RESOLU VIRUS!!!!!
Forum Sécurité - Virus : RESOLU VIRUS!!!!!
Re,
Sélectionne l'intégralité du cadre ci-dessous :
DirLook::
|
- Copie/colle le dans le Bloc Notes (Démarrer\Tous les programmes\Accessoires\Bloc notes.)
- Enregistre le sous sur ton bureau sous le nom de CFScript.txt
- Glisse maintenant le fichier CFScript.txt dans ComboFix.exe comme ci-dessous :
- Cela va relancer Combofix. Poste le contenu du rapport ComboFix.txt après redémarrage s'il y en a un.
Répondre à XmichouX
Tu as essayé de refaire un scan ?
Sinon fais ce qu'il te demande 
Répondre à XmichouX
Coucou,
Voici ce que avira antivir vient de trouver, je suis encore infecté !!!! aidez moi
Avira AntiVir Personal
Report file date: mardi 2 septembre 2008 12:00
Scanning for 1587831 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Boot mode: Normally booted
Username: SYSTEM
Computer name: ACER-WB7UXMO8BJ
Version information:
BUILD.DAT : 8.1.0.331 16934 Bytes 12/08/2008 11:46:00
AVSCAN.EXE : 8.1.4.7 315649 Bytes 19/07/2008 11:25:40
AVSCAN.DLL : 8.1.4.0 40705 Bytes 19/07/2008 11:25:40
LUKE.DLL : 8.1.4.5 164097 Bytes 19/07/2008 11:25:40
LUKERES.DLL : 8.1.4.0 12033 Bytes 19/07/2008 11:25:40
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 13:27:16
ANTIVIR1.VDF : 7.0.5.1 8182784 Bytes 24/06/2008 16:43:44
ANTIVIR2.VDF : 7.0.6.94 2998784 Bytes 31/08/2008 15:32:46
ANTIVIR3.VDF : 7.0.6.100 45056 Bytes 01/09/2008 15:32:48
Engineversion : 8.1.1.23
AEVDF.DLL : 8.1.0.5 102772 Bytes 21/04/2008 08:15:16
AESCRIPT.DLL : 8.1.0.68 315770 Bytes 19/08/2008 10:45:04
AESCN.DLL : 8.1.0.23 119156 Bytes 16/07/2008 11:22:56
AERDL.DLL : 8.1.0.20 418165 Bytes 25/04/2008 08:12:04
AEPACK.DLL : 8.1.2.1 364917 Bytes 16/07/2008 11:22:56
AEOFFICE.DLL : 8.1.0.22 192890 Bytes 19/08/2008 10:45:02
AEHEUR.DLL : 8.1.0.50 1388918 Bytes 19/08/2008 10:45:02
AEHELP.DLL : 8.1.0.15 115063 Bytes 29/05/2008 16:32:58
AEGEN.DLL : 8.1.0.36 315764 Bytes 19/08/2008 10:45:00
AEEMU.DLL : 8.1.0.7 430452 Bytes 31/07/2008 15:18:28
AECORE.DLL : 8.1.1.8 172406 Bytes 31/07/2008 15:18:26
AEBB.DLL : 8.1.0.1 53617 Bytes 17/07/2008 11:22:40
AVWINLL.DLL : 1.0.0.12 15105 Bytes 19/07/2008 11:25:40
AVPREF.DLL : 8.0.2.0 38657 Bytes 19/07/2008 11:25:40
AVREP.DLL : 8.0.0.2 98344 Bytes 31/07/2008 15:18:26
AVREG.DLL : 8.0.0.1 33537 Bytes 19/07/2008 11:25:40
AVARKT.DLL : 1.0.0.23 307457 Bytes 21/04/2008 08:15:12
AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 19/07/2008 11:25:40
SQLITE3.DLL : 3.3.17.1 339968 Bytes 21/04/2008 08:15:14
SMTPLIB.DLL : 1.2.0.23 28929 Bytes 19/07/2008 11:25:42
NETNT.DLL : 8.0.0.1 7937 Bytes 21/04/2008 08:15:14
RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 19/07/2008 11:25:28
RCTEXT.DLL : 8.0.52.0 86273 Bytes 19/07/2008 11:25:28
Configuration settings for the scan:
Jobname..........................: Local Hard Disks
Configuration file...............: C:\Program Files\Avira\AntiVir PersonalEdition Classic\alldiscs.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, D:, E:,
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Start of the scan: mardi 2 septembre 2008 12:00
The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'skypePM.exe' - '1' Module(s) have been scanned
Scan process 'LANCEUR.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'HPZipm12.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'mpbtn.exe' - '1' Module(s) have been scanned
Scan process 'NkbMonitor.exe' - '1' Module(s) have been scanned
Scan process 'MagicKey.exe' - '1' Module(s) have been scanned
Scan process 'GoogleToolbarNotifier.exe' - '1' Module(s) have been scanned
Scan process 'Skype.exe' - '1' Module(s) have been scanned
Scan process 'MsnMsgr.Exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'AVGNT.EXE' - '1' Module(s) have been scanned
Scan process 'JUSCHED.EXE' - '1' Module(s) have been scanned
Scan process 'MotiveSB.exe' - '1' Module(s) have been scanned
Scan process 'ATIPTAXX.EXE' - '1' Module(s) have been scanned
Scan process 'SynTPEnh.exe' - '1' Module(s) have been scanned
Scan process 'SynTPLpr.exe' - '1' Module(s) have been scanned
Scan process 'AVGUARD.EXE' - '1' Module(s) have been scanned
Scan process 'SPOOLSV.EXE' - '1' Module(s) have been scanned
Scan process 'EXPLORER.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'ATI2EVXX.EXE' - '1' Module(s) have been scanned
Scan process 'LSASS.EXE' - '1' Module(s) have been scanned
Scan process 'SERVICES.EXE' - '1' Module(s) have been scanned
Scan process 'WINLOGON.EXE' - '1' Module(s) have been scanned
Scan process 'CSRSS.EXE' - '1' Module(s) have been scanned
Scan process 'SMSS.EXE' - '1' Module(s) have been scanned
34 processes with 34 modules were scanned
Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!
Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Boot sector 'D:\'
[INFO] No virus was found!
Boot sector 'E:\'
[INFO] No virus was found!
Starting to scan the registry.
The registry was scanned ( '73' files ).
Starting the file scan:
Begin scan in 'C:\' <ACER>
C:\hiberfil.sys
[WARNING] The file could not be opened!
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\I386\DRIVER.CAB
[0] Archive type: CAB (Microsoft)
--> gckernel.sys
[WARNING] No further files can be extracted from this archive. The archive will be closed
C:\QooBox\Quarantine\C\WINDOWS\system32\mlJCSmLD.dll.vir
[DETECTION] Is the TR/Monder.34304.4 Trojan
[NOTE] The file was moved to '490753ba.qua'!
C:\QooBox\Quarantine\C\WINDOWS\system32\opnnmJde.dll.vir
[DETECTION] Is the TR/Monder.34304.4 Trojan
[NOTE] The file was moved to '492b53c2.qua'!
C:\QooBox\Quarantine\C\WINDOWS\system32\ssuheqts.dll.vir
[DETECTION] Is the TR/Monder.95808.1 Trojan
[NOTE] The file was moved to '493253c8.qua'!
Begin scan in 'D:\' <acer (
)>
Begin scan in 'E:\' <ACER_SERVIC>
End of the scan: mardi 2 septembre 2008 16:53
Used time: 4:53:15 Hour(s)
The scan has been done completely.
4563 Scanning directories
252984 Files were scanned
3 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
3 files were moved to quarantine
0 files were renamed
2 Files cannot be scanned
252979 Files not concerned
6304 Archives were scanned
3 Warnings
3 Notes
