Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

Infecté par Beagle...Impossible à éradiquer!!!!

nenette55

Par nenette55
dans Analyses et éradication malwares

 Partager

Messages recommandés

nenette55 Member

nenette55

Posté(e)
  • Auteur
Posté(e)

Non il n' a pas trouvé de modifications.

Néanmoins j'ai réussi à installer Antivir qui pour l'instant m 'a déja détecté 2 fichiers responsables de l'ouverture de la "fameuse fenetre".

Pour l'instant il scanne l'ensemble de mon PC je vous tiens au courant de l'évolution de la situation.

En espérant que ce soit concluant.

 

Que de Patience.........

Falkra Devil Member !

Falkra

Posté(e)
Posté(e)

Bien pour le scan complet avec Antivir. Ca va prendre un moment, mais tu peux sauvegarder le rapport en fin de parcours (bouton "report"). S'il trouve des choses, mets en quarantaine (choisis "Quarantine" et tu peux automatiser ce type de réponses en cochant une case), comme ci dessous :

 

img-112858s188k.gif

nenette55 Member

nenette55

Posté(e)
  • Auteur
Posté(e)

Je vous poste le rapport d'antivir. Je n' ai pas encore rebooter mais je pense que c'est bien parti!!!!!

 

Avira AntiVir Personal

Report file date: mercredi 13 août 2008 22:24

 

Scanning for 1551124 virus strains and unwanted programs.

 

Licensed to: Avira AntiVir PersonalEdition Classic

Serial number: 0000149996-ADJIE-0001

Platform: Windows XP

Windows version: (Service Pack 3) [5.1.2600]

Boot mode: Normally booted

Username: SYSTEM

Computer name: JEAN-0RE1R3LW1B

 

Version information:

BUILD.DAT : 8.1.0.326 16933 Bytes 11/07/2008 12:57:00

AVSCAN.EXE : 8.1.4.7 315649 Bytes 26/06/2008 08:57:53

AVSCAN.DLL : 8.1.4.0 40705 Bytes 26/05/2008 07:56:40

LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 12:44:19

LUKERES.DLL : 8.1.4.0 12033 Bytes 26/05/2008 07:58:52

ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 10:33:34

ANTIVIR1.VDF : 7.0.5.1 8182784 Bytes 24/06/2008 13:54:15

ANTIVIR2.VDF : 7.0.5.207 2316800 Bytes 04/08/2008 20:23:36

ANTIVIR3.VDF : 7.0.6.9 292864 Bytes 13/08/2008 20:23:37

Engineversion : 8.1.1.19

AEVDF.DLL : 8.1.0.5 102772 Bytes 09/07/2008 08:46:50

AESCRIPT.DLL : 8.1.0.63 311673 Bytes 13/08/2008 20:23:47

AESCN.DLL : 8.1.0.23 119156 Bytes 13/08/2008 20:23:46

AERDL.DLL : 8.1.0.20 418165 Bytes 09/07/2008 08:46:50

AEPACK.DLL : 8.1.2.1 364917 Bytes 13/08/2008 20:23:46

AEOFFICE.DLL : 8.1.0.21 192891 Bytes 13/08/2008 20:23:45

AEHEUR.DLL : 8.1.0.47 1368437 Bytes 13/08/2008 20:23:44

AEHELP.DLL : 8.1.0.15 115063 Bytes 09/07/2008 08:46:50

AEGEN.DLL : 8.1.0.35 315764 Bytes 13/08/2008 20:23:41

AEEMU.DLL : 8.1.0.7 430452 Bytes 13/08/2008 20:23:39

AECORE.DLL : 8.1.1.8 172406 Bytes 13/08/2008 20:23:38

AEBB.DLL : 8.1.0.1 53617 Bytes 24/04/2008 08:50:42

AVWINLL.DLL : 1.0.0.12 15105 Bytes 09/07/2008 08:40:05

AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 09:28:01

AVREP.DLL : 8.0.0.2 98344 Bytes 13/08/2008 20:23:38

AVREG.DLL : 8.0.0.1 33537 Bytes 09/05/2008 11:26:40

AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23

AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 12:27:49

SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02

SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 12:49:40

NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10

RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 12/06/2008 13:48:07

RCTEXT.DLL : 8.0.52.0 86273 Bytes 27/06/2008 13:34:37

 

Configuration settings for the scan:

Jobname..........................: Complete system scan

Configuration file...............: d:\program files\avira\antivir personaledition classic\sysscan.avp

Logging..........................: low

Primary action...................: interactive

Secondary action.................: ignore

Scan master boot sector..........: on

Scan boot sector.................: on

Boot sectors.....................: C:, D:, E:, F:, K:,

Process scan.....................: on

Scan registry....................: on

Search for rootkits..............: off

Scan all files...................: Intelligent file selection

Scan archives....................: on

Recursion depth..................: 20

Smart extensions.................: on

Macro heuristic..................: on

File heuristic...................: medium

 

Start of the scan: mercredi 13 août 2008 22:24

 

The scan of running processes will be started

Scan process 'avscan.exe' - '1' Module(s) have been scanned

Scan process 'avcenter.exe' - '1' Module(s) have been scanned

Scan process 'avgnt.exe' - '1' Module(s) have been scanned

Scan process 'avguard.exe' - '1' Module(s) have been scanned

Scan process 'sched.exe' - '1' Module(s) have been scanned

Scan process 'WLLoginProxy.exe' - '1' Module(s) have been scanned

Scan process 'iexplore.exe' - '1' Module(s) have been scanned

Scan process 'Watch.exe' - '1' Module(s) have been scanned

Module is infected -> 'D:\PROGRA~1\Wanadoo\Watch.exe'

Scan process 'YzShadow.exe' - '1' Module(s) have been scanned

Scan process 'UberIcon Manager.exe' - '1' Module(s) have been scanned

Scan process 'RocketDock.exe' - '1' Module(s) have been scanned

Scan process 'ctfmon.exe' - '1' Module(s) have been scanned

Scan process 'realsched.exe' - '1' Module(s) have been scanned

Scan process 'SWTrayV4.EXE' - '1' Module(s) have been scanned

Scan process 'smax4pnp.exe' - '1' Module(s) have been scanned

Scan process 'rundll32.exe' - '1' Module(s) have been scanned

Scan process 'jusched.exe' - '1' Module(s) have been scanned

Scan process 'TaskBarIcon.exe' - '1' Module(s) have been scanned

Scan process 'VCDDaemon.exe' - '1' Module(s) have been scanned

Scan process 'daemon.exe' - '1' Module(s) have been scanned

Scan process 'wmiapsrv.exe' - '1' Module(s) have been scanned

Scan process 'alg.exe' - '1' Module(s) have been scanned

Scan process 'nSvcAppFlt.exe' - '1' Module(s) have been scanned

Scan process 'WLANCFG.EXE' - '1' Module(s) have been scanned

Scan process 'Apache.exe' - '1' Module(s) have been scanned

Scan process 'StarWindService.exe' - '1' Module(s) have been scanned

Scan process 'RpcAgentSrv.exe' - '1' Module(s) have been scanned

Scan process 'PnkBstrB.exe' - '1' Module(s) have been scanned

Scan process 'PnkBstrA.exe' - '1' Module(s) have been scanned

Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned

Scan process 'explorer.exe' - '1' Module(s) have been scanned

Scan process 'nTuneService.exe' - '1' Module(s) have been scanned

Scan process 'nSvcLog.exe' - '1' Module(s) have been scanned

Scan process 'nSvcIp.exe' - '1' Module(s) have been scanned

Scan process 'FTRTSVC.exe' - '1' Module(s) have been scanned

Scan process 'Apache.exe' - '1' Module(s) have been scanned

Scan process 'DkService.exe' - '1' Module(s) have been scanned

Scan process 'spoolsv.exe' - '1' Module(s) have been scanned

Scan process 'aawservice.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'lsass.exe' - '1' Module(s) have been scanned

Scan process 'services.exe' - '1' Module(s) have been scanned

Scan process 'winlogon.exe' - '1' Module(s) have been scanned

Scan process 'csrss.exe' - '1' Module(s) have been scanned

Scan process 'smss.exe' - '1' Module(s) have been scanned

Process 'Watch.exe' has been terminated

D:\PROGRA~1\Wanadoo\Watch.exe

[DETECTION] Is the TR/Dldr.Bagle.XZ Trojan

[NOTE] The file was deleted!

 

50 processes with 49 modules were scanned

 

Starting master boot sector scan:

Master boot sector HD0

[iNFO] No virus was found!

Master boot sector HD1

[iNFO] No virus was found!

Master boot sector HD2

[iNFO] No virus was found!

 

Start scanning boot sectors:

Boot sector 'C:\'

[iNFO] No virus was found!

Boot sector 'D:\'

[iNFO] No virus was found!

Boot sector 'E:\'

[iNFO] No virus was found!

Boot sector 'F:\'

[iNFO] No virus was found!

Boot sector 'K:\'

[iNFO] No virus was found!

 

Starting to scan the registry.

D:\Program Files\Wanadoo\GestMaj.exe TaskBarIcon.exe

[DETECTION] Is the TR/Dldr.Bagle.XZ Trojan

[NOTE] The file was deleted!

 

The registry was scanned ( '72' files ).

 

 

Starting the file scan:

 

Begin scan in 'C:\' <Stockage

 

Begin scan in 'D:\'

D:\pagefile.sys

[WARNING] The file could not be opened!

D:\Program Files\Fichiers communs\Real\GToolbar\GoogleToolbarInstaller.exe

[DETECTION] Is the TR/Dldr.Agent.aaar Trojan

[NOTE] The file was deleted!

D:\QooBox\Quarantine\D\Documents and Settings\Croisetu Jean-Marie\Application Data\m\flec006.exe.vir

[DETECTION] Is the TR/Bagle.Gen.B Trojan

[NOTE] The file was deleted!

D:\QooBox\Quarantine\D\WINDOWS\system32\mdelk.exe.vir

[DETECTION] Is the TR/Bagle.Gen.B Trojan

[NOTE] The file was deleted!

D:\QooBox\Quarantine\D\WINDOWS\system32\wintems.exe.vir

[DETECTION] Is the TR/Bagle.Gen.B Trojan

[NOTE] The file was deleted!

D:\QooBox\Quarantine\D\WINDOWS\system32\drivers\hldrrr.exe.vir

[DETECTION] Is the TR/Dldr.Bagle.XZ Trojan

[NOTE] The file was deleted!

D:\QooBox\Quarantine\D\WINDOWS\system32\drivers\mdelk.exe.vir

[DETECTION] Is the TR/Dldr.Bagle.XZ Trojan

[NOTE] The file was deleted!

D:\QooBox\Quarantine\D\WINDOWS\system32\drivers\srosa.sys.vir

[DETECTION] Is the TR/Rootkit.Gen Trojan

[NOTE] The file was deleted!

D:\QooBox\Quarantine\D\WINDOWS\system32\drivers\downld\134609.exe.vir

[DETECTION] Is the TR/Bagle.Gen.B Trojan

[NOTE] The file was deleted!

D:\QooBox\Quarantine\D\WINDOWS\system32\drivers\downld\135937.exe.vir

[DETECTION] Is the TR/Dldr.Bagle.IJ.52 Trojan

[NOTE] The file was deleted!

D:\QooBox\Quarantine\D\WINDOWS\system32\drivers\downld\137140.exe.vir

[DETECTION] Contains recognition pattern of the WORM/Bagle.Gen worm

[NOTE] The file was deleted!

D:\QooBox\Quarantine\D\WINDOWS\system32\drivers\downld\159093.exe.vir

[DETECTION] Is the TR/Bagle.Gen.B Trojan

[NOTE] The file was deleted!

D:\QooBox\Quarantine\D\WINDOWS\system32\drivers\downld\161218.exe.vir

[DETECTION] Is the TR/Bagle.Gen.B Trojan

[NOTE] The file was deleted!

D:\QooBox\Quarantine\D\WINDOWS\system32\drivers\downld\165343.exe.vir

[DETECTION] Is the TR/Bagle.Gen.B Trojan

[NOTE] The file was deleted!

D:\System Volume Information\_restore{69C2DCB4-3113-45B0-B083-E3A77079A885}\RP2\A0000268.exe

[DETECTION] Is the TR/Dldr.Bagle.XZ Trojan

[NOTE] The file was deleted!

D:\System Volume Information\_restore{69C2DCB4-3113-45B0-B083-E3A77079A885}\RP2\A0001428.sys

[DETECTION] Is the TR/Rootkit.Gen Trojan

[NOTE] The file was deleted!

D:\System Volume Information\_restore{69C2DCB4-3113-45B0-B083-E3A77079A885}\RP2\A0001429.exe

[DETECTION] Is the TR/Dldr.Bagle.XZ Trojan

[NOTE] The file was deleted!

D:\System Volume Information\_restore{69C2DCB4-3113-45B0-B083-E3A77079A885}\RP2\A0001431.exe

[DETECTION] Is the TR/Dldr.Bagle.XZ Trojan

[NOTE] The file was deleted!

D:\System Volume Information\_restore{69C2DCB4-3113-45B0-B083-E3A77079A885}\RP2\A0001435.exe

[DETECTION] Is the TR/Bagle.Gen.B Trojan

[NOTE] The file was deleted!

D:\System Volume Information\_restore{69C2DCB4-3113-45B0-B083-E3A77079A885}\RP2\A0001436.exe

[DETECTION] Is the TR/Bagle.Gen.B Trojan

[NOTE] The file was deleted!

D:\System Volume Information\_restore{69C2DCB4-3113-45B0-B083-E3A77079A885}\RP2\A0001494.exe

[DETECTION] Is the TR/Bagle.Gen.B Trojan

[NOTE] The file was deleted!

D:\System Volume Information\_restore{69C2DCB4-3113-45B0-B083-E3A77079A885}\RP2\A0001495.exe

[DETECTION] Is the TR/Dldr.Bagle.IJ.52 Trojan

[NOTE] The file was deleted!

D:\System Volume Information\_restore{69C2DCB4-3113-45B0-B083-E3A77079A885}\RP2\A0001496.exe

[DETECTION] Contains recognition pattern of the WORM/Bagle.Gen worm

[NOTE] The file was deleted!

D:\System Volume Information\_restore{69C2DCB4-3113-45B0-B083-E3A77079A885}\RP2\A0001499.exe

[DETECTION] Is the TR/Bagle.Gen.B Trojan

[NOTE] The file was deleted!

D:\System Volume Information\_restore{69C2DCB4-3113-45B0-B083-E3A77079A885}\RP2\A0001500.exe

[DETECTION] Is the TR/Bagle.Gen.B Trojan

[NOTE] The file was deleted!

D:\System Volume Information\_restore{69C2DCB4-3113-45B0-B083-E3A77079A885}\RP2\A0001501.exe

[DETECTION] Is the TR/Bagle.Gen.B Trojan

[NOTE] The file was deleted!

D:\System Volume Information\_restore{69C2DCB4-3113-45B0-B083-E3A77079A885}\RP2\A0001512.sys

[DETECTION] Is the TR/Rootkit.Gen Trojan

[NOTE] The file was deleted!

D:\System Volume Information\_restore{69C2DCB4-3113-45B0-B083-E3A77079A885}\RP2\A0001513.exe

[DETECTION] Is the TR/Bagle.Gen.B Trojan

[NOTE] The file was deleted!

D:\System Volume Information\_restore{69C2DCB4-3113-45B0-B083-E3A77079A885}\RP2\A0001514.exe

[DETECTION] Is the TR/Bagle.Gen.B Trojan

[NOTE] The file was deleted!

D:\System Volume Information\_restore{69C2DCB4-3113-45B0-B083-E3A77079A885}\RP2\A0001515.exe

[DETECTION] Is the TR/Dldr.Bagle.XZ Trojan

[NOTE] The file was deleted!

D:\System Volume Information\_restore{69C2DCB4-3113-45B0-B083-E3A77079A885}\RP2\A0001516.exe

[DETECTION] Is the TR/Dldr.Bagle.XZ Trojan

[NOTE] The file was deleted!

D:\System Volume Information\_restore{69C2DCB4-3113-45B0-B083-E3A77079A885}\RP2\A0001517.exe

[DETECTION] Is the TR/Bagle.Gen.B Trojan

[NOTE] The file was deleted!

D:\System Volume Information\_restore{69C2DCB4-3113-45B0-B083-E3A77079A885}\RP2\A0001563.exe

[DETECTION] Is the TR/Dldr.Bagle.XZ Trojan

[NOTE] The file was deleted!

D:\System Volume Information\_restore{69C2DCB4-3113-45B0-B083-E3A77079A885}\RP3\A0001568.exe

[DETECTION] Is the TR/Dldr.Bagle.XZ Trojan

[NOTE] The file was deleted!

D:\System Volume Information\_restore{69C2DCB4-3113-45B0-B083-E3A77079A885}\RP3\A0001569.exe

[DETECTION] Is the TR/Dldr.Bagle.XZ Trojan

[NOTE] The file was deleted!

D:\System Volume Information\_restore{69C2DCB4-3113-45B0-B083-E3A77079A885}\RP3\A0001570.exe

[DETECTION] Is the TR/Dldr.Agent.aaar Trojan

[NOTE] The file was deleted!

D:\WINDOWS\system32\drivers\sptd.sys

[WARNING] The file could not be opened!

Begin scan in 'E:\' <Add on FS>

E:\FS2004_CaptainSim_Boeing_707\Captain_Sim\707\tce\TCE_707.exe

[0] Archive type: OVL

--> Object

[DETECTION] Is the TR/Small.93696 Trojan

[NOTE] The file was deleted!

E:\System Volume Information\_restore{69C2DCB4-3113-45B0-B083-E3A77079A885}\RP3\A0001571.exe

[0] Archive type: OVL

--> Object

[DETECTION] Is the TR/Small.93696 Trojan

[NOTE] The file was deleted!

Begin scan in 'F:\' <Jeux>

F:\pagefile.sys

[WARNING] The file could not be opened!

Begin scan in 'K:\' <STOCKAGE 2>

 

 

End of the scan: mercredi 13 août 2008 23:27

Used time: 1:02:51 Hour(s)

 

The scan has been done completely.

 

10863 Scanning directories

438768 Files were scanned

44 viruses and/or unwanted programs were found

0 Files were classified as suspicious:

39 files were deleted

0 files were repaired

0 files were moved to quarantine

0 files were renamed

3 Files cannot be scanned

438721 Files not concerned

3097 Archives were scanned

7 Warnings

39 Notes

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...