Analyse usbfix

Bonjour,


voici le rapport d'analyse d'USBfix, je sais que ma clefs est infecté par un virus

############################## | UsbFix V 7.165 | [Recherche]

Utilisateur: lilou (Administrateur) # PC-DE-LILOU
Mis à jour le16/02/2014 par El Desaparecido - Team SosVirus
Lancé à 09:25:13 | 03/03/2014

Site Web : https://www.usbfix.net/
Changelog : https://www.usb-antivirus.com/fr/maj/
Support : https://www.sosvirus.net/
Upload Malware : http://www.sosvirus.net/upload_malware.php
Contact : https://www.usb-antivirus.com/fr/contact/

PC: Dell Inc. (0C234M)
CPU: Intel(R) Core(TM)2 Duo CPU P8600 @ 2.40GHz
RAM -> [Total : 4060 Mo| Free : 1394 Mo]
Bios: Dell Inc.
Boot: Normal boot

OS: Microsoft® Windows Vista(TM) Édition Familiale Premium (6.0.6002 64-Bit) Service Pack 2
WB: Windows Internet Explorer : 9.0.8112.16421
WB: Google Chrome : 24.0.1312.57
WB: Mozilla Firefox : 25.0.1

SC: Security Center [Enabled]
WU: Windows Update [Enabled]
AV: avast! Antivirus [Enabled | Updated]
AS: avast! Antivirus [Enabled | Updated]
AS: Windows Defender [Enabled | Updated]
AS: Spybot - Search and Destroy [Enabled | (!) Outdated]
FW: Windows FireWall [(!) Disabled]

C:\ (%systemdrive%) -> Disque fixe # 283 Go (32 Go libre(s) - 11%) [OS] # NTFS
D:\ -> Disque fixe # 15 Go (6 Go libre(s) - 44%) [RECOVERY] # NTFS
E:\ -> CD-ROM
F:\ -> CD-ROM
G:\ -> CD-ROM
H:\ -> Disque amovible # 7 Go (7 Go libre(s) - 100%) [STORE N GO] # FAT32

################## | Processus Actif |

C:\Windows\system32\csrss.exe (ID: 720 |ParentID: 708)
C:\Windows\system32\wininit.exe (ID: 776 |ParentID: 708)
C:\Windows\system32\csrss.exe (ID: 800 |ParentID: 784)
C:\Windows\system32\services.exe (ID: 832 |ParentID: 776)
C:\Windows\system32\lsass.exe (ID: 844 |ParentID: 776)
C:\Windows\system32\lsm.exe (ID: 852 |ParentID: 776)
C:\Windows\system32\winlogon.exe (ID: 952 |ParentID: 784)
C:\Windows\system32\svchost.exe (ID: 316 |ParentID: 832)
C:\Windows\system32\svchost.exe (ID: 588 |ParentID: 832)
C:\Windows\System32\svchost.exe (ID: 684 |ParentID: 832)
C:\Windows\system32\Ati2evxx.exe (ID: 1036 |ParentID: 832)
C:\Windows\System32\svchost.exe (ID: 1080 |ParentID: 832)
C:\Windows\System32\svchost.exe (ID: 1132 |ParentID: 832)
C:\Windows\system32\svchost.exe (ID: 1152 |ParentID: 832)
C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_15f4e438\STacSV64.exe (ID: 1192 |ParentID: 832)
C:\Windows\system32\svchost.exe (ID: 1296 |ParentID: 832)
C:\Windows\system32\SLsvc.exe (ID: 1312 |ParentID: 832)
C:\Windows\system32\svchost.exe (ID: 1344 |ParentID: 832)
C:\Windows\system32\Ati2evxx.exe (ID: 1476 |ParentID: 1036)
C:\Program Files\Dell\DellDock\DockLogin.exe (ID: 1544 |ParentID: 832)
C:\Windows\system32\svchost.exe (ID: 1620 |ParentID: 832)
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (ID: 1736 |ParentID: 832)
C:\Windows\system32\WLANExt.exe (ID: 1792 |ParentID: 1132)
C:\Windows\System32\spoolsv.exe (ID: 1844 |ParentID: 832)
C:\Windows\system32\svchost.exe (ID: 1920 |ParentID: 832)
C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe (ID: 1580 |ParentID: 832)
C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_15f4e438\AESTSr64.exe (ID: 1940 |ParentID: 832)
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (ID: 1992 |ParentID: 832)
C:\Program Files\Bonjour\mDNSResponder.exe (ID: 2128 |ParentID: 832)
C:\Windows\system32\svchost.exe (ID: 2148 |ParentID: 832)
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe (ID: 2160 |ParentID: 832)
C:\Program Files (x86)\LogMeIn\x64\RaMaint.exe (ID: 2208 |ParentID: 832)
C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe (ID: 2304 |ParentID: 832)
C:\Program Files (x86)\LogMeIn\x64\LMIGuardian.exe (ID: 2388 |ParentID: 2304)
C:\Windows\system32\svchost.exe (ID: 2460 |ParentID: 832)
C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (ID: 2480 |ParentID: 832)
C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE (ID: 1012 |ParentID: 832)
C:\Windows\system32\svchost.exe (ID: 2736 |ParentID: 832)
C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe (ID: 3116 |ParentID: 832)
C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe (ID: 3168 |ParentID: 832)
C:\Windows\System32\svchost.exe (ID: 3196 |ParentID: 832)
C:\Windows\system32\SearchIndexer.exe (ID: 3216 |ParentID: 832)
C:\Program Files\Intel\WiFi\bin\EvtEng.exe (ID: 3288 |ParentID: 832)
C:\Windows\system32\wbem\unsecapp.exe (ID: 3544 |ParentID: 316)
C:\Windows\system32\wbem\wmiprvse.exe (ID: 3592 |ParentID: 316)
C:\Windows\system32\taskeng.exe (ID: 3884 |ParentID: 1152)
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (ID: 3084 |ParentID: 832)
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (ID: 3476 |ParentID: 832)
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (ID: 3112 |ParentID: 832)
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe (ID: 4076 |ParentID: 832)
C:\Windows\ehome\ehsched.exe (ID: 3096 |ParentID: 832)
C:\Windows\system32\svchost.exe (ID: 3204 |ParentID: 832)
C:\Windows\ehome\ehRecvr.exe (ID: 2416 |ParentID: 832)
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (ID: 3032 |ParentID: 2976)
C:\Windows\system32\svchost.exe (ID: 3340 |ParentID: 832)
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (ID: 3864 |ParentID: 832)
C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe (ID: 4144 |ParentID: 832)
C:\Program Files\Windows Media Player\wmpnetwk.exe (ID: 4220 |ParentID: 832)
C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\SeaPort.exe (ID: 4920 |ParentID: 832)
C:\Windows\system32\taskeng.exe (ID: 5204 |ParentID: 1152)
C:\Windows\system32\Dwm.exe (ID: 5388 |ParentID: 1132)
C:\Windows\Explorer.EXE (ID: 5420 |ParentID: 5344)
C:\Windows\system32\wuauclt.exe (ID: 5752 |ParentID: 1152)
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (ID: 3456 |ParentID: 5420)
C:\Program Files\Dell\QuickSet\quickset.exe (ID: 4604 |ParentID: 5420)
C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe (ID: 5132 |ParentID: 5420)
C:\Program Files\IDT\WDM\sttray64.exe (ID: 4620 |ParentID: 5420)
C:\Windows\ehome\ehtray.exe (ID: 5312 |ParentID: 5420)
C:\Users\lilou\AppData\Local\Google\Update\GoogleUpdate.exe (ID: 4400 |ParentID: 5420)
C:\Program Files\Alwil Software\Avast5\AvastUI.exe (ID: 4404 |ParentID: 5496)
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ID: 1732 |ParentID: 4564)
C:\Users\lilou\AppData\Roaming\Dropbox\bin\Dropbox.exe (ID: 5664 |ParentID: 5420)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (ID: 5348 |ParentID: 5420)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (ID: 5064 |ParentID: 5348)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (ID: 5360 |ParentID: 5348)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (ID: 5108 |ParentID: 5348)
C:\Windows\ehome\ehmsas.exe (ID: 5900 |ParentID: 316)
C:\Windows\splwow64.exe (ID: 3836 |ParentID: 2256)
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (ID: 5780 |ParentID: 5276)
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (ID: 5260 |ParentID: 1732)
C:\Program Files (x86)\LogMeIn\x64\LMIGuardian.exe (ID: 4060 |ParentID: 5132)
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (ID: 6032 |ParentID: 3456)
C:\Windows\SysWOW64\conime.exe (ID: 4464 |ParentID: 2512)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (ID: 6396 |ParentID: 5348)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (ID: 4012 |ParentID: 5348)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (ID: 5508 |ParentID: 5348)
C:\Users\lilou\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe (ID: 6984 |ParentID: 5508)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (ID: 1388 |ParentID: 5348)
C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE (ID: 5616 |ParentID: 5420)
C:\Program Files (x86)\Microsoft Office\Office12\POWERPNT.EXE (ID: 648 |ParentID: 5348)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (ID: 4956 |ParentID: 5348)
C:\Windows\System32\WUDFHost.exe (ID: 3872 |ParentID: 1132)
C:\Windows\system32\SearchProtocolHost.exe (ID: 5944 |ParentID: 3216)
C:\Windows\system32\SearchFilterHost.exe (ID: 2292 |ParentID: 3216)
\\?\C:\Windows\system32\wbem\WMIADAP.EXE (ID: 4676 |ParentID: 1152)
C:\Windows\system32\wbem\wmiprvse.exe (ID: 1496 |ParentID: 316)

################## | Regedit Run |

04 - HKCU\..\Run : [eyeBeam SIP Client]
04 - HKCU\..\Run : [ehTray.exe] C:\Windows\ehome\ehTray.exe
04 - HKCU\..\Run : [PlayNC Launcher]
04 - HKCU\..\Run : [EPSON kurtz] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGCE.EXE /FU "C:\Users\lilou\AppData\Local\Temp\E_S29C8.tmp" /EF "HKCU"
04 - HKCU\..\Run : [EPSON SX420W Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGCE.EXE /FU "C:\Users\lilou\AppData\Local\Temp\E_SE44B.tmp" /EF "HKCU"
04 - HKCU\..\Run : [Google Update] "C:\Users\lilou\AppData\Local\Google\Update\GoogleUpdate.exe" /c
04 - HKLM\..\Run : [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
04 - HKLM\..\Run : [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
04 - HKLM\..\Run : [IAStorIcon] "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
04 - HKLM64\..\Run : [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
04 - HKLM64\..\Run : [QuickSet] C:\Program Files\Dell\QuickSet\QuickSet.exe
04 - HKLM64\..\Run : [LogMeIn GUI] "C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe"
04 - HKLM64\..\Run : [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray64.exe
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
04 - HKU\S-1-5-19\..\Run : [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
04 - HKU\S-1-5-20\..\Run : [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
04 - HKU\S-1-5-21-472332475-1232229121-4261432683-1000\..\Run : [eyeBeam SIP Client]
04 - HKU\S-1-5-21-472332475-1232229121-4261432683-1000\..\Run : [ehTray.exe] C:\Windows\ehome\ehTray.exe
04 - HKU\S-1-5-21-472332475-1232229121-4261432683-1000\..\Run : [PlayNC Launcher]
04 - HKU\S-1-5-21-472332475-1232229121-4261432683-1000\..\Run : [EPSON kurtz] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGCE.EXE /FU "C:\Users\lilou\AppData\Local\Temp\E_S29C8.tmp" /EF "HKCU"
04 - HKU\S-1-5-21-472332475-1232229121-4261432683-1000\..\Run : [EPSON SX420W Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGCE.EXE /FU "C:\Users\lilou\AppData\Local\Temp\E_SE44B.tmp" /EF "HKCU"
04 - HKU\S-1-5-21-472332475-1232229121-4261432683-1000\..\Run : [Google Update] "C:\Users\lilou\AppData\Local\Google\Update\GoogleUpdate.exe" /c

################## | Recherche générique |


################## | Registre |


################## | E.O.F | https://www.usbfix.net/ - https://www.sosvirus.net/ |