Publicité
Publicité
Format du document : text/plain
Prévisualisation
############################## | UsbFix V 7.169 | [Suppression]
Utilisateur: Propri�taire (Administrateur) # PROPRI�TAIRE-PC
Mis � jour le 31/03/2014 par El Desaparecido - Team SosVirus
Lanc� � 08:43:37 | 07/04/2014
Site Web : http://www.usbfix.net/
Changelog : http://www.usbfix.net/maj/
Support : http://www.sosvirus.net/forum-virus-securite.html
Upload Malware : http://www.sosvirus.net/upload_malware.php
Contact : http://www.usbfix.net/contact/
PC: Hewlett-Packard (365C)
CPU: Intel(R) Core(TM) i7 CPU Q 720 @ 1.60GHz
RAM -> [Total : 4087 Mo| Free : 2568 Mo]
Bios: Hewlett-Packard
Boot: Normal boot
OS: Microsoft Windows�7 �dition Familiale Premium (6.1.7601 64-Bit) Service Pack 1
WB: Windows Internet Explorer : 11.0.9600.16521
WB: Google Chrome : 32.0.1700.76
WB: Mozilla Firefox : 28.0
SC: Security Center [Enabled]
WU: Windows Update [Enabled]
AV: Avira Desktop [(!) Disabled | Updated]
AS: Avira Desktop [(!) Disabled | Updated]
AS: Windows Defender [Enabled | Updated]
FW: FireWall [Enabled]
FW: Windows FireWall [Enabled]
C:\ (%systemdrive%) -> Disque fixe # 238 Go (93 Go libre(s) - 39%) [] # NTFS
D:\ -> Disque fixe # 596 Go (185 Go libre(s) - 31%) [DATA] # NTFS
E:\ -> CD-ROM
F:\ -> Disque amovible # 15 Go (9 Go libre(s) - 63%) [] # FAT32
G:\ -> Disque fixe # 932 Go (854 Go libre(s) - 92%) [TOURO] # NTFS
H:\ -> Disque amovible # 15 Go (8 Go libre(s) - 54%) [] # FAT32
################## | Processus Actif |
C:\Windows\system32\csrss.exe (ID: 504 |ParentID: 412)
C:\Windows\system32\wininit.exe (ID: 596 |ParentID: 412)
C:\Windows\system32\csrss.exe (ID: 604 |ParentID: 588)
C:\Windows\system32\services.exe (ID: 652 |ParentID: 596)
C:\Windows\system32\lsass.exe (ID: 672 |ParentID: 596)
C:\Windows\system32\lsm.exe (ID: 680 |ParentID: 596)
C:\Windows\system32\winlogon.exe (ID: 732 |ParentID: 588)
C:\Windows\system32\svchost.exe (ID: 812 |ParentID: 652)
C:\Windows\system32\nvvsvc.exe (ID: 892 |ParentID: 652)
C:\Windows\system32\svchost.exe (ID: 932 |ParentID: 652)
C:\Windows\System32\svchost.exe (ID: 148 |ParentID: 652)
C:\Windows\System32\svchost.exe (ID: 364 |ParentID: 652)
C:\Windows\system32\svchost.exe (ID: 500 |ParentID: 652)
C:\Windows\system32\svchost.exe (ID: 608 |ParentID: 652)
C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_70dacb64382a61a7\STacSV64.exe (ID: 1032 |ParentID: 652)
C:\Windows\system32\svchost.exe (ID: 1268 |ParentID: 652)
C:\Windows\system32\Hpservice.exe (ID: 1328 |ParentID: 652)
C:\Windows\system32\vcsFPService.exe (ID: 1372 |ParentID: 652)
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (ID: 1380 |ParentID: 892)
C:\Windows\system32\nvvsvc.exe (ID: 1388 |ParentID: 892)
C:\Windows\system32\svchost.exe (ID: 1472 |ParentID: 652)
C:\Windows\System32\spoolsv.exe (ID: 1728 |ParentID: 652)
C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (ID: 1756 |ParentID: 652)
C:\Windows\system32\svchost.exe (ID: 1804 |ParentID: 652)
C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe (ID: 1964 |ParentID: 652)
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (ID: 2036 |ParentID: 652)
C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_70dacb64382a61a7\AESTSr64.exe (ID: 1224 |ParentID: 652)
C:\Program Files (x86)\Avira\AntiVir Desktop\avfwsvc.exe (ID: 1204 |ParentID: 652)
C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (ID: 1496 |ParentID: 652)
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (ID: 1820 |ParentID: 652)
C:\Program Files\Bonjour\mDNSResponder.exe (ID: 1984 |ParentID: 652)
C:\Program Files\Orange\mes contenus - mon disque\mounter.exe (ID: 1176 |ParentID: 652)
C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe (ID: 2060 |ParentID: 652)
C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe (ID: 2092 |ParentID: 652)
C:\Windows\system32\taskhost.exe (ID: 2240 |ParentID: 652)
C:\Windows\system32\taskeng.exe (ID: 2296 |ParentID: 608)
C:\Windows\system32\Dwm.exe (ID: 2320 |ParentID: 364)
C:\Windows\Explorer.EXE (ID: 2348 |ParentID: 2288)
C:\Windows\system32\taskeng.exe (ID: 2432 |ParentID: 608)
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (ID: 2532 |ParentID: 2432)
C:\Windows\system32\runonce.exe (ID: 2568 |ParentID: 2348)
C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe (ID: 2600 |ParentID: 652)
C:\Windows\SysWOW64\runonce.exe (ID: 2608 |ParentID: 2568)
C:\ProgramData\DatacardService\HWDeviceService64.exe (ID: 2680 |ParentID: 652)
C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe (ID: 2716 |ParentID: 652)
C:\ProgramData\DatacardService\DCSHelper.exe (ID: 2736 |ParentID: 2680)
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe (ID: 2764 |ParentID: 652)
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe (ID: 2920 |ParentID: 652)
C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe (ID: 3016 |ParentID: 652)
c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe (ID: 3056 |ParentID: 652)
C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe (ID: 1668 |ParentID: 652)
C:\Program Files (x86)\Secunia\PSI\PSIA.exe (ID: 2396 |ParentID: 652)
C:\Program Files (x86)\Secunia\PSI\sua.exe (ID: 2512 |ParentID: 652)
C:\Program Files (x86)\Skype\Updater\Updater.exe (ID: 3112 |ParentID: 652)
C:\Windows\system32\svchost.exe (ID: 3140 |ParentID: 652)
C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe (ID: 3176 |ParentID: 652)
C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe (ID: 3216 |ParentID: 652)
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe (ID: 3252 |ParentID: 2920)
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe (ID: 3260 |ParentID: 652)
C:\Windows\system32\wbem\wmiprvse.exe (ID: 3616 |ParentID: 812)
C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (ID: 1568 |ParentID: 1496)
C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe (ID: 4276 |ParentID: 652)
C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE (ID: 4372 |ParentID: 652)
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (ID: 4504 |ParentID: 1380)
C:\Windows\system32\SearchIndexer.exe (ID: 4936 |ParentID: 652)
C:\Windows\system32\svchost.exe (ID: 4448 |ParentID: 652)
C:\Windows\System32\rundll32.exe (ID: 4804 |ParentID: 812)
C:\Windows\System32\WUDFHost.exe (ID: 5032 |ParentID: 364)
C:\Windows\system32\SearchProtocolHost.exe (ID: 4432 |ParentID: 4936)
C:\Windows\system32\SearchFilterHost.exe (ID: 1076 |ParentID: 4936)
C:\Program Files (x86)\Secunia\PSI\sua.exe (ID: 1188 |ParentID: 652)
################## | Recherche g�n�rique |
(!) Fichiers temporaires supprim�s.
################## | Registre |
Supprim�! HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\Software\.\.\.\.\Mountpoints2\{5462ba24-1cb0-11e3-879c-c80aa9f3abe0}
################## | Regedit Run |
F2 - HKLM\..\Winlogon : [Shell] Explorer.exe
F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
04 - HKCU\..\Run : [TomTomHOME.exe] "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe"
04 - HKCU\..\Run : [SkyDrive] "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background
04 - HKCU\..\Run : [OfficeSyncProcess] "C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE"
04 - HKCU\..\Run : [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
04 - HKCU\..\Run : [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
04 - HKCU\..\Run : [GoogleDriveSync] "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
04 - HKCU\..\Run : [Google Update] "C:\Users\Propri�taire\AppData\Local\Google\Update\GoogleUpdate.exe" /c
04 - HKCU\..\Run : [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
04 - HKCU\..\Run : [AppleIEDAV] C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe
04 - HKCU\..\Run : [Google+ Auto Backup] "C:\Users\Propri�taire\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe" /autostart
04 - HKCU\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64"
04 - HKCU\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64"
04 - HKCU\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64"
04 - HKCU\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64"
04 - HKCU\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64"
04 - HKLM\..\Run : []
04 - HKLM\..\Run : [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
04 - HKLM\..\Run : [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
04 - HKLM\..\Run : [Start_Update_{9d78a505-6248-4d1b-81b6-df69655beccf}] C:\Program Files (x86)\Orange\wifi d'Orange\{9d78a505-6248-4d1b-81b6-df69655beccf}\UpdteApp.exe
04 - HKLM\..\Run : [Start_OrangeWifi_{9d78a505-6248-4d1b-81b6-df69655beccf}] C:\Program Files (x86)\Orange\wifi d'Orange\{9d78a505-6248-4d1b-81b6-df69655beccf}\OrangeWifi.exe
04 - HKLM\..\Run : [NBAgent] "C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart
04 - HKLM\..\Run : [HD Audio Driver] C:\Windows\explorer.exe "C:\Users\Propri�taire\AppData\Roaming\Realtek\RAVCpl32.exe"
04 - HKLM\..\Run : [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
04 - HKLM\..\Run : [AdobeCS5.5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin
04 - HKLM\..\Run : [AdobeCS4ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
04 - HKLM\..\Run : [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
04 - HKLM\..\Run : [fst_fr_48]
04 - HKLM\..\Run : [TkBellExe] "C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe" -osboot
04 - HKLM\..\Run : [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
04 - HKLM\..\Run : [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
04 - [x64] HKLM\..\Run : [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe
04 - [x64] HKLM\..\Run : [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
04 - [x64] HKLM\..\Run : [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe
04 - [x64] HKLM\..\Run : [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
04 - [x64] HKLM\..\Run : [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [TomTomHOME.exe] "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe"
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [SkyDrive] "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [OfficeSyncProcess] "C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE"
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [GoogleDriveSync] "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [Google Update] "C:\Users\Propri�taire\AppData\Local\Google\Update\GoogleUpdate.exe" /c
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [AppleIEDAV] C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [Google+ Auto Backup] "C:\Users\Propri�taire\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe" /autostart
04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64"
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64"
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64"
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64"
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64"
################## | Listing |
[07/01/2013 - 22:00:41 | SHD] - C:\$Recycle.Bin
[23/03/2014 - 09:41:06 | D] - C:\AdwCleaner
[07/11/2013 - 19:19:53 | A | 0 Ko] - C:\autoexec.bat
[05/04/2014 - 22:21:43 | D] - C:\Config.Msi
[24/01/2014 - 10:28:40 | N | 1 Ko | 6EA57FDC123D98BA702F5B5C9583EF1D] - C:\DelFix.txt
[14/07/2009 - 07:08:56 | SHD] - C:\Documents and Settings
[11/02/2013 - 11:18:05 | N | 0 Ko] - C:\find_installed_search_provider.log
[07/04/2014 - 08:42:43 | ASH | 3138716 Ko] - C:\hiberfil.sys
[07/08/2012 - 11:05:42 | D] - C:\Intel
[07/08/2012 - 18:45:50 | RHD] - C:\MSOCache
[07/04/2014 - 08:42:46 | ASH | 4184956 Ko] - C:\pagefile.sys
[14/07/2009 - 05:20:08 | D] - C:\PerfLogs
[06/04/2014 - 21:44:41 | N | 1 Ko] - C:\PhysicalDisk0_MBR.bin
[05/04/2014 - 22:21:23 | D] - C:\Program Files
[05/04/2014 - 22:41:57 | D] - C:\Program Files (x86)
[05/04/2014 - 22:43:19 | D] - C:\Program1
[05/04/2014 - 22:21:23 | HD] - C:\ProgramData
[06/08/2012 - 18:39:09 | SHD] - C:\Recovery
[07/11/2013 - 19:19:13 | N | 0 Ko] - C:\sh4_service.log
[18/10/2013 - 16:01:12 | N | 279 Ko] - C:\shldr
[18/10/2013 - 16:01:12 | N | 8 Ko] - C:\shldr.mbr
[04/04/2014 - 23:38:34 | D] - C:\Shortcut_Module
[01/11/2012 - 21:39:38 | D] - C:\swsetup
[07/04/2014 - 07:42:48 | SHD] - C:\System Volume Information
[07/08/2012 - 12:20:18 | D] - C:\system.sav
[07/04/2014 - 08:41:17 | D] - C:\UsbFix
[07/04/2014 - 08:44:45 | A | 16 Ko | 6C3672069D6431F3689DD0C1F6DC8444] - C:\UsbFix [Clean 2] PROPRI�TAIRE-PC.txt
[12/02/2014 - 18:34:41 | D] - C:\Users
[06/04/2014 - 21:07:50 | D] - C:\Windows
[08/08/2012 - 23:31:09 | SHD] - D:\$RECYCLE.BIN
[18/01/2014 - 13:19:34 | D] - D:\denis
[04/01/2014 - 21:56:14 | D] - D:\Documents
[07/08/2012 - 15:52:35 | D] - D:\lombardiHP
[20/07/2012 - 14:31:48 | D] - D:\LOMBARDIHP-PC
[08/11/2010 - 20:22:59 | N | 1 Ko] - D:\MediaID.bin
[18/02/2014 - 13:51:20 | D] - D:\Music
[23/02/2013 - 16:12:46 | N | 25 Ko] - D:\off_dib.bmp
[22/07/2013 - 16:16:52 | D] - D:\PC Drive files
[19/05/2013 - 16:03:01 | D] - D:\PHOTOS
[16/11/2013 - 21:40:03 | D] - D:\pinnacle studio14
[20/02/2014 - 19:49:39 | D] - D:\PROPRI�TAIRE-PC
[31/01/2014 - 08:29:56 | SHD] - D:\System Volume Information
[12/01/2013 - 19:16:05 | D] - D:\Videos
[04/04/2014 - 14:22:17 | N | 1700 Ko] - D:\VirtualDJ Local Database v6.xml
[08/11/2010 - 20:28:11 | D] - D:\WindowsImageBackup
[14/11/2013 - 13:26:42 | D] - F:\DANSES PROVENCALES
[14/11/2013 - 13:49:46 | N | 2243 Ko | 0C69FE9AF6C6B0D84AAED06BAFB24E60] - F:\avira_free_antivirus.exe
[09/01/2014 - 08:35:26 | N | 47 Ko] - F:\test.pdf
[27/03/2013 - 19:03:14 | N | 3771 Ko] - F:\Village People - YMCA (version originale) - Vid�o Dailymotion.mp3
[02/04/2014 - 17:08:22 | N | 4179 Ko] - F:\musique anniversaire - YouTube.mp4
[19/05/2013 - 19:36:17 | SHD] - G:\$RECYCLE.BIN
[25/02/2013 - 10:48:32 | N | 2525898 Ko] - G:\chor�graphies danse.avi
[16/12/2011 - 00:08:48 | N | 1 Ko] - G:\Downloads.lnk
[02/01/2014 - 17:52:29 | D] - G:\karaoke coupo_santo
[13/11/2013 - 18:02:58 | D] - G:\logiciels
[03/01/2014 - 16:01:22 | D] - G:\Music
[13/11/2013 - 18:03:18 | D] - G:\PDF CREATOR
[11/02/2013 - 11:23:05 | D] - G:\pinnacle studio14
[03/01/2014 - 14:50:53 | D] - G:\save music retro
[28/11/2013 - 19:24:45 | SHD] - G:\System Volume Information
[14/09/2012 - 00:52:40 | N | 6509 Ko] - G:\TouroCloudBackup_for_Mac.pkg
[15/09/2012 - 04:02:40 | D] - G:\TouroCloudBackup_for_Win
[14/09/2012 - 00:52:36 | N | 8408 Ko | DF059FC5F6EC97B7D72035AC18BB0993] - G:\TouroCloudBackup_for_Win_Installer.exe
[13/11/2013 - 14:42:34 | N | 1115 Ko | CA551EEA3C3EB32FC8C2F9F79666DB16] - G:\utorrent (1).exe
[03/01/2014 - 16:47:20 | N | 23 Ko] - G:\VirtualDJ Local Database v6.xml
[20/12/2012 - 14:56:16 | D] - H:\BOLERO
[20/12/2012 - 15:15:34 | D] - H:\FOXTROT
[20/12/2012 - 14:26:50 | D] - H:\CHARLESTON
[20/12/2012 - 14:41:46 | D] - H:\PASODOBLE
[18/12/2012 - 18:36:16 | D] - H:\SALSA
[16/11/2012 - 23:15:12 | D] - H:\ROCK mario
[20/12/2012 - 15:35:36 | D] - H:\KIZOMBA
[20/12/2012 - 15:38:12 | D] - H:\KUDURO
[25/11/2012 - 19:07:14 | D] - H:\MERENGUE
[20/12/2012 - 15:42:18 | D] - H:\LINDY HOP speed
[20/12/2012 - 15:44:08 | D] - H:\LINDY HOP swing
[20/12/2012 - 15:45:50 | D] - H:\MADISON
[20/12/2012 - 15:47:24 | D] - H:\MAMBO
[20/12/2012 - 14:53:16 | D] - H:\BLUES
[20/12/2012 - 15:50:00 | D] - H:\MAZURKA
[20/12/2012 - 16:10:22 | D] - H:\R'N'B'
[20/12/2012 - 16:14:16 | D] - H:\ROCKNROLL
[20/12/2012 - 16:19:04 | D] - H:\DANSE EN LIGNE
[20/12/2012 - 16:27:16 | D] - H:\RUMBA
[20/12/2012 - 16:30:02 | D] - H:\SALSA CUBA
[20/12/2012 - 16:59:26 | D] - H:\SALSA DOMINIQUAINE
[20/12/2012 - 17:25:30 | D] - H:\SAMBA
[28/06/2012 - 21:42:30 | D] - H:\SLOW
[20/12/2012 - 17:28:26 | D] - H:\TANGO ARGENTIN
[20/12/2012 - 17:36:14 | D] - H:\TWIST
[23/08/2012 - 18:23:58 | D] - H:\VALSE MUSETTE
[20/12/2012 - 17:37:44 | D] - H:\VALSE LENTE
[20/12/2012 - 17:41:04 | D] - H:\ZOUK
[20/12/2012 - 17:44:38 | D] - H:\ZOUK LA REUNION
[20/12/2012 - 17:51:56 | D] - H:\ZUMBA
[21/12/2012 - 07:22:50 | D] - H:\ROCK_reine
[29/06/2012 - 11:06:56 | D] - H:\BACHATA
[23/08/2012 - 17:53:46 | D] - H:\AMBIANCE
[28/06/2012 - 21:40:30 | D] - H:\BACHATATANGO
[28/06/2012 - 21:42:12 | D] - H:\BEBOP
[23/08/2012 - 17:55:40 | D] - H:\BEGUINE
[28/06/2012 - 21:41:26 | D] - H:\BOOGIE
[23/08/2012 - 17:30:38 | D] - H:\BOOGIE WOOGIE
[04/08/2012 - 16:21:34 | D] - H:\BOOM ENFANT
[23/08/2012 - 18:35:58 | D] - H:\CLAUDE FRANCOIS
[28/06/2012 - 21:41:42 | D] - H:\CLUBBING
[23/08/2012 - 19:19:02 | D] - H:\COUNTRY TANGO
[23/08/2012 - 19:19:58 | D] - H:\COUNTRY
[23/08/2012 - 19:19:26 | D] - H:\COUNTRY MADISON
[25/08/2012 - 10:58:42 | D] - H:\EURODANCE
[25/08/2012 - 11:01:20 | D] - H:\EURODISCO
[04/08/2012 - 16:22:32 | D] - H:\DISCO
[28/06/2012 - 21:41:50 | D] - H:\JAZZ
[24/08/2012 - 20:50:16 | D] - H:\JERCK
[04/08/2012 - 16:28:42 | D] - H:\JAVA
[23/08/2012 - 20:53:22 | D] - H:\LAMBADA
[28/06/2012 - 21:41:56 | D] - H:\LINDY HOP lent
[23/08/2012 - 17:11:20 | D] - H:\MARCHE
[04/08/2012 - 16:28:38 | D] - H:\POLKA
[24/08/2012 - 09:13:48 | D] - H:\RAP
[23/08/2012 - 17:07:12 | D] - H:\QUICKSTEP
[23/08/2012 - 19:23:44 | D] - H:\RAGGA
[20/12/2012 - 17:33:28 | D] - H:\TANGO MODERNE
[23/12/2012 - 11:35:40 | N | 937 Ko] - H:\VirtualDJ Local Database v6.xml
[20/12/2012 - 15:02:12 | D] - H:\CHACHA
[20/12/2012 - 15:18:30 | N | 1872 Ko] - H:\04-charleston.mp3
[20/12/2012 - 15:10:38 | D] - H:\CEROC
[28/06/2012 - 21:42:22 | D] - H:\SALSA PORTO
[06/06/2013 - 11:03:38 | N | 328878 Ko] - H:\stage danses 2 juin 2013.mpg
################## | Vaccin |
D:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
F:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
G:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
H:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
################## | E.O.F | http://www.usbfix.net/ - http://www.sosvirus.net |
Utilisateur: Propri�taire (Administrateur) # PROPRI�TAIRE-PC
Mis � jour le 31/03/2014 par El Desaparecido - Team SosVirus
Lanc� � 08:43:37 | 07/04/2014
Site Web : http://www.usbfix.net/
Changelog : http://www.usbfix.net/maj/
Support : http://www.sosvirus.net/forum-virus-securite.html
Upload Malware : http://www.sosvirus.net/upload_malware.php
Contact : http://www.usbfix.net/contact/
PC: Hewlett-Packard (365C)
CPU: Intel(R) Core(TM) i7 CPU Q 720 @ 1.60GHz
RAM -> [Total : 4087 Mo| Free : 2568 Mo]
Bios: Hewlett-Packard
Boot: Normal boot
OS: Microsoft Windows�7 �dition Familiale Premium (6.1.7601 64-Bit) Service Pack 1
WB: Windows Internet Explorer : 11.0.9600.16521
WB: Google Chrome : 32.0.1700.76
WB: Mozilla Firefox : 28.0
SC: Security Center [Enabled]
WU: Windows Update [Enabled]
AV: Avira Desktop [(!) Disabled | Updated]
AS: Avira Desktop [(!) Disabled | Updated]
AS: Windows Defender [Enabled | Updated]
FW: FireWall [Enabled]
FW: Windows FireWall [Enabled]
C:\ (%systemdrive%) -> Disque fixe # 238 Go (93 Go libre(s) - 39%) [] # NTFS
D:\ -> Disque fixe # 596 Go (185 Go libre(s) - 31%) [DATA] # NTFS
E:\ -> CD-ROM
F:\ -> Disque amovible # 15 Go (9 Go libre(s) - 63%) [] # FAT32
G:\ -> Disque fixe # 932 Go (854 Go libre(s) - 92%) [TOURO] # NTFS
H:\ -> Disque amovible # 15 Go (8 Go libre(s) - 54%) [] # FAT32
################## | Processus Actif |
C:\Windows\system32\csrss.exe (ID: 504 |ParentID: 412)
C:\Windows\system32\wininit.exe (ID: 596 |ParentID: 412)
C:\Windows\system32\csrss.exe (ID: 604 |ParentID: 588)
C:\Windows\system32\services.exe (ID: 652 |ParentID: 596)
C:\Windows\system32\lsass.exe (ID: 672 |ParentID: 596)
C:\Windows\system32\lsm.exe (ID: 680 |ParentID: 596)
C:\Windows\system32\winlogon.exe (ID: 732 |ParentID: 588)
C:\Windows\system32\svchost.exe (ID: 812 |ParentID: 652)
C:\Windows\system32\nvvsvc.exe (ID: 892 |ParentID: 652)
C:\Windows\system32\svchost.exe (ID: 932 |ParentID: 652)
C:\Windows\System32\svchost.exe (ID: 148 |ParentID: 652)
C:\Windows\System32\svchost.exe (ID: 364 |ParentID: 652)
C:\Windows\system32\svchost.exe (ID: 500 |ParentID: 652)
C:\Windows\system32\svchost.exe (ID: 608 |ParentID: 652)
C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_70dacb64382a61a7\STacSV64.exe (ID: 1032 |ParentID: 652)
C:\Windows\system32\svchost.exe (ID: 1268 |ParentID: 652)
C:\Windows\system32\Hpservice.exe (ID: 1328 |ParentID: 652)
C:\Windows\system32\vcsFPService.exe (ID: 1372 |ParentID: 652)
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (ID: 1380 |ParentID: 892)
C:\Windows\system32\nvvsvc.exe (ID: 1388 |ParentID: 892)
C:\Windows\system32\svchost.exe (ID: 1472 |ParentID: 652)
C:\Windows\System32\spoolsv.exe (ID: 1728 |ParentID: 652)
C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (ID: 1756 |ParentID: 652)
C:\Windows\system32\svchost.exe (ID: 1804 |ParentID: 652)
C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe (ID: 1964 |ParentID: 652)
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (ID: 2036 |ParentID: 652)
C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_70dacb64382a61a7\AESTSr64.exe (ID: 1224 |ParentID: 652)
C:\Program Files (x86)\Avira\AntiVir Desktop\avfwsvc.exe (ID: 1204 |ParentID: 652)
C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (ID: 1496 |ParentID: 652)
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (ID: 1820 |ParentID: 652)
C:\Program Files\Bonjour\mDNSResponder.exe (ID: 1984 |ParentID: 652)
C:\Program Files\Orange\mes contenus - mon disque\mounter.exe (ID: 1176 |ParentID: 652)
C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe (ID: 2060 |ParentID: 652)
C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe (ID: 2092 |ParentID: 652)
C:\Windows\system32\taskhost.exe (ID: 2240 |ParentID: 652)
C:\Windows\system32\taskeng.exe (ID: 2296 |ParentID: 608)
C:\Windows\system32\Dwm.exe (ID: 2320 |ParentID: 364)
C:\Windows\Explorer.EXE (ID: 2348 |ParentID: 2288)
C:\Windows\system32\taskeng.exe (ID: 2432 |ParentID: 608)
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (ID: 2532 |ParentID: 2432)
C:\Windows\system32\runonce.exe (ID: 2568 |ParentID: 2348)
C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe (ID: 2600 |ParentID: 652)
C:\Windows\SysWOW64\runonce.exe (ID: 2608 |ParentID: 2568)
C:\ProgramData\DatacardService\HWDeviceService64.exe (ID: 2680 |ParentID: 652)
C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe (ID: 2716 |ParentID: 652)
C:\ProgramData\DatacardService\DCSHelper.exe (ID: 2736 |ParentID: 2680)
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe (ID: 2764 |ParentID: 652)
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe (ID: 2920 |ParentID: 652)
C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe (ID: 3016 |ParentID: 652)
c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe (ID: 3056 |ParentID: 652)
C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe (ID: 1668 |ParentID: 652)
C:\Program Files (x86)\Secunia\PSI\PSIA.exe (ID: 2396 |ParentID: 652)
C:\Program Files (x86)\Secunia\PSI\sua.exe (ID: 2512 |ParentID: 652)
C:\Program Files (x86)\Skype\Updater\Updater.exe (ID: 3112 |ParentID: 652)
C:\Windows\system32\svchost.exe (ID: 3140 |ParentID: 652)
C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe (ID: 3176 |ParentID: 652)
C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe (ID: 3216 |ParentID: 652)
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe (ID: 3252 |ParentID: 2920)
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe (ID: 3260 |ParentID: 652)
C:\Windows\system32\wbem\wmiprvse.exe (ID: 3616 |ParentID: 812)
C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (ID: 1568 |ParentID: 1496)
C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe (ID: 4276 |ParentID: 652)
C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE (ID: 4372 |ParentID: 652)
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (ID: 4504 |ParentID: 1380)
C:\Windows\system32\SearchIndexer.exe (ID: 4936 |ParentID: 652)
C:\Windows\system32\svchost.exe (ID: 4448 |ParentID: 652)
C:\Windows\System32\rundll32.exe (ID: 4804 |ParentID: 812)
C:\Windows\System32\WUDFHost.exe (ID: 5032 |ParentID: 364)
C:\Windows\system32\SearchProtocolHost.exe (ID: 4432 |ParentID: 4936)
C:\Windows\system32\SearchFilterHost.exe (ID: 1076 |ParentID: 4936)
C:\Program Files (x86)\Secunia\PSI\sua.exe (ID: 1188 |ParentID: 652)
################## | Recherche g�n�rique |
(!) Fichiers temporaires supprim�s.
################## | Registre |
Supprim�! HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\Software\.\.\.\.\Mountpoints2\{5462ba24-1cb0-11e3-879c-c80aa9f3abe0}
################## | Regedit Run |
F2 - HKLM\..\Winlogon : [Shell] Explorer.exe
F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
04 - HKCU\..\Run : [TomTomHOME.exe] "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe"
04 - HKCU\..\Run : [SkyDrive] "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background
04 - HKCU\..\Run : [OfficeSyncProcess] "C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE"
04 - HKCU\..\Run : [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
04 - HKCU\..\Run : [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
04 - HKCU\..\Run : [GoogleDriveSync] "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
04 - HKCU\..\Run : [Google Update] "C:\Users\Propri�taire\AppData\Local\Google\Update\GoogleUpdate.exe" /c
04 - HKCU\..\Run : [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
04 - HKCU\..\Run : [AppleIEDAV] C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe
04 - HKCU\..\Run : [Google+ Auto Backup] "C:\Users\Propri�taire\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe" /autostart
04 - HKCU\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64"
04 - HKCU\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64"
04 - HKCU\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64"
04 - HKCU\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64"
04 - HKCU\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64"
04 - HKLM\..\Run : []
04 - HKLM\..\Run : [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
04 - HKLM\..\Run : [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
04 - HKLM\..\Run : [Start_Update_{9d78a505-6248-4d1b-81b6-df69655beccf}] C:\Program Files (x86)\Orange\wifi d'Orange\{9d78a505-6248-4d1b-81b6-df69655beccf}\UpdteApp.exe
04 - HKLM\..\Run : [Start_OrangeWifi_{9d78a505-6248-4d1b-81b6-df69655beccf}] C:\Program Files (x86)\Orange\wifi d'Orange\{9d78a505-6248-4d1b-81b6-df69655beccf}\OrangeWifi.exe
04 - HKLM\..\Run : [NBAgent] "C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart
04 - HKLM\..\Run : [HD Audio Driver] C:\Windows\explorer.exe "C:\Users\Propri�taire\AppData\Roaming\Realtek\RAVCpl32.exe"
04 - HKLM\..\Run : [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
04 - HKLM\..\Run : [AdobeCS5.5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin
04 - HKLM\..\Run : [AdobeCS4ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
04 - HKLM\..\Run : [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
04 - HKLM\..\Run : [fst_fr_48]
04 - HKLM\..\Run : [TkBellExe] "C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe" -osboot
04 - HKLM\..\Run : [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
04 - HKLM\..\Run : [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
04 - [x64] HKLM\..\Run : [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe
04 - [x64] HKLM\..\Run : [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
04 - [x64] HKLM\..\Run : [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe
04 - [x64] HKLM\..\Run : [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
04 - [x64] HKLM\..\Run : [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [TomTomHOME.exe] "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe"
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [SkyDrive] "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [OfficeSyncProcess] "C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE"
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [GoogleDriveSync] "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [Google Update] "C:\Users\Propri�taire\AppData\Local\Google\Update\GoogleUpdate.exe" /c
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [AppleIEDAV] C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [Google+ Auto Backup] "C:\Users\Propri�taire\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe" /autostart
04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64"
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64"
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64"
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64"
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64"
################## | Listing |
[07/01/2013 - 22:00:41 | SHD] - C:\$Recycle.Bin
[23/03/2014 - 09:41:06 | D] - C:\AdwCleaner
[07/11/2013 - 19:19:53 | A | 0 Ko] - C:\autoexec.bat
[05/04/2014 - 22:21:43 | D] - C:\Config.Msi
[24/01/2014 - 10:28:40 | N | 1 Ko | 6EA57FDC123D98BA702F5B5C9583EF1D] - C:\DelFix.txt
[14/07/2009 - 07:08:56 | SHD] - C:\Documents and Settings
[11/02/2013 - 11:18:05 | N | 0 Ko] - C:\find_installed_search_provider.log
[07/04/2014 - 08:42:43 | ASH | 3138716 Ko] - C:\hiberfil.sys
[07/08/2012 - 11:05:42 | D] - C:\Intel
[07/08/2012 - 18:45:50 | RHD] - C:\MSOCache
[07/04/2014 - 08:42:46 | ASH | 4184956 Ko] - C:\pagefile.sys
[14/07/2009 - 05:20:08 | D] - C:\PerfLogs
[06/04/2014 - 21:44:41 | N | 1 Ko] - C:\PhysicalDisk0_MBR.bin
[05/04/2014 - 22:21:23 | D] - C:\Program Files
[05/04/2014 - 22:41:57 | D] - C:\Program Files (x86)
[05/04/2014 - 22:43:19 | D] - C:\Program1
[05/04/2014 - 22:21:23 | HD] - C:\ProgramData
[06/08/2012 - 18:39:09 | SHD] - C:\Recovery
[07/11/2013 - 19:19:13 | N | 0 Ko] - C:\sh4_service.log
[18/10/2013 - 16:01:12 | N | 279 Ko] - C:\shldr
[18/10/2013 - 16:01:12 | N | 8 Ko] - C:\shldr.mbr
[04/04/2014 - 23:38:34 | D] - C:\Shortcut_Module
[01/11/2012 - 21:39:38 | D] - C:\swsetup
[07/04/2014 - 07:42:48 | SHD] - C:\System Volume Information
[07/08/2012 - 12:20:18 | D] - C:\system.sav
[07/04/2014 - 08:41:17 | D] - C:\UsbFix
[07/04/2014 - 08:44:45 | A | 16 Ko | 6C3672069D6431F3689DD0C1F6DC8444] - C:\UsbFix [Clean 2] PROPRI�TAIRE-PC.txt
[12/02/2014 - 18:34:41 | D] - C:\Users
[06/04/2014 - 21:07:50 | D] - C:\Windows
[08/08/2012 - 23:31:09 | SHD] - D:\$RECYCLE.BIN
[18/01/2014 - 13:19:34 | D] - D:\denis
[04/01/2014 - 21:56:14 | D] - D:\Documents
[07/08/2012 - 15:52:35 | D] - D:\lombardiHP
[20/07/2012 - 14:31:48 | D] - D:\LOMBARDIHP-PC
[08/11/2010 - 20:22:59 | N | 1 Ko] - D:\MediaID.bin
[18/02/2014 - 13:51:20 | D] - D:\Music
[23/02/2013 - 16:12:46 | N | 25 Ko] - D:\off_dib.bmp
[22/07/2013 - 16:16:52 | D] - D:\PC Drive files
[19/05/2013 - 16:03:01 | D] - D:\PHOTOS
[16/11/2013 - 21:40:03 | D] - D:\pinnacle studio14
[20/02/2014 - 19:49:39 | D] - D:\PROPRI�TAIRE-PC
[31/01/2014 - 08:29:56 | SHD] - D:\System Volume Information
[12/01/2013 - 19:16:05 | D] - D:\Videos
[04/04/2014 - 14:22:17 | N | 1700 Ko] - D:\VirtualDJ Local Database v6.xml
[08/11/2010 - 20:28:11 | D] - D:\WindowsImageBackup
[14/11/2013 - 13:26:42 | D] - F:\DANSES PROVENCALES
[14/11/2013 - 13:49:46 | N | 2243 Ko | 0C69FE9AF6C6B0D84AAED06BAFB24E60] - F:\avira_free_antivirus.exe
[09/01/2014 - 08:35:26 | N | 47 Ko] - F:\test.pdf
[27/03/2013 - 19:03:14 | N | 3771 Ko] - F:\Village People - YMCA (version originale) - Vid�o Dailymotion.mp3
[02/04/2014 - 17:08:22 | N | 4179 Ko] - F:\musique anniversaire - YouTube.mp4
[19/05/2013 - 19:36:17 | SHD] - G:\$RECYCLE.BIN
[25/02/2013 - 10:48:32 | N | 2525898 Ko] - G:\chor�graphies danse.avi
[16/12/2011 - 00:08:48 | N | 1 Ko] - G:\Downloads.lnk
[02/01/2014 - 17:52:29 | D] - G:\karaoke coupo_santo
[13/11/2013 - 18:02:58 | D] - G:\logiciels
[03/01/2014 - 16:01:22 | D] - G:\Music
[13/11/2013 - 18:03:18 | D] - G:\PDF CREATOR
[11/02/2013 - 11:23:05 | D] - G:\pinnacle studio14
[03/01/2014 - 14:50:53 | D] - G:\save music retro
[28/11/2013 - 19:24:45 | SHD] - G:\System Volume Information
[14/09/2012 - 00:52:40 | N | 6509 Ko] - G:\TouroCloudBackup_for_Mac.pkg
[15/09/2012 - 04:02:40 | D] - G:\TouroCloudBackup_for_Win
[14/09/2012 - 00:52:36 | N | 8408 Ko | DF059FC5F6EC97B7D72035AC18BB0993] - G:\TouroCloudBackup_for_Win_Installer.exe
[13/11/2013 - 14:42:34 | N | 1115 Ko | CA551EEA3C3EB32FC8C2F9F79666DB16] - G:\utorrent (1).exe
[03/01/2014 - 16:47:20 | N | 23 Ko] - G:\VirtualDJ Local Database v6.xml
[20/12/2012 - 14:56:16 | D] - H:\BOLERO
[20/12/2012 - 15:15:34 | D] - H:\FOXTROT
[20/12/2012 - 14:26:50 | D] - H:\CHARLESTON
[20/12/2012 - 14:41:46 | D] - H:\PASODOBLE
[18/12/2012 - 18:36:16 | D] - H:\SALSA
[16/11/2012 - 23:15:12 | D] - H:\ROCK mario
[20/12/2012 - 15:35:36 | D] - H:\KIZOMBA
[20/12/2012 - 15:38:12 | D] - H:\KUDURO
[25/11/2012 - 19:07:14 | D] - H:\MERENGUE
[20/12/2012 - 15:42:18 | D] - H:\LINDY HOP speed
[20/12/2012 - 15:44:08 | D] - H:\LINDY HOP swing
[20/12/2012 - 15:45:50 | D] - H:\MADISON
[20/12/2012 - 15:47:24 | D] - H:\MAMBO
[20/12/2012 - 14:53:16 | D] - H:\BLUES
[20/12/2012 - 15:50:00 | D] - H:\MAZURKA
[20/12/2012 - 16:10:22 | D] - H:\R'N'B'
[20/12/2012 - 16:14:16 | D] - H:\ROCKNROLL
[20/12/2012 - 16:19:04 | D] - H:\DANSE EN LIGNE
[20/12/2012 - 16:27:16 | D] - H:\RUMBA
[20/12/2012 - 16:30:02 | D] - H:\SALSA CUBA
[20/12/2012 - 16:59:26 | D] - H:\SALSA DOMINIQUAINE
[20/12/2012 - 17:25:30 | D] - H:\SAMBA
[28/06/2012 - 21:42:30 | D] - H:\SLOW
[20/12/2012 - 17:28:26 | D] - H:\TANGO ARGENTIN
[20/12/2012 - 17:36:14 | D] - H:\TWIST
[23/08/2012 - 18:23:58 | D] - H:\VALSE MUSETTE
[20/12/2012 - 17:37:44 | D] - H:\VALSE LENTE
[20/12/2012 - 17:41:04 | D] - H:\ZOUK
[20/12/2012 - 17:44:38 | D] - H:\ZOUK LA REUNION
[20/12/2012 - 17:51:56 | D] - H:\ZUMBA
[21/12/2012 - 07:22:50 | D] - H:\ROCK_reine
[29/06/2012 - 11:06:56 | D] - H:\BACHATA
[23/08/2012 - 17:53:46 | D] - H:\AMBIANCE
[28/06/2012 - 21:40:30 | D] - H:\BACHATATANGO
[28/06/2012 - 21:42:12 | D] - H:\BEBOP
[23/08/2012 - 17:55:40 | D] - H:\BEGUINE
[28/06/2012 - 21:41:26 | D] - H:\BOOGIE
[23/08/2012 - 17:30:38 | D] - H:\BOOGIE WOOGIE
[04/08/2012 - 16:21:34 | D] - H:\BOOM ENFANT
[23/08/2012 - 18:35:58 | D] - H:\CLAUDE FRANCOIS
[28/06/2012 - 21:41:42 | D] - H:\CLUBBING
[23/08/2012 - 19:19:02 | D] - H:\COUNTRY TANGO
[23/08/2012 - 19:19:58 | D] - H:\COUNTRY
[23/08/2012 - 19:19:26 | D] - H:\COUNTRY MADISON
[25/08/2012 - 10:58:42 | D] - H:\EURODANCE
[25/08/2012 - 11:01:20 | D] - H:\EURODISCO
[04/08/2012 - 16:22:32 | D] - H:\DISCO
[28/06/2012 - 21:41:50 | D] - H:\JAZZ
[24/08/2012 - 20:50:16 | D] - H:\JERCK
[04/08/2012 - 16:28:42 | D] - H:\JAVA
[23/08/2012 - 20:53:22 | D] - H:\LAMBADA
[28/06/2012 - 21:41:56 | D] - H:\LINDY HOP lent
[23/08/2012 - 17:11:20 | D] - H:\MARCHE
[04/08/2012 - 16:28:38 | D] - H:\POLKA
[24/08/2012 - 09:13:48 | D] - H:\RAP
[23/08/2012 - 17:07:12 | D] - H:\QUICKSTEP
[23/08/2012 - 19:23:44 | D] - H:\RAGGA
[20/12/2012 - 17:33:28 | D] - H:\TANGO MODERNE
[23/12/2012 - 11:35:40 | N | 937 Ko] - H:\VirtualDJ Local Database v6.xml
[20/12/2012 - 15:02:12 | D] - H:\CHACHA
[20/12/2012 - 15:18:30 | N | 1872 Ko] - H:\04-charleston.mp3
[20/12/2012 - 15:10:38 | D] - H:\CEROC
[28/06/2012 - 21:42:22 | D] - H:\SALSA PORTO
[06/06/2013 - 11:03:38 | N | 328878 Ko] - H:\stage danses 2 juin 2013.mpg
################## | Vaccin |
D:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
F:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
G:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
H:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
################## | E.O.F | http://www.usbfix.net/ - http://www.sosvirus.net |