[résolu]Analyse antivir !

roccobiwan · le 14 octobre 2005

Hello tout le monde , je suis passé y'a pas longtemps et tout allé bien dans mon rapport hijackthis ... mais avec les conseils de jack burton j'ai installé antivir qui m'a fait un rapport ou je semble infecté ... si quelqu'un pouvait m'aider à l'analyser ...

merci d'avance !

Creation date of the report file: vendredi 14 octobre 2005 18:48

AntiVir®/XP (2000 + NT) PersonalEdition Classic

Build 1068 of 21.09.2005

Mainprogram 6.32.00.07 of 16.09.2005

VDF file 6.32.0.81 (0) of 13.10.2005

This program is for PERSONAL USE only.

Any other use is PROHIBITED.

Informations regarding commercial versions of AntiVir may be obtained from:

www.hbedv.com.

Scanning for 231175 virus strains and unwanted programs.

Licensed for: AntiVir Personal Edition

Serial number: 0000149991-WURGE-0001

Please enter the workstation and

contact name with phone number in this form:

Name ___________________________________________

Street ___________________________________________

Town ___________________________________________

Phone/Fax ___________________________________________

Email ___________________________________________

Platform: Windows NT Workstation

Windows version: 5.1 Build 2600 (Service Pack 2)

Username: Propriétaire

Computername: KÉVIN

Processor: Pentium

Working memory: 785904 KB free

Version information:

AVWIN.DLL : 6.32.00.04 561192 16.08.2005 10:22:36

AVEWIN32.DLL : 6.32.0.6 832000 20.09.2005 12:50:22

AVGNT.EXE : 6.32.00.00 168039 29.07.2005 10:19:28

AVGUARD.EXE : 6.32.00.06 207912 07.09.2005 16:34:50

GUARDMSG.DLL : 6.30.00.02 94248 01.02.2005 11:24:10

AVGCMSG.DLL : 6.32.00.00 258165 29.07.2005 10:19:30

AVGNTDW.SYS : 6.31.00.01 32896 29.04.2005 08:07:16

AVPACK32.DLL : 6.31.01.07 327720 07.09.2005 09:08:28

AVGETVER.DLL : 6.30.00.00 24576 28.01.2005 18:10:20

AVSHLEXT.DLL : 6.30.00.01 40960 28.01.2005 18:10:22

AVSched32.EXE : 6.32.00.01 110632 20.09.2005 14:16:24

AVSched32.DLL : 6.30.00.00 122880 01.02.2005 11:24:10

AVREG.DLL : 6.31.00.05 41000 07.09.2005 16:34:50

AVRep.DLL : 6.32.00.80 1421352 13.10.2005 23:11:44

INETUPD.EXE : 6.32.00.05 254011 16.08.2005 16:46:08

INETUPD.DLL : 6.32.00.05 143360 16.08.2005 16:46:08

CTL3D32.DLL : 2.31.000 27136 02.08.2003 16:31:22

MFC42.DLL : 6.02.4131.0 1028096 20.08.2004 01:09:30

MSVCRT.DLL : 7.0.2600.2180 (xpsp_sp2_rtm.0408

MSVCRT.DLL : 7.0.2600.2180 343040 20.08.2004 01:09:34

CTL3DV2.DLL : No information

Configuration file:

Name of configuration file: C:\Program Files\AVPersonal\AVWIN.INI

Name of report file: C:\Program Files\AVPersonal\LOGFILES\AVWIN.LOG

Start path: C:\Program Files\AVPersonal

Command line:

Start mode: unknown

Mode of report file:

[ ] Do not create report

[X] Overwrite report

[ ] Append new report

Data in report file:

[X] Infected files

[ ] Infected files with paths

[ ] All scanned files

[ ] Full information

Abridge report file:

[ ] Abridge report file

Warnings in report:

[X] Access denied/file locked

[X] Wrong file size in directory

[X] Wrong creation time in directory

[ ] COM file is too large

[X] Invalid start address

[X] Invalid EXE header

[X] Possibly damaged

Summary report:

[X] Create summary report

Output file: AVWIN.ACT

Maximum number of entries: 100

Where to search:

[X] Memory

[X] Boot record of selected drives

[ ] Report unknown boot sectors

[X] All files

[ ] Program files

Response in case of a detection:

[X] Repair with prompt

[ ] Repair without prompt

[ ] Delete with prompt

[ ] Delete without prompt

[ ] Write in report file only

[X] Acoustic alarm

Response in case of destroyed files:

[X] Delete with prompt

[ ] Delete without prompt

[ ] Ignore

Response in case of destroyed files:

[X] No change

[ ] Current system time

[ ] Correct date

Drag&drop settings:

[X] Scan subdirectories

Profile settings:

[X] Scan subdirectories

Archive options

[X] Search archive

[X] Archive types to leave out

1000 1001 1002

Miscellaneous options:

Temporary path: %TEMP% -> C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp

[X] Overwrite infected files

[ ] Detect idle time

[X] Allow interruptions of scan

[X] Load AVWin®/NT Guard on System start

General settings:

[X] Save options on exiting AntiVir

Priority: medium

Drives:

A: Floppy drive

C: Hard disk

D: Hard disk

E: CD-ROM

F: CD-ROM

G: Floppy drive

H: Floppy drive

I: Floppy drive

J: Floppy drive

Start of scan: vendredi 14 octobre 2005 18:48

Memory test OK

Master boot record of hard disk HD0 OK

Master boot record of hard disk HD1

The record could not be read!

Error code: 0x0015

Master boot record of hard disk HD2

The record could not be read!

Error code: 0x0015

Master boot record of hard disk HD3

The record could not be read!

Error code: 0x0015

Master boot record of hard disk HD4

The record could not be read!

Error code: 0x0015

Boot record of drive A:

The record could not be read!

Error code: 0x0015

Boot record of drive C: OK

Boot record of drive D: OK

Boot record of drive G:

The record could not be read!

Error code: 0x0015

Boot record of drive H:

The record could not be read!

Error code: 0x0015

Boot record of drive I:

The record could not be read!

Error code: 0x0015

Boot record of drive J:

The record could not be read!

Error code: 0x0015

C:\

hiberfil.sys

Access denied! Error during file opening!

Error code: 0x000D

WARNING! Access error/file locked!

pagefile.sys

Access denied! Error during file opening!

This is a Windows swap file. This file is locked by Windows.

Error code: 0x000D

WARNING! Access error/file locked!

C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys

01dc75f23112e2b4a726d4fa5b3d22d0_a90e10c3-e8b5-43b4-a304-8652e7848002

Access denied! Error during file opening!

Error code: 0x000D

WARNING! Access error/file locked!

3266f030bf95028315ed7b1d2a5a6904_a90e10c3-e8b5-43b4-a304-8652e7848002

Access denied! Error during file opening!

Error code: 0x000D

WARNING! Access error/file locked!

357d9df503f226b08d90483bfbd44977_a90e10c3-e8b5-43b4-a304-8652e7848002

Access denied! Error during file opening!

Error code: 0x000D

WARNING! Access error/file locked!

493349eafb53e62ad82ab78516148b35_a90e10c3-e8b5-43b4-a304-8652e7848002

Access denied! Error during file opening!

Error code: 0x000D

WARNING! Access error/file locked!

8323eb6eaa1964ee356e446e8b954885_a90e10c3-e8b5-43b4-a304-8652e7848002

Access denied! Error during file opening!

Error code: 0x000D

WARNING! Access error/file locked!

ffe3d32ca0f42ebcef511a294697ac68_a90e10c3-e8b5-43b4-a304-8652e7848002

Access denied! Error during file opening!

Error code: 0x000D

WARNING! Access error/file locked!

C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery

BackWeblite.zip

ArchiveType: ZIP