rapport à analyser svp...

amaelle · le 27 juillet 2007

Que faire toujours infecté?

Merci

regis56 · le 27 juillet 2007

Salut !

Fais ceci :

Clique sur démarrer/executer/

Copie/colle

Rentre le chemin indiqué en rouge C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Temp\

Le dossier va s'ouvrir

Supprime tout ce qu'il y a dedans

Si tu as des problème fait le en mode sans echec

Refais le scan kapersky ensuite pour verifier

A plus.

amaelle · le 27 juillet 2007

salut,

KASPERSKY ONLINE SCANNER REPORT

Monday, August 27, 2007 9:43:27 PM

Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)

Kaspersky Online Scanner version: 5.0.83.0

Kaspersky Anti-Virus database last update: 27/07/2007

Kaspersky Anti-Virus database records: 345945

Scan Settings

Scan using the following antivirus database standard

Scan Archives true

Scan Mail Bases true

Scan Target My Computer

C:\

D:\

E:\

F:\

G:\

H:\

I:\

J:\

Scan Statistics

Total number of scanned objects 52488

Number of viruses found 2

Number of infected objects 7 / 0

Number of suspicious objects 0

Duration of the scan process 00:34:57

Infected Object Name Virus Name Last Action

C:\Documents and Settings\DAKIRI HICHAM\Application Data\user60.rdb Object is locked skipped

C:\Documents and Settings\DAKIRI HICHAM\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped

C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Historique\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Historique\History.IE5\MSHist012007082720070828\index.dat Object is locked skipped

C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped

C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\DAKIRI HICHAM\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\DAKIRI HICHAM\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\DAKIRI HICHAM\UserData\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\Local Settings\Historique\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped

C:\Program Files\CA\Etrust Antivirus\DB\rtmaster.dbf Object is locked skipped

C:\Program Files\CA\Etrust Antivirus\DB\rtmaster.ntx Object is locked skipped

C:\RECYCLER\S-1-5-21-1513830243-117234482-4139306933-1006\Dc84.exe Infected: Trojan.Win32.Obfuscated.en skipped

C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

C:\System Volume Information\_restore{304D2AD8-90BA-4F09-BF12-4CDA4A6F0226}\RP152\A0015818.exe Infected: Trojan.Win32.Obfuscated.en skipped

C:\System Volume Information\_restore{304D2AD8-90BA-4F09-BF12-4CDA4A6F0226}\RP152\A0015819.exe Infected: Trojan.Win32.Inject.ba skipped

C:\System Volume Information\_restore{304D2AD8-90BA-4F09-BF12-4CDA4A6F0226}\RP152\A0015821.exe Infected: Trojan.Win32.Obfuscated.en skipped

C:\System Volume Information\_restore{304D2AD8-90BA-4F09-BF12-4CDA4A6F0226}\RP153\A0017015.exe Infected: Trojan.Win32.Obfuscated.en skipped

C:\System Volume Information\_restore{304D2AD8-90BA-4F09-BF12-4CDA4A6F0226}\RP153\A0017016.exe Infected: Trojan.Win32.Obfuscated.en skipped

C:\System Volume Information\_restore{304D2AD8-90BA-4F09-BF12-4CDA4A6F0226}\RP153\A0017017.exe Infected: Trojan.Win32.Obfuscated.en skipped

C:\System Volume Information\_restore{304D2AD8-90BA-4F09-BF12-4CDA4A6F0226}\RP156\change.log Object is locked skipped

C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped

C:\WINDOWS\SchedLgU.Txt Object is locked skipped

C:\WINDOWS\SoftwareDistribution\EventCache\{B41D7687-FD8D-4126-A7E1-06484A896A54}.bin Object is locked skipped

C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped

C:\WINDOWS\Sti_Trace.log Object is locked skipped

C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped

C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped

C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\default Object is locked skipped

C:\WINDOWS\system32\config\default.LOG Object is locked skipped

C:\WINDOWS\system32\config\Internet.evt Object is locked skipped

C:\WINDOWS\system32\config\SAM Object is locked skipped

C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped

C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\SECURITY Object is locked skipped

C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped

C:\WINDOWS\system32\config\software Object is locked skipped

C:\WINDOWS\system32\config\software.LOG Object is locked skipped

C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\system Object is locked skipped

C:\WINDOWS\system32\config\system.LOG Object is locked skipped

C:\WINDOWS\system32\h323log.txt Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped

C:\WINDOWS\wiadebug.log Object is locked skipped

C:\WINDOWS\wiaservc.log Object is locked skipped

C:\WINDOWS\WindowsUpdate.log Object is locked skipped

D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

Scan process completed.

merci

regis56 · le 27 juillet 2007

Salut !

Voici ce que tu vas faire :

Vide la corbeille

Ensuite

-Créer un point de restauration et supprimer les anciens !: (aide visuelle http://assiste.free.fr/p/comment/comment_a...stauration.html )

Cliquer avec le bouton droit sur l'icône Poste de travail, puis cliquer sur Propriétés.

Cliquer sur l'onglet «Restauration du système».

Sélectionner «Désactiver la Restauration du système» ou «Désactiver la Restauration du système sur tous les lecteurs»

Cliquer sur Appliquer.

Comme le dit le message, ceci supprimera tous les points de restauration existants. Pour faire cela, cliquer sur Oui.

Cliquer sur OK, redémarrer le PC. Faire l'opération inverse, et réactiver la restauration:un nouveau point sera automatiquement créé.

Ensuite refais le scan en ligne cette fois ci ca dois etre bon

A plus.

amaelle · le 27 juillet 2007

re,

KASPERSKY ONLINE SCANNER REPORT

Tuesday, August 28, 2007 12:06:57 AM

Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)

Kaspersky Online Scanner version: 5.0.83.0

Kaspersky Anti-Virus database last update: 28/07/2007

Kaspersky Anti-Virus database records: 345974

Scan Settings

Scan using the following antivirus database standard

Scan Archives true

Scan Mail Bases true

Scan Target My Computer

C:\

D:\

E:\

F:\

G:\

H:\

I:\

J:\

Scan Statistics

Total number of scanned objects 50478

Number of viruses found 0

Number of infected objects 0 / 0

Number of suspicious objects 0

Duration of the scan process 00:37:36

Infected Object Name Virus Name Last Action

C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped

C:\Documents and Settings\DAKIRI HICHAM\Application Data\user60.rdb Object is locked skipped

C:\Documents and Settings\DAKIRI HICHAM\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped

C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data\Microsoft\Messenger\ssakina@hotmail.com\SharingMetadata\Logs\Dfsr.log Object is locked skipped

C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data\Microsoft\Messenger\ssakina@hotmail.com\SharingMetadata\pending.dat Object is locked skipped

C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data\Microsoft\Messenger\ssakina@hotmail.com\SharingMetadata\Working\database_47C_95E3_7C95_CFB2\dfsr.db Object is locked skipped

C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data\Microsoft\Messenger\ssakina@hotmail.com\SharingMetadata\Working\database_47C_95E3_7C95_CFB2\fsr.log Object is locked skipped

C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data\Microsoft\Messenger\ssakina@hotmail.com\SharingMetadata\Working\database_47C_95E3_7C95_CFB2\fsrtmp.log Object is locked skipped

C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data\Microsoft\Messenger\ssakina@hotmail.com\SharingMetadata\Working\database_47C_95E3_7C95_CFB2\tmp.edb Object is locked skipped

C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data\Microsoft\Windows Live Contacts\ssakina@hotmail.com\real\members.stg Object is locked skipped

C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data\Microsoft\Windows Live Contacts\ssakina@hotmail.com\shadow\members.stg Object is locked skipped

C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Historique\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Historique\History.IE5\MSHist012007082720070828\index.dat Object is locked skipped

C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Temp\~DF84D4.tmp Object is locked skipped

C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Temp\~DF84E8.tmp Object is locked skipped

C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Temp\~DF94AC.tmp Object is locked skipped

C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Temp\~DF94D3.tmp Object is locked skipped