Anti virus bloqué

Salut,jai avast edition familiale sur mon pc,je pense avoir chopé n virus car je ne peu plu démaré avast ni Spybot - Search & Destroy,ni hijack ,lorseque j' essaye de les lancer ,un message me di que l application win 32 n est pas valide
que faire???
merci

salut

télécharger sur le bureau
Elibagla
= tout en bas de la page Clic sur :Descargar ELIBAGLA 10.70
Note : suivant anti-virus le désactiver avant téléchargement et durant l’utilisation
Réactiver ensuite
--------------
= Redémarrer en mode Sans Échec (le démarrage peut prendre plusieurs minutes)
Attention, pas d’accès à internet dans ce mode. Enregistrer ou imprimer les consignes.
Relancer le Pc et tapoter la touche F8 ( ou F5 pour certains) , jusqu’à l’apparition des inscriptions avec choix de démarrage
Avec les touches « flèches », sélectionner Mode sans échec ==> entrée ==>nom utilisateur habituel
------------
= Lancer Elibagla
= A la fin du scan redémarrer en mode normal
= un rapport dans C:\infoSat.txt
le copier/coller dans la réponse

note: si démarrage en sans échec impossible faire en mode normal
---------
voir si installation anti-virus possible

merci pour ton aide mais je ne trouve pas "= tout en bas de la page Clic sur :Descargar ELIBAGLA 10.70 "

salut

Car c une autre version, prends la quand même, c'est la 11.11

(Modifié par Negi71 le 09-03-2008 à 13:02)

voila le résultat mais je me demande si je l ai fait sur le bon disque!!!





Sun Mar 09 13:03:51 2008

EliBagle v11.11 (c)2008 S.G.H. / Satinfo S.L.

----------------------------------------------

Lista de Acciones (por Acción Directa):

D:\WINDOWS\SYSTEM32\WINTEMS.EXE --> Bagle Acceso Denegado.

D:\WINDOWS\SYSTEM32\BAN_LIST.TXT --> Eliminado Bagle

D:\WINDOWS\SYSTEM32\DRIVERS\SROSA.SYS --> Bagle (rootkit) Acceso Denegado.

D:\WINDOWS\SYSTEM32\DRIVERS\HLDRRR.EXE --> Bagle.dldr Acceso Denegado.

Restaurada Clave: "SafeBoot\Minimal y Network"

Reinicie para Completar la Limpieza.



Sun Mar 09 13:16:49 2008

EliBagle v11.11 (c)2008 S.G.H. / Satinfo S.L.

----------------------------------------------

Lista de Acciones (por Acción Directa):

D:\WINDOWS\SYSTEM32\WINTEMS.EXE --> Bagle Acceso Denegado.

D:\WINDOWS\SYSTEM32\DRIVERS\SROSA.SYS --> Bagle (rootkit) Acceso Denegado.

D:\WINDOWS\SYSTEM32\DRIVERS\HLDRRR.EXE --> Bagle.dldr Acceso Denegado.

Reinicie para Completar la Limpieza.



Sun Mar 09 13:17:57 2008

EliBagle v11.11 (c)2008 S.G.H. / Satinfo S.L.

----------------------------------------------

Lista de Acciones (por Exploración):

Explorando Unidad C:\



Nº Total de Directorios: 805

Nº Total de Ficheros: 7508

Nº de Ficheros Analizados: 454

Nº de Ficheros Infectados: 0

Nº de Ficheros Limpiados: 0



Sun Mar 09 13:25:17 2008

EliBagle v11.11 (c)2008 S.G.H. / Satinfo S.L.

----------------------------------------------

Lista de Acciones (por Acción Directa):

D:\WINDOWS\SYSTEM32\WINTEMS.EXE --> Eliminado Bagle

D:\WINDOWS\SYSTEM32\BAN_LIST.TXT --> Eliminado Bagle

D:\WINDOWS\SYSTEM32\DRIVERS\SROSA.SYS --> Eliminado Bagle (rootkit)

D:\WINDOWS\SYSTEM32\DRIVERS\HLDRRR.EXE --> Eliminado Bagle.dldr



Sun Mar 09 13:25:23 2008

EliBagle v11.11 (c)2008 S.G.H. / Satinfo S.L.

----------------------------------------------

Lista de Acciones (por Exploración):

Explorando Unidad C:\



Nº Total de Directorios: 806

Nº Total de Ficheros: 7508

Nº de Ficheros Analizados: 454

Nº de Ficheros Infectados: 0

Nº de Ficheros Limpiados: 0



Sun Mar 09 13:25:41 2008

EliBagle v11.11 (c)2008 S.G.H. / Satinfo S.L.

----------------------------------------------

Lista de Acciones (por Exploración):

Explorando Unidad D:\

D:\Program Files\SuperCopier2\SUPERCOPIER2.EXE --> Eliminado Bagle.dldr

D:\WINDOWS\system32\MDELK.EXE --> Eliminado Bagle

D:\WINDOWS\system32\drivers\down\12781281.EXE --> Eliminado Bagle

D:\WINDOWS\system32\drivers\down\177093.EXE --> Eliminado Bagle

D:\WINDOWS\system32\drivers\down\184703.EXE --> Eliminado Bagle



Nº Total de Directorios: 5273

Nº Total de Ficheros: 79197

Nº de Ficheros Analizados: 9313

Nº de Ficheros Infectados: 5

Nº de Ficheros Limpiados: 5



Sun Mar 09 13:34:02 2008

EliBagle v11.11 (c)2008 S.G.H. / Satinfo S.L.

----------------------------------------------

Lista de Acciones (por Acción Directa):



Ajout du 09-03-2008 à 13:43:

ah si c ' est bon je l ai fait sur le D est c 'est sur celui ci que j ai windows

Tu avais bien des baggles, as-tu d'autre problèmes

Si avast ne fonctionne toujours pas....désinstalle le et prends

Antivir(il est meilleur qu'avast,qui est une passoire au virus (qui dit avast, dit ordinateur )



(Modifié par Negi71 le 09-03-2008 à 13:47)

ok merci beacoup pour votre aide

Tu as d'autre problème ?

salut

pour controle post nous un rapport hijack

Télécharger Hijackthis sur le bureau
= clic droit dessus ==> renommer ==> écrire : "test"( à la place de "hijackthis") <== Important
=Double-clic dessus
= Clic Do a system scan and save the log
-- Le Bloc-Notes s'ouvre :
-> Edition / Sélectionner Tout
-> Edition / Copier
copier coller le rapport
si tu as des soucis pour faire un rapport
demo hijack

=======================================================
merci de mettre tous les rapports sous Spoiler

pour cela sélectionner la totalité de chaque rapport mis dans la case réponse
et cliquer sur l'icone

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 14:26:55, on 09/03/2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16608)

Boot mode: Normal



Running processes:

D:\WINDOWS\System32\smss.exe

D:\WINDOWS\system32\winlogon.exe

D:\WINDOWS\system32\services.exe

D:\WINDOWS\system32\lsass.exe

D:\WINDOWS\system32\svchost.exe

D:\WINDOWS\System32\svchost.exe

D:\WINDOWS\system32\svchost.exe

D:\WINDOWS\system32\LEXBCES.EXE

D:\WINDOWS\system32\spoolsv.exe

D:\WINDOWS\system32\LEXPPS.EXE

D:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

D:\WINDOWS\Explorer.EXE

D:\Program Files\Synaptics\SynTP\SynTPLpr.exe

D:\Program Files\Synaptics\SynTP\SynTPEnh.exe

D:\WINDOWS\AGRSMMSG.exe

D:\WINDOWS\system32\VTtrayp.exe

D:\WINDOWS\system32\VTTimer.exe

D:\WINDOWS\system32\rundll32.exe

D:\WINDOWS\SOUNDMAN.EXE

D:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe

D:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe

D:\WINDOWS\system32\ctfmon.exe

D:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe

D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

D:\Program Files\Spybot - Search & Destroy\SpybotSD.exe

D:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

D:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe

D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

D:\WINDOWS\System32\PAStiSvc.exe

D:\WINDOWS\system32\svchost.exe

D:\WINDOWS\system32\wbsecsvc.exe

D:\Program Files\Avira\AntiVir PersonalEdition Classic\update.exe

D:\Program Files\Avira\AntiVir PersonalEdition Classic\avcenter.exe

D:\Program Files\Windows Live\Messenger\usnsvc.exe

D:\Program Files\Internet Explorer\iexplore.exe

C:\Downloads\HiJackThis.exe



R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr/ie

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.fr

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.fr/ie

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/search?q=%s

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://www.google.fr

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)

O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - D:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll

O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - D:\Program Files\BitComet\tools\BitCometBHO_1.2.1.2.dll

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre1.6.0\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O4 - HKLM\..\Run: [SynTPLpr] D:\Program Files\Synaptics\SynTP\SynTPLpr.exe

O4 - HKLM\..\Run: [SynTPEnh] D:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe

O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe

O4 - HKLM\..\Run: [VTTimer] VTTimer.exe

O4 - HKLM\..\Run: [Vistadrv] D:\Vista Hard Drive Status Bar\vsdrv.exe

O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent

O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [TkBellExe] "D:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [SBCSTray] D:\Program Files\Sunbelt Software\CounterSpy\SBCSTray.exe

O4 - HKLM\..\Run: [avgnt] "D:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min

O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [RocketDock] "D:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe"

O4 - HKCU\..\Run: [SuperCopier2.exe] D:\Program Files\SuperCopier2\SuperCopier2.exe

O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

O4 - HKCU\..\Policies\Explorer\Run: [System Patcher] BTCPatcher.exe

O4 - HKUS\S-1-5-19\..\RunOnce: [nltide1] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-19\..\RunOnce: [nltide2] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,L,,4,N (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\RunOnce: [nltide1] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE RÉSEAU')

O4 - Startup: RocketDock.lnk = D:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe

O8 - Extra context menu item: &D&ownload &with BitComet - res://D:\Program Files\BitComet\BitComet.exe/AddLink.htm

O8 - Extra context menu item: &D&ownload all video with BitComet - res://D:\Program Files\BitComet\BitComet.exe/AddVideo.htm

O8 - Extra context menu item: &D&ownload all with BitComet - res://D:\Program Files\BitComet\BitComet.exe/AddAllLink.htm

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://D:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0\bin\ssv.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://D:\Program Files\BitComet\tools\BitCometBHO_1.2.1.2.dll/206 (file missing)

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1201014938125

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL

O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - D:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - D:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - D:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe

O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - D:\WINDOWS\system32\LEXBCES.EXE

O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - D:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe

O23 - Service: NMIndexingService - Nero AG - D:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe

O23 - Service: Sunbelt CounterSpy Antispyware (SBCSSvc) - Unknown owner - D:\Program Files\Sunbelt Software\CounterSpy\SBCSSvc.exe (file missing)

O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

O23 - Service: STI Simulator - Unknown owner - D:\WINDOWS\System32\PAStiSvc.exe

O23 - Service: wbsecsvc - Winbond - D:\WINDOWS\system32\wbsecsvc.exe



--

End of file - 8535 bytes

Ajout du 09-03-2008 à 14:30:

voila mon scan,juste pour info,prqoi tu ma demandé de renommer Hijackthis ?

Ajout du 09-03-2008 à 14:37:

j ai telecharger antivir y a t il des regalge particulier a faire???

Ajout du 09-03-2008 à 14:41:

parceque lorsque je clique sur update il metelecharge les fichier normalement mais a la fin il me met"an internal error has appeared

voila le raaport

09.03.2008 14:31:20 - Installation Directory: D:\Program Files\Avira\AntiVir PersonalEdition Classic\

09.03.2008 14:31:20 - Backup Directory: D:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\BACKUP\

09.03.2008 14:31:20 - Temp Directory: D:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_47d3e6a8\

09.03.2008 14:31:22 - Start the Update GUI... Displaymode: 0



09.03.2008 14:31:20 - Installation Directory: D:\Program Files\Avira\AntiVir PersonalEdition Classic\

09.03.2008 14:31:20 - Backup Directory: D:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\BACKUP\

09.03.2008 14:31:20 - Temp Directory: D:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_47d3e6a8\

09.03.2008 14:31:22 - Start the Update GUI... Displaymode: 0



09.03.2008 14:31:26 - Keyfile: OK [FULL Mode]



09.03.2008 14:31:26 - Avira AntiVir PersonalEdition Classic



09.03.2008 14:31:54 - Connection failed while downloading the file http://dl1.avgate.net/upd/idx/master.idx.

09.03.2008 14:31:54 - Switching to next update server

09.03.2008 14:32:35 - Connection failed while downloading the file http://dl6.avgate.net/upd/idx/master.idx.

09.03.2008 14:32:35 - Switching to next update server

09.03.2008 14:33:06 - Connection failed while downloading the file http://dl5.avgate.net/upd/idx/master.idx.

09.03.2008 14:33:06 - Switching to next update server

09.03.2008 14:33:17 - Master IDX file has changed

09.03.2008 14:33:25 - Keyfile: OK [FULL Mode]



09.03.2008 14:33:35 - Downloading the product.info file from http://dl2.avgate.net/upd/idx/classic-nt-en.info.gz

09.03.2008 14:33:36 - File basic-nt/2k/avgntflt.sys's operating system doesn't match the current one. File ignored.

09.03.2008 14:33:36 - File basic-nt/avadmin.exe's operating system doesn't match the current one. File ignored.

09.03.2008 14:33:36 - File basic-nt/avgio64.sys's operating system doesn't match the current one. File ignored.

09.03.2008 14:33:36 - File basic-nt/imp64b.exe's operating system doesn't match the current one. File ignored.

09.03.2008 14:33:36 - File basic-nt/psapi.dll's operating system doesn't match the current one. File ignored.

09.03.2008 14:33:36 - File basic-nt/shlext64.dll's operating system doesn't match the current one. File ignored.

09.03.2008 14:33:36 - File basic-nt/vista64/avgntflt.sys's operating system doesn't match the current one. File ignored.

09.03.2008 14:33:36 - File basic-nt/wsctool.exe's operating system doesn't match the current one. File ignored.

09.03.2008 14:33:36 - File basic-nt/xp64/avgntflt.sys's operating system doesn't match the current one. File ignored.

09.03.2008 14:33:36 - File basic-nt/2k/avgntdd.sys's operating system doesn't match the current one. File ignored.

09.03.2008 14:33:36 - File basic-nt/2k/avgntmgr.sys's operating system doesn't match the current one. File ignored.

09.03.2008 14:33:36 - File basic-nt/nt/avgntdd.sys's operating system doesn't match the current one. File ignored.

09.03.2008 14:33:36 - File basic-nt/nt/avgntmgr.sys's operating system doesn't match the current one. File ignored.

09.03.2008 14:33:36 - File basic-nt/vista64/avgntflt.sys's operating system doesn't match the current one. File ignored.

09.03.2008 14:33:37 - Downloading the product.info file from http://dl2.avgate.net/upd/idx/vdf.info.gz

09.03.2008 14:33:42 - Keyfile: OK [FULL Mode]



09.03.2008 14:33:42 - Downloading the product.info file from http://dl2.avgate.net/upd/idx/specvir-nt.info.gz

09.03.2008 14:33:47 - Downloading the product.info file from http://dl2.avgate.net/upd/idx/engine.info.gz

09.03.2008 14:33:47 - Downloading the product.info file from http://dl2.avgate.net/upd/idx/engine-nt-en.info.gz

09.03.2008 14:33:50 - Module: SELFUPDATE Source: winwks\en\ Destination: D:\Program Files\Avira\AntiVir PersonalEdition Classic\ Files: 15

09.03.2008 14:33:51 - D:\Program Files\Avira\AntiVir PersonalEdition Classic\updlib.dll 1.2.10.20 < 1.2.10.21

09.03.2008 14:33:51 - Module: MAIN Source: winwks\en\ Destination: D:\Program Files\Avira\AntiVir PersonalEdition Classic\ Files: 75

09.03.2008 14:33:51 - D:\Program Files\Avira\AntiVir PersonalEdition Classic\avcenter.exe 7.2.0.12 < 7.2.0.14

09.03.2008 14:33:52 - D:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe 7.2.0.13 < 7.2.0.16

09.03.2008 14:33:52 - D:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe 7.0.0.81 < 7.0.0.82

09.03.2008 14:33:54 - D:\Program Files\Avira\AntiVir PersonalEdition Classic\ccguard.dll 7.0.1.34 < 7.0.1.35

09.03.2008 14:33:56 - D:\Program Files\Avira\AntiVir PersonalEdition Classic\preupd.exe 7.0.0.34 < 7.0.0.36

09.03.2008 14:33:58 - Module: COMMAPPDATA Source: winwks\en\ Destination: D:\Documents and Settings\All Users\Application Data\ Files: 1

09.03.2008 14:33:58 - Module: TEXT Source: winwks\en\ Destination: D:\Program Files\Avira\AntiVir PersonalEdition Classic\ Files: 3

09.03.2008 14:33:58 - Module: VDF Source: vdf\ Destination: D:\Program Files\Avira\AntiVir PersonalEdition Classic\ Files: 4

09.03.2008 14:33:59 - D:\Program Files\Avira\AntiVir PersonalEdition Classic\antivir1.vdf 7.0.0.0 < 7.0.3.2

09.03.2008 14:33:59 - D:\Program Files\Avira\AntiVir PersonalEdition Classic\antivir2.vdf 7.0.0.1 < 7.0.3.3

09.03.2008 14:33:59 - D:\Program Files\Avira\AntiVir PersonalEdition Classic\antivir3.vdf 7.0.0.2 < 7.0.3.4

09.03.2008 14:33:59 - Module: AVREP_NT Source: engine\nt\ Destination: D:\Program Files\Avira\AntiVir PersonalEdition Classic\ Files: 1

09.03.2008 14:33:59 - Module: ENGINE Source: engine\ Destination: D:\Program Files\Avira\AntiVir PersonalEdition Classic\ Files: 2

09.03.2008 14:33:59 - D:\Program Files\Avira\AntiVir PersonalEdition Classic\avewin32.dll 7.6.0.15 < 7.6.0.73

09.03.2008 14:33:59 - Module: ENGINE_NT_EN Source: engine\nt\ Destination: D:\Program Files\Avira\AntiVir PersonalEdition Classic\ Files: 1

09.03.2008 14:33:59 - D:\Program Files\Avira\AntiVir PersonalEdition Classic\avpack32.dll 7.3.0.15 < 7.6.0.3

09.03.2008 14:33:59 - Module: DRV Source: winwks\en\ Destination: D:\WINDOWS\SYSTEM32\drivers\ Files: 4

09.03.2008 14:33:59 - D:\WINDOWS\SYSTEM32\drivers\avipbb.sys 1.0.2.11 < 1.0.2.13

09.03.2008 14:34:00 - Minifilter is installed



09.03.2008 14:34:00 - Minifilter is possible



09.03.2008 14:34:00 - Reading registry value successful: Software\Avira\AntiVir PersonalEdition Classic | FilterType



09.03.2008 14:34:00 - Initialize avnotify.exe



09.03.2008 14:34:00 - Starting avnotify.exe successful



09.03.2008 14:34:00 - Preparing to download files

09.03.2008 14:34:00 - 13 files need to be downloaded / copied from http://dl2.avgate.net/upd/

09.03.2008 14:34:00 - #1: Downloading and extracting http://dl2.avgate.net/upd/winwks/en/basic-nt/updlib.dll.gz to D:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_47d3e6a8\winwks\en\basic-nt/updlib.dll

09.03.2008 14:34:21 - There was a problem updating from the specified server: Connection failed while downloading the file http://dl2.avgate.net/upd/winwks/en/basic-nt/updlib.dll.gz.

09.03.2008 14:34:21 - Switching to next update server

09.03.2008 14:34:42 - Connection failed while downloading the file http://dl2.avgate.net/upd/idx/master.idx.

09.03.2008 14:34:42 - Switching to next update server

09.03.2008 14:35:04 - There was a problem updating from the specified server: Connection failed while downloading the file http://dl3.avgate.net/upd/idx/master.idx.

09.03.2008 14:35:04 - Switching to next update server

09.03.2008 14:35:27 - There was a problem updating from the specified server: Connection failed while downloading the file http://dl3.avgate.net/upd/idx/master.idx.

09.03.2008 14:35:27 - Switching to next update server

09.03.2008 14:35:49 - There was a problem updating from the specified server: Connection failed while downloading the file http://dl3.avgate.net/upd/idx/master.idx.

09.03.2008 14:35:49 - Switching to next update server

09.03.2008 14:35:51 - Master IDX file has changed

09.03.2008 14:35:59 - Keyfile: OK [FULL Mode]



09.03.2008 14:35:59 - File basic-nt/2k/avgntflt.sys's operating system doesn't match the current one. File ignored.

09.03.2008 14:35:59 - File basic-nt/avadmin.exe's operating system doesn't match the current one. File ignored.

09.03.2008 14:35:59 - File basic-nt/avgio64.sys's operating system doesn't match the current one. File ignored.

09.03.2008 14:35:59 - File basic-nt/imp64b.exe's operating system doesn't match the current one. File ignored.

09.03.2008 14:35:59 - File basic-nt/psapi.dll's operating system doesn't match the current one. File ignored.

09.03.2008 14:35:59 - File basic-nt/shlext64.dll's operating system doesn't match the current one. File ignored.

09.03.2008 14:35:59 - File basic-nt/vista64/avgntflt.sys's operating system doesn't match the current one. File ignored.

09.03.2008 14:35:59 - File basic-nt/wsctool.exe's operating system doesn't match the current one. File ignored.

09.03.2008 14:35:59 - File basic-nt/xp64/avgntflt.sys's operating system doesn't match the current one. File ignored.

09.03.2008 14:35:59 - File basic-nt/2k/avgntdd.sys's operating system doesn't match the current one. File ignored.

09.03.2008 14:35:59 - File basic-nt/2k/avgntmgr.sys's operating system doesn't match the current one. File ignored.

09.03.2008 14:35:59 - File basic-nt/nt/avgntdd.sys's operating system doesn't match the current one. File ignored.

09.03.2008 14:35:59 - File basic-nt/nt/avgntmgr.sys's operating system doesn't match the current one. File ignored.

09.03.2008 14:35:59 - File basic-nt/vista64/avgntflt.sys's operating system doesn't match the current one. File ignored.

09.03.2008 14:35:59 - Downloading the product.info file from http://dl7.avgate.net/upd/idx/vdf.info.gz

09.03.2008 14:36:20 - Keyfile: OK [FULL Mode]



09.03.2008 14:36:21 - Downloading the product.info file from http://dl7.avgate.net/upd/idx/specvir-nt.info.gz

09.03.2008 14:36:21 - Downloading the product.info file from http://dl7.avgate.net/upd/idx/engine.info.gz

09.03.2008 14:36:22 - Downloading the product.info file from http://dl7.avgate.net/upd/idx/engine-nt-en.info.gz

09.03.2008 14:36:23 - Module: SELFUPDATE Source: winwks\en\ Destination: D:\Program Files\Avira\AntiVir PersonalEdition Classic\ Files: 15

09.03.2008 14:36:23 - D:\Program Files\Avira\AntiVir PersonalEdition Classic\updlib.dll 1.2.10.20 < 1.2.10.21

09.03.2008 14:36:23 - Module: MAIN Source: winwks\en\ Destination: D:\Program Files\Avira\AntiVir PersonalEdition Classic\ Files: 75

09.03.2008 14:36:24 - D:\Program Files\Avira\AntiVir PersonalEdition Classic\avcenter.exe 7.2.0.12 < 7.2.0.14

09.03.2008 14:36:24 - D:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe 7.2.0.13 < 7.2.0.16

09.03.2008 14:36:24 - D:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe 7.0.0.81 < 7.0.0.82

09.03.2008 14:36:25 - D:\Program Files\Avira\AntiVir PersonalEdition Classic\ccguard.dll 7.0.1.34 < 7.0.1.35

09.03.2008 14:36:26 - D:\Program Files\Avira\AntiVir PersonalEdition Classic\preupd.exe 7.0.0.34 < 7.0.0.36

09.03.2008 14:36:27 - Module: COMMAPPDATA Source: winwks\en\ Destination: D:\Documents and Settings\All Users\Application Data\ Files: 1

09.03.2008 14:36:27 - Module: TEXT Source: winwks\en\ Destination: D:\Program Files\Avira\AntiVir PersonalEdition Classic\ Files: 3

09.03.2008 14:36:27 - Module: VDF Source: vdf\ Destination: D:\Program Files\Avira\AntiVir PersonalEdition Classic\ Files: 4

09.03.2008 14:36:27 - D:\Program Files\Avira\AntiVir PersonalEdition Classic\antivir1.vdf 7.0.0.0 < 7.0.3.2

09.03.2008 14:36:27 - D:\Program Files\Avira\AntiVir PersonalEdition Classic\antivir2.vdf 7.0.0.1 < 7.0.3.3

09.03.2008 14:36:27 - D:\Program Files\Avira\AntiVir PersonalEdition Classic\antivir3.vdf 7.0.0.2 < 7.0.3.4

09.03.2008 14:36:27 - Module: AVREP_NT Source: engine\nt\ Destination: D:\Program Files\Avira\AntiVir PersonalEdition Classic\ Files: 1

09.03.2008 14:36:28 - Module: ENGINE Source: engine\ Destination: D:\Program Files\Avira\AntiVir PersonalEdition Classic\ Files: 2

09.03.2008 14:36:28 - D:\Program Files\Avira\AntiVir PersonalEdition Classic\avewin32.dll 7.6.0.15 < 7.6.0.73

09.03.2008 14:36:28 - Module: ENGINE_NT_EN Source: engine\nt\ Destination: D:\Program Files\Avira\AntiVir PersonalEdition Classic\ Files: 1

09.03.2008 14:36:28 - D:\Program Files\Avira\AntiVir PersonalEdition Classic\avpack32.dll 7.3.0.15 < 7.6.0.3

09.03.2008 14:36:28 - Module: DRV Source: winwks\en\ Destination: D:\WINDOWS\SYSTEM32\drivers\ Files: 4

09.03.2008 14:36:28 - D:\WINDOWS\SYSTEM32\drivers\avipbb.sys 1.0.2.11 < 1.0.2.13

09.03.2008 14:36:28 - Minifilter is installed



09.03.2008 14:36:28 - Minifilter is possible



09.03.2008 14:36:28 - Reading registry value successful: Software\Avira\AntiVir PersonalEdition Classic | FilterType



09.03.2008 14:36:28 - Preparing to download files

09.03.2008 14:36:28 - 26 files need to be downloaded / copied from http://dl7.avgate.net/upd/

09.03.2008 14:36:28 - #1: Downloading and extracting http://dl7.avgate.net/upd/winwks/en/basic-nt/updlib.dll.gz to D:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_47d3e6a8\winwks\en\basic-nt/updlib.dll

09.03.2008 14:36:31 - #2: Downloading and extracting http://dl7.avgate.net/upd/winwks/en/basic-nt/avcenter.exe.gz to D:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_47d3e6a8\winwks\en\basic-nt/avcenter.exe

09.03.2008 14:36:37 - #3: Downloading and extracting http://dl7.avgate.net/upd/winwks/en/basic-nt/avgnt.exe.gz to D:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_47d3e6a8\winwks\en\basic-nt/avgnt.exe

09.03.2008 14:36:38 - #4: Downloading and extracting http://dl7.avgate.net/upd/winwks/en/basic-nt/avguard.exe.gz to D:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_47d3e6a8\winwks\en\basic-nt/avguard.exe

09.03.2008 14:36:40 - #5: Downloading and extracting http://dl7.avgate.net/upd/winwks/en/basic-nt/ccguard.dll.gz to D:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_47d3e6a8\winwks\en\basic-nt/ccguard.dll

09.03.2008 14:36:41 - #6: Downloading and extracting http://dl7.avgate.net/upd/winwks/en/basic-nt/preupd.exe.gz to D:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_47d3e6a8\winwks\en\basic-nt/preupd.exe

09.03.2008 14:36:42 - #7: Downloading and extracting http://dl7.avgate.net/upd/winwks/en/basic-nt/addr_file.html.gz to D:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_47d3e6a8\winwks\en\basic-nt/addr_file.html

09.03.2008 14:36:43 - #8: Downloading and extracting http://dl7.avgate.net/upd/vdf/antivir1.vdf.gz to D:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_47d3e6a8\vdf\antivir1.vdf

09.03.2008 14:38:15 - #9: Downloading and extracting http://dl7.avgate.net/upd/vdf/antivir2.vdf.gz to D:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_47d3e6a8\vdf\antivir2.vdf

09.03.2008 14:38:16 - #10: Downloading and extracting http://dl7.avgate.net/upd/vdf/antivir3.vdf.gz to D:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_47d3e6a8\vdf\antivir3.vdf

09.03.2008 14:38:18 - Registry entry created successfully: Software\Avira\AntiVir PersonalEdition Classic |UpdateInProgress



09.03.2008 14:38:19 - Critical error: Integrity error in file D:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_47d3e6a8\vdf\antivir3.vdf.gz



Ajout du 09-03-2008 à 15:05:

je viens de faire une annalyse avec spybot et y a un fichier que je n arrive pas a suprimer:"win32bagle.hi

Ajout du 09-03-2008 à 15:14:

enfin de compte c est bon j ai reussi a mettre a jour antivir