Aider moi sur mon rapport

############################## | UsbFix V 7.153 | [Recherche]

Utilisateur: Admin (Administrateur) # ADMIN-218E2DDF0
Mis à jour le 09/12/2013 par El Desaparecido - Team SosVirus
Lancé à 10:04:37 | 10/12/2013

Site Web : http://www.usbfix.net
Forum : http://www.sosvirus.net/
Upload Malware : http://www.sosvirus.net/upload_malware.php
Contact : http://www.usbfix.net/contact/

PC: ASUSTeK Computer INC. (1005P)
CPU: Intel(R) Atom(TM) CPU N450 @ 1.66GHz
CPU: Intel(R) Atom(TM) CPU N450 @ 1.66GHz
RAM -> [Total : 1014 | Free : 188]
Bios: American Megatrends Inc.
Boot: Normal boot

OS: Microsoft Windows XP Professionnel (5.1.2600 32-Bit) Service Pack 2
WB: Windows Internet Explorer : 6.0.2900.2180
WB: Google Chrome : 31.0.1650.63
WB: Mozilla Firefox : 25.0.1

SC: Security Center Service [Enabled]
WU: Windows Update Service [Enabled]
FW: Windows FireWall Service [Enabled]

C:\ (%systemdrive%) -> Disque fixe # 73 Go (2 Go libre(s) - 2%) [] # NTFS
E:\ -> Disque fixe # 76 Go (29 Go libre(s) - 38%) [] # NTFS

################## | Processus Actif |

C:\WINDOWS\System32\smss.exe (ID: 712 |ParentID: 4)
C:\WINDOWS\system32\csrss.exe (ID: 768 |ParentID: 712)
C:\WINDOWS\system32\winlogon.exe (ID: 796 |ParentID: 712)
C:\WINDOWS\system32\services.exe (ID: 840 |ParentID: 796)
C:\WINDOWS\system32\lsass.exe (ID: 852 |ParentID: 796)
C:\WINDOWS\system32\svchost.exe (ID: 1032 |ParentID: 840)
C:\WINDOWS\system32\svchost.exe (ID: 1100 |ParentID: 840)
C:\WINDOWS\System32\svchost.exe (ID: 1220 |ParentID: 840)
C:\WINDOWS\system32\svchost.exe (ID: 1296 |ParentID: 840)
C:\WINDOWS\system32\svchost.exe (ID: 1396 |ParentID: 840)
C:\WINDOWS\system32\spoolsv.exe (ID: 1604 |ParentID: 840)
E:\Drivers\Drivers\ekrn.exe (ID: 2000 |ParentID: 840)
E:\Drivers\MaConfigAgent.exe (ID: 192 |ParentID: 840)
C:\WINDOWS\system32\svchost.exe (ID: 540 |ParentID: 840)
C:\WINDOWS\Explorer.EXE (ID: 1832 |ParentID: 1664)
C:\WINDOWS\system32\igfxtray.exe (ID: 1972 |ParentID: 1832)
C:\WINDOWS\system32\hkcmd.exe (ID: 1996 |ParentID: 1832)
C:\WINDOWS\system32\igfxpers.exe (ID: 2036 |ParentID: 1832)
C:\WINDOWS\RTHDCPL.EXE (ID: 2044 |ParentID: 1832)
E:\Drivers\Drivers\egui.exe (ID: 204 |ParentID: 1832)
C:\WINDOWS\system32\ctfmon.exe (ID: 232 |ParentID: 1832)
C:\WINDOWS\system32\igfxsrvc.exe (ID: 336 |ParentID: 1032)
C:\Program Files\RocketDock\RocketDock.exe (ID: 364 |ParentID: 1832)
C:\Program Files\Microsoft Etudes\Microsoft Encarta 2008 - Études DVD\EDICT.EXE (ID: 400 |ParentID: 1832)
C:\Program Files\Squeaky Chocolate, LLC\UpdateChecker\UpdateCheckerApp.exe (ID: 436 |ParentID: 1832)
C:\Program Files\Skype\Phone\Skype.exe (ID: 352 |ParentID: 1832)
C:\WINDOWS\System32\alg.exe (ID: 2588 |ParentID: 840)
C:\Program Files\Google\Chrome\Application\chrome.exe (ID: 2292 |ParentID: 364)
C:\Program Files\Google\Chrome\Application\chrome.exe (ID: 1688 |ParentID: 2292)
C:\Program Files\Google\Chrome\Application\chrome.exe (ID: 3792 |ParentID: 2292)
C:\Program Files\Microsoft Office\Office12\WINWORD.EXE (ID: 1648 |ParentID: 1832)
C:\Program Files\Google\Chrome\Application\chrome.exe (ID: 2152 |ParentID: 2292)
C:\Program Files\Google\Chrome\Application\chrome.exe (ID: 3456 |ParentID: 2292)
C:\Program Files\Google\Chrome\Application\chrome.exe (ID: 3464 |ParentID: 2292)
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Google Talk Plugin\googletalkplugin.exe (ID: 188 |ParentID: 3464)
C:\Program Files\Google\Chrome\Application\chrome.exe (ID: 1248 |ParentID: 2292)
C:\UsbFix\Go.exe (ID: 3804 |ParentID: 2804)
C:\WINDOWS\system32\wbem\wmiprvse.exe (ID: 3036 |ParentID: 1032)

################## | Regedit Run |

04 - HKLM\SOFTWARE | Run : [IgfxTray] - C:\WINDOWS\system32\igfxtray.exe
04 - HKLM\SOFTWARE | Run : [HotKeysCmds] - C:\WINDOWS\system32\hkcmd.exe
04 - HKLM\SOFTWARE | Run : [Persistence] - C:\WINDOWS\system32\igfxpers.exe
04 - HKLM\SOFTWARE | Run : [RTHDCPL] - RTHDCPL.EXE
04 - HKLM\SOFTWARE | Run : [egui] - "E:\Drivers\Drivers\egui.exe" /hide /waitservice
04 - HKLM\SOFTWARE | RunOnce : [] -
04 - HKU\S-1-5-19\SOFTWARE | Run : [CTFMON.EXE] - C:\WINDOWS\system32\CTFMON.EXE
04 - HKU\S-1-5-20\SOFTWARE | Run : [CTFMON.EXE] - C:\WINDOWS\system32\CTFMON.EXE
04 - HKU\S-1-5-21-823518204-1450960922-682003330-1003\SOFTWARE | Run : [CTFMON.EXE] - C:\WINDOWS\system32\ctfmon.exe
04 - HKU\S-1-5-21-823518204-1450960922-682003330-1003\SOFTWARE | Run : [RocketDock] - "C:\Program Files\RocketDock\RocketDock.exe"
04 - HKU\S-1-5-21-823518204-1450960922-682003330-1003\SOFTWARE | Run : [L08FXLRD_51997015] - "C:\Program Files\Microsoft Etudes\Microsoft Encarta 2008 - Études DVD\EDICT.EXE" -m
04 - HKU\S-1-5-21-823518204-1450960922-682003330-1003\SOFTWARE | Run : [tempHome] - C:\DOCUME~1\Admin\LOCALS~1\Temp\racourci.vbe
04 - HKU\S-1-5-21-823518204-1450960922-682003330-1003\SOFTWARE | Run : [lan] - C:\Documents and Settings\Admin\chat-land\Chat-Landmessenger.jar
04 - HKU\S-1-5-21-823518204-1450960922-682003330-1003\SOFTWARE | Run : [Google Update] - "C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
04 - HKU\S-1-5-21-823518204-1450960922-682003330-1003\SOFTWARE | Run : [AdobeBridge] -
04 - HKU\S-1-5-21-823518204-1450960922-682003330-1003\SOFTWARE | Run : [UpdateChecker] - C:\Program Files\Squeaky Chocolate, LLC\UpdateChecker\UpdateCheckerApp.exe
04 - HKU\S-1-5-21-823518204-1450960922-682003330-1003\SOFTWARE | Run : [Facebook Update] - "C:\Documents and Settings\Admin\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
04 - HKU\S-1-5-21-823518204-1450960922-682003330-1003\SOFTWARE | Run : [iLivid] - "C:\Documents and Settings\Admin\Local Settings\Application Data\iLivid\iLivid.exe" -autorun
04 - HKU\S-1-5-21-823518204-1450960922-682003330-1003\SOFTWARE | Run : [Skype] - "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
04 - HKU\S-1-5-21-823518204-1450960922-682003330-1003\SOFTWARE | Run : [WebcamMaxAutoRun] - "E:\Drivers\Drivers\WebcamMax\wcmmon.exe" -a
04 - HKU\S-1-5-18\SOFTWARE | Run : [CTFMON.EXE] - C:\WINDOWS\system32\CTFMON.EXE
04 - HKU\S-1-5-18\SOFTWARE | Run : [DWQueuedReporting] - "C:\PROGRA~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe" -t

################## | Recherche générique |

Présent! E:\Microsoft Encarta 2008 - Études DVD.lnk
Présent! E:\VirtualDJ Home FREE.lnk
Présent! C:\DOCUME~1\Admin\LOCALS~1\Temp\WindowsInstaller-KB893803-v2-x86.exe
Présent! E:\desktop.ini
Présent! E:\winXP.exe

################## | Registre |


################## | Vaccin |

E:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)

################## | E.O.F | http://www.usbfix.net - http://www.sosvirus.net |