[b]############################## | UsbFix V 7.183 | [Nettoyage][/b]

Utilisateur: Nanana (Administrateur) # NANANA
Mis a jour le 30/09/2014 par El Desaparecido - SosVirus
Lance a 19:40:26 | 14/10/2014

Site Web : [url=http://www.usbfix.net/]http://www.usbfix.net/[/url]
Changelog : [url=http://www.usbfix.net/maj/]http://www.usbfix.net/maj/[/url]
Assistance : [url=http://www.sosvirus.net/forum-virus-securite.html]http://www.sosvirus.net/forum-virus-securite.html[/url]
Upload Malware : [url=http://www.sosvirus.net/upload_malware.php]http://www.sosvirus.net/upload_malware.php[/url]
Detection en Live : [url=http://comment-supprimer.fr/]http://comment-supprimer.fr/[/url]
Contact : [url=http://www.usbfix.net/contact/]http://www.usbfix.net/contact/[/url]

[b]################## | System information |[/b]

MB: Hewlett-Packard (1966)
CPU: Intel(R) Core(TM) i7-4700MQ CPU @ 2.40GHz
GC: Intel(R) HD Graphics 4600
RAM -> [Total : 5916 Mo | Free : 2485 Mo]
Bios: Insyde
Boot: Normal boot

OS: Microsoft�E Windows 8 (6.2.9200 64-Bit)
WB: Internet Explorer : 10.00.9200.16384
WB: Google Chrome : 31.0.1650.63

[b]################## | Security Information |[/b]

AV: Avira Desktop [[b](!) Desactive[/b] |A jour]
AV: Windows Defender [[b](!) Desactive[/b] |A jour]
AS: Avira Desktop [[b](!) Desactive[/b] |A jour]
AS: Windows Defender [[b](!) Desactive[/b] |A jour]
AS: Malwarebytes Anti-Malware : 2.0.2.1012
FW: Windows Firewall [Actif]
SC: Security Center [Actif]
WU: Windows Update [Actif]

[b]################## | Disk Information |[/b]

C:\ (%SystemDrive%) -> Disque fixe # 674 Go (600 Go libre(s) - 89%) [Windows] # NTFS
D:\ -> Disque fixe # 24 Go (2 Go libre(s) - 10%) [RECOVERY] # NTFS
F:\ -> CD-ROM # 6 Go (0 Mo libre(s) - 0%) [Sims3] # UDF

[b]################## | Recherche generique |[/b]


(!) Fichiers temporaires supprimes. (6045.21124267578 MB)

[b]################## | Registre |[/b]


[b]################## | Regedit Run |[/b]

F2 - HKLM\..\Winlogon : [Shell] explorer.exe
F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - HKLM\..\Winlogon : [Userinit] userinit.exe,
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\System32\Userinit.exe,
04 - HKCU\..\Run : [EA Core] "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent
04 - HKCU\..\Run : [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
04 - HKLM\..\Run : [BtTray] "C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe"
04 - HKLM\..\Run : [AccelerometerSysTrayApplet] C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe
04 - HKLM\..\Run : [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
04 - HKLM\..\Run : [HPMessageService] C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe
04 - HKLM\..\Run : [HP CoolSense] C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe -byrunkey
04 - HKLM\..\Run : [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
04 - HKLM\..\Run : [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
04 - HKLM\..\Run : [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
04 - HKLM\..\Run : [Avira Systray] C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
04 - [x64] HKLM\..\Run : [IgfxTray] C:\Windows\system32\igfxtray.exe
04 - [x64] HKLM\..\Run : [HotKeysCmds] C:\Windows\system32\hkcmd.exe
04 - [x64] HKLM\..\Run : [Persistence] C:\Windows\system32\igfxpers.exe
04 - [x64] HKLM\..\Run : [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe
04 - [x64] HKLM\..\Run : [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
04 - HKU\S-1-5-21-4042219225-975936040-2676240510-1002\..\Run : [EA Core] "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent
04 - HKU\S-1-5-21-4042219225-975936040-2676240510-1002\..\Run : [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun

[b]################## | UsbFix - Information |[/b]

Info : [url=https://www.youtube.com/watch?v=vUZYYASd7FE]Comment supprimer l'infection des raccourcis sur USB ? (Video)[/url]
Info : [url=http://www.en.usbfix.net/2014/03/remove-shortcut-virus-usb/]L'infection des raccourcis USB, c'est quoi ?[/url]

[b]################## | Hijack |[/b]


[b]################## | C:\ %SystemDrive% - Disque Fixe (NTFS) |[/b]

[14/10/2014 - 19:16:54 | A | 1 Ko] - C:\RstHosts.txt
[10/10/2014 - 21:01:26 | ASH | 4846404 Ko] - C:\hiberfil.sys
[10/10/2014 - 21:01:33 | ASH | 2490368 Ko] - C:\pagefile.sys
[10/10/2014 - 21:01:34 | ASH | 262144 Ko] - C:\swapfile.sys
[30/10/2013 - 13:10:58 | D] - C:\SYSTEM.SAV
[02/10/2014 - 21:17:27 | D] - C:\Config.Msi
[30/10/2013 - 13:11:52 | SHD] - C:\$Recycle.Bin
[11/10/2014 - 12:12:31 | A | 1 Ko] - C:\PhysicalDisk0_MBR.bin
[16/08/2014 - 17:52:12 | A | 0 Ko] - C:\autoexec.bat
[04/08/2012 - 01:21:37 | RASH | 8 Ko] - C:\BOOTSECT.BAK
[02/06/2012 - 16:30:55 | N | 0 Ko] - C:\BOOTNXT
[26/07/2012 - 05:44:30 | RASH | 389 Ko] - C:\bootmgr
[26/07/2012 - 09:22:08 | SHD] - C:\Documents and Settings
[26/07/2012 - 09:33:46 | D] - C:\PerfLogs
[04/08/2012 - 00:39:51 | D] - C:\inetpub
[04/08/2012 - 01:21:36 | SHD] - C:\Boot
[24/05/2013 - 14:31:06 | D] - C:\HP
[23/07/2013 - 01:20:04 | D] - C:\Intel
[23/07/2013 - 12:09:54 | D] - C:\SWSetup
[16/11/2013 - 16:03:01 | D] - C:\Temp
[05/12/2013 - 15:44:48 | RD] - C:\Users
[07/07/2014 - 22:19:52 | D] - C:\GOG Games
[16/08/2014 - 17:51:45 | RD] - C:\Program Files
[12/09/2014 - 18:28:16 | D] - C:\9eca3ec1be1063e1e35aa026798c40
[12/09/2014 - 18:40:15 | D] - C:\sources
[12/09/2014 - 18:45:40 | D] - C:\Windows
[07/10/2014 - 17:24:17 | SHD] - C:\System Volume Information
[10/10/2014 - 21:00:07 | D] - C:\AdwCleaner
[10/10/2014 - 21:20:44 | HD] - C:\ProgramData
[11/10/2014 - 10:25:56 | D] - C:\Program Files (x86)
[14/10/2014 - 19:39:07 | D] - C:\UsbFix

[b]################## | D:\ - Disque Fixe (NTFS) |[/b]

[26/07/2012 - 22:57:10 | N | 1319 Ko] - D:\bootmgr.efi
[30/10/2013 - 13:13:35 | SHD] - D:\$RECYCLE.BIN
[26/07/2012 - 21:44:32 | RASH | 389 Ko] - D:\bootmgr
[23/07/2013 - 13:04:48 | D] - D:\EFI
[23/07/2013 - 13:04:48 | D] - D:\hp
[23/07/2013 - 13:04:48 | RSHD] - D:\boot
[23/07/2013 - 13:04:48 | RSHD] - D:\preload
[23/07/2013 - 13:04:48 | RSD] - D:\recovery
[23/07/2013 - 13:04:48 | D] - D:\RM_Reserve
[02/06/2014 - 18:48:19 | SHD] - D:\System Volume Information

[b]################## | Vaccin |[/b]

C:\Autorun.inf -> Vaccin cree par UsbFix (El Desaparecido)
D:\Autorun.inf -> Vaccin cree par UsbFix (El Desaparecido)

[b]################## | E.O.F | [url=http://www.sosvirus.net/]http://www.sosvirus.net/[/url] | [url=http://www.usbfix.net/]http://www.usbfix.net/[/url] |[/b]