Detection de virus par antivir

Salut,

Alors voilà antivir me bippe depuis trois quart d'heure avec une détection :

JS/Dldr.Agent.Agr.1 Java script virus

J'ai bien essayé de faire supprimer ou deny access mais ca ne change rien.

Can You Help me please ???????

A plus

Bonjour
dans quel fichier est il détecté ?
Réalise un scan en mode sans echec en mettant bien le fichier en quarantaine

Bon j'ai fait comme tu as dit laddy,

et il en a trouvé d'autres, je te poste le rapport ci dessous:

Avira AntiVir Personal
Report file date: samedi 25 avril 2009 21:35

Scanning for 1364969 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Boot mode: Save mode
Username: Administrateur
Computer name: MOLOCH

Version information:
BUILD.DAT : 8.2.0.347 16934 Bytes 16/03/2009 14:45:00
AVSCAN.EXE : 8.1.4.10 315649 Bytes 25/11/2008 09:47:32
AVSCAN.DLL : 8.1.4.0 40705 Bytes 26/05/2008 07:56:40
LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 12:44:19
LUKERES.DLL : 8.1.4.0 12033 Bytes 26/05/2008 07:58:52
ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 09:53:42
ANTIVIR1.VDF : 7.1.2.12 3336192 Bytes 11/02/2009 20:00:36
ANTIVIR2.VDF : 7.1.3.63 1588224 Bytes 16/04/2009 15:38:43
ANTIVIR3.VDF : 7.1.3.109 144896 Bytes 25/04/2009 15:37:14
Engineversion : 8.2.0.156
AEVDF.DLL : 8.1.1.0 106868 Bytes 31/01/2009 12:44:04
AESCRIPT.DLL : 8.1.1.77 381306 Bytes 23/04/2009 15:38:13
AESCN.DLL : 8.1.1.10 127348 Bytes 04/04/2009 15:36:10
AERDL.DLL : 8.1.1.3 438645 Bytes 06/11/2008 09:46:24
AEPACK.DLL : 8.1.3.14 397685 Bytes 18/04/2009 15:37:53
AEOFFICE.DLL : 8.1.0.36 196987 Bytes 13/03/2009 20:00:44
AEHEUR.DLL : 8.1.0.122 1737080 Bytes 25/04/2009 15:37:23
AEHELP.DLL : 8.1.2.2 119158 Bytes 13/03/2009 20:00:41
AEGEN.DLL : 8.1.1.39 348532 Bytes 23/04/2009 15:37:55
AEEMU.DLL : 8.1.0.9 393588 Bytes 16/10/2008 06:59:17
AECORE.DLL : 8.1.6.9 176500 Bytes 15/04/2009 15:36:48
AEBB.DLL : 8.1.0.3 53618 Bytes 16/10/2008 06:59:15
AVWINLL.DLL : 1.0.0.12 15105 Bytes 09/07/2008 08:40:05
AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 09:28:01
AVREP.DLL : 8.0.0.3 155688 Bytes 20/04/2009 15:36:55
AVREG.DLL : 8.0.0.1 33537 Bytes 09/05/2008 11:26:40
AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23
AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 12:27:49
SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02
SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 12:49:40
NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10
RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 12/06/2008 13:48:07
RCTEXT.DLL : 8.0.52.0 86273 Bytes 27/06/2008 13:34:37

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, D:,
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: All files
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Deviating archive types..........: +BSD Mailbox, +Netscape/Mozilla Mailbox, +Eudora Mailbox, +Squid cache, +Pegasus Mailbox, +MS Outlook Mailbox,
Macro heuristic..................: on
File heuristic...................: medium
Deviating risk categories........: +GAME,+JOKE,+PCK,+SPR,

Start of the scan: samedi 25 avril 2009 21:35

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
11 processes with 11 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!
Master boot sector HD1
[INFO] No virus was found!
Master boot sector HD2
[INFO] No virus was found!

Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Boot sector 'D:\'
[INFO] No virus was found!

Starting to scan the registry.
The registry was scanned ( '59' files ).


Starting the file scan:

Begin scan in 'C:\'
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\RavMon.exe
[DETECTION] Is the TR/Agent.Abt.3 Trojan
[NOTE] The file was moved to '4a69669a.qua'!
C:\Documents and Settings\Willou.MOLOCH\Local Settings\Temp\Z46d6G92.exe.part
[0] Archive type: NSIS
--> ProgramFilesDir/libquicktime_plugin.dll
[WARNING] No further files can be extracted from this archive. The archive will be closed
C:\WINDOWS\MDM.EXE
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was moved to '4a40721f.qua'!
C:\WINDOWS\SVCHOST.EXE
[DETECTION] Is the TR/Agent.Abt.3 Trojan
[NOTE] The file was moved to '4a367237.qua'!
C:\WINDOWS\system32\drivers\sptd.sys
[WARNING] The file could not be opened!
Begin scan in 'D:\'
D:\RavMon.exe
[DETECTION] Is the TR/Agent.Abt.3 Trojan
[NOTE] The file was moved to '4a6976b9.qua'!


End of the scan: samedi 25 avril 2009 23:24
Used time: 1:48:39 Hour(s)

The scan has been done completely.

13564 Scanning directories
518202 Files were scanned
4 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
4 files were moved to quarantine
0 files were renamed
2 Files cannot be scanned
518196 Files not concerned
15586 Archives were scanned
3 Warnings
4 Notes

Voilà a plus
Ciao ciao

Ben alors plus personne?

salut !si! si ! mais laddy s'occupe de toi donc on lui laisse le soin de le faire c'est tout

RSIT
Télécharge random's system information tool (RSIT) par random/random et sauvegarde le sur ton Bureau

* Double-clic sur RSIT.exe pour l'exécuter.
* Clique sur le bouton "Continue" sur la fenêtre d'avertissement.
* Une fois le scan terminé, tu auras deux rapports qui seront ouverts : log.txt et info.txt (c:\rsit)
* Poste les dans ta prochaine réponse

Note : un rapport hijackthis est contenu dans le rapport log.txt

Si tes rapports sont trop long utilise ce site : http://www.miraclesalad.com/webtools/clip.php
Copie/coller ton rapport et clique sur le lien IP ADRESSE copie coller ton IP dans la zone adéquate puis clique sur le bouton Paste to new clipboard
Donne le lien dans ta prochaine réponse.
Il est de type : http://www.miraclesalad.com/webtools/clip.php?clip=XXXX ou xxxx est un numéro.

Voici le premier, le log

http://www.miraclesalad.com/webtools/clip.php?clip=2f15

Voici le deuxieme

http://www.miraclesalad.com/webtools/clip.php?clip=2f16

désinstaller ses logiciels via la panneau de configuration

Java(TM) 6 Update 4
Java(TM) 6 Update 7

connais tu ce programme :
C:\Program Files\STK014_V2.01\STK014M.exe.

J'ai desinstallé les deux java.

Je ne connais pas le programme cité. Je le desinstalle ?