Virus reçu via une clé usb
Résolu/Fermé
qh.tram
Messages postés
3
Date d'inscription
mardi 17 décembre 2013
Statut
Membre
Dernière intervention
17 décembre 2013
-
17 déc. 2013 à 00:08
Malekal_morte- Messages postés 180304 Date d'inscription mercredi 17 mai 2006 Statut Modérateur, Contributeur sécurité Dernière intervention 15 décembre 2020 - 17 déc. 2013 à 11:47
Malekal_morte- Messages postés 180304 Date d'inscription mercredi 17 mai 2006 Statut Modérateur, Contributeur sécurité Dernière intervention 15 décembre 2020 - 17 déc. 2013 à 11:47
A voir également:
- Virus reçu via une clé usb
- Clé usb non détectée - Guide
- Clé windows 10 gratuit - Guide
- Clé usb 2to vrai ou faux - Accueil - Stockage
- Creer cle usb windows 10 - Guide
- Formater clé usb mac - Guide
5 réponses
Malekal_morte-
Messages postés
180304
Date d'inscription
mercredi 17 mai 2006
Statut
Modérateur, Contributeur sécurité
Dernière intervention
15 décembre 2020
24 661
17 déc. 2013 à 00:15
17 déc. 2013 à 00:15
Salut,
Fais suppression sur USBFix
et donne le rapport :)
Fais suppression sur USBFix
et donne le rapport :)
qh.tram
Messages postés
3
Date d'inscription
mardi 17 décembre 2013
Statut
Membre
Dernière intervention
17 décembre 2013
Modifié par qh.tram le 17/12/2013 à 00:28
Modifié par qh.tram le 17/12/2013 à 00:28
############################## | UsbFix V 7.155 | [Suppression]
Utilisateur: user (Administrateur) # USER-PC
Mis à jour le 16/12/2013 par El Desaparecido - Team SosVirus
Lancé à 00:17:41 | 17/12/2013
Site Web : https://www.usbfix.net/
Forum : https://www.sosvirus.net/
Upload Malware : http://www.sosvirus.net/upload_malware.php
Contact : https://www.usb-antivirus.com/fr/contact/
PC: Hewlett-Packard (146A)
CPU: Intel(R) Core(TM) i5 CPU M 430 @ 2.27GHz
RAM -> [Total : 2934 | Free : 1238]
Bios: Hewlett-Packard
Boot: Normal boot
OS: Microsoft Windows 7 Édition Familiale Premium (6.1.7601 64-Bit) Service Pack 1
WB: Windows Internet Explorer : 11.0.9600.16476
WB: Mozilla Firefox : 20.0.1
SC: Security Center Service [Enabled]
WU: Windows Update Service [Enabled]
AV: ESET NOD32 Antivirus 4.2 [Enabled | (!) Outdated]
AS: Windows Defender : 6.1.7600.16385 (win7_rtm.090713-1255)
FW: Windows FireWall Service [Enabled]
C:\ (%systemdrive%) -> Disque fixe # 278 Go (25 Go libre(s) - 9%) [] # NTFS
D:\ -> Disque fixe # 19 Go (3 Go libre(s) - 15%) [RECOVERY] # NTFS
E:\ -> Disque fixe # 99 Mo (90 Mo libre(s) - 90%) [HP_TOOLS] # FAT32
F:\ -> CD-ROM
G:\ -> Disque amovible # 7 Go (145 Mo libre(s) - 2%) [] # FAT32
H:\ -> Disque amovible # 58 Go (57 Go libre(s) - 99%) [Quoc-Huy Tram] # NTFS
################## | Processus Stoppés |
Stoppé! C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe (ID: 1712 |ParentID: 584)
Stoppé! C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe (ID: 1880 |ParentID: 584)
Stoppé! C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (ID: 2456 |ParentID: 584)
Stoppé! C:\Windows\explorer.exe (ID: 2940 |ParentID: 692)
Stoppé! C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (ID: 6304 |ParentID: 584)
Stoppé! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (ID: 6352 |ParentID: 584)
Stoppé! C:\Windows\system32\SearchIndexer.exe (ID: 1240 |ParentID: 584)
Stoppé! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (ID: 1032 |ParentID: 6352)
Stoppé! C:\Windows\System32\spoolsv.exe (ID: 6548 |ParentID: 584)
Stoppé! C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (ID: 3724 |ParentID: 584)
Stoppé! C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (ID: 3412 |ParentID: 584)
Stoppé! C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe (ID: 1496 |ParentID: 584)
Stoppé! C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 3032 |ParentID: 2940)
Stoppé! C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 5564 |ParentID: 3032)
Stoppé! C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 988 |ParentID: 3032)
Stoppé! C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 4140 |ParentID: 3032)
Stoppé! C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 3128 |ParentID: 3032)
Stoppé! C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 3360 |ParentID: 3032)
Stoppé! C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 4324 |ParentID: 3032)
Stoppé! C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (ID: 3896 |ParentID: 584)
Stoppé! C:\Windows\explorer.exe (ID: 168 |ParentID: 756)
Stoppé! C:\Windows\SysWOW64\NOTEPAD.EXE (ID: 4704 |ParentID: 2204)
Stoppé! C:\Windows\system32\DllHost.exe (ID: 3448 |ParentID: 756)
Stoppé! C:\Windows\System32\WUDFHost.exe (ID: 2116 |ParentID: 972)
Stoppé! C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (ID: 1896 |ParentID: 584)
Stoppé! C:\Program Files (x86)\Windows Media Player\wmplayer.exe (ID: 4692 |ParentID: 756)
Stoppé! C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 2148 |ParentID: 3032)
Stoppé! C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 7000 |ParentID: 3032)
Stoppé! C:\Users\user\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe (ID: 1064 |ParentID: 7000)
Stoppé! C:\Windows\system32\taskeng.exe (ID: 2060 |ParentID: 292)
Stoppé! C:\Windows\system32\SearchProtocolHost.exe (ID: 1728 |ParentID: 1240)
Stoppé! C:\Windows\system32\SearchFilterHost.exe (ID: 3192 |ParentID: 1240)
################## | Regedit Run |
04 - HKLM\SOFTWARE | Run : [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
04 - HKLM\SOFTWARE | Run : [EgisTecPMMUpdate] - "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"
04 - HKLM\SOFTWARE | Run : [EgisUpdate] - "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d
04 - HKLM\SOFTWARE | Run : [VitaKeyTSR] - C:\Program Files (x86)\Hewlett-Packard\HP SimplePass Identity Protection\EgisTSR.exe /run
04 - HKLM\SOFTWARE | Run : [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
04 - HKLM\SOFTWARE | Run : [Adobe Reader Speed Launcher] - "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
04 - HKLM\SOFTWARE | Run : [Easybits Recovery] - C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
04 - HKLM\SOFTWARE | Run : [HP Software Update] - C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
04 - HKLM\SOFTWARE | Run : [] -
04 - HKLM\SOFTWARE | Run : [APSDaemon] - "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
04 - HKLM\SOFTWARE | Run : [QuickTime Task] - "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
04 - HKLM\SOFTWARE | Run : [HTC Sync Loader] - "C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe" -startup
04 - HKLM\SOFTWARE | Run : [iTunesHelper] - "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
04 - HKLM\SOFTWARE\wow6432Node | Run : [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
04 - HKLM\SOFTWARE\wow6432Node | Run : [EgisTecPMMUpdate] - "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"
04 - HKLM\SOFTWARE\wow6432Node | Run : [EgisUpdate] - "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d
04 - HKLM\SOFTWARE\wow6432Node | Run : [VitaKeyTSR] - C:\Program Files (x86)\Hewlett-Packard\HP SimplePass Identity Protection\EgisTSR.exe /run
04 - HKLM\SOFTWARE\wow6432Node | Run : [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
04 - HKLM\SOFTWARE\wow6432Node | Run : [Adobe Reader Speed Launcher] - "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
04 - HKLM\SOFTWARE\wow6432Node | Run : [Easybits Recovery] - C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
04 - HKLM\SOFTWARE\wow6432Node | Run : [HP Software Update] - C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
04 - HKLM\SOFTWARE\wow6432Node | Run : [] -
04 - HKLM\SOFTWARE\wow6432Node | Run : [APSDaemon] - "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
04 - HKLM\SOFTWARE\wow6432Node | Run : [QuickTime Task] - "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
04 - HKLM\SOFTWARE\wow6432Node | Run : [HTC Sync Loader] - "C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe" -startup
04 - HKLM\SOFTWARE\wow6432Node | Run : [iTunesHelper] - "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
04 - HKLM\SOFTWARE | RunOnce : [] -
04 - HKLM\SOFTWARE\wow6432Node | RunOnce : [] -
04 - HKU\S-1-5-19\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-20\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-21-265691642-1998656732-3655218528-1000\SOFTWARE | Run : [HPAdvisorDock] - C:\Program Files (x86)\Hewlett-Packard\HP Advisor\Dock\HPAdvisorDock.exe
04 - HKU\S-1-5-21-265691642-1998656732-3655218528-1000\SOFTWARE | Run : [Google Update] - "C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe" /c
04 - HKU\S-1-5-21-265691642-1998656732-3655218528-1000\SOFTWARE | Run : [msnmsgr] - "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
04 - HKU\S-1-5-21-265691642-1998656732-3655218528-1000\SOFTWARE | Run : [MobileDocuments] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe
04 - HKU\S-1-5-21-265691642-1998656732-3655218528-1000\SOFTWARE | Run : [Facebook Update] - "C:\Users\user\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
04 - HKU\S-1-5-21-265691642-1998656732-3655218528-1000\SOFTWARE | Run : [Skype] - "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
04 - HKU\S-1-5-21-265691642-1998656732-3655218528-1000\SOFTWARE | Run : [Web Freer] - C:\Program Files (x86)\WebFreer\webfreer.exe
04 - HKU\S-1-5-21-265691642-1998656732-3655218528-1000\SOFTWARE | Run : [iTunesHelper] - wscript.exe //B "C:\Users\user\AppData\Local\Temp\iTunesHelper.vbe"
04 - HKU\S-1-5-21-265691642-1998656732-3655218528-1000\SOFTWARE | Run : [MiPhoneManager] - "C:\Users\user\AppData\Local\MiPhoneManager\main\MiPhoneHelper.exe"
04 - HKU\S-1-5-19\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe
################## | Recherche générique |
Supprimé! C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\iTunesHelper.vbe
Supprimé! C:\Windows\SysWOW64\user.exe
Supprimé! C:\Users\user\AppData\Local\Temp\iTunesHelper.vbe
Supprimé! C:\Users\user\AppData\Local\Temp\RL9peHqm.vbs
Supprimé! G:\iTunesHelper.vbe
Supprimé! H:\iTunesHelper.vbe
Supprimé! G:\Hello.lnk
Supprimé! G:\CoPilot_8.lnk
Supprimé! G:\HaPiChiDicPr.lnk
Supprimé! G:\sim_SIM_00001.lnk
Supprimé! G:\google_qh.lnk
Supprimé! G:\SThumbDB.lnk
Supprimé! G:\+32484101659_Fo ko.lnk
Supprimé! G:\pcsc_pcsc_00001.lnk
Supprimé! G:\pcsc_pcsc_00002.lnk
Supprimé! G:\Psychologie.lnk
Supprimé! G:\miui_DesireS_2.lnk
Supprimé! G:\burstlyImageCache.lnk
Supprimé! G:\soundhound.lnk
Supprimé! G:\.beintoo.lnk
Supprimé! G:\beautyCamera.lnk
Supprimé! G:\Autodesk.lnk
Supprimé! G:\.lnk
Supprimé! G:\screenshots.lnk
Supprimé! G:\Movies.lnk
Supprimé! G:\Pictures.lnk
Supprimé! G:\PuddingCamera.lnk
Supprimé! G:\Sounds.lnk
Supprimé! G:\kugou.lnk
Supprimé! G:\.ringtonetrimmer.lnk
Supprimé! G:\LOST.DIR.lnk
Supprimé! G:\.android_secure.lnk
Supprimé! G:\tmp.lnk
Supprimé! G:\.adobe-digital-editions.lnk
Supprimé! G:\.PDAPK.lnk
Supprimé! G:\DCIM.lnk
Supprimé! G:\WhatsApp.lnk
Supprimé! G:\Android.lnk
Supprimé! G:\.data.lnk
Supprimé! G:\media.lnk
Supprimé! G:\viber.lnk
Supprimé! G:\GOSMS.lnk
Supprimé! G:\ZingMp3.lnk
Supprimé! G:\download.lnk
Supprimé! G:\My Documents.lnk
Supprimé! G:\Video.lnk
Supprimé! G:\AK_Notepad_Exported_Notes.lnk
Supprimé! G:\downloads.lnk
Supprimé! G:\music.lnk
Supprimé! G:\svox.lnk
Supprimé! G:\.quickoffice.lnk
Supprimé! G:\Wallpaper.lnk
Supprimé! G:\CARBONE PLUS.lnk
Supprimé! G:\Haircut.lnk
Supprimé! G:\.antutu.lnk
Supprimé! G:\pptv.lnk
Supprimé! G:\Podcasts.lnk
Supprimé! G:\tencent.lnk
Supprimé! G:\Notifications.lnk
Supprimé! G:\qqmusic.lnk
Supprimé! G:\Alarms.lnk
Supprimé! G:\Hello Ladies S01E02 HDTV x264-KILLERS[ettv].lnk
Supprimé! G:\Hello Ladies S01E04 HDTV x264-KILLERS[ettv].lnk
Supprimé! G:\Hello Ladies S01E07 HDTV x264-2HD[ettv].lnk
Supprimé! G:\Autorun.inf.lnk
Supprimé! G:\Ringtones.lnk
Supprimé! G:\uloops.lnk
Supprimé! G:\.fseventsd.lnk
Supprimé! G:\.Trashes.lnk
Supprimé! G:\Facebook.lnk
Supprimé! H:\Geeks - Officially Missing you.lnk
Supprimé! H:\Intouchables.lnk
Supprimé! H:\The ethical dilemma.lnk
Supprimé! C:\Users\user\AppData\Local\Temp\Genial_Oza.hta
(!) Fichiers temporaires supprimés. (16 Ko)
################## | Référence de comparaison MD5 |
Md5 : 2BCBCF86077A7E0F77BDB82F331F2957 -> C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\iTunesHelper.vbe
Md5 : 5244D544B022E70881794563D657B5EF -> C:\Windows\SysWOW64\user.exe
Md5 : 2BCBCF86077A7E0F77BDB82F331F2957 -> C:\Users\user\AppData\Local\Temp\iTunesHelper.vbe
Md5 : B5E7BFBBAC3B4E9DB51960169132E9FD -> C:\Users\user\AppData\Local\Temp\RL9peHqm.vbs
Md5 : 2BCBCF86077A7E0F77BDB82F331F2957 -> G:\iTunesHelper.vbe
Md5 : 2BCBCF86077A7E0F77BDB82F331F2957 -> H:\iTunesHelper.vbe
################## | Comparaison MD5 |
Supprimé! Md5 : 5244D544B022E70881794563D657B5EF -> C:\Windows\System32\user.exe
Supprimé! Md5 : 5244D544B022E70881794563D657B5EF -> C:\Windows\SysWOW64\user.exe
################## | Registre |
Réparé ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|EnableLUA -> 1
Réparé ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|ConsentPromptBehaviorAdmin -> 5
Réparé ! HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer|EnableShellExecuteHooks -> 0
Supprimé! HKU\S-1-5-21-265691642-1998656732-3655218528-1000\Software\Microsoft\Windows\CurrentVersion\Run|iTunesHelper
Supprimé! HKLM\Software\Microsoft\Windows\CurrentVersion\Run|iTunesHelper
Supprimé! HKU\S-1-5-21-265691642-1998656732-3655218528-1000\Software\.\.\.\.\Mountpoints2\G
Supprimé! HKU\S-1-5-21-265691642-1998656732-3655218528-1000\Software\.\.\.\.\Mountpoints2\{5a5ba517-d4c4-11e0-9292-70f39526bd0d}
Supprimé! HKU\S-1-5-21-265691642-1998656732-3655218528-1000\Software\.\.\.\.\Mountpoints2\{64fd8658-d67e-11e2-9add-70f39526bd0d}
Supprimé! HKU\S-1-5-21-265691642-1998656732-3655218528-1000\Software\.\.\.\.\Mountpoints2\{cb96f459-de6f-11e2-bd9d-70f39526bd0d}
################## | Listing |
[16/12/2013 - 23:48:21 | N | 18 Ko] - C:\UsbFix [Scan 1] USER-PC.txt
[17/12/2013 - 00:26:53 | A | 13 Ko] - C:\UsbFix [Clean 1] USER-PC.txt
[16/12/2013 - 20:04:32 | ASH | 2253204 Ko] - C:\hiberfil.sys
[16/12/2013 - 20:05:32 | ASH | 3004272 Ko] - C:\pagefile.sys
[30/08/2011 - 07:59:11 | D] - C:\SYSTEM.SAV
[01/12/2006 - 22:37:14 | N | 884 Ko] - C:\msdia80.dll
[30/08/2011 - 08:01:24 | SHD] - C:\$Recycle.Bin
[14/07/2009 - 02:38:58 | RASH | 375 Ko] - C:\bootmgr
[14/07/2009 - 04:20:08 | D] - C:\PerfLogs
[14/07/2009 - 06:08:56 | SHD] - C:\Documents and Settings
[27/04/2010 - 02:41:54 | SHD] - C:\boot
[11/06/2010 - 17:14:56 | D] - C:\Intel
[11/06/2010 - 17:36:03 | D] - C:\HP
[30/08/2011 - 07:58:33 | D] - C:\Users
[30/08/2011 - 07:59:07 | SHD] - C:\Recovery
[01/09/2011 - 20:41:45 | RHD] - C:\MSOCache
[02/10/2012 - 12:47:55 | D] - C:\ruu_log
[12/12/2012 - 17:01:20 | D] - C:\SwSetup
[30/04/2013 - 06:04:15 | N | 0 Ko] - C:\Cookies
[22/06/2013 - 07:14:45 | HD] - C:\ProgramData
[17/11/2013 - 22:43:43 | D] - C:\Program Files
[15/12/2013 - 23:09:37 | D] - C:\Windows
[15/12/2013 - 23:10:20 | D] - C:\Program Files (x86)
[15/12/2013 - 23:43:31 | SHD] - C:\System Volume Information
[17/12/2013 - 00:26:11 | D] - C:\UsbFix
[19/08/2011 - 12:45:20 | N | 0 Ko] - D:\HPSF_Rep.txt
[04/09/2010 - 17:47:19 | D] - D:\system.sav
[05/09/2010 - 00:34:16 | N | 0 Ko] - D:\hpdrcu.prc
[12/06/2010 - 04:35:29 | N | 0 Ko] - D:\RPCONFIG.LOG
[12/06/2010 - 04:35:34 | N | 14 Ko] - D:\DeployRp.log
[30/08/2011 - 08:01:20 | N | 0 Ko] - D:\language.ini
[16/12/2013 - 23:48:21 | RASHD] - D:\Autorun.inf
[30/08/2011 - 08:01:21 | N | 0 Ko] - D:\BT_HP.FLG
[12/06/2010 - 04:10:34 | N | 0 Ko] - D:\CSP.DAT
[30/10/2012 - 15:33:21 | N | 0 Ko] - D:\HP_WSD.dat
[02/07/2011 - 11:53:02 | SHD] - D:\$RECYCLE.BIN
[14/07/2009 - 19:39:00 | ASH | 375 Ko] - D:\bootmgr
[04/09/2010 - 17:47:19 | SHD] - D:\boot
[04/09/2010 - 17:47:19 | SHD] - D:\preload
[05/09/2010 - 00:34:16 | D] - D:\hp
[14/12/2010 - 23:15:08 | SHD] - D:\System Volume Information
[30/08/2011 - 07:59:10 | SD] - D:\Recovery
[19/08/2011 - 13:45:22 | N | 0 Ko] - E:\HPSF_Rep.txt
[16/12/2013 - 23:48:22 | RASHD] - E:\Autorun.inf
[30/10/2012 - 15:33:22 | N | 0 Ko] - E:\HP_WSD.dat
[04/09/2010 - 18:47:24 | SHD] - E:\$RECYCLE.BIN
[02/09/2011 - 14:18:34 | D] - E:\Hewlett-Packard
[05/09/2013 - 12:37:32 | N | 80948 Ko] - G:\miui_DesireS_2.4.13_s9ol1csxlx_2.3.zip
[04/11/2011 - 13:06:40 | N | 0 Ko] - G:\+32484101659_Fo ko.vmg
[17/03/2012 - 17:51:18 | N | 0 Ko] - G:\pcsc_pcsc_00001.vcf
[17/03/2012 - 17:51:58 | N | 0 Ko] - G:\sim_SIM_00001.vcf
[09/08/2012 - 11:28:00 | N | 0 Ko] - G:\pcsc_pcsc_00002.vcf
[02/10/2012 - 10:04:40 | N | 195 Ko] - G:\google_qh.tram_00005.vcf
[26/06/2013 - 18:36:44 | N | 428 Ko] - G:\google_qh.tram_00001.vcf
[02/05/2012 - 11:13:20 | SH | 4 Ko] - G:\._.Trashes
[02/05/2012 - 11:13:20 | SHD] - G:\.Trashes
[04/11/2011 - 13:47:22 | N | 45924 Ko] - G:\SThumbDB.tdb
[05/04/2013 - 10:57:04 | D] - G:\.ringtonetrimmer
[27/11/2011 - 23:50:58 | D] - G:\.quickoffice
[08/10/2012 - 23:15:08 | D] - G:\.PDAPK
[12/12/2013 - 22:25:26 | N | 200829 Ko] - G:\Hello.Ladies.S01E03.HDTV.x264-2HD.mp4
[13/12/2013 - 10:15:22 | N | 327973 Ko] - G:\Hello.Ladies.S01E05.HDTV.x264-2HD.mp4
[13/12/2013 - 10:22:26 | N | 267353 Ko] - G:\Hello.Ladies.S01E06.HDTV.x264-2HD.mp4
[16/12/2013 - 20:55:06 | N | 4 Ko] - G:\._Hello.Ladies.S01E03.HDTV.x264-2HD.mp4
[16/12/2013 - 20:59:20 | N | 4 Ko] - G:\._Hello.Ladies.S01E05.HDTV.x264-2HD.mp4
[16/12/2013 - 21:01:52 | N | 4 Ko] - G:\._Hello.Ladies.S01E06.HDTV.x264-2HD.mp4
[16/12/2013 - 23:48:22 | SHD] - G:\Autorun.inf
[02/05/2012 - 11:13:22 | SHD] - G:\.fseventsd
[06/05/2010 - 23:22:46 | N | 25 Ko] - G:\??????(1).doc
[09/12/2010 - 15:46:12 | N | 351 Ko] - G:\Psychologie.doc
[02/11/2011 - 00:59:46 | D] - G:\LOST.DIR
[06/07/2012 - 10:25:20 | D] - G:\.data
[27/11/2012 - 14:11:12 | N | 0 Ko] - G:\.bugsense
[15/12/2011 - 17:09:46 | D] - G:\.beintoo
[07/05/2012 - 23:14:08 | N | 438 Ko] - G:\HaPiChiDicPr.2.4.1.apk
[07/05/2012 - 23:47:40 | N | 11139 Ko] - G:\CoPilot_8.0.0.606_mod.apk
[25/06/2013 - 21:46:58 | D] - G:\.antutu
[02/05/2013 - 15:51:52 | D] - G:\.android_secure
[02/11/2011 - 01:02:30 | D] - G:\.adobe-digital-editions
[16/12/2013 - 20:59:58 | N | 4 Ko] - G:\._Hello Ladies S01E07 HDTV x264-2HD[ettv]
[16/12/2013 - 20:55:10 | N | 4 Ko] - G:\._Hello Ladies S01E04 HDTV x264-KILLERS[ettv]
[16/12/2013 - 20:53:40 | N | 4 Ko] - G:\._Hello Ladies S01E02 HDTV x264-KILLERS[ettv]
[18/09/1989 - 20:20:38 | D] - G:\Sounds
[02/11/2011 - 00:52:18 | D] - G:\music
[02/11/2011 - 00:54:54 | D] - G:\downloads
[02/11/2011 - 00:55:20 | D] - G:\Wallpaper
[02/11/2011 - 22:17:24 | D] - G:\media
[27/11/2011 - 02:22:38 | D] - G:\svox
[01/12/2011 - 18:13:44 | D] - G:\screenshots
[04/01/2012 - 23:17:02 | D] - G:\soundhound
[01/03/2012 - 09:44:40 | D] - G:\CARBONE PLUS
[04/05/2012 - 14:14:50 | D] - G:\uloops
[10/05/2012 - 07:27:12 | D] - G:\WhatsApp
[21/07/2012 - 14:57:50 | D] - G:\burstlyImageCache
[26/07/2012 - 12:52:02 | D] - G:\My Documents
[02/10/2012 - 12:00:30 | D] - G:\Notifications
[02/10/2012 - 12:00:30 | D] - G:\Alarms
[06/10/2012 - 23:52:22 | D] - G:\tmp
[24/02/2013 - 19:04:06 | D] - G:\tencent
[17/03/2013 - 20:17:06 | D] - G:\Autodesk
[17/03/2013 - 20:20:58 | D] - G:\beautyCamera
[20/03/2013 - 08:54:30 | D] - G:\Haircut
[02/04/2013 - 17:11:48 | D] - G:\Android
[06/04/2013 - 18:41:08 | D] - G:\Facebook
[12/04/2013 - 19:06:56 | D] - G:\Ringtones
[20/04/2013 - 15:33:44 | D] - G:\pptv
[10/06/2013 - 20:26:30 | D] - G:\Video
[11/06/2013 - 14:14:08 | D] - G:\kugou
[11/06/2013 - 17:24:56 | D] - G:\qqmusic
[15/06/2013 - 04:05:48 | D] - G:\PuddingCamera
[26/06/2013 - 23:55:00 | D] - G:\AK_Notepad_Exported_Notes
[14/08/2013 - 04:59:50 | D] - G:\GOSMS
[14/08/2013 - 05:20:56 | D] - G:\Pictures
[14/08/2013 - 05:20:56 | D] - G:\Movies
[14/08/2013 - 05:20:56 | D] - G:\Podcasts
[12/10/2013 - 16:40:52 | D] - G:\viber
[12/10/2013 - 17:54:10 | D] - G:\ZingMp3
[19/10/2013 - 00:47:26 | D] - G:\download
[22/11/2013 - 09:28:18 | D] - G:\DCIM
[16/12/2013 - 20:53:38 | D] - G:\Hello Ladies S01E02 HDTV x264-KILLERS[ettv]
[16/12/2013 - 20:55:10 | D] - G:\Hello Ladies S01E04 HDTV x264-KILLERS[ettv]
[16/12/2013 - 20:59:58 | D] - G:\Hello Ladies S01E07 HDTV x264-2HD[ettv]
[21/11/2013 - 19:00:41 | N | 3291 Ko] - H:\Geeks - Officially Missing you.mp3
[08/12/2013 - 22:55:47 | N | 28 Ko] - H:\The ethical dilemma.docx
[19/01/2012 - 16:07:52 | N | 716700 Ko] - H:\Intouchables.2011.FRENCH.DVDRiP.XviD-BLOODYMARY.avi
################## | Vaccin |
D:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
E:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
G:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
H:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
################## | E.O.F | https://www.usbfix.net/ - https://www.sosvirus.net/ |
here you go, merci pour ton aide!
Utilisateur: user (Administrateur) # USER-PC
Mis à jour le 16/12/2013 par El Desaparecido - Team SosVirus
Lancé à 00:17:41 | 17/12/2013
Site Web : https://www.usbfix.net/
Forum : https://www.sosvirus.net/
Upload Malware : http://www.sosvirus.net/upload_malware.php
Contact : https://www.usb-antivirus.com/fr/contact/
PC: Hewlett-Packard (146A)
CPU: Intel(R) Core(TM) i5 CPU M 430 @ 2.27GHz
RAM -> [Total : 2934 | Free : 1238]
Bios: Hewlett-Packard
Boot: Normal boot
OS: Microsoft Windows 7 Édition Familiale Premium (6.1.7601 64-Bit) Service Pack 1
WB: Windows Internet Explorer : 11.0.9600.16476
WB: Mozilla Firefox : 20.0.1
SC: Security Center Service [Enabled]
WU: Windows Update Service [Enabled]
AV: ESET NOD32 Antivirus 4.2 [Enabled | (!) Outdated]
AS: Windows Defender : 6.1.7600.16385 (win7_rtm.090713-1255)
FW: Windows FireWall Service [Enabled]
C:\ (%systemdrive%) -> Disque fixe # 278 Go (25 Go libre(s) - 9%) [] # NTFS
D:\ -> Disque fixe # 19 Go (3 Go libre(s) - 15%) [RECOVERY] # NTFS
E:\ -> Disque fixe # 99 Mo (90 Mo libre(s) - 90%) [HP_TOOLS] # FAT32
F:\ -> CD-ROM
G:\ -> Disque amovible # 7 Go (145 Mo libre(s) - 2%) [] # FAT32
H:\ -> Disque amovible # 58 Go (57 Go libre(s) - 99%) [Quoc-Huy Tram] # NTFS
################## | Processus Stoppés |
Stoppé! C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe (ID: 1712 |ParentID: 584)
Stoppé! C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe (ID: 1880 |ParentID: 584)
Stoppé! C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (ID: 2456 |ParentID: 584)
Stoppé! C:\Windows\explorer.exe (ID: 2940 |ParentID: 692)
Stoppé! C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (ID: 6304 |ParentID: 584)
Stoppé! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (ID: 6352 |ParentID: 584)
Stoppé! C:\Windows\system32\SearchIndexer.exe (ID: 1240 |ParentID: 584)
Stoppé! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (ID: 1032 |ParentID: 6352)
Stoppé! C:\Windows\System32\spoolsv.exe (ID: 6548 |ParentID: 584)
Stoppé! C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (ID: 3724 |ParentID: 584)
Stoppé! C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (ID: 3412 |ParentID: 584)
Stoppé! C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe (ID: 1496 |ParentID: 584)
Stoppé! C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 3032 |ParentID: 2940)
Stoppé! C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 5564 |ParentID: 3032)
Stoppé! C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 988 |ParentID: 3032)
Stoppé! C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 4140 |ParentID: 3032)
Stoppé! C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 3128 |ParentID: 3032)
Stoppé! C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 3360 |ParentID: 3032)
Stoppé! C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 4324 |ParentID: 3032)
Stoppé! C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (ID: 3896 |ParentID: 584)
Stoppé! C:\Windows\explorer.exe (ID: 168 |ParentID: 756)
Stoppé! C:\Windows\SysWOW64\NOTEPAD.EXE (ID: 4704 |ParentID: 2204)
Stoppé! C:\Windows\system32\DllHost.exe (ID: 3448 |ParentID: 756)
Stoppé! C:\Windows\System32\WUDFHost.exe (ID: 2116 |ParentID: 972)
Stoppé! C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (ID: 1896 |ParentID: 584)
Stoppé! C:\Program Files (x86)\Windows Media Player\wmplayer.exe (ID: 4692 |ParentID: 756)
Stoppé! C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 2148 |ParentID: 3032)
Stoppé! C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 7000 |ParentID: 3032)
Stoppé! C:\Users\user\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe (ID: 1064 |ParentID: 7000)
Stoppé! C:\Windows\system32\taskeng.exe (ID: 2060 |ParentID: 292)
Stoppé! C:\Windows\system32\SearchProtocolHost.exe (ID: 1728 |ParentID: 1240)
Stoppé! C:\Windows\system32\SearchFilterHost.exe (ID: 3192 |ParentID: 1240)
################## | Regedit Run |
04 - HKLM\SOFTWARE | Run : [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
04 - HKLM\SOFTWARE | Run : [EgisTecPMMUpdate] - "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"
04 - HKLM\SOFTWARE | Run : [EgisUpdate] - "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d
04 - HKLM\SOFTWARE | Run : [VitaKeyTSR] - C:\Program Files (x86)\Hewlett-Packard\HP SimplePass Identity Protection\EgisTSR.exe /run
04 - HKLM\SOFTWARE | Run : [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
04 - HKLM\SOFTWARE | Run : [Adobe Reader Speed Launcher] - "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
04 - HKLM\SOFTWARE | Run : [Easybits Recovery] - C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
04 - HKLM\SOFTWARE | Run : [HP Software Update] - C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
04 - HKLM\SOFTWARE | Run : [] -
04 - HKLM\SOFTWARE | Run : [APSDaemon] - "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
04 - HKLM\SOFTWARE | Run : [QuickTime Task] - "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
04 - HKLM\SOFTWARE | Run : [HTC Sync Loader] - "C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe" -startup
04 - HKLM\SOFTWARE | Run : [iTunesHelper] - "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
04 - HKLM\SOFTWARE\wow6432Node | Run : [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
04 - HKLM\SOFTWARE\wow6432Node | Run : [EgisTecPMMUpdate] - "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"
04 - HKLM\SOFTWARE\wow6432Node | Run : [EgisUpdate] - "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d
04 - HKLM\SOFTWARE\wow6432Node | Run : [VitaKeyTSR] - C:\Program Files (x86)\Hewlett-Packard\HP SimplePass Identity Protection\EgisTSR.exe /run
04 - HKLM\SOFTWARE\wow6432Node | Run : [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
04 - HKLM\SOFTWARE\wow6432Node | Run : [Adobe Reader Speed Launcher] - "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
04 - HKLM\SOFTWARE\wow6432Node | Run : [Easybits Recovery] - C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
04 - HKLM\SOFTWARE\wow6432Node | Run : [HP Software Update] - C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
04 - HKLM\SOFTWARE\wow6432Node | Run : [] -
04 - HKLM\SOFTWARE\wow6432Node | Run : [APSDaemon] - "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
04 - HKLM\SOFTWARE\wow6432Node | Run : [QuickTime Task] - "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
04 - HKLM\SOFTWARE\wow6432Node | Run : [HTC Sync Loader] - "C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe" -startup
04 - HKLM\SOFTWARE\wow6432Node | Run : [iTunesHelper] - "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
04 - HKLM\SOFTWARE | RunOnce : [] -
04 - HKLM\SOFTWARE\wow6432Node | RunOnce : [] -
04 - HKU\S-1-5-19\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-20\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-21-265691642-1998656732-3655218528-1000\SOFTWARE | Run : [HPAdvisorDock] - C:\Program Files (x86)\Hewlett-Packard\HP Advisor\Dock\HPAdvisorDock.exe
04 - HKU\S-1-5-21-265691642-1998656732-3655218528-1000\SOFTWARE | Run : [Google Update] - "C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe" /c
04 - HKU\S-1-5-21-265691642-1998656732-3655218528-1000\SOFTWARE | Run : [msnmsgr] - "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
04 - HKU\S-1-5-21-265691642-1998656732-3655218528-1000\SOFTWARE | Run : [MobileDocuments] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe
04 - HKU\S-1-5-21-265691642-1998656732-3655218528-1000\SOFTWARE | Run : [Facebook Update] - "C:\Users\user\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
04 - HKU\S-1-5-21-265691642-1998656732-3655218528-1000\SOFTWARE | Run : [Skype] - "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
04 - HKU\S-1-5-21-265691642-1998656732-3655218528-1000\SOFTWARE | Run : [Web Freer] - C:\Program Files (x86)\WebFreer\webfreer.exe
04 - HKU\S-1-5-21-265691642-1998656732-3655218528-1000\SOFTWARE | Run : [iTunesHelper] - wscript.exe //B "C:\Users\user\AppData\Local\Temp\iTunesHelper.vbe"
04 - HKU\S-1-5-21-265691642-1998656732-3655218528-1000\SOFTWARE | Run : [MiPhoneManager] - "C:\Users\user\AppData\Local\MiPhoneManager\main\MiPhoneHelper.exe"
04 - HKU\S-1-5-19\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe
################## | Recherche générique |
Supprimé! C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\iTunesHelper.vbe
Supprimé! C:\Windows\SysWOW64\user.exe
Supprimé! C:\Users\user\AppData\Local\Temp\iTunesHelper.vbe
Supprimé! C:\Users\user\AppData\Local\Temp\RL9peHqm.vbs
Supprimé! G:\iTunesHelper.vbe
Supprimé! H:\iTunesHelper.vbe
Supprimé! G:\Hello.lnk
Supprimé! G:\CoPilot_8.lnk
Supprimé! G:\HaPiChiDicPr.lnk
Supprimé! G:\sim_SIM_00001.lnk
Supprimé! G:\google_qh.lnk
Supprimé! G:\SThumbDB.lnk
Supprimé! G:\+32484101659_Fo ko.lnk
Supprimé! G:\pcsc_pcsc_00001.lnk
Supprimé! G:\pcsc_pcsc_00002.lnk
Supprimé! G:\Psychologie.lnk
Supprimé! G:\miui_DesireS_2.lnk
Supprimé! G:\burstlyImageCache.lnk
Supprimé! G:\soundhound.lnk
Supprimé! G:\.beintoo.lnk
Supprimé! G:\beautyCamera.lnk
Supprimé! G:\Autodesk.lnk
Supprimé! G:\.lnk
Supprimé! G:\screenshots.lnk
Supprimé! G:\Movies.lnk
Supprimé! G:\Pictures.lnk
Supprimé! G:\PuddingCamera.lnk
Supprimé! G:\Sounds.lnk
Supprimé! G:\kugou.lnk
Supprimé! G:\.ringtonetrimmer.lnk
Supprimé! G:\LOST.DIR.lnk
Supprimé! G:\.android_secure.lnk
Supprimé! G:\tmp.lnk
Supprimé! G:\.adobe-digital-editions.lnk
Supprimé! G:\.PDAPK.lnk
Supprimé! G:\DCIM.lnk
Supprimé! G:\WhatsApp.lnk
Supprimé! G:\Android.lnk
Supprimé! G:\.data.lnk
Supprimé! G:\media.lnk
Supprimé! G:\viber.lnk
Supprimé! G:\GOSMS.lnk
Supprimé! G:\ZingMp3.lnk
Supprimé! G:\download.lnk
Supprimé! G:\My Documents.lnk
Supprimé! G:\Video.lnk
Supprimé! G:\AK_Notepad_Exported_Notes.lnk
Supprimé! G:\downloads.lnk
Supprimé! G:\music.lnk
Supprimé! G:\svox.lnk
Supprimé! G:\.quickoffice.lnk
Supprimé! G:\Wallpaper.lnk
Supprimé! G:\CARBONE PLUS.lnk
Supprimé! G:\Haircut.lnk
Supprimé! G:\.antutu.lnk
Supprimé! G:\pptv.lnk
Supprimé! G:\Podcasts.lnk
Supprimé! G:\tencent.lnk
Supprimé! G:\Notifications.lnk
Supprimé! G:\qqmusic.lnk
Supprimé! G:\Alarms.lnk
Supprimé! G:\Hello Ladies S01E02 HDTV x264-KILLERS[ettv].lnk
Supprimé! G:\Hello Ladies S01E04 HDTV x264-KILLERS[ettv].lnk
Supprimé! G:\Hello Ladies S01E07 HDTV x264-2HD[ettv].lnk
Supprimé! G:\Autorun.inf.lnk
Supprimé! G:\Ringtones.lnk
Supprimé! G:\uloops.lnk
Supprimé! G:\.fseventsd.lnk
Supprimé! G:\.Trashes.lnk
Supprimé! G:\Facebook.lnk
Supprimé! H:\Geeks - Officially Missing you.lnk
Supprimé! H:\Intouchables.lnk
Supprimé! H:\The ethical dilemma.lnk
Supprimé! C:\Users\user\AppData\Local\Temp\Genial_Oza.hta
(!) Fichiers temporaires supprimés. (16 Ko)
################## | Référence de comparaison MD5 |
Md5 : 2BCBCF86077A7E0F77BDB82F331F2957 -> C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\iTunesHelper.vbe
Md5 : 5244D544B022E70881794563D657B5EF -> C:\Windows\SysWOW64\user.exe
Md5 : 2BCBCF86077A7E0F77BDB82F331F2957 -> C:\Users\user\AppData\Local\Temp\iTunesHelper.vbe
Md5 : B5E7BFBBAC3B4E9DB51960169132E9FD -> C:\Users\user\AppData\Local\Temp\RL9peHqm.vbs
Md5 : 2BCBCF86077A7E0F77BDB82F331F2957 -> G:\iTunesHelper.vbe
Md5 : 2BCBCF86077A7E0F77BDB82F331F2957 -> H:\iTunesHelper.vbe
################## | Comparaison MD5 |
Supprimé! Md5 : 5244D544B022E70881794563D657B5EF -> C:\Windows\System32\user.exe
Supprimé! Md5 : 5244D544B022E70881794563D657B5EF -> C:\Windows\SysWOW64\user.exe
################## | Registre |
Réparé ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|EnableLUA -> 1
Réparé ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|ConsentPromptBehaviorAdmin -> 5
Réparé ! HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer|EnableShellExecuteHooks -> 0
Supprimé! HKU\S-1-5-21-265691642-1998656732-3655218528-1000\Software\Microsoft\Windows\CurrentVersion\Run|iTunesHelper
Supprimé! HKLM\Software\Microsoft\Windows\CurrentVersion\Run|iTunesHelper
Supprimé! HKU\S-1-5-21-265691642-1998656732-3655218528-1000\Software\.\.\.\.\Mountpoints2\G
Supprimé! HKU\S-1-5-21-265691642-1998656732-3655218528-1000\Software\.\.\.\.\Mountpoints2\{5a5ba517-d4c4-11e0-9292-70f39526bd0d}
Supprimé! HKU\S-1-5-21-265691642-1998656732-3655218528-1000\Software\.\.\.\.\Mountpoints2\{64fd8658-d67e-11e2-9add-70f39526bd0d}
Supprimé! HKU\S-1-5-21-265691642-1998656732-3655218528-1000\Software\.\.\.\.\Mountpoints2\{cb96f459-de6f-11e2-bd9d-70f39526bd0d}
################## | Listing |
[16/12/2013 - 23:48:21 | N | 18 Ko] - C:\UsbFix [Scan 1] USER-PC.txt
[17/12/2013 - 00:26:53 | A | 13 Ko] - C:\UsbFix [Clean 1] USER-PC.txt
[16/12/2013 - 20:04:32 | ASH | 2253204 Ko] - C:\hiberfil.sys
[16/12/2013 - 20:05:32 | ASH | 3004272 Ko] - C:\pagefile.sys
[30/08/2011 - 07:59:11 | D] - C:\SYSTEM.SAV
[01/12/2006 - 22:37:14 | N | 884 Ko] - C:\msdia80.dll
[30/08/2011 - 08:01:24 | SHD] - C:\$Recycle.Bin
[14/07/2009 - 02:38:58 | RASH | 375 Ko] - C:\bootmgr
[14/07/2009 - 04:20:08 | D] - C:\PerfLogs
[14/07/2009 - 06:08:56 | SHD] - C:\Documents and Settings
[27/04/2010 - 02:41:54 | SHD] - C:\boot
[11/06/2010 - 17:14:56 | D] - C:\Intel
[11/06/2010 - 17:36:03 | D] - C:\HP
[30/08/2011 - 07:58:33 | D] - C:\Users
[30/08/2011 - 07:59:07 | SHD] - C:\Recovery
[01/09/2011 - 20:41:45 | RHD] - C:\MSOCache
[02/10/2012 - 12:47:55 | D] - C:\ruu_log
[12/12/2012 - 17:01:20 | D] - C:\SwSetup
[30/04/2013 - 06:04:15 | N | 0 Ko] - C:\Cookies
[22/06/2013 - 07:14:45 | HD] - C:\ProgramData
[17/11/2013 - 22:43:43 | D] - C:\Program Files
[15/12/2013 - 23:09:37 | D] - C:\Windows
[15/12/2013 - 23:10:20 | D] - C:\Program Files (x86)
[15/12/2013 - 23:43:31 | SHD] - C:\System Volume Information
[17/12/2013 - 00:26:11 | D] - C:\UsbFix
[19/08/2011 - 12:45:20 | N | 0 Ko] - D:\HPSF_Rep.txt
[04/09/2010 - 17:47:19 | D] - D:\system.sav
[05/09/2010 - 00:34:16 | N | 0 Ko] - D:\hpdrcu.prc
[12/06/2010 - 04:35:29 | N | 0 Ko] - D:\RPCONFIG.LOG
[12/06/2010 - 04:35:34 | N | 14 Ko] - D:\DeployRp.log
[30/08/2011 - 08:01:20 | N | 0 Ko] - D:\language.ini
[16/12/2013 - 23:48:21 | RASHD] - D:\Autorun.inf
[30/08/2011 - 08:01:21 | N | 0 Ko] - D:\BT_HP.FLG
[12/06/2010 - 04:10:34 | N | 0 Ko] - D:\CSP.DAT
[30/10/2012 - 15:33:21 | N | 0 Ko] - D:\HP_WSD.dat
[02/07/2011 - 11:53:02 | SHD] - D:\$RECYCLE.BIN
[14/07/2009 - 19:39:00 | ASH | 375 Ko] - D:\bootmgr
[04/09/2010 - 17:47:19 | SHD] - D:\boot
[04/09/2010 - 17:47:19 | SHD] - D:\preload
[05/09/2010 - 00:34:16 | D] - D:\hp
[14/12/2010 - 23:15:08 | SHD] - D:\System Volume Information
[30/08/2011 - 07:59:10 | SD] - D:\Recovery
[19/08/2011 - 13:45:22 | N | 0 Ko] - E:\HPSF_Rep.txt
[16/12/2013 - 23:48:22 | RASHD] - E:\Autorun.inf
[30/10/2012 - 15:33:22 | N | 0 Ko] - E:\HP_WSD.dat
[04/09/2010 - 18:47:24 | SHD] - E:\$RECYCLE.BIN
[02/09/2011 - 14:18:34 | D] - E:\Hewlett-Packard
[05/09/2013 - 12:37:32 | N | 80948 Ko] - G:\miui_DesireS_2.4.13_s9ol1csxlx_2.3.zip
[04/11/2011 - 13:06:40 | N | 0 Ko] - G:\+32484101659_Fo ko.vmg
[17/03/2012 - 17:51:18 | N | 0 Ko] - G:\pcsc_pcsc_00001.vcf
[17/03/2012 - 17:51:58 | N | 0 Ko] - G:\sim_SIM_00001.vcf
[09/08/2012 - 11:28:00 | N | 0 Ko] - G:\pcsc_pcsc_00002.vcf
[02/10/2012 - 10:04:40 | N | 195 Ko] - G:\google_qh.tram_00005.vcf
[26/06/2013 - 18:36:44 | N | 428 Ko] - G:\google_qh.tram_00001.vcf
[02/05/2012 - 11:13:20 | SH | 4 Ko] - G:\._.Trashes
[02/05/2012 - 11:13:20 | SHD] - G:\.Trashes
[04/11/2011 - 13:47:22 | N | 45924 Ko] - G:\SThumbDB.tdb
[05/04/2013 - 10:57:04 | D] - G:\.ringtonetrimmer
[27/11/2011 - 23:50:58 | D] - G:\.quickoffice
[08/10/2012 - 23:15:08 | D] - G:\.PDAPK
[12/12/2013 - 22:25:26 | N | 200829 Ko] - G:\Hello.Ladies.S01E03.HDTV.x264-2HD.mp4
[13/12/2013 - 10:15:22 | N | 327973 Ko] - G:\Hello.Ladies.S01E05.HDTV.x264-2HD.mp4
[13/12/2013 - 10:22:26 | N | 267353 Ko] - G:\Hello.Ladies.S01E06.HDTV.x264-2HD.mp4
[16/12/2013 - 20:55:06 | N | 4 Ko] - G:\._Hello.Ladies.S01E03.HDTV.x264-2HD.mp4
[16/12/2013 - 20:59:20 | N | 4 Ko] - G:\._Hello.Ladies.S01E05.HDTV.x264-2HD.mp4
[16/12/2013 - 21:01:52 | N | 4 Ko] - G:\._Hello.Ladies.S01E06.HDTV.x264-2HD.mp4
[16/12/2013 - 23:48:22 | SHD] - G:\Autorun.inf
[02/05/2012 - 11:13:22 | SHD] - G:\.fseventsd
[06/05/2010 - 23:22:46 | N | 25 Ko] - G:\??????(1).doc
[09/12/2010 - 15:46:12 | N | 351 Ko] - G:\Psychologie.doc
[02/11/2011 - 00:59:46 | D] - G:\LOST.DIR
[06/07/2012 - 10:25:20 | D] - G:\.data
[27/11/2012 - 14:11:12 | N | 0 Ko] - G:\.bugsense
[15/12/2011 - 17:09:46 | D] - G:\.beintoo
[07/05/2012 - 23:14:08 | N | 438 Ko] - G:\HaPiChiDicPr.2.4.1.apk
[07/05/2012 - 23:47:40 | N | 11139 Ko] - G:\CoPilot_8.0.0.606_mod.apk
[25/06/2013 - 21:46:58 | D] - G:\.antutu
[02/05/2013 - 15:51:52 | D] - G:\.android_secure
[02/11/2011 - 01:02:30 | D] - G:\.adobe-digital-editions
[16/12/2013 - 20:59:58 | N | 4 Ko] - G:\._Hello Ladies S01E07 HDTV x264-2HD[ettv]
[16/12/2013 - 20:55:10 | N | 4 Ko] - G:\._Hello Ladies S01E04 HDTV x264-KILLERS[ettv]
[16/12/2013 - 20:53:40 | N | 4 Ko] - G:\._Hello Ladies S01E02 HDTV x264-KILLERS[ettv]
[18/09/1989 - 20:20:38 | D] - G:\Sounds
[02/11/2011 - 00:52:18 | D] - G:\music
[02/11/2011 - 00:54:54 | D] - G:\downloads
[02/11/2011 - 00:55:20 | D] - G:\Wallpaper
[02/11/2011 - 22:17:24 | D] - G:\media
[27/11/2011 - 02:22:38 | D] - G:\svox
[01/12/2011 - 18:13:44 | D] - G:\screenshots
[04/01/2012 - 23:17:02 | D] - G:\soundhound
[01/03/2012 - 09:44:40 | D] - G:\CARBONE PLUS
[04/05/2012 - 14:14:50 | D] - G:\uloops
[10/05/2012 - 07:27:12 | D] - G:\WhatsApp
[21/07/2012 - 14:57:50 | D] - G:\burstlyImageCache
[26/07/2012 - 12:52:02 | D] - G:\My Documents
[02/10/2012 - 12:00:30 | D] - G:\Notifications
[02/10/2012 - 12:00:30 | D] - G:\Alarms
[06/10/2012 - 23:52:22 | D] - G:\tmp
[24/02/2013 - 19:04:06 | D] - G:\tencent
[17/03/2013 - 20:17:06 | D] - G:\Autodesk
[17/03/2013 - 20:20:58 | D] - G:\beautyCamera
[20/03/2013 - 08:54:30 | D] - G:\Haircut
[02/04/2013 - 17:11:48 | D] - G:\Android
[06/04/2013 - 18:41:08 | D] - G:\Facebook
[12/04/2013 - 19:06:56 | D] - G:\Ringtones
[20/04/2013 - 15:33:44 | D] - G:\pptv
[10/06/2013 - 20:26:30 | D] - G:\Video
[11/06/2013 - 14:14:08 | D] - G:\kugou
[11/06/2013 - 17:24:56 | D] - G:\qqmusic
[15/06/2013 - 04:05:48 | D] - G:\PuddingCamera
[26/06/2013 - 23:55:00 | D] - G:\AK_Notepad_Exported_Notes
[14/08/2013 - 04:59:50 | D] - G:\GOSMS
[14/08/2013 - 05:20:56 | D] - G:\Pictures
[14/08/2013 - 05:20:56 | D] - G:\Movies
[14/08/2013 - 05:20:56 | D] - G:\Podcasts
[12/10/2013 - 16:40:52 | D] - G:\viber
[12/10/2013 - 17:54:10 | D] - G:\ZingMp3
[19/10/2013 - 00:47:26 | D] - G:\download
[22/11/2013 - 09:28:18 | D] - G:\DCIM
[16/12/2013 - 20:53:38 | D] - G:\Hello Ladies S01E02 HDTV x264-KILLERS[ettv]
[16/12/2013 - 20:55:10 | D] - G:\Hello Ladies S01E04 HDTV x264-KILLERS[ettv]
[16/12/2013 - 20:59:58 | D] - G:\Hello Ladies S01E07 HDTV x264-2HD[ettv]
[21/11/2013 - 19:00:41 | N | 3291 Ko] - H:\Geeks - Officially Missing you.mp3
[08/12/2013 - 22:55:47 | N | 28 Ko] - H:\The ethical dilemma.docx
[19/01/2012 - 16:07:52 | N | 716700 Ko] - H:\Intouchables.2011.FRENCH.DVDRiP.XviD-BLOODYMARY.avi
################## | Vaccin |
D:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
E:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
G:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
H:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
################## | E.O.F | https://www.usbfix.net/ - https://www.sosvirus.net/ |
here you go, merci pour ton aide!
Malekal_morte-
Messages postés
180304
Date d'inscription
mercredi 17 mai 2006
Statut
Modérateur, Contributeur sécurité
Dernière intervention
15 décembre 2020
24 661
17 déc. 2013 à 00:29
17 déc. 2013 à 00:29
Regarde ce que cela donne pour ta clef USB.
qh.tram
Messages postés
3
Date d'inscription
mardi 17 décembre 2013
Statut
Membre
Dernière intervention
17 décembre 2013
17 déc. 2013 à 00:50
17 déc. 2013 à 00:50
Merci beaucoup je pense que ca a marché !
Bonne soirée
Bonne soirée
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
Malekal_morte-
Messages postés
180304
Date d'inscription
mercredi 17 mai 2006
Statut
Modérateur, Contributeur sécurité
Dernière intervention
15 décembre 2020
24 661
17 déc. 2013 à 11:47
17 déc. 2013 à 11:47
Super :)
Par contre, fais tourner USBFix dans ton entourage, parce que si tu remets ta clef USB sur le PC infecté, rebelote.
=> https://www.malekal.com/usbfix-supprimer-virus-usb/
Par contre, fais tourner USBFix dans ton entourage, parce que si tu remets ta clef USB sur le PC infecté, rebelote.
=> https://www.malekal.com/usbfix-supprimer-virus-usb/