Clé USB infectée

Bonsoir,

Je viens d'être victime d'une infection apparemment classique de deux de mes PC probablement suite à l'insertion d'une clef USB étrangère cet après-midi. L'infection a eu lieu sur un netbook mais le temps que je réalise ce qui m'arrive j'ai également infecté mon PC principal.

Je vous poste ci-après le rapport de suppression de USBfix (sachant que les raccourcis supprimés sont réapparus depuis) :

############################## | UsbFix V 7.144 | [Suppression]

Utilisateur: Aymeric (Administrateur) # AYMERIC-PC
Mis à jour le 08/10/2013 par El Desaparecido - Team SosVirus
Lancé à 21:29:25 | 15/10/2013

Site Web: https://www.usbfix.net/
Forum : https://www.sosvirus.net/
Upload Malware: http://www.sosvirus.net/upload_malware.php
Contact: https://www.usb-antivirus.com/fr/contact/

PC: ASUSTeK Computer Inc. (K93SM)
CPU: Intel(R) Core(TM) i3-2350M CPU @ 2.30GHz
RAM -> [Total : 4005 | Free : 1633]
Bios: American Megatrends Inc.
Boot: Normal boot

OS: Microsoft Windows 7 Édition Familiale Premium (6.1.7601 64-Bit) # Service Pack 1
WB: Windows Internet Explorer 10.0.9200.16721

SC: Security Center Service [Enabled]
WU: Windows Update Service [Enabled]
AV: avast! Antivirus [Enabled | Updated]
FW: Windows FireWall Service [Enabled]

C:\ (%systemdrive%) -> Disque fixe # 401 Go (102 Go libre(s) - 25%) [OS] # NTFS
D:\ -> Disque fixe # 506 Go (383 Go libre(s) - 76%) [DATA] # NTFS
E:\ -> CD-ROM
F:\ -> Disque amovible # 8 Go (7 Go libre(s) - 99%) [HP V210W] # FAT32

################## | Regedit Run |

HKLM\SOFTWARE | Run : [Nuance PDF Reader-reminder] - "C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe" -r "C:\ProgramData\Nuance\PDF Reader\Ereg\Ereg.ini"
HKLM\SOFTWARE | Run : [ASUSPRP] - "C:\Program Files (x86)\ASUS\APRP\APRP.EXE"
HKLM\SOFTWARE | Run : [ASUSWebStorage] - C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe /S
HKLM\SOFTWARE | Run : [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
HKLM\SOFTWARE | Run : [SonicMasterTray] - C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe
HKLM\SOFTWARE | Run : [NUSB3MON] - "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
HKLM\SOFTWARE | Run : [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
HKLM\SOFTWARE | Run : [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
HKLM\SOFTWARE | Run : [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
HKLM\SOFTWARE | Run : [Wireless Console 3] - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
HKLM\SOFTWARE | Run : [APSDaemon] - "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
HKLM\SOFTWARE | Run : [iTunesHelper] - "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
HKLM\SOFTWARE | Run : [avast] - "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
HKLM\SOFTWARE | Run : [ConnectionCenter] - "C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup
HKLM\SOFTWARE | Run : [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKLM\SOFTWARE\wow6432Node | Run : [Nuance PDF Reader-reminder] - "C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe" -r "C:\ProgramData\Nuance\PDF Reader\Ereg\Ereg.ini"
HKLM\SOFTWARE\wow6432Node | Run : [ASUSPRP] - "C:\Program Files (x86)\ASUS\APRP\APRP.EXE"
HKLM\SOFTWARE\wow6432Node | Run : [ASUSWebStorage] - C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe /S
HKLM\SOFTWARE\wow6432Node | Run : [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
HKLM\SOFTWARE\wow6432Node | Run : [SonicMasterTray] - C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe
HKLM\SOFTWARE\wow6432Node | Run : [NUSB3MON] - "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
HKLM\SOFTWARE\wow6432Node | Run : [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
HKLM\SOFTWARE\wow6432Node | Run : [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
HKLM\SOFTWARE\wow6432Node | Run : [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
HKLM\SOFTWARE\wow6432Node | Run : [Wireless Console 3] - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
HKLM\SOFTWARE\wow6432Node | Run : [APSDaemon] - "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
HKLM\SOFTWARE\wow6432Node | Run : [iTunesHelper] - "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
HKLM\SOFTWARE\wow6432Node | Run : [avast] - "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
HKLM\SOFTWARE\wow6432Node | Run : [ConnectionCenter] - "C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup
HKLM\SOFTWARE\wow6432Node | Run : [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKLM\SOFTWARE | RunOnce : [] -
HKLM\SOFTWARE\wow6432Node | RunOnce : [] -
HKU\S-1-5-19\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-20\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-21-733992938-3953640561-274256287-1000\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-21-733992938-3953640561-274256287-1000\SOFTWARE | Run : [ISUSPM] - C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe -scheduler
HKU\S-1-5-21-733992938-3953640561-274256287-1001\SOFTWARE | Run : [Sidebar] - C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
HKU\S-1-5-21-733992938-3953640561-274256287-1001\SOFTWARE | Run : [Skype] - "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
HKU\S-1-5-21-733992938-3953640561-274256287-1001\SOFTWARE | Run : [iTunesHelper] - wscript.exe //B "C:\Users\Aymeric\AppData\Local\Temp\iTunesHelper.vbe"
HKU\S-1-5-19\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe
HKU\S-1-5-20\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe
HKU\S-1-5-21-733992938-3953640561-274256287-1000\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe

################## | Processus Stoppés |

Stoppé! C:\Windows\system32\nvvsvc.exe (ID 952 |ParentID 696)
Stoppé! C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (ID 976 |ParentID 696)
Stoppé! C:\Windows\system32\WLANExt.exe (ID 1480 |ParentID 420)
Stoppé! C:\Windows\system32\conhost.exe (ID 1488 |ParentID 528)
Stoppé! C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (ID 1512 |ParentID 952)
Stoppé! C:\Windows\system32\nvvsvc.exe (ID 1524 |ParentID 952)
Stoppé! C:\Windows\system32\FBAgent.exe (ID 1660 |ParentID 696)
Stoppé! C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe (ID 1684 |ParentID 696)
Stoppé! C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (ID 1728 |ParentID 696)
Stoppé! C:\Program Files\AVAST Software\Avast\AvastSvc.exe (ID 1752 |ParentID 696)
Stoppé! C:\Windows\System32\spoolsv.exe (ID 1860 |ParentID 696)
Stoppé! C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe (ID 1160 |ParentID 696)
Stoppé! C:\Program Files\Trend Micro\UniClient\UiFrmWrk\uiWatchDog.exe (ID 1808 |ParentID 1160)
Stoppé! C:\Windows\system32\conhost.exe (ID 2036 |ParentID 528)
Stoppé! C:\Program Files\Trend Micro\AMSP\coreFrameworkHost.exe (ID 1100 |ParentID 1160)
Stoppé! C:\Windows\system32\conhost.exe (ID 1972 |ParentID 528)
Stoppé! C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (ID 2304 |ParentID 696)
Stoppé! C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (ID 2340 |ParentID 696)
Stoppé! C:\Program Files\Bonjour\mDNSResponder.exe (ID 2520 |ParentID 696)
Stoppé! C:\Users\Aymeric\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe (ID 2784 |ParentID 696)
Stoppé! C:\Program Files (x86)\PDF Architect\HelperService.exe (ID 2912 |ParentID 696)
Stoppé! C:\Program Files (x86)\PDF Architect\ConversionService.exe (ID 2956 |ParentID 696)
Stoppé! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (ID 2068 |ParentID 696)
Stoppé! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (ID 2552 |ParentID 2068)
Stoppé! C:\Windows\system32\taskhost.exe (ID 3616 |ParentID 696)
Stoppé! C:\Windows\system32\taskeng.exe (ID 3552 |ParentID 1056)
Stoppé! C:\Windows\system32\taskeng.exe (ID 2832 |ParentID 1056)
Stoppé! C:\Program Files (x86)\ASUS\FaceLogon\sensorsrv.exe (ID 3860 |ParentID 3552)
Stoppé! C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ID 3836 |ParentID 2832)
Stoppé! C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe (ID 1548 |ParentID 3552)
Stoppé! C:\Program Files\P4G\BatteryLife.exe (ID 1672 |ParentID 3552)
Stoppé! C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe (ID 3968 |ParentID 3552)
Stoppé! C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (ID 3952 |ParentID 3552)
Stoppé! C:\Windows\AsScrPro.exe (ID 2004 |ParentID 1660)
Stoppé! C:\Windows\System32\igfxtray.exe (ID 2140 |ParentID 2800)
Stoppé! C:\Windows\System32\hkcmd.exe (ID 3852 |ParentID 2800)
Stoppé! C:\Windows\System32\igfxpers.exe (ID 2712 |ParentID 2800)
Stoppé! C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ID 848 |ParentID 1684)
Stoppé! C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (ID 1592 |ParentID 2800)
Stoppé! C:\Windows\system32\SearchIndexer.exe (ID 1032 |ParentID 696)
Stoppé! C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (ID 1632 |ParentID 1512)
Stoppé! C:\Program Files\Elantech\ETDCtrl.exe (ID 3148 |ParentID 2800)
Stoppé! C:\Program Files\Windows Sidebar\sidebar.exe (ID 844 |ParentID 2800)
Stoppé! C:\Program Files (x86)\Skype\Phone\Skype.exe (ID 2188 |ParentID 2800)
Stoppé! C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (ID 864 |ParentID 1660)
Stoppé! C:\Program Files\Trend Micro\UniClient\UiFrmWrk\uiSeAgnt.exe (ID 4160 |ParentID 1808)
Stoppé! C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (ID 4380 |ParentID 1660)
Stoppé! C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (ID 4440 |ParentID 1636)
Stoppé! C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe (ID 4532 |ParentID 1636)
Stoppé! C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (ID 4596 |ParentID 1636)
Stoppé! C:\Program Files\Elantech\ETDCtrlHelper.exe (ID 4696 |ParentID 3148)
Stoppé! C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ID 4716 |ParentID 1636)
Stoppé! C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ID 4728 |ParentID 1636)
Stoppé! C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe (ID 4764 |ParentID 1636)
Stoppé! C:\Program Files (x86)\iTunes\iTunesHelper.exe (ID 4784 |ParentID 1636)
Stoppé! C:\Program Files\AVAST Software\Avast\AvastUI.exe (ID 4792 |ParentID 1636)
Stoppé! C:\Program Files (x86)\Citrix\ICA Client\concentr.exe (ID 4848 |ParentID 1636)
Stoppé! C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (ID 4884 |ParentID 1636)
Stoppé! C:\Program Files (x86)\Citrix\ICA Client\Receiver\Receiver.exe (ID 3388 |ParentID 4848)
Stoppé! C:\Program Files\iPod\bin\iPodService.exe (ID 4448 |ParentID 696)
Stoppé! C:\Program Files\Windows Media Player\wmpnetwk.exe (ID 5036 |ParentID 696)
Stoppé! C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe (ID 4860 |ParentID 848)
Stoppé! C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (ID 4800 |ParentID 848)
Stoppé! C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe (ID 4772 |ParentID 848)
Stoppé! C:\Windows\SysWOW64\ACEngSvr.exe (ID 5164 |ParentID 880)
Stoppé! C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe (ID 5508 |ParentID 880)
Stoppé! C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (ID 5048 |ParentID 696)
Stoppé! C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (ID 1700 |ParentID 696)
Stoppé! C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (ID 1904 |ParentID 696)
Stoppé! C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (ID 3000 |ParentID 696)
Stoppé! C:\Windows\system32\DllHost.exe (ID 6264 |ParentID 880)
Stoppé! C:\Windows\system32\wuauclt.exe (ID 7072 |ParentID 1056)
Stoppé! C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (ID 5776 |ParentID 696)
Stoppé! C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.exe (ID 5640 |ParentID 696)
Stoppé! C:\Windows\system32\taskhost.exe (ID 6884 |ParentID 696)
Stoppé! C:\Windows\System32\wscript.exe (ID 2732 |ParentID 6580)
Stoppé! C:\Program Files (x86)\BitTorrent\BitTorrent.exe (ID 7064 |ParentID 2800)
Stoppé! C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE (ID 2104 |ParentID 2800)
Stoppé! C:\Windows\splwow64.exe (ID 3584 |ParentID 2104)
Stoppé! C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE (ID 6812 |ParentID 696)
Stoppé! C:\Windows\System32\WUDFHost.exe (ID 7480 |ParentID 420)

################## | Éléments infectieux |

Supprimé! F:\iTunesHelper.vbe
Supprimé! C:\Users\Aymeric\AppData\Local\Temp\iTunesHelper.vbe
Supprimé! C:\Users\Aymeric\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\iTunesHelper.vbe
Supprimé! F:\hlevxfhz.lnk
Supprimé! F:\hlewi91e.lnk
Supprimé! F:\eticket_84577142_95f6d508cfbb93124412674fe7ea112a.lnk
Supprimé! F:\digitick58222036.lnk
Supprimé! F:\pdfservice.lnk
Supprimé! F:\La Cour des comptes épingle les dépenses des collectivités locales.lnk

(!) Fichiers temporaires supprimés.

################## | Registre |

Supprimé! HKU\S-1-5-21-733992938-3953640561-274256287-1001\Software\Microsoft\Windows\CurrentVersion\Run|iTunesHelper
Supprimé! HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run|iTunesHelper
Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{049fed2f-f6a5-11e1-b23b-9cb70dfcae6b}
Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{376edbac-f664-11e1-8e9e-10bf4844512b}
Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{c3580f91-f69d-11e1-956a-10bf4844512b}

################## | Listing |

[30/08/2012 - 13:11:23 | SHD ] C:\$Recycle.Bin
[11/10/2011 - 13:18:45 | N | 44] C:\ASUS.md5
[19/10/2011 - 06:34:37 | D ] C:\AsusVibeData
[29/07/2009 - 08:03:34 | SHD ] C:\Boot
[14/07/2009 - 03:38:58 | RASH | 383562] C:\bootmgr
[29/07/2009 - 08:03:37 | RASH | 8192] C:\BOOTSECT.BAK
[13/10/2013 - 22:17:00 | HD ] C:\Config.Msi
[06/04/2012 - 07:35:33 | N | 13907] C:\devlist.txt
[14/07/2009 - 07:08:56 | SHD ] C:\Documents and Settings
[06/04/2012 - 07:25:05 | D ] C:\eSupport
[06/04/2012 - 07:35:33 | N | 9] C:\Finish.log
[15/10/2013 - 08:51:12 | ASH | 3149635584] C:\hiberfil.sys
[06/04/2012 - 07:16:35 | D ] C:\Intel
[16/12/2011 - 08:27:01 | N | 2228224] C:\K93SM.BIN
[29/12/2011 - 03:58:37 | N | 19] C:\K93SM_WIN7.30
[23/07/2012 - 19:28:05 | RHD ] C:\MSOCache
[15/10/2013 - 08:51:16 | ASH | 4199518208] C:\pagefile.sys
[06/04/2012 - 08:36:50 | N | 303] C:\Pass.txt
[14/07/2009 - 05:20:08 | D ] C:\PerfLogs
[15/03/2013 - 01:26:07 | D ] C:\Program Files
[13/10/2013 - 22:12:35 | D ] C:\Program Files (x86)
[27/11/2012 - 17:25:45 | HD ] C:\ProgramData
[15/07/2012 - 18:03:32 | SHD ] C:\Recovery
[29/12/2011 - 03:58:37 | N | 7] C:\RECOVERY.DAT
[06/04/2012 - 07:18:40 | N | 2446] C:\RHDSetup.log
[15/07/2012 - 18:18:54 | D ] C:\Securitoo
[15/07/2012 - 18:22:41 | N | 159] C:\Setup.log
[10/10/2013 - 23:55:05 | SHD ] C:\System Volume Information
[15/07/2012 - 19:00:24 | D ] C:\temp
[15/10/2013 - 21:39:43 | D ] C:\UsbFix
[15/10/2013 - 21:41:20 | A | 15368] C:\UsbFix [Clean 2] AYMERIC-PC.txt
[15/10/2013 - 21:27:05 | N | 16865] C:\UsbFix [Scan 1] AYMERIC-PC.txt
[15/07/2012 - 18:04:44 | RD ] C:\Users
[25/05/2013 - 00:28:08 | D ] C:\Windows
[15/07/2012 - 18:05:05 | SHD ] D:\$RECYCLE.BIN
[28/10/2012 - 19:08:42 | N | 873786890] D:\A l'ombre de la Republique.avi
[07/06/2012 - 20:07:14 | N | 524274310] D:\Enquete.Exclusive-Premier pas en prison , le choc carceral ( Dr Greenthumb ).avi
[08/06/2012 - 00:09:54 | N | 535793539] D:\Enquête exclusive Boot Camp prison à vie - quand l Amérique mate ses ados violents.mkv
[22/06/2013 - 17:12:54 | D ] D:\Game of Thrones Saison 3
[03/06/2013 - 22:31:38 | D ] D:\Homeland.S02.VOSTFR.HDTV.XviD-MiND
[24/03/2013 - 21:11:07 | D ] D:\Kaamelott.S05.FRENCH.DVDRip.XViD
[09/04/2013 - 21:46:01 | D ] D:\Kammelott - Livre VI
[01/05/2013 - 12:47:01 | D ] D:\les simpsons saison 3
[28/10/2012 - 18:50:13 | D ] D:\Musique Julien
[07/06/2012 - 23:07:24 | N | 720056320] D:\Prison de femmes - l'enfer au feminin (Dr.Greenthumb).avi
[01/05/2013 - 22:00:41 | D ] D:\Saison 7
[16/07/2012 - 08:59:26 | SHD ] D:\System Volume Information
[30/05/2013 - 21:39:49 | D ] D:\The Big Bang Theory
[11/05/2013 - 21:25:43 | D ] D:\The Office S2
[02/05/2013 - 13:48:51 | D ] D:\The Office Saison 1 VostFr Tda13
[18/02/2013 - 00:13:02 | D ] D:\The Tudors
[16/05/2013 - 21:49:41 | D ] D:\The.Office.US.S03.VOSTFR.DVDRip.XviD-ETC
[16/11/2012 - 00:40:29 | D ] D:\X-Files
[10/09/2013 - 10:56:16 | N | 170907] F:\hlevxfhz.pdf
[10/09/2013 - 11:12:28 | N | 192643] F:\hlewi91e.pdf
[16/09/2013 - 18:25:48 | N | 53007] F:\eticket_84577142_95f6d508cfbb93124412674fe7ea112a.pdf
[01/03/2013 - 12:25:04 | N | 258621] F:\digitick58222036.pdf
[12/10/2013 - 15:31:30 | N | 206474] F:\pdfservice.pdf
[15/10/2013 - 09:03:14 | N | 104246] F:\La Cour des comptes épingle les dépenses des collectivités locales.docx

################## | Vaccin |

C:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
D:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
F:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)

*
*
*

Je vous remercie par avance de votre aide.