Bonjour,
je voudrais que vous me donnez votre avis sur le scan de usbfix que j'ai fais sur mon pc et voila le rapport:
**********************************************
**********************************************
############################## | UsbFix V 7.061 | [Recherche]
Utilisateur: Zied (Administrateur) # PC1
Mis à jour le 05/10/2011 par El Desaparecido
Lancé à 09:53:26 | 07/10/2011
Site Web:
https://www.sosvirus.net/
Fichier suspect ? : http://eldesaparecido.com/support.php
Contact: contact@eldesaparecido.com
PC: To Be Filled By O.E.M. (To Be Filled By O.E.M.) (X86-based PC) # Desktop Computer
CPU: Processeur Intel Pentium III Xeon (2493)
RAM -> [ Total : 1014 | Free : 261 ]
BIOS: Default System BIOS
BOOT: Normal boot
OS: Microsoft Windows XP Professionnel (5.1.2600 32-Bit) # Service Pack 3
WB: Windows Internet Explorer 6.0.2900.5512
SC: Security Center Service [ Enabled ]
WU: Windows Update Service [ Enabled ]
FW: Windows FireWall Service [ Enabled ]
C:\ (%systemdrive%) -> Disque fixe # 49 Go (13 Go libre(s) - 26%) [] # NTFS
D:\ -> CD-ROM
E:\ -> Disque fixe # 146 Go (28 Go libre(s) - 19%) [Multimedia] # NTFS
F:\ -> Disque fixe # 152 Go (87 Go libre(s) - 57%) [Divers] # NTFS
G:\ -> CD-ROM
H:\ -> CD-ROM
################## | Processus Actif |
C:\WINDOWS\System32\smss.exe (780)
C:\WINDOWS\system32\winlogon.exe (904)
C:\WINDOWS\system32\services.exe (948)
C:\WINDOWS\system32\lsass.exe (960)
C:\WINDOWS\system32\svchost.exe (1136)
C:\WINDOWS\System32\svchost.exe (1308)
C:\Program Files\AVAST Software\Avast\AvastSvc.exe (1664)
C:\WINDOWS\system32\spoolsv.exe (224)
C:\WINDOWS\Explorer.EXE (1284)
C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE (1936)
C:\Program Files\Java\jre6\bin\jqs.exe (484)
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe (600)
C:\WINDOWS\system32\svchost.exe (196)
C:\WINDOWS\system32\wscntfy.exe (2372)
C:\WINDOWS\system32\wbem\wmiapsrv.exe (2940)
C:\WINDOWS\RTHDCPL.EXE (3120)
C:\WINDOWS\System32\svchost.exe (3264)
C:\Program Files\AVAST Software\Avast\avastUI.exe (3304)
C:\WINDOWS\system32\igfxsrvc.exe (3344)
C:\Program Files\Real\RealPlayer\update\realsched.exe (3396)
C:\WINDOWS\system32\igfxtray.exe (3484)
C:\WINDOWS\system32\hkcmd.exe (3564)
C:\WINDOWS\system32\igfxpers.exe (3596)
C:\Program Files\SuperCopier2\SuperCopier2.exe (3704)
C:\WINDOWS\system32\ctfmon.exe (3880)
C:\Program Files\TinaSoft\Easy Cafe Server\EasyServer.exe (3892)
C:\Program Files\Internet Download Manager\IEMonitor.exe (3248)
C:\Documents and Settings\Zied\Local Settings\Application Data\MediaGet2\mediaget.exe (2980)
C:\WINDOWS\system32\taskmgr.exe (3864)
C:\Program Files\Internet Download Manager\IDMan.exe (2184)
F:\apps\FirefoxPortable\FirefoxPortable.exe (3664)
F:\apps\FirefoxPortable\App\firefox\firefox.exe (2592)
F:\apps\FirefoxPortable\App\firefox\plugin-container.exe (932)
F:\apps\FirefoxPortable\App\firefox\plugin-container.exe (3752)
C:\Program Files\Winamp\winamp.exe (3848)
C:\UsbFix\Go.exe (1276)
################## | Processus Stoppés |
Stoppé! C:\Program Files\AVAST Software\Avast\AvastSvc.exe (1664)
Stoppé! C:\WINDOWS\system32\spoolsv.exe (224)
Stoppé! C:\WINDOWS\Explorer.EXE (1284)
Stoppé! C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE (1936)
Stoppé! C:\Program Files\Java\jre6\bin\jqs.exe (484)
Stoppé! C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe (600)
Stoppé! C:\WINDOWS\system32\wscntfy.exe (2372)
Stoppé! C:\WINDOWS\system32\wbem\wmiapsrv.exe (2940)
Stoppé! C:\WINDOWS\RTHDCPL.EXE (3120)
Stoppé! C:\Program Files\AVAST Software\Avast\avastUI.exe (3304)
Stoppé! C:\WINDOWS\system32\igfxsrvc.exe (3344)
Stoppé! C:\Program Files\Real\RealPlayer\update\realsched.exe (3396)
Stoppé! C:\WINDOWS\system32\igfxtray.exe (3484)
Stoppé! C:\WINDOWS\system32\hkcmd.exe (3564)
Stoppé! C:\WINDOWS\system32\igfxpers.exe (3596)
Stoppé! C:\Program Files\SuperCopier2\SuperCopier2.exe (3704)
Stoppé! C:\WINDOWS\system32\ctfmon.exe (3880)
Stoppé! C:\Program Files\TinaSoft\Easy Cafe Server\EasyServer.exe (3892)
Stoppé! C:\Program Files\Internet Download Manager\IEMonitor.exe (3248)
Stoppé! C:\Documents and Settings\Zied\Local Settings\Application Data\MediaGet2\mediaget.exe (2980)
Stoppé! C:\WINDOWS\system32\taskmgr.exe (3864)
Stoppé! C:\Program Files\Internet Download Manager\IDMan.exe (2184)
Stoppé! F:\apps\FirefoxPortable\FirefoxPortable.exe (3664)
Stoppé! F:\apps\FirefoxPortable\App\firefox\firefox.exe (2592)
Stoppé! F:\apps\FirefoxPortable\App\firefox\plugin-container.exe (932)
Stoppé! F:\apps\FirefoxPortable\App\firefox\plugin-container.exe (3752)
Stoppé! C:\Program Files\Winamp\winamp.exe (3848)
################## | Éléments infectieux |
Présent! D:\AutoRun.exe
Présent! E:\QuickTimeInstaller.exe
Présent! C:\Documents and Settings\Zied\Application Data\Temp
Présent! C:\DOCUME~1\Zied\LOCALS~1\Temp\AutoRun.exe
Présent! D:\Setup.exe
Présent! D:\autorun.inf
Présent! D:\autorun.exe
Présent! C:\Documents and Settings\Zied\Local Settings\Temp\AutoRun.exe
################## | Registre |
################## | Mountpoints2 |
HKCU\.\.\.\.\Explorer\MountPoints2\{19f24140-e4e7-11e0-be6c-806d6172696f}
Shell\AutoRun\Command = D:\Setup.exe
HKCU\.\.\.\.\Explorer\MountPoints2\{35d025b7-6405-11e0-8189-001966ff6bf2}
Shell\AutoRun\Command = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL laouZ.exE
HKCU\.\.\.\.\Explorer\MountPoints2\{43acec82-9b4a-11e0-820b-00a1b00109f8}
Shell\AutoRun\Command = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RIUOm.exE
HKCU\.\.\.\.\Explorer\MountPoints2\{447dd92d-6592-11e0-8191-001966ff6bf2}
Shell\AutoRun\Command = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL XEIjUG.EXe
HKCU\.\.\.\.\Explorer\MountPoints2\{4e1f0552-76da-11e0-81be-00a1b00109f8}
Shell\AutoRun\Command = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wOaUrud.EXE
HKCU\.\.\.\.\Explorer\MountPoints2\{4f96a80e-8cd4-11e0-81e8-00a1b00109f8}
Shell\AutoRun\Command = D:\nszOAW.ExE
HKCU\.\.\.\.\Explorer\MountPoints2\{a479c6d5-8692-11e0-81dc-00a1b00109f8}
Shell\AutoRun\Command = Images\Chouf-This.exe
Shell\explorer\Command = Images\Chouf-This.exe
Shell\open\Command = Images\Chouf-This.exe
HKCU\.\.\.\.\Explorer\MountPoints2\{ba602c06-6fc6-11e0-81ad-00a1b00109f8}
Shell\Auto\Command = wscript "moz.vbs"
Shell\AutoRun\Command = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript "moz.vbs"
HKCU\.\.\.\.\Explorer\MountPoints2\{cb23b365-d9e4-11e0-9553-00a1b00109f8}
Shell\AutoRun\Command = D:\.\Setup.exe AUTORUN=1
HKCU\.\.\.\.\Explorer\MountPoints2\{d8811971-6388-11e0-8a62-001966ff6bf2}
Shell\AutoRun\Command = I:\LaunchU3.exe -a
################## | Vaccin |
(!) Cet ordinateur n'est pas vacciné!
################## | E.O.F |
Afficher la suite
