Bonjour,
<config>Windows 7 / Chrome 21.0.1180.89</config>
############################## | UsbFix V 7.097 | [Suppression]
Utilisateur: isabelle (Administrateur) # ISABELLE-PC
Mis à jour le 02/09/2012 par El Desaparecido
Lancé à 16:39:37 | 21/10/2012
Site Web:
https://www.sosvirus.net/
Forum: http://forum.eldesaparecido.com
Fichier suspect ? : http://eldesaparecido.com/upload.php
Contact: contact@eldesaparecido.com
PC: Acer (Aspire X3400) (x64-based PC
CPU: AMD Athlon(tm) II X3 425 Processor (2700)
RAM -> [Total : 2815 | Free : 435]
BIOS: Default System BIOS
BOOT: Normal boot
OS: Microsoft Windows 7 Édition Familiale Premium (6.1.7601 64-Bit) # Service Pack 1
WB: Windows Internet Explorer 9.0.8112.16421
SC: Security Center Service [Enabled]
WU: Windows Update Service [Enabled]
AV: Microsoft Security Essentials [Enabled | Updated]
FW: Windows FireWall Service [Enabled]
C:\ (%systemdrive%) -> Disque fixe # 577 Go (446 Go libre(s) - 77%) [Acer] # NTFS
D:\ -> CD-ROM
################## | Processus Actif |
C:\Windows\system32\csrss.exe (432)
C:\Windows\system32\wininit.exe (488)
C:\Windows\system32\csrss.exe (520)
C:\Windows\system32\services.exe (552)
C:\Windows\system32\lsass.exe (568)
C:\Windows\system32\lsm.exe (576)
C:\Windows\system32\winlogon.exe (636)
C:\Windows\system32\svchost.exe (720)
C:\Windows\system32\nvvsvc.exe (784)
C:\Windows\system32\svchost.exe (824)
c:\Program Files\Microsoft Security Client\MsMpEng.exe (892)
C:\Windows\System32\svchost.exe (976)
C:\Windows\System32\svchost.exe (1016)
C:\Windows\system32\svchost.exe (332)
C:\Windows\system32\svchost.exe (1028)
C:\Windows\system32\svchost.exe (1128)
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (1196)
C:\Windows\system32\nvvsvc.exe (1212)
C:\Windows\system32\taskeng.exe (1348)
C:\Windows\System32\spoolsv.exe (1372)
C:\Windows\system32\svchost.exe (1412)
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (1516)
C:\Program Files\Bonjour\mDNSResponder.exe (1572)
C:\Program Files (x86)\Winsim\ConnectionManager\SimplyConnectionManager.exe (1632)
C:\Windows\system32\taskhost.exe (1712)
C:\Windows\system32\Dwm.exe (1820)
C:\Windows\Explorer.EXE (1848)
C:\Program Files (x86)\Acer\Registration\GregHSRW.exe (1936)
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (1980)
C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE (296)
C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe (2144)
C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (2388)
C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (2444)
C:\Windows\system32\svchost.exe (2504)
C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe (2540)
C:\Program Files\Acer\Acer Updater\UpdaterService.exe (2568)
C:\Windows\system32\dmwu.exe (2664)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (2804)
C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (2900)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (2964)
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (3012)
C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe (3024)
C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE (2100)
C:\Program Files\Microsoft Security Client\msseces.exe (2420)
C:\Program Files (x86)\uTorrent\uTorrent.exe (1100)
C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe (1696)
C:\Users\isabelle\AppData\Local\MediaGet2\mediaget.exe (1664)
C:\Program Files (x86)\Skype\Phone\Skype.exe (2044)
C:\Users\isabelle\AppData\Local\Google\Update\GoogleUpdate.exe (2036)
C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (3092)
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (3148)
C:\Windows\system32\wbem\wmiprvse.exe (3296)
C:\Windows\system32\SearchIndexer.exe (3492)
C:\Program Files (x86)\Business-in-a-Box\BIBLauncher.exe (3912)
C:\Program Files (x86)\PC Drivers HeadQuarters\Driver Detective\DriversHQ.DriverDetective.Client.exe (3932)
C:\Windows\system32\svchost.exe (1640)
C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe (4292)
C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe (4308)
C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe (4400)
C:\Program Files (x86)\winsim\ConnectionManager\Simply.SystemTrayIcon.exe (4408)
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe (4440)
C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE (4492)
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (4500)
C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUI.exe (4664)
C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe (5012)
C:\Windows\system32\WUDFHost.exe (5032)
C:\Windows\splwow64.exe (3180)
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (4372)
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (712)
C:\Program Files\Windows Media Player\wmpnetwk.exe (4896)
C:\Windows\system32\svchost.exe (1728)
C:\Windows\system32\svchost.exe (1596)
C:\Windows\System32\svchost.exe (2500)
C:\Users\isabelle\AppData\Local\Google\Chrome\Application\chrome.exe (4836)
C:\Users\isabelle\AppData\Local\Google\Chrome\Application\chrome.exe (1800)
C:\Users\isabelle\AppData\Local\Google\Chrome\Application\chrome.exe (560)
C:\Users\isabelle\AppData\Local\Google\Chrome\Application\chrome.exe (4680)
C:\Users\isabelle\AppData\Local\Google\Chrome\Application\chrome.exe (4696)
C:\Users\isabelle\AppData\Local\Google\Chrome\Application\chrome.exe (3888)
C:\Users\isabelle\AppData\Local\Google\Chrome\Application\chrome.exe (5188)
C:\Users\isabelle\AppData\Local\Google\Chrome\Application\chrome.exe (5196)
C:\Users\isabelle\AppData\Local\Google\Chrome\Application\chrome.exe (5208)
C:\Users\isabelle\AppData\Local\Google\Chrome\Application\chrome.exe (5412)
C:\Users\isabelle\AppData\Local\Google\Chrome\Application\chrome.exe (5464)
C:\Windows\system32\DllHost.exe (6000)
C:\Users\isabelle\Downloads\rav.exe (5884)
C:\Users\isabelle\AppData\Local\Google\Chrome\Application\chrome.exe (1296)
C:\Users\isabelle\AppData\Local\Google\Chrome\Application\chrome.exe (6112)
C:\Users\isabelle\AppData\Local\Google\Chrome\Application\chrome.exe (6132)
C:\Users\isabelle\AppData\Local\Google\Chrome\Application\chrome.exe (5512)
C:\Windows\system32\taskeng.exe (5920)
C:\UsbFix\Go.exe (5056)
################## | Processus Stoppés |
Stoppé! C:\Windows\system32\nvvsvc.exe (784)
Stoppé! c:\Program Files\Microsoft Security Client\MsMpEng.exe (892)
Stoppé! C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (1196)
Stoppé! C:\Windows\system32\nvvsvc.exe (1212)
Stoppé! C:\Windows\system32\taskeng.exe (1348)
Stoppé! C:\Windows\System32\spoolsv.exe (1372)
Stoppé! C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (1516)
Stoppé! C:\Program Files\Bonjour\mDNSResponder.exe (1572)
Stoppé! C:\Program Files (x86)\Winsim\ConnectionManager\SimplyConnectionManager.exe (1632)
Stoppé! C:\Windows\system32\taskhost.exe (1712)
Stoppé! C:\Program Files (x86)\Acer\Registration\GregHSRW.exe (1936)
Stoppé! C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (1980)
Stoppé! C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE (296)
Stoppé! C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe (2144)
Stoppé! C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (2388)
Stoppé! C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (2444)
Stoppé! C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe (2540)
Stoppé! C:\Program Files\Acer\Acer Updater\UpdaterService.exe (2568)
Stoppé! C:\Windows\system32\dmwu.exe (2664)
Stoppé! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (2804)
Stoppé! C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (2900)
Stoppé! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (2964)
Stoppé! C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (3012)
Stoppé! C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe (3024)
Stoppé! C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE (2100)
Stoppé! C:\Program Files\Microsoft Security Client\msseces.exe (2420)
Stoppé! C:\Program Files (x86)\uTorrent\uTorrent.exe (1100)
Stoppé! C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe (1696)
Stoppé! C:\Users\isabelle\AppData\Local\MediaGet2\mediaget.exe (1664)
Stoppé! C:\Program Files (x86)\Skype\Phone\Skype.exe (2044)
Stoppé! C:\Users\isabelle\AppData\Local\Google\Update\GoogleUpdate.exe (2036)
Stoppé! C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (3092)
Stoppé! C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (3148)
Stoppé! C:\Windows\system32\SearchIndexer.exe (3492)
Stoppé! C:\Program Files (x86)\Business-in-a-Box\BIBLauncher.exe (3912)
Stoppé! C:\Program Files (x86)\PC Drivers HeadQuarters\Driver Detective\DriversHQ.DriverDetective.Client.exe (3932)
Stoppé! C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe (4292)
Stoppé! C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe (4308)
Stoppé! C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe (4400)
Stoppé! C:\Program Files (x86)\winsim\ConnectionManager\Simply.SystemTrayIcon.exe (4408)
Stoppé! C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe (4440)
Stoppé! C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE (4492)
Stoppé! C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (4500)
Stoppé! C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUI.exe (4664)
Stoppé! C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe (5012)
Stoppé! C:\Windows\system32\WUDFHost.exe (5032)
Stoppé! C:\Windows\splwow64.exe (3180)
Stoppé! C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (4372)
Stoppé! C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (712)
Stoppé! C:\Program Files\Windows Media Player\wmpnetwk.exe (4896)
Stoppé! C:\Users\isabelle\AppData\Local\Google\Chrome\Application\chrome.exe (4836)
Stoppé! C:\Users\isabelle\AppData\Local\Google\Chrome\Application\chrome.exe (1800)
Stoppé! C:\Users\isabelle\AppData\Local\Google\Chrome\Application\chrome.exe (560)
Stoppé! C:\Users\isabelle\AppData\Local\Google\Chrome\Application\chrome.exe (4680)
Stoppé! C:\Users\isabelle\AppData\Local\Google\Chrome\Application\chrome.exe (4696)
Stoppé! C:\Users\isabelle\AppData\Local\Google\Chrome\Application\chrome.exe (3888)
Stoppé! C:\Users\isabelle\AppData\Local\Google\Chrome\Application\chrome.exe (5188)
Stoppé! C:\Users\isabelle\AppData\Local\Google\Chrome\Application\chrome.exe (5196)
Stoppé! C:\Users\isabelle\AppData\Local\Google\Chrome\Application\chrome.exe (5208)
Stoppé! C:\Users\isabelle\AppData\Local\Google\Chrome\Application\chrome.exe (5412)
Stoppé! C:\Users\isabelle\AppData\Local\Google\Chrome\Application\chrome.exe (5464)
Stoppé! C:\Windows\system32\DllHost.exe (6000)
Stoppé! C:\Users\isabelle\Downloads\rav.exe (5884)
Stoppé! C:\Users\isabelle\AppData\Local\Google\Chrome\Application\chrome.exe (1296)
Stoppé! C:\Users\isabelle\AppData\Local\Google\Chrome\Application\chrome.exe (6112)
Stoppé! C:\Users\isabelle\AppData\Local\Google\Chrome\Application\chrome.exe (6132)
Stoppé! C:\Users\isabelle\AppData\Local\Google\Chrome\Application\chrome.exe (5512)
Stoppé! C:\Windows\system32\taskeng.exe (5920)
################## | Éléments infectieux |
Supprimé! C:\Users\isabelle\AppData\Roaming\inst.exe
Supprimé! C:\Users\isabelle\AppData\Local\Temp\GUT8E4C.tmp
Supprimé! C:\$RECYCLE.BIN\S-1-5-18
Supprimé! C:\$RECYCLE.BIN\S-1-5-20
Supprimé! C:\$RECYCLE.BIN\S-1-5-21-117013252-1099351784-4080796502-1000
Supprimé! C:\$RECYCLE.BIN\S-1-5-21-1254582168-4258867237-3513991012-500
Supprimé! C:\$RECYCLE.BIN\S-1-5-21-529359312-873067509-3815296952-1000
Supprimé! C:\$RECYCLE.BIN\S-1-5-21-529359312-873067509-3815296952-500
(!) Fichiers temporaires supprimés.
################## | Registre |
Supprimé! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableTaskMgr
Supprimé! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoFind
Supprimé! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoFolderOptions
Supprimé! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoFolderOptions
Supprimé! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoRun
################## | Mountpoints2 |
################## | Listing |
[11/08/2012 - 22:10:14 | D ] C:\$AVG
[21/10/2012 - 16:40:48 | SHD ] C:\$RECYCLE.BIN
[09/07/2011 - 12:19:06 | D ] C:\95edb64e1c9770edc03073cf0dfb
[01/10/2011 - 22:24:47 | D ] C:\AbaEnglishCourse
[21/10/2012 - 16:39:29 | AD ] C:\Autorun.inf
[17/05/2012 - 12:47:07 | D ] C:\BMW M3 Challenge
[25/11/2010 - 17:09:49 | D ] C:\book
[31/03/2010 - 18:59:53 | N | 8192] C:\BOOTSECT.BAK
[27/05/2011 - 10:56:00 | N | 21] C:\Config.ini
[09/10/2012 - 17:14:53 | D ] C:\Config.Msi
[21/10/2012 - 16:23:35 | N | 195] C:\curr_ver.tmp
[28/12/2011 - 17:11:43 | D ] C:\divx
[25/11/2010 - 16:50:57 | SHD ] C:\Documents and Settings
[24/09/2012 - 17:45:50 | D ] C:\Downloads
[07/02/2010 - 22:26:28 | N | 3737] C:\E1Z0LP21.MD5
[16/04/2011 - 13:59:20 | D ] C:\extensions
[08/03/2011 - 20:10:57 | D ] C:\F1000.dta
[07/02/2010 - 22:45:53 | N | 4045] C:\F1Z0LP21.MD5
[24/09/2012 - 13:53:23 | D ] C:\Fortune
[14/08/2011 - 19:08:47 | D ] C:\GamesCampus
[21/10/2012 - 16:05:54 | ASH | 2213990400] C:\hiberfil.sys
[07/02/2010 - 22:40:28 | N | 300] C:\LPCD.DAT
[24/09/2012 - 13:46:42 | RHD ] C:\MSOCache
[03/01/2011 - 14:39:56 | D ] C:\OEM
[21/10/2012 - 16:06:01 | ASH | 2951987200] C:\pagefile.sys
[13/07/2009 - 23:20:08 | D ] C:\PerfLogs
[09/10/2012 - 17:11:31 | D ] C:\Program Files
[09/10/2012 - 17:11:32 | D ] C:\Program Files (x86)
[24/09/2012 - 14:56:05 | HD ] C:\ProgramData
[25/11/2010 - 16:50:57 | SHD ] C:\Recovery
[31/03/2010 - 18:21:47 | N | 2035] C:\RHDSetup.log
[06/07/2012 - 11:25:06 | D ] C:\Sage
[17/10/2012 - 11:14:43 | SHD ] C:\System Volume Information
[16/09/2011 - 13:22:13 | D ] C:\tache de fin annee acomba
[27/08/2011 - 10:48:45 | D ] C:\tache_fin_per acomba
[17/04/2011 - 15:00:27 | D ] C:\temp_dvd
[21/10/2012 - 16:40:48 | D ] C:\UsbFix
[21/10/2012 - 16:39:51 | A | 14348] C:\UsbFix.txt
[31/05/2012 - 23:56:45 | N | 447] C:\user.js
[01/08/2011 - 16:56:02 | D ] C:\Users
[09/06/2012 - 17:39:14 | D ] C:\videooutput
[10/10/2012 - 23:05:49 | D ] C:\Windows
################## | Vaccin |
C:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
################## | Upload |
Veuillez envoyer le fichier: C:\UsbFix_Upload_Me_ISABELLE-PC.zip
http://eldesaparecido.com/upload.php
Merci de votre contribution.
################## | E.O.F |
Afficher la suite