Se connecter avec
S'enregistrer | Connectez-vous

[resolu] problem 14 virus win32 ...

Dernière réponse : dans Sécurité

bonjour
hier j ai fait une analise anti virus (avast) et il ma trouver 14 virus.
j ai fait un screen de chaque alerte pour me rapeler des nom.
-Win32: Peerad[trj] cheval de troie
-Win32: Peerad[trj] cheval de troie
-Win32: Virut Virus/ver
-Win32: Agent-AWB[adw] Adware
-Win32: virut Virus/ver
-Win32: Agent-AWB[adw] Adware
-Win32: Peerad[trj] cheval de troie
-Win32: Peerad[trj] cheval de troie
-Win32: Peerad[trj] cheval de troie
-Win32: Peerad[trj] cheval de troie
-Win32: Peerad[trj] cheval de troie
-Win32: Peerad[trj] cheval de troie
-Win32: Peerad[trj] cheval de troie
-Win32: Peerad[trj] cheval de troie

voila les virus que j ai.je les et suprimer avec avast mais je voudrer savoir si il on etait vraiment suprime.
comment je peut fair?
merci d avance

je vien de fair une analise avec hijackthis je vous met le copier coller:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:32:33, on 28/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\VM303_STI.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\eMule\emule.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.fr/spbasic.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [BigDog303] C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Steam] C:\Valve\Steam\Steam.exe -silent
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.orange.fr (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin...
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Cont...
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common...
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://3dlifeplayer.dl.3dvia.com/player/install/install...
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

--
End of file - 4575 bytes


je ny comprend rien si quelqun peu m aider ???
merci

Autres pages sur : resolu problem virus win32

Lassé par la pub ? Créez un compte

salut
alor jai instaler antivir hier soir apres avoir enleve avast jai fait une analise et depuit je ne peut plus rien fair avec le pc.des que je veu ouvrir internet explorer sa ouvre la page mais elle reste blanche msn pareil sa commence a se conecter et sa se bloc... la je suis sur le deusieme pc.
je laisse le resulta de lanalise antivir
Report file date: dimanche 28 octobre 2007 23:11


Jobname: 'Local Drives'

Scanning for 310422 virus strains and unwanted programs.

Licensed to: Marco Dewriu
Serialnumber: 1100058952-PEPWE-0001
Platform: Windows XP
Windowsversion: (Service Pack 2) [5.1.2600]
Username: jonathan
Computername: SN201328760007

Versioninformations:
AVSCAN.EXE : 7.0.0.21 528424 31/01/2006 10:54:48
AVSCAN.DLL : 7.0.0.21 42536 31/01/2006 10:54:48
LUKE.DLL : 7.0.0.21 114728 31/01/2006 10:54:48
LUKERES.DLL : 7.0.0.21 27688 31/01/2006 10:54:48
ANTIVIR0.VDF : 6.32.0.60 4323840 06/12/2005 10:47:34
ANTIVIR1.VDF : 6.33.0.207 1160192 09/02/2006 15:53:42
ANTIVIR2.VDF : 6.33.0.220 50688 09/02/2006 15:53:42
ANTIVIR3.VDF : 6.33.0.224 7168 09/02/2006 15:53:42
AVEWIN32.DLL : 6.33.0.34 1044992 02/02/2006 10:21:04
AVPREF.DLL : 6.34.0.0 38440 18/01/2006 12:06:02
AVREP.DLL : 6.33.0.201 2363432 08/02/2006 09:19:50
AVPACK32.DLL : 6.33.0.6 331816 09/01/2006 09:03:38
AVREG.DLL : 6.31.0.90 27688 28/07/2005 10:06:36
NETNT.DLL : 6.32.0.0 6696 27/09/2005 07:56:50
NETNW.DLL : 6.32.0.0 9768 27/09/2005 07:56:50


Start of the scan: dimanche 28 octobre 2007 23:11


Start scanning boot sectors:

Boot sector 'C:'
[NOTE] No virus was found!
Boot sector 'A:'
[NOTE] In the drive 'A:' no data medium is inserted!
Boot sector 'F:'
[NOTE] In the drive 'F:' no data medium is inserted!
Boot sector 'G:'
[NOTE] In the drive 'G:' no data medium is inserted!

Starting to scan the registry.

The registry was scanned ( 21 files ).


Starting the file scan:

C:\hiberfil.sys
[WARNING] The file could not be opened!
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WhenUDAEMONToolsSearchBar.zip
[DETECTION] Contains suspicious code HEURISTIC/PwdZIP
[INFO] The file was moved to '478a09fb.qua'!
C:\Documents and Settings\jonathan\NTUSER.DAT
[WARNING] The file could not be opened!
C:\Documents and Settings\jonathan\ntuser.dat.LOG
[WARNING] The file could not be opened!
C:\Documents and Settings\jonathan\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat
[WARNING] The file could not be opened!
C:\Documents and Settings\jonathan\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG
[WARNING] The file could not be opened!
C:\Documents and Settings\LocalService\NTUSER.DAT
[WARNING] The file could not be opened!
C:\Documents and Settings\LocalService\ntuser.dat.LOG
[WARNING] The file could not be opened!
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat
[WARNING] The file could not be opened!
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG
[WARNING] The file could not be opened!
C:\Documents and Settings\NetworkService\NTUSER.DAT
[WARNING] The file could not be opened!
C:\Documents and Settings\NetworkService\ntuser.dat.LOG
[WARNING] The file could not be opened!
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat
[WARNING] The file could not be opened!
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG
[WARNING] The file could not be opened!
C:\WINDOWS\system32\config\DEFAULT
[WARNING] The file could not be opened!
C:\WINDOWS\system32\config\default.LOG
[WARNING] The file could not be opened!
C:\WINDOWS\system32\config\SAM
[WARNING] The file could not be opened!
C:\WINDOWS\system32\config\SAM.LOG
[WARNING] The file could not be opened!
C:\WINDOWS\system32\config\SECURITY
[WARNING] The file could not be opened!
C:\WINDOWS\system32\config\SECURITY.LOG
[WARNING] The file could not be opened!
C:\WINDOWS\system32\config\SOFTWARE
[WARNING] The file could not be opened!
C:\WINDOWS\system32\config\software.LOG
[WARNING] The file could not be opened!
C:\WINDOWS\system32\config\SYSTEM
[WARNING] The file could not be opened!
C:\WINDOWS\system32\config\system.LOG
[WARNING] The file could not be opened!
C:\WINDOWS\system32\drivers\dtscsi.sys
[WARNING] The file could not be opened!
C:\WINDOWS\system32\drivers\sptd.sys
[WARNING] The file could not be opened!
The path A:\ could ot be found!
Le périphérique n'est pas prêt.

The path F:\ could ot be found!
Le périphérique n'est pas prêt.

The path G:\ could ot be found!
Le périphérique n'est pas prêt.

The path H:\ could ot be found!
Le périphérique n'est pas prêt.

The path I:\ could ot be found!
Le périphérique n'est pas prêt.

The path J:\ could ot be found!
Le périphérique n'est pas prêt.

The path M:\ could ot be found!
Le périphérique n'est pas prêt.



End of the scan: lundi 29 octobre 2007 00:14
Used time: 1:03:00 min

The scan has been done completely.

4935 Scanning directories
180555 Files were scanned
1 viruses and/or unwanted programs was found
0 files were deleted
0 files were repaired
1 files were moved to quarantine
0 files were renamed
6544 Archives were scanned
53 Warnings
0 Notes

comment je peut fair pour refaire fonctioner mon pc?
merci de votre aide

c est orange avec la live box. mais je pense pas que sa peut pas venir de la conexion vu que meme si je veu eteindre le pc sa bloc sur la page : windows, enregistrement de... (je sai plus quoi).
si vraiment jarive pas a le remetre en route normalement je le formate. mais avan de formater je veu essayer tous le moyen pour le remettre en marche normalement
Lassé par la pub ? Créez un compte

Créer un nouveau sujet

Tom's guide dans le monde