Virus trouvés par antivir que faire? Résolu/Fermé

Question

Bonjour, J'ai fait un scan avec antivir et voila son rapport. merci de me dire ce que je dois faire. Cordialement Tanaud Avira AntiVir Personal Report file date: dimanche 9 novembre 2008 11:17 Scanning for 1019829 virus strains and unwanted programs. Licensed to: Avira AntiVir PersonalEdition Classic Serial number: 0000149996-ADJIE-0001 Platform: Windows XP Windows version: (plain) [5.1.2600] Boot mode: Normally booted Username: SYSTEM Computer name: MASSOT-J9FLY7KE Version information: BUILD.DAT : 8.2.0.334 16933 Bytes 16/10/2008 14:55:00 AVSCAN.EXE : 8.1.4.7 315649 Bytes 09/11/2008 10:16:41 AVSCAN.DLL : 8.1.4.0 40705 Bytes 09/11/2008 10:16:41 LUKE.DLL : 8.1.4.5 164097 Bytes 09/11/2008 10:16:42 LUKERES.DLL : 8.1.4.0 12033 Bytes 09/11/2008 10:16:42 ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 07:47:26 ANTIVIR1.VDF : 7.1.0.21 130560 Bytes 31/10/2008 12:14:57 ANTIVIR2.VDF : 7.1.0.44 139264 Bytes 06/11/2008 09:13:48 ANTIVIR3.VDF : 7.1.0.55 139776 Bytes 07/11/2008 11:58:14 Engineversion : 8.2.0.29 AEVDF.DLL : 8.1.0.6 102772 Bytes 18/10/2008 08:31:35 AESCRIPT.DLL : 8.1.1.13 332156 Bytes 05/11/2008 21:25:32 AESCN.DLL : 8.1.1.5 123251 Bytes 08/11/2008 11:58:24 AERDL.DLL : 8.1.1.3 438645 Bytes 05/11/2008 21:25:32 AEPACK.DLL : 8.1.3.3 393591 Bytes 05/11/2008 21:25:31 AEOFFICE.DLL : 8.1.0.30 196986 Bytes 08/11/2008 11:58:24 AEHEUR.DLL : 8.1.0.71 1487222 Bytes 08/11/2008 11:58:23 AEHELP.DLL : 8.1.1.3 119157 Bytes 08/11/2008 11:58:22 AEGEN.DLL : 8.1.1.0 319859 Bytes 08/11/2008 11:58:21 AEEMU.DLL : 8.1.0.9 393588 Bytes 18/10/2008 08:31:25 AECORE.DLL : 8.1.4.1 172405 Bytes 08/11/2008 11:58:15 AEBB.DLL : 8.1.0.3 53618 Bytes 18/10/2008 08:31:24 AVWINLL.DLL : 1.0.0.12 15105 Bytes 09/11/2008 10:16:41 AVPREF.DLL : 8.0.2.0 38657 Bytes 09/11/2008 10:16:41 AVREP.DLL : 8.0.0.2 98344 Bytes 31/07/2008 19:29:19 AVREG.DLL : 8.0.0.1 33537 Bytes 09/11/2008 10:16:41 AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23 AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 09/11/2008 10:16:41 SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02 SMTPLIB.DLL : 1.2.0.23 28929 Bytes 09/11/2008 10:16:42 NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10 RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 09/11/2008 10:16:38 RCTEXT.DLL : 8.0.52.0 86273 Bytes 09/11/2008 10:16:38 Configuration settings for the scan: Jobname..........................: Complete system scan Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp Logging..........................: low Primary action...................: interactive Secondary action.................: ignore Scan master boot sector..........: on Scan boot sector.................: on Boot sectors.....................: C:, Process scan.....................: on Scan registry....................: on Search for rootkits..............: off Scan all files...................: All files Scan archives....................: on Recursion depth..................: 20 Smart extensions.................: on Deviating archive types..........: +BSD Mailbox, +Netscape/Mozilla Mailbox, +Eudora Mailbox, +Squid cache, +Pegasus Mailbox, +MS Outlook Mailbox, Macro heuristic..................: on File heuristic...................: medium Deviating risk categories........: +APPL,+GAME,+JOKE,+PCK,+SPR, Start of the scan: dimanche 9 novembre 2008 11:17 The scan of running processes will be started Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'avcenter.exe' - '1' Module(s) have been scanned Scan process 'sched.exe' - '1' Module(s) have been scanned Scan process 'avgnt.exe' - '1' Module(s) have been scanned Scan process 'avguard.exe' - '1' Module(s) have been scanned Scan process 'wuauclt.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'firefox.exe' - '1' Module(s) have been scanned Scan process 'kpf4gui.exe' - '1' Module(s) have been scanned Scan process 'WgaTray.exe' - '1' Module(s) have been scanned Scan process 'kpf4gui.exe' - '1' Module(s) have been scanned Scan process 'kpf4ss.exe' - '1' Module(s) have been scanned Scan process 'CAPPSWK.EXE' - '1' Module(s) have been scanned Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned Scan process 'CDAC11BA.EXE' - '1' Module(s) have been scanned Scan process 'CAPRPCSK.EXE' - '1' Module(s) have been scanned Scan process 'raid_tool.exe' - '1' Module(s) have been scanned Scan process 'realsched.exe' - '1' Module(s) have been scanned Scan process 'googletalk.exe' - '1' Module(s) have been scanned Scan process 'jusched.exe' - '1' Module(s) have been scanned Scan process 'qttask.exe' - '1' Module(s) have been scanned Scan process 'a2service.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'explorer.exe' - '1' Module(s) have been scanned Scan process 'spoolsv.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'lsass.exe' - '1' Module(s) have been scanned Scan process 'services.exe' - '1' Module(s) have been scanned Scan process 'winlogon.exe' - '1' Module(s) have been scanned Scan process 'csrss.exe' - '1' Module(s) have been scanned Scan process 'smss.exe' - '1' Module(s) have been scanned 33 processes with 33 modules were scanned Starting master boot sector scan: Master boot sector HD0 [INFO] No virus was found! Master boot sector HD1 [INFO] No virus was found! Start scanning boot sectors: Boot sector 'C:\' [INFO] No virus was found! Starting to scan the registry. The registry was scanned ( '50' files ). Starting the file scan: Begin scan in 'C:\' C:\hiberfil.sys [WARNING] The file could not be opened! C:\pagefile.sys [WARNING] The file could not be opened! C:\Documents and Settings\Carite\Application Data\Thunderbird\Profiles\default\y63om5kn.slt\Mail\dspnet.fr.eu-2.org\Inbox [0] Archive type: Netscape/Mozilla Mailbox --> Mailbox_[Message-ID: <01c8feb2$e59d8a80$0eb6cecb@iksoea>][From: "Melva Greenberg" ][Subject: *** PROBABLY SPAM *** Payment confirmation #457]1818.mim [1] Archive type: MIME --> RRT7192.zip [2] Archive type: ZIP --> RRT7192.exe [DETECTION] Is the TR/Spy.ZBot.DYC Trojan --> Mailbox_[Message-ID: <01c9086d$7be78e00$0bdd8740@bpy>][From: "Jules Cordova" ][Subject: Western Union MTCN #3603873682]2044.mim [1] Archive type: MIME --> RN67761263.zip [2] Archive type: ZIP --> RN67761263.exe [DETECTION] Is the TR/Spy.ZBot.ejw Trojan --> Mailbox_[From: "Andra philipps " ][Subject: Ratenzahlung][Message-ID: <01c935df$c708ed80$ca2c6656@qlmr>]3596.mim [1] Archive type: MIME --> Rechnung.zip [2] Archive type: ZIP --> zertifikat.ssl [DETECTION] Is the TR/Dldr.iBill.BD Trojan --> Mailbox_[Message-ID: <01c935c3$f3167580$0138b53e@pcerppohpcse>][From: "Christine neuhaus " ][Subject: *** PROBABLY SPAM *** Amtsgericht]3606.mim [1] Archive type: MIME --> Rechnung.zip [2] Archive type: ZIP --> zertifikat.ssl [DETECTION] Is the TR/Dldr.iBill.BD Trojan [WARNING] This file is a mailbox. To avoid damaging your emails this file will not be repaired or deleted! C:\Documents and Settings\Carite\Application Data\Thunderbird\Profiles\default\y63om5kn.slt\Mail\dspnet.fr.eu.org\Inbox [0] Archive type: Netscape/Mozilla Mailbox --> Mailbox_[Message-ID: <49716.wen-miin@diana> ][From: "123greetings.com" ][Subject: You have received an eCard]3242.mim [1] Archive type: MIME --> ecard.zip [2] Archive type: ZIP --> ecard.exe [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan [WARNING] This file is a mailbox. To avoid damaging your emails this file will not be repaired or deleted! End of the scan: dimanche 9 novembre 2008 12:00 Used time: 42:34 Minute(s) The scan has been done completely. 4549 Scanning directories 291578 Files were scanned 5 viruses and/or unwanted programs were found 0 Files were classified as suspicious: 0 files were deleted 0 files were repaired 0 files were moved to quarantine 0 files were renamed 2 Files cannot be scanned 291571 Files not concerned 12183 Archives were scanned 4 Warnings 0 Notes

Utilisateur anonyme · Answer

Salut,

télécharge hijackthis
->  enregistre la cible sous .... "le bureau" 

-> Fais un double-clic sur "HJTInstall.exe" afin de lancer l'installation

-> Clique sur Install ensuite sur "I Accept"

-> Clique sur" Do a scan system and save log file"

-> Le bloc-notes s'ouvrira, fais un copier-coller de tout son contenu ici dans ta prochaine réponse 

->Tuto hijackthis

Utilisateur anonyme · Answer

Re,

-Télécharge et installe MalwareByte's Anti-Malware
Malwarebyte

- Mets le à jour

---
- Double clique sur le raccourci de MalwareByte's Anti-Malware qui est sur le bureau.
- Sélectionne Exécuter un examen complet si ce n'est pas déjà fait
- clique sur Rechercher

- Une fois le scan terminé, une fenêtre s'ouvre, clique sur sur Ok

- Si MalwareByte's n'a rien détecté, clique sur Ok Un rapport va apparaître ferme-le.

- Si MalwareByte's a détecté des infections, clique sur Afficher les résultats ensuite sur Supprimer la sélection

- Enregistre le rapport sur ton Bureau comme cela il sera plus facile à retrouver, poste ensuite ce rapport.

Note : Si MalwareByte's a besoin de redémarrer pour terminer la suppression, accepte en cliquant sur Ok

Tutoriel pour MalwareByte's

Utilisateur anonyme · Answer

Re,

Il faut faire une analyse complète pas rapide.

@+

Utilisateur anonyme · Answer

Re,

C'est quoi le problème en fait car sur les rapports rien de grave.

@+

Utilisateur anonyme · Answer

Re,

Laisses les en quarantaines car certaines sont pas a effacer car risque de mauvais fonctionnement.

@+

======================================================================
Pour supprimer toutes les traces des logiciels qui ont servi à traiter les infections spécifiques 

Télécharge toolscleaner sur ton Bureau : 

toolscleaner

* Double-clique sur ToolsCleaner2.exe et laisse le travailler 
* Clique sur Recherche et laisse le scan se terminer. 
* Clique sur Suppression pour finaliser. 
* Tu peux, si tu le souhaites, te servir des Options facultatives. 
* Clique sur Quitter, pour que le rapport puisse se créer. 
* Le rapport (TCleaner.txt) se trouve à la racine de votre disque dur (C:\)...colle le dans ta réponse

Tutoriel toolscleaner
======================================================================

Ensuite garde malwarebyte et fait une analyse une fois par semaine.



-
Pensez A LIRE LES TUTOS. Avant de commencer .

Merci

Utilisateur anonyme · Answer

Re,

Très bien .

Bon dimanche.

@+

CCleaner garde le et fait un nettoyage toutes les semaines.

Virus trouvés par antivir que faire?

6 réponses

Discussions similaires