[b]############################## | UsbFix V 8.248 | [Recherche][/b] Utilisateur: Antoine (Administrateur) # ANTOINE-HP Mis à jour le 27/05/2016 par SOSVirus Lancé à 19:53:10 | 08/06/2016 Site Web : [url=http://www.usb-antivirus.com/fr/]http://www.usb-antivirus.com/fr/[/url] Tutoriel : [url=http://www.sosvirus.net/tutoriel-usbfix/]http://www.sosvirus.net/tutoriel-usbfix/[/url] Assistance : [url=http://www.sosvirus.net/]http://www.sosvirus.net/[/url] Détection en Live : [url=http://www.sosmalware.com/fr/usbfix/]http://www.sosmalware.com/fr/usbfix/[/url] Contact : [url=http://www.usb-antivirus.com/fr/contact/]http://www.usb-antivirus.com/fr/contact/[/url] [b]################## | System information |[/b] MB: Foxconn (2ADA) CPU: Intel(R) Core(TM) i3-2120 CPU @ 3.30GHz RAM -> [Total : 4052 Mo | Free : 2107 Mo] Bios: AMI Boot: Normal boot OS: Microsoft™ Windows 10 Pro (6.3.10586 64-Bit) WB: Internet Explorer : 11.00.10586.0 WB: Microsoft Edge : 11.00.10586.306 (th2_release_sec.160422-1850) WB: Google Chrome : 51.0.2704.79 [b]################## | Security Information |[/b] AV: Windows Defender [[b](!) Désactivé[/b] |A jour] AV: avast! Antivirus [Actif |A jour] AS: Windows Defender [[b](!) Désactivé[/b] |A jour] AS: avast! Antivirus [Actif |A jour] AS: Malwarebytes Anti-Malware : 2.0.2.1012 FW: Windows Firewall [Actif] SC: Security Center [Actif] WU: Windows Update [Actif] [b]################## | Disk Information |[/b] C:\ (%SystemDrive%) -> Disque fixe # 914 Go (85 Go libre(s) - 9%) [OS] # NTFS D:\ -> Disque fixe # 17 Go (2 Go libre(s) - 12%) [HP_RECOVERY] # NTFS G:\ -> Disque amovible # 14 Go (14 Go libre(s) - 100%) [] # FAT32 [b]################## | Startup |[/b] F2 - HKLM\..\Winlogon : [Shell] explorer.exe F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\windows\system32\userinit.exe, 04 - HKCU\..\Run : [Facebook Update] "C:\Users\Antoine\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver 04 - HKCU\..\Run : [Google Update] "C:\Users\Antoine\AppData\Local\Google\Update\GoogleUpdate.exe" /c 04 - HKCU\..\Run : [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun 04 - HKCU\..\Run : [OneDrive] "C:\Users\Antoine\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background 04 - HKCU\..\Run : [Spotify Web Helper] "C:\Users\Antoine\AppData\Roaming\Spotify\SpotifyWebHelper.exe" 04 - HKCU\..\Run : [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun 04 - HKCU\..\RunOnce : [Uninstall C:\Users\Antoine\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Antoine\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64" 04 - HKCU\..\RunOnce : [Uninstall C:\Users\Antoine\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Antoine\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64" 04 - HKCU\..\RunOnce : [Uninstall C:\Users\Antoine\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Antoine\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64" 04 - HKCU\..\RunOnce : [Uninstall C:\Users\Antoine\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Antoine\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64" 04 - HKLM\..\Run : [HP Software Update] c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe 04 - HKLM\..\Run : [PDF Complete] C:\Program Files (x86)\PDF Complete\pdfsty.exe 04 - HKLM\..\Run : [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" 04 - HKLM\..\Run : [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" 04 - HKLM\..\Run : [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui 04 - HKLM\..\Run : [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s 04 - HKLM\..\Run : [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" 04 - HKLM\..\Run : [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start 04 - [x64] HKLM\..\Run : [HPSYSDRV] C:\Program Files (x86)\Hewlett-Packard\HP Odometer\HPSYSDRV.EXE 04 - [x64] HKLM\..\Run : [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming 04 - [x64] HKLM\..\Run : [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui 04 - [x64] HKLM\..\Run : [XMouseButtonControl] C:\Program Files\Highresolution Enterprises\X-Mouse Button Control\XMouseButtonControl.exe /notportable 04 - [x64] HKLM\..\Run : [NvBackend] "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" 04 - [x64] HKLM\..\Run : [ShadowPlay] C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart 04 - [x64] HKLM\..\Run : [BeatsOSDApp] C:\Program Files\IDT\WDM\beats64.exe 04 - HKU\S-1-5-19\..\Run : [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup 04 - HKU\S-1-5-20\..\Run : [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup 04 - HKU\S-1-5-21-151481049-3092337158-4265691358-1000\..\Run : [Facebook Update] "C:\Users\Antoine\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver 04 - HKU\S-1-5-21-151481049-3092337158-4265691358-1000\..\Run : [Google Update] "C:\Users\Antoine\AppData\Local\Google\Update\GoogleUpdate.exe" /c 04 - HKU\S-1-5-21-151481049-3092337158-4265691358-1000\..\Run : [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun 04 - HKU\S-1-5-21-151481049-3092337158-4265691358-1000\..\Run : [OneDrive] "C:\Users\Antoine\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background 04 - HKU\S-1-5-21-151481049-3092337158-4265691358-1000\..\Run : [Spotify Web Helper] "C:\Users\Antoine\AppData\Roaming\Spotify\SpotifyWebHelper.exe" 04 - HKU\S-1-5-21-151481049-3092337158-4265691358-1000\..\Run : [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun 04 - HKU\S-1-5-21-151481049-3092337158-4265691358-1000\..\RunOnce : [Uninstall C:\Users\Antoine\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Antoine\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64" 04 - HKU\S-1-5-21-151481049-3092337158-4265691358-1000\..\RunOnce : [Uninstall C:\Users\Antoine\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Antoine\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64" 04 - HKU\S-1-5-21-151481049-3092337158-4265691358-1000\..\RunOnce : [Uninstall C:\Users\Antoine\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Antoine\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64" 04 - HKU\S-1-5-21-151481049-3092337158-4265691358-1000\..\RunOnce : [Uninstall C:\Users\Antoine\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Antoine\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64" 04GS - NETGEAR WNA1100 Genie.lnk : C:\Program Files (x86)\NETGEAR\WNA1100\WNA1100.exe 04GS - Utilitaire de configuration sans fil TP-LINK.lnk : C:\Program Files (x86)\TP-LINK\Utilitaire de configuration sans fil TP-LINK\TWCU.exe [b]################## | Recherche générique |[/b] Présent! HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer|EnableShellExecuteHooks -> 1 Présent! HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer|EnableShellExecuteHooks -> 1 Présent! [x64] HKLM\Software\Microsoft\Windows\CurrentVersion\Run|Start WingMan Profiler [b]Analyse réalisée en 34.61 secondes[/b] [b]################## | E.O.F | [url=http://www.sosvirus.net/]http://www.sosvirus.net/[/url] | [url=http://www.usb-antivirus.com/fr/]http://www.usb-antivirus.com/fr/[/url] |[/b]