenant Navilog1 depuis-ce lien :

    http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe

    Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
    Ensuite double clique sur navilog1.exe pour lancer l'installation.
    Une fois l'installation terminée, DoubleClic-droit sur le raccourci Navilog1 présent sur ton bureau

    Au menu principal, Fais le choix 1
    Laisse toi guider et patiente.
    Patiente jusqu'au message :
    *** Analyse Termine le ..... ***
    Appuie sur une touche le blocnote va s'ouvrir.
    Copie-colle l'intégralité du rapport dans une réponse.
    Referme le blocnote
    Le rapport fixnavi.txt est en outre sauvegardé a la racine du disque

    Tuto : http://www.malekal.com/Adware.Magic_Control.php
    0
    1. kaleenna Messages postés 18 Statut Membre 1
       
      Hadrienen est que je t envoie le rapport du navilog ?
      0
  7. kaleenna Messages postés 18 Statut Membre 1
     
    ok je le fais toute suite
    0
  8. kaleenna Messages postés 18 Statut Membre 1
     
    voila le rapport du navilog

    Search Navipromo version 3.6.4 commencé le 2008-08-18 à 12:48:19,03

    !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
    !!! Postez ce rapport sur le forum pour le faire analyser !!!
    !!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

    Outil exécuté depuis C:\Program Files\navilog1
    Session actuelle : "Redg et Dodo"

    Mise à jour le 16.08.2008 à 22h00 par IL-MAFIOSO

    Microsoft Windows XP [version 5.1.2600]
    Internet Explorer : 6.0.2900.2180
    Système de fichiers : NTFS

    Recherche executé en mode normal

    *** Recherche Programmes installés ***

    *** Recherche dossiers dans "C:\WINDOWS" ***

    *** Recherche dossiers dans "C:\Program Files" ***

    *** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***

    *** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***

    *** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***

    *** Recherche dossiers dans "C:\Documents and Settings\Redg et Dodo\applic~1" ***

    *** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\applic~1" ***

    *** Recherche dossiers dans "C:\Documents and Settings\Redg et Dodo\locals~1\applic~1" ***

    *** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" ***

    *** Recherche dossiers dans "C:\Documents and Settings\Redg et Dodo\menudm~1\progra~1" ***

    *** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\menudm~1\progra~1" ***

    *** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
    pour + d'infos : http://www.gmer.net

    *** Recherche avec GenericNaviSearch ***
    !!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
    !!! A vérifier impérativement avant toute suppression manuelle !!!

    * Recherche dans "C:\WINDOWS\system32" *

    * Recherche dans "C:\Documents and Settings\Redg et Dodo\locals~1\applic~1" *

    * Recherche dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *

    *** Recherche fichiers ***

    *** Recherche clés spécifiques dans le Registre ***

    *** Module de Recherche complémentaire ***
    (Recherche fichiers spécifiques)

    1)Recherche nouveaux fichiers Instant Access :

    2)Recherche Heuristique :

    * Dans "C:\WINDOWS\system32" :

    * Dans "C:\Documents and Settings\Redg et Dodo\locals~1\applic~1" :

    * Dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" :

    3)Recherche Certificats :

    Certificat Egroup absent !
    Certificat Electronic-Group absent !
    Certificat Montorgueil absent !
    Certificat OOO-Favorit absent !
    Certificat Sunny-Day-Design-Ltd absent !

    4)Recherche fichiers connus :

    *** Analyse terminée le 2008-08-18 à 12:51:57,18 ***
    0
  9. kaleenna Messages postés 18 Statut Membre 1
     
    Hadrienen27 je vais revenir plus car la je suis fatigué et si tu me mais une solution je vais l essayer tantot
    je te remercie pour tout ce que tu a fais je vous trouve sympa et patient avec nous je vous leve mon chapeau et continuer votre beau travail
    0
  10. Hadrienen Messages postés 723 Statut Membre 25
     
    Les pages blanches continues?

    Installe IE 7

    http://www.microsoft.com/downloads/details.aspx?FamilyId=9AE91EBE-3385-447C-8A30-081805B2F90B&displaylang=fr

    Redémarre l'ordi.

    peux tu me faire un rapport HijackThis stp?
    0
  11. Hadrienen Messages postés 723 Statut Membre 25
     
    Suis mon post d'avant STP
    0
Précédent
  • 1
  • 2