Probleme avec virus raccourci

Bonjour,

############################## | UsbFix V 7.069 | [Recherche]

Utilisateur: Administrateur (Administrateur) # EDITION_ULTRA
Mis à jour le 20/11/2011 par El Desaparecido
Lancé à 13:04:58 | 23/11/2011

Site Web: https://www.sosvirus.net/
Fichier suspect ? : http://eldesaparecido.com/support.php
Contact: contact@eldesaparecido.com

PC: eMachines (E520 ) (X86-based PC) # Desktop Computer
CPU: Genuine Intel(R) CPU 585 @ 2.16GHz (2161)
RAM -> [ Total : 954 | Free : 199 ]
BIOS: InsydeH2O Version V1.06
BOOT: Normal boot

OS: Microsoft Windows XP Professionnel (5.1.2600 32-Bit) # Service Pack 3
WB: Windows Internet Explorer 7.0.5730.11

SC: Security Center Service [ Enabled ]
WU: Windows Update Service [ Enabled ]
FW: Windows FireWall Service [ Enabled ]

C:\ (%systemdrive%) -> Disque fixe # 78 Go (7 Go libre(s) - 8%) [] # NTFS
D:\ -> Disque fixe # 71 Go (9 Go libre(s) - 13%) [Nouveau nom] # NTFS
E:\ -> CD-ROM
F:\ -> CD-ROM
G:\ -> Disque fixe # 215 Go (47 Go libre(s) - 22%) [Disque D badar Pc] # NTFS
H:\ -> Disque fixe # 137 Go (44 Go libre(s) - 32%) [Pc de BADAR] # NTFS
I:\ -> Disque fixe # 111 Go (38 Go libre(s) - 34%) [Mahabeh Pc] # NTFS

################## | Processus Actif |

C:\WINDOWS\System32\smss.exe (792)
C:\WINDOWS\system32\csrss.exe (868)
C:\WINDOWS\system32\winlogon.exe (892)
C:\WINDOWS\system32\services.exe (936)
C:\WINDOWS\system32\lsass.exe (948)
C:\WINDOWS\system32\svchost.exe (1096)
C:\WINDOWS\system32\svchost.exe (1176)
C:\WINDOWS\System32\svchost.exe (1212)
C:\WINDOWS\system32\svchost.exe (1344)
C:\WINDOWS\system32\svchost.exe (1528)
C:\WINDOWS\system32\spoolsv.exe (1764)
C:\Program Files\Apoint2K\Apoint.exe (692)
C:\WINDOWS\RTHDCPL.EXE (708)
C:\WINDOWS\system32\igfxtray.exe (724)
C:\WINDOWS\system32\hkcmd.exe (732)
C:\WINDOWS\system32\igfxpers.exe (744)
C:\WINDOWS\VistaDrive\VistaDrive.exe (752)
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (760)
C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.23.10\BabylonToolbarsrv.exe (772)
C:\Program Files\Babylon\Babylon-Pro\Babylon.exe (808)
C:\Program Files\Ultralingua\Ultralingua 7\ULHotkey.exe (860)
C:\Program Files\iTunes\iTunesHelper.exe (1120)
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe (1104)
C:\Program Files\lg_fwupdate\fwupdate.exe (1248)
C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe (1368)
C:\Program Files\Nero\Nero 7\InCD\InCD.exe (1392)
C:\WINDOWS\system32\igfxsrvc.exe (1400)
C:\program files\real\realplayer\update\realsched.exe (1472)
C:\Program Files\SuperCopier2\SuperCopier2.exe (1488)
C:\Program Files\Windows Live\Messenger\msnmsgr.exe (1500)
C:\Program Files\Messenger\msmsgs.exe (1508)
C:\WINDOWS\system32\ctfmon.exe (1524)
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (1588)
C:\Program Files\Apoint2K\Apntex.exe (1924)
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe (540)
C:\Program Files\Bonjour\mDNSResponder.exe (644)
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (516)
C:\WINDOWS\system32\inetsrv\inetinfo.exe (1600)
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe (244)
C:\Program Files\Java\jre6\bin\jqs.exe (2052)
C:\Program Files\CyberLink\Shared Files\RichVideo.exe (2316)
C:\WINDOWS\system32\svchost.exe (2436)
C:\Program Files\ZTEMT UI\bin\MonServiceUDisk.exe (2480)
C:\Program Files\iPod\bin\iPodService.exe (3236)
C:\WINDOWS\System32\alg.exe (3672)
C:\WINDOWS\System32\svchost.exe (4032)
C:\WINDOWS\system32\svchost.exe (2216)
C:\WINDOWS\explorer.exe (1404)
C:\Program Files\Google\Chrome\Application\chrome.exe (1520)
C:\Program Files\Google\Chrome\Application\chrome.exe (3792)
C:\Program Files\Google\Chrome\Application\chrome.exe (4012)
C:\Program Files\Google\Chrome\Application\chrome.exe (3304)
C:\Program Files\Google\Chrome\Application\chrome.exe (1628)
C:\Program Files\Google\Chrome\Application\chrome.exe (3228)
C:\Program Files\Google\Chrome\Application\chrome.exe (3936)
C:\Program Files\Google\Chrome\Application\chrome.exe (3184)
C:\Program Files\Google\Chrome\Application\chrome.exe (3264)
C:\UsbFix\UsbFix.exe (128)
C:\WINDOWS\system32\wbem\wmiprvse.exe (2552)

################## | Processus Stoppés |

Stoppé! C:\WINDOWS\system32\spoolsv.exe (1764)
Stoppé! C:\Program Files\Apoint2K\Apoint.exe (692)
Stoppé! C:\WINDOWS\RTHDCPL.EXE (708)
Stoppé! C:\WINDOWS\system32\igfxtray.exe (724)
Stoppé! C:\WINDOWS\system32\hkcmd.exe (732)
Stoppé! C:\WINDOWS\system32\igfxpers.exe (744)
Stoppé! C:\WINDOWS\VistaDrive\VistaDrive.exe (752)
Stoppé! C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (760)
Stoppé! C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.23.10\BabylonToolbarsrv.exe (772)
Stoppé! C:\Program Files\Babylon\Babylon-Pro\Babylon.exe (808)
Stoppé! C:\Program Files\Ultralingua\Ultralingua 7\ULHotkey.exe (860)
Stoppé! C:\Program Files\iTunes\iTunesHelper.exe (1120)
Stoppé! C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe (1104)
Stoppé! C:\Program Files\lg_fwupdate\fwupdate.exe (1248)
Stoppé! C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe (1368)
Stoppé! C:\Program Files\Nero\Nero 7\InCD\InCD.exe (1392)
Stoppé! C:\WINDOWS\system32\igfxsrvc.exe (1400)
Stoppé! C:\program files\real\realplayer\update\realsched.exe (1472)
Stoppé! C:\Program Files\SuperCopier2\SuperCopier2.exe (1488)
Stoppé! C:\Program Files\Windows Live\Messenger\msnmsgr.exe (1500)
Stoppé! C:\Program Files\Messenger\msmsgs.exe (1508)
Stoppé! C:\WINDOWS\system32\ctfmon.exe (1524)
Stoppé! C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (1588)
Stoppé! C:\Program Files\Apoint2K\Apntex.exe (1924)
Stoppé! C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe (540)
Stoppé! C:\Program Files\Bonjour\mDNSResponder.exe (644)
Stoppé! C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (516)
Stoppé! C:\WINDOWS\system32\inetsrv\inetinfo.exe (1600)
Stoppé! C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe (244)
Stoppé! C:\Program Files\Java\jre6\bin\jqs.exe (2052)
Stoppé! C:\Program Files\CyberLink\Shared Files\RichVideo.exe (2316)
Stoppé! C:\Program Files\ZTEMT UI\bin\MonServiceUDisk.exe (2480)
Stoppé! C:\Program Files\iPod\bin\iPodService.exe (3236)
Stoppé! C:\WINDOWS\System32\alg.exe (3672)
Stoppé! C:\Program Files\Google\Chrome\Application\chrome.exe (1520)
Stoppé! C:\Program Files\Google\Chrome\Application\chrome.exe (3792)
Stoppé! C:\Program Files\Google\Chrome\Application\chrome.exe (4012)
Stoppé! C:\Program Files\Google\Chrome\Application\chrome.exe (3304)
Stoppé! C:\Program Files\Google\Chrome\Application\chrome.exe (1628)
Stoppé! C:\Program Files\Google\Chrome\Application\chrome.exe (3228)
Stoppé! C:\Program Files\Google\Chrome\Application\chrome.exe (3936)
Stoppé! C:\Program Files\Google\Chrome\Application\chrome.exe (3184)
Stoppé! C:\Program Files\Google\Chrome\Application\chrome.exe (3264)

################## | Éléments infectieux |

Présent! F:\Formation.exe
Présent! F:\AUTORUN.INF

################## | Registre |

Présent! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|forceclassiccontrolpanel
Présent! HKLM\Software\Microsoft\Windows\CurrentVersion\Run|(Default)

################## | Mountpoints2 |

HKCU\.\.\.\.\Explorer\MountPoints2\J
Shell\AutoRun\Command = J:\setupSNK.exe

HKCU\.\.\.\.\Explorer\MountPoints2\{32ae6243-cd84-11e0-aba4-001eecc9a8ca}
Shell\AutoRun\Command = G:\setupSNK.exe

HKCU\.\.\.\.\Explorer\MountPoints2\{5a8ee930-03fd-11e1-ac6f-001eecc9a8ca}
Shell\AutoRun\Command = J:\setupSNK.exe

HKCU\.\.\.\.\Explorer\MountPoints2\{93a466e2-e089-11e0-abef-00234db10d97}
Shell\AutoRun\Command = G:\LaunchU3.exe -a

HKCU\.\.\.\.\Explorer\MountPoints2\{aef4165d-9d82-11e0-aaa3-001eecc9a8ca}
Shell\AutoRun\Command = "G:\WD SmartWare.exe" autoplay=true

HKCU\.\.\.\.\Explorer\MountPoints2\{c8e50a10-0afe-11e1-ac7d-001eecc9a8ca}
Shell\AutoRun\Command = G:\Setup.exe

HKCU\.\.\.\.\Explorer\MountPoints2\{c8e50a11-0afe-11e1-ac7d-001eecc9a8ca}
Shell\downloadsb\Command = explorer https://www.philips.nl/c-m-so/draagbare-audio

HKCU\.\.\.\.\Explorer\MountPoints2\{cd6cb78a-c1f4-11e0-ab62-001eecc9a8ca}
Shell\AutoRun\Command = G:\iStudio.exe

HKCU\.\.\.\.\Explorer\MountPoints2\{ebdf2f92-ff2c-11e0-ac5c-001eecc9a8ca}
Shell\AutoRun\Command = restore\restorestarter.exe

HKCU\.\.\.\.\Explorer\MountPoints2\{ff87d6d5-b896-11e0-ab32-001eecc9a8ca}
Shell\AutoRun\Command = G:\LGAutoRun.exe

################## | Vaccin |

C:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
D:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)

################## | E.O.F |