Infection Antivir xp 2008 & Trojans + rapport HijackThis

Falkra · le 20 août 2008

Ok, impeccable. La clé a probablement réinfecté C, attention.

sylvain1479 · le 20 août 2008

Bonjour,

Antivir n'a rien trouvé de plus! Voici les 2 rapports fait en mode sans échec:

----------------------------------------------------------------------

Avira AntiVir Personal

Report file date: Wednesday, August 20, 2008 01:42

Scanning for 1563576 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic

Serial number: 0000149996-ADJIE-0001

Platform: Windows XP

Windows version: (Service Pack 2) [5.1.2600]

Boot mode: Save mode

Username: Administrator

Computer name: IBM-5FE39F06C97

Version information:

BUILD.DAT : 8.1.0.331 16934 Bytes 8/12/2008 11:46:00

AVSCAN.EXE : 8.1.4.7 315649 Bytes 6/26/2008 08:57:53

AVSCAN.DLL : 8.1.4.0 40705 Bytes 5/26/2008 07:56:40

LUKE.DLL : 8.1.4.5 164097 Bytes 6/12/2008 12:44:19

LUKERES.DLL : 8.1.4.0 12033 Bytes 5/26/2008 07:58:52

ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 7/18/2007 10:33:34

ANTIVIR1.VDF : 7.0.5.1 8182784 Bytes 6/24/2008 13:54:15

ANTIVIR2.VDF : 7.0.6.10 2587136 Bytes 8/14/2008 16:04:03

ANTIVIR3.VDF : 7.0.6.38 175104 Bytes 8/19/2008 23:30:41

Engineversion : 8.1.1.23

AEVDF.DLL : 8.1.0.5 102772 Bytes 7/9/2008 08:46:50

AESCRIPT.DLL : 8.1.0.68 315770 Bytes 8/19/2008 07:23:58

AESCN.DLL : 8.1.0.23 119156 Bytes 8/18/2008 16:04:24

AERDL.DLL : 8.1.0.20 418165 Bytes 7/9/2008 08:46:50

AEPACK.DLL : 8.1.2.1 364917 Bytes 8/18/2008 16:04:23

AEOFFICE.DLL : 8.1.0.22 192890 Bytes 8/19/2008 07:23:57

AEHEUR.DLL : 8.1.0.50 1388918 Bytes 8/19/2008 07:23:55

AEHELP.DLL : 8.1.0.15 115063 Bytes 7/9/2008 08:46:50

AEGEN.DLL : 8.1.0.36 315764 Bytes 8/19/2008 07:23:52

AEEMU.DLL : 8.1.0.7 430452 Bytes 8/18/2008 16:04:11

AECORE.DLL : 8.1.1.8 172406 Bytes 8/18/2008 16:04:10

AEBB.DLL : 8.1.0.1 53617 Bytes 4/24/2008 08:50:42

AVWINLL.DLL : 1.0.0.12 15105 Bytes 7/9/2008 08:40:05

AVPREF.DLL : 8.0.2.0 38657 Bytes 5/16/2008 09:28:01

AVREP.DLL : 8.0.0.2 98344 Bytes 8/18/2008 16:04:05

AVREG.DLL : 8.0.0.1 33537 Bytes 5/9/2008 11:26:40

AVARKT.DLL : 1.0.0.23 307457 Bytes 2/12/2008 08:29:23

AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 6/12/2008 12:27:49

SQLITE3.DLL : 3.3.17.1 339968 Bytes 1/22/2008 17:28:02

SMTPLIB.DLL : 1.2.0.23 28929 Bytes 6/12/2008 12:49:40

NETNT.DLL : 8.0.0.1 7937 Bytes 1/25/2008 12:05:10

RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 6/12/2008 13:48:07

RCTEXT.DLL : 8.0.52.0 86273 Bytes 6/27/2008 13:34:37

Configuration settings for the scan:

Jobname..........................: Complete system scan

Configuration file...............: C:\Program Files\Avira\AntiVir PersonalEdition Classic\sysscan.avp

Logging..........................: low

Primary action...................: interactive

Secondary action.................: ignore

Scan master boot sector..........: on

Scan boot sector.................: on

Boot sectors.....................: C:,

Process scan.....................: on

Scan registry....................: on

Search for rootkits..............: off

Scan all files...................: All files

Scan archives....................: on

Recursion depth..................: 20

Smart extensions.................: on

Deviating archive types..........: +BSD Mailbox, +Netscape/Mozilla Mailbox, +Eudora Mailbox, +Squid cache, +Pegasus Mailbox, +MS Outlook Mailbox,

Macro heuristic..................: on

File heuristic...................: high

Deviating risk categories........: +APPL,+GAME,+JOKE,+PCK,+SPR,

Start of the scan: Wednesday, August 20, 2008 01:42

The scan of running processes will be started

Scan process 'avscan.exe' - '1' Module(s) have been scanned

Scan process 'avcenter.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'explorer.exe' - '1' Module(s) have been scanned

Scan process 'aawservice.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'lsass.exe' - '1' Module(s) have been scanned

Scan process 'services.exe' - '1' Module(s) have been scanned

Scan process 'winlogon.exe' - '1' Module(s) have been scanned

Scan process 'csrss.exe' - '1' Module(s) have been scanned

Scan process 'smss.exe' - '1' Module(s) have been scanned

12 processes with 12 modules were scanned

Starting master boot sector scan:

Master boot sector HD0

[iNFO] No virus was found!

Start scanning boot sectors:

Boot sector 'C:\'

[iNFO] No virus was found!

Starting to scan the registry.

The registry was scanned ( '79' files ).

Starting the file scan:

Begin scan in 'C:\' <IBM_PRELOAD>

C:\pagefile.sys