Publicité
Publicité
Format du document : text/plain
Prévisualisation
[b]############################## | UsbFix V 7.182 | [Recherche][/b]
Utilisateur: Pietro (Administrateur) # PIETRO-HP
Mis � jour le 14/09/2014 par El Desaparecido - SosVirus
Lanc� � 14:24:37 | 16/09/2014
Site Web : [url=http://www.usbfix.net/]http://www.usbfix.net/[/url]
Changelog : [url=http://www.usbfix.net/maj/]http://www.usbfix.net/maj/[/url]
Assistance : [url=http://www.sosvirus.net/forum-virus-securite.html]http://www.sosvirus.net/forum-virus-securite.html[/url]
Upload Malware : [url=http://www.sosvirus.net/upload_malware.php]http://www.sosvirus.net/upload_malware.php[/url]
D�tection en Live : [url=http://comment-supprimer.fr/]http://comment-supprimer.fr/[/url]
Contact : [url=http://www.usbfix.net/contact/]http://www.usbfix.net/contact/[/url]
[b]################## | System information |[/b]
MB: Hewlett-Packard (144A)
CPU: Intel(R) Core(TM) i5 CPU M 460 @ 2.53GHz
GC: Intel(R) HD Graphics
GC: ATI Mobility Radeon HD 5650
RAM -> [Total : 3894 Mo | Free : 2025 Mo]
Bios: Hewlett-Packard
Boot: Normal boot
OS: Microsoft� Windows 7 Home Premium (6.1.7601 64-Bit) Service Pack 1
WB: Internet Explorer : 11.00.9600.16428
WB: Safari : 534.57.2
[b]################## | Security Information |[/b]
AV: Avira Desktop [[b](!) D�sactiv�[/b] |A jour]
AS: Avira Desktop [[b](!) D�sactiv�[/b] |A jour]
AS: Windows Defender [[b](!) D�sactiv�[/b] |A jour]
AS: Malwarebytes Anti-Malware : 1.75.0001
FW: Windows Firewall [Actif]
SC: Security Center [Actif]
WU: Windows Update [Actif]
[b]################## | Disk Information |[/b]
C:\ (%SystemDrive%) -> Disque fixe # 912 Go (284 Go libre(s) - 31%) [] # NTFS
D:\ -> Disque fixe # 20 Go (3 Go libre(s) - 15%) [RECOVERY] # NTFS
G:\ -> Disque fixe # 466 Go (314 Go libre(s) - 68%) [Pietro500GO] # exFAT
[b]################## | Regedit Run |[/b]
F2 - HKLM\..\Winlogon : [Shell] Explorer.exe
F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - HKLM\..\Winlogon : [Userinit] userinit.exe
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\System32\Userinit.exe,
04 - HKCU\..\Run : [Google Update] "C:\Users\Pietro\AppData\Local\Google\Update\GoogleUpdate.exe" /c
04 - HKCU\..\Run : [RGSC] C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
04 - HKCU\..\Run : [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe"
04 - HKCU\..\Run : [BitTorrent] "C:\Users\Pietro\AppData\Roaming\BitTorrent\BitTorrent.exe" /MINIMIZED
04 - HKCU\..\Run : [SURVIVAL] wscript.exe //B "C:\Users\Pietro\AppData\Local\Temp\SURVIVAL.vbe"
04 - HKCU\..\Run : [ffbbb464b537cc67f28606ca3832eb71] "C:\Users\Pietro\AppData\Local\Temp\StayIcon.exe" ..
04 - HKCU\..\Run : [222] wscript.exe //B "C:\Users\Pietro\AppData\Local\Temp\222.vbe"
04 - HKCU\..\Run : [97a3fee10d8c021a9b64e9a351547774] "C:\Users\Pietro\AppData\Local\Temp\OSP2.pif" ..
04 - HKCU\..\Run : [5b5ed1af05d79789bfd6ed370a062a46] ..
04 - HKCU\..\Run : [eae07fb211dfe48f76d6253ab5226254] "C:\Users\Pietro\AppData\Local\Temp\rundll.pif" ..
04 - HKCU\..\Run : [f4f0725a7eaeabf0af3484c5a8e0ddd2] "C:\Users\Pietro\AppData\Local\Temp\rundll7.exe" ..
04 - HKCU\..\Run : [6420357f107124fc58a0231a58e5d91b] "C:\Users\Pietro\AppData\Local\Temp\rundll74.exe" ..
04 - HKLM\..\Run : [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
04 - HKLM\..\Run : [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
04 - HKLM\..\Run : [StartCCC] "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
04 - HKLM\..\Run : [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
04 - HKLM\..\Run : [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
04 - HKLM\..\Run : [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
04 - HKLM\..\Run : [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
04 - HKLM\..\Run : [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
04 - HKLM\..\Run : [Avira Systray] C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
04 - [x64] HKLM\..\Run : [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
04 - [x64] HKLM\..\Run : [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe
04 - [x64] HKLM\..\Run : [SmartMenu] C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe /background
04 - [x64] HKLM\..\Run : [HPWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe 120 C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe /hidden
04 - [x64] HKLM\..\Run : [IgfxTray] C:\Windows\system32\igfxtray.exe
04 - [x64] HKLM\..\Run : [HotKeysCmds] C:\Windows\system32\hkcmd.exe
04 - [x64] HKLM\..\Run : [Persistence] C:\Windows\system32\igfxpers.exe
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\..\Run : [Google Update] "C:\Users\Pietro\AppData\Local\Google\Update\GoogleUpdate.exe" /c
04 - HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\..\Run : [RGSC] C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
04 - HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\..\Run : [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe"
04 - HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\..\Run : [AdobeBridge]
04 - HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\..\Run : [BitTorrent] "C:\Users\Pietro\AppData\Roaming\BitTorrent\BitTorrent.exe" /MINIMIZED
04 - HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\..\Run : [SURVIVAL] wscript.exe //B "C:\Users\Pietro\AppData\Local\Temp\SURVIVAL.vbe"
04 - HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\..\Run : [ffbbb464b537cc67f28606ca3832eb71] "C:\Users\Pietro\AppData\Local\Temp\StayIcon.exe" ..
04 - HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\..\Run : [222] wscript.exe //B "C:\Users\Pietro\AppData\Local\Temp\222.vbe"
04 - HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\..\Run : [97a3fee10d8c021a9b64e9a351547774] "C:\Users\Pietro\AppData\Local\Temp\OSP2.pif" ..
04 - HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\..\Run : [5b5ed1af05d79789bfd6ed370a062a46] ..
04 - HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\..\Run : [eae07fb211dfe48f76d6253ab5226254] "C:\Users\Pietro\AppData\Local\Temp\rundll.pif" ..
04 - HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\..\Run : [f4f0725a7eaeabf0af3484c5a8e0ddd2] "C:\Users\Pietro\AppData\Local\Temp\rundll7.exe" ..
04 - HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\..\Run : [6420357f107124fc58a0231a58e5d91b] "C:\Users\Pietro\AppData\Local\Temp\rundll74.exe" ..
04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-18\..\RunOnce : [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601
[b]################## | Recherche g�n�rique |[/b]
Pr�sent! C:\Users\Pietro\AppData\Roaming\222.vbe
Pr�sent! C:\Users\Pietro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\222.vbe
Pr�sent! C:\Users\Pietro\AppData\Local\Temp\222.vbe
Pr�sent! C:\Users\Pietro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\6420357f107124fc58a0231a58e5d91b.exe
Pr�sent! C:\Users\Pietro\AppData\Local\Temp\2.pif
Pr�sent! C:\Users\Pietro\AppData\Local\Temp\222.pif
Pr�sent! C:\Users\Pietro\AppData\Local\Temp\95.pif
Pr�sent! C:\Users\Pietro\AppData\Local\Temp\l877.pif
Pr�sent! C:\Users\Pietro\AppData\Local\Temp\P.pif
[b]################## | Registre |[/b]
Pr�sent! HKCU\Software\5b5ed1af05d79789bfd6ed370a062a46
Pr�sent! HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\Software\5b5ed1af05d79789bfd6ed370a062a46
Pr�sent! HKCU\Software\6420357f107124fc58a0231a58e5d91b
Pr�sent! HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\Software\6420357f107124fc58a0231a58e5d91b
Pr�sent! HKCU\Software\97a3fee10d8c021a9b64e9a351547774
Pr�sent! HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\Software\97a3fee10d8c021a9b64e9a351547774
Pr�sent! HKCU\Software\eae07fb211dfe48f76d6253ab5226254
Pr�sent! HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\Software\eae07fb211dfe48f76d6253ab5226254
Pr�sent! HKCU\Software\f4f0725a7eaeabf0af3484c5a8e0ddd2
Pr�sent! HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\Software\f4f0725a7eaeabf0af3484c5a8e0ddd2
Pr�sent! HKCU\Software\ffbbb464b537cc67f28606ca3832eb71
Pr�sent! HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\Software\ffbbb464b537cc67f28606ca3832eb71
Pr�sent! HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\Software\Microsoft\Windows\CurrentVersion\Run|222
Pr�sent! HKCU\Software\Microsoft\Windows\CurrentVersion\Run|222
Pr�sent! HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\Software\Microsoft\Windows\CurrentVersion\Run|6420357f107124fc58a0231a58e5d91b
Pr�sent! HKCU\Software\Microsoft\Windows\CurrentVersion\Run|6420357f107124fc58a0231a58e5d91b
Pr�sent! HKCU|di
Pr�sent! HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\Software\Microsoft\Windows\CurrentVersion\Run|5b5ed1af05d79789bfd6ed370a062a46
Pr�sent! HKCU\Software\Microsoft\Windows\CurrentVersion\Run|5b5ed1af05d79789bfd6ed370a062a46
Pr�sent! HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\Software\Microsoft\Windows\CurrentVersion\Run|97a3fee10d8c021a9b64e9a351547774
Pr�sent! HKCU\Software\Microsoft\Windows\CurrentVersion\Run|97a3fee10d8c021a9b64e9a351547774
Pr�sent! HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\Software\Microsoft\Windows\CurrentVersion\Run|eae07fb211dfe48f76d6253ab5226254
Pr�sent! HKCU\Software\Microsoft\Windows\CurrentVersion\Run|eae07fb211dfe48f76d6253ab5226254
Pr�sent! HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\Software\Microsoft\Windows\CurrentVersion\Run|f4f0725a7eaeabf0af3484c5a8e0ddd2
Pr�sent! HKCU\Software\Microsoft\Windows\CurrentVersion\Run|f4f0725a7eaeabf0af3484c5a8e0ddd2
Pr�sent! HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\Software\Microsoft\Windows\CurrentVersion\Run|ffbbb464b537cc67f28606ca3832eb71
Pr�sent! HKCU\Software\Microsoft\Windows\CurrentVersion\Run|ffbbb464b537cc67f28606ca3832eb71
Pr�sent! HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\Software\Microsoft\Windows\CurrentVersion\Run|SURVIVAL
Pr�sent! HKCU\Software\Microsoft\Windows\CurrentVersion\Run|SURVIVAL
[b]################## | UsbFix - Information |[/b]
UsbFix a d�tect� sur votre ordinateur, une infection qui dispose d'une fonction de Keylogger.
Apr�s d�sinfection par UsbFix, veuillez modifier tous vos mots de passe.
Si vous avez effectu� des achats sur internet,
veuillez contacter votre banque afin d'envisager une opposition sur votre carte bancaire.Info : [url=https://www.youtube.com/watch?v=vUZYYASd7FE]Comment supprimer l'infection des raccourcis sur USB ? (Video)[/url]
Info : [url=http://www.en.usbfix.net/2014/03/remove-shortcut-virus-usb/]L'infection des raccourcis USB, c'est quoi ?[/url]
[b]################## | Hijack |[/b]
[b]################## | E.O.F | [url=http://www.sosvirus.net/]http://www.sosvirus.net/[/url] | [url=http://www.usbfix.net/]http://www.usbfix.net/[/url] |[/b]
Utilisateur: Pietro (Administrateur) # PIETRO-HP
Mis � jour le 14/09/2014 par El Desaparecido - SosVirus
Lanc� � 14:24:37 | 16/09/2014
Site Web : [url=http://www.usbfix.net/]http://www.usbfix.net/[/url]
Changelog : [url=http://www.usbfix.net/maj/]http://www.usbfix.net/maj/[/url]
Assistance : [url=http://www.sosvirus.net/forum-virus-securite.html]http://www.sosvirus.net/forum-virus-securite.html[/url]
Upload Malware : [url=http://www.sosvirus.net/upload_malware.php]http://www.sosvirus.net/upload_malware.php[/url]
D�tection en Live : [url=http://comment-supprimer.fr/]http://comment-supprimer.fr/[/url]
Contact : [url=http://www.usbfix.net/contact/]http://www.usbfix.net/contact/[/url]
[b]################## | System information |[/b]
MB: Hewlett-Packard (144A)
CPU: Intel(R) Core(TM) i5 CPU M 460 @ 2.53GHz
GC: Intel(R) HD Graphics
GC: ATI Mobility Radeon HD 5650
RAM -> [Total : 3894 Mo | Free : 2025 Mo]
Bios: Hewlett-Packard
Boot: Normal boot
OS: Microsoft� Windows 7 Home Premium (6.1.7601 64-Bit) Service Pack 1
WB: Internet Explorer : 11.00.9600.16428
WB: Safari : 534.57.2
[b]################## | Security Information |[/b]
AV: Avira Desktop [[b](!) D�sactiv�[/b] |A jour]
AS: Avira Desktop [[b](!) D�sactiv�[/b] |A jour]
AS: Windows Defender [[b](!) D�sactiv�[/b] |A jour]
AS: Malwarebytes Anti-Malware : 1.75.0001
FW: Windows Firewall [Actif]
SC: Security Center [Actif]
WU: Windows Update [Actif]
[b]################## | Disk Information |[/b]
C:\ (%SystemDrive%) -> Disque fixe # 912 Go (284 Go libre(s) - 31%) [] # NTFS
D:\ -> Disque fixe # 20 Go (3 Go libre(s) - 15%) [RECOVERY] # NTFS
G:\ -> Disque fixe # 466 Go (314 Go libre(s) - 68%) [Pietro500GO] # exFAT
[b]################## | Regedit Run |[/b]
F2 - HKLM\..\Winlogon : [Shell] Explorer.exe
F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - HKLM\..\Winlogon : [Userinit] userinit.exe
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\System32\Userinit.exe,
04 - HKCU\..\Run : [Google Update] "C:\Users\Pietro\AppData\Local\Google\Update\GoogleUpdate.exe" /c
04 - HKCU\..\Run : [RGSC] C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
04 - HKCU\..\Run : [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe"
04 - HKCU\..\Run : [BitTorrent] "C:\Users\Pietro\AppData\Roaming\BitTorrent\BitTorrent.exe" /MINIMIZED
04 - HKCU\..\Run : [SURVIVAL] wscript.exe //B "C:\Users\Pietro\AppData\Local\Temp\SURVIVAL.vbe"
04 - HKCU\..\Run : [ffbbb464b537cc67f28606ca3832eb71] "C:\Users\Pietro\AppData\Local\Temp\StayIcon.exe" ..
04 - HKCU\..\Run : [222] wscript.exe //B "C:\Users\Pietro\AppData\Local\Temp\222.vbe"
04 - HKCU\..\Run : [97a3fee10d8c021a9b64e9a351547774] "C:\Users\Pietro\AppData\Local\Temp\OSP2.pif" ..
04 - HKCU\..\Run : [5b5ed1af05d79789bfd6ed370a062a46] ..
04 - HKCU\..\Run : [eae07fb211dfe48f76d6253ab5226254] "C:\Users\Pietro\AppData\Local\Temp\rundll.pif" ..
04 - HKCU\..\Run : [f4f0725a7eaeabf0af3484c5a8e0ddd2] "C:\Users\Pietro\AppData\Local\Temp\rundll7.exe" ..
04 - HKCU\..\Run : [6420357f107124fc58a0231a58e5d91b] "C:\Users\Pietro\AppData\Local\Temp\rundll74.exe" ..
04 - HKLM\..\Run : [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
04 - HKLM\..\Run : [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
04 - HKLM\..\Run : [StartCCC] "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
04 - HKLM\..\Run : [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
04 - HKLM\..\Run : [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
04 - HKLM\..\Run : [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
04 - HKLM\..\Run : [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
04 - HKLM\..\Run : [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
04 - HKLM\..\Run : [Avira Systray] C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
04 - [x64] HKLM\..\Run : [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
04 - [x64] HKLM\..\Run : [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe
04 - [x64] HKLM\..\Run : [SmartMenu] C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe /background
04 - [x64] HKLM\..\Run : [HPWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe 120 C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe /hidden
04 - [x64] HKLM\..\Run : [IgfxTray] C:\Windows\system32\igfxtray.exe
04 - [x64] HKLM\..\Run : [HotKeysCmds] C:\Windows\system32\hkcmd.exe
04 - [x64] HKLM\..\Run : [Persistence] C:\Windows\system32\igfxpers.exe
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\..\Run : [Google Update] "C:\Users\Pietro\AppData\Local\Google\Update\GoogleUpdate.exe" /c
04 - HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\..\Run : [RGSC] C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
04 - HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\..\Run : [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe"
04 - HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\..\Run : [AdobeBridge]
04 - HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\..\Run : [BitTorrent] "C:\Users\Pietro\AppData\Roaming\BitTorrent\BitTorrent.exe" /MINIMIZED
04 - HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\..\Run : [SURVIVAL] wscript.exe //B "C:\Users\Pietro\AppData\Local\Temp\SURVIVAL.vbe"
04 - HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\..\Run : [ffbbb464b537cc67f28606ca3832eb71] "C:\Users\Pietro\AppData\Local\Temp\StayIcon.exe" ..
04 - HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\..\Run : [222] wscript.exe //B "C:\Users\Pietro\AppData\Local\Temp\222.vbe"
04 - HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\..\Run : [97a3fee10d8c021a9b64e9a351547774] "C:\Users\Pietro\AppData\Local\Temp\OSP2.pif" ..
04 - HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\..\Run : [5b5ed1af05d79789bfd6ed370a062a46] ..
04 - HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\..\Run : [eae07fb211dfe48f76d6253ab5226254] "C:\Users\Pietro\AppData\Local\Temp\rundll.pif" ..
04 - HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\..\Run : [f4f0725a7eaeabf0af3484c5a8e0ddd2] "C:\Users\Pietro\AppData\Local\Temp\rundll7.exe" ..
04 - HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\..\Run : [6420357f107124fc58a0231a58e5d91b] "C:\Users\Pietro\AppData\Local\Temp\rundll74.exe" ..
04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-18\..\RunOnce : [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601
[b]################## | Recherche g�n�rique |[/b]
Pr�sent! C:\Users\Pietro\AppData\Roaming\222.vbe
Pr�sent! C:\Users\Pietro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\222.vbe
Pr�sent! C:\Users\Pietro\AppData\Local\Temp\222.vbe
Pr�sent! C:\Users\Pietro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\6420357f107124fc58a0231a58e5d91b.exe
Pr�sent! C:\Users\Pietro\AppData\Local\Temp\2.pif
Pr�sent! C:\Users\Pietro\AppData\Local\Temp\222.pif
Pr�sent! C:\Users\Pietro\AppData\Local\Temp\95.pif
Pr�sent! C:\Users\Pietro\AppData\Local\Temp\l877.pif
Pr�sent! C:\Users\Pietro\AppData\Local\Temp\P.pif
[b]################## | Registre |[/b]
Pr�sent! HKCU\Software\5b5ed1af05d79789bfd6ed370a062a46
Pr�sent! HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\Software\5b5ed1af05d79789bfd6ed370a062a46
Pr�sent! HKCU\Software\6420357f107124fc58a0231a58e5d91b
Pr�sent! HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\Software\6420357f107124fc58a0231a58e5d91b
Pr�sent! HKCU\Software\97a3fee10d8c021a9b64e9a351547774
Pr�sent! HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\Software\97a3fee10d8c021a9b64e9a351547774
Pr�sent! HKCU\Software\eae07fb211dfe48f76d6253ab5226254
Pr�sent! HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\Software\eae07fb211dfe48f76d6253ab5226254
Pr�sent! HKCU\Software\f4f0725a7eaeabf0af3484c5a8e0ddd2
Pr�sent! HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\Software\f4f0725a7eaeabf0af3484c5a8e0ddd2
Pr�sent! HKCU\Software\ffbbb464b537cc67f28606ca3832eb71
Pr�sent! HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\Software\ffbbb464b537cc67f28606ca3832eb71
Pr�sent! HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\Software\Microsoft\Windows\CurrentVersion\Run|222
Pr�sent! HKCU\Software\Microsoft\Windows\CurrentVersion\Run|222
Pr�sent! HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\Software\Microsoft\Windows\CurrentVersion\Run|6420357f107124fc58a0231a58e5d91b
Pr�sent! HKCU\Software\Microsoft\Windows\CurrentVersion\Run|6420357f107124fc58a0231a58e5d91b
Pr�sent! HKCU|di
Pr�sent! HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\Software\Microsoft\Windows\CurrentVersion\Run|5b5ed1af05d79789bfd6ed370a062a46
Pr�sent! HKCU\Software\Microsoft\Windows\CurrentVersion\Run|5b5ed1af05d79789bfd6ed370a062a46
Pr�sent! HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\Software\Microsoft\Windows\CurrentVersion\Run|97a3fee10d8c021a9b64e9a351547774
Pr�sent! HKCU\Software\Microsoft\Windows\CurrentVersion\Run|97a3fee10d8c021a9b64e9a351547774
Pr�sent! HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\Software\Microsoft\Windows\CurrentVersion\Run|eae07fb211dfe48f76d6253ab5226254
Pr�sent! HKCU\Software\Microsoft\Windows\CurrentVersion\Run|eae07fb211dfe48f76d6253ab5226254
Pr�sent! HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\Software\Microsoft\Windows\CurrentVersion\Run|f4f0725a7eaeabf0af3484c5a8e0ddd2
Pr�sent! HKCU\Software\Microsoft\Windows\CurrentVersion\Run|f4f0725a7eaeabf0af3484c5a8e0ddd2
Pr�sent! HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\Software\Microsoft\Windows\CurrentVersion\Run|ffbbb464b537cc67f28606ca3832eb71
Pr�sent! HKCU\Software\Microsoft\Windows\CurrentVersion\Run|ffbbb464b537cc67f28606ca3832eb71
Pr�sent! HKU\S-1-5-21-3952655422-3213944981-1190940908-1001\Software\Microsoft\Windows\CurrentVersion\Run|SURVIVAL
Pr�sent! HKCU\Software\Microsoft\Windows\CurrentVersion\Run|SURVIVAL
[b]################## | UsbFix - Information |[/b]
UsbFix a d�tect� sur votre ordinateur, une infection qui dispose d'une fonction de Keylogger.
Apr�s d�sinfection par UsbFix, veuillez modifier tous vos mots de passe.
Si vous avez effectu� des achats sur internet,
veuillez contacter votre banque afin d'envisager une opposition sur votre carte bancaire.Info : [url=https://www.youtube.com/watch?v=vUZYYASd7FE]Comment supprimer l'infection des raccourcis sur USB ? (Video)[/url]
Info : [url=http://www.en.usbfix.net/2014/03/remove-shortcut-virus-usb/]L'infection des raccourcis USB, c'est quoi ?[/url]
[b]################## | Hijack |[/b]
[b]################## | E.O.F | [url=http://www.sosvirus.net/]http://www.sosvirus.net/[/url] | [url=http://www.usbfix.net/]http://www.usbfix.net/[/url] |[/b]