############################## | UsbFix V 7.127 | [Suppression]

Utilisateur: SERGE (Administrateur) # PC-SERGE
Mis � jour le 05/06/2013 par El Desaparecido
Lanc� � 12:04:47 | 18/06/2013

Site Web: http://sosvirus.org/
Upload Malware: http://upload.sosvirus.org/
Contact: contact@sosvirus.org

PC: ASUSTeK COMPUTER INC. (K75VM) (x64-based PC)
CPU: Intel(R) Core(TM) i7-3610QM CPU @ 2.30GHz (2301)
RAM -> [Total : 8078 | Free : 5808]
BIOS: BIOS Date: 03/14/12 14:45:00 Ver: 04.06.05
BOOT: Normal boot

OS: Microsoft Windows�7 �dition Familiale Premium (6.1.7601 64-Bit) # Service Pack 1
WB: Windows Internet Explorer 10.0.9200.16618

SC: Security Center Service [Enabled]
WU: Windows Update Service [(!) Disabled]
AV: Bitdefender Antivirus [Enabled | Updated]
FW: Windows FireWall Service [(!) Disabled]

C:\ (%systemdrive%) -> Disque fixe # 300 Go (177 Go libre(s) - 59%) [OS] # NTFS
D:\ -> Disque fixe # 197 Go (95 Go libre(s) - 48%) [LOGICIELS & VIDEOS] # NTFS
E:\ -> Disque amovible # 4 Go (3 Go libre(s) - 89%) [SERGE 4GO] # FAT32
F:\ -> CD-ROM
G:\ -> Disque fixe # 492 Go (217 Go libre(s) - 44%) [MYP-Informatique] # NTFS
I:\ -> Disque fixe # 439 Go (288 Go libre(s) - 65%) [MYP-Docs] # NTFS
T:\ -> Disque fixe # 176 Go (157 Go libre(s) - 89%) [FORMATION & RESSOURCES] # NTFS

################## | El Desaparecido Section |

HKLM\SOFTWARE | Run : [] -
HKLM\SOFTWARE | Run : [SunJavaUpdateSched] - "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
HKLM\SOFTWARE\wow6432Node | Run : [] -
HKLM\SOFTWARE\wow6432Node | Run : [SunJavaUpdateSched] - "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
HKLM\SOFTWARE | RunOnce : [] -
HKLM\SOFTWARE\wow6432Node | RunOnce : [] -
HKU\S-1-5-19\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-20\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-19\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe
HKU\S-1-5-20\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe

################## | Processus Stopp�s |

Stopp�! C:\Program Files\Bitdefender\Bitdefender 2012\vsserv.exe (528)
Stopp�! C:\Windows\system32\WLANExt.exe (1856)
Stopp�! C:\Program Files\Bitdefender\Bitdefender 2012\updatesrv.exe (2080)
Stopp�! C:\Windows\system32\taskhost.exe (3272)
Stopp�! C:\Program Files\Bitdefender\Bitdefender 2012\bdagent.exe (3300)
Stopp�! C:\Windows\System32\igfxpers.exe (3852)
Stopp�! C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (2676)
Stopp�! C:\Windows\system32\SearchIndexer.exe (4000)
Stopp�! C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (4112)
Stopp�! C:\PROGRA~1\Eraser\Eraser.exe (2456)
Stopp�! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (4352)
Stopp�! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (3936)
Stopp�! C:\Windows\System32\WUDFHost.exe (3268)
Stopp�! C:\Windows\system32\taskhost.exe (4092)
Stopp�! C:\Windows\system32\wbengine.exe (4308)
Stopp�! C:\Windows\system32\vssvc.exe (3772)
Stopp�! C:\Windows\System32\vds.exe (3708)

################## | �l�ments infectieux |

Supprim�! G:\Sauvegarde dossier www 21-01-13\jquery.js
Supprim�! C:\Program Files (x86)\GUM6F43.tmp
Supprim�! Y:\desktop.ini
Supprim�! Y:\Thumbs.db

(!) Fichiers temporaires supprim�s.

################## | Registre |

Supprim�! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableTaskMgr

################## | Mountpoints2 |

Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{00a9a70f-cb86-11e1-ac80-685d43118a31}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{0272669e-692e-11e2-be2a-685d43118a31}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{027266a0-692e-11e2-be2a-685d43118a31}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{027266a5-692e-11e2-be2a-685d43118a31}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{1452d014-66c8-11e2-9d9f-685d43118a31}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{1452d031-66c8-11e2-9d9f-685d43118a31}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{14f3abbb-be0a-11e2-b4b3-dd3a9ba93e34}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{14f3abc4-be0a-11e2-b4b3-dd3a9ba93e34}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{14f3abcd-be0a-11e2-b4b3-dd3a9ba93e34}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{14f3abe1-be0a-11e2-b4b3-dd3a9ba93e34}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{21a49095-5bd9-11e2-8557-f94d8218c0b0}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{2f0ab24b-0bcc-11e2-80c1-685d43118a31}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{2f0ab24d-0bcc-11e2-80c1-685d43118a31}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{4104a62e-c2bc-11e2-b4d3-80c2dac0fabb}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{433da58b-742d-11e2-b735-685d43118a31}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{5a793224-06dc-11e2-a070-685d43118a31}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{6047230d-c73e-11e1-983e-685d43118a31}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{69c58105-fb1d-11e1-a13c-685d43118a31}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{7815ac1a-1b61-11e2-9d76-685d43118a31}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{786e1630-d896-11e1-b9cc-685d43118a31}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{7b18a799-703f-11e2-9f3c-685d43118a31}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{7c602126-c836-11e2-8bf8-afe9ea55deb6}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{84a49ba7-36ef-11e2-a00d-685d43118a31}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{85aed0b0-ccec-11e1-bbd6-685d43118a31}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{8be3005c-5033-11e2-8522-685d43118a31}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{99517aab-b6f6-11e2-af5c-685d43118a31}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{99517ac0-b6f6-11e2-af5c-685d43118a31}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{9d099507-eb99-11e1-a661-685d43118a31}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{a7a5803c-ceb1-11e1-9206-685d43118a31}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{b280b38a-2a52-11e2-a8a2-685d43118a31}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{bba39233-cd8c-11e1-a723-685d43118a31}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{bbfaa107-24d3-11e2-83e9-685d43118a31}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{bdaefcef-3f88-11e2-a1ae-685d43118a31}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{bdaefcf1-3f88-11e2-a1ae-685d43118a31}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{be69b998-ce54-11e1-b26b-685d43118a31}
Supprim�! HKCU\.\.\.\.\Explorer\MountPoints2\{df747f80-d4d2-11e1-a1d7-685d43118a31}

################## | Listing |

[07/11/2012 - 12:36:02 | SHD ] C:\$Recycle.Bin
[21/05/2013 - 15:07:09 | N | 328] C:\.htaccess
[18/06/2013 - 02:40:36 | N | 53411] C:\bdlog.txt
[15/08/2012 - 14:28:18 | N | 2510608] C:\bdr-bz01
[13/06/2013 - 00:45:42 | N | 636] C:\bdr-cf01
[31/10/2012 - 14:05:26 | N | 37133166] C:\bdr-im01.gz
[13/06/2013 - 00:45:42 | N | 253404] C:\bdr-ld01
[13/06/2013 - 00:45:42 | N | 9216] C:\bdr-ld01.mbr
[29/07/2009 - 08:03:34 | SHD ] C:\Boot
[14/07/2009 - 03:38:58 | RASH | 383562] C:\bootmgr
[29/07/2009 - 08:03:37 | N | 8192] C:\BOOTSECT.BAK
[17/06/2013 - 23:15:49 | D ] C:\Config.Msi
[17/06/2013 - 23:19:55 | N | 954] C:\DelFix.txt
[14/07/2009 - 07:08:56 | SHD ] C:\Documents and Settings
[22/04/2012 - 04:26:30 | D ] C:\eSupport
[18/11/2012 - 15:44:21 | D ] C:\FFOutput
[16/05/2013 - 19:43:49 | D ] C:\Fichiers inconnus A conserver
[18/06/2013 - 10:39:19 | N | 2040] C:\IFRToolLog.txt
[23/10/2012 - 14:57:57 | D ] C:\inetpub
[27/06/2012 - 20:44:31 | D ] C:\Intel
[28/06/2012 - 15:54:02 | RHD ] C:\MSOCache
[16/05/2013 - 19:46:26 | N | 17] C:\open.ini
[18/06/2013 - 10:35:52 | ASH | 12705595392] C:\pagefile.sys
[25/07/2012 - 21:43:31 | D ] C:\PerfLogs
[13/06/2013 - 00:36:54 | D ] C:\Program Files
[17/06/2013 - 23:19:55 | D ] C:\Program Files (x86)
[17/06/2013 - 13:21:53 | HD ] C:\ProgramData
[29/07/2009 - 07:22:15 | SHD ] C:\Recovery
[17/06/2013 - 23:14:38 | SHD ] C:\System Volume Information
[27/12/2012 - 22:30:34 | D ] C:\Temp
[18/06/2013 - 12:05:50 | D ] C:\UsbFix
[18/06/2013 - 12:05:57 | A | 8252] C:\UsbFix [Clean 2] PC-SERGE.txt
[18/06/2013 - 12:00:28 | N | 11011] C:\UsbFix [Scan 2] PC-SERGE.txt
[16/06/2013 - 18:56:29 | D ] C:\Users
[13/06/2013 - 00:00:23 | D ] C:\wamp
[17/06/2013 - 13:12:11 | D ] C:\Windows
[07/11/2012 - 12:36:02 | SHD ] D:\$RECYCLE.BIN
[21/04/2013 - 12:55:25 | N | 2988916] D:\Backup-Microsoft_Office_2010-20130421T125525.opa
[16/07/2011 - 01:00:04 | N | 206851] D:\carnet.WAB
[29/10/2012 - 12:57:48 | D ] D:\Cles logiciels
[23/07/2012 - 14:33:33 | D ] D:\Fonts
[11/06/2013 - 23:41:54 | D ] D:\FORMATIONS VIDEOS
[10/06/2013 - 21:01:37 | D ] D:\Images Iso
[02/11/2012 - 16:54:51 | D ] D:\Jeux
[17/06/2013 - 18:58:36 | D ] D:\Livres
[02/11/2012 - 16:55:21 | D ] D:\LOGICIELS & UTILITAIRES
[07/10/2012 - 02:51:23 | D ] D:\Magazines
[27/07/2012 - 01:31:28 | N | 209408] D:\mdp-sites.xls
[28/06/2012 - 10:16:38 | SHD ] D:\System Volume Information
[12/01/2013 - 10:06:06 | D ] E:\Personnel Serge
[02/01/2013 - 23:23:02 | D ] E:\monCV
[08/11/2011 - 23:34:08 | D ] E:\Preparation install W7Ultimate
[10/05/2012 - 23:37:18 | D ] E:\dspp
[30/04/2013 - 14:59:28 | N | 1030] E:\licences install�es sur l'ASUS.txt
[30/07/2012 - 16:16:22 | N | 26] E:\cle odette.txt
[19/06/2012 - 19:30:22 | N | 319] E:\licences hp.txt
[01/04/2013 - 00:45:46 | N | 776229] E:\Facture Asus0001.pdf
[21/05/2013 - 21:03:20 | D ] E:\Cinema Saint-Paul
[27/01/2013 - 21:40:42 | N | 68] E:\nouvelle clewifi.txt
[21/01/2013 - 14:42:08 | N | 452980] E:\recu upt0001.pdf
[17/05/2013 - 15:48:06 | N | 31] E:\cle family.txt
[17/05/2013 - 17:06:24 | D ] E:\reparation pc benoit
[17/03/2012 - 10:39:22 | D ] E:\i-2k8crack
[12/05/2013 - 15:36:41 | SHD ] G:\$RECYCLE.BIN
[30/12/2012 - 14:10:09 | D ] G:\A trier
[03/06/2012 - 13:11:49 | N | 8351] G:\Avatar n14.png
[03/06/2012 - 13:46:11 | N | 53990] G:\Avatar n14.psd
[27/06/2012 - 15:30:05 | D ] G:\favoris
[21/01/2013 - 01:45:40 | D ] G:\FORMATIONS INFORMATIQUES
[16/05/2013 - 19:52:37 | D ] G:\FORMATIONS VIDEOS
[18/09/2012 - 11:17:08 | D ] G:\Icones.ico
[30/12/2012 - 14:11:35 | D ] G:\LIVRES
[29/05/2013 - 21:43:12 | D ] G:\LOGICIELS & UTILITAIRES
[20/06/2012 - 04:22:36 | N | 4753] G:\Logiciels Asus a voir.txt
[20/06/2012 - 00:45:43 | D ] G:\Magazines
[11/01/2012 - 21:41:39 | N | 65893] G:\playlist.m3u
[18/06/2013 - 12:05:38 | D ] G:\Sauvegarde dossier www 21-01-13
[25/06/2012 - 23:56:32 | SHD ] G:\System Volume Information
[16/05/2013 - 19:26:23 | D ] G:\Virtual machines
[22/05/2012 - 20:09:45 | D ] G:\WD
[15/02/2013 - 03:47:35 | D ] G:\WEB & DESIGN
[12/05/2013 - 15:36:41 | SHD ] I:\$RECYCLE.BIN
[20/03/2013 - 10:11:09 | D ] I:\BD
[18/09/2012 - 21:34:43 | D ] I:\Biblioth�que calibre
[28/06/2012 - 03:09:28 | D ] I:\Dossier Famille
[12/05/2013 - 20:52:09 | D ] I:\Dossier personnel Serge
[14/03/2013 - 18:16:39 | D ] I:\Films & S�ries & Docs
[23/08/2012 - 01:12:41 | D ] I:\Fonds d'�crans
[08/10/2012 - 01:26:38 | D ] I:\Galaxy SII
[12/05/2013 - 19:48:25 | D ] I:\Ma musique
[14/03/2013 - 15:57:24 | N | 243200] I:\mdp-sites.xls
[04/09/2012 - 00:15:01 | D ] I:\Mes images
[14/02/2009 - 17:15:27 | N | 91515] I:\numero non surtax�s.pdf
[24/01/2013 - 02:34:14 | D ] I:\Sauvegarde mails
[25/06/2012 - 23:56:32 | SHD ] I:\System Volume Information
[30/08/2012 - 17:11:07 | D ] P:\Musiques
[07/04/2013 - 20:44:59 | D ] P:\Enregistrements
[19/08/2012 - 18:35:32 | D ] P:\Photos
[15/06/2013 - 20:47:35 | D ] P:\Vid�os
[17/05/2013 - 20:40:21 | D ] P:\T�l�chargements
[07/11/2012 - 12:36:02 | SHD ] T:\$RECYCLE.BIN
[18/11/2012 - 14:09:29 | D ] T:\abrViewer.NET
[03/03/2013 - 23:27:44 | N | 51529] T:\Check List _ Cr�er un blog de A � Z.pdf
[26/01/2013 - 17:14:38 | N | 631296] T:\Cr�ation d'un th�me Wordpress.doc
[06/05/2013 - 16:09:08 | D ] T:\Drupal 7.22
[27/12/2012 - 20:19:41 | D ] T:\Exercices
[15/02/2013 - 03:47:00 | D ] T:\fichiers du doc - CreationTheme
[03/06/2013 - 12:45:13 | D ] T:\Formation T2SI
[23/05/2013 - 20:09:20 | D ] T:\Formation informatique en pdf
[23/02/2013 - 13:43:14 | D ] T:\Formation Web Design pdf-doc
[29/05/2013 - 22:16:49 | D ] T:\FORMATIONS VIDEOS EN COURS
[16/05/2013 - 20:09:46 | D ] T:\GRAFIKART Sources & Vid�os
[13/11/2012 - 15:22:58 | D ] T:\JQuery_(Des-fichiers-complementaires-892-Ko)
[07/04/2013 - 00:16:21 | D ] T:\juizy-slideshow-v1.1.1-2013-03-04
[29/05/2013 - 23:02:10 | D ] T:\Ressources Web & Design
[18/06/2013 - 11:07:14 | D ] T:\RESSOURCES WORDPRESS
[10/06/2013 - 23:15:58 | D ] T:\Sites du dossier WWW
[27/06/2012 - 21:10:26 | SHD ] T:\System Volume Information
[23/10/2012 - 15:35:57 | D ] Y:\100_flash_backgrounds
[02/05/2013 - 01:02:42 | N | 5703676] Y:\Big ScaryThinking about you.mp3
[12/03/2013 - 15:32:29 | N | 70573] Y:\copie php.ini
[03/01/2013 - 18:17:46 | N | 70153] Y:\Lettre de stage Diane de LESTRANGE.pdf
[22/03/2013 - 02:04:23 | N | 368050286] Y:\Touch.S02E07.Vostfr-www.Series-Gratuit.com.rar

################## | Vaccin |

C:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
D:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
E:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
G:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
I:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
P:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
T:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
Y:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)

################## | E.O.F | http://sosvirus.org |