Zk

############################## | UsbFix V6.104 |

User : nordine (Administrateurs) # NORDINE-3B02645
Update on 14/04/2010 by El Desaparecido , C_XX & Chimay8
Start at: 23:42:22 | 15/04/2010
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

Intel(R) Pentium(R) D CPU 3.00GHz
Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 2
Internet Explorer 6.0.2900.2180
Windows Firewall Status : Enabled
AV : avast! Antivirus 5.0.83886587 [ Enabled | Updated ]

C:\ -> Disque fixe local # 29,29 Go (16,07 Go free) # NTFS
D:\ -> Disque fixe local # 119,71 Go (116,93 Go free) # NTFS
E:\ -> Disque amovible
F:\ -> Disque amovible
G:\ -> Disque amovible
H:\ -> Disque amovible
I:\ -> Disque CD-ROM
J:\ -> Disque fixe local # 232,83 Go (206,45 Go free) [WD Passport] # FAT32
K:\ -> Disque fixe local # 232,88 Go (47,83 Go free) [OneTouch 4] # NTFS
L:\ -> Disque amovible # 968,83 Mo (748,96 Mo free) [USB_DISK] # FAT32

################## | Elements infectieux |

C:\WINDOWS\kubernesis.dll.vbe
C:\autorun.inf
C:\kubernesis.vbe
D:\autorun.inf
D:\kubernesis.vbe
J:\autorun.inf
J:\kubernesis.vbe
K:\autorun.inf
K:\kubernesis.vbe
K:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx
K:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665
L:\autorun.inf
L:\kubernesis.vbe

################## | Registre |

[HKLM\Software\Microsoft\Windows\CurrentVersion\Run] "kubernesis.dll"
[HKLM\Software\Microsoft\Windows\CurrentVersion\Run] "kubernscan"

################## | Mountpoints2 |

HKCU\..\..\Explorer\MountPoints2\{0d021f9a-4593-11df-a0a1-00123fb90bcf}
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Wscript.exe kubernesis.vbe

HKCU\..\..\Explorer\MountPoints2\{1f4f44e5-44f1-11df-bb78-806d6172696f}
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Wscript.exe kubernesis.vbe

HKCU\..\..\Explorer\MountPoints2\{1f4f44e6-44f1-11df-bb78-806d6172696f}
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Wscript.exe kubernesis.vbe

HKCU\..\..\Explorer\MountPoints2\{3d87baeb-44e7-11df-a0a0-99a5713a6204}
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Wscript.exe kubernesis.vbe

HKCU\..\..\Explorer\MountPoints2\{3d87baee-44e7-11df-a0a0-a0646f153bf0}
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Wscript.exe kubernesis.vbe

HKCU\..\..\Explorer\MountPoints2\{8291d16a-48c9-11df-a0b4-00123fb90bcf}
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Wscript.exe kubernesis.vbe

################## | Vaccin |

################## | ! Fin du rapport # UsbFix V6.104 ! |