WORM/Kapucen.B.27
Résolu
Bonjour,
voila j'explique mon problème,
je suis un grand débutant dans le milieu de l'informatique.
j'ai installer sur mon pc AVIRA + AVAST j'ai aussi AD AWER et CCLEANER
AVIRA et AVAST vienne de detecter WORM/Kapucen.B sur mon pc, je connais un peu le principe de fonctionnement des vers mais je ne suis pas très douer.
j'ai fait comme AVAST m'a conseillé j'ai mis en quarantaine, est-ce la bonne decision??????
je n'est encore rien fait pour AVIRA les fenetre de detection d'AVIRA sont encore ouverte, pouvais vous me guider SVP
merci de m'aider.
voila j'explique mon problème,
je suis un grand débutant dans le milieu de l'informatique.
j'ai installer sur mon pc AVIRA + AVAST j'ai aussi AD AWER et CCLEANER
AVIRA et AVAST vienne de detecter WORM/Kapucen.B sur mon pc, je connais un peu le principe de fonctionnement des vers mais je ne suis pas très douer.
j'ai fait comme AVAST m'a conseillé j'ai mis en quarantaine, est-ce la bonne decision??????
je n'est encore rien fait pour AVIRA les fenetre de detection d'AVIRA sont encore ouverte, pouvais vous me guider SVP
merci de m'aider.
49 réponses
Résumé de la discussion
Un débutant informatique est confronté à la détection par Avast et Avira d’un ver WORM/Kapucen.B et cherche à savoir si la mise en quarantaine était la bonne démarche. Des conseils convergent vers la suppression d’un des antivirus pour éviter les conflits, la désactivation de certains composants et l’exécution d’outils comme HijackThis pour obtenir un rapport système. Pour finir, les échanges préconisent de n’avoir qu’un seul antivirus actif et de suivre les procédures recommandées, tout en examinant les résultats des scans Avira qui, souvent, ne détectent pas d’infection. Par exemple, un rapport Avira détaillé indiquant l’absence de menaces et les fichiers scannés permet d’évaluer l’état du système sans conclure prématurément et d’envisager des actions futures selon les résultats.
-
Contributeur sécuritéde rien
on fini toujours par y arriver
bonne soirée -
ouffff
BONNE SOIREE
ET SURTOUT MERCI tu as était super cool parsque serieu sa doit pas être simple d'être en face d'un mec qui comprend rien a l'informatique lol
MERCI tres serieusement -
Contributeur sécurité
ma réponse est la même, il n'y a rien d'anormal dans le rapport.
oui si tu n'as pas d'autres problèmes, tu désinstalles AVAST et tu gardes antivir
bonne soirée
-
j'ai le dernier resultat si tu veu ce n'est pas en mode "sans echec"
AntiVir PersonalEdition Classic
Report file date: dimanche 9 décembre 2007 17:32
Scanning for 963523 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows Vista
Windows version: (plain) [6.0.6000]
Username: SYSTEM
Computer name: PC-DE-BIGWOLF
Version information:
BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00
AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 13:16:29
AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 12:23:51
LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 15:32:47
LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 12:35:20
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 14:27:15
ANTIVIR1.VDF : 7.0.0.0 1640448 Bytes 13/09/2007 14:26:55
ANTIVIR2.VDF : 7.0.1.30 1575424 Bytes 30/11/2007 15:22:32
ANTIVIR3.VDF : 7.0.1.60 112128 Bytes 07/12/2007 15:22:32
AVEWIN32.DLL : 7.6.0.40 3064320 Bytes 09/12/2007 15:22:34
AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:26
AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 07:39:17
AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24
AVPACK32.DLL : 7.3.0.15 360488 Bytes 03/08/2007 08:46:00
AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 07:17:06
AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 12:26:33
AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 07:10:18
NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:42
RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 12:38:13
RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 12:50:37
SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 09:37:21
Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: C:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Start of the scan: dimanche 9 décembre 2007 17:32
The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'SearchFilterHost.exe' - '1' Module(s) have been scanned
Scan process 'SearchProtocolHost.exe' - '1' Module(s) have been scanned
Scan process 'firefox.exe' - '1' Module(s) have been scanned
Scan process 'Ymsgr_tray.exe' - '1' Module(s) have been scanned
Scan process 'CPSHelpRunner.exe' - '1' Module(s) have been scanned
Scan process 'sidebar.exe' - '1' Module(s) have been scanned
Scan process 'NMIndexStoreSvr.exe' - '1' Module(s) have been scanned
Scan process 'NMIndexingService.exe' - '1' Module(s) have been scanned
Scan process 'wmpnetwk.exe' - '1' Module(s) have been scanned
Scan process 'GoogleDesktopCrawl.exe' - '1' Module(s) have been scanned
Scan process 'NMBgMonitor.exe' - '1' Module(s) have been scanned
Scan process 'wmpnscfg.exe' - '1' Module(s) have been scanned
Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
Scan process 'SmpSys.exe' - '1' Module(s) have been scanned
Scan process 'sidebar.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'ashDisp.exe' - '1' Module(s) have been scanned
Scan process 'Reader_SL.exe' - '1' Module(s) have been scanned
Scan process 'GoogleDesktopIndex.exe' - '1' Module(s) have been scanned
Scan process 'PicasaMediaDetector.exe' - '1' Module(s) have been scanned
Scan process 'MSPMirage.exe' - '1' Module(s) have been scanned
Scan process 'GoogleDesktop.exe' - '1' Module(s) have been scanned
Scan process 'RoxWatchTray9.exe' - '1' Module(s) have been scanned
Scan process 'CardReaderMonitor.exe' - '1' Module(s) have been scanned
Scan process 'EasyMIC.exe' - '1' Module(s) have been scanned
Scan process 'BisonHK.exe' - '1' Module(s) have been scanned
Scan process 'SynTPEnh.exe' - '1' Module(s) have been scanned
Scan process 'WmiPrvSE.exe' - '1' Module(s) have been scanned
Scan process 'WmiPrvSE.exe' - '1' Module(s) have been scanned
Scan process 'rundll32.exe' - '1' Module(s) have been scanned
Scan process 'rundll32.exe' - '1' Module(s) have been scanned
Scan process 'RoxMediaDB9.exe' - '1' Module(s) have been scanned
Scan process 'MSASCui.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'dwm.exe' - '1' Module(s) have been scanned
Scan process 'taskeng.exe' - '1' Module(s) have been scanned
Scan process 'taskeng.exe' - '1' Module(s) have been scanned
Scan process 'SearchIndexer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'RoxWatch9.exe' - '1' Module(s) have been scanned
Scan process 'RichVideo.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'NBService.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'aawservice.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'ashServ.exe' - '1' Module(s) have been scanned
Scan process 'aswUpdSv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'SLsvc.exe' - '1' Module(s) have been scanned
Scan process 'audiodg.exe' - '0' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsm.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'wininit.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
71 processes with 71 modules were scanned
Start scanning boot sectors:
Boot sector 'C:\'
[NOTE] No virus was found!
Starting to scan the registry.
The registry was scanned ( '17' files ).
Starting the file scan:
Begin scan in 'C:\' <HDD>
C:\hiberfil.sys
[WARNING] The file could not be opened!
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\UNWISE.EXE
[WARNING] The temporary file could not be opened!
C:\$Recycle.Bin\S-1-5-21-608901210-432299812-286693133-1002\$R5WOECP.exe
[WARNING] The temporary file could not be opened!
End of the scan: dimanche 9 décembre 2007 18:03
Used time: 30:43 min
The scan has been done completely.
13152 Scanning directories
181206 Files were scanned
0 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
0 files were moved to quarantine
0 files were renamed
2 Files cannot be scanned
181206 Files not concerned
2034 Archives were scanned
4 Warnings
0 Notes -
tu ma conseillé antivir je prefere suivre l'avi d'un connesseur
donc tout est fini?????? -
Contributeur sécuritéok, donc maintenant tu veux garder avast ou antivir ?
-
oui que ce soit avec avast ou avira
par contre quand j'ai essayer d'effacer avira la premiere fois avast se déclancher sans arret et quand je mettais en quarantaine sa revenais de suite donc j'ai fais ignoré -
Contributeur sécuritébien, visiblement il n'y a rien d'intéressant dans ce rapport.
Tu avais mis en quarantaine au départ ton trojan ?
-
AntiVir PersonalEdition Classic
Report file date: dimanche 9 décembre 2007 16:54
Scanning for 963523 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows Vista
Windows version: (plain) [6.0.6000]
Username: bigwolf
Computer name: PC-DE-BIGWOLF
Version information:
BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00
AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 13:16:29
AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 12:23:51
LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 15:32:47
LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 12:35:20
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 14:27:15
ANTIVIR1.VDF : 7.0.0.0 1640448 Bytes 13/09/2007 14:26:55
ANTIVIR2.VDF : 7.0.1.30 1575424 Bytes 30/11/2007 15:22:32
ANTIVIR3.VDF : 7.0.1.60 112128 Bytes 07/12/2007 15:22:32
AVEWIN32.DLL : 7.6.0.40 3064320 Bytes 09/12/2007 15:22:34
AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:26
AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 07:39:17
AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24
AVPACK32.DLL : 7.3.0.15 360488 Bytes 03/08/2007 08:46:00
AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 07:17:06
AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 12:26:33
AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 07:10:18
NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:42
RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 12:38:13
RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 12:50:37
SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 09:37:21
Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: C:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Start of the scan: dimanche 9 décembre 2007 16:54
The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'WmiPrvSE.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'aawservice.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsm.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'wininit.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
20 processes with 20 modules were scanned
Start scanning boot sectors:
Boot sector 'C:\'
[NOTE] No virus was found!
Starting to scan the registry.
The registry was scanned ( '22' files ).
Starting the file scan:
Begin scan in 'C:\' <HDD>
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\UNWISE.EXE
[WARNING] The temporary file could not be opened!
C:\$Recycle.Bin\S-1-5-21-608901210-432299812-286693133-1002\$R5WOECP.exe
[WARNING] The temporary file could not be opened!
End of the scan: dimanche 9 décembre 2007 17:25
Used time: 31:49 min
The scan has been done completely.
13077 Scanning directories
180829 Files were scanned
0 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
0 files were moved to quarantine
0 files were renamed
1 Files cannot be scanned
180829 Files not concerned
2034 Archives were scanned
3 Warnings
0 Notes -
Contributeur sécuritéoui très juste, dans report puis report file, ensuite tu fais un copier coller du bloc note qui s'est ouvert pour le poster ici
-
le rapport se serrai pas dans "Reports" parsque si c'est ça elle se sont sauvegarder automatiquement
-
ok je te comprend je suis pas tres fort javou, je vais regarder comment faire pour voir le rapport et le sauvegarder
-
Contributeur sécuritépas facile, mais pas facile pour moi non plus comment je vais sans rapport ?
relance antivir en mode normal (tant pis) et cette fois sauvegarde le rapport poste le ici ensuite
-
y'avait pas marquer save?????? comment on fait lol le nul serieu c'est pas facile tous ça
-
Contributeur sécuritétu as sauvegardé le rapport ? il faut que tu le postes ici stp
-
j'ai était en mode sans echec
j'ai fait "scan system now" avec avira
il y'avait 3 dans la colone warning
je dois faire quoi d'autre -
OK DONC DISQUE DUR J'Y COUR
-
Contributeur sécuriténe t'occupe pas des DVD, on parle du DD disque dur
-
lol euuhhhh je sais je suis nul mais j'ai fait F8 et je dois selectionner CD R / DVD R ou alor mon disque dur
je n'est pas encore enregistrer les donner sur DVD R car j'en ai pas
je fait quoi je prend HARD DISQ -
ok donc je fait le mode sans echec et je revien merci de m'aider
- 1
- 2
- 3
Suivant
