Infection PC - Analyse rapport

[dorotlaurent]

Re.

 

Alors j'ai tout bien réglé

 

Tout OK à part dans * REPORT : pas trouvé limite report file ( pitêtre mal vu, possible )

* SCAN : Interactive coché et pas trouvé notifications ( possible, mal vu aussi ... )

 

ET j'ai lancé mon scan

 

Voilà. Le rapport Hijackthis il a donné quoi du coup ??

 

Je reviens d'ici peu.

[Zonk]

Re.

 

Alors j'ai tout bien réglé

 

Tout OK à part dans * REPORT : pas trouvé limite report file ( pitêtre mal vu, possible )

* SCAN : Interactive coché et pas trouvé notifications ( possible, mal vu aussi ... )

 

ET j'ai lancé mon scan

 

Voilà. Le rapport Hijackthis il a donné quoi du coup ??

 

Je reviens d'ici peu.

............va voir message #120...une correction de Popup au sujet de Kasper....une correction pour moi aussi

édit: le rapport s'améliore...y a juste Ad-Aware ,comme je l'ai écrit v'la pas longtemps,qui s'est mal désinstaller...j'ai mon idée pour l'ôter...mais attendons les avis.....pour y aller moins en bourrin.....car je suis du genre bourrin !

Modifié le 17 décembre 2007 par Zonk

[dorotlaurent]

Le temps de poster message, il a déjà sonné 2 fois

Donc déjà 2 choses en quarantaine

 

Bon, à toute.

 

Merci

[Zonk]

Le temps de poster message, il a déjà sonné 2 fois

Donc déjà 2 choses en quarantaine

 

Bon, à toute.

 

Merci

ca va prende l'aide de l'Équipe Sécurité...j'ai lancer un S.O.S...ca devrait arriver..........et puis le message #120?? c'est compris???

@+

[dorotlaurent]

OUI c'est compris ! LOL

J'ai un scan de moins à faire !!! supeeeeeeeer !!!!! :P

 

A toute. 8 % de mon scan antivir

 

Merci popup également .

[Zonk]

OUI c'est compris ! LOL

J'ai un scan de moins à faire !!! supeeeeeeeer !!!!! :P

 

A toute. 8 % de mon scan antivir

 

Merci popup également .

A mon avis il faut attendre l'aide...avec ce résultat de pestes encore détecter (peut être cacher dans les points de restauration ??)j'ai l'impression que l'on tourne un peu en rond.....je ne sais plus trop quoi faire......donc je reviens dans quelques heures....en espérant qu'un érudit nous guidera

@+

[Invité popup]

cela fait un bon momment que tu es sur la brèche,alors...

peut-etre sur zebulon http://www.zebulon.fr/outils/antivirus/ant...us-en-ligne.php (bitdefender)

[dorotlaurent]

C fort possible que ce soit au niveau des points de restauration. Car c vrai que j'en ai fait quelques-uns, et en sachant qu'apparemment le pc est infecté depuis longtemps, ils se sont sûrement trouvés une petite place quelque part ........... Bon, au total, 3 sonneries ( comme hier ) donc j'espère qu'il n'y en aura pas davantage ....

 

Merci pour l'aide.

 

Je reviens également plus tard, sans problème.

 

Merci

 

Je dois le faire, là, le scan en ligne de Zébulon ??

 

J'attends confirmation

[dorotlaurent]

cela fait un bon momment que tu es sur la brèche,alors...

peut-etre sur zebulon http://www.zebulon.fr/outils/antivirus/ant...us-en-ligne.php (bitdefender)

 

Je le lance après mon scan antivir ?

[dorotlaurent]

VOICI MON RAPPORT D'ANTIVIR : pas très bon, encore pire qu'hier

 

 

Version information:

BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00

AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 13:16:29

AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 12:23:51

LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 15:32:47

LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 12:35:20

ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 14:27:15

ANTIVIR1.VDF : 7.0.1.95 3367424 Bytes 14/12/2007 22:01:34

ANTIVIR2.VDF : 7.0.1.96 2048 Bytes 14/12/2007 22:01:34

ANTIVIR3.VDF : 7.0.1.101 18944 Bytes 16/12/2007 22:01:34

AVEWIN32.DLL : 7.6.0.45 3084800 Bytes 16/12/2007 22:01:34

AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:26

AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 07:39:17

AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24

AVPACK32.DLL : 7.3.0.15 360488 Bytes 03/08/2007 08:46:00

AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 07:17:06

AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 12:26:33

AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 07:10:18

NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:42

RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 12:38:13

RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 12:50:37

SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 09:37:21

 

Configuration settings for the scan:

Jobname..........................: Manual Selection

Configuration file...............: C:\ProgramData\Avira\AntiVir PersonalEdition Classic\PROFILES\folder.avp

Logging..........................: low

Primary action...................: interactive

Secondary action.................: ignore

Scan master boot sector..........: on

Scan boot sector.................: on

Boot sectors.....................: G:,

Scan memory......................: on

Process scan.....................: on

Scan registry....................: on

Search for rootkits..............: on

Scan all files...................: All files

Scan archives....................: on

Recursion depth..................: 20

Smart extensions.................: on

Deviating archive types..........: +BSD Mailbox, +Netscape/Mozilla Mailbox, +Eudora Mailbox, +Squid cache, +Pegasus Mailbox, +MS Outlook Mailbox,

Macro heuristic..................: on

File heuristic...................: medium

Deviating risk categories........: +APPL,+GAME,+JOKE,+PCK,+SPR,

 

Start of the scan: lundi 17 décembre 2007 19:00

 

Starting search for hidden objects.

'81782' objects were checked, '0' hidden objects were found.

 

The scan of running processes will be started

Scan process 'avscan.exe' - '1' Module(s) have been scanned

Scan process 'avcenter.exe' - '1' Module(s) have been scanned

Scan process 'iexplore.exe' - '1' Module(s) have been scanned

Scan process 'FlashUtil9e.exe' - '1' Module(s) have been scanned

Scan process 'iexplore.exe' - '1' Module(s) have been scanned

Scan process 'ieuser.exe' - '1' Module(s) have been scanned

Scan process 'conime.exe' - '1' Module(s) have been scanned

Scan process 'taskeng.exe' - '1' Module(s) have been scanned

Scan process 'AcroRd32.exe' - '1' Module(s) have been scanned

Scan process 'usnsvc.exe' - '1' Module(s) have been scanned

Scan process 'sched.exe' - '1' Module(s) have been scanned

Scan process 'avgnt.exe' - '1' Module(s) have been scanned

Scan process 'avguard.exe' - '1' Module(s) have been scanned

Scan process 'HPHC_Service.exe' - '1' Module(s) have been scanned

Scan process 'msmsgs.exe' - '1' Module(s) have been scanned

Scan process 'HPQTOA~1.EXE' - '1' Module(s) have been scanned

Scan process 'ehmsas.exe' - '1' Module(s) have been scanned

Scan process 'WmiPrvSE.exe' - '1' Module(s) have been scanned

Scan process 'rundll32.exe' - '1' Module(s) have been scanned

Scan process 'MSN Pictures Displayer.exe' - '1' Module(s) have been scanned

Scan process 'PrintScreen.exe' - '1' Module(s) have been scanned

Scan process 'EDICT.EXE' - '1' Module(s) have been scanned

Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned

Scan process 'ehtray.exe' - '1' Module(s) have been scanned

Scan process 'sidebar.exe' - '1' Module(s) have been scanned

Scan process 'jusched.exe' - '1' Module(s) have been scanned

Scan process 'vVX1000.exe' - '1' Module(s) have been scanned

Scan process 'SDTrayApp.exe' - '1' Module(s) have been scanned

Scan process 'HPWAMain.exe' - '1' Module(s) have been scanned

Scan process 'WiFiMsg.exe' - '1' Module(s) have been scanned

Scan process 'QLBCTRL.exe' - '1' Module(s) have been scanned

Scan process 'hpwuSchd2.exe' - '1' Module(s) have been scanned

Scan process 'SynTPEnh.exe' - '1' Module(s) have been scanned

Scan process 'MSASCui.exe' - '1' Module(s) have been scanned

Scan process 'taskeng.exe' - '1' Module(s) have been scanned

Scan process 'hpqwmiex.exe' - '1' Module(s) have been scanned

Scan process 'CLSched.exe' - '1' Module(s) have been scanned

Scan process 'XAudio.exe' - '1' Module(s) have been scanned

Scan process 'SearchIndexer.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'swdsvc.exe' - '1' Module(s) have been scanned

Scan process 'svcntaux.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'MSCamS32.exe' - '1' Module(s) have been scanned

Scan process 'LSSrvc.exe' - '1' Module(s) have been scanned

Scan process 'CLCapSvc.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'explorer.exe' - '1' Module(s) have been scanned

Scan process 'taskeng.exe' - '1' Module(s) have been scanned

Scan process 'dwm.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'spoolsv.exe' - '1' Module(s) have been scanned

Scan process 'aawservice.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'SLsvc.exe' - '1' Module(s) have been scanned

Scan process 'audiodg.exe' - '0' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'winlogon.exe' - '1' Module(s) have been scanned

Scan process 'lsm.exe' - '1' Module(s) have been scanned

Scan process 'lsass.exe' - '1' Module(s) have been scanned

Scan process 'services.exe' - '1' Module(s) have been scanned

Scan process 'csrss.exe' - '1' Module(s) have been scanned

Scan process 'wininit.exe' - '1' Module(s) have been scanned

Scan process 'csrss.exe' - '1' Module(s) have been scanned

Scan process 'smss.exe' - '1' Module(s) have been scanned

71 processes with 71 modules were scanned

 

Starting master boot sector scan:

Master boot sector HD0

[NOTE] No virus was found!

 

Start scanning boot sectors:

Boot sector 'C:\'

[NOTE] No virus was found!

Boot sector 'D:\'

[NOTE] No virus was found!

Boot sector 'G:\'

[NOTE] No virus was found!

 

Starting to scan the registry.

The registry was scanned ( '22' files ).

 

 

Starting the file scan:

 

Begin scan in 'C:\'

C:\hiberfil.sys

[WARNING] The file could not be opened!

C:\pagefile.sys

[WARNING] The file could not be opened!

C:\HP\BIN\KillIt.exe

[DETECTION] Contains detection pattern of the application APPL/KillApp.A

[iNFO] The file was moved to '47d2ba85.qua'!

C:\HP\HPQWare\BTBHost\SetACL.exe

[DETECTION] Contains detection pattern of the application APPL/ACLSet

[iNFO] The file was moved to '47daba8e.qua'!

C:\Program Files\RKFree\rkfree.exe

[DETECTION] Contains detection pattern of the SPR/Keyloger.51200 program

[iNFO] The file was moved to '47ccbe46.qua'!

C:\Users\dorothée\Downloads\rkfree_setup.exe

[DETECTION] Contains detection pattern of the SPR/Keyloger.84480 program

[iNFO] The file was moved to '47ccc413.qua'!

Begin scan in 'D:\' <HP_RECOVERY>

Begin scan in 'E:\'

Search path E:\ could not be opened!

Le périphérique n'est pas prêt.

 

Begin scan in 'G:\' <PHOTOS/MUSIQUES/FILMS>

 

 

End of the scan: lundi 17 décembre 2007 20:14

Used time: 1:13:54 min

 

The scan has been done completely.

 

14863 Scanning directories

289532 Files were scanned

4 viruses and/or unwanted programs were found

0 Files were classified as suspicious:

0 files were deleted

0 files were repaired

4 files were moved to quarantine

0 files were renamed

2 Files cannot be scanned

289528 Files not concerned

5043 Archives were scanned

2 Warnings

12 Notes

81782 Objects were scanned with rootkit scan

0 Hidden objects were found

 

 

J'attends confirmation pour scan en ligne avec Zébulon, merci.

Je reviens plus tard.