Rapport UsbFix.txt: dois-je passer à l'option suppression?
Résolu/Fermé
Travis Bickle
Messages postés
2
Date d'inscription
jeudi 9 janvier 2014
Statut
Membre
Dernière intervention
9 janvier 2014
-
9 janv. 2014 à 13:08
diomak Messages postés 1 Date d'inscription jeudi 30 janvier 2014 Statut Membre Dernière intervention 30 janvier 2014 - 30 janv. 2014 à 07:30
diomak Messages postés 1 Date d'inscription jeudi 30 janvier 2014 Statut Membre Dernière intervention 30 janvier 2014 - 30 janv. 2014 à 07:30
A voir également:
- Rapport UsbFix.txt: dois-je passer à l'option suppression?
- Plan rapport de stage - Guide
- On vous a donné accès à un fichier rapport. il est partagé avec plusieurs personnes sur cet espace pix cloud. répondez aux questions - Forum Cloud
- Le fichier demandé a été supprimé suite à un rapport d'abus. ✓ - Forum Téléchargement
- Rapport erreur windows - Guide
- Impossible d'afficher le rapport de tableau croisé dynamique sur un rapport existant - Forum Excel
4 réponses
Malekal_morte-
Messages postés
180304
Date d'inscription
mercredi 17 mai 2006
Statut
Modérateur, Contributeur sécurité
Dernière intervention
15 décembre 2020
24 668
Modifié par Malekal_morte- le 9/01/2014 à 13:09
Modifié par Malekal_morte- le 9/01/2014 à 13:09
Salut,
Tu peux oui.
Faudrait que les clefs USB soient branchées.
Like the angel you are, you laugh creating a lightness in my chest,
Your eyes they penetrate me,
(Your answer's always 'maybe')
That's when I got up and left
Tu peux oui.
Faudrait que les clefs USB soient branchées.
Like the angel you are, you laugh creating a lightness in my chest,
Your eyes they penetrate me,
(Your answer's always 'maybe')
That's when I got up and left
Travis Bickle
Messages postés
2
Date d'inscription
jeudi 9 janvier 2014
Statut
Membre
Dernière intervention
9 janvier 2014
9 janv. 2014 à 21:49
9 janv. 2014 à 21:49
C'est fait. Heureusement que j'avais installé AVG auparavant, sinon le virus revenait... En tout cas, merci beaucoup pour ta réactivité, Malekal!
Malekal_morte-
Messages postés
180304
Date d'inscription
mercredi 17 mai 2006
Statut
Modérateur, Contributeur sécurité
Dernière intervention
15 décembre 2020
24 668
10 janv. 2014 à 09:20
10 janv. 2014 à 09:20
:)
diomak
Messages postés
1
Date d'inscription
jeudi 30 janvier 2014
Statut
Membre
Dernière intervention
30 janvier 2014
30 janv. 2014 à 07:30
30 janv. 2014 à 07:30
bonjour cher amis
je me suis tromper du rapport de usbfix , ce n'est celui publier en haut je suis vraiment desolé, donc c'est bien le suivant:
############################## | UsbFix V 7.162 | [Research]
User: Administrateur (Administrator) # RIAD
Updated 27/01/2014 by El Desaparecido - Team SosVirus
Started at 06:26:06 | 30/01/2014
Website : http://www.en.usbfix.net
Changelog : https://www.usb-antivirus.com/fr/maj/
Support : https://www.sosvirus.net/
Upload Malware : http://www.sosvirus.net/upload_malware.php
Contact : http://www.en.usbfix.net/contact/
PC: SAMSUNG ELECTRONICS CO., LTD. (R510/P510 )
CPU: Intel(R) Pentium(R) Dual CPU T3200 @ 2.00GHz
RAM -> [Total : 2009 Mo| Free : 1271 Mo]
Bios: Phoenix Technologies Ltd.
Boot: Normal boot
OS: Microsoft Windows XP Professionnel (5.1.2600 32-Bit) Service Pack 3
WB: Windows Internet Explorer : 8.0.6001.18702
WB: Google Chrome : 32.0.1700.76
WB: Mozilla Firefox : 26.0
SC: Security Center [(!) Disabled]
WU: Windows Update [Enabled]
FW: Windows FireWall [Enabled]
AS: Malwarebytes' Anti-Malware : 1.75.0001
C:\ (%systemdrive%) -> Fixed drive # 81 Gb (41 Mb free - 51%) [] # NTFS
D:\ -> Fixed drive # 71 Gb (63 Mb free - 89%) [Nouveau nom] # NTFS
E:\ -> Fixed drive # 71 Gb (58 Mb free - 81%) [] # NTFS
F:\ -> CD-ROM
G:\ -> CD-ROM
J:\ -> Fixed drive # 466 Gb (287 Mb free - 62%) [TRANSCEND] # FAT32
################## | Active Processes |
C:\WINDOWS\System32\smss.exe (ID: 872 |ParentID: 4)
C:\WINDOWS\system32\csrss.exe (ID: 936 |ParentID: 872)
C:\WINDOWS\system32\winlogon.exe (ID: 960 |ParentID: 872)
C:\WINDOWS\system32\services.exe (ID: 1004 |ParentID: 960)
C:\WINDOWS\system32\lsass.exe (ID: 1016 |ParentID: 960)
C:\WINDOWS\system32\svchost.exe (ID: 1196 |ParentID: 1004)
C:\WINDOWS\system32\svchost.exe (ID: 1264 |ParentID: 1004)
C:\WINDOWS\System32\svchost.exe (ID: 1304 |ParentID: 1004)
C:\WINDOWS\system32\svchost.exe (ID: 1344 |ParentID: 1004)
C:\WINDOWS\system32\svchost.exe (ID: 1420 |ParentID: 1004)
C:\WINDOWS\system32\svchost.exe (ID: 1468 |ParentID: 1004)
C:\WINDOWS\system32\spoolsv.exe (ID: 1708 |ParentID: 1004)
C:\WINDOWS\Explorer.EXE (ID: 1972 |ParentID: 1928)
C:\WINDOWS\system32\agrsmsvc.exe (ID: 452 |ParentID: 1004)
C:\WINDOWS\system32\ftspssrv.exe (ID: 472 |ParentID: 1004)
C:\Program Files\ma-config.com\MaConfigAgent.exe (ID: 532 |ParentID: 1004)
C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe (ID: 660 |ParentID: 1004)
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (ID: 700 |ParentID: 1004)
C:\WINDOWS\System32\svchost.exe (ID: 1172 |ParentID: 1004)
C:\Program Files\PDF Suite 2011\ConversionService.exe (ID: 1216 |ParentID: 1004)
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (ID: 1224 |ParentID: 700)
C:\WINDOWS\System32\svchost.exe (ID: 1388 |ParentID: 1004)
C:\Program Files\Photodex\ProShow Producer\ScsiAccess.exe (ID: 1404 |ParentID: 1004)
C:\WINDOWS\system32\svchost.exe (ID: 1436 |ParentID: 1004)
C:\Program Files\CodeMeter\Runtime\bin\CodeMeter.exe (ID: 1616 |ParentID: 1004)
C:\WINDOWS\system32\hkcmd.exe (ID: 2348 |ParentID: 1972)
C:\PROGRA~1\HSPAUS~1\HSPALA~1.EXE (ID: 2384 |ParentID: 1972)
C:\Program Files\Samsung\Samsung EDS\EDSAgent.exe (ID: 2476 |ParentID: 1972)
C:\WINDOWS\system32\igfxsrvc.exe (ID: 3756 |ParentID: 1196)
C:\WINDOWS\RTHDCPL.EXE (ID: 2244 |ParentID: 1972)
C:\Program Files\iTunes\iTunesHelper.exe (ID: 2840 |ParentID: 1972)
C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe (ID: 3076 |ParentID: 2264)
C:\Program Files\Fichiers communs\sagem SA\DgIpSvr.exe (ID: 3316 |ParentID: 1972)
C:\WINDOWS\System32\svchost.exe (ID: 3684 |ParentID: 1004)
C:\WINDOWS\system32\ctfmon.exe (ID: 3692 |ParentID: 1972)
C:\WINDOWS\system32\igfxext.exe (ID: 1740 |ParentID: 1196)
C:\Program Files\Internet Download Manager\IDMan.exe (ID: 228 |ParentID: 1972)
C:\Program Files\uTorrent\uTorrent.exe (ID: 2720 |ParentID: 1972)
C:\WINDOWS\system32\svchost.exe (ID: 3968 |ParentID: 3640)
C:\Program Files\WinZip\WZQKPICK32.EXE (ID: 4080 |ParentID: 1972)
C:\WINDOWS\system32\mspaint.exe (ID: 2204 |ParentID: 3968)
C:\Program Files\Internet Download Manager\IEMonitor.exe (ID: 3536 |ParentID: 228)
C:\Program Files\iPod\bin\iPodService.exe (ID: 1768 |ParentID: 1004)
C:\WINDOWS\system32\NOTEPAD.EXE (ID: 388 |ParentID: 1972)
C:\Program Files\Mozilla Firefox\firefox.exe (ID: 2628 |ParentID: 124)
C:\WINDOWS\system32\wbem\wmiprvse.exe (ID: 2756 |ParentID: 1196)
C:\WINDOWS\system32\NOTEPAD.EXE (ID: 2828 |ParentID: 2804)
################## | Regedit Run |
04 - HKCU\..\Run : [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
04 - HKCU\..\Run : [VisualTaskTip] \Program Files\VisualTaskTips\VisualTaskTips.exe
04 - HKCU\..\Run : [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
04 - HKCU\..\Run : [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" /MINIMIZED
04 - HKLM\..\Run : [VistaDrive] C:\WINDOWS\VistaDrive\VistaDrive.exe
04 - HKLM\..\Run : [DMHotKey] C:\Program Files\Samsung\Easy Display Manager\DMLoader.exe
04 - HKLM\..\Run : [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
04 - HKLM\..\Run : [HSPALauncher] C:\PROGRA~1\HSPAUS~1\HSPALA~1.EXE
04 - HKLM\..\Run : []
04 - HKLM\..\Run : [EDS] C:\Program Files\Samsung\Samsung EDS\EDSAgent.exe
04 - HKLM\..\Run : [RTHDCPL] RTHDCPL.EXE
04 - HKLM\..\Run : [APSDaemon] "C:\Program Files\Fichiers communs\Apple\Apple Application Support\APSDaemon.exe"
04 - HKLM\..\Run : [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
04 - HKLM\..\Run : [ServeurIPAsde] C:\Program Files\Fichiers communs\sagem SA\DgIpSvr.exe
04 - HKLM\..\RunOnce : []
04 - HKLM\Software\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\..\Run : []
04 - HKLM\Software\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\..\RunOnce : []
04 - HKU\S-1-5-19\..\Run : [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE
04 - HKU\S-1-5-19\..\Run : [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
04 - HKU\S-1-5-19\..\Run : [VisualTaskTip] \Program Files\VisualTaskTips\VisualTaskTips.exe
04 - HKU\S-1-5-20\..\Run : [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE
04 - HKU\S-1-5-20\..\Run : [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
04 - HKU\S-1-5-20\..\Run : [VisualTaskTip] \Program Files\VisualTaskTips\VisualTaskTips.exe
04 - HKU\S-1-5-21-602162358-1801674531-1417001333-500\..\Run : [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
04 - HKU\S-1-5-21-602162358-1801674531-1417001333-500\..\Run : [VisualTaskTip] \Program Files\VisualTaskTips\VisualTaskTips.exe
04 - HKU\S-1-5-21-602162358-1801674531-1417001333-500\..\Run : [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
04 - HKU\S-1-5-21-602162358-1801674531-1417001333-500\..\Run : [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" /MINIMIZED
04 - HKU\S-1-5-18\..\Run : [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE
04 - HKU\S-1-5-18\..\Run : [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
04 - HKU\S-1-5-18\..\Run : [VisualTaskTip] \Program Files\VisualTaskTips\VisualTaskTips.exe
04 - HKU\S-1-5-18\..\Run : [SearchProtect] C:\WINDOWS\system32\config\systemprofile\Application Data\SearchProtect\bin\cltmng.exe
04 - HKU\S-1-5-19\..\RunOnce : [nltide_2] regsvr32 /s /n /i:U shell32
04 - HKU\S-1-5-19\..\RunOnce : [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
04 - HKU\S-1-5-19\..\RunOnce : [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
04 - HKU\S-1-5-20\..\RunOnce : [nltide_2] regsvr32 /s /n /i:U shell32
04 - HKU\S-1-5-20\..\RunOnce : [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
04 - HKU\S-1-5-20\..\RunOnce : [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
04 - HKU\S-1-5-18\..\RunOnce : [nltide_2] regsvr32 /s /n /i:U shell32
04 - HKU\S-1-5-18\..\RunOnce : [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
04 - HKU\S-1-5-18\..\RunOnce : [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
################## | Generic Research |
Found ! C:\Documents and Settings\Administrateur\Application Data\temp.bin
Found ! J:\Radia Manel 2007.lnk
Found ! J:\AMR DIAB.lnk
Found ! J:\DAHMAN6.lnk
Found ! J:\Lotfi Double Kanon Remix 2010.lnk
Found ! J:\apps.lnk
Found ! J:\ADATA.lnk
Found ! J:\Magix maker 2007.lnk
Found ! J:\System Volume Information.lnk
Found ! J:\IDRIS.lnk
Found ! J:\user riad.lnk
Found ! J:\RIAD FOLDER.lnk
Found ! J:\Abranis.lnk
Found ! J:\Kitchen Draw v5.0_by_Asif.lnk
Found ! J:\Nouveau dossier (2).lnk
Found ! J:\Parrtion E.lnk
Found ! J:\0- Bled.lnk
Found ! J:\Application apple.lnk
Found ! J:\Galaxy SII tools.lnk
Found ! J:\Sauvegarde galaxy S2.lnk
Found ! J:\rotaplan.lnk
Found ! J:\ROTA PLAN.lnk
Found ! J:\Flash C7.lnk
Found ! J:\Activation PDF X pro 10.0.0.lnk
Found ! J:\win xp sp3.lnk
Found ! J:\photos et video Aid.lnk
Found ! J:\riad.lnk
Found ! J:\f16.lnk
Found ! J:\Winrar 4.01.lnk
Found ! J:\shemas pieces 406 hdi.lnk
Found ! J:\FirefoxPortable.lnk
Found ! J:\service box peugeot.lnk
Found ! J:\VIDEO_TS.lnk
Found ! J:\$RECYCLE.BIN.lnk
Found ! J:\DIAGBOX V 7.XX.lnk
Found ! J:\RENAULT CAN Clip.lnk
Found ! J:\Tolerance Data 2009.2.lnk
Found ! J:\Autodata 2011.lnk
Found ! J:\ITC Folder.lnk
Found ! J:\New Folder.lnk
Found ! J:\TEG Competition.lnk
Found ! J:\Adobe Acrobat XI Pro v11.lnk
Found ! J:\DRIVER RyAD.lnk
Found ! J:\sid ali.lnk
Found ! J:\Win zip 17.5.lnk
Found ! J:\Teracopier+serial.lnk
Found ! J:\Google Earth.lnk
Found ! J:\µTorrent.lnk
Found ! J:\Utility.lnk
Found ! J:\Recycled.lnk
Found ! J:\Transcend Files.lnk
Found ! J:\ilyes v2.lnk
Found ! J:\ZAHIR ABDJAOUI.lnk
Found ! J:\zimou.lnk
Found ! J:\Kabyle top.lnk
Found ! J:\hakim tidaf.lnk
Found ! J:\HACENE AHRES.lnk
Found ! J:\hafid djemai.lnk
Found ! J:\BOUHI.lnk
Found ! J:\Bazziz.lnk
Found ! J:\Akli Yahyathen.lnk
Found ! J:\Ali Amran - Akka Id Amur.lnk
Found ! J:\Ali Amran -Amsevrid-.lnk
Found ! J:\Hamidouche.lnk
Found ! J:\Brayan Adams.lnk
Found ! J:\Dance English.lnk
Found ! J:\Jimi Hendrix - South Saturn Delta (1997).lnk
Found ! J:\(2005) Dire Straits Mark Knopfler Private Investigations The Best Of.lnk
Found ! J:\CD1- The Very Best Of.lnk
Found ! J:\CD2- The Very Best Of.lnk
Found ! J:\Mark Knopfler .-2000 Sailing to Philadelphia.lnk
Found ! J:\Mark Knopfler.-1993 Screenplaying.lnk
Found ! J:\MODERN TOLKING.lnk
Found ! J:\Moderne Talking.lnk
Found ! J:\C-Naima D'ZIRIA.lnk
Found ! J:\ESMA DJERMOUN 2008.lnk
Found ! J:\Hassiba Abd El Raouf 2008.lnk
Found ! J:\.Trashes\48aa4276.scr
Found ! J:\.Trashes\Desktop.ini
Found ! D:\RECYCLER\S-1-5-21-1202660629-838170752-1801674531-1003
Found ! E:\RECYCLER\S-1-5-21-1202660629-838170752-1801674531-1003
################## | Registry |
Found ! HKLM\SYSTEM\CurrentControlSet\Services\amsint32
Found ! HKLM\SYSTEM\ControlSet001\Services\amsint32
Found ! HKLM\SYSTEM\ControlSet002\Services\amsint32
Found ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|EnableLUA -> 0
Found ! HKLM\Software\Microsoft\Security Center|AntiVirusDisableNotify -> 1
Found ! HKLM\Software\Microsoft\Security Center|FirewallDisableNotify -> 1
Found ! HKLM\Software\Microsoft\Security Center|UpdatesDisableNotify -> 1
Found ! HKLM\Software\Microsoft\Security Center|UacDisableNotify -> 1
Found ! HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowRecentDocs -> 0
Found ! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableRegistryTools -> 1
Found ! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableTaskMgr -> 1
################## | Vaccin |
D:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
E:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
J:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
################## | E.O.F | https://www.usbfix.net/ - https://www.sosvirus.net/ |
merci infiniment pour votre aide
je me suis tromper du rapport de usbfix , ce n'est celui publier en haut je suis vraiment desolé, donc c'est bien le suivant:
############################## | UsbFix V 7.162 | [Research]
User: Administrateur (Administrator) # RIAD
Updated 27/01/2014 by El Desaparecido - Team SosVirus
Started at 06:26:06 | 30/01/2014
Website : http://www.en.usbfix.net
Changelog : https://www.usb-antivirus.com/fr/maj/
Support : https://www.sosvirus.net/
Upload Malware : http://www.sosvirus.net/upload_malware.php
Contact : http://www.en.usbfix.net/contact/
PC: SAMSUNG ELECTRONICS CO., LTD. (R510/P510 )
CPU: Intel(R) Pentium(R) Dual CPU T3200 @ 2.00GHz
RAM -> [Total : 2009 Mo| Free : 1271 Mo]
Bios: Phoenix Technologies Ltd.
Boot: Normal boot
OS: Microsoft Windows XP Professionnel (5.1.2600 32-Bit) Service Pack 3
WB: Windows Internet Explorer : 8.0.6001.18702
WB: Google Chrome : 32.0.1700.76
WB: Mozilla Firefox : 26.0
SC: Security Center [(!) Disabled]
WU: Windows Update [Enabled]
FW: Windows FireWall [Enabled]
AS: Malwarebytes' Anti-Malware : 1.75.0001
C:\ (%systemdrive%) -> Fixed drive # 81 Gb (41 Mb free - 51%) [] # NTFS
D:\ -> Fixed drive # 71 Gb (63 Mb free - 89%) [Nouveau nom] # NTFS
E:\ -> Fixed drive # 71 Gb (58 Mb free - 81%) [] # NTFS
F:\ -> CD-ROM
G:\ -> CD-ROM
J:\ -> Fixed drive # 466 Gb (287 Mb free - 62%) [TRANSCEND] # FAT32
################## | Active Processes |
C:\WINDOWS\System32\smss.exe (ID: 872 |ParentID: 4)
C:\WINDOWS\system32\csrss.exe (ID: 936 |ParentID: 872)
C:\WINDOWS\system32\winlogon.exe (ID: 960 |ParentID: 872)
C:\WINDOWS\system32\services.exe (ID: 1004 |ParentID: 960)
C:\WINDOWS\system32\lsass.exe (ID: 1016 |ParentID: 960)
C:\WINDOWS\system32\svchost.exe (ID: 1196 |ParentID: 1004)
C:\WINDOWS\system32\svchost.exe (ID: 1264 |ParentID: 1004)
C:\WINDOWS\System32\svchost.exe (ID: 1304 |ParentID: 1004)
C:\WINDOWS\system32\svchost.exe (ID: 1344 |ParentID: 1004)
C:\WINDOWS\system32\svchost.exe (ID: 1420 |ParentID: 1004)
C:\WINDOWS\system32\svchost.exe (ID: 1468 |ParentID: 1004)
C:\WINDOWS\system32\spoolsv.exe (ID: 1708 |ParentID: 1004)
C:\WINDOWS\Explorer.EXE (ID: 1972 |ParentID: 1928)
C:\WINDOWS\system32\agrsmsvc.exe (ID: 452 |ParentID: 1004)
C:\WINDOWS\system32\ftspssrv.exe (ID: 472 |ParentID: 1004)
C:\Program Files\ma-config.com\MaConfigAgent.exe (ID: 532 |ParentID: 1004)
C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe (ID: 660 |ParentID: 1004)
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (ID: 700 |ParentID: 1004)
C:\WINDOWS\System32\svchost.exe (ID: 1172 |ParentID: 1004)
C:\Program Files\PDF Suite 2011\ConversionService.exe (ID: 1216 |ParentID: 1004)
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (ID: 1224 |ParentID: 700)
C:\WINDOWS\System32\svchost.exe (ID: 1388 |ParentID: 1004)
C:\Program Files\Photodex\ProShow Producer\ScsiAccess.exe (ID: 1404 |ParentID: 1004)
C:\WINDOWS\system32\svchost.exe (ID: 1436 |ParentID: 1004)
C:\Program Files\CodeMeter\Runtime\bin\CodeMeter.exe (ID: 1616 |ParentID: 1004)
C:\WINDOWS\system32\hkcmd.exe (ID: 2348 |ParentID: 1972)
C:\PROGRA~1\HSPAUS~1\HSPALA~1.EXE (ID: 2384 |ParentID: 1972)
C:\Program Files\Samsung\Samsung EDS\EDSAgent.exe (ID: 2476 |ParentID: 1972)
C:\WINDOWS\system32\igfxsrvc.exe (ID: 3756 |ParentID: 1196)
C:\WINDOWS\RTHDCPL.EXE (ID: 2244 |ParentID: 1972)
C:\Program Files\iTunes\iTunesHelper.exe (ID: 2840 |ParentID: 1972)
C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe (ID: 3076 |ParentID: 2264)
C:\Program Files\Fichiers communs\sagem SA\DgIpSvr.exe (ID: 3316 |ParentID: 1972)
C:\WINDOWS\System32\svchost.exe (ID: 3684 |ParentID: 1004)
C:\WINDOWS\system32\ctfmon.exe (ID: 3692 |ParentID: 1972)
C:\WINDOWS\system32\igfxext.exe (ID: 1740 |ParentID: 1196)
C:\Program Files\Internet Download Manager\IDMan.exe (ID: 228 |ParentID: 1972)
C:\Program Files\uTorrent\uTorrent.exe (ID: 2720 |ParentID: 1972)
C:\WINDOWS\system32\svchost.exe (ID: 3968 |ParentID: 3640)
C:\Program Files\WinZip\WZQKPICK32.EXE (ID: 4080 |ParentID: 1972)
C:\WINDOWS\system32\mspaint.exe (ID: 2204 |ParentID: 3968)
C:\Program Files\Internet Download Manager\IEMonitor.exe (ID: 3536 |ParentID: 228)
C:\Program Files\iPod\bin\iPodService.exe (ID: 1768 |ParentID: 1004)
C:\WINDOWS\system32\NOTEPAD.EXE (ID: 388 |ParentID: 1972)
C:\Program Files\Mozilla Firefox\firefox.exe (ID: 2628 |ParentID: 124)
C:\WINDOWS\system32\wbem\wmiprvse.exe (ID: 2756 |ParentID: 1196)
C:\WINDOWS\system32\NOTEPAD.EXE (ID: 2828 |ParentID: 2804)
################## | Regedit Run |
04 - HKCU\..\Run : [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
04 - HKCU\..\Run : [VisualTaskTip] \Program Files\VisualTaskTips\VisualTaskTips.exe
04 - HKCU\..\Run : [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
04 - HKCU\..\Run : [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" /MINIMIZED
04 - HKLM\..\Run : [VistaDrive] C:\WINDOWS\VistaDrive\VistaDrive.exe
04 - HKLM\..\Run : [DMHotKey] C:\Program Files\Samsung\Easy Display Manager\DMLoader.exe
04 - HKLM\..\Run : [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
04 - HKLM\..\Run : [HSPALauncher] C:\PROGRA~1\HSPAUS~1\HSPALA~1.EXE
04 - HKLM\..\Run : []
04 - HKLM\..\Run : [EDS] C:\Program Files\Samsung\Samsung EDS\EDSAgent.exe
04 - HKLM\..\Run : [RTHDCPL] RTHDCPL.EXE
04 - HKLM\..\Run : [APSDaemon] "C:\Program Files\Fichiers communs\Apple\Apple Application Support\APSDaemon.exe"
04 - HKLM\..\Run : [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
04 - HKLM\..\Run : [ServeurIPAsde] C:\Program Files\Fichiers communs\sagem SA\DgIpSvr.exe
04 - HKLM\..\RunOnce : []
04 - HKLM\Software\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\..\Run : []
04 - HKLM\Software\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\..\RunOnce : []
04 - HKU\S-1-5-19\..\Run : [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE
04 - HKU\S-1-5-19\..\Run : [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
04 - HKU\S-1-5-19\..\Run : [VisualTaskTip] \Program Files\VisualTaskTips\VisualTaskTips.exe
04 - HKU\S-1-5-20\..\Run : [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE
04 - HKU\S-1-5-20\..\Run : [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
04 - HKU\S-1-5-20\..\Run : [VisualTaskTip] \Program Files\VisualTaskTips\VisualTaskTips.exe
04 - HKU\S-1-5-21-602162358-1801674531-1417001333-500\..\Run : [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
04 - HKU\S-1-5-21-602162358-1801674531-1417001333-500\..\Run : [VisualTaskTip] \Program Files\VisualTaskTips\VisualTaskTips.exe
04 - HKU\S-1-5-21-602162358-1801674531-1417001333-500\..\Run : [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
04 - HKU\S-1-5-21-602162358-1801674531-1417001333-500\..\Run : [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" /MINIMIZED
04 - HKU\S-1-5-18\..\Run : [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE
04 - HKU\S-1-5-18\..\Run : [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
04 - HKU\S-1-5-18\..\Run : [VisualTaskTip] \Program Files\VisualTaskTips\VisualTaskTips.exe
04 - HKU\S-1-5-18\..\Run : [SearchProtect] C:\WINDOWS\system32\config\systemprofile\Application Data\SearchProtect\bin\cltmng.exe
04 - HKU\S-1-5-19\..\RunOnce : [nltide_2] regsvr32 /s /n /i:U shell32
04 - HKU\S-1-5-19\..\RunOnce : [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
04 - HKU\S-1-5-19\..\RunOnce : [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
04 - HKU\S-1-5-20\..\RunOnce : [nltide_2] regsvr32 /s /n /i:U shell32
04 - HKU\S-1-5-20\..\RunOnce : [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
04 - HKU\S-1-5-20\..\RunOnce : [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
04 - HKU\S-1-5-18\..\RunOnce : [nltide_2] regsvr32 /s /n /i:U shell32
04 - HKU\S-1-5-18\..\RunOnce : [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
04 - HKU\S-1-5-18\..\RunOnce : [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
################## | Generic Research |
Found ! C:\Documents and Settings\Administrateur\Application Data\temp.bin
Found ! J:\Radia Manel 2007.lnk
Found ! J:\AMR DIAB.lnk
Found ! J:\DAHMAN6.lnk
Found ! J:\Lotfi Double Kanon Remix 2010.lnk
Found ! J:\apps.lnk
Found ! J:\ADATA.lnk
Found ! J:\Magix maker 2007.lnk
Found ! J:\System Volume Information.lnk
Found ! J:\IDRIS.lnk
Found ! J:\user riad.lnk
Found ! J:\RIAD FOLDER.lnk
Found ! J:\Abranis.lnk
Found ! J:\Kitchen Draw v5.0_by_Asif.lnk
Found ! J:\Nouveau dossier (2).lnk
Found ! J:\Parrtion E.lnk
Found ! J:\0- Bled.lnk
Found ! J:\Application apple.lnk
Found ! J:\Galaxy SII tools.lnk
Found ! J:\Sauvegarde galaxy S2.lnk
Found ! J:\rotaplan.lnk
Found ! J:\ROTA PLAN.lnk
Found ! J:\Flash C7.lnk
Found ! J:\Activation PDF X pro 10.0.0.lnk
Found ! J:\win xp sp3.lnk
Found ! J:\photos et video Aid.lnk
Found ! J:\riad.lnk
Found ! J:\f16.lnk
Found ! J:\Winrar 4.01.lnk
Found ! J:\shemas pieces 406 hdi.lnk
Found ! J:\FirefoxPortable.lnk
Found ! J:\service box peugeot.lnk
Found ! J:\VIDEO_TS.lnk
Found ! J:\$RECYCLE.BIN.lnk
Found ! J:\DIAGBOX V 7.XX.lnk
Found ! J:\RENAULT CAN Clip.lnk
Found ! J:\Tolerance Data 2009.2.lnk
Found ! J:\Autodata 2011.lnk
Found ! J:\ITC Folder.lnk
Found ! J:\New Folder.lnk
Found ! J:\TEG Competition.lnk
Found ! J:\Adobe Acrobat XI Pro v11.lnk
Found ! J:\DRIVER RyAD.lnk
Found ! J:\sid ali.lnk
Found ! J:\Win zip 17.5.lnk
Found ! J:\Teracopier+serial.lnk
Found ! J:\Google Earth.lnk
Found ! J:\µTorrent.lnk
Found ! J:\Utility.lnk
Found ! J:\Recycled.lnk
Found ! J:\Transcend Files.lnk
Found ! J:\ilyes v2.lnk
Found ! J:\ZAHIR ABDJAOUI.lnk
Found ! J:\zimou.lnk
Found ! J:\Kabyle top.lnk
Found ! J:\hakim tidaf.lnk
Found ! J:\HACENE AHRES.lnk
Found ! J:\hafid djemai.lnk
Found ! J:\BOUHI.lnk
Found ! J:\Bazziz.lnk
Found ! J:\Akli Yahyathen.lnk
Found ! J:\Ali Amran - Akka Id Amur.lnk
Found ! J:\Ali Amran -Amsevrid-.lnk
Found ! J:\Hamidouche.lnk
Found ! J:\Brayan Adams.lnk
Found ! J:\Dance English.lnk
Found ! J:\Jimi Hendrix - South Saturn Delta (1997).lnk
Found ! J:\(2005) Dire Straits Mark Knopfler Private Investigations The Best Of.lnk
Found ! J:\CD1- The Very Best Of.lnk
Found ! J:\CD2- The Very Best Of.lnk
Found ! J:\Mark Knopfler .-2000 Sailing to Philadelphia.lnk
Found ! J:\Mark Knopfler.-1993 Screenplaying.lnk
Found ! J:\MODERN TOLKING.lnk
Found ! J:\Moderne Talking.lnk
Found ! J:\C-Naima D'ZIRIA.lnk
Found ! J:\ESMA DJERMOUN 2008.lnk
Found ! J:\Hassiba Abd El Raouf 2008.lnk
Found ! J:\.Trashes\48aa4276.scr
Found ! J:\.Trashes\Desktop.ini
Found ! D:\RECYCLER\S-1-5-21-1202660629-838170752-1801674531-1003
Found ! E:\RECYCLER\S-1-5-21-1202660629-838170752-1801674531-1003
################## | Registry |
Found ! HKLM\SYSTEM\CurrentControlSet\Services\amsint32
Found ! HKLM\SYSTEM\ControlSet001\Services\amsint32
Found ! HKLM\SYSTEM\ControlSet002\Services\amsint32
Found ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|EnableLUA -> 0
Found ! HKLM\Software\Microsoft\Security Center|AntiVirusDisableNotify -> 1
Found ! HKLM\Software\Microsoft\Security Center|FirewallDisableNotify -> 1
Found ! HKLM\Software\Microsoft\Security Center|UpdatesDisableNotify -> 1
Found ! HKLM\Software\Microsoft\Security Center|UacDisableNotify -> 1
Found ! HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowRecentDocs -> 0
Found ! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableRegistryTools -> 1
Found ! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableTaskMgr -> 1
################## | Vaccin |
D:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
E:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
J:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
################## | E.O.F | https://www.usbfix.net/ - https://www.sosvirus.net/ |
merci infiniment pour votre aide