Trojan HBO et malware virtumonde. HELP

[astroboy911]

ok apres le boulot vers 16heures alors, merci à plus

[astroboy911]

Avira AntiVir Personal

Report file date: 2008-05-10 18:26

 

Scanning for 1258665 virus strains and unwanted programs.

 

Licensed to: Avira AntiVir PersonalEdition Classic

Serial number: 0000149996-ADJIE-0001

Platform: Windows Vista

Windows version: (Service Pack 1) [6.0.6001]

Boot mode: Normally booted

Username: SYSTEM

Computer name: PC-DE-JULIEN

 

Version information:

BUILD.DAT : 8.1.00.295 16479 Bytes 2008-04-09 16:24:00

AVSCAN.EXE : 8.1.2.12 311553 Bytes 2008-03-18 09:02:56

AVSCAN.DLL : 8.1.1.0 53505 Bytes 2008-02-07 08:43:37

LUKE.DLL : 8.1.2.9 151809 Bytes 2008-02-28 08:41:23

LUKERES.DLL : 8.1.2.1 12033 Bytes 2008-02-21 08:28:40

ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 2007-07-18 10:33:34

ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 2008-03-07 13:08:58

ANTIVIR2.VDF : 7.0.4.0 1554432 Bytes 2008-05-05 16:19:13

ANTIVIR3.VDF : 7.0.4.23 99840 Bytes 2008-05-09 16:19:14

Engineversion : 8.1.0.42

AEVDF.DLL : 8.1.0.5 102772 Bytes 2008-02-25 09:58:21

AESCRIPT.DLL : 8.1.0.31 262522 Bytes 2008-05-10 16:19:23

AESCN.DLL : 8.1.0.16 119156 Bytes 2008-05-10 16:19:23

AERDL.DLL : 8.1.0.20 418165 Bytes 2008-05-10 16:19:22

AEPACK.DLL : 8.1.1.4 364918 Bytes 2008-05-10 16:19:21

AEOFFICE.DLL : 8.1.0.18 192890 Bytes 2008-05-10 16:19:20

AEHEUR.DLL : 8.1.0.26 1237366 Bytes 2008-05-10 16:19:19

AEHELP.DLL : 8.1.0.14 115063 Bytes 2008-05-10 16:19:18

AEGEN.DLL : 8.1.0.20 299380 Bytes 2008-05-10 16:19:17

AEEMU.DLL : 8.1.0.6 430451 Bytes 2008-05-10 16:19:16

AECORE.DLL : 8.1.0.28 168310 Bytes 2008-05-10 16:19:15

AVWINLL.DLL : 1.0.0.7 14593 Bytes 2008-01-23 17:07:53

AVPREF.DLL : 8.0.0.1 25857 Bytes 2008-02-18 10:37:50

AVREP.DLL : 7.0.0.1 155688 Bytes 2007-04-16 13:26:47

AVREG.DLL : 8.0.0.0 30977 Bytes 2008-01-23 17:07:49

AVARKT.DLL : 1.0.0.23 307457 Bytes 2008-02-12 08:29:23

AVEVTLOG.DLL : 8.0.0.11 114945 Bytes 2008-02-28 08:31:31

SQLITE3.DLL : 3.3.17.1 339968 Bytes 2008-01-22 17:28:02

SMTPLIB.DLL : 1.2.0.19 28929 Bytes 2008-01-23 17:08:39

NETNT.DLL : 8.0.0.1 7937 Bytes 2008-01-25 12:05:10

RCIMAGE.DLL : 8.0.0.35 2371841 Bytes 2008-03-10 14:37:25

RCTEXT.DLL : 8.0.32.0 86273 Bytes 2008-03-06 12:02:11

 

Configuration settings for the scan:

Jobname..........................: Complete system scan

Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp

Logging..........................: low

Primary action...................: interactive

Secondary action.................: ignore

Scan master boot sector..........: on

Scan boot sector.................: on

Boot sectors.....................: C:, D:,

Scan memory......................: on

Process scan.....................: on

Scan registry....................: on

Search for rootkits..............: off

Scan all files...................: Intelligent file selection

Scan archives....................: on

Recursion depth..................: 20

Smart extensions.................: on

Macro heuristic..................: on

File heuristic...................: medium

 

Start of the scan: 2008-05-10 18:26

 

The scan of running processes will be started

Scan process 'avscan.exe' - '1' Module(s) have been scanned

Scan process 'Ymsgr_tray.exe' - '1' Module(s) have been scanned

Scan process 'avcenter.exe' - '1' Module(s) have been scanned

Scan process 'soffice.bin' - '1' Module(s) have been scanned

Scan process 'soffice.exe' - '1' Module(s) have been scanned

Scan process 'daemon.exe' - '1' Module(s) have been scanned

Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned

Scan process 'TeaTimer.exe' - '1' Module(s) have been scanned

Scan process 'avgnt.exe' - '1' Module(s) have been scanned

Scan process 'rundll32.exe' - '1' Module(s) have been scanned

Scan process 'reader_sl.exe' - '1' Module(s) have been scanned

Scan process 'jusched.exe' - '1' Module(s) have been scanned

Scan process 'rundll32.exe' - '1' Module(s) have been scanned

Scan process 'SynTPEnh.exe' - '1' Module(s) have been scanned

Scan process 'WmiPrvSE.exe' - '1' Module(s) have been scanned

Scan process 'mobsync.exe' - '1' Module(s) have been scanned

Scan process 'TrustedInstaller.exe' - '1' Module(s) have been scanned

Scan process 'ATKOSD.exe' - '1' Module(s) have been scanned

Scan process 'SDWinSec.exe' - '1' Module(s) have been scanned

Scan process 'WUDFHost.exe' - '1' Module(s) have been scanned

Scan process 'ACEngSvr.exe' - '1' Module(s) have been scanned

Scan process 'SearchIndexer.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'StkCSrv.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'BatteryLife.exe' - '1' Module(s) have been scanned

Scan process 'ACMON.exe' - '1' Module(s) have been scanned

Scan process 'wcourier.exe' - '1' Module(s) have been scanned

Scan process 'ATKOSD2.exe' - '1' Module(s) have been scanned

Scan process 'HControl.exe' - '1' Module(s) have been scanned

Scan process 'spmgr.exe' - '1' Module(s) have been scanned

Scan process 'RegSrvc.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'DMedia.exe' - '1' Module(s) have been scanned

Scan process 'IAANTmon.exe' - '1' Module(s) have been scanned

Scan process 'IAAnotif.exe' - '1' Module(s) have been scanned

Scan process 'EvtEng.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'sm56hlpr.exe' - '1' Module(s) have been scanned

Scan process 'MSASCui.exe' - '1' Module(s) have been scanned

Scan process 'avguard.exe' - '1' Module(s) have been scanned

Scan process 'explorer.exe' - '1' Module(s) have been scanned

Scan process 'ALU.exe' - '1' Module(s) have been scanned

Scan process 'taskeng.exe' - '1' Module(s) have been scanned

Scan process 'Net4Switch.exe' - '1' Module(s) have been scanned

Scan process 'asghost.exe' - '1' Module(s) have been scanned

Scan process 'taskeng.exe' - '1' Module(s) have been scanned

Scan process 'dwm.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'sched.exe' - '1' Module(s) have been scanned

Scan process 'taskeng.exe' - '1' Module(s) have been scanned

Scan process 'spoolsv.exe' - '1' Module(s) have been scanned

Scan process 'GFNEXSrv.exe' - '1' Module(s) have been scanned

Scan process 'wlanext.exe' - '1' Module(s) have been scanned

Scan process 'ASLDRSrv.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'SLsvc.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'audiodg.exe' - '0' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'winlogon.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'lsm.exe' - '1' Module(s) have been scanned

Scan process 'lsass.exe' - '1' Module(s) have been scanned

Scan process 'services.exe' - '1' Module(s) have been scanned

Scan process 'csrss.exe' - '1' Module(s) have been scanned

Scan process 'wininit.exe' - '1' Module(s) have been scanned

Scan process 'csrss.exe' - '1' Module(s) have been scanned

Scan process 'smss.exe' - '1' Module(s) have been scanned

74 processes with 74 modules were scanned

 

Starting master boot sector scan:

Master boot sector HD0

[iNFO] No virus was found!

Master boot sector HD1

[iNFO] No virus was found!

 

Start scanning boot sectors:

Boot sector 'C:\'

[iNFO] No virus was found!

Boot sector 'D:\'

[iNFO] No virus was found!

 

Starting to scan the registry.

The registry was scanned ( '13' files ).

 

 

Starting the file scan:

 

Begin scan in 'C:\' <VistaOS>

C:\hiberfil.sys

[WARNING] The file could not be opened!

C:\pagefile.sys

[WARNING] The file could not be opened!

C:\ProgramData\hvxqczpg\wbunmrkd.exe

[DETECTION] Is the Trojan horse TR/Agent.lpu

[NOTE] The file was moved to '489acee5.qua'!

C:\ProgramData\kjyfapuj\mtuncpct.exe

[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen

[NOTE] The file was moved to '489acefd.qua'!

C:\Windows\System32\drivers\sptd.sys

[WARNING] The file could not be opened!

Begin scan in 'D:\' <Data>

 

 

End of the scan: 2008-05-10 19:00

Used time: 34:39 min

 

The scan has been done completely.

 

13705 Scanning directories

317440 Files were scanned

2 viruses and/or unwanted programs were found

0 Files were classified as suspicious:

0 files were deleted

0 files were repaired

2 files were moved to quarantine

0 files were renamed

3 Files cannot be scanned

317438 Files not concerned

1582 Archives were scanned

3 Warnings

2 Notes

[Lien Rag]

Refais nous 1 Hijack stp