Publicité
Publicité
Format du document : text/plain
Prévisualisation
############################## | UsbFix V 7.164 | [Suppression]
Utilisateur: Utilisateur (Administrateur) # PC
Mis � jour le05/02/2014 par El Desaparecido - Team SosVirus
Lanc� � 20:16:24 | 10/02/2014
Site Web : http://www.usbfix.net/
Changelog : http://www.usbfix.net/maj/
Support : http://www.sosvirus.net/
Upload Malware : http://www.sosvirus.net/upload_malware.php
Contact : http://www.usbfix.net/contact/
PC: FOXCONN (2AAF)
CPU: AMD Athlon(tm) II X2 245 Processor
RAM -> [Total : 2815 Mo| Free : 1905 Mo]
Bios: American Megatrends Inc.
Boot: Normal boot
OS: Microsoft Windows�7 �dition Familiale Premium (6.1.7601 64-Bit) Service Pack 1
WB: Windows Internet Explorer : 11.0.9600.16476
WB: Mozilla Firefox : 12.0
SC: Security Center [Enabled]
WU: Windows Update [Enabled]
AV: avast! Antivirus [Enabled | Updated]
AS: avast! Antivirus [Enabled | Updated]
AS: Windows Defender [Enabled | Updated]
FW: Windows FireWall [(!) Disabled]
AS: Malwarebytes' Anti-Malware : 1.75.0001
C:\ (%systemdrive%) -> Disque fixe # 455 Go (323 Go libre(s) - 71%) [COMPAQ] # NTFS
D:\ -> Disque fixe # 11 Go (1 Go libre(s) - 10%) [FACTORY_IMAGE] # NTFS
E:\ -> CD-ROM
F:\ -> Disque amovible # 2 Go (1 Go libre(s) - 73%) [] # FAT
G:\ -> Disque fixe # 233 Go (99 Go libre(s) - 42%) [UNTITLED] # NTFS
################## | Processus Actif |
C:\Windows\system32\csrss.exe (ID: 424 |ParentID: 364)
C:\Windows\system32\csrss.exe (ID: 500 |ParentID: 492)
C:\Windows\system32\wininit.exe (ID: 508 |ParentID: 364)
C:\Windows\system32\winlogon.exe (ID: 544 |ParentID: 492)
C:\Windows\system32\services.exe (ID: 608 |ParentID: 508)
C:\Windows\system32\lsass.exe (ID: 616 |ParentID: 508)
C:\Windows\system32\lsm.exe (ID: 624 |ParentID: 508)
C:\Windows\system32\svchost.exe (ID: 720 |ParentID: 608)
C:\Windows\system32\svchost.exe (ID: 820 |ParentID: 608)
C:\Windows\system32\atiesrxx.exe (ID: 888 |ParentID: 608)
C:\Windows\System32\svchost.exe (ID: 952 |ParentID: 608)
C:\Windows\System32\svchost.exe (ID: 984 |ParentID: 608)
C:\Windows\system32\svchost.exe (ID: 1008 |ParentID: 608)
C:\Windows\system32\svchost.exe (ID: 220 |ParentID: 608)
C:\Windows\system32\svchost.exe (ID: 1100 |ParentID: 608)
C:\Windows\system32\atieclxx.exe (ID: 1268 |ParentID: 888)
C:\Program Files\AVAST Software\Avast\AvastSvc.exe (ID: 1276 |ParentID: 608)
C:\Windows\SYSTEM32\WISPTIS.EXE (ID: 1292 |ParentID: 984)
C:\Windows\system32\taskeng.exe (ID: 1528 |ParentID: 220)
C:\Windows\System32\spoolsv.exe (ID: 1548 |ParentID: 608)
C:\Windows\system32\svchost.exe (ID: 1608 |ParentID: 608)
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (ID: 1720 |ParentID: 608)
C:\Program Files (x86)\Bonjour\mDNSResponder.exe (ID: 1768 |ParentID: 608)
C:\Program Files (x86)\Common Files\Nuance\dgnsvc.exe (ID: 1808 |ParentID: 608)
C:\Windows\SysWOW64\ezSharedSvcHost.exe (ID: 1844 |ParentID: 608)
C:\Windows\system32\svchost.exe (ID: 1900 |ParentID: 608)
C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe (ID: 1924 |ParentID: 608)
C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE (ID: 1948 |ParentID: 608)
c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe (ID: 1980 |ParentID: 608)
C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe (ID: 2012 |ParentID: 608)
C:\Program Files (x86)\Mobogenie\MgAssist.exe (ID: 1120 |ParentID: 608)
c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe (ID: 1444 |ParentID: 608)
C:\Windows\system32\svchost.exe (ID: 1472 |ParentID: 608)
C:\Program Files (x86)\Wajam\Updater\WajamUpdaterV3.exe (ID: 1560 |ParentID: 608)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (ID: 336 |ParentID: 608)
C:\Windows\System32\atwtusb.exe (ID: 1232 |ParentID: 608)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (ID: 2080 |ParentID: 336)
C:\Windows\system32\atwtusb.exe (ID: 2140 |ParentID: 1232)
C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe (ID: 2148 |ParentID: 608)
C:\Windows\system32\svchost.exe (ID: 2708 |ParentID: 608)
C:\Windows\System32\WUDFHost.exe (ID: 2828 |ParentID: 984)
C:\Windows\system32\taskhost.exe (ID: 2968 |ParentID: 608)
C:\Windows\system32\taskeng.exe (ID: 3004 |ParentID: 220)
C:\Windows\SYSTEM32\WISPTIS.EXE (ID: 3052 |ParentID: 984)
C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe (ID: 2556 |ParentID: 984)
C:\Windows\System32\rundll32.exe (ID: 3092 |ParentID: 720)
C:\Windows\system32\Dwm.exe (ID: 3172 |ParentID: 984)
C:\Windows\Explorer.EXE (ID: 3188 |ParentID: 3132)
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe (ID: 3208 |ParentID: 2556)
C:\Windows\servicing\TrustedInstaller.exe (ID: 3464 |ParentID: 608)
C:\Program Files (x86)\Mobogenie\DaemonProcess.exe (ID: 3516 |ParentID: 1120)
C:\Program Files (x86)\GoforFiles\GFFUpdater.exe (ID: 3528 |ParentID: 3004)
C:\Windows\system32\runonce.exe (ID: 3624 |ParentID: 3188)
C:\Windows\system32\wbem\wmiprvse.exe (ID: 3812 |ParentID: 720)
C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe (ID: 1204 |ParentID: 608)
C:\Windows\system32\sppsvc.exe (ID: 3276 |ParentID: 608)
C:\Windows\System32\svchost.exe (ID: 3392 |ParentID: 608)
C:\Program Files\Windows Media Player\wmpnetwk.exe (ID: 3912 |ParentID: 608)
################## | Regedit Run |
04 - HKCU\..\Run : [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
04 - HKCU\..\Run : [ISUSPM] C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe -scheduler
04 - HKCU\..\Run : [msnmsgr] ~"C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
04 - HKCU\..\Run : [Connexion SFR 9props.exe] "C:\Program Files (x86)\SFR\Kit\9props.exe" /trayicon
04 - HKCU\..\Run : [Neuf Media Center] "C:\Program Files (x86)\SFR\Media Center\MediaCenter.exe"
04 - HKCU\..\Run : [Spotify] "C:\Users\Utilisateur\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
04 - HKCU\..\Run : [Spotify Web Helper] "C:\Users\Utilisateur\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
04 - HKCU\..\Run : [Google Update] "C:\Users\Utilisateur\AppData\Local\Google\Update\GoogleUpdate.exe" /c
04 - HKCU\..\Run : [cacaoweb] "C:\Users\Utilisateur\AppData\Roaming\cacaoweb\cacaoweb.exe" -noplayer
04 - HKCU\..\Run : [NextLive] C:\Windows\SysWOW64\rundll32.exe "C:\Users\Utilisateur\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
04 - HKCU\..\Run : [flashmemory] wscript.exe //B "C:\Users\UTILIS~1\AppData\Local\Temp\flashmemory.vbe"
04 - HKLM\..\Run : [StartCCC] "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
04 - HKLM\..\Run : [HP Software Update] c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
04 - HKLM\..\Run : []
04 - HKLM\..\Run : [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
04 - HKLM\..\Run : [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
04 - HKLM\..\Run : [DNS7reminder] "C:\Program Files (x86)\Nuance\NaturallySpeaking11\Ereg\Ereg.exe" -r "C:\ProgramData\Nuance\NaturallySpeaking11\Ereg.ini
04 - HKLM\..\Run : [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
04 - HKLM\..\Run : [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
04 - HKLM\..\Run : [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
04 - HKLM\..\Run : [CanonQuickMenu] C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE /logon
04 - HKLM\..\Run : [Magic Desktop for HP notification] "C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe"
04 - HKLM\..\Run : [mobilegeni daemon] C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
04 - HKLM64\..\Run : [FullScreen] C:\BLOCK\CFG\flexbuild\FullScreen\launchFS.cmd
04 - HKLM64\..\Run : [hpsysdrv] c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe
04 - HKLM64\..\Run : []
04 - HKLM64\..\Run : [MacroKeyManager] WTMKM.exe
04 - HKLM64\..\Run : [flashmemory] wscript.exe //B "C:\Users\UTILIS~1\AppData\Local\Temp\flashmemory.vbe"
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-21-526703959-3673707853-276692237-1000\..\Run : [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
04 - HKU\S-1-5-21-526703959-3673707853-276692237-1000\..\Run : [ISUSPM] C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe -scheduler
04 - HKU\S-1-5-21-526703959-3673707853-276692237-1000\..\Run : [msnmsgr] ~"C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
04 - HKU\S-1-5-21-526703959-3673707853-276692237-1000\..\Run : [Connexion SFR 9props.exe] "C:\Program Files (x86)\SFR\Kit\9props.exe" /trayicon
04 - HKU\S-1-5-21-526703959-3673707853-276692237-1000\..\Run : [Neuf Media Center] "C:\Program Files (x86)\SFR\Media Center\MediaCenter.exe"
04 - HKU\S-1-5-21-526703959-3673707853-276692237-1000\..\Run : [Spotify] "C:\Users\Utilisateur\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
04 - HKU\S-1-5-21-526703959-3673707853-276692237-1000\..\Run : [Spotify Web Helper] "C:\Users\Utilisateur\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
04 - HKU\S-1-5-21-526703959-3673707853-276692237-1000\..\Run : [Google Update] "C:\Users\Utilisateur\AppData\Local\Google\Update\GoogleUpdate.exe" /c
04 - HKU\S-1-5-21-526703959-3673707853-276692237-1000\..\Run : [cacaoweb] "C:\Users\Utilisateur\AppData\Roaming\cacaoweb\cacaoweb.exe" -noplayer
04 - HKU\S-1-5-21-526703959-3673707853-276692237-1000\..\Run : [NextLive] C:\Windows\SysWOW64\rundll32.exe "C:\Users\Utilisateur\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
04 - HKU\S-1-5-21-526703959-3673707853-276692237-1000\..\Run : [flashmemory] wscript.exe //B "C:\Users\UTILIS~1\AppData\Local\Temp\flashmemory.vbe"
04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
################## | Recherche g�n�rique |
Supprim�! C:\Users\Utilisateur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\flashmemory.vbe
Supprim�! C:\Users\UTILIS~1\AppData\Local\Temp\flashmemory.vbe
Supprim�! F:\flashmemory.vbe
Supprim�! F:\STDBSTR.lnk
Supprim�! F:\STDBDATA.lnk
Supprim�! F:\RAMLIST.lnk
Supprim�! F:\playqueue.lnk
Supprim�! F:\SETSTOR.lnk
Supprim�! F:\Straight Life.lnk
Supprim�! F:\Battle Field.lnk
Supprim�! F:\FMRecord.lnk
Supprim�! F:\Fashion Nugget.lnk
Supprim�! F:\Video.lnk
Supprim�! F:\Handle with Care.lnk
Supprim�! F:\Photos.lnk
Supprim�! F:\MicRecord.lnk
Supprim�! F:\Disc 2.lnk
Supprim�! G:\Notepad.lnk
Supprim�! C:\Users\Utilisateur\AppData\Roaming\newnext.me
(!) Fichiers temporaires supprim�s.
################## | Registre |
R�par� ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|EnableLUA -> 1
R�par� ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|ConsentPromptBehaviorAdmin -> 5
R�par� ! HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer|EnableShellExecuteHooks -> 0
Supprim�! HKU\S-1-5-21-526703959-3673707853-276692237-1000\Software\Microsoft\Windows\CurrentVersion\Run|NextLive
Supprim�! HKU\S-1-5-21-526703959-3673707853-276692237-1000\Software\Microsoft\Windows\CurrentVersion\Run|flashmemory
Supprim�! HKLM64\Software\Microsoft\Windows\CurrentVersion\Run|flashmemory
################## | Listing |
[30/03/2011 - 10:42:38 | SHD] - C:\$Recycle.Bin
[24/01/2012 - 07:42:05 | N | 0 Ko] - C:\ab_1.gif
[08/12/2012 - 19:17:25 | N | 30 Ko | 7E7654C63198975D2CF24F3186D0A6DA] - C:\AdwCleaner[R1].txt
[08/12/2012 - 19:18:05 | N | 31 Ko | 95D6ADB1FE197DE8C98870028D1189DF] - C:\AdwCleaner[S1].txt
[17/01/2013 - 16:43:49 | D] - C:\AI_CS2_IE_NonRet
[20/03/2012 - 21:13:19 | D] - C:\AMD
[04/02/2014 - 15:36:59 | D] - C:\Config.Msi
[24/01/2012 - 07:42:00 | D] - C:\Data
[24/01/2012 - 07:42:05 | N | 0 Ko] - C:\del_1.gif
[24/01/2012 - 07:42:04 | N | 0 Ko] - C:\dir.bmp
[14/07/2009 - 06:08:56 | SHD] - C:\Documents and Settings
[18/01/2011 - 19:10:15 | N | 2 Ko] - C:\DPC11WESPRW662.INI
[24/01/2012 - 07:42:08 | D] - C:\e
[24/01/2012 - 07:42:05 | N | 0 Ko] - C:\edu.bmp
[24/01/2012 - 07:42:06 | N | 0 Ko] - C:\flk2.gif
[10/02/2014 - 20:14:41 | ASH | 2162136 Ko] - C:\hiberfil.sys
[24/01/2012 - 07:42:04 | N | 0 Ko] - C:\hj_1.gif
[19/01/2011 - 12:21:58 | D] - C:\hp
[01/04/2011 - 09:17:56 | D] - C:\IDE
[24/01/2012 - 07:42:06 | N | 0 Ko] - C:\mov_1.gif
[01/12/2006 - 22:37:14 | N | 884 Ko | 800B746FDC4D80469AFC7E5E9B510C9C] - C:\msdia80.dll
[01/04/2011 - 09:16:59 | RHD] - C:\MSOCache
[10/02/2014 - 20:14:46 | ASH | 2882852 Ko] - C:\pagefile.sys
[14/07/2009 - 04:20:08 | D] - C:\PerfLogs
[17/01/2013 - 16:53:03 | D] - C:\PhSp_CS2_UE_Ret
[16/10/2013 - 16:29:01 | D] - C:\Program Files
[06/02/2014 - 10:35:20 | D] - C:\Program Files (x86)
[06/02/2014 - 10:34:05 | HD] - C:\ProgramData
[24/01/2012 - 07:42:02 | N | 0 Ko] - C:\srch_1.gif
[24/01/2012 - 07:42:03 | N | 0 Ko] - C:\srch_ans_1.gif
[24/01/2012 - 07:42:03 | N | 0 Ko] - C:\srch_aud_1.gif
[24/01/2012 - 07:42:03 | N | 0 Ko] - C:\srch_img_1.gif
[24/01/2012 - 07:42:03 | N | 0 Ko] - C:\srch_loc_1.gif
[24/01/2012 - 07:42:06 | N | 0 Ko] - C:\srch_map_1.gif
[24/01/2012 - 07:42:05 | N | 0 Ko] - C:\srch_nws_1.gif
[24/01/2012 - 07:42:03 | N | 0 Ko] - C:\srch_sh_1.gif
[24/01/2012 - 07:42:06 | N | 0 Ko] - C:\srch_site_1.gif
[24/01/2012 - 07:42:06 | N | 0 Ko] - C:\srch_stk_1.gif
[24/01/2012 - 07:42:03 | N | 0 Ko] - C:\srch_vid_1.gif
[19/01/2011 - 12:22:18 | D] - C:\SWSETUP
[10/02/2014 - 19:12:09 | SHD] - C:\System Volume Information
[19/01/2011 - 12:11:13 | D] - C:\system.sav
[24/01/2012 - 07:42:06 | N | 0 Ko] - C:\trav_1.gif
[06/02/2014 - 10:33:17 | D] - C:\UsbFix
[10/02/2014 - 20:27:54 | A | 14 Ko | 6A0038AC5EAB65E2CD5E957AAC79BD43] - C:\UsbFix [Clean 2] PC.txt
[10/02/2014 - 19:23:26 | N | 14 Ko | C613A7BD0750DA7AD55541B25D162312] - C:\UsbFix [Scan 1] PC.txt
[30/03/2011 - 10:42:11 | D] - C:\Users
[10/02/2014 - 19:02:46 | D] - C:\Windows
[30/03/2011 - 10:42:38 | SHD] - D:\$RECYCLE.BIN
[30/03/2011 - 10:41:59 | SHD] - D:\boot
[13/07/2009 - 11:39:00 | ASH | 375 Ko] - D:\bootmgr
[30/03/2011 - 10:41:58 | N | 0 Ko] - D:\BT_COMPAQ.FLG
[19/01/2011 - 12:53:42 | N | 0 Ko] - D:\CSP.DAT
[19/01/2011 - 13:07:09 | N | 19 Ko] - D:\DeployRp.log
[30/03/2011 - 10:41:59 | D] - D:\hp
[30/03/2011 - 10:41:58 | N | 0 Ko] - D:\language.ini
[30/03/2011 - 10:41:59 | SHD] - D:\preload
[30/03/2011 - 10:41:59 | SD] - D:\Recovery
[19/01/2011 - 13:07:08 | N | 0 Ko] - D:\RPCONFIG.LOG
[30/03/2011 - 10:46:27 | SHD] - D:\System Volume Information
[01/02/2014 - 16:54:44 | D] - F:\Straight Life
[02/02/1980 - 04:34:42 | N | 4096 Ko] - F:\STDBSTR.DAT
[02/02/1980 - 04:34:42 | N | 0 Ko] - F:\STDBSTR.IDX
[02/02/1980 - 04:34:42 | N | 3692 Ko] - F:\STDBDATA.DAT
[01/02/2014 - 16:54:08 | D] - F:\Battle Field
[02/02/1980 - 04:34:42 | N | 0 Ko] - F:\STDBDATA.IDX
[02/02/1980 - 04:34:42 | D] - F:\FMRecord
[01/02/2014 - 16:58:10 | D] - F:\Fashion Nugget
[02/02/1980 - 04:34:42 | D] - F:\Video
[02/02/1980 - 04:34:44 | N | 547 Ko] - F:\RAMLIST.DAT
[01/02/2014 - 16:54:10 | D] - F:\Handle with Care
[02/02/1980 - 04:34:44 | D] - F:\Photos
[02/02/1980 - 04:34:44 | D] - F:\MicRecord
[02/02/1980 - 04:34:46 | N | 39 Ko] - F:\playqueue.dat
[02/02/1980 - 04:34:46 | N | 1 Ko] - F:\SETSTOR.DAT
[01/02/2014 - 17:10:42 | D] - F:\Disc 2
[10/02/2014 - 20:27:35 | SHD] - G:\$RECYCLE.BIN
[26/11/2013 - 17:04:45 | D] - G:\abduzeedo
[26/11/2013 - 17:18:20 | D] - G:\BTS Design de mode
[29/07/2013 - 01:14:21 | N | 0 Ko | 9445C6D0B65A06F4D7456C1BE009EE32] - G:\code.txt
[26/11/2013 - 17:01:54 | D] - G:\Culture design expos�
[26/11/2013 - 17:18:39 | SH | 0 Ko] - G:\desktop.ini
[26/11/2013 - 17:18:52 | D] - G:\Divers
[23/11/2013 - 16:07:13 | N | 23 Ko] - G:\d�veloppement.odt
[26/10/2013 - 16:12:24 | N | 47175 Ko] - G:\Extrait des Nouveaux Chiens de garde.mp4
[08/01/2014 - 10:34:51 | N | 0 Ko | 5302C4CC1F5E611F4800A8403656D500] - G:\faille arangement.txt
[24/01/2014 - 08:58:38 | D] - G:\faille programme
[26/11/2013 - 17:04:03 | D] - G:\Fashion served
[01/12/2013 - 23:49:13 | N | 2911 Ko] - G:\fiche projet perso.docx
[19/12/2013 - 18:32:54 | N | 2 Ko] - G:\finaldeux (1).HTM
[18/12/2013 - 17:45:39 | N | 2 Ko] - G:\finalun.htm
[26/11/2013 - 19:06:17 | D] - G:\Images
[26/11/2013 - 17:18:49 | D] - G:\INSPIRATION
[26/11/2013 - 17:04:19 | D] - G:\inspirations textiles
[11/11/2013 - 14:13:46 | N | 39 Ko] - G:\La politique et le num�rique.docx
[24/01/2014 - 08:56:00 | D] - G:\Le coquillage
[26/11/2013 - 17:18:51 | D] - G:\Le Grenier
[24/01/2014 - 08:55:02 | D] - G:\Le jardin des d�lices, vibration organique
[26/10/2013 - 16:08:20 | N | 45028 Ko] - G:\Les Nouveaux chiens de garde Les 10 premi�res minutes.mp4
[26/11/2013 - 19:05:57 | D] - G:\Musique
[28/10/2013 - 23:48:45 | N | 0 Ko | 727D1E88B89801BB6670FC1D2C550870] - G:\Ophtalmo lyon.txt
[26/11/2013 - 17:18:33 | D] - G:\Orientation Post Bts
[24/01/2014 - 08:53:08 | D] - G:\PHOTOS
[24/01/2014 - 08:58:36 | D] - G:\projet pro faille
[26/11/2013 - 17:03:12 | D] - G:\Projet pro super h�ro
[03/11/2013 - 22:55:06 | N | 22 Ko] - G:\rentrer en lozere pour noel 2.JPG
[10/02/2014 - 20:15:31 | SHD] - G:\System Volume Information
[26/11/2013 - 17:04:12 | D] - G:\Toeic
[26/11/2013 - 18:15:40 | D] - G:\Vid�os
[26/11/2013 - 17:02:40 | D] - G:\Worshop
[26/10/2013 - 16:09:33 | N | 23373 Ko] - G:\��Les Nouveaux chiens de garde�� (2011) [EXTRAITS].mp4
################## | Vaccin |
D:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
F:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
G:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
################## | E.O.F | http://www.usbfix.net/ - http://www.sosvirus.net |
Utilisateur: Utilisateur (Administrateur) # PC
Mis � jour le05/02/2014 par El Desaparecido - Team SosVirus
Lanc� � 20:16:24 | 10/02/2014
Site Web : http://www.usbfix.net/
Changelog : http://www.usbfix.net/maj/
Support : http://www.sosvirus.net/
Upload Malware : http://www.sosvirus.net/upload_malware.php
Contact : http://www.usbfix.net/contact/
PC: FOXCONN (2AAF)
CPU: AMD Athlon(tm) II X2 245 Processor
RAM -> [Total : 2815 Mo| Free : 1905 Mo]
Bios: American Megatrends Inc.
Boot: Normal boot
OS: Microsoft Windows�7 �dition Familiale Premium (6.1.7601 64-Bit) Service Pack 1
WB: Windows Internet Explorer : 11.0.9600.16476
WB: Mozilla Firefox : 12.0
SC: Security Center [Enabled]
WU: Windows Update [Enabled]
AV: avast! Antivirus [Enabled | Updated]
AS: avast! Antivirus [Enabled | Updated]
AS: Windows Defender [Enabled | Updated]
FW: Windows FireWall [(!) Disabled]
AS: Malwarebytes' Anti-Malware : 1.75.0001
C:\ (%systemdrive%) -> Disque fixe # 455 Go (323 Go libre(s) - 71%) [COMPAQ] # NTFS
D:\ -> Disque fixe # 11 Go (1 Go libre(s) - 10%) [FACTORY_IMAGE] # NTFS
E:\ -> CD-ROM
F:\ -> Disque amovible # 2 Go (1 Go libre(s) - 73%) [] # FAT
G:\ -> Disque fixe # 233 Go (99 Go libre(s) - 42%) [UNTITLED] # NTFS
################## | Processus Actif |
C:\Windows\system32\csrss.exe (ID: 424 |ParentID: 364)
C:\Windows\system32\csrss.exe (ID: 500 |ParentID: 492)
C:\Windows\system32\wininit.exe (ID: 508 |ParentID: 364)
C:\Windows\system32\winlogon.exe (ID: 544 |ParentID: 492)
C:\Windows\system32\services.exe (ID: 608 |ParentID: 508)
C:\Windows\system32\lsass.exe (ID: 616 |ParentID: 508)
C:\Windows\system32\lsm.exe (ID: 624 |ParentID: 508)
C:\Windows\system32\svchost.exe (ID: 720 |ParentID: 608)
C:\Windows\system32\svchost.exe (ID: 820 |ParentID: 608)
C:\Windows\system32\atiesrxx.exe (ID: 888 |ParentID: 608)
C:\Windows\System32\svchost.exe (ID: 952 |ParentID: 608)
C:\Windows\System32\svchost.exe (ID: 984 |ParentID: 608)
C:\Windows\system32\svchost.exe (ID: 1008 |ParentID: 608)
C:\Windows\system32\svchost.exe (ID: 220 |ParentID: 608)
C:\Windows\system32\svchost.exe (ID: 1100 |ParentID: 608)
C:\Windows\system32\atieclxx.exe (ID: 1268 |ParentID: 888)
C:\Program Files\AVAST Software\Avast\AvastSvc.exe (ID: 1276 |ParentID: 608)
C:\Windows\SYSTEM32\WISPTIS.EXE (ID: 1292 |ParentID: 984)
C:\Windows\system32\taskeng.exe (ID: 1528 |ParentID: 220)
C:\Windows\System32\spoolsv.exe (ID: 1548 |ParentID: 608)
C:\Windows\system32\svchost.exe (ID: 1608 |ParentID: 608)
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (ID: 1720 |ParentID: 608)
C:\Program Files (x86)\Bonjour\mDNSResponder.exe (ID: 1768 |ParentID: 608)
C:\Program Files (x86)\Common Files\Nuance\dgnsvc.exe (ID: 1808 |ParentID: 608)
C:\Windows\SysWOW64\ezSharedSvcHost.exe (ID: 1844 |ParentID: 608)
C:\Windows\system32\svchost.exe (ID: 1900 |ParentID: 608)
C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe (ID: 1924 |ParentID: 608)
C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE (ID: 1948 |ParentID: 608)
c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe (ID: 1980 |ParentID: 608)
C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe (ID: 2012 |ParentID: 608)
C:\Program Files (x86)\Mobogenie\MgAssist.exe (ID: 1120 |ParentID: 608)
c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe (ID: 1444 |ParentID: 608)
C:\Windows\system32\svchost.exe (ID: 1472 |ParentID: 608)
C:\Program Files (x86)\Wajam\Updater\WajamUpdaterV3.exe (ID: 1560 |ParentID: 608)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (ID: 336 |ParentID: 608)
C:\Windows\System32\atwtusb.exe (ID: 1232 |ParentID: 608)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (ID: 2080 |ParentID: 336)
C:\Windows\system32\atwtusb.exe (ID: 2140 |ParentID: 1232)
C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe (ID: 2148 |ParentID: 608)
C:\Windows\system32\svchost.exe (ID: 2708 |ParentID: 608)
C:\Windows\System32\WUDFHost.exe (ID: 2828 |ParentID: 984)
C:\Windows\system32\taskhost.exe (ID: 2968 |ParentID: 608)
C:\Windows\system32\taskeng.exe (ID: 3004 |ParentID: 220)
C:\Windows\SYSTEM32\WISPTIS.EXE (ID: 3052 |ParentID: 984)
C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe (ID: 2556 |ParentID: 984)
C:\Windows\System32\rundll32.exe (ID: 3092 |ParentID: 720)
C:\Windows\system32\Dwm.exe (ID: 3172 |ParentID: 984)
C:\Windows\Explorer.EXE (ID: 3188 |ParentID: 3132)
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe (ID: 3208 |ParentID: 2556)
C:\Windows\servicing\TrustedInstaller.exe (ID: 3464 |ParentID: 608)
C:\Program Files (x86)\Mobogenie\DaemonProcess.exe (ID: 3516 |ParentID: 1120)
C:\Program Files (x86)\GoforFiles\GFFUpdater.exe (ID: 3528 |ParentID: 3004)
C:\Windows\system32\runonce.exe (ID: 3624 |ParentID: 3188)
C:\Windows\system32\wbem\wmiprvse.exe (ID: 3812 |ParentID: 720)
C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe (ID: 1204 |ParentID: 608)
C:\Windows\system32\sppsvc.exe (ID: 3276 |ParentID: 608)
C:\Windows\System32\svchost.exe (ID: 3392 |ParentID: 608)
C:\Program Files\Windows Media Player\wmpnetwk.exe (ID: 3912 |ParentID: 608)
################## | Regedit Run |
04 - HKCU\..\Run : [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
04 - HKCU\..\Run : [ISUSPM] C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe -scheduler
04 - HKCU\..\Run : [msnmsgr] ~"C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
04 - HKCU\..\Run : [Connexion SFR 9props.exe] "C:\Program Files (x86)\SFR\Kit\9props.exe" /trayicon
04 - HKCU\..\Run : [Neuf Media Center] "C:\Program Files (x86)\SFR\Media Center\MediaCenter.exe"
04 - HKCU\..\Run : [Spotify] "C:\Users\Utilisateur\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
04 - HKCU\..\Run : [Spotify Web Helper] "C:\Users\Utilisateur\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
04 - HKCU\..\Run : [Google Update] "C:\Users\Utilisateur\AppData\Local\Google\Update\GoogleUpdate.exe" /c
04 - HKCU\..\Run : [cacaoweb] "C:\Users\Utilisateur\AppData\Roaming\cacaoweb\cacaoweb.exe" -noplayer
04 - HKCU\..\Run : [NextLive] C:\Windows\SysWOW64\rundll32.exe "C:\Users\Utilisateur\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
04 - HKCU\..\Run : [flashmemory] wscript.exe //B "C:\Users\UTILIS~1\AppData\Local\Temp\flashmemory.vbe"
04 - HKLM\..\Run : [StartCCC] "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
04 - HKLM\..\Run : [HP Software Update] c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
04 - HKLM\..\Run : []
04 - HKLM\..\Run : [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
04 - HKLM\..\Run : [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
04 - HKLM\..\Run : [DNS7reminder] "C:\Program Files (x86)\Nuance\NaturallySpeaking11\Ereg\Ereg.exe" -r "C:\ProgramData\Nuance\NaturallySpeaking11\Ereg.ini
04 - HKLM\..\Run : [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
04 - HKLM\..\Run : [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
04 - HKLM\..\Run : [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
04 - HKLM\..\Run : [CanonQuickMenu] C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE /logon
04 - HKLM\..\Run : [Magic Desktop for HP notification] "C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe"
04 - HKLM\..\Run : [mobilegeni daemon] C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
04 - HKLM64\..\Run : [FullScreen] C:\BLOCK\CFG\flexbuild\FullScreen\launchFS.cmd
04 - HKLM64\..\Run : [hpsysdrv] c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe
04 - HKLM64\..\Run : []
04 - HKLM64\..\Run : [MacroKeyManager] WTMKM.exe
04 - HKLM64\..\Run : [flashmemory] wscript.exe //B "C:\Users\UTILIS~1\AppData\Local\Temp\flashmemory.vbe"
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-21-526703959-3673707853-276692237-1000\..\Run : [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
04 - HKU\S-1-5-21-526703959-3673707853-276692237-1000\..\Run : [ISUSPM] C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe -scheduler
04 - HKU\S-1-5-21-526703959-3673707853-276692237-1000\..\Run : [msnmsgr] ~"C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
04 - HKU\S-1-5-21-526703959-3673707853-276692237-1000\..\Run : [Connexion SFR 9props.exe] "C:\Program Files (x86)\SFR\Kit\9props.exe" /trayicon
04 - HKU\S-1-5-21-526703959-3673707853-276692237-1000\..\Run : [Neuf Media Center] "C:\Program Files (x86)\SFR\Media Center\MediaCenter.exe"
04 - HKU\S-1-5-21-526703959-3673707853-276692237-1000\..\Run : [Spotify] "C:\Users\Utilisateur\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
04 - HKU\S-1-5-21-526703959-3673707853-276692237-1000\..\Run : [Spotify Web Helper] "C:\Users\Utilisateur\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
04 - HKU\S-1-5-21-526703959-3673707853-276692237-1000\..\Run : [Google Update] "C:\Users\Utilisateur\AppData\Local\Google\Update\GoogleUpdate.exe" /c
04 - HKU\S-1-5-21-526703959-3673707853-276692237-1000\..\Run : [cacaoweb] "C:\Users\Utilisateur\AppData\Roaming\cacaoweb\cacaoweb.exe" -noplayer
04 - HKU\S-1-5-21-526703959-3673707853-276692237-1000\..\Run : [NextLive] C:\Windows\SysWOW64\rundll32.exe "C:\Users\Utilisateur\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
04 - HKU\S-1-5-21-526703959-3673707853-276692237-1000\..\Run : [flashmemory] wscript.exe //B "C:\Users\UTILIS~1\AppData\Local\Temp\flashmemory.vbe"
04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
################## | Recherche g�n�rique |
Supprim�! C:\Users\Utilisateur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\flashmemory.vbe
Supprim�! C:\Users\UTILIS~1\AppData\Local\Temp\flashmemory.vbe
Supprim�! F:\flashmemory.vbe
Supprim�! F:\STDBSTR.lnk
Supprim�! F:\STDBDATA.lnk
Supprim�! F:\RAMLIST.lnk
Supprim�! F:\playqueue.lnk
Supprim�! F:\SETSTOR.lnk
Supprim�! F:\Straight Life.lnk
Supprim�! F:\Battle Field.lnk
Supprim�! F:\FMRecord.lnk
Supprim�! F:\Fashion Nugget.lnk
Supprim�! F:\Video.lnk
Supprim�! F:\Handle with Care.lnk
Supprim�! F:\Photos.lnk
Supprim�! F:\MicRecord.lnk
Supprim�! F:\Disc 2.lnk
Supprim�! G:\Notepad.lnk
Supprim�! C:\Users\Utilisateur\AppData\Roaming\newnext.me
(!) Fichiers temporaires supprim�s.
################## | Registre |
R�par� ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|EnableLUA -> 1
R�par� ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|ConsentPromptBehaviorAdmin -> 5
R�par� ! HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer|EnableShellExecuteHooks -> 0
Supprim�! HKU\S-1-5-21-526703959-3673707853-276692237-1000\Software\Microsoft\Windows\CurrentVersion\Run|NextLive
Supprim�! HKU\S-1-5-21-526703959-3673707853-276692237-1000\Software\Microsoft\Windows\CurrentVersion\Run|flashmemory
Supprim�! HKLM64\Software\Microsoft\Windows\CurrentVersion\Run|flashmemory
################## | Listing |
[30/03/2011 - 10:42:38 | SHD] - C:\$Recycle.Bin
[24/01/2012 - 07:42:05 | N | 0 Ko] - C:\ab_1.gif
[08/12/2012 - 19:17:25 | N | 30 Ko | 7E7654C63198975D2CF24F3186D0A6DA] - C:\AdwCleaner[R1].txt
[08/12/2012 - 19:18:05 | N | 31 Ko | 95D6ADB1FE197DE8C98870028D1189DF] - C:\AdwCleaner[S1].txt
[17/01/2013 - 16:43:49 | D] - C:\AI_CS2_IE_NonRet
[20/03/2012 - 21:13:19 | D] - C:\AMD
[04/02/2014 - 15:36:59 | D] - C:\Config.Msi
[24/01/2012 - 07:42:00 | D] - C:\Data
[24/01/2012 - 07:42:05 | N | 0 Ko] - C:\del_1.gif
[24/01/2012 - 07:42:04 | N | 0 Ko] - C:\dir.bmp
[14/07/2009 - 06:08:56 | SHD] - C:\Documents and Settings
[18/01/2011 - 19:10:15 | N | 2 Ko] - C:\DPC11WESPRW662.INI
[24/01/2012 - 07:42:08 | D] - C:\e
[24/01/2012 - 07:42:05 | N | 0 Ko] - C:\edu.bmp
[24/01/2012 - 07:42:06 | N | 0 Ko] - C:\flk2.gif
[10/02/2014 - 20:14:41 | ASH | 2162136 Ko] - C:\hiberfil.sys
[24/01/2012 - 07:42:04 | N | 0 Ko] - C:\hj_1.gif
[19/01/2011 - 12:21:58 | D] - C:\hp
[01/04/2011 - 09:17:56 | D] - C:\IDE
[24/01/2012 - 07:42:06 | N | 0 Ko] - C:\mov_1.gif
[01/12/2006 - 22:37:14 | N | 884 Ko | 800B746FDC4D80469AFC7E5E9B510C9C] - C:\msdia80.dll
[01/04/2011 - 09:16:59 | RHD] - C:\MSOCache
[10/02/2014 - 20:14:46 | ASH | 2882852 Ko] - C:\pagefile.sys
[14/07/2009 - 04:20:08 | D] - C:\PerfLogs
[17/01/2013 - 16:53:03 | D] - C:\PhSp_CS2_UE_Ret
[16/10/2013 - 16:29:01 | D] - C:\Program Files
[06/02/2014 - 10:35:20 | D] - C:\Program Files (x86)
[06/02/2014 - 10:34:05 | HD] - C:\ProgramData
[24/01/2012 - 07:42:02 | N | 0 Ko] - C:\srch_1.gif
[24/01/2012 - 07:42:03 | N | 0 Ko] - C:\srch_ans_1.gif
[24/01/2012 - 07:42:03 | N | 0 Ko] - C:\srch_aud_1.gif
[24/01/2012 - 07:42:03 | N | 0 Ko] - C:\srch_img_1.gif
[24/01/2012 - 07:42:03 | N | 0 Ko] - C:\srch_loc_1.gif
[24/01/2012 - 07:42:06 | N | 0 Ko] - C:\srch_map_1.gif
[24/01/2012 - 07:42:05 | N | 0 Ko] - C:\srch_nws_1.gif
[24/01/2012 - 07:42:03 | N | 0 Ko] - C:\srch_sh_1.gif
[24/01/2012 - 07:42:06 | N | 0 Ko] - C:\srch_site_1.gif
[24/01/2012 - 07:42:06 | N | 0 Ko] - C:\srch_stk_1.gif
[24/01/2012 - 07:42:03 | N | 0 Ko] - C:\srch_vid_1.gif
[19/01/2011 - 12:22:18 | D] - C:\SWSETUP
[10/02/2014 - 19:12:09 | SHD] - C:\System Volume Information
[19/01/2011 - 12:11:13 | D] - C:\system.sav
[24/01/2012 - 07:42:06 | N | 0 Ko] - C:\trav_1.gif
[06/02/2014 - 10:33:17 | D] - C:\UsbFix
[10/02/2014 - 20:27:54 | A | 14 Ko | 6A0038AC5EAB65E2CD5E957AAC79BD43] - C:\UsbFix [Clean 2] PC.txt
[10/02/2014 - 19:23:26 | N | 14 Ko | C613A7BD0750DA7AD55541B25D162312] - C:\UsbFix [Scan 1] PC.txt
[30/03/2011 - 10:42:11 | D] - C:\Users
[10/02/2014 - 19:02:46 | D] - C:\Windows
[30/03/2011 - 10:42:38 | SHD] - D:\$RECYCLE.BIN
[30/03/2011 - 10:41:59 | SHD] - D:\boot
[13/07/2009 - 11:39:00 | ASH | 375 Ko] - D:\bootmgr
[30/03/2011 - 10:41:58 | N | 0 Ko] - D:\BT_COMPAQ.FLG
[19/01/2011 - 12:53:42 | N | 0 Ko] - D:\CSP.DAT
[19/01/2011 - 13:07:09 | N | 19 Ko] - D:\DeployRp.log
[30/03/2011 - 10:41:59 | D] - D:\hp
[30/03/2011 - 10:41:58 | N | 0 Ko] - D:\language.ini
[30/03/2011 - 10:41:59 | SHD] - D:\preload
[30/03/2011 - 10:41:59 | SD] - D:\Recovery
[19/01/2011 - 13:07:08 | N | 0 Ko] - D:\RPCONFIG.LOG
[30/03/2011 - 10:46:27 | SHD] - D:\System Volume Information
[01/02/2014 - 16:54:44 | D] - F:\Straight Life
[02/02/1980 - 04:34:42 | N | 4096 Ko] - F:\STDBSTR.DAT
[02/02/1980 - 04:34:42 | N | 0 Ko] - F:\STDBSTR.IDX
[02/02/1980 - 04:34:42 | N | 3692 Ko] - F:\STDBDATA.DAT
[01/02/2014 - 16:54:08 | D] - F:\Battle Field
[02/02/1980 - 04:34:42 | N | 0 Ko] - F:\STDBDATA.IDX
[02/02/1980 - 04:34:42 | D] - F:\FMRecord
[01/02/2014 - 16:58:10 | D] - F:\Fashion Nugget
[02/02/1980 - 04:34:42 | D] - F:\Video
[02/02/1980 - 04:34:44 | N | 547 Ko] - F:\RAMLIST.DAT
[01/02/2014 - 16:54:10 | D] - F:\Handle with Care
[02/02/1980 - 04:34:44 | D] - F:\Photos
[02/02/1980 - 04:34:44 | D] - F:\MicRecord
[02/02/1980 - 04:34:46 | N | 39 Ko] - F:\playqueue.dat
[02/02/1980 - 04:34:46 | N | 1 Ko] - F:\SETSTOR.DAT
[01/02/2014 - 17:10:42 | D] - F:\Disc 2
[10/02/2014 - 20:27:35 | SHD] - G:\$RECYCLE.BIN
[26/11/2013 - 17:04:45 | D] - G:\abduzeedo
[26/11/2013 - 17:18:20 | D] - G:\BTS Design de mode
[29/07/2013 - 01:14:21 | N | 0 Ko | 9445C6D0B65A06F4D7456C1BE009EE32] - G:\code.txt
[26/11/2013 - 17:01:54 | D] - G:\Culture design expos�
[26/11/2013 - 17:18:39 | SH | 0 Ko] - G:\desktop.ini
[26/11/2013 - 17:18:52 | D] - G:\Divers
[23/11/2013 - 16:07:13 | N | 23 Ko] - G:\d�veloppement.odt
[26/10/2013 - 16:12:24 | N | 47175 Ko] - G:\Extrait des Nouveaux Chiens de garde.mp4
[08/01/2014 - 10:34:51 | N | 0 Ko | 5302C4CC1F5E611F4800A8403656D500] - G:\faille arangement.txt
[24/01/2014 - 08:58:38 | D] - G:\faille programme
[26/11/2013 - 17:04:03 | D] - G:\Fashion served
[01/12/2013 - 23:49:13 | N | 2911 Ko] - G:\fiche projet perso.docx
[19/12/2013 - 18:32:54 | N | 2 Ko] - G:\finaldeux (1).HTM
[18/12/2013 - 17:45:39 | N | 2 Ko] - G:\finalun.htm
[26/11/2013 - 19:06:17 | D] - G:\Images
[26/11/2013 - 17:18:49 | D] - G:\INSPIRATION
[26/11/2013 - 17:04:19 | D] - G:\inspirations textiles
[11/11/2013 - 14:13:46 | N | 39 Ko] - G:\La politique et le num�rique.docx
[24/01/2014 - 08:56:00 | D] - G:\Le coquillage
[26/11/2013 - 17:18:51 | D] - G:\Le Grenier
[24/01/2014 - 08:55:02 | D] - G:\Le jardin des d�lices, vibration organique
[26/10/2013 - 16:08:20 | N | 45028 Ko] - G:\Les Nouveaux chiens de garde Les 10 premi�res minutes.mp4
[26/11/2013 - 19:05:57 | D] - G:\Musique
[28/10/2013 - 23:48:45 | N | 0 Ko | 727D1E88B89801BB6670FC1D2C550870] - G:\Ophtalmo lyon.txt
[26/11/2013 - 17:18:33 | D] - G:\Orientation Post Bts
[24/01/2014 - 08:53:08 | D] - G:\PHOTOS
[24/01/2014 - 08:58:36 | D] - G:\projet pro faille
[26/11/2013 - 17:03:12 | D] - G:\Projet pro super h�ro
[03/11/2013 - 22:55:06 | N | 22 Ko] - G:\rentrer en lozere pour noel 2.JPG
[10/02/2014 - 20:15:31 | SHD] - G:\System Volume Information
[26/11/2013 - 17:04:12 | D] - G:\Toeic
[26/11/2013 - 18:15:40 | D] - G:\Vid�os
[26/11/2013 - 17:02:40 | D] - G:\Worshop
[26/10/2013 - 16:09:33 | N | 23373 Ko] - G:\��Les Nouveaux chiens de garde�� (2011) [EXTRAITS].mp4
################## | Vaccin |
D:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
F:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
G:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
################## | E.O.F | http://www.usbfix.net/ - http://www.sosvirus.net |