Se connecter avec
S'enregistrer | Connectez-vous
Votre question

plusieurs virus + pubs intempestives

Dernière réponse : dans Sécurité et virus
Partagez
4 Novembre 2008 17:57:38

Bonjour;

Je fais appel a vous car deuis quelques jours, mon ordi m'envoie très très souvent (parfois toutes les 5min!!) des fenêtres disant que j'ai un virus et me proposant plusieurs options : soit le mettre en quarante, le supprimer etc..
J'ai aussi beaucoup de pubs qui apparaissent.

Merci de votre aide
4 Novembre 2008 18:17:32

Bonsoir Laura,
Apparemment, ton antivirus n'arrive pas à le supprimer s'il revient. Va falloir faire un peu le ménage je pense et enlever toutes les petites saloperies que t'as pu récupérer sur Internet. Pour cela :
- télécharge et installe l'antivirus Antivir. Mets-le à jour et fais une analyse de ton ordinateur
- télécharge et installe SpyBot Search & Destroy. Lance-le et supprime les pubs intempestives.
- vérifies que le pare-feu windows est activé. Pour cela, va dans "Panneau de configuration > Connexion et Internet > Pare-feu
- enfin, installes régulièrement les mises à jour windows (windows update) pour que ton ordinateur soit moins vulnérable
Voilà, si tu fais tout ça, tu devrais ne plus avoir de problème et avoir un système un peu plus sûr.
@ +
4 Novembre 2008 18:21:06

Je vous poste un rapport Hijackthis :


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:18:49, on 04/11/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal

Running processes:
H:\WINDOWS\System32\smss.exe
H:\WINDOWS\system32\winlogon.exe
H:\WINDOWS\system32\services.exe
H:\WINDOWS\system32\lsass.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\System32\svchost.exe
H:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
H:\WINDOWS\system32\spoolsv.exe
H:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
H:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
H:\WINDOWS\system32\nvsvc32.exe
H:\WINDOWS\system32\PnkBstrA.exe
H:\WINDOWS\system32\PSIService.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\Explorer.EXE
H:\WINDOWS\SOUNDMAN.EXE
H:\WINDOWS\system32\RUNDLL32.EXE
H:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
H:\WINDOWS\system32\LVCOMSX.EXE
H:\Program Files\Logitech\Video\LogiTray.exe
H:\Program Files\Winamp\winampa.exe
H:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
H:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe
H:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
H:\Program Files\HP\HP Software Update\HPWuSchd2.exe
H:\Program Files\MSN Messenger\MsnMsgr.Exe
H:\Program Files\Skype\Phone\Skype.exe
H:\Program Files\Picasa2\PicasaMediaDetector.exe
H:\WINDOWS\system32\ctfmon.exe
H:\WINDOWS\System32\svchost.exe
H:\Program Files\Logitech\Video\FxSvr2.exe
H:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
H:\Program Files\Eurobarre\eb.exe
H:\Program Files\OpenOffice.org 2.2\program\soffice.exe
H:\Program Files\OpenOffice.org 2.2\program\soffice.BIN
H:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
H:\Program Files\Skype\Plugin Manager\skypePM.exe
H:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
H:\Documents and Settings\Laura\Bureau\utorrent.exe
H:\WINDOWS\system32\winlogon.exe
H:\Program Files\MSN Messenger\usnsvc.exe
H:\Program Files\Internet Explorer\iexplore.exe
H:\Documents and Settings\Laura\Bureau\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - H:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: adssite - {6875ec88-8d84-a805-1996-112d6870c14f} - H:\WINDOWS\system32\nsj276.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - H:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: ads_optimizer - {9C8A568E-4201-478a-8536-526CF371D2E2} - H:\WINDOWS\system32\.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - h:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - H:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - h:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE H:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE H:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "H:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [LVCOMSX] H:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoTray] H:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [WinampAgent] "H:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [H2O] H:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
O4 - HKLM\..\Run: [SMSTray] H:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe
O4 - HKLM\..\Run: [avgnt] "H:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "H:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [HP Software Update] H:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Corel Photo Downloader] "H:\Program Files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe" -startup
O4 - HKCU\..\Run: [MsnMsgr] "H:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Skype] "H:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "H:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [Picasa Media Detector] H:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKCU\..\Run: [ctfmon.exe] H:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] H:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] H:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-57989841-1035525444-725345543-1006\..\Run: [msnmsgr] "H:\Program Files\MSN Messenger\msnmsgr.exe" /background (User 'Antoine')
O4 - HKUS\S-1-5-21-57989841-1035525444-725345543-1006\..\Run: [eyjmcbv] h:\documents and settings\antoine\local settings\application data\eyjmcbv.exe eyjmcbv (User 'Antoine')
O4 - HKUS\S-1-5-21-57989841-1035525444-725345543-1006\..\Run: [Orb] "H:\Program Files\Winamp Remote\bin\OrbTray.exe" /background (User 'Antoine')
O4 - HKUS\S-1-5-21-57989841-1035525444-725345543-1006\..\Run: [ctfmon.exe] H:\WINDOWS\system32\ctfmon.exe (User 'Antoine')
O4 - HKUS\S-1-5-21-57989841-1035525444-725345543-1006\..\Run: [ammwuqq] "h:\documents and settings\antoine\local settings\application data\ammwuqq.exe" ammwuqq (User 'Antoine')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] H:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] H:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - S-1-5-21-57989841-1035525444-725345543-1006 Startup: OpenOffice.org 2.2.lnk = H:\Program Files\OpenOffice.org 2.2\program\quickstart.exe (User 'Antoine')
O4 - S-1-5-21-57989841-1035525444-725345543-1006 Startup: SM.lnk = H:\Program Files\SM\skymessnet.exe (User 'Antoine')
O4 - Startup: Eurobarre.lnk = H:\Program Files\Eurobarre\eb.exe
O4 - Startup: OpenOffice.org 2.2.lnk = H:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = H:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = H:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - H:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - H:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - H:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - H:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.ca...
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://go.divx.com/plugin/DivXBrowserPlugin.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} - http://messenger.zone.msn.com/binary/ZIntro.cab56649.ca...
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} - http://messenger.zone.msn.com/binary/MineSweeper.cab569...
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - H:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - H:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - H:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - H:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - H:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - H:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - H:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - H:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - H:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - H:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - H:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: ProtexisLicensing - Unknown owner - H:\WINDOWS\system32\PSIService.exe

--
End of file - 9552 bytes
Contenus similaires
4 Novembre 2008 18:22:16

J'ai déja Antivir ;) 
Je vais faire un scan.
4 Novembre 2008 20:45:24

Voici le rapport du scan avec antivir



Avira AntiVir Personal
Report file date: mardi 4 novembre 2008 18:29

Scanning for 1006332 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Boot mode: Normally booted
Username: SYSTEM
Computer name: AMD

Version information:
BUILD.DAT : 8.2.0.334 16933 Bytes 16/10/2008 14:55:00
AVSCAN.EXE : 8.1.4.7 315649 Bytes 18/07/2008 10:32:51
AVSCAN.DLL : 8.1.4.0 40705 Bytes 18/07/2008 10:32:51
LUKE.DLL : 8.1.4.5 164097 Bytes 18/07/2008 10:32:52
LUKERES.DLL : 8.1.4.0 12033 Bytes 18/07/2008 10:32:52
ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 10:57:33
ANTIVIR1.VDF : 7.1.0.21 130560 Bytes 31/10/2008 10:49:33
ANTIVIR2.VDF : 7.1.0.22 2048 Bytes 31/10/2008 10:49:33
ANTIVIR3.VDF : 7.1.0.33 83456 Bytes 04/11/2008 12:01:11
Engineversion : 8.2.0.10
AEVDF.DLL : 8.1.0.6 102772 Bytes 15/10/2008 16:53:52
AESCRIPT.DLL : 8.1.1.9 319867 Bytes 16/10/2008 16:50:41
AESCN.DLL : 8.1.1.3 123252 Bytes 15/10/2008 16:53:49
AERDL.DLL : 8.1.1.2 438644 Bytes 18/09/2008 18:08:54
AEPACK.DLL : 8.1.2.4 369014 Bytes 15/10/2008 16:53:47
AEOFFICE.DLL : 8.1.0.29 196988 Bytes 23/10/2008 17:19:29
AEHEUR.DLL : 8.1.0.63 1479032 Bytes 23/10/2008 17:19:28
AEHELP.DLL : 8.1.1.2 115062 Bytes 15/10/2008 16:53:43
AEGEN.DLL : 8.1.0.42 319861 Bytes 24/10/2008 17:19:53
AEEMU.DLL : 8.1.0.9 393588 Bytes 15/10/2008 16:53:40
AECORE.DLL : 8.1.2.9 172407 Bytes 31/10/2008 10:49:35
AEBB.DLL : 8.1.0.3 53618 Bytes 15/10/2008 16:53:37
AVWINLL.DLL : 1.0.0.12 15105 Bytes 18/07/2008 10:32:51
AVPREF.DLL : 8.0.2.0 38657 Bytes 18/07/2008 10:32:51
AVREP.DLL : 8.0.0.2 98344 Bytes 01/08/2008 08:29:22
AVREG.DLL : 8.0.0.1 33537 Bytes 18/07/2008 10:32:51
AVARKT.DLL : 1.0.0.23 307457 Bytes 24/04/2008 17:56:55
AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 18/07/2008 10:32:51
SQLITE3.DLL : 3.3.17.1 339968 Bytes 24/04/2008 17:56:56
SMTPLIB.DLL : 1.2.0.23 28929 Bytes 18/07/2008 10:32:52
NETNT.DLL : 8.0.0.1 7937 Bytes 24/04/2008 17:56:56
RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 18/07/2008 10:32:47
RCTEXT.DLL : 8.0.52.0 86273 Bytes 18/07/2008 10:32:47

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: h:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: H:,
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: mardi 4 novembre 2008 18:29

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'iexplore.exe' - '1' Module(s) have been scanned
Scan process 'iexplore.exe' - '1' Module(s) have been scanned
Scan process 'livecall.exe' - '1' Module(s) have been scanned
Scan process 'usnsvc.exe' - '1' Module(s) have been scanned
Scan process 'hpqste08.exe' - '1' Module(s) have been scanned
Scan process 'hpqimzone.exe' - '1' Module(s) have been scanned
Scan process 'soffice.bin' - '1' Module(s) have been scanned
Scan process 'soffice.exe' - '1' Module(s) have been scanned
Scan process 'FxSvr2.exe' - '1' Module(s) have been scanned
Scan process 'hpqtra08.exe' - '1' Module(s) have been scanned
Scan process 'ammwuqq.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'OrbTray.exe' - '1' Module(s) have been scanned
Scan process 'msmsgs.exe' - '1' Module(s) have been scanned
Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
Scan process 'hpwuSchd2.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'SMSTray.exe' - '1' Module(s) have been scanned
Scan process 'cledx.exe' - '1' Module(s) have been scanned
Scan process 'Winampa.exe' - '1' Module(s) have been scanned
Scan process 'LogiTray.exe' - '1' Module(s) have been scanned
Scan process 'LVCOMSX.EXE' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'soundman.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'utorrent.exe' - '1' Module(s) have been scanned
Scan process 'hpqste08.exe' - '1' Module(s) have been scanned
Scan process 'skypePM.exe' - '1' Module(s) have been scanned
Scan process 'hpqimzone.exe' - '1' Module(s) have been scanned
Scan process 'soffice.bin' - '1' Module(s) have been scanned
Scan process 'soffice.exe' - '1' Module(s) have been scanned
Scan process 'eb.exe' - '1' Module(s) have been scanned
Scan process 'hpqtra08.exe' - '1' Module(s) have been scanned
Scan process 'FxSvr2.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'PicasaMediaDetector.exe' - '1' Module(s) have been scanned
Scan process 'Skype.exe' - '1' Module(s) have been scanned
Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
Scan process 'hpwuSchd2.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'SMSTray.exe' - '1' Module(s) have been scanned
Scan process 'cledx.exe' - '1' Module(s) have been scanned
Scan process 'Winampa.exe' - '1' Module(s) have been scanned
Scan process 'LogiTray.exe' - '1' Module(s) have been scanned
Scan process 'LVCOMSX.EXE' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'rundll32.exe' - '1' Module(s) have been scanned
Scan process 'soundman.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'wdfmgr.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'PSIService.exe' - '1' Module(s) have been scanned
Scan process 'PnkBstrA.exe' - '1' Module(s) have been scanned
Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'aawservice.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
74 processes with 74 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!
Master boot sector HD1
[INFO] No virus was found!
[WARNING] System error [21]: Le périphérique n'est pas prêt.
Master boot sector HD2
[INFO] No virus was found!
[WARNING] System error [21]: Le périphérique n'est pas prêt.
Master boot sector HD3
[INFO] No virus was found!
[WARNING] System error [21]: Le périphérique n'est pas prêt.
Master boot sector HD4
[INFO] No virus was found!
[WARNING] System error [21]: Le périphérique n'est pas prêt.

Start scanning boot sectors:
Boot sector 'H:\'
[INFO] No virus was found!

Starting to scan the registry.
The registry was scanned ( '57' files ).


Starting the file scan:

Begin scan in 'H:\'
H:\pagefile.sys
[WARNING] The file could not be opened!
H:\Documents and Settings\Laura\Mes documents\Ma musique\dashuri pa fund blero.mp3
[DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
[NOTE] The file was moved to '49839b6d.qua'!
H:\payloads\AdobeBridge2All\AdobeBridge2All1.cab
[0] Archive type: CAB (Microsoft)
--> _2_f4a9f0f3d6fd7b2390e9bb2873d84ec6
[WARNING] No further files can be extracted from this archive. The archive will be closed
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP352\A0118239.dll
[DETECTION] Is the TR/BHO.Gen Trojan
[NOTE] The file was moved to '4941a219.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP353\A0118301.dll
[DETECTION] Is the TR/BHO.Gen Trojan
[NOTE] The file was moved to '4941a222.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP356\A0119467.dll
[DETECTION] Is the TR/BHO.Gen Trojan
[NOTE] The file was moved to '4941a22c.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP357\A0120555.dll
[DETECTION] Is the TR/BHO.Gen Trojan
[NOTE] The file was moved to '4941a231.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP358\A0121634.dll
[DETECTION] Is the TR/BHO.Gen Trojan
[NOTE] The file was moved to '4941a239.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP359\A0121734.dll
[DETECTION] Is the TR/BHO.Gen Trojan
[NOTE] The file was moved to '4941a240.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP360\A0122768.dll
[DETECTION] Is the TR/BHO.Gen Trojan
[NOTE] The file was moved to '4941a245.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP363\A0123117.dll
[DETECTION] Is the TR/BHO.Gen Trojan
[NOTE] The file was moved to '4941a252.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP363\A0124196.dll
[DETECTION] Is the TR/BHO.Gen Trojan
[NOTE] The file was moved to '4941a256.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP364\A0124277.dll
[DETECTION] Is the TR/BHO.Gen Trojan
[NOTE] The file was moved to '4941a25c.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP365\A0124435.dll
[DETECTION] Is the TR/BHO.Gen Trojan
[NOTE] The file was moved to '4941a264.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP366\A0125528.dll
[DETECTION] Is the TR/BHO.Gen Trojan
[NOTE] The file was moved to '4941a26b.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP367\A0125592.dll
[DETECTION] Is the TR/BHO.Gen Trojan
[NOTE] The file was moved to '4941a26f.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP368\A0126737.dll
[DETECTION] Is the TR/BHO.Gen Trojan
[NOTE] The file was moved to '4941a279.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP371\A0127929.dll
[DETECTION] Is the TR/BHO.Gen Trojan
[NOTE] The file was moved to '4941a285.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP373\A0129111.dll
[DETECTION] Is the TR/BHO.Gen Trojan
[NOTE] The file was moved to '4941a28e.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP374\A0129179.dll
[DETECTION] Is the TR/BHO.Gen Trojan
[NOTE] The file was moved to '4941a295.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP375\A0129188.dll
[DETECTION] Is the TR/BHO.Gen Trojan
[NOTE] The file was moved to '4941a298.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP375\A0129270.dll
[DETECTION] Is the TR/BHO.Gen Trojan
[NOTE] The file was moved to '4941a29c.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP376\A0129282.dll
[DETECTION] Is the TR/BHO.Gen Trojan
[NOTE] The file was moved to '4941a2a1.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP376\A0129319.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE] The file was moved to '4941a2a4.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP376\A0129322.dll
[DETECTION] Is the TR/BHO.Gen Trojan
[NOTE] The file was moved to '4941a2a6.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP376\A0129351.dll
[DETECTION] Is the TR/BHO.Gen Trojan
[NOTE] The file was moved to '4941a2a9.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP377\A0129427.dll
[DETECTION] Is the TR/BHO.Gen Trojan
[NOTE] The file was moved to '4941a2ad.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP377\A0129439.dll
[DETECTION] Is the TR/BHO.Gen Trojan
[NOTE] The file was moved to '4941a2af.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP378\A0130490.dll
[DETECTION] Is the TR/BHO.Gen Trojan
[NOTE] The file was moved to '4941a2b6.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP378\A0130524.dll
[DETECTION] Is the TR/BHO.Gen Trojan
[NOTE] The file was moved to '4941a2b9.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP379\A0130536.dll
[DETECTION] Is the TR/BHO.Gen Trojan
[NOTE] The file was moved to '4941a2be.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP383\A0131695.dll
[DETECTION] Is the TR/BHO.Gen Trojan
[NOTE] The file was moved to '4941a2c9.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP383\A0131753.dll
[DETECTION] Is the TR/BHO.Gen Trojan
[NOTE] The file was moved to '4941a2cd.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP384\A0131857.dll
[DETECTION] Is the TR/BHO.Gen Trojan
[NOTE] The file was moved to '4941a2d3.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP385\A0131888.dll
[DETECTION] Is the TR/BHO.Gen Trojan
[NOTE] The file was moved to '4941a2d6.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP386\A0131931.dll
[DETECTION] Is the TR/BHO.Gen Trojan
[NOTE] The file was moved to '4941a2db.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP389\A0133021.dll
[DETECTION] Is the TR/BHO.Gen Trojan
[NOTE] The file was moved to '4941a305.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP389\A0133054.dll
[DETECTION] Is the TR/BHO.Gen Trojan
[NOTE] The file was moved to '4941a307.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP399\A0135796.dll
[DETECTION] Is the TR/Vapsup.lsp Trojan
[NOTE] The file was moved to '4941a331.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP399\A0135798.exe
[DETECTION] Is the TR/Agent.26624 Trojan
[NOTE] The file was moved to '4941a333.qua'!
H:\System Volume Information\_restore{484010E4-5C16-47AD-A2B0-52C751B1B338}\RP399\A0135799.exe
[DETECTION] Is the TR/Agent.26624 Trojan
[NOTE] The file was moved to '4941a335.qua'!


End of the scan: mardi 4 novembre 2008 20:38
Used time: 2:08:52 Hour(s)

The scan has been done completely.

9057 Scanning directories
441583 Files were scanned
39 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
39 files were moved to quarantine
0 files were renamed
1 Files cannot be scanned
441543 Files not concerned
3577 Archives were scanned
6 Warnings
39 Notes






Concernant spybot, 36 problèmes ont été detectés.
4 Novembre 2008 22:21:42

D'après le scan d'antivir, t'as 39 virus ou erreurs. T'ajoutes à ça les problèmes sous SpyBot.... T'as plus qu'à faire le message :) 
Tom's guide dans le monde
  • Allemagne
  • Italie
  • Irlande
  • Royaume Uni
  • Etats Unis
Suivre Tom's Guide
Inscrivez-vous à la Newsletter