Infection par le précurseur du rogue "IE Antivirus"

Carpette · le 31 juillet 2008

Voilà qui est fait :

----------------------

Avira AntiVir Personal

Report file date: samedi 26 juillet 2008 15:34

Scanning for 1504367 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic

Serial number: 0000149996-ADJIE-0001

Platform: Windows XP

Windows version: (Service Pack 2) [5.1.2600]

Boot mode: Save mode

Username: Administrateur

Computer name: JOLIPORTABLE

Version information:

BUILD.DAT : 8.1.0.326 16933 Bytes 11/07/2008 12:57:00

AVSCAN.EXE : 8.1.4.7 315649 Bytes 26/06/2008 08:57:53

AVSCAN.DLL : 8.1.4.0 40705 Bytes 26/05/2008 07:56:40

LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 12:44:19

LUKERES.DLL : 8.1.4.0 12033 Bytes 26/05/2008 07:58:52

ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 10:33:34

ANTIVIR1.VDF : 7.0.5.1 8182784 Bytes 24/06/2008 13:54:15

ANTIVIR2.VDF : 7.0.5.144 1690624 Bytes 21/07/2008 10:43:44

ANTIVIR3.VDF : 7.0.5.170 277504 Bytes 25/07/2008 10:43:22

Engineversion : 8.1.1.12

AEVDF.DLL : 8.1.0.5 102772 Bytes 9/07/2008 08:46:50

AESCRIPT.DLL : 8.1.0.59 307579 Bytes 22/07/2008 10:43:48

AESCN.DLL : 8.1.0.23 119156 Bytes 22/07/2008 10:43:48

AERDL.DLL : 8.1.0.20 418165 Bytes 9/07/2008 08:46:50

AEPACK.DLL : 8.1.2.1 364917 Bytes 22/07/2008 10:43:47

AEOFFICE.DLL : 8.1.0.21 192891 Bytes 22/07/2008 10:43:47

AEHEUR.DLL : 8.1.0.44 1343863 Bytes 25/07/2008 10:43:26

AEHELP.DLL : 8.1.0.15 115063 Bytes 9/07/2008 08:46:50

AEGEN.DLL : 8.1.0.31 311669 Bytes 25/07/2008 10:43:24

AEEMU.DLL : 8.1.0.6 430451 Bytes 9/07/2008 08:46:50

AECORE.DLL : 8.1.1.7 172406 Bytes 25/07/2008 10:43:23

AEBB.DLL : 8.1.0.1 53617 Bytes 24/04/2008 08:50:42

AVWINLL.DLL : 1.0.0.12 15105 Bytes 9/07/2008 08:40:05

AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 09:28:01

AVREP.DLL : 8.0.0.1 98561 Bytes 24/07/2008 10:43:21

AVREG.DLL : 8.0.0.1 33537 Bytes 9/05/2008 11:26:40

AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23

AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 12:27:49

SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02

SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 12:49:40

NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10

RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 12/06/2008 13:48:07

RCTEXT.DLL : 8.0.52.0 86273 Bytes 27/06/2008 13:34:37

Configuration settings for the scan:

Jobname..........................: Complete system scan

Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp

Logging..........................: low

Primary action...................: repair

Secondary action.................: delete

Scan master boot sector..........: on

Scan boot sector.................: on

Boot sectors.....................: C:, D:, E:,

Process scan.....................: on

Scan registry....................: on

Search for rootkits..............: on

Scan all files...................: All files

Scan archives....................: on

Recursion depth..................: 20

Smart extensions.................: on

Macro heuristic..................: on

File heuristic...................: medium

Start of the scan: samedi 26 juillet 2008 15:34

Starting search for hidden objects.

The driver could not be initialized.

The scan of running processes will be started

Scan process 'avscan.exe' - '1' Module(s) have been scanned

Scan process 'wmiprvse.exe' - '1' Module(s) have been scanned

Scan process 'avcenter.exe' - '1' Module(s) have been scanned

Scan process 'explorer.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'lsass.exe' - '1' Module(s) have been scanned

Scan process 'services.exe' - '1' Module(s) have been scanned

Scan process 'winlogon.exe' - '1' Module(s) have been scanned

Scan process 'csrss.exe' - '1' Module(s) have been scanned

Scan process 'smss.exe' - '1' Module(s) have been scanned

12 processes with 12 modules were scanned

Starting master boot sector scan:

Master boot sector HD0

[iNFO] No virus was found!

Start scanning boot sectors:

Boot sector 'C:\'

[iNFO] No virus was found!

Boot sector 'D:\'

[iNFO] No virus was found!

Boot sector 'E:\'

[iNFO] No virus was found!

Starting to scan the registry.

The registry was scanned ( '66' files ).

Starting the file scan:

Begin scan in 'C:\'

C:\pagefile.sys

[WARNING] The file could not be opened!

C:\Program Files\SAS\SAS 9.1\dmine\sasmisc\textmine\lang\english-tf-co2.grouper

[0] Archive type: MacBinary

--> M\?c\)￁V&ﾪ?￉?￰