[résolu] Netoyage de printemps

[Floloa]

voici le rapport de scan antivir (j'ai eu 2 alertes)

 

Avira AntiVir Personal

Report file date: mercredi 23 juillet 2008 10:38

 

Scanning for 1454594 virus strains and unwanted programs.

 

Licensed to: Avira AntiVir PersonalEdition Classic

Serial number: 0000149996-ADJIE-0001

Platform: Windows XP

Windows version: (Service Pack 2) [5.1.2600]

Boot mode: Normally booted

Username: SYSTEM

Computer name: WENAABAPC

 

Version information:

BUILD.DAT : 8.1.00.295 16479 Bytes 09/04/2008 16:24:00

AVSCAN.EXE : 8.1.2.12 311553 Bytes 18/03/2008 09:02:56

AVSCAN.DLL : 8.1.1.0 53505 Bytes 07/02/2008 08:43:37

LUKE.DLL : 8.1.2.9 151809 Bytes 28/02/2008 08:41:23

LUKERES.DLL : 8.1.2.1 12033 Bytes 21/02/2008 08:28:40

ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 10:33:34

ANTIVIR1.VDF : 7.0.5.1 8182784 Bytes 24/06/2008 22:49:31

ANTIVIR2.VDF : 7.0.5.119 1264128 Bytes 15/07/2008 22:49:35

ANTIVIR3.VDF : 7.0.5.120 2048 Bytes 15/07/2008 22:49:36

Engineversion : 8.1.0.68

AEVDF.DLL : 8.1.0.5 102772 Bytes 25/02/2008 09:58:21

AESCRIPT.DLL : 8.1.0.53 303481 Bytes 16/07/2008 22:49:45

AESCN.DLL : 8.1.0.23 119156 Bytes 16/07/2008 22:49:44

AERDL.DLL : 8.1.0.20 418165 Bytes 16/07/2008 22:49:44

AEPACK.DLL : 8.1.2.1 364917 Bytes 16/07/2008 22:49:43

AEOFFICE.DLL : 8.1.0.20 192891 Bytes 16/07/2008 22:49:42

AEHEUR.DLL : 8.1.0.41 1339765 Bytes 16/07/2008 22:49:41

AEHELP.DLL : 8.1.0.15 115063 Bytes 16/07/2008 22:49:39

AEGEN.DLL : 8.1.0.29 307573 Bytes 16/07/2008 22:49:38

AEEMU.DLL : 8.1.0.6 430451 Bytes 16/07/2008 22:49:37

AECORE.DLL : 8.1.0.33 168311 Bytes 16/07/2008 22:49:36

AVWINLL.DLL : 1.0.0.7 14593 Bytes 23/01/2008 17:07:53

AVPREF.DLL : 8.0.0.1 25857 Bytes 18/02/2008 10:37:50

AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:26:47

AVREG.DLL : 8.0.0.0 30977 Bytes 23/01/2008 17:07:49

AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23

AVEVTLOG.DLL : 8.0.0.11 114945 Bytes 28/02/2008 08:31:31

SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02

SMTPLIB.DLL : 1.2.0.19 28929 Bytes 23/01/2008 17:08:39

NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10

RCIMAGE.DLL : 8.0.0.35 2371841 Bytes 10/03/2008 14:37:25

RCTEXT.DLL : 8.0.32.0 86273 Bytes 06/03/2008 12:02:11

 

Configuration settings for the scan:

Jobname..........................: Complete system scan

Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp

Logging..........................: low

Primary action...................: interactive

Secondary action.................: ignore

Scan master boot sector..........: on

Scan boot sector.................: on

Boot sectors.....................: C:, D:,

Scan memory......................: on

Process scan.....................: on

Scan registry....................: on

Search for rootkits..............: off

Scan all files...................: Intelligent file selection

Scan archives....................: on

Recursion depth..................: 20

Smart extensions.................: on

Macro heuristic..................: on

File heuristic...................: medium

 

Start of the scan: mercredi 23 juillet 2008 10:38

 

The scan of running processes will be started

Scan process 'avscan.exe' - '1' Module(s) have been scanned

Scan process 'avcenter.exe' - '1' Module(s) have been scanned

Scan process 'iexplore.exe' - '1' Module(s) have been scanned

Scan process 'wmiprvse.exe' - '1' Module(s) have been scanned

Scan process 'alg.exe' - '1' Module(s) have been scanned

Scan process 'wscntfy.exe' - '1' Module(s) have been scanned

Scan process 'ctfmon.exe' - '1' Module(s) have been scanned

Scan process 'avgnt.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'StarWindService.exe' - '1' Module(s) have been scanned

Scan process 'explorer.exe' - '1' Module(s) have been scanned

Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned

Scan process 'avguard.exe' - '1' Module(s) have been scanned

Scan process 'sched.exe' - '1' Module(s) have been scanned

Scan process 'spoolsv.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'lsass.exe' - '1' Module(s) have been scanned

Scan process 'services.exe' - '1' Module(s) have been scanned

Scan process 'winlogon.exe' - '1' Module(s) have been scanned

Scan process 'csrss.exe' - '1' Module(s) have been scanned

Scan process 'smss.exe' - '1' Module(s) have been scanned

25 processes with 25 modules were scanned

 

Starting master boot sector scan:

Master boot sector HD0

[iNFO] No virus was found!

 

Start scanning boot sectors:

Boot sector 'C:\'

[iNFO] No virus was found!

Boot sector 'D:\'

[iNFO] No virus was found!

 

Starting to scan the registry.

The registry was scanned ( '35' files ).

 

 

Starting the file scan:

 

Begin scan in 'C:\'

C:\hiberfil.sys

[WARNING] The file could not be opened!

C:\pagefile.sys

[WARNING] The file could not be opened!

C:\System Volume Information\_restore{20354730-E796-4B22-A3A8-35A53DA20AFE}\RP177\A0036825.dll

[DETECTION] Is the Trojan horse TR/Agent.247296

[NOTE] The file was moved to '48b6f02d.qua'!

C:\System Volume Information\_restore{20354730-E796-4B22-A3A8-35A53DA20AFE}\RP178\A0037015.exe

[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen

[NOTE] The file was moved to '48b6f035.qua'!

C:\WINDOWS\system32\drivers\sptd.sys

[WARNING] The file could not be opened!

Begin scan in 'D:\' <HP_RECOVERY>

 

 

End of the scan: mercredi 23 juillet 2008 10:52

Used time: 13:55 min

 

The scan has been done completely.

 

3785 Scanning directories

88893 Files were scanned

2 viruses and/or unwanted programs were found

0 Files were classified as suspicious:

0 files were deleted

0 files were repaired

2 files were moved to quarantine

0 files were renamed

3 Files cannot be scanned

88891 Files not concerned

1116 Archives were scanned

3 Warnings

2 Notes

[angelique]

voici le rapport de scan antivir (j'ai eu 2 alertes)

 

oui je le savais bien car:

 

Event Record #/Type2067 / Warning

Event Submitted/Written: 07/22/2008 06:28:46 PM

Event ID/Source: 4113 / Avira AntiVir

Event Description:

TR/Agent.247296C:\System Volume Information\_restore{20354730-E796-4B22-A3A8-35A53DA20AFE}\RP177\A0036825.dll

 

 

» vide ta quarantaine d'antivir

 

Finir nettoyage:

 

» telecharge sur ton bureau:

 

- AtfCleaner --> http://www.atribune.org/ccount/click.php?id=1

 

ATF Cleaner

Double-clique ATF-Cleaner.exe afin de lancer le programme.

Sous l'onglet Main, choisis : Select All

Clique sur le bouton Empty Selected, patiente le temp du nettoyage, ok

Si tu utilises le navigateur Firefox :

Clique Firefox au haut et choisis : Select All

Clique le bouton Empty Selected

NOTE : Si tu veux conserver tes mots de passe sauvegardés, clique No à l'invite.

Si tu utilises le navigateur Opera :

Clique Opera au haut et choisis : Select All

Clique le bouton Empty Selected

NOTE : Si tu veux conserver tes mots de passe sauvegardés, clique No à l'invite.

Clique Exit, du menu prinicipal, afin de fermer le programme.

Ton prochain reboot sera plus lent , le %windir%\prefetch ayant été vidé.

 

et tu pourras utiliser l'onglet "editer" sous ton 1er message et ajouter [resolu] dans le titre.

[Floloa]

voila c'est fait !

merci a toi pour tes réponses rapides

 

il ne me reste plus qu'a resoudre mon probleme sur mon pc principal