bonjour ,
je tiens a dire que je suis pas trop fort en informatique,donc merci de votre patience zouxxxxx.
AntiVir PersonalEdition Classic
Report file date: martes, 29 de enero de 2008 15:30
Scanning for 1083948 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Username: hp
Computer name: YOUR-0CDC4F5844
Configuration settings for the scan:
Jobname..........................: Local Drives
Configuration file...............: c:\program files\avira\antivir personaledition classic\alldrives.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: E:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Start of the scan: martes, 29 de enero de 2008 15:30
The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'wscntfy.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'ehmsas.exe' - '1' Module(s) have been scanned
Scan process 'wmiprvse.exe' - '1' Module(s) have been scanned
Scan process 'dllhost.exe' - '1' Module(s) have been scanned
Scan process 'ServiceLayer.exe' - '1' Module(s) have been scanned
Scan process 'mqtgsvc.exe' - '1' Module(s) have been scanned
Scan process 'wmpnetwk.exe' - '1' Module(s) have been scanned
Scan process 'hpqwmiex.exe' - '1' Module(s) have been scanned
Scan process 'mcrdsvc.exe' - '1' Module(s) have been scanned
Scan process 'mqsvc.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned
Scan process 'MDM.EXE' - '1' Module(s) have been scanned
Scan process 'hpqimzone.exe' - '1' Module(s) have been scanned
Scan process 'LSSrvc.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'ehSched.exe' - '1' Module(s) have been scanned
Scan process 'ehrecvr.exe' - '1' Module(s) have been scanned
Scan process 'btwdins.exe' - '1' Module(s) have been scanned
Scan process 'BTStackServer.exe' - '1' Module(s) have been scanned
Scan process 'msdtc.exe' - '1' Module(s) have been scanned
Scan process 'MPAPI3s.exe' - '1' Module(s) have been scanned
Scan process 'BTTray.exe' - '1' Module(s) have been scanned
Scan process 'wmpnscfg.exe' - '1' Module(s) have been scanned
Scan process 'PcSync2.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'issch.exe' - '1' Module(s) have been scanned
Scan process 'hpwuSchd2.exe' - '1' Module(s) have been scanned
Scan process 'LAUNCH~1.EXE' - '1' Module(s) have been scanned
Scan process 'digstream.exe' - '1' Module(s) have been scanned
Scan process 'PDVDServ.exe' - '1' Module(s) have been scanned
Scan process 'QLBCTRL.exe' - '1' Module(s) have been scanned
Scan process 'SynTPEnh.exe' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'HP Wireless Assistant.exe' - '1' Module(s) have been scanned
Scan process 'ehtray.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
55 processes with 55 modules were scanned
Start scanning boot sectors:
Boot sector 'C:\'
[NOTE] No virus was found!
Boot sector 'D:\'
[NOTE] No virus was found!
Starting to scan the registry.
The registry was scanned ( '54' files ).
Starting the file scan:
Begin scan in 'C:\'
C:\hiberfil.sys
[WARNING] The file could not be opened!
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\Documents and Settings\All Users\Application Data\body copy second city\CoolAim.exe
[DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
[INFO] The file was moved to '480e3964.qua'!
C:\Documents and Settings\All Users\Application Data\body copy second city\heart funk.exe
[DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
[INFO] The file was moved to '4800395f.qua'!
C:\Documents and Settings\All Users\Application Data\body copy second city\Title save.exe
[DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
[INFO] The file was moved to '48133967.qua'!
C:\Documents and Settings\hp\My Documents\V8\AUTOPLAY\DOCS\ANTIVIRUS\NIS2006\KEYGEN\NIS06KEY.EXE
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[INFO] The file was moved to '47f23ab0.qua'!
C:\Documents and Settings\hp\My Documents\V8\AUTOPLAY\DOCS\BURNING\CLONECD\KEYMAKER.EXE
[DETECTION] Is the Trojan horse TR/Keygen.P
[INFO] The file was moved to '47f83b25.qua'!
C:\Documents and Settings\hp\My Documents\V8\AUTOPLAY\DOCS\VARIAS\QUICKTIME\QUICKTIME_7.1_KG.EXE
[DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Pcclient.GV.210 Backdoor server programs
[INFO] The file was moved to '47e83ea5.qua'!
C:\Documents and Settings\hp\My Documents\V8\AUTOPLAY\DOCS\VARIAS\SERVU\SERV-U.V6.3.0.1.CORPORATE.EDITION-PATCH.EXE
[DETECTION] Contains suspicious code HEUR/Crypted
[INFO] The file was moved to '47f13ecb.qua'!
C:\Documents and Settings\hp\My Documents\V8\AUTOPLAY\DOCS\VARIAS\WINDVD8\KEYGEN.EXE
[DETECTION] Is the Trojan horse TR/Keygen.BM
[INFO] The file was moved to '47f83ed3.qua'!
C:\Documents and Settings\hp\My Documents\V8\TEU_V8_DVD2 (E)\AUTOPLAY\DOCS\ANTIVIRUS\NIS2006\KEYGEN\NIS06KEY.EXE
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
[INFO] The file was moved to '47f23f98.qua'!
C:\Documents and Settings\hp\My Documents\V8\TEU_V8_DVD2 (E)\AUTOPLAY\DOCS\BURNING\CLONECD\KEYMAKER.EXE
[DETECTION] Is the Trojan horse TR/Keygen.P
[INFO] The file was moved to '47f83fe9.qua'!
C:\Documents and Settings\hp\My Documents\V8\TEU_V8_DVD2 (E)\AUTOPLAY\DOCS\VARIAS\QUICKTIME\QUICKTIME_7.1_KG.EXE
[DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Pcclient.GV.210 Backdoor server programs
[INFO] The file was moved to '47e84382.qua'!
C:\Documents and Settings\hp\My Documents\V8\TEU_V8_DVD2 (E)\AUTOPLAY\DOCS\VARIAS\SERVU\SERV-U.V6.3.0.1.CORPORATE.EDITION-PATCH.EXE
[DETECTION] Contains suspicious code HEUR/Crypted
[INFO] The file was moved to '47f1437a.qua'!
C:\Documents and Settings\hp\My Documents\V8\TEU_V8_DVD2 (E)\AUTOPLAY\DOCS\VARIAS\WINDVD8\KEYGEN.EXE
[DETECTION] Is the Trojan horse TR/Keygen.BM
[INFO] The file was moved to '47f84382.qua'!
C:\Documents and Settings\LocalService\Application Data\Cdrom Window\OozeMemoObj.exe
[DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
[INFO] The file was moved to '481943dd.qua'!
Begin scan in 'D:\' <HP_RECOVERY>
Begin scan in 'E:\'
Search path E:\ could not be opened!
The device is not ready.
End of the scan: martes, 29 de enero de 2008 16:53
Used time: 1:23:06 min
The scan has been done completely.
8062 Scanning directories
571748 Files were scanned
12 viruses and/or unwanted programs were found
2 Files were classified as suspicious:
0 files were deleted
0 files were repaired
14 files were moved to quarantine
0 files were renamed
2 Files cannot be scanned
571736 Files not concerned
12565 Archives were scanned
2 Warnings
60 Notes
re bonjour,
en lisant les post j ai vu que faire 1 hijackthis ca aide les pro .
j espere que ca va vous aider ,bisoussssssssss
[19:33:43] fred a dit : Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:26:36, on 29/01/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Vous allez répondre sur un sujet resté inactif pendant plus de 6 mois. Assurez-vous d'apporter des éléments nouveaux à la discussion avant de poursuivre.
