RESOLU MicroAV s'ouvre tout le temps

[poutoupoute]

lol

si tu veux quand j'allume mon ordi et que je vais dans n'importe laquelle de mes session , des fichier bloc note s'ouvre (qui viennent de mon ancienne imprimante) et impossible de les trouvez --' sa fait bien un ans que je les cherches mdrrrr

[Apollo]

Un Poltergeist

 

Fais toujours une analyse avec Antivir et poste le résultat stp.

[poutoupoute]

un quoi mdr lol

oki je vais une analyse

[Apollo]

Va p'tète falloir exorciser ton ordi...

 

http://fr.wikipedia.org/wiki/Poltergeist

 

Si tu veux frémir: http://fr.wikipedia.org/wiki/Poltergeist_(film)

 

++

[poutoupoute]

lol pas pour moi des trucs comme sa le soir xD j'ai même peur de jurasikparc alros sa non merci xD

 

dit c'est que sa prend du temps lol je suis qu'a 18%

ta de la chance que je vais plus a l'école et que je travaille pas non plus xD

attendons attendons, entouca il me met déjà 2 warnings mdrrr

 

heuuu... tu connait un bon exorciste? xD

[Apollo]

Ouaip, mon mentor.

 

 

@++

[poutoupoute]

lol

allez sa en est a 60%

[poutoupoute]

voilà enfin fini xD

 

 

 

Avira AntiVir Personal

Report file date: mardi 14 octobre 2008 22:46

 

Scanning for 1684294 virus strains and unwanted programs.

 

Licensed to: Avira AntiVir PersonalEdition Classic

Serial number: 0000149996-ADJIE-0001

Platform: Windows XP

Windows version: (Service Pack 1) [5.1.2600]

Boot mode: Normally booted

Username: SYSTEM

Computer name: JULIETTE-E10L7C

 

Version information:

BUILD.DAT : 8.1.0.331 16934 Bytes 12/08/2008 11:46:00

AVSCAN.EXE : 8.1.4.7 315649 Bytes 26/06/2008 08:57:54

AVSCAN.DLL : 8.1.4.0 40705 Bytes 26/05/2008 07:56:42

LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 12:44:20

LUKERES.DLL : 8.1.4.0 12033 Bytes 26/05/2008 07:58:54

ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 10:33:34

ANTIVIR1.VDF : 7.0.5.1 8182784 Bytes 24/06/2008 13:54:16

ANTIVIR2.VDF : 7.0.7.12 4066816 Bytes 08/10/2008 20:12:42

ANTIVIR3.VDF : 7.0.7.40 214016 Bytes 14/10/2008 20:12:42

Engineversion : 8.1.1.35

AEVDF.DLL : 8.1.0.5 102772 Bytes 25/02/2008 09:58:22

AESCRIPT.DLL : 8.1.0.76 319867 Bytes 14/10/2008 20:12:52

AESCN.DLL : 8.1.0.23 119156 Bytes 10/07/2008 12:44:50

AERDL.DLL : 8.1.1.2 438644 Bytes 14/10/2008 20:12:50

AEPACK.DLL : 8.1.2.3 364918 Bytes 14/10/2008 20:12:50

AEOFFICE.DLL : 8.1.0.25 196986 Bytes 14/10/2008 20:12:48

AEHEUR.DLL : 8.1.0.59 1438071 Bytes 14/10/2008 20:12:48

AEHELP.DLL : 8.1.0.15 115063 Bytes 10/07/2008 12:44:50

AEGEN.DLL : 8.1.0.36 315764 Bytes 14/10/2008 20:12:46

AEEMU.DLL : 8.1.0.7 430452 Bytes 31/07/2008 08:33:22

AECORE.DLL : 8.1.1.11 172406 Bytes 14/10/2008 20:12:44

AEBB.DLL : 8.1.0.1 53617 Bytes 10/07/2008 12:44:50

AVWINLL.DLL : 1.0.0.12 15105 Bytes 09/07/2008 08:40:06

AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 09:28:02

AVREP.DLL : 8.0.0.2 98344 Bytes 14/10/2008 20:12:44

AVREG.DLL : 8.0.0.1 33537 Bytes 09/05/2008 11:26:42

AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:24

AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 12:27:50

SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:04

SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 12:49:42

NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:12

RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 12/06/2008 13:48:08

RCTEXT.DLL : 8.0.52.0 86273 Bytes 27/06/2008 13:34:38

 

Configuration settings for the scan:

Jobname..........................: Complete system scan

Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp

Logging..........................: low

Primary action...................: interactive

Secondary action.................: ignore

Scan master boot sector..........: on

Scan boot sector.................: on

Boot sectors.....................: C:, D:,

Process scan.....................: on

Scan registry....................: on

Search for rootkits..............: off

Scan all files...................: Intelligent file selection

Scan archives....................: on

Recursion depth..................: 20

Smart extensions.................: on

Macro heuristic..................: on

File heuristic...................: medium

 

Start of the scan: mardi 14 octobre 2008 22:46

 

The scan of running processes will be started

Scan process 'avscan.exe' - '1' Module(s) have been scanned

Scan process 'avcenter.exe' - '1' Module(s) have been scanned

Scan process 'epmworker.exe' - '1' Module(s) have been scanned

Scan process 'Generic.exe' - '1' Module(s) have been scanned

Scan process 'jucheck.exe' - '1' Module(s) have been scanned

Scan process 'firefox.exe' - '1' Module(s) have been scanned

Scan process 'avgnt.exe' - '1' Module(s) have been scanned

Scan process 'wuauclt.exe' - '1' Module(s) have been scanned

Scan process 'ENJOY Plus!.exe' - '1' Module(s) have been scanned

Scan process 'WINAMPA.EXE' - '1' Module(s) have been scanned

Scan process 'Application Launcher.exe' - '1' Module(s) have been scanned

Scan process 'JUSCHED.EXE' - '1' Module(s) have been scanned

Scan process 'ZLCLIENT.EXE' - '0' Module(s) have been scanned

Scan process 'WZCSLDR2.EXE' - '1' Module(s) have been scanned

Scan process 'AirPlusCFG.exe' - '1' Module(s) have been scanned

Scan process 'EXPLORER.EXE' - '1' Module(s) have been scanned

Scan process 'VSMON.EXE' - '0' Module(s) have been scanned

Scan process 'WDFMGR.EXE' - '1' Module(s) have been scanned

Scan process 'StkSrv2k.exe' - '1' Module(s) have been scanned

Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned

Scan process 'avguard.exe' - '1' Module(s) have been scanned

Scan process 'sched.exe' - '1' Module(s) have been scanned

Scan process 'SPOOLSV.EXE' - '1' Module(s) have been scanned

Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned

Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned

Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned

Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned

Scan process 'LSASS.EXE' - '1' Module(s) have been scanned

Scan process 'SERVICES.EXE' - '1' Module(s) have been scanned

Scan process 'WINLOGON.EXE' - '1' Module(s) have been scanned

Scan process 'CSRSS.EXE' - '1' Module(s) have been scanned

Scan process 'SMSS.EXE' - '1' Module(s) have been scanned

30 processes with 30 modules were scanned

 

Starting master boot sector scan:

Master boot sector HD0

[iNFO] No virus was found!

 

Start scanning boot sectors:

Boot sector 'C:\'

[iNFO] No virus was found!

Boot sector 'D:\'

[iNFO] No virus was found!

 

Starting to scan the registry.

The registry was scanned ( '47' files ).

 

 

Starting the file scan:

 

Begin scan in 'C:\'

C:\pagefile.sys

[WARNING] The file could not be opened!

C:\WINDOWS\Temp\ZLT013da.TMP

[0] Archive type: CAB (Microsoft)

--> wsus3setup.cat

[WARNING] No further files can be extracted from this archive. The archive will be closed

C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057230.exe

[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

[NOTE] The file was deleted!

C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057231.exe

[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

[NOTE] The file was moved to '49251292.qua'!

C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057232.exe

[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

[NOTE] The file was moved to '49251294.qua'!

C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057233.exe

[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

[NOTE] The file was moved to '49251296.qua'!

C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057234.exe

[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

[NOTE] The file was moved to '492512b7.qua'!

C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057239.exe

[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

[NOTE] The file was moved to '492512b9.qua'!

C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057240.exe

[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

[NOTE] The file was moved to '492512bd.qua'!

C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057241.exe

[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

[NOTE] The file was moved to '492512c0.qua'!

C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057242.exe

[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

[WARNING] The file was ignored!

C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057243.exe

[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

[NOTE] The file was deleted!

C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057247.exe

[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

[NOTE] The file was moved to '492512d1.qua'!

C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057248.exe

[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

[NOTE] The file was moved to '492512d4.qua'!

C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057249.exe

[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

[NOTE] The file was moved to '492512d5.qua'!

C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057250.exe

[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

[NOTE] The file was moved to '492512d7.qua'!

C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057251.exe

[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

[NOTE] The file was moved to '492512d9.qua'!

C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057252.exe

[0] Archive type: RAR SFX (self extracting)

--> MicroAV.cpl

[DETECTION] Is the TR/FakeAV.BC.28 Trojan

--> MicroAV.exe

[DETECTION] Contains recognition pattern of the PHISH/Fraud.SpywarePreventer.AB phishing file/email

[DETECTION] Contains recognition pattern of the DR/Fraud.UltimateAntivirus.CV dropper

[NOTE] The file was moved to '492512dd.qua'!

C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057253.exe

[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

[NOTE] The file was moved to '492512df.qua'!

C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057278.exe

[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

[NOTE] The file was moved to '492512e2.qua'!

Begin scan in 'D:\' <SYSTEM_SAV>

 

 

End of the scan: mardi 14 octobre 2008 23:49

Used time: 1:03:15 Hour(s)

 

The scan has been done completely.

 

4321 Scanning directories

168384 Files were scanned

20 viruses and/or unwanted programs were found

0 Files were classified as suspicious:

2 files were deleted

0 files were repaired

15 files were moved to quarantine

0 files were renamed

1 Files cannot be scanned

168363 Files not concerned

1391 Archives were scanned

3 Warnings

17 Notes

[Apollo]

Mouarf, sacré Avast va

 

Antivir

 

Search for rootkits..............: off

 

Tu as oublié d'activer ce module très important.

 

Fais un clic droit sur l'icône d'Antivir dans la barre des tâches et choisis Configure Antivir

Dans la fenêtre, coche la case Expert Mode

Juste en dessous, clique sur le menu Scanner

Sur le panneau de droite, coche la case Search for Rootkits before scan

 

 

 

On va virer les points de restauration car il est possible qu'il s'y trouve encore des infections.

 

Vista: désactiver la restauration du sytème

 

Réactive-la ensuite, un nouveau point de restauration sain sera créé.

 

@++

[poutoupoute]

heuu je suis pas avec vista xD

je suis avec XP

sinon c'est cocher

Modifié le 14 octobre 2008 par poutoupoute