Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

[resolu]Encore un rapport Hijackthis...

Superludi

Par Superludi
dans Analyses et éradication malwares

 Partager

Messages recommandés

Superludi Junior Member

Superludi

Posté(e)
  • Auteur
Posté(e)

:P Merci.

 

 

 

 

 

J'ai voulu vérifier si les anciennes versions java était bien désinstaller dans ajout/sup dans le panneau de config.

Je n'y suis pas arriver car antivir a détecté une menace:

 

 

http://www.hiboox.fr/go/images/informatiqu...4999bb.jpg.html

 

 

Quelle option dois-je cocher? sup? quarantaine?

 

 

 

 

 

 

Sinon voici le rapport java:

 

 

JavaRa 1.11 Removal Log.

 

Report follows after line.

 

------------------------------------

 

The JavaRa removal process was started on Wed Sep 10 12:44:57 2008

 

Could not delete: C:\Program Files\Java\jre1.5.0_11

 

Found and removed: Software\JavaSoft\Java2D\1.5.0_03

 

Found and removed: Software\JavaSoft\Java2D\1.5.0_11

 

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}

 

Found and removed: SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D511001

 

Found and removed: SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D511001

 

Found and removed: SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D511001

 

Found and removed: SOFTWARE\Classes\JavaPlugin.150_11

 

Found and removed: SOFTWARE\Classes\JavaWebStart.isInstalled.1.5.0.0

 

Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.5.0_11

 

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5

 

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_11

 

Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}

 

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D511001

 

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D511001

 

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150110}

 

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.5.0_11

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}

 

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.5.0_11\

 

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1

 

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02

 

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03

 

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04

 

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2

 

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}

 

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}

 

------------------------------------

 

Finished reporting.

Superludi Junior Member

Superludi

Posté(e)
  • Auteur
Posté(e)

Et voilà le rapport après scan par antivir:

 

 

 

 

Avira AntiVir Personal

Report file date: mercredi 10 septembre 2008 13:57

 

Scanning for 1607897 virus strains and unwanted programs.

 

Licensed to: Avira AntiVir PersonalEdition Classic

Serial number: 0000149996-ADJIE-0001

Platform: Windows XP

Windows version: (Service Pack 2) [5.1.2600]

Boot mode: Normally booted

Username: SYSTEM

Computer name: GRAND-CRU

 

Version information:

BUILD.DAT : 8.1.0.331 16934 Bytes 12/08/2008 11:46:00

AVSCAN.EXE : 8.1.4.7 315649 Bytes 26/06/2008 08:57:53

AVSCAN.DLL : 8.1.4.0 40705 Bytes 26/05/2008 07:56:40

LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 12:44:19

LUKERES.DLL : 8.1.4.0 12033 Bytes 26/05/2008 07:58:52

ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 10:33:34

ANTIVIR1.VDF : 7.0.5.1 8182784 Bytes 24/06/2008 13:54:15

ANTIVIR2.VDF : 7.0.6.94 2998784 Bytes 31/08/2008 10:02:01

ANTIVIR3.VDF : 7.0.6.140 308736 Bytes 10/09/2008 11:57:09

Engineversion : 8.1.1.28

AEVDF.DLL : 8.1.0.5 102772 Bytes 25/02/2008 09:58:21

AESCRIPT.DLL : 8.1.0.70 319866 Bytes 10/09/2008 10:02:07

AESCN.DLL : 8.1.0.23 119156 Bytes 10/07/2008 12:44:49

AERDL.DLL : 8.1.1.1 397683 Bytes 10/09/2008 10:02:06

AEPACK.DLL : 8.1.2.1 364917 Bytes 15/07/2008 12:58:35

AEOFFICE.DLL : 8.1.0.23 196987 Bytes 10/09/2008 10:02:05

AEHEUR.DLL : 8.1.0.51 1397111 Bytes 10/09/2008 10:02:05

AEHELP.DLL : 8.1.0.15 115063 Bytes 10/07/2008 12:44:48

AEGEN.DLL : 8.1.0.36 315764 Bytes 10/09/2008 10:02:03

AEEMU.DLL : 8.1.0.7 430452 Bytes 31/07/2008 08:33:21

AECORE.DLL : 8.1.1.11 172406 Bytes 10/09/2008 10:02:03

AEBB.DLL : 8.1.0.1 53617 Bytes 10/07/2008 12:44:48

AVWINLL.DLL : 1.0.0.12 15105 Bytes 09/07/2008 08:40:05

AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 09:28:01

AVREP.DLL : 8.0.0.2 98344 Bytes 10/09/2008 10:02:02

AVREG.DLL : 8.0.0.1 33537 Bytes 09/05/2008 11:26:40

AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23

AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 12:27:49

SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02

SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 12:49:40

NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10

RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 12/06/2008 13:48:07

RCTEXT.DLL : 8.0.52.0 86273 Bytes 27/06/2008 13:34:37

 

Configuration settings for the scan:

Jobname..........................: Complete system scan

Configuration file...............: C:\Program Files\Avira\AntiVir PersonalEdition Classic\sysscan.avp

Logging..........................: low

Primary action...................: interactive

Secondary action.................: ignore

Scan master boot sector..........: on

Scan boot sector.................: on

Boot sectors.....................: C:,

Process scan.....................: on

Scan registry....................: on

Search for rootkits..............: off

Scan all files...................: Intelligent file selection

Scan archives....................: on

Recursion depth..................: 20

Smart extensions.................: on

Macro heuristic..................: on

File heuristic...................: medium

 

Start of the scan: mercredi 10 septembre 2008 13:57

 

The scan of running processes will be started

Scan process 'avscan.exe' - '1' Module(s) have been scanned

Scan process 'avcenter.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'avgnt.exe' - '1' Module(s) have been scanned

Scan process 'avguard.exe' - '1' Module(s) have been scanned

Scan process 'sched.exe' - '1' Module(s) have been scanned

Scan process 'IEXPLORE.EXE' - '1' Module(s) have been scanned

Scan process 'explorer.exe' - '1' Module(s) have been scanned

Scan process 'wuauclt.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'ctfmon.exe' - '1' Module(s) have been scanned

Scan process 'sprtcmd.exe' - '1' Module(s) have been scanned

Scan process 'Center.exe' - '1' Module(s) have been scanned

Scan process 'ipoint.exe' - '1' Module(s) have been scanned

Scan process 'type32.exe' - '1' Module(s) have been scanned

Scan process 'hpotdd01.exe' - '1' Module(s) have been scanned

Scan process 'hpztsb09.exe' - '1' Module(s) have been scanned

Scan process 'hpcmpmgr.exe' - '1' Module(s) have been scanned

Scan process 'hpwuSchd.exe' - '1' Module(s) have been scanned

Scan process 'G-vga.exe' - '1' Module(s) have been scanned

Scan process 'PDVDServ.exe' - '1' Module(s) have been scanned

Scan process 'ALCWZRD.EXE' - '1' Module(s) have been scanned

Scan process 'SOUNDMAN.EXE' - '1' Module(s) have been scanned

Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned

Scan process 'alg.exe' - '1' Module(s) have been scanned

Scan process 'GoogleUpdaterService.exe' - '1' Module(s) have been scanned

Scan process 'guard.exe' - '1' Module(s) have been scanned

Scan process 'spoolsv.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'MsMpEng.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned

Scan process 'lsass.exe' - '1' Module(s) have been scanned

Scan process 'services.exe' - '1' Module(s) have been scanned

Scan process 'winlogon.exe' - '1' Module(s) have been scanned

Scan process 'csrss.exe' - '1' Module(s) have been scanned

Scan process 'smss.exe' - '1' Module(s) have been scanned

40 processes with 40 modules were scanned

 

Starting master boot sector scan:

Master boot sector HD0

[iNFO] No virus was found!

 

Start scanning boot sectors:

Boot sector 'C:\'

[iNFO] No virus was found!

 

Starting to scan the registry.

The registry was scanned ( '54' files ).

 

 

Starting the file scan:

 

Begin scan in 'C:\'

C:\pagefile.sys

[WARNING] The file could not be opened!

C:\Program Files\eMule\Temp\001.part

[0] Archive type: RAR

--> lc5setup.exe

[1] Archive type: CAB SFX (self extracting)

--> \Disk1\CVS\Repository

[WARNING] No further files can be extracted from this archive. The archive will be closed

C:\System Volume Information\_restore{D828316C-1C6B-4A4C-BF12-2841A558EEB4}\RP221\A0091117.exe

[0] Archive type: HIDDEN

--> FIL\\\?\C:\System Volume Information\_restore{D828316C-1C6B-4A4C-BF12-2841A558EEB4}\RP221\A0091117.exe

[DETECTION] Is the TR/Crypt.ULPM.Gen Trojan

[NOTE] The file was deleted!

C:\System Volume Information\_restore{D828316C-1C6B-4A4C-BF12-2841A558EEB4}\RP221\A0091118.exe

[0] Archive type: HIDDEN

--> FIL\\\?\C:\System Volume Information\_restore{D828316C-1C6B-4A4C-BF12-2841A558EEB4}\RP221\A0091118.exe

[DETECTION] Is the TR/Crypt.ULPM.Gen Trojan

[NOTE] The file was deleted!

C:\System Volume Information\_restore{D828316C-1C6B-4A4C-BF12-2841A558EEB4}\RP221\A0091119.exe

[0] Archive type: HIDDEN

--> FIL\\\?\C:\System Volume Information\_restore{D828316C-1C6B-4A4C-BF12-2841A558EEB4}\RP221\A0091119.exe

[DETECTION] Is the TR/Crypt.ULPM.Gen Trojan

[NOTE] The file was deleted!

C:\System Volume Information\_restore{D828316C-1C6B-4A4C-BF12-2841A558EEB4}\RP221\A0091120.exe

[0] Archive type: HIDDEN

--> FIL\\\?\C:\System Volume Information\_restore{D828316C-1C6B-4A4C-BF12-2841A558EEB4}\RP221\A0091120.exe

[DETECTION] Is the TR/Obfuscated.EN.383 Trojan

[NOTE] The file was deleted!

C:\System Volume Information\_restore{D828316C-1C6B-4A4C-BF12-2841A558EEB4}\RP221\A0091121.exe

[0] Archive type: HIDDEN

--> FIL\\\?\C:\System Volume Information\_restore{D828316C-1C6B-4A4C-BF12-2841A558EEB4}\RP221\A0091121.exe

[DETECTION] Is the TR/Obfuscated.EN.209 Trojan

[NOTE] The file was deleted!

C:\System Volume Information\_restore{D828316C-1C6B-4A4C-BF12-2841A558EEB4}\RP221\A0091123.exe

[0] Archive type: HIDDEN

--> FIL\\\?\C:\System Volume Information\_restore{D828316C-1C6B-4A4C-BF12-2841A558EEB4}\RP221\A0091123.exe

[DETECTION] Is the TR/Obfuscated.EN.383 Trojan

[NOTE] The file was deleted!

C:\System Volume Information\_restore{D828316C-1C6B-4A4C-BF12-2841A558EEB4}\RP221\A0091124.exe

[0] Archive type: HIDDEN

--> FIL\\\?\C:\System Volume Information\_restore{D828316C-1C6B-4A4C-BF12-2841A558EEB4}\RP221\A0091124.exe

[DETECTION] Is the TR/Obfuscated.EN.146 Trojan

[NOTE] The file was deleted!

C:\System Volume Information\_restore{D828316C-1C6B-4A4C-BF12-2841A558EEB4}\RP221\A0091126.exe

[0] Archive type: HIDDEN

--> FIL\\\?\C:\System Volume Information\_restore{D828316C-1C6B-4A4C-BF12-2841A558EEB4}\RP221\A0091126.exe

[DETECTION] Is the TR/Dldr.IstBar.32000 Trojan

[NOTE] The file was deleted!

C:\System Volume Information\_restore{D828316C-1C6B-4A4C-BF12-2841A558EEB4}\RP229\A0093861.cpl

[DETECTION] Contains recognition pattern of the PHISH/FraudTool.MSAntivirus.X phishing file/email

[NOTE] The file was deleted!

C:\System Volume Information\_restore{D828316C-1C6B-4A4C-BF12-2841A558EEB4}\RP229\A0093862.exe

[DETECTION] Is the TR/Fake.UltimaAV.bh Trojan

[NOTE] The file was deleted!

C:\System Volume Information\_restore{D828316C-1C6B-4A4C-BF12-2841A558EEB4}\RP230\A0093978.exe

[0] Archive type: RAR SFX (self extracting)

--> MSA.cpl

[DETECTION] Contains recognition pattern of the PHISH/FraudTool.MSAntivirus.X phishing file/email

--> MSA.exe

[DETECTION] Is the TR/Fake.UltimaAV.bh Trojan

[NOTE] The file was deleted!

C:\System Volume Information\_restore{D828316C-1C6B-4A4C-BF12-2841A558EEB4}\RP230\A0093982.exe

[DETECTION] Is the TR/Spy.Frauder.dk Trojan

[NOTE] The file was deleted!

C:\System Volume Information\_restore{D828316C-1C6B-4A4C-BF12-2841A558EEB4}\RP230\A0093983.dll

[DETECTION] Is the TR/Vundo.Gen Trojan

[NOTE] The file was deleted!

C:\System Volume Information\_restore{D828316C-1C6B-4A4C-BF12-2841A558EEB4}\RP230\A0093984.dll

[DETECTION] Is the TR/Vundo.Gen Trojan

[NOTE] The file was deleted!

C:\System Volume Information\_restore{D828316C-1C6B-4A4C-BF12-2841A558EEB4}\RP230\A0093985.dll

[DETECTION] Is the TR/Vundo.Gen Trojan

[NOTE] The file was deleted!

C:\System Volume Information\_restore{D828316C-1C6B-4A4C-BF12-2841A558EEB4}\RP230\A0093986.dll

[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

[NOTE] The file was deleted!

C:\System Volume Information\_restore{D828316C-1C6B-4A4C-BF12-2841A558EEB4}\RP230\A0093987.dll

[DETECTION] Is the TR/Vundo.Gen Trojan

[NOTE] The file was deleted!

C:\System Volume Information\_restore{D828316C-1C6B-4A4C-BF12-2841A558EEB4}\RP230\A0093988.dll

[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

[NOTE] The file was deleted!

C:\System Volume Information\_restore{D828316C-1C6B-4A4C-BF12-2841A558EEB4}\RP230\A0093989.dll

[DETECTION] Is the TR/Vundo.Gen Trojan

[NOTE] The file was deleted!

C:\System Volume Information\_restore{D828316C-1C6B-4A4C-BF12-2841A558EEB4}\RP230\A0093990.dll

[DETECTION] Is the TR/Vundo.Gen Trojan

[NOTE] The file was deleted!

C:\System Volume Information\_restore{D828316C-1C6B-4A4C-BF12-2841A558EEB4}\RP230\A0093991.dll

[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

[NOTE] The file was deleted!

C:\System Volume Information\_restore{D828316C-1C6B-4A4C-BF12-2841A558EEB4}\RP230\A0093992.dll

[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

[NOTE] The file was deleted!

C:\System Volume Information\_restore{D828316C-1C6B-4A4C-BF12-2841A558EEB4}\RP233\A0094448.cpl

[DETECTION] Contains recognition pattern of the PHISH/FraudTool.MSAntivirus.X phishing file/email

[NOTE] The file was deleted!

 

 

End of the scan: mercredi 10 septembre 2008 14:46

Used time: 48:48 Minute(s)

 

The scan has been done completely.

 

4521 Scanning directories

143321 Files were scanned

24 viruses and/or unwanted programs were found

0 Files were classified as suspicious:

23 files were deleted

0 files were repaired

0 files were moved to quarantine

0 files were renamed

1 Files cannot be scanned

143296 Files not concerned

781 Archives were scanned

2 Warnings

23 Notes

Superludi Junior Member

Superludi

Posté(e)
  • Auteur
Posté(e)

Mon pc est déjà nettement plus fonctionnel. Il démarre au qurt de tour.

 

Dois=je encore effectuer l'une ou l'autre manip (suite au rapport antivir et java) ou puis je mettre résolu dans le titre?

 

Merci,

 

 

Ludo

angelique Devil Member !

angelique

Posté(e)
Posté(e)

tu as vu :P : C:\Program Files\eMule\Temp\001.part

 

bon , j'y reviens pas ; mais voila quoi !! merci Emule.

 

sinon c'est ok, tu pourras mettre resolu dans le titre du sujet.

 

nb: un scan régulier avec MBAM t'éviteras bien des soucis futurs, n'hesite pas à en faire un aujourd'hui , doit rester qlqs clés de registre , dossiers non actifs mais infectieux :P

http://www.malekal.com/tutorial_MalwareBytes_AntiMalware.php

 

@+

Superludi Junior Member

Superludi

Posté(e)
  • Auteur
Posté(e) (modifié)

Voilà, le scan MBAM est effectué. il m'a encore touvé une infection.

 

Je te remercie mille fois pour le temps consacré à mon problème.

 

Je tiens zébulon à l'oeil.... c'est extrêmement pratique. J'ai également une autre machine, qui fonctionne presque bien. Si j'ai un peu de temps, je vous sonderai une nouvelle fois.

Euh au fait, comment indique t on résolu?

 

 

Ludo

Modifié par Superludi

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...