Mes dossiers sont remplacés par des raccourcis ".exe"

Bonjour,

mon disque dur externe est infécté et depuis mes dossiers ont été remplacés par des raccourcis ".exe".
j'ai utilisé UsbFix et voila ce que donne le rapport de la recherche :

############################## | UsbFix V 7.120 | [Research]

User: Malek (Administrator) # MALEK-PC
Updated 30/03/2013 by El Desaparecido
Started at 08:33:00 | 08/04/2013

Website: https://www.sosvirus.net/
Upload Malware: http://upload.sosvirus.org/
Contact: contact@sosvirus.org

PC: TOSHIBA (SATELLITE L755) (x64-based PC)
CPU: Intel(R) Core(TM) i7-2670QM CPU @ 2.20GHz (2201)
RAM -> [Total : 8174 | Free : 5347]
BIOS: InsydeH2O Version 03.60.453.60
BOOT: Normal boot

OS: Microsoft Windows 7 Ultimate (6.1.7601 64-Bit) # Service Pack 1
WB: Windows Internet Explorer 10.0.9200.16521

SC: Security Center Service [Enabled]
WU: Windows Update Service [Enabled]
AV: avast! Antivirus [(!) Disabled | Updated]
FW: Windows FireWall Service [Enabled]

C:\ (%systemdrive%) -> Fixed drive # 298 Gb (116 Mb free - 39%) [Win7] # NTFS
D:\ -> Fixed drive # 243 Gb (24 Mb free - 10%) [Data] # NTFS
E:\ -> CD-ROM
F:\ -> CD-ROM
G:\ -> Fixed drive # 55 Gb (8 Mb free - 15%) [Win8] # NTFS
I:\ -> Fixed drive # 596 Gb (191 Mb free - 32%) [Transcend] # NTFS

################## | Active Processes |

C:\Windows\system32\csrss.exe (580)
C:\Windows\system32\wininit.exe (656)
C:\Windows\system32\services.exe (720)
C:\Windows\system32\lsass.exe (736)
C:\Windows\system32\lsm.exe (744)
C:\Windows\system32\svchost.exe (848)
C:\Windows\system32\nvvsvc.exe (932)
C:\Windows\system32\svchost.exe (972)
C:\Windows\System32\svchost.exe (160)
C:\Windows\System32\svchost.exe (796)
C:\Windows\system32\svchost.exe (684)
C:\Windows\system32\svchost.exe (1052)
C:\Windows\system32\svchost.exe (1188)
C:\Windows\system32\svchost.exe (1340)
C:\Windows\system32\WLANExt.exe (1568)
C:\Windows\system32\conhost.exe (1576)
C:\Windows\system32\svchost.exe (1796)
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (1824)
C:\Windows\System32\spoolsv.exe (2004)
C:\Windows\system32\svchost.exe (1384)
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (1652)
C:\Program Files\Bonjour\mDNSResponder.exe (1424)
C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe (1780)
C:\Program Files\Intel\iCLS Client\HeciServer.exe (1872)
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (1148)
C:\Program Files\IIS\Microsoft Web Deploy\MsDepSvc.exe (2460)
C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe (2544)
C:\Windows\SysWOW64\PnkBstrA.exe (2608)
C:\Windows\SysWOW64\PnkBstrB.exe (2648)
C:\Program Files\KMSpico\Service_KMS.exe (2724)
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (2768)
C:\Windows\system32\svchost.exe (2792)
C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe (2924)
C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe (3048)
C:\Windows\SysWOW64\vmnat.exe (2540)
C:\Windows\system32\svchost.exe (2716)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (2900)
C:\Program Files\TOSHIBA\TECO\TecoService.exe (3292)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (3348)
C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe (3416)
C:\Windows\SysWOW64\vmnetdhcp.exe (3516)
C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe (3556)
C:\Windows\system32\wbem\wmiprvse.exe (3840)
C:\Windows\system32\wbem\wmiprvse.exe (3852)
C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe (4008)
C:\Windows\System32\alg.exe (4040)
C:\Windows\system32\svchost.exe (4416)
C:\Windows\system32\svchost.exe (4564)
C:\Windows\System32\WUDFHost.exe (4756)
C:\Windows\system32\SearchIndexer.exe (1436)
C:\Program Files\Windows Media Player\wmpnetwk.exe (4832)
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (1372)
c:\Program Files\Microsoft SQL Server\MSSQL11.SQLEXPRESS\MSSQL\Binn\sqlservr.exe (4256)
C:\Windows\System32\svchost.exe (5228)
C:\Windows\system32\DllHost.exe (6076)
c:\Program Files (x86)\Nero\Update\NASvc.exe (6296)
c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe (6364)
C:\Windows\System32\svchost.exe (6412)
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (6540)
C:\Windows\system32\csrss.exe (5208)
C:\Windows\system32\winlogon.exe (2592)
C:\Windows\system32\nvvsvc.exe (1320)
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (5888)
C:\Windows\system32\taskhost.exe (6608)
C:\Windows\system32\taskeng.exe (5916)
C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe (7036)
C:\Windows\system32\Dwm.exe (1288)
C:\Windows\Explorer.EXE (4292)
C:\Users\Malek\Downloads\Compressed\PCMeter\PCMeterV0.3.exe (5224)
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (900)
C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (3960)
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (5544)
C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (6860)
C:\Program Files\TOSHIBA\TECO\Teco.exe (3284)
C:\Program Files (x86)\uTorrent\uTorrent.exe (3372)
C:\Program Files\Windows Sidebar\sidebar.exe (6616)
C:\Program Files (x86)\Internet Download Manager\IDMan.exe (308)
C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe (5616)
C:\Program Files\Alwil Software\Avast5\AvastUI.exe (3624)
C:\Program Files (x86)\Mozilla Firefox\firefox.exe (6716)
C:\Windows\system32\DllHost.exe (5820)
C:\Windows\system32\AUDIODG.EXE (6160)
C:\UsbFix\Go.exe (4908)
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe (4856)
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_6_602_180.exe (5748)
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_6_602_180.exe (6116)
C:\Windows\system32\SearchProtocolHost.exe (4280)
C:\Windows\system32\SearchFilterHost.exe (5160)

################## | El Desaparecido Section |

HKLM\SOFTWARE | RunOnce : [] -
HKLM\SOFTWARE\wow6432Node | RunOnce : [] -
HKU\S-1-5-19\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-19\SOFTWARE | Run : [TOPI.EXE] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe /STARTUP
HKU\S-1-5-20\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-20\SOFTWARE | Run : [TOPI.EXE] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe /STARTUP
HKU\S-1-5-21-3858368416-1549612065-3573411475-1000\SOFTWARE | Run : [uTorrent] - "C:\Program Files (x86)\uTorrent\uTorrent.exe" /MINIMIZED
HKU\S-1-5-21-3858368416-1549612065-3573411475-1000\SOFTWARE | Run : [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
HKU\S-1-5-21-3858368416-1549612065-3573411475-1000\SOFTWARE | Run : [Sidebar] - C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
HKU\S-1-5-21-3858368416-1549612065-3573411475-1000\SOFTWARE | Run : [IDMan] - C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot
HKU\S-1-5-21-3858368416-1549612065-3573411475-1000\SOFTWARE | Run : [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup
HKU\S-1-5-21-3858368416-1549612065-3573411475-1000\SOFTWARE | Run : [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload
HKU\S-1-5-80-3880006512-4290199581-1648723128-3569869737-3631323133\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-80-3880006512-4290199581-1648723128-3569869737-3631323133\SOFTWARE | Run : [TOPI.EXE] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe /STAR
HKU\S-1-5-18\SOFTWARE | Run : [TOPI.EXE] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe /STARTUP
HKU\S-1-5-19\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe
HKU\S-1-5-20\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe
HKU\S-1-5-80-3880006512-4290199581-1648723128-3569869737-3631323133\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe

################## | Files # Infected Folders |

Found ! C:\Users\Malek\AppData\Local\PUTTY.RND
Found ! C:\Users\Malek\AppData\Roaming\Temp

################## | Registry |

Found ! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bip_camera1.exe
Found ! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\btassist1.exe
Found ! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cfaddgadgets.exe
Found ! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cfmain.exe
Found ! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cfprofile.exe
Found ! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\eccenter1.exe
Found ! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\interneteverywhere.exe
Found ! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\interneteverywhere_launcher.exe
Found ! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kies.exe
Found ! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\launcher.exe
Found ! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ndstray.exe
Found ! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\openmuihelp.exe
Found ! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\setup.exe
Found ! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\skype.exe
Found ! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tempro.exe
Found ! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tosbtmng.exe
Found ! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tosbtproc1.exe
Found ! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\toshibaservicestation.exe
Found ! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tosssdalert.exe
Found ! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\uninstaller.exe
Found ! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\usrguide.exe
Found ! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wirelessftp1.exe

################## | Mountpoints2 |

HKCU\.\.\.\.\Explorer\MountPoints2\{0459694e-d730-11e1-be82-047d7b2fc9ad}
Shell\AutoRun\Command = G:\.\Setup.exe AUTORUN=1

HKCU\.\.\.\.\Explorer\MountPoints2\{081131ec-c940-11e1-9d5c-047d7b2fc9ad}
Shell\AutoRun\Command = G:\.\Setup.exe AUTORUN=1

HKCU\.\.\.\.\Explorer\MountPoints2\{110dbe9a-8a00-11e1-9a3e-047d7b2fc9ad}
Shell\AutoRun\Command = G:\LaunchU3.exe -a

HKCU\.\.\.\.\Explorer\MountPoints2\{32d4783d-df01-11e1-a7b5-047d7b2fc9ad}
Shell\AutoRun\Command = G:\.\Setup.exe AUTORUN=1

HKCU\.\.\.\.\Explorer\MountPoints2\{401d9830-c2af-11e1-9755-047d7b2fc9ad}
Shell\AutoRun\Command = G:\.\Setup.exe AUTORUN=1

HKCU\.\.\.\.\Explorer\MountPoints2\{66886f2a-f1b7-11e1-ae9f-047d7b2fc9ad}
Shell\AutoRun\Command = G:\AutoRun.exe

HKCU\.\.\.\.\Explorer\MountPoints2\{7a412f63-a4e4-11e1-aea5-ad2bd2c0ed10}
Shell\AutoRun\Command = G:\LaunchU3.exe -a

HKCU\.\.\.\.\Explorer\MountPoints2\{c43b31b3-d72c-11e1-b412-047d7b2fc9ad}
Shell\AutoRun\Command = G:\.\Setup.exe AUTORUN=1

HKCU\.\.\.\.\Explorer\MountPoints2\{d8d62bd4-d572-11e1-af58-047d7b2fc9ad}
Shell\AutoRun\Command = G:\AutoRun.exe

HKCU\.\.\.\.\Explorer\MountPoints2\{d8d62be1-d572-11e1-af58-047d7b2fc9ad}
Shell\AutoRun\Command = G:\AutoRun.exe

HKCU\.\.\.\.\Explorer\MountPoints2\{fb16e458-8994-11e1-9d20-047d7b2fc9ad}
Shell\AutoRun\Command = F:\Autorun.exe



################## | Vaccin |

(!) This computer is not vaccinated!

################## | E.O.F | https://www.sosvirus.net/ |


Merci d'avance pour votre aide.