Publicité
Publicité
Format du document : text/plain
Prévisualisation
[b]############################## | UsbFix V 7.903 | [Recherche][/b]
Utilisateur: ADAM (Administrateur) # ADAM-PC
Mis � jour le 15/03/2015 par El Desaparecido - SosVirus
Lanc� � 21:37:37 | 18/03/2015
Site Web : [url=http://www.usbfix.net/]http://www.usbfix.net/[/url]
Changelog : [url=http://www.usbfix.net/maj/]http://www.usbfix.net/maj/[/url]
Assistance : [url=http://www.sosvirus.net/forum-virus-securite.html]http://www.sosvirus.net/forum-virus-securite.html[/url]
D�tection en Live : [url=http://comment-supprimer.fr/]http://comment-supprimer.fr/[/url]
Contact : [url=http://www.usbfix.net/contact/]http://www.usbfix.net/contact/[/url]
[b]################## | System information |[/b]
MB: Gigabyte Technology Co., Ltd. (945PL-S3P)
CPU: Intel(R) Pentium(R) Dual CPU E2180 @ 2.00GHz
RAM -> [Total : 2048 Mo | Free : 737 Mo]
Bios: Award Software International, Inc.
Boot: Normal boot
OS: Microsoft� Windows 7 Professional (6.1.7601 32-Bit) Service Pack 1
WB: Internet Explorer : 8.00.7600.16385
WB: Google Chrome : 41.0.2272.89
WB: Mozilla Firefox : 36.0.1
[b]################## | Security Information |[/b]
AV: Microsoft Security Essentials [Actif |A jour]
AS: Microsoft Security Essentials [Actif |A jour]
AS: Windows Defender [[b](!) D�sactiv�[/b] |[b](!) Non � jour[/b]]
FW: Windows Firewall [Actif]
SC: Security Center [Actif]
WU: Windows Update [Actif]
[b]################## | Disk Information |[/b]
C:\ (%SystemDrive%) -> Disque fixe # 49 Go (9 Go libre(s) - 19%) [] # NTFS
D:\ -> Disque fixe # 49 Go (6 Go libre(s) - 12%) [] # NTFS
E:\ -> Disque fixe # 51 Go (2 Go libre(s) - 4%) [] # NTFS
H:\ -> Disque amovible # 4 Go (1 Go libre(s) - 34%) [TRANSCEND] # FAT32
[b]################## | Regedit Run |[/b]
F2 - HKLM\..\Winlogon : [Shell] explorer.exe
F2 - HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
04 - HKCU\..\Run : [IDMan] D:\BASE DE DONNEES\JMERISE\IDM 6.18 + Crack\Crack\IDMan.exe /onboot
04 - HKCU\..\Run : [Facebook Update] "C:\Users\ADAM\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
04 - HKCU\..\Run : [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
04 - HKCU\..\Run : [hdirfbsher] wscript.exe //B "C:\Users\ADAM\AppData\Roaming\hdirfbsher.vbs"
04 - HKCU\..\Run : [NetMon] C:\Users\ADAM\AppData\Roaming\NetMon\netmon.exe
04 - HKLM\..\Run : [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
04 - HKLM\..\Run : [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
04 - HKLM\..\Run : [Everything] "C:\Program Files\Everything\Everything.exe" -startup
04 - HKLM\..\Run : [USB Security] C:\Program Files\USB Disk Security\USBGuard.exe
04 - HKLM\..\Run : [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
04 - HKLM\..\Run : [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-21-2192963375-3151994282-1129131027-1000\..\Run : [IDMan] D:\BASE DE DONNEES\JMERISE\IDM 6.18 + Crack\Crack\IDMan.exe /onboot
04 - HKU\S-1-5-21-2192963375-3151994282-1129131027-1000\..\Run : [Facebook Update] "C:\Users\ADAM\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
04 - HKU\S-1-5-21-2192963375-3151994282-1129131027-1000\..\Run : [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
04 - HKU\S-1-5-21-2192963375-3151994282-1129131027-1000\..\Run : [hdirfbsher] wscript.exe //B "C:\Users\ADAM\AppData\Roaming\hdirfbsher.vbs"
04 - HKU\S-1-5-21-2192963375-3151994282-1129131027-1000\..\Run : [NetMon] C:\Users\ADAM\AppData\Roaming\NetMon\netmon.exe
04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-18\..\RunOnce : [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601
[b]################## | Recherche g�n�rique |[/b]
Pr�sent! C:\Users\ADAM\AppData\Roaming\hdirfbsher.vbs
Pr�sent! H:\hdirfbsher.vbs
Pr�sent! H:\delph.lnk
Pr�sent! H:\Your Uninstaller! 7.0.2010.28 + Serial.lnk
Pr�sent! H:\USB.Disk.Security.6.0.0.126.lnk
Pr�sent! H:\JMCD(20 Avril 2014).lnk
Pr�sent! H:\tp delphi.lnk
Pr�sent! H:\Nouveau dossier.lnk
Pr�sent! H:\Crack Windows 7 Loader.lnk
Pr�sent! H:\tp 16032015.lnk
Pr�sent! H:\tp delphis.lnk
Pr�sent! H:\TP N�2.lnk
Pr�sent! H:\TP CSV.lnk
Pr�sent! H:\IDM 6.17.lnk
Pr�sent! H:\idman5.15.6.full.lnk
Pr�sent! H:\Internet Download Manager 6.18 Build 7 Final Retail+Crack.lnk
Pr�sent! H:\chenitti delphi.lnk
Pr�sent! H:\TP COMMERCIAL.lnk
Pr�sent! C:\Users\ADAM\AppData\Roaming\865E.tmp
[b]################## | Registre |[/b]
Pr�sent! HKU\S-1-5-21-2192963375-3151994282-1129131027-1000\Software\Microsoft\Windows\CurrentVersion\Run|hdirfbsher
Pr�sent! HKCU\Software\Microsoft\Windows\CurrentVersion\Run|hdirfbsher
[b]################## | UsbFix - Information |[/b]
Info : [url=https://www.youtube.com/watch?v=vUZYYASd7FE]Comment supprimer l'infection des raccourcis sur USB ? (Video)[/url]
Info : [url=http://www.usbfix.net/2014/10/supprimer-virus-raccourcis-usb/]L'infection des raccourcis USB, c'est quoi ?[/url]
D�tection en Live : [url=http://comment-supprimer.fr/]http://comment-supprimer.fr/[/url]
[b]################## | Hijack |[/b]
Hijacked! [SHD] H:\Your Uninstaller! 7.0.2010.28 + Serial
Hijacked! [SHD] H:\USB.Disk.Security.6.0.0.126
Hijacked! [SHD] H:\JMCD(20 Avril 2014)
Hijacked! [SHD] H:\tp delphi
Hijacked! [SHD] H:\Nouveau dossier
Hijacked! [SHD] H:\Crack Windows 7 Loader
Hijacked! [SHD] H:\tp 16032015
Hijacked! [SHD] H:\tp delphis
Hijacked! [SHD] H:\TP N�2
Hijacked! [SHD] H:\TP CSV
Hijacked! [SHD] H:\IDM 6.17
Hijacked! [SHD] H:\idman5.15.6.full
Hijacked! [SHD] H:\Internet Download Manager 6.18 Build 7 Final Retail+Crack
Hijacked! [SH] H:\hdirfbsher.vbs
Hijacked! [SHD] H:\chenitti delphi
Hijacked! [SHD] H:\TP COMMERCIAL
Hijacked! [SHD] H:\delph
[b]################## | E.O.F | [url=http://www.sosvirus.net/]http://www.sosvirus.net/[/url] | [url=http://www.usbfix.net/]http://www.usbfix.net/[/url] |[/b]
Utilisateur: ADAM (Administrateur) # ADAM-PC
Mis � jour le 15/03/2015 par El Desaparecido - SosVirus
Lanc� � 21:37:37 | 18/03/2015
Site Web : [url=http://www.usbfix.net/]http://www.usbfix.net/[/url]
Changelog : [url=http://www.usbfix.net/maj/]http://www.usbfix.net/maj/[/url]
Assistance : [url=http://www.sosvirus.net/forum-virus-securite.html]http://www.sosvirus.net/forum-virus-securite.html[/url]
D�tection en Live : [url=http://comment-supprimer.fr/]http://comment-supprimer.fr/[/url]
Contact : [url=http://www.usbfix.net/contact/]http://www.usbfix.net/contact/[/url]
[b]################## | System information |[/b]
MB: Gigabyte Technology Co., Ltd. (945PL-S3P)
CPU: Intel(R) Pentium(R) Dual CPU E2180 @ 2.00GHz
RAM -> [Total : 2048 Mo | Free : 737 Mo]
Bios: Award Software International, Inc.
Boot: Normal boot
OS: Microsoft� Windows 7 Professional (6.1.7601 32-Bit) Service Pack 1
WB: Internet Explorer : 8.00.7600.16385
WB: Google Chrome : 41.0.2272.89
WB: Mozilla Firefox : 36.0.1
[b]################## | Security Information |[/b]
AV: Microsoft Security Essentials [Actif |A jour]
AS: Microsoft Security Essentials [Actif |A jour]
AS: Windows Defender [[b](!) D�sactiv�[/b] |[b](!) Non � jour[/b]]
FW: Windows Firewall [Actif]
SC: Security Center [Actif]
WU: Windows Update [Actif]
[b]################## | Disk Information |[/b]
C:\ (%SystemDrive%) -> Disque fixe # 49 Go (9 Go libre(s) - 19%) [] # NTFS
D:\ -> Disque fixe # 49 Go (6 Go libre(s) - 12%) [] # NTFS
E:\ -> Disque fixe # 51 Go (2 Go libre(s) - 4%) [] # NTFS
H:\ -> Disque amovible # 4 Go (1 Go libre(s) - 34%) [TRANSCEND] # FAT32
[b]################## | Regedit Run |[/b]
F2 - HKLM\..\Winlogon : [Shell] explorer.exe
F2 - HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
04 - HKCU\..\Run : [IDMan] D:\BASE DE DONNEES\JMERISE\IDM 6.18 + Crack\Crack\IDMan.exe /onboot
04 - HKCU\..\Run : [Facebook Update] "C:\Users\ADAM\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
04 - HKCU\..\Run : [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
04 - HKCU\..\Run : [hdirfbsher] wscript.exe //B "C:\Users\ADAM\AppData\Roaming\hdirfbsher.vbs"
04 - HKCU\..\Run : [NetMon] C:\Users\ADAM\AppData\Roaming\NetMon\netmon.exe
04 - HKLM\..\Run : [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
04 - HKLM\..\Run : [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
04 - HKLM\..\Run : [Everything] "C:\Program Files\Everything\Everything.exe" -startup
04 - HKLM\..\Run : [USB Security] C:\Program Files\USB Disk Security\USBGuard.exe
04 - HKLM\..\Run : [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
04 - HKLM\..\Run : [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-21-2192963375-3151994282-1129131027-1000\..\Run : [IDMan] D:\BASE DE DONNEES\JMERISE\IDM 6.18 + Crack\Crack\IDMan.exe /onboot
04 - HKU\S-1-5-21-2192963375-3151994282-1129131027-1000\..\Run : [Facebook Update] "C:\Users\ADAM\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
04 - HKU\S-1-5-21-2192963375-3151994282-1129131027-1000\..\Run : [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
04 - HKU\S-1-5-21-2192963375-3151994282-1129131027-1000\..\Run : [hdirfbsher] wscript.exe //B "C:\Users\ADAM\AppData\Roaming\hdirfbsher.vbs"
04 - HKU\S-1-5-21-2192963375-3151994282-1129131027-1000\..\Run : [NetMon] C:\Users\ADAM\AppData\Roaming\NetMon\netmon.exe
04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-18\..\RunOnce : [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601
[b]################## | Recherche g�n�rique |[/b]
Pr�sent! C:\Users\ADAM\AppData\Roaming\hdirfbsher.vbs
Pr�sent! H:\hdirfbsher.vbs
Pr�sent! H:\delph.lnk
Pr�sent! H:\Your Uninstaller! 7.0.2010.28 + Serial.lnk
Pr�sent! H:\USB.Disk.Security.6.0.0.126.lnk
Pr�sent! H:\JMCD(20 Avril 2014).lnk
Pr�sent! H:\tp delphi.lnk
Pr�sent! H:\Nouveau dossier.lnk
Pr�sent! H:\Crack Windows 7 Loader.lnk
Pr�sent! H:\tp 16032015.lnk
Pr�sent! H:\tp delphis.lnk
Pr�sent! H:\TP N�2.lnk
Pr�sent! H:\TP CSV.lnk
Pr�sent! H:\IDM 6.17.lnk
Pr�sent! H:\idman5.15.6.full.lnk
Pr�sent! H:\Internet Download Manager 6.18 Build 7 Final Retail+Crack.lnk
Pr�sent! H:\chenitti delphi.lnk
Pr�sent! H:\TP COMMERCIAL.lnk
Pr�sent! C:\Users\ADAM\AppData\Roaming\865E.tmp
[b]################## | Registre |[/b]
Pr�sent! HKU\S-1-5-21-2192963375-3151994282-1129131027-1000\Software\Microsoft\Windows\CurrentVersion\Run|hdirfbsher
Pr�sent! HKCU\Software\Microsoft\Windows\CurrentVersion\Run|hdirfbsher
[b]################## | UsbFix - Information |[/b]
Info : [url=https://www.youtube.com/watch?v=vUZYYASd7FE]Comment supprimer l'infection des raccourcis sur USB ? (Video)[/url]
Info : [url=http://www.usbfix.net/2014/10/supprimer-virus-raccourcis-usb/]L'infection des raccourcis USB, c'est quoi ?[/url]
D�tection en Live : [url=http://comment-supprimer.fr/]http://comment-supprimer.fr/[/url]
[b]################## | Hijack |[/b]
Hijacked! [SHD] H:\Your Uninstaller! 7.0.2010.28 + Serial
Hijacked! [SHD] H:\USB.Disk.Security.6.0.0.126
Hijacked! [SHD] H:\JMCD(20 Avril 2014)
Hijacked! [SHD] H:\tp delphi
Hijacked! [SHD] H:\Nouveau dossier
Hijacked! [SHD] H:\Crack Windows 7 Loader
Hijacked! [SHD] H:\tp 16032015
Hijacked! [SHD] H:\tp delphis
Hijacked! [SHD] H:\TP N�2
Hijacked! [SHD] H:\TP CSV
Hijacked! [SHD] H:\IDM 6.17
Hijacked! [SHD] H:\idman5.15.6.full
Hijacked! [SHD] H:\Internet Download Manager 6.18 Build 7 Final Retail+Crack
Hijacked! [SH] H:\hdirfbsher.vbs
Hijacked! [SHD] H:\chenitti delphi
Hijacked! [SHD] H:\TP COMMERCIAL
Hijacked! [SHD] H:\delph
[b]################## | E.O.F | [url=http://www.sosvirus.net/]http://www.sosvirus.net/[/url] | [url=http://www.usbfix.net/]http://www.usbfix.net/[/url] |[/b]