Petit check pour voir l'état du PC Résolu/Fermé

Question

Bonjour, 



Je souhaiterai avoir votre avis sur le rapport ZHPDiag.
https://pjjoint.malekal.com/files.php?id=ZHPDiag_20140201_w7q14u7y14o10



Merci pour votre aide, 



Configuration: Windows / Chrome 32.0.1700.102

Marou81 · Answer

Bonsoir,

Désinstalle : Java 7 Update 45

Il y a une infection de disques amovibles :

&#x25B6 Télécharge https://www.usbfix.net/ (de El desaparecido et C_XX) sur ton Bureau
&#x25B6 Branche tes sources de données externes à ton PC (clé USB, disque dur externe, lecteur mp3 etc...) sans les ouvrir
&#x25B6 Fais un clic droit sur le programme USBFix et choisis 'Exécuter en tant qu'administrateur'.
&#x25B6 Au menu principal, clique sur "Suppression"
&#x25B6 Ton Bureau va disparaitre, puis l'ordinateur va redémarrer : c'est normal
&#x25B6 Laisse travailler l'outil jusqu'au bout
&#x25B6 A la fin, le rapport va s'afficher : poste le dans ta prochaine réponse. 

A+

soul5000 · Answer

Bonsoir Marou81,


Voici le rapport USBFix : 


############################## | UsbFix V 7.162 | [Suppression]

Utilisateur: El Piro (Administrateur) # VAIO
Mis à jour le 27/01/2014 par El Desaparecido - Team SosVirus
Lancé à 21:37:49 | 01/02/2014

Site Web : https://www.usbfix.net/
Changelog : https://www.usb-antivirus.com/fr/maj/
Support : https://www.sosvirus.net/
Upload Malware : http://www.sosvirus.net/upload_malware.php
Contact : https://www.usb-antivirus.com/fr/contact/

PC: Sony Corporation (VAIO)
CPU: Intel(R) Pentium(R) CPU B980 @ 2.40GHz
RAM -> [Total : 3973 Mo| Free : 2675 Mo]
Bios: Insyde Corp.
Boot: Normal boot

OS: Microsoft Windows 8.1 (6.3.9600 64-Bit) 
WB: Windows Internet Explorer : 11.0.9600.16476
WB: Google Chrome : 32.0.1700.102
WB: Mozilla Firefox : 26.0

SC: Security Center [Enabled]
WU: Windows Update [Enabled]
AV: G Data AntiVirus 2014 [(!) Disabled | (!) Outdated]
AV: Windows Defender [(!) Disabled | Updated]
AS: G Data AntiVirus 2014 [(!) Disabled | (!) Outdated]
AS: Windows Defender [(!) Disabled | Updated]
FW: Windows FireWall [(!) Disabled]
AS: Malwarebytes' Anti-Malware : 1.75.0001

C:\ (%systemdrive%) -> Disque fixe # 566 Go (248 Go libre(s) - 44%) [] # NTFS
D:\ -> CD-ROM
H:\ -> Disque amovible # 7 Go (7 Go libre(s) - 99%) [KINGSTON] # NTFS

################## | Processus Actif |

C:\WINDOWS\system32\wininit.exe (ID: 616 |ParentID: 416)
C:\WINDOWS\system32\winlogon.exe (ID: 700 |ParentID: 608)
C:\WINDOWS\system32\lsass.exe (ID: 736 |ParentID: 616)
C:\WINDOWS\system32\svchost.exe (ID: 804 |ParentID: 720)
C:\WINDOWS\system32\svchost.exe (ID: 848 |ParentID: 720)
C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe (ID: 928 |ParentID: 720)
C:\WINDOWS\system32\dwm.exe (ID: 976 |ParentID: 700)
C:\Program Files (x86)\G Data\AntiVirus\AVK\AVKWCtlx64.exe (ID: 992 |ParentID: 720)
C:\WINDOWS\System32\svchost.exe (ID: 320 |ParentID: 720)
C:\WINDOWS\system32\svchost.exe (ID: 776 |ParentID: 720)
C:\WINDOWS\system32\svchost.exe (ID: 900 |ParentID: 720)
C:\WINDOWS\System32\svchost.exe (ID: 1056 |ParentID: 720)
C:\WINDOWS\system32\svchost.exe (ID: 1152 |ParentID: 720)
C:\WINDOWS\system32\svchost.exe (ID: 1176 |ParentID: 720)
C:\WINDOWS\System32\spoolsv.exe (ID: 1460 |ParentID: 720)
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (ID: 1616 |ParentID: 720)
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (ID: 1632 |ParentID: 720)
C:\Program Files (x86)\Bluetooth Suite\adminservice.exe (ID: 1660 |ParentID: 720)
C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe (ID: 1684 |ParentID: 720)
C:\Program Files (x86)\G Data\AntiVirus\AVK\AVKService.exe (ID: 1748 |ParentID: 720)
C:\Program Files\Bonjour\mDNSResponder.exe (ID: 1840 |ParentID: 720)
C:\WINDOWS\system32\dashost.exe (ID: 1868 |ParentID: 1056)
C:\Program Files\Intel\iCLS Client\HeciServer.exe (ID: 1912 |ParentID: 720)
C:\Program Files\ma-config.com\MaConfigAgent.exe (ID: 1936 |ParentID: 720)
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (ID: 2024 |ParentID: 720)
C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe (ID: 2112 |ParentID: 804)
C:\ProgramData\Modem HDM EC156\OnlineUpdate\ouc.exe (ID: 2148 |ParentID: 2084)
C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe (ID: 2208 |ParentID: 720)
C:\Program Files (x86)\Skype\Updater\Updater.exe (ID: 2228 |ParentID: 720)
C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe (ID: 2320 |ParentID: 720)
C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (ID: 2356 |ParentID: 720)
C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe (ID: 2404 |ParentID: 2320)
C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe (ID: 2508 |ParentID: 2320)
C:\WINDOWS\system32\svchost.exe (ID: 2668 |ParentID: 720)
C:\Windows\System32\WUDFHost.exe (ID: 2904 |ParentID: 1056)
C:\WINDOWS\SysWOW64\DllHost.exe (ID: 2988 |ParentID: 804)
C:\WINDOWS\system32	askeng.exe (ID: 3048 |ParentID: 776)
C:\WINDOWS\system32	askhostex.exe (ID: 2500 |ParentID: 776)
C:\WINDOWS\Explorer.EXE (ID: 1524 |ParentID: 2852)
C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe (ID: 3128 |ParentID: 3076)
C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe (ID: 3140 |ParentID: 3076)
C:\WINDOWS\system32unonce.exe (ID: 3180 |ParentID: 1524)
C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient.EXE (ID: 3324 |ParentID: 776)
C:\WINDOWS\system32\wbem\wmiprvse.exe (ID: 3576 |ParentID: 804)
C:\Program Files\Sony\VAIO Care\ESRV\esrv.exe (ID: 3980 |ParentID: 3952)
C:\WINDOWS\system32\conhost.exe (ID: 3988 |ParentID: 3980)

################## | Regedit Run |

04 - HKCU\..\Run : [FileHippo.com] "C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe" /background
04 - HKCU\..\Run : [4Sync] "C:\Program Files (x86)\4Sync\4Sync.exe" -startup
04 - HKCU\..\Run : [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
04 - HKCU\..\Run : [Google Update] "C:\Users\El Piro\AppData\Local\Google\Update\GoogleUpdate.exe" /c
04 - HKCU\..\Run : [Speech Recognition] "C:\WINDOWS\Speech\Common\sapisvr.exe" -SpeechUX -Startup
04 - HKCU\..\Run : [KiesPreload] C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload
04 - HKCU\..\Run : [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
04 - HKCU\..\Run : [uTorrent] "C:\Users\El Piro\AppData\Roaming\uTorrent\uTorrent.exe"  /MINIMIZED
04 - HKLM\..\Run : [ISBMgr.exe] "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe"
04 - HKLM\..\Run : [PMBVolumeWatcher] C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe
04 - HKLM\..\Run : [Intel AppUp(SM) center] "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4
04 - HKLM\..\Run : [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
04 - HKLM\..\Run : [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
04 - HKLM\..\Run : [G Data AntiVirus Tray] C:\Program Files (x86)\G Data\AntiVirus\AVKTray\AVKTray.exe
04 - HKLM\..\Run : [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
04 - HKLM\..\Run : [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
04 - HKLM\..\Run : [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
04 - HKLM\..\RunOnce : [] 
04 - HKLM\..\Policies\Explorerun : [BtvStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
04 - HKLM64\..\Run : [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /SONYAPO 
04 - HKLM64\..\Run : [Cm106Sound] C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\cm106.dll,CMICtrlWnd
04 - HKLM64\..\Run : [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
04 - HKLM64\..\Run : [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming
04 - HKLM64\..\Run : [IAStorIcon] "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
04 - HKLM64\..\Run : [RtsCM] RTSCM64.EXE
04 - HKLM64\..\Run : [IgfxTray] "C:\WINDOWS\system32\igfxtray.exe"
04 - HKLM64\..\Run : [HotKeysCmds] "C:\WINDOWS\system32\hkcmd.exe"
04 - HKLM64\..\Run : [Persistence] "C:\WINDOWS\system32\igfxpers.exe"
04 - HKLM64\..\Policies\Explorerun : [BtvStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
04 - HKU\S-1-5-21-3850983802-1859725054-733692422-1001\..\Run : [FileHippo.com] "C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe" /background
04 - HKU\S-1-5-21-3850983802-1859725054-733692422-1001\..\Run : [4Sync] "C:\Program Files (x86)\4Sync\4Sync.exe" -startup
04 - HKU\S-1-5-21-3850983802-1859725054-733692422-1001\..\Run : [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
04 - HKU\S-1-5-21-3850983802-1859725054-733692422-1001\..\Run : [Google Update] "C:\Users\El Piro\AppData\Local\Google\Update\GoogleUpdate.exe" /c
04 - HKU\S-1-5-21-3850983802-1859725054-733692422-1001\..\Run : [Speech Recognition] "C:\WINDOWS\Speech\Common\sapisvr.exe" -SpeechUX -Startup
04 - HKU\S-1-5-21-3850983802-1859725054-733692422-1001\..\Run : [KiesPreload] C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload
04 - HKU\S-1-5-21-3850983802-1859725054-733692422-1001\..\Run : [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
04 - HKU\S-1-5-21-3850983802-1859725054-733692422-1001\..\Run : [uTorrent] "C:\Users\El Piro\AppData\Roaming\uTorrent\uTorrent.exe"  /MINIMIZED

################## | Recherche générique |

Supprimé! H:\Microsoft.exe

(!) Fichiers temporaires supprimés.

################## | Registre |

Réparé ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|EnableLUA -> 1
Réparé ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|ConsentPromptBehaviorAdmin -> 5
Supprimé! HKU\S-1-5-21-3850983802-1859725054-733692422-1001\Software\.\.\.\.\Mountpoints2\{95395582-6320-11e3-bef0-30f9edc8d155}

################## | Listing |

[25/12/2013 - 00:40:30 | SHD] - C:\$Recycle.Bin
[01/03/2013 - 02:27:35 | D] - C:\4Sync
[01/02/2014 - 18:54:40 | D] - C:\AdwCleaner
[15/07/2013 - 15:21:00 | N | 1 Ko | 56239BB53B928E4269D05DC9B13B1659] - C:\AdwCleaner[R1].txt
[26/07/2013 - 21:16:59 | N | 2 Ko | DA921A3F5B89AA810F80FF045E79C638] - C:\AdwCleaner[R2].txt
[12/07/2013 - 04:56:15 | N | 1 Ko | 6D52643A2EE263A731A25966224225A3] - C:\AdwCleaner[S1].txt
[15/07/2013 - 15:21:48 | N | 1 Ko | 39FB93469FFB087D474AA9F46585A41E] - C:\AdwCleaner[S2].txt
[26/07/2013 - 21:17:43 | N | 1 Ko | 70AF1DDC3A3284783B386E7F28C54E7A] - C:\AdwCleaner[S3].txt
[26/07/2012 - 03:44:30 | RASH | 389 Ko] - C:\bootmgr
[18/06/2013 - 12:18:29 | N | 0 Ko] - C:\BOOTNXT
[29/01/2014 - 08:32:44 | D] - C:\Config.Msi
[27/05/2013 - 10:52:28 | N | 1 Ko | 070E034E386DA9F01881825FAA3DD4B8] - C:\DelFix.txt
[24/01/2013 - 03:34:56 | D] - C:\Documentation
[22/08/2013 - 14:45:52 | SHD] - C:\Documents and Settings
[13/05/2013 - 21:28:26 | D] - C:\Dossier video bouffe
[03/07/2013 - 13:17:10 | D] - C:\download
[15/07/2013 - 07:56:43 | D] - C:\Driver_allOS
[06/11/2012 - 04:54:47 | N | 119 Ko] - C:\firecore.log
[28/11/2013 - 05:00:19 | D] - C:\found.000
[01/02/2014 - 21:36:30 | ASH | 3254904 Ko] - C:\hiberfil.sys
[29/11/2013 - 03:17:55 | N | 5 Ko | DE5C0B680F7E44519E157D610106EF0A] - C:\IFRToolLog.txt
[06/11/2012 - 04:15:59 | D] - C:\Intel
[01/02/2014 - 21:36:34 | ASH | 4194304 Ko] - C:\pagefile.sys
[22/08/2013 - 15:22:35 | D] - C:\PerfLogs
[01/02/2014 - 09:52:14 | N | 1 Ko] - C:\PhysicalDisk0_MBR.bin
[23/01/2014 - 09:47:47 | D] - C:\Program Files
[24/01/2014 - 05:42:59 | D] - C:\Program Files (x86)
[30/01/2014 - 19:19:16 | HD] - C:\ProgramData
[02/12/2013 - 17:19:13 | N | 1 Ko | 6E220D1D3948DA6BB8C5BE86A6511EDB] - C:\PureRa.txt
[28/11/2013 - 03:10:06 | SHD] - C:\Recovery
[06/11/2012 - 04:21:21 | N | 2 Ko] - C:\RHDSetup.log
[16/01/2014 - 04:14:25 | D] - C:\Samsung
[06/11/2012 - 04:07:27 | D] - C:\sources
[01/02/2014 - 21:36:37 | ASH | 262144 Ko] - C:\swapfile.sys
[01/02/2014 - 12:19:37 | SHD] - C:\System Volume Information
[27/01/2014 - 23:57:20 | D] - C:\Update
[01/02/2014 - 21:34:41 | D] - C:\UsbFix
[15/07/2013 - 15:44:43 | N | 12 Ko | C51C52FE18363A9C0D3E14732B54EA99] - C:\UsbFix [Clean 1] VAIO.txt
[26/07/2013 - 21:30:07 | N | 11 Ko | D5C427EED85419270FC795DC5CE51E9E] - C:\UsbFix [Clean 2] VAIO.txt
[03/09/2013 - 21:05:31 | N | 12 Ko | EC7461B35EF1CA79C89084DB09E4EDB1] - C:\UsbFix [Clean 3] VAIO.txt
[08/09/2013 - 00:23:34 | N | 11 Ko | A2525AD1498E49480C6274089F2FA6C4] - C:\UsbFix [Clean 4] VAIO.txt
[27/09/2013 - 05:45:01 | N | 11 Ko | 8DE93F7B58F01D970DD2AA4EAB7C742E] - C:\UsbFix [Clean 5] VAIO.txt
[03/10/2013 - 07:13:21 | N | 13 Ko | BFAEAE17C55E3ED0B349A5D3D7D31702] - C:\UsbFix [Clean 6] VAIO.txt
[01/02/2014 - 21:47:36 | A | 12 Ko | 375A1531FA6E0A4F2B0DEA72D472EDCE] - C:\UsbFix [Clean 8] VAIO.txt
[15/07/2013 - 15:41:41 | N | 9 Ko | 63DDFAC51557268606137562E4E8EB14] - C:\UsbFix [Scan 1] VAIO.txt
[26/07/2013 - 21:27:16 | N | 8 Ko | C6E856E45FDA591295C6B5809ACE1C9F] - C:\UsbFix [Scan 2] VAIO.txt
[03/09/2013 - 21:01:48 | N | 10 Ko | 8484C571938741858AE433C2C113E688] - C:\UsbFix [Scan 4] VAIO.txt
[08/09/2013 - 00:20:53 | N | 8 Ko | 1CA29E724DCBE36BAAEC59DE1585DD9F] - C:\UsbFix [Scan 5] VAIO.txt
[27/09/2013 - 05:42:46 | N | 9 Ko | BF5430427CA93B904017029B36638A32] - C:\UsbFix [Scan 6] VAIO.txt
[03/10/2013 - 07:08:09 | N | 11 Ko | 26F2212E9848C2DFCF27F3FD3E6EB4D1] - C:\UsbFix [Scan 7] VAIO.txt
[01/12/2013 - 02:23:27 | D] - C:\Users
[13/05/2013 - 21:31:52 | D] - C:\What's that fuck
[01/02/2014 - 12:22:13 | D] - C:\Windows
[02/09/2013 - 10:52:48 | D] - C:\ZHP
[04/09/2013 - 10:11:28 | N | 154 Ko] - H:\18 002.jpg
[14/08/2013 - 11:37:43 | N | 254 Ko] - H:\18 011.jpg
[14/08/2013 - 12:11:16 | N | 218 Ko] - H:\18 012.jpg
[03/12/2013 - 17:38:05 | N | 0 Ko | E8D54D03F3ABAC5A1B7BDC188B53504E] - H:\code.txt
[07/08/2013 - 23:57:26 | N | 62 Ko] - H:\Dispute- Cardholder Statement of Disputed Item_MD.pdf
[16/12/2013 - 11:33:04 | N | 440 Ko] - H:\Photo 001.jpg
[16/12/2013 - 11:31:14 | N | 392 Ko] - H:\Photo.jpg
[03/12/2013 - 17:24:54 | SHD] - H:\System Volume Information

################## | Vaccin |

H:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)

################## | E.O.F | https://www.usbfix.net/ - https://www.sosvirus.net/ |

Marou81 · Answer

Bonsoir,

Bien tu peux installé la dernière version de java : https://www.java.com/fr/download/

Ton pc est clean sinon.

A+

Petit check pour voir l'état du PC

3 réponses

Discussions similaires