pb de virus secure expert cleaner
Forum Sécurité - Virus : pb de virus secure expert cleaner
ok, voilà leAvira AntiVir Personal
Report file date: vendredi 17 octobre 2008 18:47
Scanning for 1688451 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Boot mode: Normally booted
Username: SYSTEM
Computer name: 87ED390DACA948C
Version information:
BUILD.DAT : 8.1.0.331 16934 Bytes 12/08/2008 11:46:00
AVSCAN.EXE : 8.1.4.7 315649 Bytes 26/06/2008 08:57:53
AVSCAN.DLL : 8.1.4.0 40705 Bytes 26/05/2008 07:56:40
LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 12:44:19
LUKERES.DLL : 8.1.4.0 12033 Bytes 26/05/2008 07:58:52
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 10:33:34
ANTIVIR1.VDF : 7.0.5.1 8182784 Bytes 24/06/2008 13:54:15
ANTIVIR2.VDF : 7.0.7.12 4066816 Bytes 08/10/2008 21:23:06
ANTIVIR3.VDF : 7.0.7.51 266752 Bytes 16/10/2008 21:23:06
Engineversion : 8.2.0.5
AEVDF.DLL : 8.1.0.6 102772 Bytes 16/10/2008 21:23:16
AESCRIPT.DLL : 8.1.1.9 319867 Bytes 16/10/2008 21:23:15
AESCN.DLL : 8.1.1.3 123252 Bytes 16/10/2008 21:23:14
AERDL.DLL : 8.1.1.2 438644 Bytes 16/10/2008 21:23:13
AEPACK.DLL : 8.1.2.4 369014 Bytes 16/10/2008 21:23:12
AEOFFICE.DLL : 8.1.0.28 196987 Bytes 16/10/2008 21:23:12
AEHEUR.DLL : 8.1.0.59 1438071 Bytes 16/10/2008 21:23:11
AEHELP.DLL : 8.1.1.2 115062 Bytes 16/10/2008 21:23:09
AEGEN.DLL : 8.1.0.41 319861 Bytes 16/10/2008 21:23:09
AEEMU.DLL : 8.1.0.9 393588 Bytes 16/10/2008 21:23:08
AECORE.DLL : 8.1.2.6 172406 Bytes 16/10/2008 21:23:08
AEBB.DLL : 8.1.0.3 53618 Bytes 16/10/2008 21:23:07
AVWINLL.DLL : 1.0.0.12 15105 Bytes 09/07/2008 08:40:05
AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 09:28:01
AVREP.DLL : 8.0.0.2 98344 Bytes 16/10/2008 21:23:07
AVREG.DLL : 8.0.0.1 33537 Bytes 09/05/2008 11:26:40
AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23
AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 12:27:49
SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02
SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 12:49:40
NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10
RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 12/06/2008 13:48:07
RCTEXT.DLL : 8.0.52.0 86273 Bytes 27/06/2008 13:34:37
Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, D:,
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Start of the scan: vendredi 17 octobre 2008 18:47
The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'WLLoginProxy.exe' - '1' Module(s) have been scanned
Scan process 'iexplore.exe' - '1' Module(s) have been scanned
Scan process 'usnsvc.exe' - '1' Module(s) have been scanned
Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
Scan process 'hposts08.exe' - '1' Module(s) have been scanned
Scan process 'tor.exe' - '1' Module(s) have been scanned
Scan process 'CapabilityManager.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'hpoevm08.exe' - '1' Module(s) have been scanned
Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
Scan process 'WkCalRem.exe' - '1' Module(s) have been scanned
Scan process 'privoxy.exe' - '1' Module(s) have been scanned
Scan process 'hposol08.exe' - '1' Module(s) have been scanned
Scan process 'WG111v3.exe' - '1' Module(s) have been scanned
Scan process 'hpobnz08.exe' - '1' Module(s) have been scanned
Scan process 'vidalia.exe' - '1' Module(s) have been scanned
Scan process 'GoogleToolbarNotifier.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'winampa.exe' - '1' Module(s) have been scanned
Scan process 'rundll32.exe' - '1' Module(s) have been scanned
Scan process 'apdproxy.exe' - '1' Module(s) have been scanned
Scan process 'hpgs2wnf.exe' - '1' Module(s) have been scanned
Scan process 'hpgs2wnd.exe' - '1' Module(s) have been scanned
Scan process 'wkssb.exe' - '1' Module(s) have been scanned
Scan process 'RTHDCPL.exe' - '1' Module(s) have been scanned
Scan process 'MSASCui.exe' - '1' Module(s) have been scanned
Scan process 'Styler.exe' - '1' Module(s) have been scanned
Scan process 'VisualTaskTips.exe' - '1' Module(s) have been scanned
Scan process 'UberIcon Manager.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'MsMpEng.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
48 processes with 48 modules were scanned
Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!
Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Boot sector 'D:\'
[INFO] No virus was found!
Starting to scan the registry.
The registry was scanned ( '65' files ).
Starting the file scan:
Begin scan in 'C:\'
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\rxry12ai.default\Cache\5D48B1FDd01
[DETECTION] Is the TR/Dldr.FraudLoad.vcpb Trojan
[NOTE] The file was deleted!
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\rxry12ai.default\Cache\8679F15Cd01
[DETECTION] Is the TR/Dldr.FraudL.vahi Trojan
[NOTE] The file was deleted!
C:\Documents and Settings\Administrateur\Local Settings\Temp\b.exe
[DETECTION] Is the TR/Dldr.Zlob.gcb.1 Trojan
[NOTE] The file was deleted!
C:\Documents and Settings\Administrateur\Local Settings\Temp\c.exe
[DETECTION] Is the TR/DelSelf.H Trojan
[NOTE] The file was deleted!
C:\Documents and Settings\Administrateur\Local Settings\Temp\d.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE] TR/Dropper.Gen:[HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN]:<WorksFUD>=sz
.exe
[NOTE] TR/Dropper.Gen:[HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN]:<Share-to-Web Namespace Daemon>=sz.exe
[NOTE] The file was deleted!
C:\Documents and Settings\Administrateur\Local Settings\Temp\e.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE] The file was deleted!
C:\System Volume Information\_restore{382636DE-1229-4CD4-A324-7E0678B4D179}\RP216\A0181527.exe
[DETECTION] Is the TR/Dldr.FraudL.vahi Trojan
[NOTE] The file was deleted!
C:\System Volume Information\_restore{382636DE-1229-4CD4-A324-7E0678B4D179}\RP216\A0183646.dll
[DETECTION] Is the TR/Killav.28714 Trojan
[NOTE] The file was deleted!
C:\System Volume Information\_restore{382636DE-1229-4CD4-A324-7E0678B4D179}\RP216\A0183688.exe
[DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
[NOTE] The file was deleted!
C:\System Volume Information\_restore{382636DE-1229-4CD4-A324-7E0678B4D179}\RP217\A0186845.exe
[DETECTION] Is the TR/Vaklik.cnd Trojan
[NOTE] The file was deleted!
C:\WINDOWS\i386\CALC.EX_
[0] Archive type: CAB (Microsoft)
--> calc.exe
[DETECTION] Is the TR/Vaklik.cnd Trojan
[NOTE] The file was deleted!
C:\WINDOWS\Temp\NSIS_Install_igb.exe
[DETECTION] Contains recognition pattern of the DR/NaviPromo.CE.35 dropper
[NOTE] The file was deleted!
Begin scan in 'D:\' <mes données>
End of the scan: vendredi 17 octobre 2008 19:27
Used time: 39:30 Minute(s)
The scan has been done completely.
5735 Scanning directories
130242 Files were scanned
12 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
12 files were deleted
0 files were repaired
0 files were moved to quarantine
0 files were renamed
1 Files cannot be scanned
130229 Files not concerned
5531 Archives were scanned
1 Warnings
12 Notes
bon rapport:
