Virus/UsbFix

Bonsoir,

Je suis également infecté par ce virus et j'ai téléchargé UsbFix, je me permets de poster le rapport, merci de m'aider :

############################## | UsbFix V 7.167 | [Recherche]

Utilisateur: Brahim (Administrateur) # BRAHIM-TOSH
Mis à jour le 13/03/2014 par El Desaparecido - Team SosVirus
Lancé à 20:24:52 | 17/03/2014

Site Web : http://www.usbfix.net/
Changelog : http://www.usbfix.net/maj/
Support : http://www.sosvirus.net/forum-virus-securite.html
Upload Malware : http://www.sosvirus.net/upload_malware.php
Contact : http://www.usbfix.net/contact/

PC: TOSHIBA (PWWBE)
CPU: AMD E-300 APU with Radeon(tm) HD Graphics
RAM -> [Total : 3692 Mo| Free : 998 Mo]
Bios: TOSHIBA
Boot: Normal boot

OS: Microsoft Windows 7 Édition Familiale Premium (6.1.7601 64-Bit) Service Pack 1
WB: Windows Internet Explorer : 11.0.9600.16518
WB: Mozilla Firefox : 27.0

SC: Security Center [Enabled]
WU: Windows Update [Enabled]
AV: avast! Antivirus [Enabled | Updated]
AS: Windows Defender [Enabled | Updated]
AS: avast! Antivirus [Enabled | Updated]
FW: Windows FireWall [Enabled]
AS: Malwarebytes' Anti-Malware : 1.75.0001

C:\ (%systemdrive%) -> Disque fixe # 298 Go (168 Go libre(s) - 56%) [WINDOWS] # NTFS
D:\ -> Disque fixe # 298 Go (21 Go libre(s) - 7%) [Data] # NTFS
E:\ -> CD-ROM
H:\ -> Disque amovible # 7 Go (2 Go libre(s) - 30%) [USB 8 GO] # FAT32

################## | Processus Actif |

C:\Windows\system32\csrss.exe (ID: 468 |ParentID: 456)
C:\Windows\system32\wininit.exe (ID: 536 |ParentID: 456)
C:\Windows\system32\csrss.exe (ID: 544 |ParentID: 528)
C:\Windows\system32\services.exe (ID: 596 |ParentID: 536)
C:\Windows\system32\lsass.exe (ID: 612 |ParentID: 536)
C:\Windows\system32\lsm.exe (ID: 620 |ParentID: 536)
C:\Windows\system32\winlogon.exe (ID: 676 |ParentID: 528)
C:\Windows\system32\svchost.exe (ID: 776 |ParentID: 596)
C:\Windows\system32\svchost.exe (ID: 876 |ParentID: 596)
C:\Windows\system32\atiesrxx.exe (ID: 936 |ParentID: 596)
C:\Windows\System32\svchost.exe (ID: 272 |ParentID: 596)
C:\Windows\System32\svchost.exe (ID: 448 |ParentID: 596)
C:\Windows\system32\svchost.exe (ID: 548 |ParentID: 596)
C:\Windows\system32\svchost.exe (ID: 728 |ParentID: 596)
C:\Windows\system32\svchost.exe (ID: 1116 |ParentID: 596)
C:\Program Files\AVAST Software\Avast\AvastSvc.exe (ID: 1200 |ParentID: 596)
C:\Program Files (x86)\Desk 365\deskSvc.exe (ID: 1324 |ParentID: 596)
C:\ProgramData\IePluginService\PluginService.exe (ID: 1400 |ParentID: 596)
C:\ProgramData\WPM\wprotectmanager.exe (ID: 1440 |ParentID: 596)
C:\Windows\System32\spoolsv.exe (ID: 1520 |ParentID: 596)
C:\Windows\system32\svchost.exe (ID: 1556 |ParentID: 596)
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (ID: 1648 |ParentID: 596)
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (ID: 1676 |ParentID: 596)
C:\Program Files (x86)\MyPC Backup\BackupStack.exe (ID: 1700 |ParentID: 596)
C:\Program Files\Bonjour\mDNSResponder.exe (ID: 1816 |ParentID: 596)
C:\Windows\system32\atieclxx.exe (ID: 1968 |ParentID: 936)
C:\Windows\system32\svchost.exe (ID: 2012 |ParentID: 596)
C:\ProgramData\IBUpdaterService\ibsvc.exe (ID: 1132 |ParentID: 596)
C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe (ID: 1716 |ParentID: 596)
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (ID: 2060 |ParentID: 596)
C:\Program Files (x86)\NewPlayer\NewPlayerUpdaterService.exe (ID: 2264 |ParentID: 596)
C:\Program Files (x86)\NewPlayer\NewPlayerUpdater.exe (ID: 2848 |ParentID: 2264)
C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe (ID: 2884 |ParentID: 596)
C:\Windows\system32\taskeng.exe (ID: 3032 |ParentID: 728)
C:\Program Files (x86)\Advanced System Protector\AdvancedSystemProtector.exe (ID: 2420 |ParentID: 3032)
C:\Windows\Explorer.EXE (ID: 2660 |ParentID: 2084)
C:\Windows\system32\Dwm.exe (ID: 2844 |ParentID: 448)
C:\Windows\system32\taskhost.exe (ID: 1948 |ParentID: 596)
C:\Program Files (x86)\Desk 365\desk365.exe (ID: 3096 |ParentID: 1324)
C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (ID: 3608 |ParentID: 596)
C:\Windows\system32\taskeng.exe (ID: 3780 |ParentID: 728)
C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe (ID: 3816 |ParentID: 3780)
C:\Windows\system32\TODDSrv.exe (ID: 3868 |ParentID: 596)
C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe (ID: 3920 |ParentID: 596)
C:\Program Files (x86)\WebConnect\bin\utilWebConnect.exe (ID: 2956 |ParentID: 596)
C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe (ID: 1888 |ParentID: 596)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (ID: 1900 |ParentID: 596)
C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (ID: 2192 |ParentID: 596)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (ID: 3540 |ParentID: 1900)
C:\Windows\system32\wbem\wmiprvse.exe (ID: 4540 |ParentID: 776)
C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (ID: 3580 |ParentID: 596)
C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe (ID: 2412 |ParentID: 596)
C:\Windows\system32\svchost.exe (ID: 3916 |ParentID: 596)
C:\Windows\System32\WUDFHost.exe (ID: 3616 |ParentID: 448)
C:\Program Files (x86)\Web Protect\PCProtect.exe (ID: 5348 |ParentID: 596)
C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe (ID: 3320 |ParentID: 2660)
C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe (ID: 2160 |ParentID: 2660)
C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe (ID: 5260 |ParentID: 2660)
C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (ID: 5792 |ParentID: 2660)
C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe (ID: 3808 |ParentID: 2660)
C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (ID: 6156 |ParentID: 2660)
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (ID: 6168 |ParentID: 2660)
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (ID: 6176 |ParentID: 2660)
C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe (ID: 6468 |ParentID: 2660)
C:\Users\Brahim\AppData\Local\Clavier+\Clavier.exe (ID: 6508 |ParentID: 2660)
C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe (ID: 6596 |ParentID: 3816)
C:\Program Files (x86)\Skype\Phone\Skype.exe (ID: 6788 |ParentID: 2660)
C:\Users\Brahim\AppData\Local\Viber\Viber.exe (ID: 6828 |ParentID: 2660)
C:\Windows\System32\wscript.exe (ID: 6836 |ParentID: 2660)
C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe (ID: 6864 |ParentID: 2660)
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ID: 7140 |ParentID: 7064)
C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe (ID: 7156 |ParentID: 6844)
C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe (ID: 6488 |ParentID: 6844)
C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe (ID: 2992 |ParentID: 6844)
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (ID: 4856 |ParentID: 6844)
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (ID: 2404 |ParentID: 7140)
C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe (ID: 4672 |ParentID: 596)
C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe (ID: 2840 |ParentID: 596)
c:\Program Files (x86)\Nero\Update\NASvc.exe (ID: 6692 |ParentID: 596)
C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe (ID: 4456 |ParentID: 596)
C:\Windows\System32\svchost.exe (ID: 1808 |ParentID: 596)
C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe (ID: 2444 |ParentID: 596)
C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe (ID: 3764 |ParentID: 6184)
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (ID: 7308 |ParentID: 596)
C:\Program Files (x86)\iTunes\iTunesHelper.exe (ID: 7584 |ParentID: 6844)
C:\Program Files (x86)\Browsersafeguard\BrowserSafeguard.exe (ID: 7608 |ParentID: 6844)
C:\Program Files\iPod\bin\iPodService.exe (ID: 8024 |ParentID: 596)
C:\Windows\system32\svchost.exe (ID: 8048 |ParentID: 596)
C:\Program Files\Windows Media Player\wmpnetwk.exe (ID: 7792 |ParentID: 596)
C:\Users\Brahim\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 2876 |ParentID: 2660)
C:\Users\Brahim\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 8044 |ParentID: 2876)
C:\Users\Brahim\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 5068 |ParentID: 2876)
C:\Users\Brahim\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 6820 |ParentID: 2876)
C:\Users\Brahim\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 7512 |ParentID: 2876)
C:\Users\Brahim\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 3556 |ParentID: 2876)
C:\Windows\system32\SearchIndexer.exe (ID: 6644 |ParentID: 596)
C:\Users\Brahim\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 2480 |ParentID: 2876)
C:\Windows\system32\taskeng.exe (ID: 8716 |ParentID: 728)
C:\Windows\System32\svchost.exe (ID: 7332 |ParentID: 596)
C:\Windows\system32\rundll32.exe (ID: 7508 |ParentID: 8716)
C:\Windows\system32\vssvc.exe (ID: 4964 |ParentID: 596)
C:\Program Files (x86)\WebConnect\updateWebConnect.exe (ID: 6668 |ParentID: 596)
C:\Users\Brahim\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 7236 |ParentID: 2876)
C:\Users\Brahim\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 6844 |ParentID: 2876)
C:\Program Files\AVAST Software\Avast\avastUi.exe (ID: 9032 |ParentID: 3756)
C:\Users\Brahim\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 8896 |ParentID: 2876)
C:\Windows\system32\SearchProtocolHost.exe (ID: 4312 |ParentID: 6644)
C:\Windows\system32\SearchFilterHost.exe (ID: 7380 |ParentID: 6644)

################## | Regedit Run |

F2 - HKLM\..\Winlogon : [Shell] explorer.exe
F2 - [64bit] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - HKLM\..\Winlogon : [Userinit] userinit.exe
F2 - [64bit] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
04 - HKCU\..\Run : [TOPI.EXE] C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe /STAR
04 - HKCU\..\Run : [Bubble Dock] "C:\Users\Brahim\AppData\Roaming\Nosibay\Bubble Dock\LBubble Dock.exe" /winstartup
04 - HKCU\..\Run : [Clavier+] C:\Users\Brahim\AppData\Local\Clavier+\Clavier.exe
04 - HKCU\..\Run : [Google Update] "C:\Users\Brahim\AppData\Local\Google\Update\GoogleUpdate.exe" /c
04 - HKCU\..\Run : [Facebook Update] "C:\Users\Brahim\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
04 - HKCU\..\Run : [DataMgr] "C:\Users\Brahim\AppData\Roaming\DataMgr\DataMgr.exe"
04 - HKCU\..\Run : [lollipop_09181848] "c:\users\brahim\appdata\local\lollipop\lollipop_09181848.exe" lollipop_09181848
04 - HKCU\..\Run : [Snoozer] "C:\Users\Brahim\AppData\Roaming\Snz\Snz.exe"
04 - HKCU\..\Run : [OMESupervisor] C:\Users\Brahim\AppData\Local\omesuperv.exe
04 - HKCU\..\Run : [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
04 - HKCU\..\Run : [Viber] "C:\Users\Brahim\AppData\Local\Viber\Viber.exe" StartMinimized
04 - HKCU\..\Run : [iTunesHelper] wscript.exe //B "C:\Users\Brahim\AppData\Local\Temp\iTunesHelper.vbe"
04 - HKCU\..\RunOnce : [Application Restart #0] C:\Users\Brahim\AppData\Local\Google\Chrome\Application\chrome.exe --flag-switches-begin --enable-experimental-extension-apis --flag-switches-end --restore-last-session http://start.qone8.com/?type=sc&ts=1381961598&from=adks&uid=TOSHIBAXMK6475GSX_12TBFXS3SXX12TBFXS3S
04 - HKLM\..\Run : [NBAgent] "c:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart
04 - HKLM\..\Run : [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
04 - HKLM\..\Run : [SVPWUTIL] C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe SVPwUTIL
04 - HKLM\..\Run : [HWSetup] C:\Program Files\TOSHIBA\Utilities\HWSetup.exe hwSetUP
04 - HKLM\..\Run : [KeNotify] "C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe" LPCM
04 - HKLM\..\Run : [TWebCamera] "C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe" autorun
04 - HKLM\..\Run : [ToshibaServiceStation] "C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe" /hide:60
04 - HKLM\..\Run : [SSDMonitor] C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
04 - HKLM\..\Run : [tuto4pc_fr_24]
04 - HKLM\..\Run : [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
04 - HKLM\..\Run : [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
04 - HKLM\..\Run : [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
04 - HKLM\..\Run : [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
04 - HKLM\..\Run : [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
04 - HKLM\..\Run : [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
04 - HKLM\..\Run : [BrowserSafeguard] "C:\Program Files (x86)\Browsersafeguard\BrowserSafeguard.exe"
04 - [64bit] HKLM\..\Run : [TosNC] %ProgramFiles%\Toshiba\BulletinBoard\TosNcCore.exe
04 - [64bit] HKLM\..\Run : [TosReelTimeMonitor] %ProgramFiles%\TOSHIBA\ReelTime\TosReelTimeMonitor.exe
04 - [64bit] HKLM\..\Run : [Toshiba TEMPRO] C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe
04 - [64bit] HKLM\..\Run : [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
04 - [64bit] HKLM\..\Run : [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
04 - [64bit] HKLM\..\Run : [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe
04 - [64bit] HKLM\..\Run : [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
04 - [64bit] HKLM\..\Run : [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE3
04 - [64bit] HKLM\..\Run : [TosSENotify] C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe
04 - [64bit] HKLM\..\Run : [SmartFaceVWatcher] %ProgramFiles%\Toshiba\SmartFaceV\SmartFaceVWatcher.exe
04 - [64bit] HKLM\..\Run : [TosVolRegulator] C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe
04 - [64bit] HKLM\..\Run : [Toshiba Registration] C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-19\..\Run : [TOPI.EXE] C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe /STARTUP
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-20\..\Run : [TOPI.EXE] C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe /STARTUP
04 - HKU\S-1-5-21-3308674695-3207151789-3422777151-1001\..\Run : [TOPI.EXE] C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe /STAR
04 - HKU\S-1-5-21-3308674695-3207151789-3422777151-1001\..\Run : [Bubble Dock] "C:\Users\Brahim\AppData\Roaming\Nosibay\Bubble Dock\LBubble Dock.exe" /winstartup
04 - HKU\S-1-5-21-3308674695-3207151789-3422777151-1001\..\Run : [Clavier+] C:\Users\Brahim\AppData\Local\Clavier+\Clavier.exe
04 - HKU\S-1-5-21-3308674695-3207151789-3422777151-1001\..\Run : [Google Update] "C:\Users\Brahim\AppData\Local\Google\Update\GoogleUpdate.exe" /c
04 - HKU\S-1-5-21-3308674695-3207151789-3422777151-1001\..\Run : [Facebook Update] "C:\Users\Brahim\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
04 - HKU\S-1-5-21-3308674695-3207151789-3422777151-1001\..\Run : [DataMgr] "C:\Users\Brahim\AppData\Roaming\DataMgr\DataMgr.exe"
04 - HKU\S-1-5-21-3308674695-3207151789-3422777151-1001\..\Run : [lollipop_09181848] "c:\users\brahim\appdata\local\lollipop\lollipop_09181848.exe" lollipop_09181848
04 - HKU\S-1-5-21-3308674695-3207151789-3422777151-1001\..\Run : [Snoozer] "C:\Users\Brahim\AppData\Roaming\Snz\Snz.exe"
04 - HKU\S-1-5-21-3308674695-3207151789-3422777151-1001\..\Run : [OMESupervisor] C:\Users\Brahim\AppData\Local\omesuperv.exe
04 - HKU\S-1-5-21-3308674695-3207151789-3422777151-1001\..\Run : [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
04 - HKU\S-1-5-21-3308674695-3207151789-3422777151-1001\..\Run : [Viber] "C:\Users\Brahim\AppData\Local\Viber\Viber.exe" StartMinimized
04 - HKU\S-1-5-21-3308674695-3207151789-3422777151-1001\..\Run : [iTunesHelper] wscript.exe //B "C:\Users\Brahim\AppData\Local\Temp\iTunesHelper.vbe"
04 - HKU\S-1-5-18\..\Run : [TOPI.EXE] C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe /STARTUP
04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-21-3308674695-3207151789-3422777151-1001\..\RunOnce : [Application Restart #0] C:\Users\Brahim\AppData\Local\Google\Chrome\Application\chrome.exe --flag-switches-begin --enable-experimental-extension-apis --flag-switches-end --restore-last-session http://start.qone8.com/?type=sc&ts=1381961598&from=adks&uid=TOSHIBAXMK6475GSX_12TBFXS3SXX12TBFXS3S

################## | Recherche générique |

Présent! C:\Users\Brahim\AppData\Local\Temp\iTunesHelper.vbe
Présent! H:\Avis de situation.lnk
Présent! H:\la fee clochette.lnk
Présent! H:\.lnk
Présent! H:\Dossier pôle emploi.lnk
Présent! H:\Annaqa maghrebiyya.lnk
Présent! H:\5otba injustice.lnk
Présent! H:\Logement-bail.lnk
Présent! H:\Infrormatique.lnk
Présent! H:\Fati CAMPUS.lnk
Présent! H:\trz5078.tmp

################## | Registre |

Présent! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe
Présent! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe
Présent! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe
Présent! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe
Présent! HKU\S-1-5-21-3308674695-3207151789-3422777151-1001\Software\Microsoft\Windows\CurrentVersion\Run|iTunesHelper
Présent! HKLM\Software\Microsoft\Windows\CurrentVersion\Run|iTunesHelper
Présent! HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run|iTunesHelper
Présent! HKCU\Software\Microsoft\Windows\CurrentVersion\Run|iTunesHelper

################## | E.O.F | http://www.usbfix.net/ - http://www.sosvirus.net |


Merci encore.