

Seneca27
Membres-
Compteur de contenus
3 -
Inscription
-
Dernière visite
Autres informations
-
Mes langues
français anglais allemand espagnol
Seneca27's Achievements

Junior Member (3/12)
0
Réputation sur la communauté
-
problème avec cheval de Troie
Seneca27 a répondu à un(e) sujet de Seneca27 dans Analyses et éradication malwares
Bonjour 'Charles...', Voici le rapport AVG-AS (NB date bizarre mais heure exacte!!! : mon ordi est bien config date, à moins que j'ai par manip maladroite modifié la date qd j'étais en mode sans échec) --------------------------------------------------------- AVG Anti-Spyware - Rapport d'analyse --------------------------------------------------------- + Créé à: 16:16:55 27/12/2006 + Résultat de l'analyse: C:\thin-85-1-x-x.exe -> Adware.BetterInternet : Ignoré. C:\Documents and Settings\COVO Léo\Menu Démarrer\Programmes\Power Scan -> Adware.PowerScan : Ignoré. C:\Documents and Settings\COVO Léo\Menu Démarrer\Programmes\Power Scan\Power Scan.lnk -> Adware.PowerScan : Ignoré. C:\Downloads\DinerDashSetup-dm[1].exe -> Adware.Trymedia : Ignoré. C:\setup1022.exe -> Adware.UrlSpy : Ignoré. :mozilla.272:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.247realmedia : Ignoré. :mozilla.274:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.247realmedia : Ignoré. :mozilla.275:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.247realmedia : Ignoré. :mozilla.276:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.247realmedia : Ignoré. :mozilla.277:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.247realmedia : Ignoré. :mozilla.278:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.247realmedia : Ignoré. :mozilla.279:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.247realmedia : Ignoré. :mozilla.217:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.2o7 : Ignoré. :mozilla.218:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.2o7 : Ignoré. :mozilla.219:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.2o7 : Ignoré. :mozilla.220:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.2o7 : Ignoré. :mozilla.221:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.2o7 : Ignoré. :mozilla.222:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.2o7 : Ignoré. :mozilla.257:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.2o7 : Ignoré. :mozilla.352:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Adbrite : Ignoré. :mozilla.353:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Adbrite : Ignoré. :mozilla.126:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Adtech : Ignoré. :mozilla.127:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Adtech : Ignoré. :mozilla.12:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Advertising : Ignoré. :mozilla.13:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Advertising : Ignoré. :mozilla.15:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Advertising : Ignoré. :mozilla.16:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Advertising : Ignoré. C:\Documents and Settings\LéoChan\Cookies\léochan@advertising[1].txt -> TrackingCookie.Advertising : Ignoré. :mozilla.66:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Atdmt : Ignoré. :mozilla.123:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Bluestreak : Ignoré. C:\Documents and Settings\LéoChan\Cookies\léochan@bluestreak[1].txt -> TrackingCookie.Bluestreak : Ignoré. :mozilla.197:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Casalemedia : Ignoré. :mozilla.198:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Casalemedia : Ignoré. :mozilla.199:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Casalemedia : Ignoré. :mozilla.200:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Casalemedia : Ignoré. :mozilla.201:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Casalemedia : Ignoré. :mozilla.202:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Casalemedia : Ignoré. :mozilla.380:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Com : Ignoré. :mozilla.162:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Coremetrics : Ignoré. :mozilla.74:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Doubleclick : Ignoré. C:\Documents and Settings\LéoChan\Cookies\léochan@doubleclick[1].txt -> TrackingCookie.Doubleclick : Ignoré. :mozilla.44:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Estat : Ignoré. C:\Documents and Settings\LéoChan\Cookies\léochan@estat[1].txt -> TrackingCookie.Estat : Ignoré. :mozilla.350:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Euroclick : Ignoré. :mozilla.351:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Euroclick : Ignoré. :mozilla.203:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Fastclick : Ignoré. :mozilla.208:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Fastclick : Ignoré. :mozilla.158:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Liveperson : Ignoré. :mozilla.159:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Liveperson : Ignoré. :mozilla.160:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Liveperson : Ignoré. :mozilla.161:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Liveperson : Ignoré. :mozilla.156:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Mediaplex : Ignoré. C:\Documents and Settings\LéoChan\Cookies\léochan@mediaplex[1].txt -> TrackingCookie.Mediaplex : Ignoré. :mozilla.106:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Overture : Ignoré. :mozilla.294:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Questionmarket : Ignoré. :mozilla.295:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Questionmarket : Ignoré. :mozilla.296:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Questionmarket : Ignoré. :mozilla.297:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Questionmarket : Ignoré. :mozilla.357:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Ru4 : Ignoré. :mozilla.358:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Ru4 : Ignoré. :mozilla.359:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Ru4 : Ignoré. :mozilla.36:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Serving-sys : Ignoré. :mozilla.37:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Serving-sys : Ignoré. :mozilla.38:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Serving-sys : Ignoré. :mozilla.39:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Serving-sys : Ignoré. :mozilla.40:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Serving-sys : Ignoré. :mozilla.67:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Smartadserver : Ignoré. :mozilla.68:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Smartadserver : Ignoré. :mozilla.69:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Smartadserver : Ignoré. :mozilla.70:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Smartadserver : Ignoré. :mozilla.204:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Statcounter : Ignoré. :mozilla.205:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Statcounter : Ignoré. :mozilla.206:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Statcounter : Ignoré. :mozilla.207:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Statcounter : Ignoré. :mozilla.55:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Tacoda : Ignoré. :mozilla.58:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Tacoda : Ignoré. :mozilla.59:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Tacoda : Ignoré. :mozilla.60:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Tacoda : Ignoré. C:\Documents and Settings\LéoChan\Cookies\léochan@tacoda[1].txt -> TrackingCookie.Tacoda : Ignoré. :mozilla.19:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Tradedoubler : Ignoré. :mozilla.20:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Tradedoubler : Ignoré. :mozilla.209:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Tribalfusion : Ignoré. :mozilla.41:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Weborama : Ignoré. :mozilla.42:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Weborama : Ignoré. :mozilla.43:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Weborama : Ignoré. C:\Documents and Settings\LéoChan\Cookies\léochan@weborama[1].txt -> TrackingCookie.Weborama : Ignoré. :mozilla.114:C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt -> TrackingCookie.Webtrendslive : Ignoré. Fin du rapport puis celui de ...DIagHelp Lancement de chercher... Ceci peut prendre PLUSIEURS MINUTES, merci d'attendre jusqu'au bout. Merci de verifier que vous copiez coller le contenu ENTIER Si le texte est long et ne contient pas dans un seul message, faire plusieurs me ssages. Liste les derniers fichiers des repertoires Windows... Liste fichiers sans compagnies des repertoires Windows... Liste possibles fichiers de l'infection Wareout. Recherche de rootkit! (Merci S!Ri) Recherche des infections connues... Liste les programmes installes... Je n'arrive pas à copier + loin, le blanc sur noir de DiagHelp, le bloc-notes ne s'ouvre pas. ???? Dsl de vous ennuyer ainsi. N'oubliez pas de vous reposer et de profiter des fêtes. Merci encore. Bien cordialement Seneca27 -
problème avec cheval de Troie
Seneca27 a répondu à un(e) sujet de Seneca27 dans Analyses et éradication malwares
Bonsoir, Suite à vos conseils, j'ai refait un scan AVG-free et, en effet, il n'a rien détecté. En revanche, ActiveScanFree a d'une part détecté et désinfecté 4 virus, et d'autre part détecté 29 spyware/adware tels qu'affichés dans le rapport d'incidents suivant : Incident Status Location Adware:adware/ncase Not disinfected c:\temp\salm.log Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt[.doubleclick.net/] Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt[.2o7.net/] Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt[.atdmt.com/] Spyware:Cookie/Xiti Not disinfected C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt[.xiti.com/] Spyware:Cookie/Adviva Not disinfected C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt[.adviva.net/] Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt[.advertising.com/] Spyware:Cookie/Tradedoubler Not disinfected C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt[.tradedoubler.com/] Spyware:Cookie/Smartadserver Not disinfected C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt[.smartadserver.com/] Spyware:Cookie/Adtech Not disinfected C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt[.adtech.de/] Spyware:Cookie/Bluestreak Not disinfected C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt[.bluestreak.com/] Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt[.247realmedia.com/] Spyware:Cookie/Overture Not disinfected C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt[.overture.com/] Spyware:Cookie/Weborama Not disinfected C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt[.weborama.fr/] Spyware:Cookie/WebtrendsLive Not disinfected C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt[statse.webtrendslive.com/] Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt[.serving-sys.com/] Spyware:Cookie/Overture Not disinfected C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt[.perf.overture.com/] Spyware:Cookie/Zedo Not disinfected C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt[.zedo.com/] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt[ad.yieldmanager.com/] Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt[.mediaplex.com/] Spyware:Cookie/Coremetrics Not disinfected C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt[data.coremetrics.com/] Spyware:Cookie/Casalemedia Not disinfected C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt[.casalemedia.com/] Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt[.fastclick.net/] Spyware:Cookie/Statcounter Not disinfected C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt[.statcounter.com/] Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt[.tribalfusion.com/] Spyware:Cookie/QuestionMarket Not disinfected C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt[.questionmarket.com/] Spyware:Cookie/Apmebf Not disinfected C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt[.apmebf.com/] Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\LéoChan\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\cookies.txt[.com.com/] Virus:W32/Netsky.B.worm Disinfected C:\Documents and Settings\LéoChan\Application Data\Thunderbird\Profiles\oy7q075a.default\Mail\Local Folders\Inbox[~0003352.~][concert.com] Virus:W32/Spamta.BD.worm Disinfected C:\Documents and Settings\LéoChan\Application Data\Thunderbird\Profiles\oy7q075a.default\Mail\Local Folders\Inbox[update-KB3148-x86.exe] Virus:W32/Spamta.BD.worm Disinfected C:\Documents and Settings\LéoChan\Application Data\Thunderbird\Profiles\oy7q075a.default\Mail\Local Folders\Inbox[text.txt.pif] Virus:W32/Spamta.BD.worm Disinfected C:\Documents and Settings\LéoChan\Application Data\Thunderbird\Profiles\oy7q075a.default\Mail\Local Folders\Sent[update-KB3148-x86.exe] Adware:Adware/Trymedia Not disinfected C:\Downloads\DinerDashSetup-dm[1].exe Spyware:Spyware/UrlSpy Not disinfected C:\setup1022.exe[iEHost30.exe] Spyware:Spyware/UrlSpy Not disinfected C:\setup1022.exe[iEDll300.dll] Spyware:Spyware/UrlSpy Not disinfected C:\setup1022.exe[uninstal.exe] Spyware:Spyware/UrlSpy Not disinfected C:\setup1022.exe[pinstaller.exe] Spyware:Spyware/BetterInet Not disinfected C:\thin-85-1-x-x.exe N'étant pas en mesure d'apprécier la nocivité de ces malware j'attends vos instructions quant à la suite à donner à ce diagnostic. D'avance encore merci, je n'aurais jamais pu en arriver là sans vous ! ... Très cordialement Seneca27 -
Bonjour, mon antivirus AVG-free détecte sans supprimer un cheval de troie depuis quelques semaines. J'ai procédé comme indiqué plus haut. Pouvez-vous me dire si mon pc est de nouveau "sain"? Merci d'avance! rapport antivir : AntiVir PersonalEdition Classic Report file date: mardi 26 décembre 2006 11:35 Scanning for 495093 virus strains and unwanted programs. Licensed to: Avira AntiVir PersonalEdition Classic Serial number: 0000149996-WURGE-0001 Platform: Windows XP Windows version: (Service Pack 2) [5.1.2600] Username: LéoChan Computer name: BUREAU Version information: AVSCAN.EXE : 7.0.0.47 196648 21/08/2006 11:06:49 AVSCAN.DLL : 7.0.0.45 41000 07/09/2006 11:51:50 LUKE.DLL : 7.0.0.47 110632 07/09/2006 11:32:29 LUKERES.DLL : 7.0.0.47 9256 07/09/2006 11:51:50 ANTIVIR0.VDF : 6.35.0.1 7371264 31/05/2006 11:35:11 ANTIVIR1.VDF : 6.36.0.9 1424384 06/09/2006 08:12:24 ANTIVIR2.VDF : 6.36.0.10 2048 06/09/2006 08:12:26 ANTIVIR3.VDF : 6.36.0.11 2048 06/09/2006 08:12:28 AVEWIN32.DLL : 7.2.0.14 1827328 04/09/2006 15:23:26 AVPREF.DLL : 7.0.0.2 17960 24/07/2006 13:35:36 AVREP.DLL : 6.36.0.3 544808 06/09/2006 09:04:18 AVRPBASE.DLL : 7.0.0.0 1544232 30/03/2006 09:42:44 AVPACK32.DLL : 7.2.0.0 360488 21/07/2006 07:00:28 AVREG.DLL : 6.31.0.90 25128 28/07/2005 11:06:11 NETNT.DLL : 6.32.0.0 6696 27/09/2005 08:56:45 NETNW.DLL : 7.0.0.0 9768 24/07/2006 13:35:38 RCIMAGE.DLL : 7.0.0.74 1642536 01/08/2006 12:22:50 RCTEXT.DLL : 7.0.0.107 77864 07/09/2006 11:51:49 Configuration settings for the scan: Jobname.......................: Local Drives Configuration file............: C:\Program Files\AntiVir PersonalEdition Classic\alldrives.avp Boot sectors..................: C,D,A,F,G,H,I,E Scan memory...................: 1 Process scan..................: 1 Scan all files................: 2 Scan archives.................: 1 Recursion depth...............: 20 Smart extensions..............: 1 Macro heuristic...............: 1 File heuristic................: 0 Primary action................: 1 Secondary action..............: 0 Start of the scan: mardi 26 décembre 2006 11:35 The scan of running processes will be started 6 Processes were scanned Start scanning boot sectors: Boot sector 'C:\' [NOTE] No virus was found! Boot sector 'D:\' [NOTE] No virus was found! Boot sector 'A:\' [NOTE] In the drive 'A:\' no data medium is inserted! Boot sector 'F:\' [NOTE] In the drive 'F:\' no data medium is inserted! Boot sector 'G:\' [NOTE] In the drive 'G:\' no data medium is inserted! Boot sector 'H:\' [NOTE] In the drive 'H:\' no data medium is inserted! Boot sector 'I:\' [NOTE] In the drive 'I:\' no data medium is inserted! Starting to scan the registry. The registry was scanned ( 14 files ). Starting the file scan: C:\pagefile.sys [WARNING] The file could not be opened! C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\1SETTI~1.LIV [WARNING] The file could not be opened! C:\Documents and Settings\COVO Léo\Local Settings\Temp\all_files7.exe [DETECTION] Is the Trojan horse TR/Dldr.Apropo.AB.2 [iNFO] The file was moved to 'abf06869.qua'! C:\Documents and Settings\LéoChan\NTUSER.DAT [WARNING] The file could not be opened! C:\Documents and Settings\LéoChan\ntuser.dat.LOG [WARNING] The file could not be opened! C:\Documents and Settings\LéoChan\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat [WARNING] The file could not be opened! C:\Documents and Settings\LéoChan\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG [WARNING] The file could not be opened! C:\Documents and Settings\LéoChan\Local Settings\Application Data\Mozilla\Firefox\Profiles\nsrfdl6m.default\XUL.mfl [WARNING] The file could not be opened! C:\Documents and Settings\NetworkService.AUTORITE NT\NTUSER.DAT [WARNING] The file could not be opened! C:\Documents and Settings\NetworkService.AUTORITE NT\ntuser.dat.LOG [WARNING] The file could not be opened! C:\Documents and Settings\NetworkService.AUTORITE NT\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat [WARNING] The file could not be opened! C:\Documents and Settings\NetworkService.AUTORITE NT\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG [WARNING] The file could not be opened! C:\System Volume Information\_restore{831D3DDD-EC60-4074-A1F2-0C348DB179F6}\Fifoed(2)\snapshot\_R017D~1 [WARNING] The file could not be opened! C:\System Volume Information\_restore{831D3DDD-EC60-4074-A1F2-0C348DB179F6}\RP325\A0096481.exe [DETECTION] Is the Trojan horse TR/Dldr.Apropo.AB.2 [iNFO] The file was moved to '7bca31c8.qua'! C:\WINDOWS\inf\wmpocm.inf [WARNING] The file could not be opened! C:\WINDOWS\SYSTEM32\config\default [WARNING] The file could not be opened! C:\WINDOWS\SYSTEM32\config\default.LOG [WARNING] The file could not be opened! C:\WINDOWS\SYSTEM32\config\SAM [WARNING] The file could not be opened! C:\WINDOWS\SYSTEM32\config\SAM.LOG [WARNING] The file could not be opened! C:\WINDOWS\SYSTEM32\config\SECURITY [WARNING] The file could not be opened! C:\WINDOWS\SYSTEM32\config\SECURITY.LOG [WARNING] The file could not be opened! C:\WINDOWS\SYSTEM32\config\software [WARNING] The file could not be opened! C:\WINDOWS\SYSTEM32\config\software.LOG [WARNING] The file could not be opened! C:\WINDOWS\SYSTEM32\config\system [WARNING] The file could not be opened! C:\WINDOWS\SYSTEM32\config\system.LOG [WARNING] The file could not be opened! The path A:\ could not be found! Le périphérique n'est pas prêt. The path F:\ could not be found! Le périphérique n'est pas prêt. The path G:\ could not be found! Le périphérique n'est pas prêt. The path H:\ could not be found! Le périphérique n'est pas prêt. The path I:\ could not be found! Le périphérique n'est pas prêt. End of the scan: mardi 26 décembre 2006 12:21 Used time: 46:29 min The scan has been done completely. 5261 Scanning directories 146373 Files were scanned 2 viruses and/or unwanted programs were found 0 files were deleted 0 files were repaired 2 files were moved to quarantine 0 files were renamed 1340 Archives were scanned 36 Warnings 0 Notes Rapport hijackthis : Logfile of HijackThis v1.99.1 Scan saved at 13:02:52, on 29/12/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\Program Files\Messenger\msmsgs.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\NOTEPAD.EXE C:\Documents and Settings\LéoChan\Bureau\hijackthis\HijackThis.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\system32\wuauclt.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://freebox.free.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://freebox.free.fr/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe" O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\program files\neoteris\secure application manager\gapsp.dll O10 - Unknown file in Winsock LSP: c:\program files\neoteris\secure application manager\gapsp.dll O10 - Unknown file in Winsock LSP: c:\program files\neoteris\secure application manager\gapsp.dll O10 - Unknown file in Winsock LSP: c:\program files\neoteris\secure application manager\gapsp.dll O10 - Unknown file in Winsock LSP: c:\program files\neoteris\secure application manager\gapsp.dll O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll O14 - IERESET.INF: START_PAGE_URL=http://freebox.free.fr/ O16 - DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM ActiveX Control) - http://minitelweb.minitel.com/imin_data/ocx/MDM.cab O16 - DPF: {4CC35DAD-40EA-4640-ACC2-A1A3B6FB3E06} (NeoterisSetup Control) - https://sloar.ens-lsh.fr/dana-cached/setup/NeoterisSetup.cab O16 - DPF: {B1826A9F-4AA0-4510-BA77-9013E74E4B9B} - http://www.trendmicro.com/spyware-scan/as4web.cab O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe