[résolu]infection SPR/PowerReg.A

[delphine22]

bonjour,

mon antivirus antivir classic détecte SPR/PowerReg.A lorsque je lance le défragmenteur. celui-ci se réinstalle entrecoupé d'alerte d'infection avant de se lancer. pouvez-vous m'aider à comprendre ce qui se passe et résoudre mon problème?

[Malekal_morte]

Salut,

 

Quel est ton antivirus ?

Quel est ton logiciel pour défragmenter ?

 

Tu n'as que des alertes pour SPR/PowerReg.A ?

[angelique]

bien vu Malekal_morte

 

certainement un faux positif!

 

C:\Program Files\Executive Software\Diskeeper\DSK2-BUS.EXE

[DETECTION] Contains signature of the SPR/PowerReg.A program

[WARNING] The file was ignored!

 

scan chez jotti:

 

File: DSK2-BUS.EXE Status: POSSIBLY INFECTED/MALWARE (Note: this file was only classified as malware by scanners known to generate more false positives than the average scanner. Do not consider these results definately accurate. Also, because of this, results of this scan will not be recorded in the database.) MD5 d42f29f8546093d63133dd9ad142be70 Packers detected: - Scanner results Scan taken on 18 Jan 2007 10:03:56 (GMT) AntiVir Found SPR/PowerReg.A riskware ArcaVir Found nothing Avast Found nothing AVG Antivirus Found nothing BitDefender Found nothing ClamAV Found nothing Dr.Web Found nothing F-Prot Antivirus Found nothing F-Secure Anti-Virus Found nothing Fortinet Found nothing Kaspersky Anti-Virus Found nothing NOD32 Found nothing Norman Virus Control Found nothing VirusBuster Found nothing VBA32 Found nothing

[Malekal_morte]

Salut angélique,

 

C'est ce que je me suis dit, c'est pour ça que j'ai demandé des infos

[delphine22]

Salut,

 

Quel est ton antivirus ?

Quel est ton logiciel pour défragmenter ?

 

Tu n'as que des alertes pour SPR/PowerReg.A ?

effectivement, apparemment un faux positif. Ca concorde avec la citation d'angelique.

merci de votre aide.

[Malekal_morte]

Pas de prb

[angelique]

j'ai uploader l'archive DSK2-BUS.EXE chez avira pour qu'ils corrigent la détection.

 

http://www.avira.com/en/support/submit_suspicious_files.html

 

Dear user,

 

Digital data should always be safe - free of viruses and of harmful code.

Because of this reason, we are happy you are using our Internet offer to

have suspicious files examined for a possible infection.

 

We have forwarded the file/s you have uploaded to our specialists from the virus lab.

The file/s is/are being analyzed.

 

We will shortly communicate you the result via email - please have some patience.

 

We are at your disposal for all kinds of questions regarding virus protection. Please call us

at +49 (0) 7542-500 0 or drop us an email to sales@avira.com

 

Please find current information about Avira and our security solutions on our website: www.avira.com

 

--

[Malekal_morte]

Bravo Angélique

[angelique]

Etant donné que diskeeper est utilisé par bon nombre d'utilisteurs xp, il est urgent!!! que ce false soit corrigé au plus vite, car si "delete" , je n'ai pas testé les conséquences.

[angelique]

J'ai eu réponse d'avira!

 

Dear Sir or Madam,

 

 

Thank you for your recent inquiry.

 

We want to inform you, that the file you have sent us will be detected in future as SPR/PowerReg.A

 

It is not a false positive. Please note, that SecurityPrivacyRisk (SPR) labels possible malicious software. That means, that the file doesn't need to be a virus, but has the possibility to perform malicious actions.

 

The detection of SPR (SecurityPrivacyRisk) can be excluded from a virus scan.

 

Attachment(s) you sent:

- DSK2_BUS.rar

- DSK2_BUS.EXE

-- Freundliche Gruesse / Best regards Avira GmbH Fabian Henne First Level Support Avira GmbH Lindauer Str. 21, D-88069 Tettnang, Germany Internet: http://www.avira.com ------------------------------------------------------------------- NEU: Avira Premium Security Suite Der vielfach ausgezeichnete und weltweit von über 15 Millionen Anwendern eingesetzte Viren- und Malwareschutz jetzt auch mit Firewall! http://www.avira.com/de/unternehmens-news/..._firewall_.html ALLGEMEINE GESCHÄFTSBEDINGUNGEN Es gelten unsere Allgemeinen Geschäftsbedingungen (AGB). Sie finden sie in der jeweils gültigen Fassung unter http://www.avira.com/agb. -------------------------------------------------------------------- ---------------------------------------------------------------------- Hinweis: Ihre Email bleibt in unserem System unter dem in der Betreff-Zeile genannten Call vier Wochen gespeichert. Bitte lassen Sie den Betreff unverändert, falls Sie uns in dieser Zeit wegen weiterer Fragen zu diesem Call erneut kontaktieren möchten. Nutzen Sie einfach nur die Reply-Funktion Ihres Email-Programms. Möchten Sie uns nach Ablauf der vier Wochen eine Nachricht senden, dann versehen Sie Ihre Email bitte mit neuem Betreff. Vielen Dank! ------------------------------------------------------------------------ Indication: Your email will be saved in our system under the call stated in the subject heading. Please do not change the subject heading, in case you should contact us again during this period of time for further questions related to this call. Simply use the reply function of your email program. If you would like to send us a message after those four weeks have expired, then do please add a new subject heading to your email. Thank you! ------------------------------------------------------------------------

____________________________________________________________________

 

Pour info, la suppression de C:\Program Files\Executive Software\Diskeeper\DSK2-BUS.EXE a pour conséquence de lancer l'installeur de diskeeper; pour sa reinstallation,un repertoire etant crée à son installation en C:\Program Files\Executive Software\Diskeeper Setup