Infecté par un virus

[Benjinho]

oiuas sa il la fai.

[Falkra]

S'il a réagi sur un fichier qui traîne, mais sans que le fichier soit actif et chargé en mémoire, il bippe, il te protège mais tu n'es pas infecté.

Les rapports ne montrent rien de particulier.

 

Pas de popups ?

[Benjinho]

non

 

ah par contre j'ai des fichier caché qui sont apparu

[Falkra]

ah par contre j'ai des fichier caché qui sont apparu

Ok, où (chemin du dossier) et quels noms ?

[Benjinho]

mes documents et aussi dans la zone dans Ordinateurs

[Falkra]

Quels noms portent les fichiers cachés ?

(les desktop.ini ne sont pas dangereux, si jamais)

[Benjinho]

bah par exemple jai un ntuser.dat.log1 et 2, Installanywhere, appdata

 

HP, programme data, system.sav

[Benjinho]

bref c'est pas grave

[Benjinho]

d'ailleurs la j'ai refais une analyse il me trouve rien.

 

 

Avira AntiVir Personal

Report file date: lundi 7 juillet 2008 19:22

 

Scanning for 1382539 virus strains and unwanted programs.

 

Licensed to: Avira AntiVir PersonalEdition Classic

Serial number: 0000149996-ADJIE-0001

Platform: Windows Vista

Windows version: (Service Pack 1) [6.0.6001]

Boot mode: Normally booted

Username: SYSTEM

Computer name: BENJINHO

 

Version information:

BUILD.DAT : 8.1.0.308 16478 Bytes 28.05.2008 17:03:00

AVSCAN.EXE : 8.1.2.12 311553 Bytes 18.03.2008 09:02:56

AVSCAN.DLL : 8.1.1.0 53505 Bytes 07.02.2008 08:43:37

LUKE.DLL : 8.1.2.9 151809 Bytes 28.02.2008 08:41:23

LUKERES.DLL : 8.1.2.1 12033 Bytes 21.02.2008 08:28:40

ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18.07.2007 10:33:34

ANTIVIR1.VDF : 7.0.5.1 8182784 Bytes 24.06.2008 14:44:58

ANTIVIR2.VDF : 7.0.5.51 273408 Bytes 04.07.2008 10:56:05

ANTIVIR3.VDF : 7.0.5.59 51712 Bytes 07.07.2008 17:21:21

Engineversion : 8.1.0.64

AEVDF.DLL : 8.1.0.5 102772 Bytes 25.02.2008 09:58:21

AESCRIPT.DLL : 8.1.0.46 283002 Bytes 02.07.2008 16:07:38

AESCN.DLL : 8.1.0.22 119157 Bytes 21.06.2008 12:39:23

AERDL.DLL : 8.1.0.20 418165 Bytes 13.05.2008 15:55:05

AEPACK.DLL : 8.1.1.6 364918 Bytes 21.06.2008 12:39:23

AEOFFICE.DLL : 8.1.0.20 192891 Bytes 21.06.2008 12:39:22

AEHEUR.DLL : 8.1.0.35 1298806 Bytes 02.07.2008 16:07:36

AEHELP.DLL : 8.1.0.15 115063 Bytes 30.05.2008 21:06:56

AEGEN.DLL : 8.1.0.29 307573 Bytes 21.06.2008 12:39:19

AEEMU.DLL : 8.1.0.6 430451 Bytes 13.05.2008 15:54:59

AECORE.DLL : 8.1.0.32 168311 Bytes 02.07.2008 16:07:31

AVWINLL.DLL : 1.0.0.7 14593 Bytes 23.01.2008 17:07:53

AVPREF.DLL : 8.0.0.1 25857 Bytes 18.02.2008 10:37:50

AVREP.DLL : 7.0.0.1 155688 Bytes 16.04.2007 13:26:47

AVREG.DLL : 8.0.0.0 30977 Bytes 23.01.2008 17:07:49

AVARKT.DLL : 1.0.0.23 307457 Bytes 12.02.2008 08:29:23

AVEVTLOG.DLL : 8.0.0.11 114945 Bytes 28.02.2008 08:31:31

SQLITE3.DLL : 3.3.17.1 339968 Bytes 22.01.2008 17:28:02

SMTPLIB.DLL : 1.2.0.19 28929 Bytes 23.01.2008 17:08:39

NETNT.DLL : 8.0.0.1 7937 Bytes 25.01.2008 12:05:10

RCIMAGE.DLL : 8.0.0.35 2371841 Bytes 10.03.2008 14:37:25

RCTEXT.DLL : 8.0.32.0 86273 Bytes 06.03.2008 12:02:11

 

Configuration settings for the scan:

Jobname..........................: Complete system scan

Configuration file...............: C:\program files\avira\antivir personaledition classic\sysscan.avp

Logging..........................: low

Primary action...................: interactive

Secondary action.................: ignore

Scan master boot sector..........: on

Scan boot sector.................: on

Boot sectors.....................: C:, D:,

Scan memory......................: on

Process scan.....................: on

Scan registry....................: on

Search for rootkits..............: off

Scan all files...................: All files

Scan archives....................: on

Recursion depth..................: 20

Smart extensions.................: on

Macro heuristic..................: on

File heuristic...................: medium

 

Start of the scan: lundi 7 juillet 2008 19:22

 

The scan of running processes will be started

Scan process 'avscan.exe' - '1' Module(s) have been scanned

Scan process 'taskeng.exe' - '1' Module(s) have been scanned

Scan process 'avcenter.exe' - '1' Module(s) have been scanned

Scan process 'ieuser.exe' - '1' Module(s) have been scanned

Scan process 'firefox.exe' - '1' Module(s) have been scanned

Scan process 'usnsvc.exe' - '1' Module(s) have been scanned

Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned

Scan process 'HPHC_Service.exe' - '1' Module(s) have been scanned

Scan process 'SynTPHelper.exe' - '1' Module(s) have been scanned

Scan process 'iPodService.exe' - '1' Module(s) have been scanned

Scan process 'HpqToaster.exe' - '1' Module(s) have been scanned

Scan process 'unsecapp.exe' - '1' Module(s) have been scanned

Scan process 'soffice.bin' - '1' Module(s) have been scanned

Scan process 'ehmsas.exe' - '1' Module(s) have been scanned

Scan process 'rundll32.exe' - '1' Module(s) have been scanned

Scan process 'soffice.exe' - '1' Module(s) have been scanned

Scan process 'ehtray.exe' - '1' Module(s) have been scanned

Scan process 'LightScribeControlPanel.exe' - '1' Module(s) have been scanned

Scan process 'sidebar.exe' - '1' Module(s) have been scanned

Scan process 'issch.exe' - '1' Module(s) have been scanned

Scan process 'jusched.exe' - '1' Module(s) have been scanned

Scan process 'rundll32.exe' - '1' Module(s) have been scanned

Scan process 'avgnt.exe' - '1' Module(s) have been scanned

Scan process 'iTunesHelper.exe' - '1' Module(s) have been scanned

Scan process 'WmiPrvSE.exe' - '1' Module(s) have been scanned

Scan process 'hpwuSchd2.exe' - '1' Module(s) have been scanned

Scan process 'WiFiMsg.exe' - '1' Module(s) have been scanned

Scan process 'HPWAMain.exe' - '1' Module(s) have been scanned

Scan process 'QLBCTRL.exe' - '1' Module(s) have been scanned

Scan process 'QPService.exe' - '1' Module(s) have been scanned

Scan process 'SynTPEnh.exe' - '1' Module(s) have been scanned

Scan process 'MSASCui.exe' - '1' Module(s) have been scanned

Scan process 'CLSched.exe' - '1' Module(s) have been scanned

Scan process 'hpqwmiex.exe' - '1' Module(s) have been scanned

Scan process 'XAudio.exe' - '1' Module(s) have been scanned

Scan process 'SearchIndexer.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'LSSrvc.exe' - '1' Module(s) have been scanned

Scan process 'CLCapSvc.exe' - '1' Module(s) have been scanned

Scan process 'mDNSResponder.exe' - '1' Module(s) have been scanned

Scan process 'AppleMobileDeviceService.exe' - '1' Module(s) have been scanned

Scan process 'avguard.exe' - '1' Module(s) have been scanned

Scan process 'taskeng.exe' - '1' Module(s) have been scanned

Scan process 'explorer.exe' - '1' Module(s) have been scanned

Scan process 'dwm.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'sched.exe' - '1' Module(s) have been scanned

Scan process 'taskeng.exe' - '1' Module(s) have been scanned

Scan process 'spoolsv.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'SLsvc.exe' - '1' Module(s) have been scanned

Scan process 'audiodg.exe' - '0' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'winlogon.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'lsm.exe' - '1' Module(s) have been scanned

Scan process 'lsass.exe' - '1' Module(s) have been scanned

Scan process 'services.exe' - '1' Module(s) have been scanned

Scan process 'csrss.exe' - '1' Module(s) have been scanned

Scan process 'wininit.exe' - '1' Module(s) have been scanned

Scan process 'csrss.exe' - '1' Module(s) have been scanned

Scan process 'smss.exe' - '1' Module(s) have been scanned

68 processes with 68 modules were scanned

 

Starting master boot sector scan:

Master boot sector HD0

[iNFO] No virus was found!

 

Start scanning boot sectors:

Boot sector 'C:\'

[iNFO] No virus was found!

Boot sector 'D:\'

[iNFO] No virus was found!

 

Starting to scan the registry.

The registry was scanned ( '13' files ).

 

 

Starting the file scan:

 

Begin scan in 'C:\'

C:\hiberfil.sys

[WARNING] The file could not be opened!

C:\pagefile.sys

[WARNING] The file could not be opened!

Begin scan in 'D:\' <HP_RECOVERY>

 

 

End of the scan: lundi 7 juillet 2008 20:47

Used time: 1:25:08 min

 

The scan has been done completely.

 

23642 Scanning directories

660067 Files were scanned

0 viruses and/or unwanted programs were found

0 Files were classified as suspicious:

0 files were deleted

0 files were repaired

0 files were moved to quarantine

0 files were renamed

2 Files cannot be scanned

660067 Files not concerned

3850 Archives were scanned

2 Warnings

0 Notes

[Falkra]

Les fichiers caches en question sont ok, et même, il ne faut pas les effacer.

 

Je crois que ton antivirus a bien fait son boulot et t'a protégé (tout simplement).

 

Tiens nous au courant si jamais tu as une alerte dans les jours à venir, mais ça devrait être déjà bon.