Publicité
Publicité
Format du document : text/plain
Prévisualisation
############################## | UsbFix V 7.169 | [Suppression]
Utilisateur: Propri�taire (Administrateur) # PROPRI�TAIRE-PC
Mis � jour le 31/03/2014 par El Desaparecido - Team SosVirus
Lanc� � 08:58:57 | 07/04/2014
Site Web : http://www.usbfix.net/
Changelog : http://www.usbfix.net/maj/
Support : http://www.sosvirus.net/forum-virus-securite.html
Upload Malware : http://www.sosvirus.net/upload_malware.php
Contact : http://www.usbfix.net/contact/
PC: Hewlett-Packard (365C)
CPU: Intel(R) Core(TM) i7 CPU Q 720 @ 1.60GHz
RAM -> [Total : 4087 Mo| Free : 2564 Mo]
Bios: Hewlett-Packard
Boot: Normal boot
OS: Microsoft Windows�7 �dition Familiale Premium (6.1.7601 64-Bit) Service Pack 1
WB: Windows Internet Explorer : 11.0.9600.16521
WB: Google Chrome : 32.0.1700.76
WB: Mozilla Firefox : 28.0
SC: Security Center [Enabled]
WU: Windows Update [Enabled]
AV: Avira Desktop [(!) Disabled | Updated]
AS: Avira Desktop [(!) Disabled | Updated]
AS: Windows Defender [Enabled | Updated]
FW: FireWall [Enabled]
FW: Windows FireWall [Enabled]
C:\ (%systemdrive%) -> Disque fixe # 238 Go (93 Go libre(s) - 39%) [] # NTFS
D:\ -> Disque fixe # 596 Go (185 Go libre(s) - 31%) [DATA] # NTFS
E:\ -> CD-ROM
F:\ -> Disque amovible # 7 Go (1 Go libre(s) - 13%) [CORSAIR] # FAT32
G:\ -> Disque fixe # 1863 Go (1514 Go libre(s) - 81%) [My Book] # NTFS
H:\ -> Disque amovible # 8 Go (8 Go libre(s) - 100%) [] # FAT32
################## | Processus Actif |
C:\Windows\system32\csrss.exe (ID: 504 |ParentID: 412)
C:\Windows\system32\wininit.exe (ID: 588 |ParentID: 412)
C:\Windows\system32\csrss.exe (ID: 604 |ParentID: 592)
C:\Windows\system32\services.exe (ID: 656 |ParentID: 588)
C:\Windows\system32\lsass.exe (ID: 664 |ParentID: 588)
C:\Windows\system32\lsm.exe (ID: 672 |ParentID: 588)
C:\Windows\system32\winlogon.exe (ID: 728 |ParentID: 592)
C:\Windows\system32\svchost.exe (ID: 812 |ParentID: 656)
C:\Windows\system32\nvvsvc.exe (ID: 884 |ParentID: 656)
C:\Windows\system32\svchost.exe (ID: 924 |ParentID: 656)
C:\Windows\System32\svchost.exe (ID: 1020 |ParentID: 656)
C:\Windows\System32\svchost.exe (ID: 312 |ParentID: 656)
C:\Windows\system32\svchost.exe (ID: 512 |ParentID: 656)
C:\Windows\system32\svchost.exe (ID: 372 |ParentID: 656)
C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_70dacb64382a61a7\STacSV64.exe (ID: 940 |ParentID: 656)
C:\Windows\system32\svchost.exe (ID: 1252 |ParentID: 656)
C:\Windows\system32\Hpservice.exe (ID: 1316 |ParentID: 656)
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (ID: 1336 |ParentID: 884)
C:\Windows\system32\nvvsvc.exe (ID: 1344 |ParentID: 884)
C:\Windows\system32\vcsFPService.exe (ID: 1388 |ParentID: 656)
C:\Windows\system32\svchost.exe (ID: 1476 |ParentID: 656)
C:\Windows\System32\spoolsv.exe (ID: 1724 |ParentID: 656)
C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (ID: 1756 |ParentID: 656)
C:\Windows\system32\svchost.exe (ID: 1792 |ParentID: 656)
C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe (ID: 1960 |ParentID: 656)
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (ID: 2036 |ParentID: 656)
C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_70dacb64382a61a7\AESTSr64.exe (ID: 1216 |ParentID: 656)
C:\Program Files (x86)\Avira\AntiVir Desktop\avfwsvc.exe (ID: 1184 |ParentID: 656)
C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (ID: 1516 |ParentID: 656)
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (ID: 1776 |ParentID: 656)
C:\Program Files\Bonjour\mDNSResponder.exe (ID: 1976 |ParentID: 656)
C:\Program Files\Orange\mes contenus - mon disque\mounter.exe (ID: 1332 |ParentID: 656)
C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe (ID: 2084 |ParentID: 656)
C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe (ID: 2116 |ParentID: 656)
C:\Windows\system32\taskhost.exe (ID: 2236 |ParentID: 656)
C:\Windows\system32\taskeng.exe (ID: 2288 |ParentID: 372)
C:\Windows\system32\Dwm.exe (ID: 2308 |ParentID: 312)
C:\Windows\Explorer.EXE (ID: 2340 |ParentID: 2276)
C:\Windows\system32\taskeng.exe (ID: 2424 |ParentID: 372)
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (ID: 2528 |ParentID: 2424)
C:\Windows\system32\runonce.exe (ID: 2588 |ParentID: 2340)
C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe (ID: 2620 |ParentID: 656)
C:\Windows\SysWOW64\runonce.exe (ID: 2628 |ParentID: 2588)
C:\ProgramData\DatacardService\HWDeviceService64.exe (ID: 2684 |ParentID: 656)
C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe (ID: 2724 |ParentID: 656)
C:\ProgramData\DatacardService\DCSHelper.exe (ID: 2744 |ParentID: 2684)
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe (ID: 2784 |ParentID: 656)
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe (ID: 2940 |ParentID: 656)
C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe (ID: 3036 |ParentID: 656)
c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe (ID: 2056 |ParentID: 656)
C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe (ID: 2332 |ParentID: 656)
C:\Program Files (x86)\Secunia\PSI\PSIA.exe (ID: 2464 |ParentID: 656)
C:\Program Files (x86)\Secunia\PSI\sua.exe (ID: 3100 |ParentID: 656)
C:\Program Files (x86)\Skype\Updater\Updater.exe (ID: 3128 |ParentID: 656)
C:\Windows\system32\svchost.exe (ID: 3156 |ParentID: 656)
C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe (ID: 3196 |ParentID: 656)
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe (ID: 3216 |ParentID: 2940)
C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe (ID: 3236 |ParentID: 656)
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe (ID: 3296 |ParentID: 656)
C:\Windows\system32\wbem\wmiprvse.exe (ID: 3608 |ParentID: 812)
C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (ID: 2696 |ParentID: 1516)
C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe (ID: 4304 |ParentID: 656)
C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE (ID: 4424 |ParentID: 656)
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (ID: 4564 |ParentID: 1336)
C:\Windows\system32\SearchIndexer.exe (ID: 5032 |ParentID: 656)
C:\Windows\system32\svchost.exe (ID: 4832 |ParentID: 656)
C:\Windows\System32\rundll32.exe (ID: 5012 |ParentID: 812)
C:\Windows\system32\SearchProtocolHost.exe (ID: 4784 |ParentID: 5032)
C:\Windows\system32\SearchFilterHost.exe (ID: 1556 |ParentID: 5032)
C:\Windows\System32\WUDFHost.exe (ID: 4312 |ParentID: 312)
################## | Recherche g�n�rique |
(!) Fichiers temporaires supprim�s.
################## | Registre |
################## | Regedit Run |
F2 - HKLM\..\Winlogon : [Shell] Explorer.exe
F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
04 - HKCU\..\Run : [TomTomHOME.exe] "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe"
04 - HKCU\..\Run : [SkyDrive] "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background
04 - HKCU\..\Run : [OfficeSyncProcess] "C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE"
04 - HKCU\..\Run : [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
04 - HKCU\..\Run : [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
04 - HKCU\..\Run : [GoogleDriveSync] "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
04 - HKCU\..\Run : [Google Update] "C:\Users\Propri�taire\AppData\Local\Google\Update\GoogleUpdate.exe" /c
04 - HKCU\..\Run : [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
04 - HKCU\..\Run : [AppleIEDAV] C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe
04 - HKCU\..\Run : [Google+ Auto Backup] "C:\Users\Propri�taire\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe" /autostart
04 - HKCU\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64"
04 - HKCU\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64"
04 - HKCU\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64"
04 - HKCU\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64"
04 - HKCU\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64"
04 - HKLM\..\Run : []
04 - HKLM\..\Run : [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
04 - HKLM\..\Run : [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
04 - HKLM\..\Run : [Start_Update_{9d78a505-6248-4d1b-81b6-df69655beccf}] C:\Program Files (x86)\Orange\wifi d'Orange\{9d78a505-6248-4d1b-81b6-df69655beccf}\UpdteApp.exe
04 - HKLM\..\Run : [Start_OrangeWifi_{9d78a505-6248-4d1b-81b6-df69655beccf}] C:\Program Files (x86)\Orange\wifi d'Orange\{9d78a505-6248-4d1b-81b6-df69655beccf}\OrangeWifi.exe
04 - HKLM\..\Run : [NBAgent] "C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart
04 - HKLM\..\Run : [HD Audio Driver] C:\Windows\explorer.exe "C:\Users\Propri�taire\AppData\Roaming\Realtek\RAVCpl32.exe"
04 - HKLM\..\Run : [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
04 - HKLM\..\Run : [AdobeCS5.5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin
04 - HKLM\..\Run : [AdobeCS4ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
04 - HKLM\..\Run : [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
04 - HKLM\..\Run : [fst_fr_48]
04 - HKLM\..\Run : [TkBellExe] "C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe" -osboot
04 - HKLM\..\Run : [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
04 - HKLM\..\Run : [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
04 - [x64] HKLM\..\Run : [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe
04 - [x64] HKLM\..\Run : [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
04 - [x64] HKLM\..\Run : [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe
04 - [x64] HKLM\..\Run : [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
04 - [x64] HKLM\..\Run : [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [TomTomHOME.exe] "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe"
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [SkyDrive] "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [OfficeSyncProcess] "C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE"
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [GoogleDriveSync] "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [Google Update] "C:\Users\Propri�taire\AppData\Local\Google\Update\GoogleUpdate.exe" /c
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [AppleIEDAV] C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [Google+ Auto Backup] "C:\Users\Propri�taire\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe" /autostart
04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64"
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64"
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64"
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64"
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64"
################## | Listing |
[07/01/2013 - 22:00:41 | SHD] - C:\$Recycle.Bin
[23/03/2014 - 09:41:06 | D] - C:\AdwCleaner
[07/11/2013 - 19:19:53 | A | 0 Ko] - C:\autoexec.bat
[05/04/2014 - 22:21:43 | D] - C:\Config.Msi
[24/01/2014 - 10:28:40 | N | 1 Ko | 6EA57FDC123D98BA702F5B5C9583EF1D] - C:\DelFix.txt
[14/07/2009 - 07:08:56 | SHD] - C:\Documents and Settings
[11/02/2013 - 11:18:05 | N | 0 Ko] - C:\find_installed_search_provider.log
[07/04/2014 - 08:58:04 | ASH | 3138716 Ko] - C:\hiberfil.sys
[07/08/2012 - 11:05:42 | D] - C:\Intel
[07/08/2012 - 18:45:50 | RHD] - C:\MSOCache
[07/04/2014 - 08:58:07 | ASH | 4184956 Ko] - C:\pagefile.sys
[14/07/2009 - 05:20:08 | D] - C:\PerfLogs
[06/04/2014 - 21:44:41 | N | 1 Ko] - C:\PhysicalDisk0_MBR.bin
[05/04/2014 - 22:21:23 | D] - C:\Program Files
[05/04/2014 - 22:41:57 | D] - C:\Program Files (x86)
[05/04/2014 - 22:43:19 | D] - C:\Program1
[05/04/2014 - 22:21:23 | HD] - C:\ProgramData
[06/08/2012 - 18:39:09 | SHD] - C:\Recovery
[07/11/2013 - 19:19:13 | N | 0 Ko] - C:\sh4_service.log
[18/10/2013 - 16:01:12 | N | 279 Ko] - C:\shldr
[18/10/2013 - 16:01:12 | N | 8 Ko] - C:\shldr.mbr
[04/04/2014 - 23:38:34 | D] - C:\Shortcut_Module
[01/11/2012 - 21:39:38 | D] - C:\swsetup
[07/04/2014 - 07:42:48 | SHD] - C:\System Volume Information
[07/08/2012 - 12:20:18 | D] - C:\system.sav
[07/04/2014 - 08:57:09 | D] - C:\UsbFix
[07/04/2014 - 08:44:46 | N | 22 Ko | 0B3890C23F06254A0FAA2BED76C753F5] - C:\UsbFix [Clean 2] PROPRI�TAIRE-PC.txt
[07/04/2014 - 08:54:05 | N | 19 Ko | EC37159F3559F3C0B45F403CFBFB8606] - C:\UsbFix [Clean 4] PROPRI�TAIRE-PC.txt
[07/04/2014 - 08:54:53 | N | 19 Ko | EC37159F3559F3C0B45F403CFBFB8606] - C:\UsbFix [Clean 4]n2_07_04_2014 PROPRI�TAIRE-PC.txt
[07/04/2014 - 08:59:43 | A | 16 Ko | 4CC86A11EA9E4BB696389A8EA32AF34A] - C:\UsbFix [Clean 6] PROPRI�TAIRE-PC.txt
[12/02/2014 - 18:34:41 | D] - C:\Users
[06/04/2014 - 21:07:50 | D] - C:\Windows
[08/08/2012 - 23:31:09 | SHD] - D:\$RECYCLE.BIN
[18/01/2014 - 13:19:34 | D] - D:\denis
[04/01/2014 - 21:56:14 | D] - D:\Documents
[07/08/2012 - 15:52:35 | D] - D:\lombardiHP
[20/07/2012 - 14:31:48 | D] - D:\LOMBARDIHP-PC
[08/11/2010 - 20:22:59 | N | 1 Ko] - D:\MediaID.bin
[18/02/2014 - 13:51:20 | D] - D:\Music
[23/02/2013 - 16:12:46 | N | 25 Ko] - D:\off_dib.bmp
[22/07/2013 - 16:16:52 | D] - D:\PC Drive files
[19/05/2013 - 16:03:01 | D] - D:\PHOTOS
[16/11/2013 - 21:40:03 | D] - D:\pinnacle studio14
[20/02/2014 - 19:49:39 | D] - D:\PROPRI�TAIRE-PC
[31/01/2014 - 08:29:56 | SHD] - D:\System Volume Information
[12/01/2013 - 19:16:05 | D] - D:\Videos
[04/04/2014 - 14:22:17 | N | 1700 Ko] - D:\VirtualDJ Local Database v6.xml
[08/11/2010 - 20:28:11 | D] - D:\WindowsImageBackup
[27/12/2009 - 14:42:28 | D] - F:\LOGICIELS
[22/10/2008 - 11:44:40 | D] - F:\doc officielle
[26/10/2010 - 17:51:20 | N | 4 Ko] - F:\VirtualDJ Local Database v6.xml
[01/09/2010 - 10:39:48 | D] - F:\PDF CREATOR
[01/03/2012 - 15:47:16 | D] - F:\UBISCRABBLE
[11/11/2010 - 20:04:40 | N | 5150 Ko | F6869BB37D6FF35B1AA7EB49BCACA46D] - F:\registrybooster.exe
[11/02/2013 - 10:16:42 | N | 998 Ko | 0334D9B74EEA6150759F6F4A5DD16C0C] - F:\utorrent.exe
[28/09/2013 - 19:13:12 | N | 5071 Ko | CA4B8CE1BB551A0A89BC5BD16831D7FA] - F:\unetbootin_5-85_fr_282172.exe
[11/09/2009 - 19:06:28 | D] - F:\Recycled
[20/09/2010 - 09:07:20 | N | 3 Ko] - F:\BOOTEX.LOG
[07/04/2014 - 08:53:41 | SHD] - G:\$RECYCLE.BIN
[30/08/2012 - 16:51:09 | D] - G:\apprendre adobe premiere elements 9
[30/08/2012 - 19:40:49 | D] - G:\document
[09/09/2010 - 23:23:39 | D] - G:\Extras
[01/09/2011 - 15:34:12 | D] - G:\Films Cin�ma
[30/08/2012 - 17:52:08 | N | 1 Ko] - G:\MediaID.bin
[13/11/2013 - 12:29:34 | D] - G:\Music
[21/01/2013 - 15:03:50 | D] - G:\PHOTOS
[16/01/2014 - 19:55:40 | D] - G:\PROPRI�TAIRE-PC
[07/08/2012 - 18:16:37 | SHD] - G:\RECYCLER
[01/09/2012 - 20:02:08 | SHD] - G:\System Volume Information
[09/09/2010 - 23:23:39 | D] - G:\User Manuals
[08/09/2010 - 19:51:24 | N | 4507 Ko | 198CC10340D7A27898A2F19E2E41E751] - G:\WD Quick Formatter.exe
[09/09/2010 - 23:24:12 | D] - G:\WD SmartWare
[09/09/2010 - 23:23:44 | D] - G:\WD SmartWare for Mac
[08/09/2010 - 19:51:22 | N | 5424 Ko | 6FD4AD830D30E1CDCDA539EBD1118CB2] - G:\WD SmartWare.exe
[07/08/2012 - 17:59:44 | D] - G:\WD SmartWare.swstor
[30/08/2012 - 18:29:10 | D] - G:\WindowsImageBackup
################## | Vaccin |
D:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
F:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
G:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
H:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
################## | E.O.F | http://www.usbfix.net/ - http://www.sosvirus.net |
Utilisateur: Propri�taire (Administrateur) # PROPRI�TAIRE-PC
Mis � jour le 31/03/2014 par El Desaparecido - Team SosVirus
Lanc� � 08:58:57 | 07/04/2014
Site Web : http://www.usbfix.net/
Changelog : http://www.usbfix.net/maj/
Support : http://www.sosvirus.net/forum-virus-securite.html
Upload Malware : http://www.sosvirus.net/upload_malware.php
Contact : http://www.usbfix.net/contact/
PC: Hewlett-Packard (365C)
CPU: Intel(R) Core(TM) i7 CPU Q 720 @ 1.60GHz
RAM -> [Total : 4087 Mo| Free : 2564 Mo]
Bios: Hewlett-Packard
Boot: Normal boot
OS: Microsoft Windows�7 �dition Familiale Premium (6.1.7601 64-Bit) Service Pack 1
WB: Windows Internet Explorer : 11.0.9600.16521
WB: Google Chrome : 32.0.1700.76
WB: Mozilla Firefox : 28.0
SC: Security Center [Enabled]
WU: Windows Update [Enabled]
AV: Avira Desktop [(!) Disabled | Updated]
AS: Avira Desktop [(!) Disabled | Updated]
AS: Windows Defender [Enabled | Updated]
FW: FireWall [Enabled]
FW: Windows FireWall [Enabled]
C:\ (%systemdrive%) -> Disque fixe # 238 Go (93 Go libre(s) - 39%) [] # NTFS
D:\ -> Disque fixe # 596 Go (185 Go libre(s) - 31%) [DATA] # NTFS
E:\ -> CD-ROM
F:\ -> Disque amovible # 7 Go (1 Go libre(s) - 13%) [CORSAIR] # FAT32
G:\ -> Disque fixe # 1863 Go (1514 Go libre(s) - 81%) [My Book] # NTFS
H:\ -> Disque amovible # 8 Go (8 Go libre(s) - 100%) [] # FAT32
################## | Processus Actif |
C:\Windows\system32\csrss.exe (ID: 504 |ParentID: 412)
C:\Windows\system32\wininit.exe (ID: 588 |ParentID: 412)
C:\Windows\system32\csrss.exe (ID: 604 |ParentID: 592)
C:\Windows\system32\services.exe (ID: 656 |ParentID: 588)
C:\Windows\system32\lsass.exe (ID: 664 |ParentID: 588)
C:\Windows\system32\lsm.exe (ID: 672 |ParentID: 588)
C:\Windows\system32\winlogon.exe (ID: 728 |ParentID: 592)
C:\Windows\system32\svchost.exe (ID: 812 |ParentID: 656)
C:\Windows\system32\nvvsvc.exe (ID: 884 |ParentID: 656)
C:\Windows\system32\svchost.exe (ID: 924 |ParentID: 656)
C:\Windows\System32\svchost.exe (ID: 1020 |ParentID: 656)
C:\Windows\System32\svchost.exe (ID: 312 |ParentID: 656)
C:\Windows\system32\svchost.exe (ID: 512 |ParentID: 656)
C:\Windows\system32\svchost.exe (ID: 372 |ParentID: 656)
C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_70dacb64382a61a7\STacSV64.exe (ID: 940 |ParentID: 656)
C:\Windows\system32\svchost.exe (ID: 1252 |ParentID: 656)
C:\Windows\system32\Hpservice.exe (ID: 1316 |ParentID: 656)
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (ID: 1336 |ParentID: 884)
C:\Windows\system32\nvvsvc.exe (ID: 1344 |ParentID: 884)
C:\Windows\system32\vcsFPService.exe (ID: 1388 |ParentID: 656)
C:\Windows\system32\svchost.exe (ID: 1476 |ParentID: 656)
C:\Windows\System32\spoolsv.exe (ID: 1724 |ParentID: 656)
C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (ID: 1756 |ParentID: 656)
C:\Windows\system32\svchost.exe (ID: 1792 |ParentID: 656)
C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe (ID: 1960 |ParentID: 656)
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (ID: 2036 |ParentID: 656)
C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_70dacb64382a61a7\AESTSr64.exe (ID: 1216 |ParentID: 656)
C:\Program Files (x86)\Avira\AntiVir Desktop\avfwsvc.exe (ID: 1184 |ParentID: 656)
C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (ID: 1516 |ParentID: 656)
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (ID: 1776 |ParentID: 656)
C:\Program Files\Bonjour\mDNSResponder.exe (ID: 1976 |ParentID: 656)
C:\Program Files\Orange\mes contenus - mon disque\mounter.exe (ID: 1332 |ParentID: 656)
C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe (ID: 2084 |ParentID: 656)
C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe (ID: 2116 |ParentID: 656)
C:\Windows\system32\taskhost.exe (ID: 2236 |ParentID: 656)
C:\Windows\system32\taskeng.exe (ID: 2288 |ParentID: 372)
C:\Windows\system32\Dwm.exe (ID: 2308 |ParentID: 312)
C:\Windows\Explorer.EXE (ID: 2340 |ParentID: 2276)
C:\Windows\system32\taskeng.exe (ID: 2424 |ParentID: 372)
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (ID: 2528 |ParentID: 2424)
C:\Windows\system32\runonce.exe (ID: 2588 |ParentID: 2340)
C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe (ID: 2620 |ParentID: 656)
C:\Windows\SysWOW64\runonce.exe (ID: 2628 |ParentID: 2588)
C:\ProgramData\DatacardService\HWDeviceService64.exe (ID: 2684 |ParentID: 656)
C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe (ID: 2724 |ParentID: 656)
C:\ProgramData\DatacardService\DCSHelper.exe (ID: 2744 |ParentID: 2684)
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe (ID: 2784 |ParentID: 656)
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe (ID: 2940 |ParentID: 656)
C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe (ID: 3036 |ParentID: 656)
c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe (ID: 2056 |ParentID: 656)
C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe (ID: 2332 |ParentID: 656)
C:\Program Files (x86)\Secunia\PSI\PSIA.exe (ID: 2464 |ParentID: 656)
C:\Program Files (x86)\Secunia\PSI\sua.exe (ID: 3100 |ParentID: 656)
C:\Program Files (x86)\Skype\Updater\Updater.exe (ID: 3128 |ParentID: 656)
C:\Windows\system32\svchost.exe (ID: 3156 |ParentID: 656)
C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe (ID: 3196 |ParentID: 656)
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe (ID: 3216 |ParentID: 2940)
C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe (ID: 3236 |ParentID: 656)
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe (ID: 3296 |ParentID: 656)
C:\Windows\system32\wbem\wmiprvse.exe (ID: 3608 |ParentID: 812)
C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (ID: 2696 |ParentID: 1516)
C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe (ID: 4304 |ParentID: 656)
C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE (ID: 4424 |ParentID: 656)
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (ID: 4564 |ParentID: 1336)
C:\Windows\system32\SearchIndexer.exe (ID: 5032 |ParentID: 656)
C:\Windows\system32\svchost.exe (ID: 4832 |ParentID: 656)
C:\Windows\System32\rundll32.exe (ID: 5012 |ParentID: 812)
C:\Windows\system32\SearchProtocolHost.exe (ID: 4784 |ParentID: 5032)
C:\Windows\system32\SearchFilterHost.exe (ID: 1556 |ParentID: 5032)
C:\Windows\System32\WUDFHost.exe (ID: 4312 |ParentID: 312)
################## | Recherche g�n�rique |
(!) Fichiers temporaires supprim�s.
################## | Registre |
################## | Regedit Run |
F2 - HKLM\..\Winlogon : [Shell] Explorer.exe
F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
04 - HKCU\..\Run : [TomTomHOME.exe] "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe"
04 - HKCU\..\Run : [SkyDrive] "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background
04 - HKCU\..\Run : [OfficeSyncProcess] "C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE"
04 - HKCU\..\Run : [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
04 - HKCU\..\Run : [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
04 - HKCU\..\Run : [GoogleDriveSync] "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
04 - HKCU\..\Run : [Google Update] "C:\Users\Propri�taire\AppData\Local\Google\Update\GoogleUpdate.exe" /c
04 - HKCU\..\Run : [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
04 - HKCU\..\Run : [AppleIEDAV] C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe
04 - HKCU\..\Run : [Google+ Auto Backup] "C:\Users\Propri�taire\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe" /autostart
04 - HKCU\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64"
04 - HKCU\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64"
04 - HKCU\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64"
04 - HKCU\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64"
04 - HKCU\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64"
04 - HKLM\..\Run : []
04 - HKLM\..\Run : [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
04 - HKLM\..\Run : [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
04 - HKLM\..\Run : [Start_Update_{9d78a505-6248-4d1b-81b6-df69655beccf}] C:\Program Files (x86)\Orange\wifi d'Orange\{9d78a505-6248-4d1b-81b6-df69655beccf}\UpdteApp.exe
04 - HKLM\..\Run : [Start_OrangeWifi_{9d78a505-6248-4d1b-81b6-df69655beccf}] C:\Program Files (x86)\Orange\wifi d'Orange\{9d78a505-6248-4d1b-81b6-df69655beccf}\OrangeWifi.exe
04 - HKLM\..\Run : [NBAgent] "C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart
04 - HKLM\..\Run : [HD Audio Driver] C:\Windows\explorer.exe "C:\Users\Propri�taire\AppData\Roaming\Realtek\RAVCpl32.exe"
04 - HKLM\..\Run : [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
04 - HKLM\..\Run : [AdobeCS5.5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin
04 - HKLM\..\Run : [AdobeCS4ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
04 - HKLM\..\Run : [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
04 - HKLM\..\Run : [fst_fr_48]
04 - HKLM\..\Run : [TkBellExe] "C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe" -osboot
04 - HKLM\..\Run : [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
04 - HKLM\..\Run : [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
04 - [x64] HKLM\..\Run : [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe
04 - [x64] HKLM\..\Run : [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
04 - [x64] HKLM\..\Run : [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe
04 - [x64] HKLM\..\Run : [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
04 - [x64] HKLM\..\Run : [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [TomTomHOME.exe] "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe"
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [SkyDrive] "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [OfficeSyncProcess] "C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE"
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [GoogleDriveSync] "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [Google Update] "C:\Users\Propri�taire\AppData\Local\Google\Update\GoogleUpdate.exe" /c
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [AppleIEDAV] C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\Run : [Google+ Auto Backup] "C:\Users\Propri�taire\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe" /autostart
04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64"
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2006.0314\amd64"
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64"
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64"
04 - HKU\S-1-5-21-1979893305-3973858678-1507970451-1000\..\RunOnce : [Uninstall C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Propri�taire\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64"
################## | Listing |
[07/01/2013 - 22:00:41 | SHD] - C:\$Recycle.Bin
[23/03/2014 - 09:41:06 | D] - C:\AdwCleaner
[07/11/2013 - 19:19:53 | A | 0 Ko] - C:\autoexec.bat
[05/04/2014 - 22:21:43 | D] - C:\Config.Msi
[24/01/2014 - 10:28:40 | N | 1 Ko | 6EA57FDC123D98BA702F5B5C9583EF1D] - C:\DelFix.txt
[14/07/2009 - 07:08:56 | SHD] - C:\Documents and Settings
[11/02/2013 - 11:18:05 | N | 0 Ko] - C:\find_installed_search_provider.log
[07/04/2014 - 08:58:04 | ASH | 3138716 Ko] - C:\hiberfil.sys
[07/08/2012 - 11:05:42 | D] - C:\Intel
[07/08/2012 - 18:45:50 | RHD] - C:\MSOCache
[07/04/2014 - 08:58:07 | ASH | 4184956 Ko] - C:\pagefile.sys
[14/07/2009 - 05:20:08 | D] - C:\PerfLogs
[06/04/2014 - 21:44:41 | N | 1 Ko] - C:\PhysicalDisk0_MBR.bin
[05/04/2014 - 22:21:23 | D] - C:\Program Files
[05/04/2014 - 22:41:57 | D] - C:\Program Files (x86)
[05/04/2014 - 22:43:19 | D] - C:\Program1
[05/04/2014 - 22:21:23 | HD] - C:\ProgramData
[06/08/2012 - 18:39:09 | SHD] - C:\Recovery
[07/11/2013 - 19:19:13 | N | 0 Ko] - C:\sh4_service.log
[18/10/2013 - 16:01:12 | N | 279 Ko] - C:\shldr
[18/10/2013 - 16:01:12 | N | 8 Ko] - C:\shldr.mbr
[04/04/2014 - 23:38:34 | D] - C:\Shortcut_Module
[01/11/2012 - 21:39:38 | D] - C:\swsetup
[07/04/2014 - 07:42:48 | SHD] - C:\System Volume Information
[07/08/2012 - 12:20:18 | D] - C:\system.sav
[07/04/2014 - 08:57:09 | D] - C:\UsbFix
[07/04/2014 - 08:44:46 | N | 22 Ko | 0B3890C23F06254A0FAA2BED76C753F5] - C:\UsbFix [Clean 2] PROPRI�TAIRE-PC.txt
[07/04/2014 - 08:54:05 | N | 19 Ko | EC37159F3559F3C0B45F403CFBFB8606] - C:\UsbFix [Clean 4] PROPRI�TAIRE-PC.txt
[07/04/2014 - 08:54:53 | N | 19 Ko | EC37159F3559F3C0B45F403CFBFB8606] - C:\UsbFix [Clean 4]n2_07_04_2014 PROPRI�TAIRE-PC.txt
[07/04/2014 - 08:59:43 | A | 16 Ko | 4CC86A11EA9E4BB696389A8EA32AF34A] - C:\UsbFix [Clean 6] PROPRI�TAIRE-PC.txt
[12/02/2014 - 18:34:41 | D] - C:\Users
[06/04/2014 - 21:07:50 | D] - C:\Windows
[08/08/2012 - 23:31:09 | SHD] - D:\$RECYCLE.BIN
[18/01/2014 - 13:19:34 | D] - D:\denis
[04/01/2014 - 21:56:14 | D] - D:\Documents
[07/08/2012 - 15:52:35 | D] - D:\lombardiHP
[20/07/2012 - 14:31:48 | D] - D:\LOMBARDIHP-PC
[08/11/2010 - 20:22:59 | N | 1 Ko] - D:\MediaID.bin
[18/02/2014 - 13:51:20 | D] - D:\Music
[23/02/2013 - 16:12:46 | N | 25 Ko] - D:\off_dib.bmp
[22/07/2013 - 16:16:52 | D] - D:\PC Drive files
[19/05/2013 - 16:03:01 | D] - D:\PHOTOS
[16/11/2013 - 21:40:03 | D] - D:\pinnacle studio14
[20/02/2014 - 19:49:39 | D] - D:\PROPRI�TAIRE-PC
[31/01/2014 - 08:29:56 | SHD] - D:\System Volume Information
[12/01/2013 - 19:16:05 | D] - D:\Videos
[04/04/2014 - 14:22:17 | N | 1700 Ko] - D:\VirtualDJ Local Database v6.xml
[08/11/2010 - 20:28:11 | D] - D:\WindowsImageBackup
[27/12/2009 - 14:42:28 | D] - F:\LOGICIELS
[22/10/2008 - 11:44:40 | D] - F:\doc officielle
[26/10/2010 - 17:51:20 | N | 4 Ko] - F:\VirtualDJ Local Database v6.xml
[01/09/2010 - 10:39:48 | D] - F:\PDF CREATOR
[01/03/2012 - 15:47:16 | D] - F:\UBISCRABBLE
[11/11/2010 - 20:04:40 | N | 5150 Ko | F6869BB37D6FF35B1AA7EB49BCACA46D] - F:\registrybooster.exe
[11/02/2013 - 10:16:42 | N | 998 Ko | 0334D9B74EEA6150759F6F4A5DD16C0C] - F:\utorrent.exe
[28/09/2013 - 19:13:12 | N | 5071 Ko | CA4B8CE1BB551A0A89BC5BD16831D7FA] - F:\unetbootin_5-85_fr_282172.exe
[11/09/2009 - 19:06:28 | D] - F:\Recycled
[20/09/2010 - 09:07:20 | N | 3 Ko] - F:\BOOTEX.LOG
[07/04/2014 - 08:53:41 | SHD] - G:\$RECYCLE.BIN
[30/08/2012 - 16:51:09 | D] - G:\apprendre adobe premiere elements 9
[30/08/2012 - 19:40:49 | D] - G:\document
[09/09/2010 - 23:23:39 | D] - G:\Extras
[01/09/2011 - 15:34:12 | D] - G:\Films Cin�ma
[30/08/2012 - 17:52:08 | N | 1 Ko] - G:\MediaID.bin
[13/11/2013 - 12:29:34 | D] - G:\Music
[21/01/2013 - 15:03:50 | D] - G:\PHOTOS
[16/01/2014 - 19:55:40 | D] - G:\PROPRI�TAIRE-PC
[07/08/2012 - 18:16:37 | SHD] - G:\RECYCLER
[01/09/2012 - 20:02:08 | SHD] - G:\System Volume Information
[09/09/2010 - 23:23:39 | D] - G:\User Manuals
[08/09/2010 - 19:51:24 | N | 4507 Ko | 198CC10340D7A27898A2F19E2E41E751] - G:\WD Quick Formatter.exe
[09/09/2010 - 23:24:12 | D] - G:\WD SmartWare
[09/09/2010 - 23:23:44 | D] - G:\WD SmartWare for Mac
[08/09/2010 - 19:51:22 | N | 5424 Ko | 6FD4AD830D30E1CDCDA539EBD1118CB2] - G:\WD SmartWare.exe
[07/08/2012 - 17:59:44 | D] - G:\WD SmartWare.swstor
[30/08/2012 - 18:29:10 | D] - G:\WindowsImageBackup
################## | Vaccin |
D:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
F:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
G:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
H:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
################## | E.O.F | http://www.usbfix.net/ - http://www.sosvirus.net |