############################## | UsbFix V 7.104 | [Recherche]

Utilisateur: Simon (Administrateur) # SIMON-PC
Mis à jour le 06/02/2013 par El Desaparecido
Lancé à 20:57:46 | 09/02/2013

Site Web: http://sosvirus.org/index.php
Contact: contact@sosvirus.org

PC: ASUSTeK Computer Inc. (N73SV) (x64-based PC)
CPU: Intel(R) Core(TM) i7-2670QM CPU @ 2.20GHz (2201)
RAM -> [Total : 8103 | Free : 5033]
BIOS: BIOS Date: 08/18/11 10:50:40 Ver: 04.06.03
BOOT: Normal boot

OS: Microsoft Windows 7 Édition Familiale Premium  (6.1.7601 64-Bit) # Service Pack 1
WB: Windows Internet Explorer 9.0.8112.16421

SC: Security Center Service [Enabled]
WU: Windows Update Service [Enabled]
AV: Norton Internet Security [Enabled | Updated]
FW: Windows FireWall Service [Enabled]

C:\ (%systemdrive%) -> Disque fixe # 302 Go (112 Go libre(s) - 37%) [OS] # NTFS
D:\ -> Disque fixe # 372 Go (290 Go libre(s) - 78%) [DATA] # NTFS
E:\ -> CD-ROM
F:\ -> CD-ROM
G:\ -> Disque fixe # 102 Mo (50 Mo libre(s) - 49%) [] # FAT
I:\ -> Disque fixe # 221 Go (16 Go libre(s) - 7%) [Simon] # NTFS

################## | Processus Actif |

C:\Windows\system32\csrss.exe (484)
C:\Windows\system32\wininit.exe (584)
C:\Windows\system32\csrss.exe (608)
C:\Windows\system32\winlogon.exe (660)
C:\Windows\system32\services.exe (688)
C:\Windows\system32\lsass.exe (728)
C:\Windows\system32\lsm.exe (736)
C:\Windows\system32\svchost.exe (852)
C:\Windows\system32\svchost.exe (944)
C:\Windows\System32\svchost.exe (156)
C:\Windows\System32\svchost.exe (500)
C:\Windows\system32\svchost.exe (472)
C:\Windows\system32\svchost.exe (960)
C:\Windows\system32\svchost.exe (1144)
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe (1332)
C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (1360)
C:\Windows\System32\spoolsv.exe (1440)
C:\Windows\system32\svchost.exe (1476)
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (1724)
C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe (1844)
C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe (1904)
C:\Windows\SysWOW64\PnkBstrA.exe (2012)
C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (1588)
C:\Windows\system32\svchost.exe (760)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (2076)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (2688)
C:\Windows\system32\svchost.exe (3024)
C:\Windows\system32\SearchIndexer.exe (2756)
C:\Windows\system32\svchost.exe (3688)
C:\Windows\system32\taskhost.exe (2988)
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (2832)
C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe (1560)
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe (3144)
C:\Windows\system32\Dwm.exe (3168)
C:\Windows\Explorer.EXE (3264)
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (136)
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe (1484)
C:\Program Files\Windows Media Player\wmpnetwk.exe (3820)
C:\Windows\System32\hkcmd.exe (3828)
C:\Windows\System32\igfxpers.exe (3864)
C:\Program Files\Elantech\ETDCtrl.exe (2668)
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (3884)
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (2644)
C:\Users\Simon\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (2324)
C:\Program Files\Elantech\ETDCtrlHelper.exe (732)
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (1500)
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (4024)
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (3208)
C:\Windows\system32\taskeng.exe (4212)
C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (4476)
C:\Program Files\P4G\BatteryLife.exe (4488)
C:\Windows\system32\taskeng.exe (4496)
C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe (4588)
C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe (4656)
C:\Windows\SysWOW64\ACEngSvr.exe (4932)
C:\Users\Simon\AppData\Local\Google\Chrome\Application\chrome.exe (360)
C:\Users\Simon\AppData\Local\Google\Chrome\Application\chrome.exe (4148)
C:\Users\Simon\AppData\Local\Google\Chrome\Application\chrome.exe (3928)
C:\Users\Simon\AppData\Local\Google\Chrome\Application\chrome.exe (4388)
C:\Users\Simon\AppData\Local\Google\Chrome\Application\chrome.exe (4180)
C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe (4404)
C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\SeaPort.exe (1184)
C:\Users\Simon\AppData\Local\Google\Chrome\Application\chrome.exe (4776)
C:\Users\Simon\AppData\Local\Google\Chrome\Application\chrome.exe (3548)
C:\Users\Simon\AppData\Local\Google\Chrome\Application\chrome.exe (3868)
C:\Users\Simon\AppData\Local\Google\Chrome\Application\chrome.exe (2764)
C:\UsbFix\Go.exe (2872)
C:\Windows\system32\wbem\wmiprvse.exe (5160)

################## | Éléments infectieux |

Présent! C:\Users\Simon\AppData\Roaming\Temp

################## | Registre |


################## | Mountpoints2 |

HKCU\.\.\.\.\Explorer\MountPoints2\{04ff061f-5f91-11e1-9bba-14dae9acf741}
Shell\AutoRun\Command = F:\Setup.exe

HKCU\.\.\.\.\Explorer\MountPoints2\{4e51fd3d-199f-11e1-9eec-14dae9acf741}
Shell\AutoRun\Command = Iomega Encryption Utility.exe

HKCU\.\.\.\.\Explorer\MountPoints2\{e492eef4-192e-11e1-ab15-14dae9acf741}
Shell\AutoRun\Command = F:\R2Auto.exe



################## | Vaccin |

(!) Cet ordinateur n'est pas vacciné!

################## | E.O.F | http://sosvirus.org |