Scan MBAM

Bonjour,

Je te remercie beaucoup pour ton aide et pour ta patience. Je vais suivre tes conseils. Bonne journée à toi aussi !

Capdec, TON PC EST PROPRE TU AS COMPRIS ?

@Utilisateur anonymeJe n'en suis pas si sûr que toi et arrête de t'adresser à moi comme à un demeuré !

@Capdecpour en finir, as tu d'autres soucis ?

@Utilisateur anonymeJe viens d'exécuter un examen rapide avec MBAM ainsi qu'un scan complet avec Antivir : RAS !

Merci beaucoup. Si en échange je peux te rendre quelque service en espagnol, ce sera avec plaisir.

Hasta luego.

Rebonsoir,

Excuse-moi de t'ennuyer avec mes questions mais il faut que je sache... Si m'as fait créer un nouveau point de restauration, c'est que l'ordinateur doit être sain. Comment en être certain ?

J'ai créé un nouveau point de restauration système mais je suis un peu perdu. Je vois que la protection est activée en face de mon Disque local (C:). J'espère avoir fait tout ce qu'il fallait... Pourrais-tu m'aider à vérifier ?

Quatre éléments détectés et le scan n'est pas fini. Dois-je t'envoyer le rapport ? Comment ?

Avira AntiVir Personal
Report file date: lundi 1 février 2010 22:01

Scanning for 1717297 virus strains and unwanted programs.

Licensee : Avira AntiVir Personal - FREE Antivirus
Serial number : 0000149996-ADJIE-0000001
Platform : Windows Vista 64 Bit
Windows version : (plain) [6.1.7600]
Boot mode : Normally booted
Username : Système
Computer name : PC-BARREAU

Version information:
BUILD.DAT : 9.0.0.419 21701 Bytes 22/01/2010 18:29:00
AVSCAN.EXE : 9.0.3.10 466689 Bytes 13/10/2009 10:26:33
AVSCAN.DLL : 9.0.3.0 40705 Bytes 27/02/2009 09:58:24
LUKE.DLL : 9.0.3.2 209665 Bytes 20/02/2009 10:35:49
LUKERES.DLL : 9.0.2.0 12033 Bytes 27/02/2009 09:58:52
VBASE000.VDF : 7.10.0.0 19875328 Bytes 06/11/2009 06:35:52
VBASE001.VDF : 7.10.1.0 1372672 Bytes 19/11/2009 01:29:01
VBASE002.VDF : 7.10.3.1 3143680 Bytes 20/01/2010 15:16:21
VBASE003.VDF : 7.10.3.75 996864 Bytes 26/01/2010 17:39:25
VBASE004.VDF : 7.10.3.76 2048 Bytes 26/01/2010 17:39:25
VBASE005.VDF : 7.10.3.77 2048 Bytes 26/01/2010 17:39:25
VBASE006.VDF : 7.10.3.78 2048 Bytes 26/01/2010 17:39:26
VBASE007.VDF : 7.10.3.79 2048 Bytes 26/01/2010 17:39:26
VBASE008.VDF : 7.10.3.80 2048 Bytes 26/01/2010 17:39:27
VBASE009.VDF : 7.10.3.81 2048 Bytes 26/01/2010 17:39:28
VBASE010.VDF : 7.10.3.82 2048 Bytes 26/01/2010 17:39:28
VBASE011.VDF : 7.10.3.83 2048 Bytes 26/01/2010 17:39:28
VBASE012.VDF : 7.10.3.84 2048 Bytes 26/01/2010 17:39:28
VBASE013.VDF : 7.10.3.85 2048 Bytes 26/01/2010 17:39:28
VBASE014.VDF : 7.10.3.122 172544 Bytes 29/01/2010 17:35:53
VBASE015.VDF : 7.10.3.123 2048 Bytes 29/01/2010 17:35:53
VBASE016.VDF : 7.10.3.124 2048 Bytes 29/01/2010 17:35:54
VBASE017.VDF : 7.10.3.125 2048 Bytes 29/01/2010 17:35:55
VBASE018.VDF : 7.10.3.126 2048 Bytes 29/01/2010 17:35:55
VBASE019.VDF : 7.10.3.127 2048 Bytes 29/01/2010 17:35:55
VBASE020.VDF : 7.10.3.128 2048 Bytes 29/01/2010 17:35:55
VBASE021.VDF : 7.10.3.129 2048 Bytes 29/01/2010 17:35:55
VBASE022.VDF : 7.10.3.130 2048 Bytes 29/01/2010 17:35:55
VBASE023.VDF : 7.10.3.131 2048 Bytes 29/01/2010 17:35:55
VBASE024.VDF : 7.10.3.132 2048 Bytes 29/01/2010 17:35:56
VBASE025.VDF : 7.10.3.133 2048 Bytes 29/01/2010 17:35:56
VBASE026.VDF : 7.10.3.134 2048 Bytes 29/01/2010 17:35:57
VBASE027.VDF : 7.10.3.135 2048 Bytes 29/01/2010 17:35:57
VBASE028.VDF : 7.10.3.136 2048 Bytes 29/01/2010 17:35:57
VBASE029.VDF : 7.10.3.137 2048 Bytes 29/01/2010 17:35:58
VBASE030.VDF : 7.10.3.138 2048 Bytes 29/01/2010 17:35:58
VBASE031.VDF : 7.10.3.146 79872 Bytes 01/02/2010 17:35:48
Engineversion : 8.2.1.156
AEVDF.DLL : 8.1.1.3 106868 Bytes 23/01/2010 12:54:53
AESCRIPT.DLL : 8.1.3.13 823674 Bytes 01/02/2010 17:35:51
AESCN.DLL : 8.1.4.0 127348 Bytes 27/01/2010 17:40:39
AESBX.DLL : 8.1.1.1 246132 Bytes 08/11/2009 06:38:44
AERDL.DLL : 8.1.3.4 479605 Bytes 08/01/2010 01:29:22
AEPACK.DLL : 8.2.0.5 422262 Bytes 14/01/2010 09:56:37
AEOFFICE.DLL : 8.1.0.38 196987 Bytes 08/11/2009 06:38:38
AEHEUR.DLL : 8.1.1.1 2322805 Bytes 27/01/2010 17:40:36
AEHELP.DLL : 8.1.10.0 237942 Bytes 14/01/2010 09:56:29
AEGEN.DLL : 8.1.1.86 369012 Bytes 01/02/2010 17:35:50
AEEMU.DLL : 8.1.1.0 393587 Bytes 08/11/2009 06:38:26
AECORE.DLL : 8.1.11.1 184694 Bytes 01/02/2010 17:35:49
AEBB.DLL : 8.1.0.3 53618 Bytes 08/11/2009 06:38:20
AVWINLL.DLL : 9.0.0.3 18177 Bytes 12/12/2008 07:47:59
AVPREF.DLL : 9.0.3.0 44289 Bytes 26/08/2009 14:14:02
AVREP.DLL : 8.0.0.3 155905 Bytes 20/01/2009 13:34:28
AVREG.DLL : 9.0.0.0 36609 Bytes 05/12/2008 09:32:09
AVARKT.DLL : 9.0.0.3 292609 Bytes 24/03/2009 14:05:41
AVEVTLOG.DLL : 9.0.0.7 167169 Bytes 30/01/2009 09:37:08
SQLITE3.DLL : 3.6.1.0 326401 Bytes 28/01/2009 14:03:49
SMTPLIB.DLL : 9.2.0.25 28417 Bytes 02/02/2009 07:21:33
NETNT.DLL : 9.0.0.0 11521 Bytes 05/12/2008 09:32:10
RCIMAGE.DLL : 9.0.0.25 2438913 Bytes 15/05/2009 14:39:58
RCTEXT.DLL : 9.0.73.0 86785 Bytes 13/10/2009 11:25:47

Configuration settings for the scan:
Jobname.............................: Complete system scan
Configuration file..................: c:\program files (x86)\avira\antivir desktop\sysscan.avp
Logging.............................: low
Primary action......................: interactive
Secondary action....................: ignore
Scan master boot sector.............: on
Scan boot sector....................: on
Boot sectors........................: C:, D:,
Process scan........................: on
Scan registry.......................: on
Search for rootkits.................: on
Integrity checking of system files..: off
Scan all files......................: All files
Scan archives.......................: on
Recursion depth.....................: 20
Smart extensions....................: on
Macro heuristic.....................: on
File heuristic......................: medium
Skipped files.......................: C:\Program Files\Le Robert\Le Petit Robert 2009\Robert.exe,
Deviating risk categories...........: +APPL,+GAME,+JOKE,+PCK,+PFS,+SPR,

Start of the scan: lundi 1 février 2010 22:01

Starting search for hidden objects.
The driver could not be initialized.

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'audiodg.exe' - '0' Module(s) have been scanned
Scan process 'BndCore.exe' - '1' Module(s) have been scanned
Scan process 'GoogleToolbarUser_32.exe' - '1' Module(s) have been scanned
Scan process 'iexplore.exe' - '1' Module(s) have been scanned
Scan process 'iexplore.exe' - '1' Module(s) have been scanned
Scan process 'ZHPDiag.exe' - '1' Module(s) have been scanned
Scan process 'splwow64.exe' - '0' Module(s) have been scanned
Scan process 'svchost.exe' - '0' Module(s) have been scanned
Scan process 'AAWTray.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '0' Module(s) have been scanned
Scan process 'wmpnetwk.exe' - '0' Module(s) have been scanned
Scan process 'WUDFHost.exe' - '0' Module(s) have been scanned
Scan process 'svchost.exe' - '0' Module(s) have been scanned
Scan process 'SearchIndexer.exe' - '0' Module(s) have been scanned
Scan process 'WmiPrvSE.exe' - '0' Module(s) have been scanned
Scan process 'ImApp.exe' - '1' Module(s) have been scanned
Scan process 'unsecapp.exe' - '0' Module(s) have been scanned
Scan process 'SDWinSec.exe' - '1' Module(s) have been scanned
Scan process 'FirewallGUI.exe' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'Bandoo.exe' - '1' Module(s) have been scanned
Scan process 'Babylon.exe' - '1' Module(s) have been scanned
Scan process 'sp_rsser.exe' - '1' Module(s) have been scanned
Scan process 'SeaSyncServices.exe' - '1' Module(s) have been scanned
Scan process 'RichVideo.exe' - '1' Module(s) have been scanned
Scan process 'eDSMSNLoader32.exe' - '1' Module(s) have been scanned
Scan process 'GoogleToolbarNotifier.exe' - '1' Module(s) have been scanned
Scan process 'SUPERAntiSpyware.exe' - '1' Module(s) have been scanned
Scan process 'sidebar.exe' - '0' Module(s) have been scanned
Scan process 'FWService.exe' - '1' Module(s) have been scanned
Scan process 'CamTray.exe' - '1' Module(s) have been scanned
Scan process 'SpywareTerminatorUpdate.exe' - '1' Module(s) have been scanned
Scan process 'Clavier.exe' - '1' Module(s) have been scanned
Scan process 'mdm.exe' - '1' Module(s) have been scanned
Scan process 'IncMail.exe' - '1' Module(s) have been scanned
Scan process 'LSSrvc.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '0' Module(s) have been scanned
Scan process 'Framework.Launcher.exe' - '0' Module(s) have been scanned
Scan process 'eDSLoader.exe' - '0' Module(s) have been scanned
Scan process 'SysMonitor.exe' - '0' Module(s) have been scanned
Scan process 'RAVCpl64.exe' - '0' Module(s) have been scanned
Scan process 'ETService.exe' - '0' Module(s) have been scanned
Scan process 'eDSService.exe' - '1' Module(s) have been scanned
Scan process 'mDNSResponder.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '0' Module(s) have been scanned
Scan process 'dwm.exe' - '0' Module(s) have been scanned
Scan process 'AppleMobileDeviceService.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'CLMSServer.exe' - '1' Module(s) have been scanned
Scan process 'taskhost.exe' - '0' Module(s) have been scanned
Scan process 'a2service.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '0' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '0' Module(s) have been scanned
Scan process 'AAWService.exe' - '1' Module(s) have been scanned
Scan process 'atieclxx.exe' - '0' Module(s) have been scanned
Scan process 'svchost.exe' - '0' Module(s) have been scanned
Scan process 'svchost.exe' - '0' Module(s) have been scanned
Scan process 'svchost.exe' - '0' Module(s) have been scanned
Scan process 'svchost.exe' - '0' Module(s) have been scanned
Scan process 'svchost.exe' - '0' Module(s) have been scanned
Scan process 'atiesrxx.exe' - '0' Module(s) have been scanned
Scan process 'svchost.exe' - '0' Module(s) have been scanned
Scan process 'svchost.exe' - '0' Module(s) have been scanned
Scan process 'winlogon.exe' - '0' Module(s) have been scanned
Scan process 'lsm.exe' - '0' Module(s) have been scanned
Scan process 'lsass.exe' - '0' Module(s) have been scanned
Scan process 'services.exe' - '0' Module(s) have been scanned
Scan process 'csrss.exe' - '0' Module(s) have been scanned
Scan process 'wininit.exe' - '0' Module(s) have been scanned
Scan process 'csrss.exe' - '0' Module(s) have been scanned
Scan process 'smss.exe' - '0' Module(s) have been scanned
37 processes with 37 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!
Master boot sector HD1
[INFO] No virus was found!
[INFO] Please restart the search with Administrator rights
Master boot sector HD2
[INFO] No virus was found!
[INFO] Please restart the search with Administrator rights

Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Boot sector 'D:\'
[INFO] No virus was found!

Starting to scan executable files (registry).
The registry was scanned ( '25' files ).

Starting the file scan:

Begin scan in 'C:\' <ACER>
C:\hiberfil.sys
[WARNING] The file could not be opened!
[NOTE] This file is a Windows system file.
[NOTE] This file cannot be opened for scanning.
C:\pagefile.sys
[WARNING] The file could not be opened!
[NOTE] This file is a Windows system file.
[NOTE] This file cannot be opened for scanning.
C:\$RECYCLE.BIN\S-1-5-21-3363994563-3272364198-3709456494-1000\$RHHG2P3.exe
[0] Archive type: NSIS
--> ProgramFilesDir/List.dat
[DETECTION] Contains recognition pattern of the HTML/Malicious.ActiveX.Gen HTML script virus
C:\$RECYCLE.BIN\S-1-5-21-3363994563-3272364198-3709456494-1000\$RV8CWKF.exe
[0] Archive type: NSIS
--> ProgramFilesDir/List.dat
[DETECTION] Contains recognition pattern of the HTML/Malicious.ActiveX.Gen HTML script virus
C:\$RECYCLE.BIN\S-1-5-21-3363994563-3272364198-3709456494-1000\$RXN69T0.exe
[0] Archive type: NSIS
--> ProgramFilesDir/List.dat
[DETECTION] Contains recognition pattern of the HTML/Malicious.ActiveX.Gen HTML script virus
C:\Users\Croûtons\AppData\Local\Mozilla\Firefox\Profiles\ach3inca.default\Cache\65C4495Fd01
[0] Archive type: NSIS
--> ProgramFilesDir/List.dat
[DETECTION] Contains recognition pattern of the HTML/Malicious.ActiveX.Gen HTML script virus
Begin scan in 'D:\' <DATA>

Beginning disinfection:
C:\$RECYCLE.BIN\S-1-5-21-3363994563-3272364198-3709456494-1000\$RHHG2P3.exe
[NOTE] The file was moved to '4baf4ed9.qua'!
C:\$RECYCLE.BIN\S-1-5-21-3363994563-3272364198-3709456494-1000\$RV8CWKF.exe
[NOTE] The file was moved to '4bbd4ed9.qua'!
C:\$RECYCLE.BIN\S-1-5-21-3363994563-3272364198-3709456494-1000\$RXN69T0.exe
[NOTE] The file was moved to '4bbf4ed9.qua'!
C:\Users\Croûtons\AppData\Local\Mozilla\Firefox\Profiles\ach3inca.default\Cache\65C4495Fd01
[NOTE] The file was moved to '4baa4ebc.qua'!

End of the scan: lundi 1 février 2010 22:58
Used time: 55:06 Minute(s)

The scan has been done completely.

34827 Scanned directories
962682 Files were scanned
4 Viruses and/or unwanted programs were found
0 Files were classified as suspicious
0 files were deleted
0 Viruses and unwanted programs were repaired
4 Files were moved to quarantine
0 Files were renamed
2 Files cannot be scanned
962676 Files not concerned
11432 Archives were scanned
2 Warnings
6 Notes

Après le scan complet de mon pc, il y avait cinq objets en quarantaine. Je les ai supprimés. J'espère avoir bien fait... À bientôt. Merci.

Malwarebytes' Anti-Malware 1.44
Version de la base de données: 3674
Windows 6.1.7600
Internet Explorer 8.0.7600.16385

01/02/2010 21:49:08
mbam-log-2010-02-01 (21-49-08).txt

Type de recherche: Examen rapide
Eléments examinés: 101302
Temps écoulé: 3 minute(s), 12 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

Le programme Live-Player n'est plus sur mon ordinateur. Il me semble bien que je l'avais téléchargé et enlevé presque aussitôt en voyant ses effets négatifs.