[b]############################## | UsbFix V 7.184 | [Nettoyage][/b]

Utilisateur: Chloé (Administrateur) # CLOCHETTE
Mis à jour le 20/10/2014 par El Desaparecido - SosVirus
Lancé à 22:10:25 | 31/10/2014

Site Web : [url=http://www.usbfix.net/]http://www.usbfix.net/[/url]
Changelog : [url=http://www.usbfix.net/maj/]http://www.usbfix.net/maj/[/url]
Assistance : [url=http://www.sosvirus.net/forum-virus-securite.html]http://www.sosvirus.net/forum-virus-securite.html[/url]
Upload Malware : [url=http://www.sosvirus.net/upload_malware.php]http://www.sosvirus.net/upload_malware.php[/url]
Détection en Live : [url=http://comment-supprimer.fr/]http://comment-supprimer.fr/[/url]
Contact : [url=http://www.usbfix.net/contact/]http://www.usbfix.net/contact/[/url]

[b]################## | System information |[/b]

MB: Intel (PT10F) 
CPU: Intel(R) Core(TM) i3-3110M CPU @ 2.40GHz
GC: Intel(R) HD Graphics 4000
RAM -> [Total : 3971 Mo | Free : 2661 Mo]
Bios: Insyde Corp.
Boot: Normal boot

OS: Microsoft™ Windows 8.1 (6.3.9600 64-Bit) 
WB: Internet Explorer : 11.00.9600.16384
WB: Mozilla Firefox : 32.0.3

[b]################## | Security Information |[/b]

AV: Avira Desktop [Actif |A jour]
AV: Windows Defender [[b](!) Désactivé[/b] |A jour]
AS: Avira Desktop [Actif |A jour]
AS: Windows Defender [[b](!) Désactivé[/b] |A jour]
AS: Malwarebytes Anti-Malware : 2.0.3.1025
FW: Windows Firewall [Actif]
SC: Security Center [Actif]
WU: Windows Update [Actif]

[b]################## | Disk Information |[/b]

C:\ (%SystemDrive%) -> Disque fixe # 455 Go (411 Go libre(s) - 90%) [TI31214900A] # NTFS
F:\ -> Disque fixe # 466 Go (69 Go libre(s) - 15%) [LG External HDD] # NTFS

[b]################## | Recherche générique |[/b]

Supprimé! F:\WW\Guide Alimentaire PP2.pdf
Supprimé! F:\WW\liste-alimentaire-propoints-weight-watchers.pdf
Supprimé! F:\WW\Livre_recettes_des_beaux_jours.pdf
Supprimé! F:\WW\Mes recettes propoints Weight Watcher.pdf
Supprimé! F:\WW\wet liste verte.pdf
Supprimé! F:\WW

(!) Fichiers temporaires supprimés. (19.4463405609131 MB)

[b]################## | Registre |[/b]


[b]################## | Regedit Run |[/b]

F2 - HKLM\..\Winlogon : [Shell] explorer.exe
F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - HKLM\..\Winlogon : [Userinit] userinit.exe
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\System32\Userinit.exe,
04 - HKCU\..\Run : [Spotify Web Helper] "C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe"
04 - HKCU\..\Run : [HP Deskjet 3050A J611 series (NET)] "C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN26Q1FJMS05WK:NW" -scfn "HP Deskjet 3050A J611 series (NET)" -AutoStart 1
04 - HKCU\..\Run : [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
04 - HKLM\..\Run : [1.TPUReg] "C:\Program Files (x86)\TOSHIBA\PasswordUtility\readLM.exe"
04 - HKLM\..\Run : [TSVU] "c:\Program Files\TOSHIBA\TOSHIBA Smart View Utility\TosSmartViewLauncher.exe"
04 - HKLM\..\Run : [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
04 - HKLM\..\Run : [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
04 - [x64] HKLM\..\Run : [IgfxTray] "C:\Windows\system32\igfxtray.exe"
04 - [x64] HKLM\..\Run : [HotKeysCmds] "C:\Windows\system32\hkcmd.exe"
04 - [x64] HKLM\..\Run : [Persistence] "C:\Windows\system32\igfxpers.exe"
04 - [x64] HKLM\..\Run : [TSSSrv] C:\Program Files (x86)\TOSHIBA\System Setting\TSSSrv.exe
04 - [x64] HKLM\..\Run : [TecoResident] C:\Program Files\TOSHIBA\Teco\TecoResident.exe
04 - [x64] HKLM\..\Run : [TosWaitSrv] %ProgramFiles%\TOSHIBA\TPHM\TosWaitSrv.exe
04 - [x64] HKLM\..\Run : [TCrdMain] C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe
04 - [x64] HKLM\..\Run : [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
04 - HKU\S-1-5-21-884750214-2601781503-1671613777-1001\..\Run : [Spotify Web Helper] "C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe"
04 - HKU\S-1-5-21-884750214-2601781503-1671613777-1001\..\Run : [HP Deskjet 3050A J611 series (NET)] "C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN26Q1FJMS05WK:NW" -scfn "HP Deskjet 3050A J611 series (NET)" -AutoStart 1
04 - HKU\S-1-5-21-884750214-2601781503-1671613777-1001\..\Run : [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR

[b]################## | UsbFix - Information |[/b]

Info : [url=https://www.youtube.com/watch?v=vUZYYASd7FE]Comment supprimer l'infection des raccourcis sur USB ? (Video)[/url]
Info : [url=http://www.en.usbfix.net/2014/03/remove-shortcut-virus-usb/]L'infection des raccourcis USB, c'est quoi ?[/url]

[b]################## | Hijack |[/b]


[b]################## | C:\ %SystemDrive% - Disque Fixe (NTFS) |[/b]

[31/10/2014 - 21:56:46 | ASH | 3253264 Ko] - C:\hiberfil.sys
[31/10/2014 - 21:56:48 | ASH | 720896 Ko] - C:\pagefile.sys
[31/10/2014 - 21:56:51 | ASH | 262144 Ko] - C:\swapfile.sys
[27/10/2014 - 23:50:14 | D] - C:\Config.Msi
[25/02/2014 - 22:36:44 | SHD] - C:\$RECYCLE.BIN
[28/10/2014 - 12:00:55 | A | 1 Ko] - C:\PhysicalDisk0_MBR.bin
[18/06/2013 - 13:18:29 | N | 0 Ko] - C:\BOOTNXT
[22/08/2013 - 06:31:45 | RASH | 418 Ko] - C:\bootmgr
[22/08/2013 - 15:45:52 | SHD] - C:\Documents and Settings
[22/08/2013 - 16:22:35 | D] - C:\PerfLogs
[16/09/2013 - 23:13:23 | SHD] - C:\Recovery
[17/09/2013 - 23:53:56 | AD] - C:\Toshiba
[17/12/2013 - 02:14:21 | D] - C:\Intel
[12/02/2014 - 22:39:25 | RD] - C:\Users
[14/10/2014 - 21:13:20 | RD] - C:\Program Files
[27/10/2014 - 11:48:08 | SHD] - C:\System Volume Information
[27/10/2014 - 23:08:37 | RD] - C:\Program Files (x86)
[27/10/2014 - 23:49:08 | HD] - C:\ProgramData
[27/10/2014 - 23:49:14 | D] - C:\AdwCleaner
[31/10/2014 - 21:55:20 | AD] - C:\Windows
[31/10/2014 - 22:05:27 | D] - C:\UsbFix

[b]################## | F:\ - Disque Fixe (NTFS) |[/b]

[09/05/2014 - 12:34:34 | A | 1804628 Ko] - F:\GOPRO.wmv
[21/10/2012 - 18:50:31 | A | 61 Ko] - F:\cc_20121021_194916.reg
[01/06/2014 - 16:14:49 | A | 22453 Ko] - F:\Evangiles de quenouilles.pdf
[01/06/2014 - 16:15:14 | A | 3934 Ko] - F:\Les_évangiles_des_quenouilles.pdf
[21/06/2013 - 15:15:43 | A | 1101824 Ko] - F:\buda_vfs.img
[04/08/2010 - 04:59:42 | A | 1568 Ko] - F:\Setup.exe
[05/10/2014 - 20:10:44 | SHD] - F:\$RECYCLE.BIN
[21/02/2011 - 14:03:24 | A | 721560 Ko] - F:\WWE.Elimination.Chamber.2011.PPV.HDTV.XviD-FWG.pt1.avi
[01/03/2011 - 18:30:40 | A | 764265 Ko] - F:\wwe.monday.night.raw.2011.02.28.hdtv.xvid-w4f.avi
[19/10/2010 - 12:26:50 | D] - F:\BackItUp&Burn Essentials
[19/07/2011 - 17:55:21 | D] - F:\HOMNIS loyer
[24/04/2012 - 12:11:06 | D] - F:\i pod mehdi
[21/06/2012 - 17:28:28 | RD] - F:\JEUX
[24/12/2012 - 15:48:02 | D] - F:\VHS
[12/03/2013 - 19:21:00 | D] - F:\iphone hafedh
[17/05/2013 - 14:09:47 | D] - F:\PHOTOS vieilles
[26/12/2013 - 22:17:06 | SHD] - F:\System Volume Information
[04/05/2014 - 19:48:17 | D] - F:\I PAD livres
[20/07/2014 - 14:57:29 | D] - F:\GENEALOGIE
[07/08/2014 - 09:31:57 | D] - F:\MUSIQUE
[28/08/2014 - 20:04:49 | D] - F:\DIVERS DRIVER
[29/08/2014 - 12:46:41 | D] - F:\FRANCIS photos
[29/08/2014 - 12:58:19 | D] - F:\ROGER photos
[01/09/2014 - 13:16:46 | D] - F:\MAGAZINE
[10/10/2014 - 19:00:28 | D] - F:\Films
[16/10/2014 - 18:40:24 | D] - F:\TITINE
[16/10/2014 - 18:41:17 | RD] - F:\Mes images

[b]################## | Vaccin |[/b]

C:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
F:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)

[b]################## | E.O.F | [url=http://www.sosvirus.net/]http://www.sosvirus.net/[/url] | [url=http://www.usbfix.net/]http://www.usbfix.net/[/url] |[/b]