svschost.exe et smss.exe infectés

Dr.Antivirus · le 29 mai 2008

Désolé Angélique mais je ne t'ai rien fait pour me parler ainsi!!

angelique · le 29 mai 2008

Désolé Angélique mais je ne t'ai rien fait pour me parler ainsi!!

Nop! mais moi je ne te parle pas, ça m'interesse pas.

Arrete de polluer une discussion qui n'est pas la tienne, sinon je te vire du forum, va t'occuper du tiens!!!

T'as perdu d'avance avec moi...................Dead_Time.

Tu veux ne plus "participer" à ce forum , repond just et "au revoir"

Dernière visite : Aujourd'hui à 20h26
Affichage du sujet : svschost.exe et smss.exe infectés Heure locale : jeudi 29 mai 2008 à 21h27

Reukin · le 30 mai 2008

Internet n'est pas une immense toile qui relie les gens du monde entier? alors pourquoi le fait que je sois à proximité de Madagascar géographiquement, me ferais avoir un risque plus important que quiconque ait internet ce trouvant autre part???Enfin je ne sais pas vraiment...

Bref...

Angélique, comme j'ai un disque dur 250Go non partitionné et relativement plein (j'avais des petits DD pour le système avant, mais je les ai perdu en cours de route, et comme j'avais déjà des donnés sur celui-là j'ai pas partitionné lorsque j'ai installé mon système d'exploitation, ce qui fait que l'analyse risque de prendre beaucoup de temps(la dernière fois ça ma pris 14h), je le mettrais durant le weekend et je posterai le rapport quand ça sera terminer d'accord? Merci beaucoup pour ton attention, et ton aide qui m'a été très utile, je te remercie encore, pour l'attention que tu continue de m'accorder!

angelique · le 30 mai 2008

PS : J'ai plus de détection de menace, bien sur ça veut pas dire que c'est totalement parti! mais c'est déjà ça parce que c'était très embêtant!

ça , j'en suis ravie

L'urgence dans ton cas d'etre rapide et de maitriser l'infection qui se lançait au boot de ton PC

»

Angélique, comme j'ai un disque dur 250Go non partitionné et relativement plein (j'avais des petits DD pour le système avant, mais je les ai perdu en cours de route, et comme j'avais déjà des donnés sur celui-là j'ai pas partitionné lorsque j'ai installé mon système d'exploitation, ce qui fait que l'analyse risque de prendre beaucoup de temps(la dernière fois ça ma pris 14h), je le mettrais durant le weekend et je posterai le rapport quand ça sera terminer d'accord? Merci beaucoup pour ton attention, et ton aide qui m'a été très utile, je te remercie encore, pour l'attention que tu continue de m'accorder!

Pas de soucis , Antivir etant un bon produit , il mettra en évidence le reste de tes infections que tu quarantaines.

Aller doucement , n'empeche pas d'arriver tu posteras le rapports d'antivir quand tu auras le temp, je te lirais \o_

Reukin · le 1 juin 2008

Bonjour! Voici le rapport d'ANTIVIR!

Avira AntiVir Personal

Report file date: samedi 31 mai 2008 23:49

Scanning for 1302528 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic

Serial number: 0000149996-ADJIE-0001

Platform: Windows XP

Windows version: (Service Pack 2) [5.1.2600]

Boot mode: Normally booted

Username: SYSTEM

Computer name: HIGHTECH

Version information:

BUILD.DAT : 8.1.0.308 16478 Bytes 28/05/2008 17:03:00

AVSCAN.EXE : 8.1.2.12 311553 Bytes 25/04/2008 14:58:00

AVSCAN.DLL : 8.1.1.0 53505 Bytes 25/04/2008 14:58:00

LUKE.DLL : 8.1.2.9 151809 Bytes 25/04/2008 14:58:01

LUKERES.DLL : 8.1.2.1 12033 Bytes 25/04/2008 14:58:01

ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 13:44:41

ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 07/03/2008 14:07:54

ANTIVIR2.VDF : 7.0.4.53 1848832 Bytes 17/05/2008 14:46:15

ANTIVIR3.VDF : 7.0.4.118 376832 Bytes 30/05/2008 14:47:39

Engineversion : 8.1.0.51

AEVDF.DLL : 8.1.0.5 102772 Bytes 25/04/2008 14:58:02

AESCRIPT.DLL : 8.1.0.37 270715 Bytes 30/05/2008 14:50:22

AESCN.DLL : 8.1.0.20 119157 Bytes 30/05/2008 14:49:47

AERDL.DLL : 8.1.0.20 418165 Bytes 25/04/2008 14:58:02

AEPACK.DLL : 8.1.1.5 364918 Bytes 18/05/2008 14:48:53

AEOFFICE.DLL : 8.1.0.18 192890 Bytes 25/04/2008 14:58:02

AEHEUR.DLL : 8.1.0.29 1253750 Bytes 18/05/2008 14:48:31

AEHELP.DLL : 8.1.0.15 115063 Bytes 30/05/2008 14:49:37

AEGEN.DLL : 8.1.0.25 307573 Bytes 31/05/2008 14:47:18

AEEMU.DLL : 8.1.0.6 430451 Bytes 08/05/2008 14:39:25

AECORE.DLL : 8.1.0.30 168311 Bytes 30/05/2008 14:47:58

AVWINLL.DLL : 1.0.0.7 14593 Bytes 25/04/2008 14:58:00

AVPREF.DLL : 8.0.0.1 25857 Bytes 25/04/2008 14:58:00

AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 10:16:24

AVREG.DLL : 8.0.0.0 30977 Bytes 25/04/2008 14:58:00

AVARKT.DLL : 1.0.0.23 307457 Bytes 25/04/2008 14:57:59

AVEVTLOG.DLL : 8.0.0.11 114945 Bytes 25/04/2008 14:57:59

SQLITE3.DLL : 3.3.17.1 339968 Bytes 25/04/2008 14:58:01

SMTPLIB.DLL : 1.2.0.19 28929 Bytes 25/04/2008 14:58:01

NETNT.DLL : 8.0.0.1 7937 Bytes 25/04/2008 14:58:01

RCIMAGE.DLL : 8.0.0.35 2371841 Bytes 25/04/2008 14:57:53

RCTEXT.DLL : 8.0.32.0 86273 Bytes 25/04/2008 14:57:53

Configuration settings for the scan:

Jobname..........................: Complete system scan

Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp

Logging..........................: low

Primary action...................: interactive

Secondary action.................: ignore

Scan master boot sector..........: on

Scan boot sector.................: on

Boot sectors.....................: C:,

Scan memory......................: on

Process scan.....................: on

Scan registry....................: on

Search for rootkits..............: off

Scan all files...................: Intelligent file selection

Scan archives....................: on

Recursion depth..................: 20

Smart extensions.................: on

Macro heuristic..................: on

File heuristic...................: medium

Start of the scan: samedi 31 mai 2008 23:49

The scan of running processes will be started

Scan process 'avscan.exe' - '1' Module(s) have been scanned

Scan process 'avcenter.exe' - '1' Module(s) have been scanned

Scan process 'SuperCopier2.exe' - '1' Module(s) have been scanned

Scan process 'avgnt.exe' - '1' Module(s) have been scanned

Scan process 'avguard.exe' - '1' Module(s) have been scanned

Scan process 'alg.exe' - '1' Module(s) have been scanned

Scan process 'qsujozu.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'sched.exe' - '1' Module(s) have been scanned

Scan process 'rundll32.exe' - '1' Module(s) have been scanned

Scan process 'RTHDCPL.exe' - '1' Module(s) have been scanned

Scan process 'rundll32.exe' - '1' Module(s) have been scanned

Scan process 'explorer.exe' - '1' Module(s) have been scanned

Scan process 'spoolsv.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'StyleXPService.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'lsass.exe' - '1' Module(s) have been scanned

Scan process 'services.exe' - '1' Module(s) have been scanned

Scan process 'winlogon.exe' - '1' Module(s) have been scanned

Scan process 'csrss.exe' - '1' Module(s) have been scanned

Scan process 'smss.exe' - '1' Module(s) have been scanned

25 processes with 25 modules were scanned

Starting master boot sector scan:

Master boot sector HD0

[iNFO] No virus was found!

Start scanning boot sectors:

Boot sector 'C:\'

[iNFO] No virus was found!

Starting to scan the registry.

The registry was scanned ( '22' files ).

Starting the file scan:

Begin scan in 'C:\' <DivX>

C:\pagefile.sys

[WARNING] The file could not be opened!

C:\DiscD\jeux\Office 2007 Pro. FR {final v12 + serial - Windows 2003, XP & Vista}.rar

[WARNING] An exception has been identified!

[WARNING] In the module 'aecore.dll' an exception occured.

Calling the function AVEPROC_TestFile in file: \\?\C:\DiscD\jeux\Office 2007 Pro. FR {final v12 + serial - Windows 2003, XP & Vista}.rar

Error description:ACCESS_VIOLATION

EAX = 0A483EE8 EBX = 02970AA8

ECX = 0A483EC4 EDX = 00000331

ESI = 09F99C50 EDI = 02970aa4

EIP = 0134C733 EBP = 0A39007C

ESP = 01BFF05C Flg = 00010283

CS = 00000023 SS = 0000001B

C:\Documents and Settings\Propriétaire\.bitrock\.bitrock.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] The file was deleted!

C:\Documents and Settings\Propriétaire\Application Data\Application Data.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] The file was deleted!

C:\Documents and Settings\Propriétaire\Application Data\Banque Française Commerciale Océan Indien - Mozilla Firefox.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] The file was deleted!

C:\Documents and Settings\Propriétaire\Application Data\BFCOI Online - Mozilla Firefox.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '48851567.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\Documents and Settings\Propriétaire\Application Data\lsass.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '48a31594.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\Documents and Settings\Propriétaire\Application Data\smss.VIR

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '48b5158e.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\Documents and Settings\Propriétaire\Application Data\svchost.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '48a51598.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\Documents and Settings\Propriétaire\avidemux\avidemux.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '48ab15de.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\Documents and Settings\Propriétaire\Bureau\Yvan\nuke\hydrotruc\hydrotruc.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '48a617a8.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\Documents and Settings\Propriétaire\Bureau\Yvan\nuke\TPE nucléaire Word\TPE nucléaire Word.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '48871784.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\Documents and Settings\Propriétaire\Contacts\Contacts.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '48b01833.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\Documents and Settings\Propriétaire\Cookies\Cookies.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '48b1183c.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\Documents and Settings\Propriétaire\dwhelper\dwhelper.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '48aa1848.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\Documents and Settings\Propriétaire\Favoris\Favoris.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '48b81832.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\Documents and Settings\Propriétaire\Local Settings\Local Settings.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '48a51841.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\K9W9O7Q9\style[1].css

[DETECTION] Contains detection pattern of the Java script virus JS/Redirector.A

[NOTE] A backup was created as '48bb190b.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\Documents and Settings\Propriétaire\Menu Démarrer\Menu Démarrer.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '48b0196d.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\Documents and Settings\Propriétaire\Mes documents\Mes documents.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '48b51970.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\Documents and Settings\Propriétaire\Mes documents\My Completed Downloads\Age_of_Mythology_The_Titans_Expansion.txt.exe.dap

[0] Archive type: RAR SFX (self extracting)

--> keygen.exe

[DETECTION] Is the Trojan horse TR/Vundo.Gen

[NOTE] A backup was created as '48a71bcc.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\Documents and Settings\Propriétaire\Modèles\Modèles.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '48a61c84.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\Documents and Settings\Propriétaire\Recent\Recent.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '48a51c7f.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\Documents and Settings\Propriétaire\SendTo\SendTo.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '48b01c80.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\Documents and Settings\Propriétaire\UserData\UserData.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '48a71c8e.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\Documents and Settings\Propriétaire\Voisinage d'impression\Voisinage d'impression.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '48ab1c8b.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\Documents and Settings\Propriétaire\Voisinage réseau\Voisinage réseau.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '49d752cc.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\Documents and Settings\Propriétaire\WINDOWS\WINDOWS.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '48901c66.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\Program Files\Starcraft\Demonic Terrans.exe

[DETECTION] Is the Trojan horse TR/Dropper.Gen

[NOTE] A backup was created as '48af25b8.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\Program Files\Starcraft\fastermod.exe

[DETECTION] Is the Trojan horse TR/Dropper.Gen

[NOTE] A backup was created as '48b525b5.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\Program Files\Starcraft\Realistic.exe

[DETECTION] Is the Trojan horse TR/Dropper.Gen

[NOTE] A backup was created as '48a325ba.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\Program Files\Starcraft\Realistic1.5.exe

[DETECTION] Is the Trojan horse TR/Dropper.Gen

[NOTE] A backup was created as '49d8631b.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\Program Files\Starcraft\SC_Revolutions.exe

[DETECTION] Is the Trojan horse TR/Dropper.Gen

[NOTE] A backup was created as '48a12599.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\Program Files\Starcraft\starcraft_add-on_broodwar_demonicterran.zip

[NOTE] A backup was created as '48a325cb.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\Program Files\Starcraft\starcraft_add-on_broodwar_terran_doom.zip

[NOTE] A backup was created as '48a325cc.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\Program Files\Starcraft\starcraft_add-on_broodwar_weponmod_V1-0.zip

[NOTE] A backup was created as '48a325cd.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\Program Files\Starcraft\Terran Doom.exe

[DETECTION] Is the Trojan horse TR/Dropper.Gen

[NOTE] A backup was created as '48b425bf.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\Program Files\Starcraft\WeponMod (Final) V1.0.exe

[DETECTION] Is the Trojan horse TR/Dropper.Gen

[NOTE] A backup was created as '48b225bf.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\System Volume Information\_restore{376D3382-5BEE-4430-B02D-7271D565B820}\RP38\A0015368.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '48722980.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\System Volume Information\_restore{376D3382-5BEE-4430-B02D-7271D565B820}\RP38\A0015369.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '490e67c1.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\System Volume Information\_restore{376D3382-5BEE-4430-B02D-7271D565B820}\RP38\A0015370.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '48722981.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\System Volume Information\_restore{376D3382-5BEE-4430-B02D-7271D565B820}\RP38\A0015371.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '490e67c2.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\System Volume Information\_restore{376D3382-5BEE-4430-B02D-7271D565B820}\RP38\A0015372.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '48722983.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\System Volume Information\_restore{376D3382-5BEE-4430-B02D-7271D565B820}\RP38\A0015373.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '48722982.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\System Volume Information\_restore{376D3382-5BEE-4430-B02D-7271D565B820}\RP38\A0015374.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '490e67c3.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\System Volume Information\_restore{376D3382-5BEE-4430-B02D-7271D565B820}\RP38\A0015375.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '490e67c4.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\System Volume Information\_restore{376D3382-5BEE-4430-B02D-7271D565B820}\RP38\A0015376.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '48722985.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\System Volume Information\_restore{376D3382-5BEE-4430-B02D-7271D565B820}\RP38\A0015377.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '48722984.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\System Volume Information\_restore{376D3382-5BEE-4430-B02D-7271D565B820}\RP38\A0015378.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '490e67c5.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\System Volume Information\_restore{376D3382-5BEE-4430-B02D-7271D565B820}\RP38\A0015379.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '48722986.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\System Volume Information\_restore{376D3382-5BEE-4430-B02D-7271D565B820}\RP38\A0015380.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '490e67c6.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\System Volume Information\_restore{376D3382-5BEE-4430-B02D-7271D565B820}\RP38\A0015381.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '48722987.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\System Volume Information\_restore{376D3382-5BEE-4430-B02D-7271D565B820}\RP38\A0015382.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '490e67c8.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\System Volume Information\_restore{376D3382-5BEE-4430-B02D-7271D565B820}\RP38\A0015383.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '490e67c7.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\System Volume Information\_restore{376D3382-5BEE-4430-B02D-7271D565B820}\RP38\A0015384.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '48722988.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\System Volume Information\_restore{376D3382-5BEE-4430-B02D-7271D565B820}\RP38\A0015385.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '48722989.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\System Volume Information\_restore{376D3382-5BEE-4430-B02D-7271D565B820}\RP38\A0015386.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '490e67ca.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\System Volume Information\_restore{376D3382-5BEE-4430-B02D-7271D565B820}\RP38\A0015389.exe

[DETECTION] Is the Trojan horse TR/Dropper.Gen

[NOTE] A backup was created as '4872298b.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\System Volume Information\_restore{376D3382-5BEE-4430-B02D-7271D565B820}\RP38\A0015390.exe

[DETECTION] Is the Trojan horse TR/Dropper.Gen

[NOTE] A backup was created as '490e67c9.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\System Volume Information\_restore{376D3382-5BEE-4430-B02D-7271D565B820}\RP38\A0015391.exe

[DETECTION] Is the Trojan horse TR/Dropper.Gen

[NOTE] A backup was created as '4872298a.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\System Volume Information\_restore{376D3382-5BEE-4430-B02D-7271D565B820}\RP38\A0015392.exe

[DETECTION] Is the Trojan horse TR/Dropper.Gen

[NOTE] A backup was created as '490e67cb.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\System Volume Information\_restore{376D3382-5BEE-4430-B02D-7271D565B820}\RP38\A0015393.exe

[DETECTION] Is the Trojan horse TR/Dropper.Gen

[NOTE] A backup was created as '490e67cc.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\System Volume Information\_restore{376D3382-5BEE-4430-B02D-7271D565B820}\RP38\A0015394.exe

[DETECTION] Is the Trojan horse TR/Dropper.Gen

[NOTE] A backup was created as '4872298d.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\System Volume Information\_restore{376D3382-5BEE-4430-B02D-7271D565B820}\RP38\A0015395.exe

[DETECTION] Is the Trojan horse TR/Dropper.Gen

[NOTE] A backup was created as '4872298c.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\VundoFix Backups\awtsp.dll.bad

[DETECTION] Is the Trojan horse TR/Vundo.Gen

[NOTE] A backup was created as '48b629d6.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\VundoFix Backups\eqmjnuve.dll.bad

[DETECTION] Is the Trojan horse TR/Vundo.dvc.6

[NOTE] A backup was created as '48af29d0.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\VundoFix Backups\kejulkhf.dll.bad

[DETECTION] Is the Trojan horse TR/Dldr.ConHook.Gen

[NOTE] A backup was created as '48ac29c5.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\VundoFix Backups\mljgg.dll.bad

[DETECTION] Is the Trojan horse TR/Vundo.Gen

[NOTE] A backup was created as '48ac29cc.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\VundoFix Backups\mlljk.dll.bad

[DETECTION] Is the Trojan horse TR/Vundo.Gen

[NOTE] A backup was created as '48ae29cc.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\WINDOWS\inf\smss.exe

[DETECTION] Contains detection pattern of the worm WORM/SdBot.378880.A

[NOTE] A backup was created as '48b52b44.qua' ( QUARANTINE )

[NOTE] The file was deleted!

C:\WINDOWS\system32\drivers\sptd.sys

[WARNING] The file could not be opened!

End of the scan: dimanche 1 juin 2008 08:59

Used time: 9:10:06 min

The scan has been done completely.

12146 Scanning directories

555794 Files were scanned

68 viruses and/or unwanted programs were found

0 Files were classified as suspicious:

68 files were deleted

0 files were repaired

65 files were moved to quarantine

0 files were renamed

2 Files cannot be scanned

555726 Files not concerned

5915 Archives were scanned

3 Warnings

68 Notes

angelique · le 1 juin 2008

Mouai faut faire gaffe à ce que tu télécharges!!

• supprime C:\DiscD\jeux\Office 2007 Pro. FR {final v12 + serial - Windows 2003, XP & Vista}.rar

je reprends des belles paroles de Thanos:

Ce qui suit n'est pas pour faire la morale, mais vise plutôt à te faire prendre conscience des risques liés à l'utilisation de ce type de programmes.
Fais gaffe avec l'utilisation des logiciels P2P!! ce sont les principaux vecteurs d'infection avec les craks/keygens etc...! Pour t'en convaincre, lis ces deux topics très clairs:

le premier est de Malekal et concerne les cracks => http://forum.malekal.com/viewtopic.php?f=33&t=893

le second de Tesgaz concerne le P2P en général => http://forum.zebulon.fr/prevention-le-p2p-...ces-t85544.html

Les infections véhiculées pas le p2p sont une menace réelle!! par exemple le vers Worm.Win32_Sumom-A qui est un ver de messagerie instantanée et de réseaux peer-to-peer,se met dans le dossier incoming/Shared afin d'être expédié à toutes les personnes qui partagent tes téléchargements...=> http://www.virustraq.com/info_virus/10134/details/

Maintenant que tu sais, c'est à toi de voir... est ce que ca vaut le coup de risquer une grosse infection(et mettre tes données en peril)?

Reukin · le 4 juin 2008

oki...c'est pas une escuse mais ce dossier je l'ai pas téléchargé! mais je l'ai utilisé, et l'ai mis sur mon disque dur ( ce qui fait de moi le principale fautif, surtout avec tout les autres fichiers)...je l'ai supprimer maintenant..merci beaucoup beaucoup à toi!J'ai regaré les forums cités, c'est vrai qu'on change de regard par rapport à tout ça après, mais bon...j'ai aussi pris le FiXSFlog..c'est pas pour lancer une polémique, mais le peer to peer c'est à nos risque et péril non?il y a quelques années j'étais beaucoup moins vigilants, je prends autant de risques mais maintenant beaucoup plus mesuré...je te remercie encore une fois puisque j'ai pu apprendre certains choses grâce à ces forums (mais j'ai pas changé d'avis lol)...merci merci encore!

Modifié le 4 juin 2008 par Reukin

Connexion

Pas encore inscrit ?

svschost.exe et smss.exe infectés

Messages recommandés

Dr.Antivirus

angelique

Reukin

angelique

Reukin

angelique

Reukin

Rejoindre la conversation

En ligne récemment 0 membre est en ligne

Zebulon

Outils en ligne

Naviguer