Virus shortcut problème

bonjour voici le texte de usbfix :

############################## | UsbFix V 7.169 | [Suppression]

Utilisateur: alex (Administrateur) # MULDER_SAMOS
Mis à jour le 31/03/2014 par El Desaparecido - Team SosVirus
Lancé à 15:43:06 | 14/04/2014

Site Web : https://www.usbfix.net/
Changelog : https://www.usb-antivirus.com/fr/maj/
Support : https://depannageinformatique.org/acheter/reservation/?f=6
Upload Malware : http://www.sosvirus.net/upload_malware.php
Contact : https://www.usb-antivirus.com/fr/contact/

PC: Hewlett-Packard (18FE)
CPU: Intel(R) Core(TM) i5-3337U CPU @ 1.80GHz
RAM -> [Total : 8084 Mo| Free : 4814 Mo]
Bios: Insyde
Boot: Normal boot

OS: Microsoft Windows 8 (6.2.9200 64-Bit)
WB: Windows Internet Explorer : 10.0.9200.16863
WB: Mozilla Firefox : 28.0

SC: Security Center [Enabled]
WU: Windows Update [Enabled]
AV: Windows Defender [(!) Disabled | Updated]
AV: avast! Antivirus [Enabled | Updated]
AS: Windows Defender [(!) Disabled | Updated]
AS: avast! Antivirus [Enabled | Updated]
FW: Windows FireWall [Enabled]
AS: Malwarebytes' Anti-Malware : 1.75.0001

C:\ (%systemdrive%) -> Disque fixe # 913 Go (355 Go libre(s) - 39%) [OS] # NTFS
D:\ -> Disque fixe # 18 Go (2 Go libre(s) - 13%) [RECOVERY] # NTFS
E:\ -> Disque amovible # 7 Go (539 Mo libre(s) - 7%) [] # FAT32
F:\ -> CD-ROM
G:\ -> Disque amovible # 4 Go (4 Go libre(s) - 98%) [USB DISK] # FAT32

################## | Processus Actif |

C:\Windows\system32\csrss.exe (ID: 520 |ParentID: 452)
C:\Windows\system32\wininit.exe (ID: 608 |ParentID: 452)
C:\Windows\system32\services.exe (ID: 708 |ParentID: 608)
C:\Windows\system32\lsass.exe (ID: 716 |ParentID: 608)
C:\Windows\system32\svchost.exe (ID: 820 |ParentID: 708)
C:\Windows\system32\svchost.exe (ID: 900 |ParentID: 708)
C:\Windows\System32\svchost.exe (ID: 948 |ParentID: 708)
C:\Windows\system32\svchost.exe (ID: 980 |ParentID: 708)
C:\Windows\system32\svchost.exe (ID: 356 |ParentID: 708)
C:\Windows\System32\svchost.exe (ID: 524 |ParentID: 708)
C:\Program Files\IDT\WDM\STacSV64.exe (ID: 836 |ParentID: 708)
C:\Program Files\Classic Shell\ClassicShellService.exe (ID: 1136 |ParentID: 708)
C:\Windows\system32\Hpservice.exe (ID: 1364 |ParentID: 708)
C:\Windows\system32\svchost.exe (ID: 1408 |ParentID: 708)
C:\Program Files\AVAST Software\Avast\AvastSvc.exe (ID: 1472 |ParentID: 708)
C:\Windows\System32\spoolsv.exe (ID: 1628 |ParentID: 708)
C:\Windows\system32\svchost.exe (ID: 1716 |ParentID: 708)
C:\Windows\system32\svchost.exe (ID: 1900 |ParentID: 708)
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (ID: 1920 |ParentID: 708)
C:\Program Files (x86)\Bluetooth Suite\adminservice.exe (ID: 2016 |ParentID: 708)
C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe (ID: 1092 |ParentID: 708)
C:\Program Files\Bonjour\mDNSResponder.exe (ID: 1944 |ParentID: 708)
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (ID: 2096 |ParentID: 708)
C:\Windows\system32\dashost.exe (ID: 2120 |ParentID: 524)
C:\Program Files\Intel\iCLS Client\HeciServer.exe (ID: 2196 |ParentID: 708)
C:\Windows\SysWOW64\irstrtsv.exe (ID: 2240 |ParentID: 708)
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (ID: 2264 |ParentID: 708)
C:\Program Files (x86)\PDF Architect\HelperService.exe (ID: 2304 |ParentID: 708)
C:\Windows\system32\svchost.exe (ID: 2468 |ParentID: 708)
C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (ID: 2608 |ParentID: 708)
C:\Windows\system32\svchost.exe (ID: 3064 |ParentID: 708)
C:\Windows\system32\svchost.exe (ID: 3136 |ParentID: 708)
C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe (ID: 3240 |ParentID: 708)
C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe (ID: 2576 |ParentID: 708)
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (ID: 3436 |ParentID: 708)
C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe (ID: 2596 |ParentID: 708)
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (ID: 3560 |ParentID: 708)
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (ID: 1896 |ParentID: 708)
C:\Windows\system32\SearchIndexer.exe (ID: 780 |ParentID: 708)
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (ID: 3664 |ParentID: 708)
C:\Windows\system32\wbem\wmiprvse.exe (ID: 3292 |ParentID: 820)
C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe (ID: 4984 |ParentID: 708)
C:\Program Files (x86)\PDF Architect\ConversionService.exe (ID: 5716 |ParentID: 708)
C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe (ID: 5820 |ParentID: 708)
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (ID: 5112 |ParentID: 708)
C:\Program Files\iPod\bin\iPodService.exe (ID: 1344 |ParentID: 708)
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (ID: 3568 |ParentID: 708)
C:\Windows\system32\csrss.exe (ID: 5020 |ParentID: 180)
C:\Windows\System32\WinLogon.exe (ID: 7388 |ParentID: 180)
C:\Windows\System32\dwm.exe (ID: 2104 |ParentID: 7388)
C:\Windows\Explorer.EXE (ID: 392 |ParentID: 624)
C:\Windows\system32\taskhostex.exe (ID: 6608 |ParentID: 708)
C:\Program Files (x86)\Intel\irstrt\RapidStartConfig.exe (ID: 5732 |ParentID: 708)
C:\Program Files\Classic Shell\ClassicStartMenu.exe (ID: 1992 |ParentID: 1136)
C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe (ID: 6804 |ParentID: 820)
C:\Windows\System32\RuntimeBroker.exe (ID: 7852 |ParentID: 820)
C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (ID: 5692 |ParentID: 392)
C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe (ID: 3648 |ParentID: 5692)
C:\Windows\System32\hkcmd.exe (ID: 3964 |ParentID: 392)
C:\Windows\System32\igfxpers.exe (ID: 3220 |ParentID: 392)
C:\Program Files\IDT\WDM\sttray64.exe (ID: 3600 |ParentID: 392)
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (ID: 3324 |ParentID: 392)
C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE (ID: 640 |ParentID: 6012)
C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe (ID: 3024 |ParentID: 392)
C:\Program Files (x86)\Skype\Phone\Skype.exe (ID: 1592 |ParentID: 392)
C:\Users\alex\AppData\Roaming\Dropbox\bin\Dropbox.exe (ID: 6420 |ParentID: 392)
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (ID: 5640 |ParentID: 7644)
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (ID: 3012 |ParentID: 7644)
C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe (ID: 4848 |ParentID: 7644)
C:\Program Files (x86)\Druide\Antidote 7\Programmes32\agentantidote.exe (ID: 1200 |ParentID: 7644)
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe (ID: 6992 |ParentID: 708)
C:\Program Files (x86)\Druide\Antidote 7\Programmes64\AgentAntidote64.exe (ID: 6368 |ParentID: 7644)
C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe (ID: 4284 |ParentID: 7644)
C:\Program Files\AVAST Software\Avast\AvastUI.exe (ID: 6384 |ParentID: 7644)
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (ID: 7736 |ParentID: 7644)
C:\Program Files (x86)\iTunes\iTunesHelper.exe (ID: 6036 |ParentID: 7644)
C:\Program Files (x86)\Bluetooth Suite\BtTray.exe (ID: 6336 |ParentID: 5692)
C:\Program Files (x86)\Mozilla Firefox\firefox.exe (ID: 4496 |ParentID: 392)
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe (ID: 6516 |ParentID: 7736)
C:\Windows\system32\DllHost.exe (ID: 4128 |ParentID: 820)
C:\Windows\explorer.exe (ID: 1176 |ParentID: 820)
C:\Windows\explorer.exe (ID: 5472 |ParentID: 820)
C:\Windows\System32\WUDFHost.exe (ID: 4768 |ParentID: 524)
C:\Windows\explorer.exe (ID: 4672 |ParentID: 820)
C:\Windows\system32\SearchProtocolHost.exe (ID: 7488 |ParentID: 780)
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe (ID: 7948 |ParentID: 4496)
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe (ID: 6768 |ParentID: 7948)
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe (ID: 1908 |ParentID: 6768)
C:\Program Files\AVAST Software\Avast\setup\New\instup.exe (ID: 3640 |ParentID: 1472)
C:\Windows\system32\DllHost.exe (ID: 2516 |ParentID: 820)
C:\Windows\system32\vssvc.exe (ID: 4444 |ParentID: 708)
C:\Windows\System32\svchost.exe (ID: 7024 |ParentID: 708)
C:\Windows\system32\wbem\wmiprvse.exe (ID: 6360 |ParentID: 820)

################## | Recherche générique |

Supprimé! E:\MVI_2984.lnk
Supprimé! E:\MVI_2983.lnk
Supprimé! E:\.lnk
Supprimé! E:\.Trashes.lnk
Supprimé! E:\.fseventsd.lnk
Supprimé! E:\.Spotlight-V100.lnk
Supprimé! E:\DCIM.lnk
Supprimé! E:\trz50DA.tmp
Supprimé! G:\trz8BC1.tmp

(!) Fichiers temporaires supprimés.

################## | Registre |

Supprimé! HKU\S-1-5-21-1294572736-2129619039-4277557288-1001\Software\.\.\.\.\Mountpoints2\{a00559af-4c92-11e3-be90-2016d823f673}
Supprimé! HKU\S-1-5-21-1294572736-2129619039-4277557288-1001\Software\.\.\.\.\Mountpoints2\{d3d1bb3c-efbd-11e2-be75-2016d823f673}
Supprimé! HKU\S-1-5-21-1294572736-2129619039-4277557288-1001\Software\.\.\.\.\Mountpoints2\{d3d1c665-efbd-11e2-be75-2016d823f673}

################## | Regedit Run |

F2 - HKLM\..\Winlogon : [Shell] explorer.exe
F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - HKLM\..\Winlogon : [Userinit] userinit.exe,
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
F3 - HKCU\..\Winlogon : [Shell] Explorer.exe
04 - HKCU\..\Run : [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
04 - HKCU\..\Run : [AdobeBridge]
04 - HKCU\..\Run : [A7KGEquN] wscript.exe //B "C:\Users\alex\AppData\Local\Temp\A7KGEquN.vbs"
04 - HKCU\..\Run : [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
04 - HKCU\..\Run : [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
04 - HKLM\..\Run : [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
04 - HKLM\..\Run : [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
04 - HKLM\..\Run : [HP CoolSense] C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe -byrunkey
04 - HKLM\..\Run : [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
04 - HKLM\..\Run : [agentantidote.exe] "C:\Program Files (x86)\Druide\Antidote 7\Programmes32\agentantidote.exe" /LancementSession
04 - HKLM\..\Run : [agentantidote64.exe] "C:\Program Files (x86)\Druide\Antidote 7\Programmes64\agentantidote64.exe" /LancementSession
04 - HKLM\..\Run : [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
04 - HKLM\..\Run : [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
04 - HKLM\..\Run : [RIMBBLaunchAgent.exe] C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
04 - HKLM\..\Run : [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
04 - HKLM\..\Run : [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
04 - HKLM\..\Run : [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
04 - HKLM\..\RunOnce : []
04 - HKLM\..\Policies\Explorer\run : [BtvStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
04 - [x64] HKLM\..\Run : [IgfxTray] C:\Windows\system32\igfxtray.exe
04 - [x64] HKLM\..\Run : [HotKeysCmds] C:\Windows\system32\hkcmd.exe
04 - [x64] HKLM\..\Run : [Persistence] C:\Windows\system32\igfxpers.exe
04 - [x64] HKLM\..\Run : [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe
04 - [x64] HKLM\..\Run : [BtPreLoad] "C:\Program Files (x86)\Bluetooth Suite\BtPreLoad.exe"
04 - [x64] HKLM\..\Run : [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
04 - [x64] HKLM\..\Run : [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
04 - [x64] HKLM\..\RunOnce : [NCPluginUpdater] "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update
04 - [x64] HKLM\..\Policies\Explorer\run : [BtvStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
04 - HKU\S-1-5-21-1294572736-2129619039-4277557288-1001\..\Run : [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
04 - HKU\S-1-5-21-1294572736-2129619039-4277557288-1001\..\Run : [AdobeBridge]
04 - HKU\S-1-5-21-1294572736-2129619039-4277557288-1001\..\Run : [A7KGEquN] wscript.exe //B "C:\Users\alex\AppData\Local\Temp\A7KGEquN.vbs"
04 - HKU\S-1-5-21-1294572736-2129619039-4277557288-1001\..\Run : [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
04 - HKU\S-1-5-21-1294572736-2129619039-4277557288-1001\..\Run : [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
04 - HKU\S-1-5-18\..\Run : [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe

################## | Listing |

[18/07/2013 - 17:32:14 | SHD] - C:\$Recycle.Bin
[03/10/2013 - 03:08:34 | D] - C:\adobeTemp
[24/02/2014 - 18:36:40 | D] - C:\AdwCleaner
[07/10/2013 - 11:36:05 | D] - C:\ATI
[12/08/2013 - 16:18:09 | D] - C:\Autodesk
[04/08/2012 - 01:21:36 | SHD] - C:\Boot
[26/07/2012 - 05:44:30 | RASH | 389 Ko] - C:\bootmgr
[02/06/2012 - 16:30:55 | N | 0 Ko] - C:\BOOTNXT
[04/08/2012 - 01:21:37 | RASH | 8 Ko] - C:\BOOTSECT.BAK
[26/07/2012 - 09:22:08 | SHD] - C:\Documents and Settings
[12/04/2014 - 16:15:29 | ASH | 6622636 Ko] - C:\hiberfil.sys
[28/12/2012 - 11:44:24 | D] - C:\HP
[04/08/2012 - 00:39:51 | D] - C:\inetpub
[28/12/2012 - 11:29:08 | D] - C:\Intel
[20/07/2013 - 11:58:39 | RHD] - C:\MSOCache
[12/04/2014 - 16:15:31 | ASH | 1245184 Ko] - C:\pagefile.sys
[26/07/2012 - 09:33:46 | D] - C:\PerfLogs
[07/02/2014 - 22:37:49 | D] - C:\Program Files
[03/04/2014 - 05:45:34 | D] - C:\Program Files (x86)
[24/02/2014 - 19:42:21 | HD] - C:\ProgramData
[21/07/2013 - 11:44:44 | D] - C:\sources
[12/04/2014 - 16:15:31 | ASH | 262144 Ko] - C:\swapfile.sys
[18/08/2013 - 21:12:19 | D] - C:\SWSetup
[14/04/2014 - 15:43:08 | SHD] - C:\System Volume Information
[18/07/2013 - 17:30:02 | D] - C:\SYSTEM.SAV
[14/04/2014 - 15:42:59 | D] - C:\UsbFix
[14/04/2014 - 15:44:34 | A | 14 Ko | F9A6803803446CD0E910BAD11A658B59] - C:\UsbFix [Clean 2] MULDER_SAMOS.txt
[14/04/2014 - 15:40:08 | N | 12 Ko | 535F9FBCE0CA3120749FC95FA15274E2] - C:\UsbFix [Scan 1] MULDER_SAMOS.txt
[18/07/2013 - 17:28:22 | D] - C:\Users
[08/01/2014 - 00:45:58 | D] - C:\Windows
[18/07/2013 - 17:32:14 | SHD] - D:\$RECYCLE.BIN
[28/12/2012 - 13:09:56 | RSHD] - D:\boot
[26/07/2012 - 21:44:32 | RASH | 389 Ko] - D:\bootmgr
[26/07/2012 - 22:57:10 | N | 1319 Ko] - D:\bootmgr.efi
[28/12/2012 - 13:09:56 | D] - D:\EFI
[28/12/2012 - 13:09:56 | D] - D:\FactoryUpdate
[28/12/2012 - 13:09:56 | D] - D:\hp
[28/12/2012 - 13:09:57 | RSHD] - D:\preload
[28/12/2012 - 13:09:56 | RSD] - D:\recovery
[28/12/2012 - 13:09:56 | D] - D:\RM_Reserve
[21/07/2013 - 23:41:27 | SHD] - D:\System Volume Information
[05/02/2014 - 12:53:34 | N | 3050400 Ko] - E:\MVI_2984.MOV
[05/02/2014 - 12:39:16 | N | 4137858 Ko] - E:\MVI_2983.MOV
[08/02/2014 - 18:38:26 | SH | 4 Ko] - E:\._.Trashes
[13/02/2014 - 11:56:20 | D] - E:\DCIM
[08/02/2014 - 18:38:26 | SHD] - E:\.Trashes
[08/02/2014 - 18:38:26 | SHD] - E:\.fseventsd
[08/02/2014 - 18:38:26 | SHD] - E:\.Spotlight-V100
[17/02/2014 - 11:21:02 | N | 2 Ko] - E:\BOOTEX.LOG

################## | Vaccin |

D:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
E:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
G:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)

################## | E.O.F | https://www.usbfix.net/ - https://www.sosvirus.net/ |