Virus msn "fotos052"
Configuration: Windows XP Internet Explorer 6.0
14 réponses
Un utilisateur signale avoir reçu un fichier ZIP nommé « fotos052 » par Windows Live Messenger et qu'il se réexpédie à ses contacts, suscitant des inquiétudes sur un virus sous Windows XP et IE6. Plusieurs réponses recommandent d'analyser le fichier avec un antivirus et de mettre en quarantaine les éléments infectés, certains citant Avast et l'arrêt de la protection résidentielle. D'autres suggèrent de ne plus ouvrir les messages suspectés et de supprimer les pièces jointes, puis d'effectuer un nouveau scan et de vérifier les rapports de l'analyse pour confirmer l'infection. En cas de doute, il est conseillé de mettre à jour l'antivirus et de vérifier les fichiers téléchargés sur un ordinateur isolé, afin d'éviter l'infection sur le système principal.
-
une seule solution, telecharger ANTIVIR et faire un scan, ton antiviraus (peut etre avast) ne protege pas msn
... bonjour -
vas y mais attention neutralise ton antivirus, il peut y avoir des problemes entre eux ...
-
CLIC GAUCHE sur avast en bas a droite et arretter protection residente ...
-
TU CLIQUES sur le parapluie en bas a droite et apres "scan system now" tu passes en quarantaine tes fichiers infectes ...
-
tu me dis koi selon ce qu il y a en quarantaine tu pourras les effacer ... a mon avis ceela vient de fichiers d intallation msn ou de mise à jour infectées ... ceux la vires les de suite
-
lol
-
apres nettoies ton pc avec ccleaner, facile a utiliser, deux utilitaire, un pour nettoyer les cookies et un autre pour nettoyer les rreurs de ta base de registre ... ton pc va prendre de la vitesse ...
https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html
et un anti spyware
http://www.commentcamarche.net/telecharger/telecharger 218 avg anti spyware
avec ca deja si tu es novice tu peux avoir un pc propre -
Vindiuuuu sais nin mi !!! as tu eu des virus en qurantaine ? SI I L Y EN A EU il y a eu une question a chaque fois
-
oui, bien sur, a mon avis tout est sur des fichiers d instal msn mais bon, tu vois qu avast c une passoire ... a mon avis pas besoin de booter, essaies de suite msn ... et ne plus ouvrir de message sur le live sauf si tu sais que c qq qui te l a envoyer
-
-
AntiVir PersonalEdition Classic
Report file date: dimanche 16 mars 2008 18:58
Scanning for 1149506 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Username: SYSTEM
Computer name: SN012345678912
Version information:
BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00
AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 13:16:29
AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 12:23:51
LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 15:32:47
LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 12:35:20
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 14:27:15
ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 07/03/2008 17:54:28
ANTIVIR2.VDF : 7.0.3.3 2048 Bytes 07/03/2008 17:54:28
ANTIVIR3.VDF : 7.0.3.33 180736 Bytes 16/03/2008 17:54:28
AVEWIN32.DLL : 7.6.0.73 3334656 Bytes 16/03/2008 17:54:30
AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:26
AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 07:39:17
AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24
AVPACK32.DLL : 7.6.0.3 360488 Bytes 16/03/2008 17:54:30
AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 07:17:06
AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 12:26:33
AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 07:10:18
NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:42
RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 12:38:13
RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 12:50:37
SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 09:37:21
Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: C:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Start of the scan: dimanche 16 mars 2008 18:58
The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'WLLoginProxy.exe' - '1' Module(s) have been scanned
Scan process 'IEXPLORE.EXE' - '1' Module(s) have been scanned
Scan process 'usnsvc.exe' - '1' Module(s) have been scanned
Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
Scan process 'dllhost.exe' - '1' Module(s) have been scanned
Scan process 'GoogleDesktop.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'NMIndexStoreSvr.exe' - '1' Module(s) have been scanned
Scan process 'NMBgMonitor.exe' - '1' Module(s) have been scanned
Scan process 'SuperCopier2.exe' - '1' Module(s) have been scanned
Scan process 'GoogleDesktop.exe' - '1' Module(s) have been scanned
Scan process 'GoogleDesktop.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'MWSOEMON.EXE' - '1' Module(s) have been scanned
Scan process 'winampa.exe' - '1' Module(s) have been scanned
Scan process 'ashDisp.exe' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'RTHDCPL.exe' - '1' Module(s) have been scanned
Scan process 'SynTPEnh.exe' - '1' Module(s) have been scanned
Scan process 'ehmsas.exe' - '1' Module(s) have been scanned
Scan process 'ehtray.exe' - '1' Module(s) have been scanned
Scan process 'ashWebSv.exe' - '1' Module(s) have been scanned
Scan process 'ashMaiSv.exe' - '1' Module(s) have been scanned
Scan process 'mcrdsvc.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'PAStiSvc.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'ehSched.exe' - '1' Module(s) have been scanned
Scan process 'ehrecvr.exe' - '1' Module(s) have been scanned
Scan process 'ADCDLicSvc.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'ashServ.exe' - '1' Module(s) have been scanned
Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned
Scan process 'aswUpdSv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
51 processes with 51 modules were scanned
Start scanning boot sectors:
Boot sector 'C:\'
[NOTE] No virus was found!
Starting to scan the registry.
The registry was scanned ( '37' files ).
Starting the file scan:
Begin scan in 'C:\' <HDD>
C:\hiberfil.sys
[WARNING] The file could not be opened!
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\Documents and Settings\rivault colette\Bureau\MSNFix\16032008_18204450.zip
[0] Archive type: ZIP
--> backup/foto052.zip
[1] Archive type: ZIP
--> foto052.JPG-www.facebook.com
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[INFO] The file was moved to '480d61e7.qua'!
C:\Documents and Settings\rivault colette\Local Settings\Temporary Internet Files\Content.IE5\TKQOGJ3W\c13[1].exe
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[INFO] The file was moved to '48106321.qua'!
C:\System Volume Information\_restore{B3BF5352-B406-412E-936E-A9436F19C528}\RP119\A0012253.exe
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[INFO] The file was moved to '480d69e7.qua'!
C:\System Volume Information\_restore{B3BF5352-B406-412E-936E-A9436F19C528}\RP120\A0012392.exe
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[INFO] The file was moved to '480d69ed.qua'!
C:\System Volume Information\_restore{B3BF5352-B406-412E-936E-A9436F19C528}\RP37\A0005991.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480d6a18.qua'!
C:\System Volume Information\_restore{B3BF5352-B406-412E-936E-A9436F19C528}\RP37\A0006000.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480d6a1a.qua'!
C:\System Volume Information\_restore{B3BF5352-B406-412E-936E-A9436F19C528}\RP40\A0006031.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480d6a1f.qua'!
C:\System Volume Information\_restore{B3BF5352-B406-412E-936E-A9436F19C528}\RP40\A0006054.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480d6a22.qua'!
C:\System Volume Information\_restore{B3BF5352-B406-412E-936E-A9436F19C528}\RP40\A0006055.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[INFO] The file was moved to '480d6a24.qua'!
End of the scan: dimanche 16 mars 2008 20:13
Used time: 1:15:03 min
The scan has been done completely.
4618 Scanning directories
222908 Files were scanned
9 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
9 files were moved to quarantine
0 files were renamed
2 Files cannot be scanned
222899 Files not concerned
10865 Archives were scanned
2 Warnings
0 Notes
-
-
BEN VOILA, tu dois etre tranquille la, tu peux tout virer c que des fichiers temps ou d install
-
pas de soucis, de rien bonne soiree
-
desinstalle avast aussi ...
-
ANTIVIR
Avast! est loin de ce que l'on a fait de mieux en matière de protection, voir ce lien pour plus d'informations : http://forum.malekal.com/ftopic3123.php
Clairement, Antivir est beaucoup plus performant, c'est pourquoi, je te conseille TRES VIVEMENT de désinstaller Avast! et installer Antivir à la place : https://www.malekal.com/avira-free-security-antivirus-gratuit/ ( ce n est pas une obligation)
- Après l'installation, mets le à jour - si ton firewall fait une alerte.. accepte la connexion.
- Assure toi qu'Antivir est bien à jour, vérifie la date d'update. Tu dois avoir antivir d intallé maintenant -
de rien biloutte