Scanning for 985864 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Username: SYSTEM
Computer name: NOM-3704C32DB7A
Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: D:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Start of the scan: lundi, 24. décembre 2007 10:50
The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'imapi.exe' - '1' Module(s) have been scanned
Scan process 'Shareaza.exe' - '1' Module(s) have been scanned
Scan process 'GoogleUpdater.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'WinButler.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'apdproxy.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'GoogleUpdaterService.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
29 processes with 29 modules were scanned
Start scanning boot sectors:
Boot sector 'C:\'
[NOTE] No virus was found!
Boot sector 'D:\'
[NOTE] No virus was found!
Starting to scan the registry.
The registry was scanned ( '18' files ).
Starting the file scan:
Begin scan in 'C:\' <439760>
C:\hiberfil.sys
[WARNING] The file could not be opened!
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\Documents and Settings\alexandre\Application Data\Microsoft\Windows\dahgjrf.exe
[DETECTION] Is the Trojan horse TR/Dldr.Agent.fjg.1
[INFO] The file was moved to '47d78170.qua'!
C:\Documents and Settings\alexandre\Local Settings\Temp\WinBrec.VIR
[DETECTION] Is the Trojan horse TR/Dldr.Agent.fjg.1
[INFO] The file was moved to '47dd81e8.qua'!
C:\System Volume Information\_restore{B2B7DEDB-6830-47C2-BB13-F1B397484110}\RP581\A0146177.exe
[DETECTION] Is the Trojan horse TR/Dldr.Agent.fjg.1
[INFO] The file was moved to '47a0863b.qua'!
Begin scan in 'D:\' <000000>
End of the scan: lundi, 24. décembre 2007 11:31
Used time: 41:16 min
The scan has been done completely.
5865 Scanning directories
320980 Files were scanned
3 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
3 files were moved to quarantine
0 files were renamed
2 Files cannot be scanned
320977 Files not concerned
7544 Archives were scanned
4 Warnings
10 Notes
[spoiler]
Ajout du 24-12-2007 à 16:48:
LE PC RALENTI ET M A DIT QU IL Y AVAIT DANS C.\SYSTEME VOLUME INFORMATION\...\A0146177.EXE
Ajout du 24-12-2007 à 16:50:
S EST UN TR\DLDR.AGENT.FJG.1 SI CA PEUT T AIDER
Ajout du 24-12-2007 à 17:01:
J AI FAIS UN SCAN AVEC HIJACK ET VOILA CE QUI EN SORT
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:59:48, on 24.12.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
j ai aussi fais un combofix voila le resultat
ComboFix 07-12-21.4 - alexandre 2007-12-24 17:04:15.2 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.33.1036.18.531 [GMT 1:00]
Running from: D:\utilitaires\ComboFix.exe
* Created a new restore point
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Documents and Settings\alexandre\Favoris\Online Security Guide.lnk
C:\Documents and Settings\alexandre\ResErrors.log
C:\Documents and Settings\All Users\Menu Démarrer\Live Safety Center.lnk
C:\Documents and Settings\All Users\Menu Démarrer\Online Security Guide.lnk
C:\Documents and Settings\carine\Bureau\Live Safety Center.lnk
C:\Documents and Settings\carine\Bureau\Online Security Guide.lnk
C:\Documents and Settings\carine\Favoris\Online Security Guide.lnk
C:\WINDOWS\Fonts\a.zip
C:\WINDOWS\Fonts\'
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-05-23 12:23]
"WinButler"="C:\Documents and Settings\alexandre\Application Data\WinButler\WinButler.exe" [2007-11-29 21:00]
"SfKg6wIPu"="C:\Documents and Settings\alexandre\Application Data\Microsoft\Windows\dahgjrf.exe" []
"PopUpStopperFreeEdition"="C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe" [2005-03-17 11:10]
catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-12-24 17:09:33
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2007-12-24 17:10:09 - machine was rebooted
.
2007-12-22 10:47:20 --- E O F ---
[/spoiler]
[ Ce message a été modifié par : : GrosSabots le 24-12-2007 17:51 ]
Bah si sa vient de comme tu nous la dit , c'est un pount de restauration !! Donc fait ceci :
Clic-Droit sur Poste de Travail==> Propriétés==> Restauration du système==>Cocher : désactiver la restauration système sur tous les lecteurs ==>Appliquer==>OK
Note : cela supprime les points de restauration antérieurs et qui peuvent être infectés
-----------
Même manœuvre en décochant pour rétablir la restauration
------------
Puis Démarrer==> tous les programmes ==>Accessoires==>outils Système==> Restauration système
==> créer un nouveau point de restauration
=============
alors je l ai fais je te redis ca plus tard merci
a oui encore une chose tu connais comment avoir des jeu pour mon natel et comment les telecharger afin de les metres sur mon natel merci a plus
Sauf mention contraire, le contenu du blog et du forum est sous licence Creative Commons By-Sa. Vous avez le droit de le reproduire à condition de citer l'auteur, de faire un lien vers la page d'origine, et de partager vos travaux dérivés selon les mêmes conditions.
quelle et le modele et la marque de ton mobile ?
