J'ai installé Antivir depuis quelques jours avec le firewall Sunbelt Personal Firewall.
Les 2-3 premier jours les mises à jours se sont faites mais hier la mise à jours n'arrivait pas à se faire.
Il mettait Connecting to http://dl6.avgate.net, http://dl4.avgate.net etc....
J'ai alors fait une manip' vu sur un forum : j'ai rajouté ces lignes dans mon fichier Hosts :
free-av.com 62.146.66.183
dl1.avgate.net 62.146.66.181
dl2.avgate.net 62.146.66.182
dl3.avgate.net 62.146.66.183
dl4.avgate.net 62.146.66.184
dl5.avgate.net 217.11.60.15
dl6.avgate.net 217.11.60.16
La mise à jour a alors fonctionnée...
J'ai fait une analyse dans la foulée:
J'ai un virus W95/Blumblebee.1738 d'ou je sais pas d'ou il vient car j'ai toujours eu antivirus et firewall !!AntiVir PersonalEdition Classic
Report file date: jeudi 6 septembre 2007 00:07
Scanning for 1048421 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Username: SYSTEM
Computer name: GUI
Version information:
BUILD.DAT : 268 15604 Bytes 31/08/2007 13:04:00
AVSCAN.EXE : 7.0.6.1 290856 Bytes 05/09/2007 21:37:40
AVSCAN.DLL : 7.0.6.0 49192 Bytes 05/09/2007 21:37:40
LUKE.DLL : 7.0.5.3 147496 Bytes 05/09/2007 21:37:41
LUKERES.DLL : 7.0.6.1 10280 Bytes 05/09/2007 21:37:41
ANTIVIR0.VDF : 6.35.0.1 7371264 Bytes 31/05/2006 13:08:58
ANTIVIR1.VDF : 6.39.0.129 7251968 Bytes 10/07/2007 19:16:31
ANTIVIR2.VDF : 6.39.1.74 1637376 Bytes 02/09/2007 20:35:46
ANTIVIR3.VDF : 6.39.1.94 97280 Bytes 05/09/2007 21:37:41
AVEWIN32.DLL : 7.6.0.5 2789888 Bytes 05/09/2007 21:37:42
AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 09:36:26
AVPREF.DLL : 7.0.2.2 25640 Bytes 05/09/2007 21:37:40
AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 12:16:24
AVPACK32.DLL : 7.3.0.15 360488 Bytes 01/09/2007 19:16:32
AVREG.DLL : 7.0.1.6 30760 Bytes 05/09/2007 21:37:40
AVARKT.DLL : 1.0.0.20 278568 Bytes 05/09/2007 21:37:38
AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 05/09/2007 21:37:39
NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 10:09:42
RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 05/09/2007 21:37:34
RCTEXT.DLL : 7.0.62.0 86056 Bytes 05/09/2007 21:37:34
SQLITE3.DLL : 3.3.17.1 339968 Bytes 05/09/2007 21:37:41
Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: I:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Start of the scan: jeudi 6 septembre 2007 00:07
The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'Azureus.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'usnsvc.exe' - '1' Module(s) have been scanned
Scan process 'kpf4gui.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'kpf4gui.exe' - '1' Module(s) have been scanned
Scan process 'apcsystray.exe' - '1' Module(s) have been scanned
Scan process 'kpf4ss.exe' - '1' Module(s) have been scanned
Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned
Scan process 'mdm.exe' - '1' Module(s) have been scanned
Scan process 'raid_tool.exe' - '1' Module(s) have been scanned
Scan process 'guard.exe' - '1' Module(s) have been scanned
Scan process 'mainserv.exe' - '1' Module(s) have been scanned
Scan process 'uGuru_Event_Receiver.exe' - '1' Module(s) have been scanned
Scan process 'aawservice.exe' - '1' Module(s) have been scanned
Scan process 'GoogleToolbarNotifier.exe' - '1' Module(s) have been scanned
Scan process 'uGuru.exe' - '1' Module(s) have been scanned
Scan process 'winampa.exe' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'SOUNDMAN.EXE' - '1' Module(s) have been scanned
Scan process 'rundll32.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
38 processes with 38 modules were scanned
Start scanning boot sectors:
Boot sector 'C:\'
[NOTE] No virus was found!
Boot sector 'F:\'
[NOTE] No virus was found!
Boot sector 'G:\'
[NOTE] No virus was found!
Boot sector 'H:\'
[NOTE] No virus was found!
Boot sector 'I:\'
[NOTE] No virus was found!
Starting to scan the registry.
The registry was scanned ( '35' files ).
Starting the file scan:
Begin scan in 'C:\'
C:\hiberfil.sys
!The file could not be opened!
C:\pagefile.sys
!The file could not be opened!
C:\Program Files\Navilog1\navilog1.bat
[DETECTION] Contains suspicious code HEUR/Exploit.HTML
!The file was ignored!
C:\WINDOWS\system32\ActiveScan\pskavs.dll
[DETECTION] Contains detection pattern of the Windows virus W95/Blumblebee.1738
iThe file was moved to '474aa9da.qua'!
Begin scan in 'F:\' <Musique>
Begin scan in 'G:\' <Vidéo 1>
Begin scan in 'H:\' <Vidéo 2>
Begin scan in 'I:\' <Vidéo 3>
End of the scan: jeudi 6 septembre 2007 09:18
Used time: 9:11:13 min
The scan has been done completely.
3418 Scanning directories
275180 Files were scanned
1 viruses and/or unwanted programs were found
1 Files were classified as suspicious:
0 files were deleted
0 files were repaired
1 files were moved to quarantine
0 files were renamed
2 Files cannot be scanned
275179 Files not concerned
1968 Archives were scanned
3 Warnings
0 Notes
Et 2 warning louches ....
Le jour suivant je refais un scan, et j'ai le meme virus mais dans un autre endroit !!! j' comprends rien
log antivir :
AntiVir PersonalEdition Classic
Report file date: jeudi 6 septembre 2007 18:45
Scanning for 1048421 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Username: SYSTEM
Computer name: GUI
Version information:
BUILD.DAT : 268 15604 Bytes 31/08/2007 13:04:00
AVSCAN.EXE : 7.0.6.1 290856 Bytes 05/09/2007 21:37:40
AVSCAN.DLL : 7.0.6.0 49192 Bytes 05/09/2007 21:37:40
LUKE.DLL : 7.0.5.3 147496 Bytes 05/09/2007 21:37:41
LUKERES.DLL : 7.0.6.1 10280 Bytes 05/09/2007 21:37:41
ANTIVIR0.VDF : 6.35.0.1 7371264 Bytes 31/05/2006 13:08:58
ANTIVIR1.VDF : 6.39.0.129 7251968 Bytes 10/07/2007 19:16:31
ANTIVIR2.VDF : 6.39.1.74 1637376 Bytes 02/09/2007 20:35:46
ANTIVIR3.VDF : 6.39.1.94 97280 Bytes 05/09/2007 21:37:41
AVEWIN32.DLL : 7.6.0.5 2789888 Bytes 05/09/2007 21:37:42
AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 09:36:26
AVPREF.DLL : 7.0.2.2 25640 Bytes 05/09/2007 21:37:40
AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 12:16:24
AVPACK32.DLL : 7.3.0.15 360488 Bytes 01/09/2007 19:16:32
AVREG.DLL : 7.0.1.6 30760 Bytes 05/09/2007 21:37:40
AVARKT.DLL : 1.0.0.20 278568 Bytes 05/09/2007 21:37:38
AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 05/09/2007 21:37:39
NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 10:09:42
RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 05/09/2007 21:37:34
RCTEXT.DLL : 7.0.62.0 86056 Bytes 05/09/2007 21:37:34
SQLITE3.DLL : 3.3.17.1 339968 Bytes 05/09/2007 21:37:41
Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: I:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Start of the scan: jeudi 6 septembre 2007 18:45
The scan of running processes will be started
Scan process 'avscan.exe' - '0' Module(s) have been scanned
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'firefox.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
Scan process 'usnsvc.exe' - '1' Module(s) have been scanned
Scan process 'kpf4gui.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'kpf4gui.exe' - '1' Module(s) have been scanned
Scan process 'kpf4ss.exe' - '1' Module(s) have been scanned
Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned
Scan process 'mdm.exe' - '1' Module(s) have been scanned
Scan process 'apcsystray.exe' - '1' Module(s) have been scanned
Scan process 'guard.exe' - '1' Module(s) have been scanned
Scan process 'mainserv.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'raid_tool.exe' - '1' Module(s) have been scanned
Scan process 'uGuru_Event_Receiver.exe' - '1' Module(s) have been scanned
Scan process 'aawservice.exe' - '1' Module(s) have been scanned
Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
Scan process 'GoogleToolbarNotifier.exe' - '1' Module(s) have been scanned
Scan process 'googletalk.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'uGuru.exe' - '1' Module(s) have been scanned
Scan process 'winampa.exe' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'SOUNDMAN.EXE' - '1' Module(s) have been scanned
Scan process 'rundll32.exe' - '1' Module(s) have been scanned
Scan process 'reader_sl.exe' - '1' Module(s) have been scanned
Scan process 'avgas.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
42 processes with 42 modules were scanned
Start scanning boot sectors:
Boot sector 'C:\'
[NOTE] No virus was found!
Boot sector 'F:\'
[NOTE] No virus was found!
Boot sector 'G:\'
[NOTE] No virus was found!
Boot sector 'H:\'
[NOTE] No virus was found!
Boot sector 'I:\'
[NOTE] No virus was found!
Starting to scan the registry.
The registry was scanned ( '35' files ).
Starting the file scan:
Begin scan in 'C:\'
C:\hiberfil.sys
!The file could not be opened!
C:\pagefile.sys
!The file could not be opened!
C:\Program Files\Navilog1\navilog1.bat
[DETECTION] Contains suspicious code HEUR/Exploit.HTML
!The file was ignored!
C:\System Volume Information\_restore{44DA8D77-A521-4A68-BBC8-07EE7E22DEF0}\RP129\A0007172.dll
[DETECTION] Contains detection pattern of the Windows virus W95/Blumblebee.1738
iThe file was moved to '4710360a.qua'!
Begin scan in 'F:\' <Musique>
Begin scan in 'G:\' <Vidéo 1>
Begin scan in 'H:\' <Vidéo 2>
Begin scan in 'I:\' <Vidéo 3>
End of the scan: jeudi 6 septembre 2007 19:21
Used time: 36:08 min
The scan has been done completely.
3420 Scanning directories
275224 Files were scanned
1 viruses and/or unwanted programs were found
1 Files were classified as suspicious:
0 files were deleted
0 files were repaired
1 files were moved to quarantine
0 files were renamed
2 Files cannot be scanned
275223 Files not concerned
1969 Archives were scanned
3 Warnings
0 Notes
Est ce que quelqu'un aurait la solution à mon pb !! ??
MERCI d'avance
