PC propre ?

Résolu
Kaze37 Messages postés 529 Statut Membre -  
2011N2 Messages postés 13379 Date d'inscription   Statut Contributeur sécurité Dernière intervention   -
Bonjour,

Mon antivirus Eset Smart Security m'a détecté un fichier contenant plusieurs infections que j'ai supprimé par la suite. Le fichier ZIP en question était ici :

C:\$Recycle.Bin\S-1-5-21-1476820126-2689462351-85289577-1000\$RW51XAY.part = ZIP = nc.exe - une variante de Win32/RemoteAdmin.NetCat.AD application potentiellement dangereuse - faisait partie de l'objet supprimé

C:\$Recycle.Bin\S-1-5-21-1476820126-2689462351-85289577-1000\$RW51XAY.part = ZIP = ntrm.exe - une variante de Win32/Kryptik.HGX cheval de troie - faisait partie de l'objet supprimé

C:\$Recycle.Bin\S-1-5-21-1476820126-2689462351-85289577-1000\$RW51XAY.part = ZIP = ntrmkey.exe - une variante de Win32/Kryptik.HGX cheval de troie - faisait partie de l'objet supprimé

Pour être sur que mon PC est de nouveau propre, voici un rapport Hijackthis :

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:52:59, on 16/08/2013
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16496)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr/toolbar/ie8/sidebar.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/keyword/%s
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\IEPlugIn.dll
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-21-1476820126-2689462351-85289577-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-1476820126-2689462351-85289577-1001\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\IEPlugIn.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bfllr.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bfllr.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bfllr.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bfllr.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bfllr.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: [http://]*.ma-config.com
O15 - Trusted Zone: [http://]*.touslesdrivers.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{56AA43C4-8464-40B5-BA18-24726B8F71F8}: NameServer = 80.10.246.2,80.10.246.129
O20 - AppInit_DLLs: C:\PROGRA~2\NVIDIA Corporation\NvStreamSrv\rxinput.dll
O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%systemroot%\system32\appidsvc.dll,-100 (AppIDSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @appmgmts.dll,-3250 (AppMgmt) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe
O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (AudioSrv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\AxInstSV.dll,-103 (AxInstSV) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\bdesvc.dll,-100 (BDESVC) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\bthserv.dll,-101 (bthserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\cscsvc.dll,-200 (CscService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\defragsvc.dll,-101 (defragsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\ehome\ehrecvr.exe,-101 (ehRecvr) - Unknown owner - C:\Windows\ehome\ehRecvr.exe
O23 - Service: @%SystemRoot%\ehome\ehsched.exe,-101 (ehSched) - Unknown owner - C:\Windows\ehome\ehsched.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (eventlog) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\ListSvc.dll,-100 (HomeGroupListener) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\provsvc.dll,-100 (HomeGroupProvider) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-500 (iphlpsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: Intel(R) Smart Connect Technology Agent (ISCTAgent) - Unknown owner - C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Ma-Config Agent (MaConfigAgent) - Unknown owner - C:\Program Files\ma-config.com\MaConfigAgent.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe
O23 - Service: MSI_Trigger_Service - MICRO-STAR INTERNATIONAL CO., LTD. - C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe
O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\netprofm.dll,-202 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\peerdistsvc.dll,-9000 (PeerDistSvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\sysWow64\perfhost.exe,-2 (PerfHost) - Unknown owner - C:\Windows\SysWow64\perfhost.exe
O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pnrpauto.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umpo.dll,-100 (Power) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Qualcomm Atheros Killer Service - Unknown owner - C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @regsvc.dll,-1 (RemoteRegistry) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%windir%\system32\RpcEpMap.dll,-1001 (RpcEptMapper) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\sensrsvc.dll,-1000 (SensrSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppuinotify.dll,-103 (sppuinotify) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\tbssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\themeservice.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\umrdp.dll,-1000 (UmRdpService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%systemroot%\system32\wbiosrvc.dll,-100 (WbioSrvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\Windows\system32\SearchIndexer.exe
O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wwansvc.dll,-257 (WwanSvc) - Unknown owner - C:\Windows\system32\svchost.exe

Reste-il des morceaux de l'infection qui a été supprimé ?
End of file - 21859 bytes

18 réponses

  2.
    Kaze37 Messages postés 529 Statut Membre 134
     
    Je n'arrive pas à télécharger ZHPdiag

    Je suis bloqué sur la page de téléchargement qui ne se lance pas

    Tu as un autre lien à me proposer ?
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  7. Kaze37 Messages postés 529 Statut Membre 134
     
    ############################## | UsbFix V 7.129 | [Recherche]

    Utilisateur: Julien (Administrateur) # JULIEN-PC
    Mis à jour le 24/06/2013 par El Desaparecido
    Lancé à 19:39:33 | 16/08/2013

    Site Web: https://www.sosvirus.net/
    Upload Malware: http://www.sosvirus.net/upload-malware-pour-analyse-t489.html
    Contact: contact@sosvirus.net

    PC: MSI (MS-7821) (x64-based PC)
    CPU: Intel(R) Core(TM) i5-4670K CPU @ 3.40GHz (3401)
    RAM -> [Total : 8137 | Free : 5370]
    BIOS: BIOS Date: 05/17/13 11:18:21 Ver: 04.06.05
    BOOT: Normal boot

    OS: Microsoft Windows 7 Édition Intégrale (6.1.7600 64-Bit) #
    WB: Windows Internet Explorer 9.0.8112.16421

    SC: Security Center Service [Enabled]
    WU: Windows Update Service [Enabled]
    AV: ESET Smart Security 6.0 [Enabled | Updated]
    FW: Windows FireWall Service [(!) Disabled]

    C:\ (%systemdrive%) -> Disque fixe # 1863 Go (1740 Go libre(s) - 93%) [] # NTFS
    D:\ -> Disque fixe # 100 Mo (85 Mo libre(s) - 85%) [Réservé au système] # NTFS
    E:\ -> CD-ROM
    F:\ -> Disque fixe # 298 Go (239 Go libre(s) - 80%) [Juju] # NTFS

    ################## | Processus Actif |

    C:\Windows\system32\csrss.exe (564)
    C:\Windows\system32\wininit.exe (700)
    C:\Windows\system32\csrss.exe (720)
    C:\Windows\system32\services.exe (760)
    C:\Windows\system32\lsass.exe (780)
    C:\Windows\system32\lsm.exe (788)
    C:\Windows\system32\winlogon.exe (908)
    C:\Windows\system32\svchost.exe (936)
    C:\Windows\system32\nvvsvc.exe (1000)
    C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (168)
    C:\Windows\system32\svchost.exe (376)
    C:\Windows\System32\svchost.exe (336)
    C:\Windows\System32\svchost.exe (1060)
    C:\Windows\system32\svchost.exe (1088)
    C:\Windows\system32\svchost.exe (1248)
    C:\Windows\System32\spoolsv.exe (1444)
    C:\Windows\system32\svchost.exe (1472)
    C:\Windows\System32\svchost.exe (1508)
    C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe (1544)
    C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe (1616)
    C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (1644)
    C:\Windows\system32\nvvsvc.exe (1652)
    C:\Program Files\Intel\iCLS Client\HeciServer.exe (1704)
    C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe (1736)
    C:\Windows\system32\taskhost.exe (1848)
    C:\Windows\system32\Dwm.exe (1944)
    C:\Windows\Explorer.EXE (2012)
    C:\Program Files\ma-config.com\MaConfigAgent.exe (1748)
    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (2060)
    C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe (2220)
    C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (2324)
    C:\Windows\system32\rundll32.exe (2536)
    C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (2548)
    C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (2588)
    C:\Program Files\ESET\ESET Smart Security\egui.exe (2608)
    C:\Program Files\Logitech Gaming Software\LCore.exe (2724)
    C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe (2984)
    C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (3024)
    C:\Windows\system32\svchost.exe (1792)
    C:\Windows\system32\wbem\wmiprvse.exe (3128)
    C:\Windows\system32\svchost.exe (3248)
    C:\Windows\system32\SearchIndexer.exe (3308)
    C:\Program Files\Windows Media Player\wmpnetwk.exe (3836)
    C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (3896)
    C:\Windows\system32\conhost.exe (3904)
    C:\Windows\system32\svchost.exe (3536)
    C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (1076)
    C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (4808)
    C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (996)
    C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (3732)
    C:\Windows\System32\svchost.exe (5032)
    C:\Program Files\Oracle\VirtualBox\VirtualBox.exe (5096)
    C:\Program Files\Oracle\VirtualBox\VBoxSVC.exe (1784)
    C:\Program Files\Oracle\VirtualBox\VirtualBox.exe (4772)
    C:\Users\Julien\AppData\Local\TeamSpeak 3 Client\ts3client_win64.exe (5104)
    C:\Windows\system32\taskhost.exe (4880)
    C:\Windows\system32\SearchProtocolHost.exe (5756)
    C:\Windows\system32\SearchFilterHost.exe (4852)
    C:\UsbFix\Go.exe (5164)
    c:\program files\windows defender\MpCmdRun.exe (3652)

    ################## | El Desaparecido Section |

    HKLM\SOFTWARE | Run : [] -
    HKLM\SOFTWARE\wow6432Node | Run : [] -
    HKLM\SOFTWARE | RunOnce : [] -
    HKLM\SOFTWARE\wow6432Node | RunOnce : [] -
    HKU\S-1-5-19\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
    HKU\S-1-5-20\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
    HKU\S-1-5-21-1476820126-2689462351-85289577-1001\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
    HKU\S-1-5-19\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe
    HKU\S-1-5-20\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe
    HKU\S-1-5-21-1476820126-2689462351-85289577-1001\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe

    ################## | Éléments infectieux |

    Présent! F:\bitdefender_isecurity.exe
    Présent! F:\04 - Miracle Guy.mp3

    ################## | Registre |

    ################## | Mountpoints2 |

    HKCU\.\.\.\.\Explorer\MountPoints2\{31718bb0-027c-11e3-bb13-806e6f6e6963}
    Shell\AutoRun\Command = E:\Run.exe

    ################## | Vaccin |

    (!) Cet ordinateur n'est pas vacciné!

    ################## | E.O.F | https://www.sosvirus.net/ |
    0
  8. 2011N2 Messages postés 13379 Date d'inscription   Statut Contributeur sécurité Dernière intervention   920
     
    Re,

    Ok, passe-le en suppression et poste moi le rapport obtenu. :)
    Toujours avec les périphériques branchés.

    Gabriel.
    0
  9. Kaze37 Messages postés 529 Statut Membre 134
     
    ############################## | UsbFix V 7.129 | [Suppression]

    Utilisateur: Julien (Administrateur) # JULIEN-PC
    Mis à jour le 24/06/2013 par El Desaparecido
    Lancé à 19:43:22 | 16/08/2013

    Site Web: https://www.sosvirus.net/
    Upload Malware: http://www.sosvirus.net/upload-malware-pour-analyse-t489.html
    Contact: contact@sosvirus.net

    PC: MSI (MS-7821) (x64-based PC)
    CPU: Intel(R) Core(TM) i5-4670K CPU @ 3.40GHz (3401)
    RAM -> [Total : 8137 | Free : 5356]
    BIOS: BIOS Date: 05/17/13 11:18:21 Ver: 04.06.05
    BOOT: Normal boot

    OS: Microsoft Windows 7 Édition Intégrale (6.1.7600 64-Bit) #
    WB: Windows Internet Explorer 9.0.8112.16421

    SC: Security Center Service [Enabled]
    WU: Windows Update Service [Enabled]
    AV: ESET Smart Security 6.0 [Enabled | Updated]
    FW: Windows FireWall Service [(!) Disabled]

    C:\ (%systemdrive%) -> Disque fixe # 1863 Go (1740 Go libre(s) - 93%) [] # NTFS
    D:\ -> Disque fixe # 100 Mo (85 Mo libre(s) - 85%) [Réservé au système] # NTFS
    E:\ -> CD-ROM
    F:\ -> Disque fixe # 298 Go (239 Go libre(s) - 80%) [Juju] # NTFS

    ################## | El Desaparecido Section |

    HKLM\SOFTWARE | Run : [] -
    HKLM\SOFTWARE\wow6432Node | Run : [] -
    HKLM\SOFTWARE | RunOnce : [] -
    HKLM\SOFTWARE\wow6432Node | RunOnce : [] -
    HKU\S-1-5-19\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
    HKU\S-1-5-20\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
    HKU\S-1-5-21-1476820126-2689462351-85289577-1001\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
    HKU\S-1-5-19\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe
    HKU\S-1-5-20\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe
    HKU\S-1-5-21-1476820126-2689462351-85289577-1001\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe

    ################## | Processus Stoppés |

    Stoppé! C:\Windows\system32\nvvsvc.exe (1000)
    Stoppé! C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (168)
    Stoppé! C:\Windows\System32\spoolsv.exe (1444)
    Stoppé! C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe (1544)
    Stoppé! C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe (1616)
    Stoppé! C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (1644)
    Stoppé! C:\Windows\system32\nvvsvc.exe (1652)
    Stoppé! C:\Program Files\Intel\iCLS Client\HeciServer.exe (1704)
    Stoppé! C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe (1736)
    Stoppé! C:\Windows\system32\taskhost.exe (1848)
    Stoppé! C:\Windows\Explorer.EXE (2012)
    Stoppé! C:\Program Files\ma-config.com\MaConfigAgent.exe (1748)
    Stoppé! C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (2060)
    Stoppé! C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe (2220)
    Stoppé! C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (2324)
    Stoppé! C:\Windows\system32\rundll32.exe (2536)
    Stoppé! C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (2548)
    Stoppé! C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (2588)
    Stoppé! C:\Program Files\ESET\ESET Smart Security\egui.exe (2608)
    Stoppé! C:\Program Files\Logitech Gaming Software\LCore.exe (2724)
    Stoppé! C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe (2984)
    Stoppé! C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (3024)
    Stoppé! C:\Windows\system32\SearchIndexer.exe (3308)
    Stoppé! C:\Program Files\Windows Media Player\wmpnetwk.exe (3836)
    Stoppé! C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (3896)
    Stoppé! C:\Windows\system32\conhost.exe (3904)
    Stoppé! C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (1076)
    Stoppé! C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (4808)
    Stoppé! C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (996)
    Stoppé! C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (3732)
    Stoppé! C:\Program Files\Oracle\VirtualBox\VirtualBox.exe (5096)
    Stoppé! C:\Program Files\Oracle\VirtualBox\VBoxSVC.exe (1784)
    Stoppé! C:\Program Files\Oracle\VirtualBox\VirtualBox.exe (4772)
    Stoppé! C:\Users\Julien\AppData\Local\TeamSpeak 3 Client\ts3client_win64.exe (5104)
    Stoppé! C:\Windows\system32\taskhost.exe (4880)
    Stoppé! C:\Windows\SysWOW64\NOTEPAD.EXE (5804)

    ################## | Éléments infectieux |

    Supprimé! F:\bitdefender_isecurity.exe
    Supprimé! F:\04 - Miracle Guy.mp3

    (!) Fichiers temporaires supprimés.

    ################## | Registre |

    ################## | Mountpoints2 |

    Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{31718bb0-027c-11e3-bb13-806e6f6e6963}

    ################## | Listing |

    [11/08/2013 - 13:55:53 | SHD ] C:\$Recycle.Bin
    [11/08/2013 - 13:55:31 | SHD ] C:\Documents and Settings
    [11/08/2013 - 17:07:33 | D ] C:\Driver_allOS
    [16/08/2013 - 17:53:41 | N | 94341] C:\IFRToolLog.txt
    [11/08/2013 - 14:07:11 | D ] C:\Intel
    [11/08/2013 - 14:09:05 | N | 32] C:\Killer.log
    [11/08/2013 - 14:03:00 | D ] C:\MSI
    [11/08/2013 - 17:03:44 | D ] C:\NVIDIA
    [12/08/2013 - 17:20:58 | D ] C:\NvidiaLogging
    [16/08/2013 - 17:34:39 | ASH | 8531795968] C:\pagefile.sys
    [16/08/2013 - 19:30:55 | N | 512] C:\PhysicalDisk0_MBR.bin
    [12/08/2013 - 21:44:23 | D ] C:\Program Files
    [16/08/2013 - 19:29:13 | D ] C:\Program Files (x86)
    [15/08/2013 - 12:09:02 | HD ] C:\ProgramData
    [11/08/2013 - 13:55:31 | SHD ] C:\Recovery
    [11/08/2013 - 14:10:12 | N | 2306] C:\RHDSetup.log
    [16/08/2013 - 19:27:24 | SHD ] C:\System Volume Information
    [12/08/2013 - 23:59:07 | D ] C:\temp
    [16/08/2013 - 19:43:36 | D ] C:\UsbFix
    [16/08/2013 - 19:43:41 | A | 5751] C:\UsbFix [Clean 1] JULIEN-PC.txt
    [16/08/2013 - 19:40:04 | N | 5566] C:\UsbFix [Scan 1] JULIEN-PC.txt
    [11/08/2013 - 14:17:08 | D ] C:\Users
    [16/08/2013 - 18:45:21 | D ] C:\Windows
    [16/08/2013 - 19:31:07 | D ] C:\ZHP
    [11/08/2013 - 13:55:53 | SHD ] D:\$RECYCLE.BIN
    [11/08/2013 - 14:49:46 | SHD ] D:\Boot
    [14/07/2009 - 03:38:58 | RASH | 383562] D:\bootmgr
    [11/08/2013 - 14:49:46 | N | 8192] D:\BOOTSECT.BAK
    [11/08/2013 - 13:59:01 | | 279772] D:\ENVUQ
    [11/08/2013 - 13:50:53 | SHD ] D:\System Volume Information
    [11/08/2013 - 13:59:01 | | 20] D:\win7.ld
    [11/08/2013 - 16:46:59 | SHD ] F:\$RECYCLE.BIN
    [24/01/2013 - 15:16:00 | N | 1376768] F:\7-zip_7-zip_9.20_version_x64_francais_11161.msi
    [21/06/2013 - 17:26:34 | D ] F:\Age Of Wulin
    [07/06/2013 - 21:24:16 | N | 15199352] F:\aida64extreme300.exe
    [03/05/2013 - 18:27:48 | N | 183] F:\attach.ini
    [10/08/2013 - 21:17:44 | N | 4429440] F:\ccsetup404.exe
    [19/06/2011 - 20:08:58 | N | 89] F:\code activation Titan Quest & Immortal Throne.txt
    [07/01/2013 - 21:24:01 | N | 31] F:\codes pr jeu kikoo ps3.txt
    [11/08/2013 - 14:58:11 | N | 265] F:\compteTS.ini
    [20/10/2012 - 16:41:59 | N | 115] F:\Coureur.txt
    [10/08/2013 - 21:17:22 | N | 1415824] F:\eset_smart_security_live_installer.exe
    [11/08/2013 - 00:34:22 | N | 281960] F:\Firefox Setup Stub 23.0.exe
    [25/01/2013 - 21:58:25 | N | 522] F:\forum materiel
    [21/05/2013 - 23:56:18 | N | 3064] F:\Id lol.txt
    [04/06/2013 - 11:19:42 | N | 226679] F:\img-130604090432-0001.jpg
    [05/06/2013 - 11:52:11 | N | 376034] F:\img-130604090432-000111.pdf
    [05/06/2013 - 11:53:52 | N | 467638] F:\img-130604090432-000111.png
    [09/04/2013 - 16:45:07 | N | 46080] F:\jason.odt
    [23/06/2013 - 14:42:53 | D ] F:\Juju music
    [22/07/2013 - 16:40:23 | N | 52882496] F:\lgs846_x64.exe
    [28/07/2013 - 13:36:58 | N | 4969] F:\Lien.txt
    [04/06/2013 - 21:05:14 | N | 985231] F:\maitre succube1.png
    [04/06/2013 - 21:04:42 | N | 987595] F:\Maitre succube2.png
    [10/08/2013 - 21:23:02 | N | 10285040] F:\malwarebytes-anti-malware_1.75.0.1300_fr_215092.exe
    [03/05/2013 - 18:14:02 | N | 236] F:\mapui.ini
    [18/06/2013 - 23:58:55 | D ] F:\NO$GBA_2.6a
    [11/08/2013 - 03:15:18 | N | 186] F:\Nouveau document texte.txt
    [04/06/2013 - 17:35:42 | N | 123] F:\nouveau fichier
    [26/07/2013 - 14:14:10 | D ] F:\PCSX2
    [24/01/2013 - 15:12:10 | D ] F:\PhotoFiltre Studio X
    [27/01/2013 - 02:47:49 | D ] F:\Pilotes windows
    [17/07/2013 - 20:33:01 | N | 365] F:\plop.txt
    [10/08/2013 - 21:15:51 | N | 12949592] F:\Razer_Synapse_Framework_V1.11.03.exe
    [10/08/2013 - 21:16:51 | N | 2617648] F:\revouninstaller_revouninstaller_1.94_francais_39528.exe
    [27/03/2013 - 15:16:46 | N | 51] F:\réserv japexp
    [07/03/2013 - 18:48:31 | N | 48472] F:\Sans nom 1.odt
    [30/06/2012 - 17:46:52 | N | 4669] F:\Sekirei.rtf
    [21/05/2013 - 11:47:16 | D ] F:\StarCraft2-1 Wings
    [21/05/2013 - 11:47:09 | D ] F:\Starcraft2-2 heart
    [11/08/2013 - 00:35:25 | N | 8532992] F:\SteamInstall_French.msi
    [30/06/2013 - 00:26:38 | SHD ] F:\System Volume Information
    [10/08/2013 - 21:21:28 | N | 36175128] F:\TeamSpeak3-Client-win64-3.0.11.1.exe
    [24/01/2013 - 15:31:39 | D ] F:\The Witcher 2
    [27/07/2013 - 23:15:56 | N | 6160736] F:\Ti_60_HE_SIA_EMEACART.exe
    [23/01/2013 - 15:10:39 | N | 98] F:\Urgent suite Agarest
    [10/08/2013 - 21:27:06 | D ] F:\USB juju
    [21/06/2013 - 00:25:33 | N | 350036] F:\Uta.no-prince-sam.full.1499700.jpg
    [28/06/2013 - 14:29:37 | N | 80114] F:\Uta.no-prince-sam.full66.png
    [11/08/2013 - 03:12:55 | N | 99776784] F:\VirtualBox-4.2.16-86992-Win.exe
    [11/06/2013 - 13:54:07 | D ] F:\[2012.02.22] Aqua Timez - MASK

    ################## | Vaccin |

    C:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
    D:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
    F:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)

    ################## | E.O.F | https://www.sosvirus.net/ |
    0
  10. 2011N2 Messages postés 13379 Date d'inscription   Statut Contributeur sécurité Dernière intervention   920
     
    Re,

    Ok, comment se comporte le PC ?

    Gabriel.
    0
  11. Kaze37 Messages postés 529 Statut Membre 134
     
    Mieux

    Quelques ralentissements parfois
    0
  12. 2011N2 Messages postés 13379 Date d'inscription   Statut Contributeur sécurité Dernière intervention   920
     
    Re,

    Ok, fais moi un dernier ZHPDiag pour vérifier si tout est vraiment ok.

    Ensuite on finalisera, ça optimisera davantage le PC.

    Gabriel.
    0
  15. Kaze37 Messages postés 529 Statut Membre 134
     
    DelFix :

    # DelFix v10.4 - Rapport créé le 16/08/2013 à 23:34:34
    # Mis à jour le 19/07/2013 par Xplode
    # Nom d'utilisateur : Julien - JULIEN-PC
    # Système d'exploitation : Windows 7 Ultimate (64 bits)

    ~ Activation de l'UAC ... OK

    ~ Suppression des outils de désinfection ...

    Supprimé : C:\USBFix
    Supprimé : C:\ZHP
    Supprimé : C:\Program Files (x86)\ZHPDiag
    Supprimé : C:\Program Files (x86)\Trend Micro\Hijackthis
    Supprimé : C:\PhysicalDisk0_MBR.bin
    Supprimé : C:\UsbFix [Clean 1] JULIEN-PC.txt
    Supprimé : C:\UsbFix [Scan 1] JULIEN-PC.txt
    Supprimé : C:\Users\Julien\Desktop\SecurityCheck.exe
    Supprimé : C:\Users\Julien\Desktop\UsbFix.exe
    Supprimé : C:\Users\Julien\Desktop\ZHPDiag.txt
    Supprimé : C:\Users\Public\Desktop\MBRCheck.lnk
    Supprimé : C:\Users\Public\Desktop\ZHPDiag.lnk
    Supprimé : C:\Users\Public\Desktop\ZHPFix.lnk
    Supprimé : C:\Users\Julien\Downloads\hijackthis_hijackthis_2.0.4_anglais_17891.msi
    Supprimé : C:\Users\Julien\Downloads\ZHPDiag2.exe
    Supprimée : HKCU\Software\USBFix
    Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\USBFix
    Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1

    ########## - EOF - ##########

    Security Check :

    Results of screen317's Security Check version 0.99.72
    Windows 7 x64 (UAC is enabled)
    [url=https://support.microsoft.com/en-us/windows/install-windows-7-service-pack-1-sp1-b3da2c0f-cdb6-0572-8596-bab972897f61][color=red][b]Out of date service pack!![/color][/url][/b]
    Internet Explorer 10
    [b][u]''''''''''''''Antivirus/Firewall Check:''''''''''''''[/b][/u]
    ESET Smart Security 6.0
    Antivirus up to date!
    [b][u]'''''''''Anti-malware/Other Utilities Check:'''''''''[/b][/u]
    Malwarebytes Anti-Malware version 1.75.0.1300
    Adobe Flash Player 11.8.800.94
    Mozilla Firefox (23.0)
    [b][u]''''''''Process Check: objlist.exe by Laurent''''''''[/b][/u]
    ESET NOD32 Antivirus egui.exe
    ESET NOD32 Antivirus ekrn.exe
    windows defender MpCmdRun.exe
    [b][u]'''''''''''''''''System Health check'''''''''''''''''[/b][/u]
    Total Fragmentation on Drive C: =
    [b][u]''''''''''''''''''''End of Log''''''''''''''''''''''[/b][/u]
    0
  16. 2011N2 Messages postés 13379 Date d'inscription   Statut Contributeur sécurité Dernière intervention   920
     
    Re,

    C'est bon pour ces rapports. ;)

    Tu me diras lorsque tu auras terminé toute la procédure.

    Gabriel.
    0
  17. Kaze37 Messages postés 529 Statut Membre 134
     
    J'ai suivis à la lettre tout la procédure dans le tutoriel et j'ai finis
    0
  18. 2011N2 Messages postés 13379 Date d'inscription   Statut Contributeur sécurité Dernière intervention   920
     
    Déjà ?^^

    Pas de questions, je peux passer le sujet en résolu ?

    Gabriel.
    0
  19. Kaze37 Messages postés 529 Statut Membre 134
     
    Le PC est neuf, il n'y a presque rien dessus

    C'est bon sujet résolu
    0
    1. 2011N2 Messages postés 13379 Date d'inscription   Statut Contributeur sécurité Dernière intervention   920
       
      Ok parfait, bonne continuation.
      0