Petit rapport

bonjour





############################## | UsbFix V 7.110 | [Recherche]

Utilisateur: gardier (Administrateur) # GARDIER-0B0D8E9
Mis à jour le 25/02/2013 par El Desaparecido
Lancé à 20:59:45 | 25/02/2013

Site Web: https://www.sosvirus.net/
Contact: contact@sosvirus.org

PC: HP Pavilion 06 (DA280A-ABF 454.) (X86-based PC)
CPU: AMD Athlon(tm) XP 2400+ (1998)
RAM -> [Total : 767 | Free : 254]
BIOS: Phoenix - AwardBIOS v6.00PG
BOOT: Normal boot

OS: Microsoft Windows XP Édition familiale (5.1.2600 32-Bit) # Service Pack 2
WB: Windows Internet Explorer 6.0.2900.2180

SC: Security Center Service [Enabled]
WU: Windows Update Service [Enabled]
FW: Windows FireWall Service [Enabled]

C:\ (%systemdrive%) -> Disque fixe # 75 Go (33 Go libre(s) - 45%) [] # NTFS
D:\ -> CD-ROM
E:\ -> CD-ROM
F:\ -> Disque amovible # 7 Go (7 Go libre(s) - 93%) [STORE N GO] # FAT32
K:\ -> Disque fixe # 932 Go (249 Go libre(s) - 27%) [Expansion Drive] # NTFS

################## | Processus Actif |

C:\WINDOWS\System32\smss.exe (480)
C:\WINDOWS\system32\winlogon.exe (712)
C:\WINDOWS\system32\services.exe (756)
C:\WINDOWS\system32\lsass.exe (768)
C:\WINDOWS\system32\svchost.exe (912)
C:\WINDOWS\System32\svchost.exe (1044)
C:\WINDOWS\Explorer.EXE (1392)
C:\Program Files\AVAST Software\Avast\AvastSvc.exe (1576)
C:\WINDOWS\system32\spoolsv.exe (1640)
C:\Program Files\Java\jre7\bin\jqs.exe (1820)
C:\WINDOWS\system32\svchost.exe (1900)
C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe (2040)
C:\WINDOWS\Mixer.exe (544)
C:\PROGRA~1\EPSONS~1\EVENTM~1\EEventManager.exe (612)
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe (632)
C:\Program Files\AVAST Software\Avast\avastUI.exe (876)
C:\WINDOWS\system32\ctfmon.exe (892)
C:\Program Files\Microsoft Money\System\mnyexpr.exe (1080)
C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe (1092)
C:\Program Files\OEM\11bg Wireless LAN USB Utility\RtWLan.exe (1128)
C:\WINDOWS\system32\wuauclt.exe (3216)
C:\Documents and Settings\gardier\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (1808)
C:\Documents and Settings\gardier\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (3660)
C:\Documents and Settings\gardier\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (2272)
C:\Documents and Settings\gardier\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (2368)
C:\Documents and Settings\gardier\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (3824)
C:\Documents and Settings\gardier\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (3864)
C:\Documents and Settings\gardier\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (668)
C:\Documents and Settings\gardier\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (1596)
C:\Documents and Settings\gardier\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (1116)
C:\Documents and Settings\gardier\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (2180)
C:\Documents and Settings\gardier\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (2260)
C:\UsbFix\Go.exe (2004)

################## | Éléments infectieux |

Présent! C:\DOCUME~1\gardier\LOCALS~1\Temp\17f24fe7-4dc4-4f64-8c78-f9e09c60ad68.exe
Présent! C:\DOCUME~1\gardier\LOCALS~1\Temp\87a4461b-2838-4f20-a750-5710fecc9b3c.exe
Présent! C:\DOCUME~1\gardier\LOCALS~1\Temp\98c1c06d-6a5d-4bce-b1c0-8f682e386097.exe
Présent! C:\UNWISE.EXE
Présent! K:\Setup.exe
Présent! K:\Autorun.inf

################## | Registre |


################## | Mountpoints2 |

HKCU\.\.\.\.\Explorer\MountPoints2\{955daac6-e46c-11e1-912d-08107470f9e2}
Shell\Auto\Command = F:\launcher.exe
Shell\AutoRun\Command = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL launcher.exe

HKCU\.\.\.\.\Explorer\MountPoints2\{9e8c0fe2-6b71-11e1-96f7-0040ca436073}
Shell\AutoRun\Command = E:\InstallTomTomHOME.exe

HKCU\.\.\.\.\Explorer\MountPoints2\{c6953144-c607-11e1-90b1-08107470f9e2}
Shell\Auto\Command = F:\launcher.exe
Shell\AutoRun\Command = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL launcher.exe

HKCU\.\.\.\.\Explorer\MountPoints2\{ec1cf650-c606-11e1-90b0-08107470f9e2}
Shell\Auto\Command = F:\launcher.exe
Shell\AutoRun\Command = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL launcher.exe



################## | Vaccin |

(!) Cet ordinateur n'est pas vacciné!

################## | E.O.F | https://www.sosvirus.net/ |