Publicité
Publicité
Format du document : text/plain
Prévisualisation
############################## | UsbFix V 7.163 | [Suppression]
Utilisateur: Telo� (Administrateur) # TELO�-PC
Mis � jour le 02/02/2014 par El Desaparecido - Team SosVirus
Lanc� � 08:23:20 | 06/02/2014
Site Web : http://www.usbfix.net
Changelog : http://www.usbfix.net/maj/
Support : http://www.sosvirus.net/
Upload Malware : http://www.sosvirus.net/upload_malware.php
Contact : http://www.usbfix.net/contact/
PC: Acer (JV50 )
CPU: Pentium(R) Dual-Core CPU T4300 @ 2.10GHz
RAM -> [Total : 4091 Mo| Free : 2606 Mo]
Bios: Phoenix Technologies LTD
Boot: Normal boot
OS: Microsoft Windows�7 �dition Familiale Premium (6.1.7601 64-Bit) Service Pack 1
WB: Windows Internet Explorer : 11.0.9600.16476
WB: Google Chrome : 32.0.1700.107
WB: Mozilla Firefox : 1.9.2.28
SC: Security Center [Enabled]
WU: Windows Update [Enabled]
AV: avast! Antivirus [Enabled | Updated]
AS: avast! Antivirus [Enabled | Updated]
AS: Windows Defender [Enabled | Updated]
FW: Windows FireWall [(!) Disabled]
C:\ (%systemdrive%) -> Disque fixe # 285 Go (167 Go libre(s) - 59%) [ACER] # NTFS
D:\ -> CD-ROM
E:\ -> Disque amovible # 4 Go (2 Go libre(s) - 61%) [MOON] # FAT32
F:\ -> Disque amovible # 914 Mo (506 Mo libre(s) - 55%) [] # FAT
G:\ -> Disque amovible # 984 Mo (490 Mo libre(s) - 50%) [] # FAT
################## | Processus Actif |
C:\Windows\system32\csrss.exe (ID: 504 |ParentID: 436)
C:\Windows\system32\wininit.exe (ID: 576 |ParentID: 436)
C:\Windows\system32\csrss.exe (ID: 588 |ParentID: 568)
C:\Windows\system32\services.exe (ID: 636 |ParentID: 576)
C:\Windows\system32\lsass.exe (ID: 664 |ParentID: 576)
C:\Windows\system32\lsm.exe (ID: 672 |ParentID: 576)
C:\Windows\system32\winlogon.exe (ID: 680 |ParentID: 568)
C:\Windows\system32\svchost.exe (ID: 796 |ParentID: 636)
C:\Windows\system32\svchost.exe (ID: 888 |ParentID: 636)
C:\Windows\system32\atiesrxx.exe (ID: 936 |ParentID: 636)
C:\Windows\System32\svchost.exe (ID: 1016 |ParentID: 636)
C:\Windows\System32\svchost.exe (ID: 376 |ParentID: 636)
C:\Windows\system32\svchost.exe (ID: 520 |ParentID: 636)
C:\Windows\system32\svchost.exe (ID: 572 |ParentID: 636)
C:\Windows\system32\svchost.exe (ID: 1216 |ParentID: 636)
C:\Windows\system32\atieclxx.exe (ID: 1244 |ParentID: 936)
C:\Windows\SYSTEM32\WISPTIS.EXE (ID: 1280 |ParentID: 376)
C:\Program Files\AVAST Software\Avast\AvastSvc.exe (ID: 1432 |ParentID: 636)
C:\Windows\System32\spoolsv.exe (ID: 1528 |ParentID: 636)
C:\Windows\system32\svchost.exe (ID: 1564 |ParentID: 636)
C:\Program Files\LSI SoftModem\agr64svc.exe (ID: 1732 |ParentID: 636)
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (ID: 1752 |ParentID: 636)
C:\ProgramData\BitGuard\2.7.1832.68\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe (ID: 1816 |ParentID: 636)
C:\Program Files (x86)\Bonjour\mDNSResponder.exe (ID: 1848 |ParentID: 636)
C:\Windows\SysWOW64\schtasks.exe (ID: 1864 |ParentID: 1816)
C:\Windows\system32\conhost.exe (ID: 1880 |ParentID: 504)
C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (ID: 1952 |ParentID: 636)
C:\Program Files (x86)\Acer\Registration\GregHSRW.exe (ID: 2016 |ParentID: 636)
C:\Windows\system32\taskhost.exe (ID: 1288 |ParentID: 636)
C:\Windows\SYSTEM32\WISPTIS.EXE (ID: 1684 |ParentID: 376)
C:\Windows\system32\Dwm.exe (ID: 1584 |ParentID: 376)
C:\Windows\Explorer.EXE (ID: 1028 |ParentID: 412)
C:\ProgramData\BitGuard\2.7.1832.68\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe (ID: 1312 |ParentID: 1816)
C:\Windows\system32\taskeng.exe (ID: 2060 |ParentID: 572)
C:\ProgramData\Premium\ContinueToSave\ContinueToSave.exe (ID: 2180 |ParentID: 2060)
C:\Windows\system32\taskeng.exe (ID: 2188 |ParentID: 572)
C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe (ID: 2264 |ParentID: 2188)
C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe (ID: 2304 |ParentID: 2112)
C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe (ID: 2312 |ParentID: 2112)
C:\Program Files\IB Updater\ExtensionUpdaterService.exe (ID: 2324 |ParentID: 636)
C:\Program Files (x86)\BonanzaDealsLive\Update\BonanzaDealsLive.exe (ID: 2344 |ParentID: 2172)
C:\Windows\system32\dmwu.exe (ID: 2376 |ParentID: 636)
C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\MWLService.exe (ID: 2448 |ParentID: 636)
C:\Program Files\AVAST Software\Avast\setup\avast.setup (ID: 2808 |ParentID: 1432)
C:\Windows\system32\runonce.exe (ID: 2828 |ParentID: 1028)
C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe (ID: 2964 |ParentID: 636)
C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe (ID: 3032 |ParentID: 636)
C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (ID: 2044 |ParentID: 636)
C:\Program Files (x86)\Skype\Updater\Updater.exe (ID: 2292 |ParentID: 636)
C:\Windows\system32\svchost.exe (ID: 2352 |ParentID: 636)
C:\Program Files\Acer\Acer Updater\UpdaterService.exe (ID: 2612 |ParentID: 636)
C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe (ID: 1064 |ParentID: 636)
C:\Program Files\Web Assistant\ExtensionUpdaterService.exe (ID: 1188 |ParentID: 636)
C:\Program Files\Web Assistant\ExtensionUpdaterService.exe (ID: 976 |ParentID: 636)
C:\Windows\System32\svchost.exe (ID: 3096 |ParentID: 636)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (ID: 3120 |ParentID: 636)
C:\Windows\System32\atwtusb.exe (ID: 3180 |ParentID: 636)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (ID: 3216 |ParentID: 3120)
C:\Windows\system32\atwtusb.exe (ID: 3300 |ParentID: 3180)
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe (ID: 3308 |ParentID: 636)
C:\Windows\system32\wbem\wmiprvse.exe (ID: 3348 |ParentID: 796)
C:\Windows\SysWOW64\jmdp\stij.exe (ID: 3572 |ParentID: 2376)
C:\Windows\System32\ljkb\stij.exe (ID: 3632 |ParentID: 2376)
C:\Windows\system32\svchost.exe (ID: 3688 |ParentID: 636)
C:\Windows\system32\svchost.exe (ID: 3844 |ParentID: 636)
C:\Windows\System32\svchost.exe (ID: 3868 |ParentID: 636)
C:\Windows\System32\WUDFHost.exe (ID: 4056 |ParentID: 376)
################## | Regedit Run |
04 - HKCU\..\Run : [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
04 - HKCU\..\Run : [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
04 - HKCU\..\Run : [cacaoweb] "C:\Users\Telo�\AppData\Roaming\cacaoweb\cacaoweb.exe" -noplayer
04 - HKCU\..\Run : [AdobeBridge]
04 - HKCU\..\Run : [flashmemory] wscript.exe //B "C:\Users\TELO~1\AppData\Local\Temp\flashmemory.vbe"
04 - HKLM\..\Run : [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
04 - HKLM\..\Run : [NortonOnlineBackupReminder] "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED
04 - HKLM\..\Run : [BackupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k
04 - HKLM\..\Run : [EgisTecLiveUpdate] "C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe"
04 - HKLM\..\Run : [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
04 - HKLM\..\Run : [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
04 - HKLM\..\Run : [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
04 - HKLM\..\Run : [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
04 - HKLM\..\Run : [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
04 - HKLM\..\Run : [Ulead AutoDetector v2] C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\monitor.exe
04 - HKLM\..\Run : [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
04 - HKLM\..\Run : [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
04 - HKLM\..\Run : [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
04 - HKLM\..\Run : []
04 - HKLM\..\Run : [AdobeCS5.5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin
04 - HKLM\..\Run : [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
04 - HKLM\..\Run : [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
04 - HKLM64\..\Run : [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe
04 - HKLM64\..\Run : [mwlDaemon] C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
04 - HKLM64\..\Run : [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
04 - HKLM64\..\Run : [PLFSetI] C:\Windows\PLFSetI.exe
04 - HKLM64\..\Run : [Acer ePower Management] C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
04 - HKLM64\..\Run : []
04 - HKLM64\..\Run : [MacroKeyManager] WTMKM.exe
04 - HKLM64\..\Run : [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
04 - HKLM64\..\Run : [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-21-3257031791-4191643407-3681858138-1000\..\Run : [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
04 - HKU\S-1-5-21-3257031791-4191643407-3681858138-1000\..\Run : [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
04 - HKU\S-1-5-21-3257031791-4191643407-3681858138-1000\..\Run : [cacaoweb] "C:\Users\Telo�\AppData\Roaming\cacaoweb\cacaoweb.exe" -noplayer
04 - HKU\S-1-5-21-3257031791-4191643407-3681858138-1000\..\Run : [AdobeBridge]
04 - HKU\S-1-5-21-3257031791-4191643407-3681858138-1000\..\Run : [flashmemory] wscript.exe //B "C:\Users\TELO~1\AppData\Local\Temp\flashmemory.vbe"
04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-18\..\RunOnce : [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601
################## | Recherche g�n�rique |
Supprim�! C:\Users\Telo�\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\flashmemory.vbe
Supprim�! C:\Users\TELO~1\AppData\Local\Temp\flashmemory.vbe
Supprim�! E:\flashmemory.vbe
Supprim�! F:\flashmemory.vbe
Supprim�! G:\flashmemory.vbe
Supprim�! E:\.TemporaryItems.lnk
Supprim�! E:\.lnk
Supprim�! E:\Le loup de wall street (2013).lnk
Supprim�! E:\Le loup de Wall street.lnk
Supprim�! E:\.Trashes.lnk
Supprim�! E:\.fseventsd.lnk
Supprim�! E:\.Spotlight-V100.lnk
Supprim�! F:\Musique pop � �couter.lnk
Supprim�! F:\2012-2013.lnk
Supprim�! F:\2013-2014.lnk
Supprim�! F:\Stage.lnk
Supprim�! F:\Partitions.lnk
Supprim�! F:\ENGLISH-Oral presentation.lnk
Supprim�! F:\Organo.lnk
Supprim�! F:\s2.lnk
Supprim�! F:\deri-MA109.lnk
Supprim�! F:\LETT_048_0109.lnk
Supprim�! G:\freitag.lnk
Supprim�! G:\cible.lnk
Supprim�! G:\jpg.lnk
Supprim�! G:\fille 1.lnk
Supprim�! G:\fille 2.lnk
Supprim�! G:\.lnk
Supprim�! G:\D�coupe.lnk
Supprim�! G:\impressionfaille.lnk
Supprim�! G:\impessionfaille2.lnk
Supprim�! G:\impressionfaille3.lnk
Supprim�! G:\Rapport de stage finalis� (R�cup�r�).lnk
Supprim�! G:\Rapport de stage finalis� (R�cup�r�) 2.lnk
Supprim�! G:\Fiche de lecture.lnk
Supprim�! G:\imprimer final jardin.lnk
Supprim�! G:\impression final jardin 2.lnk
Supprim�! G:\�crit accumulation.lnk
Supprim�! G:\20140129092306.lnk
Supprim�! G:\20140129092343.lnk
Supprim�! G:\20140129092441.lnk
Supprim�! G:\20140129092500.lnk
Supprim�! G:\RAPPORT DE STAGE.lnk
Supprim�! G:\39f9f66a6ab7b4656e6221347f881844.lnk
Supprim�! G:\4da0190ca36209da2bd0379412e40cd8.lnk
Supprim�! G:\.Spotlight-V100.lnk
Supprim�! G:\.Trashes.lnk
Supprim�! G:\IMPRESSION.lnk
Supprim�! G:\Rapport de stage finalis� (R�cup�r�).pages.lnk
Supprim�! G:\faille programme.lnk
Supprim�! G:\.TemporaryItems.lnk
Supprim�! G:\bouchra jarrar.lnk
Supprim�! G:\fiche projet perso.lnk
(!) Fichiers temporaires supprim�s.
################## | Registre |
R�par� ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|EnableLUA -> 1
R�par� ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|ConsentPromptBehaviorAdmin -> 5
R�par� ! HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowMyGames -> 1
Supprim�! HKU\S-1-5-21-3257031791-4191643407-3681858138-1000\Software\Microsoft\Windows\CurrentVersion\Run|flashmemory
################## | Listing |
[01/09/2011 - 00:00:34 | SHD] - C:\$Recycle.Bin
[12/12/2012 - 18:13:55 | N | 46 Ko | C43F5D8E0195AE684B0434AFA8D869F2] - C:\AdwCleaner[R1].txt
[28/12/2012 - 12:06:06 | N | 7 Ko | C4DDF42F5D99DD586B1CC0B50F6AD878] - C:\AdwCleaner[R2].txt
[12/12/2012 - 18:15:00 | N | 46 Ko | E4B2F27634F4527D5B2B9881A1489FA6] - C:\AdwCleaner[S1].txt
[28/12/2012 - 12:06:41 | N | 7 Ko | E3F419849C5FC0B34CFE1A406C718DFE] - C:\AdwCleaner[S2].txt
[29/10/2012 - 18:22:10 | A | 0 Ko] - C:\autoexec.bat
[24/10/2009 - 05:27:46 | D] - C:\BOOK
[22/08/2009 - 11:23:06 | SHD] - C:\Boot
[14/07/2009 - 02:38:58 | RASH | 375 Ko] - C:\bootmgr
[27/07/2009 - 21:40:53 | RASH | 8 Ko] - C:\BOOTSECT.BAK
[14/07/2009 - 06:08:56 | SHD] - C:\Documents and Settings
[25/12/2009 - 17:53:48 | DC] - C:\elements
[13/11/2013 - 17:43:18 | N | 0 Ko] - C:\end
[07/11/2007 - 08:00:40 | N | 17 Ko | 9147A93F43D8E58218EBCB15FDA888C9] - C:\eula.1028.txt
[07/11/2007 - 08:00:40 | N | 17 Ko | 9147A93F43D8E58218EBCB15FDA888C9] - C:\eula.1031.txt
[07/11/2007 - 08:00:40 | N | 10 Ko | 99C22D4A31F4EAD4351B71D6F4E5F6A1] - C:\eula.1033.txt
[07/11/2007 - 08:00:40 | N | 17 Ko | 9147A93F43D8E58218EBCB15FDA888C9] - C:\eula.1036.txt
[07/11/2007 - 08:00:40 | N | 17 Ko | 9147A93F43D8E58218EBCB15FDA888C9] - C:\eula.1040.txt
[07/11/2007 - 08:00:40 | N | 0 Ko | 9B15A3A055CC6E67EA191A1B7885649A] - C:\eula.1041.txt
[07/11/2007 - 08:00:40 | N | 17 Ko | 9147A93F43D8E58218EBCB15FDA888C9] - C:\eula.1042.txt
[07/11/2007 - 08:00:40 | N | 17 Ko | 9147A93F43D8E58218EBCB15FDA888C9] - C:\eula.2052.txt
[07/11/2007 - 08:00:40 | N | 17 Ko | 9147A93F43D8E58218EBCB15FDA888C9] - C:\eula.3082.txt
[07/11/2007 - 08:00:40 | N | 1 Ko] - C:\globdata.ini
[06/02/2014 - 08:22:03 | ASH | 3141828 Ko] - C:\hiberfil.sys
[07/11/2007 - 08:44:20 | N | 835 Ko | E015A2D8890E2A96A93CA818F834C45B] - C:\install.exe
[07/11/2007 - 08:00:40 | N | 1 Ko] - C:\install.ini
[07/11/2007 - 08:44:20 | N | 74 Ko | 8F05FE39BDD336C8FA2A18EC3DFE418C] - C:\install.res.1028.dll
[07/11/2007 - 08:44:20 | N | 93 Ko | 7D9EBB7DCA62BA75361346CAF4EC196B] - C:\install.res.1031.dll
[07/11/2007 - 08:44:20 | N | 88 Ko | 43FB29E3A676D26FCBF0352207991523] - C:\install.res.1033.dll
[07/11/2007 - 08:44:20 | N | 94 Ko | 37C8A4717B40540816A3B92C470FD58F] - C:\install.res.1036.dll
[07/11/2007 - 08:44:20 | N | 92 Ko | 03576876C7E9A5B44EB7916492B5B0F6] - C:\install.res.1040.dll
[07/11/2007 - 08:44:20 | N | 79 Ko | A3946D3C9ED130AF89D1C1A9E63DEAA6] - C:\install.res.1041.dll
[07/11/2007 - 08:44:20 | N | 77 Ko | A5CFFE01D83AFECCD9590B4D696AA44E] - C:\install.res.1042.dll
[07/11/2007 - 08:44:20 | N | 73 Ko | 213BF3AD8A5F31C021BBE011D6460752] - C:\install.res.2052.dll
[07/11/2007 - 08:44:20 | N | 93 Ko | FACD045628070999B43EB7C13AB2E0FE] - C:\install.res.3082.dll
[22/08/2009 - 06:15:26 | D] - C:\Intel
[03/07/2012 - 20:08:44 | D] - C:\Kreapixel
[01/12/2006 - 22:37:14 | N | 884 Ko | 800B746FDC4D80469AFC7E5E9B510C9C] - C:\msdia80.dll
[22/08/2009 - 09:35:38 | RHD] - C:\MSOCache
[25/12/2009 - 17:50:41 | D] - C:\OEM
[06/02/2014 - 08:22:10 | ASH | 4189108 Ko] - C:\pagefile.sys
[12/10/2009 - 06:51:36 | N | 10 Ko] - C:\Patch.rev
[14/07/2009 - 04:20:08 | D] - C:\PerfLogs
[29/05/2013 - 20:55:50 | D] - C:\PhSp_CS2_UE_Ret
[25/12/2009 - 17:50:34 | N | 0 Ko] - C:\Preload.rev
[09/12/2013 - 15:13:25 | D] - C:\Program Files
[13/12/2013 - 18:33:21 | D] - C:\Program Files (x86)
[09/12/2013 - 13:42:32 | HD] - C:\ProgramData
[25/12/2009 - 17:50:21 | SHD] - C:\Recovery
[24/10/2009 - 05:17:48 | N | 2 Ko] - C:\RHDSetup.log
[29/10/2012 - 18:22:02 | D] - C:\sh4ldr
[05/02/2014 - 20:30:02 | SHD] - C:\System Volume Information
[05/02/2014 - 22:54:16 | D] - C:\UsbFix
[06/02/2014 - 08:35:43 | A | 16 Ko | 36F7BAAC9B98C453CC16971920DC7472] - C:\UsbFix [Clean 2] TELO�-PC.txt
[05/02/2014 - 23:06:39 | N | 16 Ko | 4915D1BCD12D2DE306CEAD1BC7F7CE23] - C:\UsbFix [Scan 1] TELO�-PC.txt
[06/02/2014 - 07:44:40 | N | 15 Ko | AB18DBADE3CEB6CFCABF51C023B7634D] - C:\UsbFix [Scan 2] TELO�-PC.txt
[03/01/2013 - 15:12:46 | N | 0 Ko] - C:\user.js
[29/09/2013 - 11:46:48 | D] - C:\Users
[07/11/2007 - 08:00:40 | N | 6 Ko] - C:\vcredist.bmp
[07/11/2007 - 08:50:40 | N | 1883 Ko] - C:\VC_RED.cab
[07/11/2007 - 08:53:12 | N | 237 Ko] - C:\VC_RED.MSI
[26/01/2014 - 21:20:03 | D] - C:\Windows
[14/06/2010 - 20:35:26 | SHD] - E:\.Trashes
[14/06/2010 - 20:35:26 | SH | 4 Ko] - E:\._.Trashes
[30/01/2014 - 09:06:46 | SHD] - E:\.fseventsd
[29/02/2012 - 20:33:28 | SH | 24 Ko] - E:\.DS_Store
[16/02/2012 - 20:16:58 | N | 25 Ko] - E:\.BridgeCache
[23/01/2014 - 15:55:56 | N | 1456746 Ko] - E:\Le loup de wall street (2013).avi
[28/11/2010 - 11:27:34 | SHD] - E:\.Spotlight-V100
[15/04/2013 - 21:16:22 | SHD] - E:\.TemporaryItems
[15/04/2013 - 21:16:22 | SH | 4 Ko] - E:\._.TemporaryItems
[30/01/2014 - 08:02:00 | N | 252 Ko] - E:\Le loup de Wall street.srt
[16/02/2012 - 19:21:14 | N | 4 Ko] - E:\._.BridgeCache
[16/02/2012 - 20:16:58 | N | 3543 Ko] - E:\.BridgeCacheT
[16/02/2012 - 19:21:14 | N | 4 Ko] - E:\._.BridgeCacheT
[30/01/2014 - 09:11:54 | N | 4 Ko] - E:\._Le loup de Wall street.srt
[29/12/2011 - 19:02:36 | N | 0 Ko] - E:\.~lock.Michou.odt#
[26/10/2013 - 21:37:10 | D] - F:\2012-2013
[26/10/2013 - 21:35:12 | D] - F:\2013-2014
[15/01/2014 - 18:21:04 | N | 1 Ko | 557E6DF7B68EE34D03B7FC31D72CE912] - F:\Musique pop � �couter.txt
[15/01/2014 - 15:55:24 | N | 93 Ko] - F:\s2.jpg
[07/01/2014 - 10:13:30 | D] - F:\Stage
[26/10/2013 - 22:29:28 | D] - F:\Partitions
[09/12/2013 - 15:18:58 | D] - F:\ENGLISH-Oral presentation
[04/12/2013 - 17:25:10 | D] - F:\Organo
[22/01/2014 - 18:48:32 | N | 159 Ko] - F:\deri-MA109.pdf
[04/02/2014 - 08:55:02 | N | 210 Ko] - F:\LETT_048_0109.pdf
[08/01/2014 - 00:04:48 | D] - G:\jpg
[07/01/2014 - 13:37:30 | N | 14 Ko] - G:\freitag.docx
[07/01/2014 - 13:51:26 | N | 19 Ko] - G:\cible.docx
[05/11/2013 - 10:17:28 | D] - G:\Rapport de stage
[10/01/2014 - 16:43:58 | N | 33424 Ko] - G:\fille 1.pdf
[02/04/2013 - 16:13:52 | SHD] - G:\.Spotlight-V100
[10/01/2014 - 16:45:50 | N | 38490 Ko] - G:\fille 2.pdf
[01/01/1601 - 01:00:00 | SHD] - G:\.Trashes
[07/01/2014 - 17:44:12 | N | 5829 Ko] - G:\Rapport de stage finalis� (R�cup�r�).docx
[11/01/2014 - 16:02:46 | D] - G:\IMPRESSION
[01/01/1601 - 01:00:00 | SH | 4 Ko] - G:\._.Trashes
[08/04/2013 - 13:00:58 | N | 4 Ko] - G:\._CULTURE D EXPO.rtf
[07/01/2014 - 17:49:54 | D] - G:\Rapport de stage finalis� (R�cup�r�).pages
[07/01/2014 - 17:50:30 | N | 4 Ko] - G:\._Rapport de stage finalis� (R�cup�r�).pages
[07/01/2014 - 17:51:04 | N | 3843 Ko] - G:\Rapport de stage finalis� (R�cup�r�) 2.docx
[07/01/2014 - 17:51:04 | N | 4 Ko] - G:\._Rapport de stage finalis� (R�cup�r�) 2.docx
[18/12/2013 - 15:22:20 | D] - G:\faille programme
[08/01/2014 - 10:33:00 | N | 25773 Ko] - G:\impressionfaille.pdf
[08/01/2014 - 10:33:32 | N | 28786 Ko] - G:\impessionfaille2.pdf
[08/01/2014 - 10:34:04 | N | 31765 Ko] - G:\impressionfaille3.pdf
[07/01/2014 - 17:48:58 | N | 22 Ko] - G:\Fiche de lecture.docx
[12/01/2014 - 00:37:12 | N | 30 Ko] - G:\D�coupe.doc
[04/10/2013 - 15:18:12 | SHD] - G:\.TemporaryItems
[04/10/2013 - 15:18:12 | SH | 4 Ko] - G:\._.TemporaryItems
[10/01/2014 - 16:28:28 | N | 358 Ko] - G:\imprimer final jardin.pdf
[10/01/2014 - 16:41:12 | N | 223 Ko] - G:\impression final jardin 2.pdf
[13/01/2014 - 00:00:28 | N | 374 Ko] - G:\�crit accumulation.pdf
[29/01/2014 - 09:34:36 | N | 411 Ko] - G:\20140129092306.tif
[17/01/2014 - 15:48:32 | N | 80 Ko] - G:\._181229_140044409523061_121035564_n.tif
[29/01/2014 - 10:37:28 | N | 459 Ko] - G:\20140129092343.tif
[17/01/2014 - 15:48:54 | N | 89 Ko] - G:\._2466ca116638ce524d13e508637d39e1.tif
[29/01/2014 - 10:40:28 | N | 422 Ko] - G:\20140129092441.tif
[17/01/2014 - 15:49:10 | N | 88 Ko] - G:\._91e525522796218aa5f2fc6e5f294515.tif
[29/01/2014 - 11:00:04 | N | 475 Ko] - G:\20140129092500.tif
[17/01/2014 - 15:49:26 | N | 81 Ko] - G:\._82bbe167f80e3daef8ef19bd1 copie.tif
[17/01/2014 - 15:49:42 | N | 85 Ko] - G:\._6f16b462e662034e0cdfe96fb copie.tif
[17/01/2014 - 15:51:26 | N | 99 Ko] - G:\._Forgotten-Places19.tif
[17/01/2014 - 15:55:02 | N | 3010 Ko] - G:\RAPPORT DE STAGE.pdf
[17/01/2014 - 16:06:24 | N | 80 Ko] - G:\._Man laine ap.tif
[17/01/2014 - 16:07:02 | N | 101 Ko] - G:\._Forgotten-Places12 copie.tif
[17/01/2014 - 16:07:32 | N | 104 Ko] - G:\._Forgotten-P dor� copie.tif
[17/01/2014 - 16:08:10 | N | 101 Ko] - G:\._Forgotten-P .tif
[17/01/2014 - 16:08:48 | N | 103 Ko] - G:\._Forgotten drap de laine.tif
[19/01/2014 - 17:43:34 | N | 186 Ko] - G:\39f9f66a6ab7b4656e6221347f881844.jpg
[22/01/2014 - 09:53:10 | N | 4 Ko] - G:\._39f9f66a6ab7b4656e6221347f881844.jpg
[19/01/2014 - 17:43:16 | N | 79 Ko] - G:\4da0190ca36209da2bd0379412e40cd8.jpg
[22/01/2014 - 09:53:10 | N | 4 Ko] - G:\._4da0190ca36209da2bd0379412e40cd8.jpg
[02/02/2014 - 20:37:06 | D] - G:\bouchra jarrar
[01/12/2013 - 23:49:14 | N | 2911 Ko] - G:\fiche projet perso.docx
################## | Vaccin |
E:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
F:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
G:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
################## | E.O.F | http://www.usbfix.net - http://www.sosvirus.net |
Utilisateur: Telo� (Administrateur) # TELO�-PC
Mis � jour le 02/02/2014 par El Desaparecido - Team SosVirus
Lanc� � 08:23:20 | 06/02/2014
Site Web : http://www.usbfix.net
Changelog : http://www.usbfix.net/maj/
Support : http://www.sosvirus.net/
Upload Malware : http://www.sosvirus.net/upload_malware.php
Contact : http://www.usbfix.net/contact/
PC: Acer (JV50 )
CPU: Pentium(R) Dual-Core CPU T4300 @ 2.10GHz
RAM -> [Total : 4091 Mo| Free : 2606 Mo]
Bios: Phoenix Technologies LTD
Boot: Normal boot
OS: Microsoft Windows�7 �dition Familiale Premium (6.1.7601 64-Bit) Service Pack 1
WB: Windows Internet Explorer : 11.0.9600.16476
WB: Google Chrome : 32.0.1700.107
WB: Mozilla Firefox : 1.9.2.28
SC: Security Center [Enabled]
WU: Windows Update [Enabled]
AV: avast! Antivirus [Enabled | Updated]
AS: avast! Antivirus [Enabled | Updated]
AS: Windows Defender [Enabled | Updated]
FW: Windows FireWall [(!) Disabled]
C:\ (%systemdrive%) -> Disque fixe # 285 Go (167 Go libre(s) - 59%) [ACER] # NTFS
D:\ -> CD-ROM
E:\ -> Disque amovible # 4 Go (2 Go libre(s) - 61%) [MOON] # FAT32
F:\ -> Disque amovible # 914 Mo (506 Mo libre(s) - 55%) [] # FAT
G:\ -> Disque amovible # 984 Mo (490 Mo libre(s) - 50%) [] # FAT
################## | Processus Actif |
C:\Windows\system32\csrss.exe (ID: 504 |ParentID: 436)
C:\Windows\system32\wininit.exe (ID: 576 |ParentID: 436)
C:\Windows\system32\csrss.exe (ID: 588 |ParentID: 568)
C:\Windows\system32\services.exe (ID: 636 |ParentID: 576)
C:\Windows\system32\lsass.exe (ID: 664 |ParentID: 576)
C:\Windows\system32\lsm.exe (ID: 672 |ParentID: 576)
C:\Windows\system32\winlogon.exe (ID: 680 |ParentID: 568)
C:\Windows\system32\svchost.exe (ID: 796 |ParentID: 636)
C:\Windows\system32\svchost.exe (ID: 888 |ParentID: 636)
C:\Windows\system32\atiesrxx.exe (ID: 936 |ParentID: 636)
C:\Windows\System32\svchost.exe (ID: 1016 |ParentID: 636)
C:\Windows\System32\svchost.exe (ID: 376 |ParentID: 636)
C:\Windows\system32\svchost.exe (ID: 520 |ParentID: 636)
C:\Windows\system32\svchost.exe (ID: 572 |ParentID: 636)
C:\Windows\system32\svchost.exe (ID: 1216 |ParentID: 636)
C:\Windows\system32\atieclxx.exe (ID: 1244 |ParentID: 936)
C:\Windows\SYSTEM32\WISPTIS.EXE (ID: 1280 |ParentID: 376)
C:\Program Files\AVAST Software\Avast\AvastSvc.exe (ID: 1432 |ParentID: 636)
C:\Windows\System32\spoolsv.exe (ID: 1528 |ParentID: 636)
C:\Windows\system32\svchost.exe (ID: 1564 |ParentID: 636)
C:\Program Files\LSI SoftModem\agr64svc.exe (ID: 1732 |ParentID: 636)
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (ID: 1752 |ParentID: 636)
C:\ProgramData\BitGuard\2.7.1832.68\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe (ID: 1816 |ParentID: 636)
C:\Program Files (x86)\Bonjour\mDNSResponder.exe (ID: 1848 |ParentID: 636)
C:\Windows\SysWOW64\schtasks.exe (ID: 1864 |ParentID: 1816)
C:\Windows\system32\conhost.exe (ID: 1880 |ParentID: 504)
C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (ID: 1952 |ParentID: 636)
C:\Program Files (x86)\Acer\Registration\GregHSRW.exe (ID: 2016 |ParentID: 636)
C:\Windows\system32\taskhost.exe (ID: 1288 |ParentID: 636)
C:\Windows\SYSTEM32\WISPTIS.EXE (ID: 1684 |ParentID: 376)
C:\Windows\system32\Dwm.exe (ID: 1584 |ParentID: 376)
C:\Windows\Explorer.EXE (ID: 1028 |ParentID: 412)
C:\ProgramData\BitGuard\2.7.1832.68\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe (ID: 1312 |ParentID: 1816)
C:\Windows\system32\taskeng.exe (ID: 2060 |ParentID: 572)
C:\ProgramData\Premium\ContinueToSave\ContinueToSave.exe (ID: 2180 |ParentID: 2060)
C:\Windows\system32\taskeng.exe (ID: 2188 |ParentID: 572)
C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe (ID: 2264 |ParentID: 2188)
C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe (ID: 2304 |ParentID: 2112)
C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe (ID: 2312 |ParentID: 2112)
C:\Program Files\IB Updater\ExtensionUpdaterService.exe (ID: 2324 |ParentID: 636)
C:\Program Files (x86)\BonanzaDealsLive\Update\BonanzaDealsLive.exe (ID: 2344 |ParentID: 2172)
C:\Windows\system32\dmwu.exe (ID: 2376 |ParentID: 636)
C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\MWLService.exe (ID: 2448 |ParentID: 636)
C:\Program Files\AVAST Software\Avast\setup\avast.setup (ID: 2808 |ParentID: 1432)
C:\Windows\system32\runonce.exe (ID: 2828 |ParentID: 1028)
C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe (ID: 2964 |ParentID: 636)
C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe (ID: 3032 |ParentID: 636)
C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (ID: 2044 |ParentID: 636)
C:\Program Files (x86)\Skype\Updater\Updater.exe (ID: 2292 |ParentID: 636)
C:\Windows\system32\svchost.exe (ID: 2352 |ParentID: 636)
C:\Program Files\Acer\Acer Updater\UpdaterService.exe (ID: 2612 |ParentID: 636)
C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe (ID: 1064 |ParentID: 636)
C:\Program Files\Web Assistant\ExtensionUpdaterService.exe (ID: 1188 |ParentID: 636)
C:\Program Files\Web Assistant\ExtensionUpdaterService.exe (ID: 976 |ParentID: 636)
C:\Windows\System32\svchost.exe (ID: 3096 |ParentID: 636)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (ID: 3120 |ParentID: 636)
C:\Windows\System32\atwtusb.exe (ID: 3180 |ParentID: 636)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (ID: 3216 |ParentID: 3120)
C:\Windows\system32\atwtusb.exe (ID: 3300 |ParentID: 3180)
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe (ID: 3308 |ParentID: 636)
C:\Windows\system32\wbem\wmiprvse.exe (ID: 3348 |ParentID: 796)
C:\Windows\SysWOW64\jmdp\stij.exe (ID: 3572 |ParentID: 2376)
C:\Windows\System32\ljkb\stij.exe (ID: 3632 |ParentID: 2376)
C:\Windows\system32\svchost.exe (ID: 3688 |ParentID: 636)
C:\Windows\system32\svchost.exe (ID: 3844 |ParentID: 636)
C:\Windows\System32\svchost.exe (ID: 3868 |ParentID: 636)
C:\Windows\System32\WUDFHost.exe (ID: 4056 |ParentID: 376)
################## | Regedit Run |
04 - HKCU\..\Run : [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
04 - HKCU\..\Run : [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
04 - HKCU\..\Run : [cacaoweb] "C:\Users\Telo�\AppData\Roaming\cacaoweb\cacaoweb.exe" -noplayer
04 - HKCU\..\Run : [AdobeBridge]
04 - HKCU\..\Run : [flashmemory] wscript.exe //B "C:\Users\TELO~1\AppData\Local\Temp\flashmemory.vbe"
04 - HKLM\..\Run : [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
04 - HKLM\..\Run : [NortonOnlineBackupReminder] "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED
04 - HKLM\..\Run : [BackupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k
04 - HKLM\..\Run : [EgisTecLiveUpdate] "C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe"
04 - HKLM\..\Run : [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
04 - HKLM\..\Run : [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
04 - HKLM\..\Run : [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
04 - HKLM\..\Run : [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
04 - HKLM\..\Run : [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
04 - HKLM\..\Run : [Ulead AutoDetector v2] C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\monitor.exe
04 - HKLM\..\Run : [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
04 - HKLM\..\Run : [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
04 - HKLM\..\Run : [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
04 - HKLM\..\Run : []
04 - HKLM\..\Run : [AdobeCS5.5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin
04 - HKLM\..\Run : [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
04 - HKLM\..\Run : [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
04 - HKLM64\..\Run : [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe
04 - HKLM64\..\Run : [mwlDaemon] C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
04 - HKLM64\..\Run : [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
04 - HKLM64\..\Run : [PLFSetI] C:\Windows\PLFSetI.exe
04 - HKLM64\..\Run : [Acer ePower Management] C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
04 - HKLM64\..\Run : []
04 - HKLM64\..\Run : [MacroKeyManager] WTMKM.exe
04 - HKLM64\..\Run : [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
04 - HKLM64\..\Run : [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-21-3257031791-4191643407-3681858138-1000\..\Run : [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
04 - HKU\S-1-5-21-3257031791-4191643407-3681858138-1000\..\Run : [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
04 - HKU\S-1-5-21-3257031791-4191643407-3681858138-1000\..\Run : [cacaoweb] "C:\Users\Telo�\AppData\Roaming\cacaoweb\cacaoweb.exe" -noplayer
04 - HKU\S-1-5-21-3257031791-4191643407-3681858138-1000\..\Run : [AdobeBridge]
04 - HKU\S-1-5-21-3257031791-4191643407-3681858138-1000\..\Run : [flashmemory] wscript.exe //B "C:\Users\TELO~1\AppData\Local\Temp\flashmemory.vbe"
04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-18\..\RunOnce : [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601
################## | Recherche g�n�rique |
Supprim�! C:\Users\Telo�\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\flashmemory.vbe
Supprim�! C:\Users\TELO~1\AppData\Local\Temp\flashmemory.vbe
Supprim�! E:\flashmemory.vbe
Supprim�! F:\flashmemory.vbe
Supprim�! G:\flashmemory.vbe
Supprim�! E:\.TemporaryItems.lnk
Supprim�! E:\.lnk
Supprim�! E:\Le loup de wall street (2013).lnk
Supprim�! E:\Le loup de Wall street.lnk
Supprim�! E:\.Trashes.lnk
Supprim�! E:\.fseventsd.lnk
Supprim�! E:\.Spotlight-V100.lnk
Supprim�! F:\Musique pop � �couter.lnk
Supprim�! F:\2012-2013.lnk
Supprim�! F:\2013-2014.lnk
Supprim�! F:\Stage.lnk
Supprim�! F:\Partitions.lnk
Supprim�! F:\ENGLISH-Oral presentation.lnk
Supprim�! F:\Organo.lnk
Supprim�! F:\s2.lnk
Supprim�! F:\deri-MA109.lnk
Supprim�! F:\LETT_048_0109.lnk
Supprim�! G:\freitag.lnk
Supprim�! G:\cible.lnk
Supprim�! G:\jpg.lnk
Supprim�! G:\fille 1.lnk
Supprim�! G:\fille 2.lnk
Supprim�! G:\.lnk
Supprim�! G:\D�coupe.lnk
Supprim�! G:\impressionfaille.lnk
Supprim�! G:\impessionfaille2.lnk
Supprim�! G:\impressionfaille3.lnk
Supprim�! G:\Rapport de stage finalis� (R�cup�r�).lnk
Supprim�! G:\Rapport de stage finalis� (R�cup�r�) 2.lnk
Supprim�! G:\Fiche de lecture.lnk
Supprim�! G:\imprimer final jardin.lnk
Supprim�! G:\impression final jardin 2.lnk
Supprim�! G:\�crit accumulation.lnk
Supprim�! G:\20140129092306.lnk
Supprim�! G:\20140129092343.lnk
Supprim�! G:\20140129092441.lnk
Supprim�! G:\20140129092500.lnk
Supprim�! G:\RAPPORT DE STAGE.lnk
Supprim�! G:\39f9f66a6ab7b4656e6221347f881844.lnk
Supprim�! G:\4da0190ca36209da2bd0379412e40cd8.lnk
Supprim�! G:\.Spotlight-V100.lnk
Supprim�! G:\.Trashes.lnk
Supprim�! G:\IMPRESSION.lnk
Supprim�! G:\Rapport de stage finalis� (R�cup�r�).pages.lnk
Supprim�! G:\faille programme.lnk
Supprim�! G:\.TemporaryItems.lnk
Supprim�! G:\bouchra jarrar.lnk
Supprim�! G:\fiche projet perso.lnk
(!) Fichiers temporaires supprim�s.
################## | Registre |
R�par� ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|EnableLUA -> 1
R�par� ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|ConsentPromptBehaviorAdmin -> 5
R�par� ! HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowMyGames -> 1
Supprim�! HKU\S-1-5-21-3257031791-4191643407-3681858138-1000\Software\Microsoft\Windows\CurrentVersion\Run|flashmemory
################## | Listing |
[01/09/2011 - 00:00:34 | SHD] - C:\$Recycle.Bin
[12/12/2012 - 18:13:55 | N | 46 Ko | C43F5D8E0195AE684B0434AFA8D869F2] - C:\AdwCleaner[R1].txt
[28/12/2012 - 12:06:06 | N | 7 Ko | C4DDF42F5D99DD586B1CC0B50F6AD878] - C:\AdwCleaner[R2].txt
[12/12/2012 - 18:15:00 | N | 46 Ko | E4B2F27634F4527D5B2B9881A1489FA6] - C:\AdwCleaner[S1].txt
[28/12/2012 - 12:06:41 | N | 7 Ko | E3F419849C5FC0B34CFE1A406C718DFE] - C:\AdwCleaner[S2].txt
[29/10/2012 - 18:22:10 | A | 0 Ko] - C:\autoexec.bat
[24/10/2009 - 05:27:46 | D] - C:\BOOK
[22/08/2009 - 11:23:06 | SHD] - C:\Boot
[14/07/2009 - 02:38:58 | RASH | 375 Ko] - C:\bootmgr
[27/07/2009 - 21:40:53 | RASH | 8 Ko] - C:\BOOTSECT.BAK
[14/07/2009 - 06:08:56 | SHD] - C:\Documents and Settings
[25/12/2009 - 17:53:48 | DC] - C:\elements
[13/11/2013 - 17:43:18 | N | 0 Ko] - C:\end
[07/11/2007 - 08:00:40 | N | 17 Ko | 9147A93F43D8E58218EBCB15FDA888C9] - C:\eula.1028.txt
[07/11/2007 - 08:00:40 | N | 17 Ko | 9147A93F43D8E58218EBCB15FDA888C9] - C:\eula.1031.txt
[07/11/2007 - 08:00:40 | N | 10 Ko | 99C22D4A31F4EAD4351B71D6F4E5F6A1] - C:\eula.1033.txt
[07/11/2007 - 08:00:40 | N | 17 Ko | 9147A93F43D8E58218EBCB15FDA888C9] - C:\eula.1036.txt
[07/11/2007 - 08:00:40 | N | 17 Ko | 9147A93F43D8E58218EBCB15FDA888C9] - C:\eula.1040.txt
[07/11/2007 - 08:00:40 | N | 0 Ko | 9B15A3A055CC6E67EA191A1B7885649A] - C:\eula.1041.txt
[07/11/2007 - 08:00:40 | N | 17 Ko | 9147A93F43D8E58218EBCB15FDA888C9] - C:\eula.1042.txt
[07/11/2007 - 08:00:40 | N | 17 Ko | 9147A93F43D8E58218EBCB15FDA888C9] - C:\eula.2052.txt
[07/11/2007 - 08:00:40 | N | 17 Ko | 9147A93F43D8E58218EBCB15FDA888C9] - C:\eula.3082.txt
[07/11/2007 - 08:00:40 | N | 1 Ko] - C:\globdata.ini
[06/02/2014 - 08:22:03 | ASH | 3141828 Ko] - C:\hiberfil.sys
[07/11/2007 - 08:44:20 | N | 835 Ko | E015A2D8890E2A96A93CA818F834C45B] - C:\install.exe
[07/11/2007 - 08:00:40 | N | 1 Ko] - C:\install.ini
[07/11/2007 - 08:44:20 | N | 74 Ko | 8F05FE39BDD336C8FA2A18EC3DFE418C] - C:\install.res.1028.dll
[07/11/2007 - 08:44:20 | N | 93 Ko | 7D9EBB7DCA62BA75361346CAF4EC196B] - C:\install.res.1031.dll
[07/11/2007 - 08:44:20 | N | 88 Ko | 43FB29E3A676D26FCBF0352207991523] - C:\install.res.1033.dll
[07/11/2007 - 08:44:20 | N | 94 Ko | 37C8A4717B40540816A3B92C470FD58F] - C:\install.res.1036.dll
[07/11/2007 - 08:44:20 | N | 92 Ko | 03576876C7E9A5B44EB7916492B5B0F6] - C:\install.res.1040.dll
[07/11/2007 - 08:44:20 | N | 79 Ko | A3946D3C9ED130AF89D1C1A9E63DEAA6] - C:\install.res.1041.dll
[07/11/2007 - 08:44:20 | N | 77 Ko | A5CFFE01D83AFECCD9590B4D696AA44E] - C:\install.res.1042.dll
[07/11/2007 - 08:44:20 | N | 73 Ko | 213BF3AD8A5F31C021BBE011D6460752] - C:\install.res.2052.dll
[07/11/2007 - 08:44:20 | N | 93 Ko | FACD045628070999B43EB7C13AB2E0FE] - C:\install.res.3082.dll
[22/08/2009 - 06:15:26 | D] - C:\Intel
[03/07/2012 - 20:08:44 | D] - C:\Kreapixel
[01/12/2006 - 22:37:14 | N | 884 Ko | 800B746FDC4D80469AFC7E5E9B510C9C] - C:\msdia80.dll
[22/08/2009 - 09:35:38 | RHD] - C:\MSOCache
[25/12/2009 - 17:50:41 | D] - C:\OEM
[06/02/2014 - 08:22:10 | ASH | 4189108 Ko] - C:\pagefile.sys
[12/10/2009 - 06:51:36 | N | 10 Ko] - C:\Patch.rev
[14/07/2009 - 04:20:08 | D] - C:\PerfLogs
[29/05/2013 - 20:55:50 | D] - C:\PhSp_CS2_UE_Ret
[25/12/2009 - 17:50:34 | N | 0 Ko] - C:\Preload.rev
[09/12/2013 - 15:13:25 | D] - C:\Program Files
[13/12/2013 - 18:33:21 | D] - C:\Program Files (x86)
[09/12/2013 - 13:42:32 | HD] - C:\ProgramData
[25/12/2009 - 17:50:21 | SHD] - C:\Recovery
[24/10/2009 - 05:17:48 | N | 2 Ko] - C:\RHDSetup.log
[29/10/2012 - 18:22:02 | D] - C:\sh4ldr
[05/02/2014 - 20:30:02 | SHD] - C:\System Volume Information
[05/02/2014 - 22:54:16 | D] - C:\UsbFix
[06/02/2014 - 08:35:43 | A | 16 Ko | 36F7BAAC9B98C453CC16971920DC7472] - C:\UsbFix [Clean 2] TELO�-PC.txt
[05/02/2014 - 23:06:39 | N | 16 Ko | 4915D1BCD12D2DE306CEAD1BC7F7CE23] - C:\UsbFix [Scan 1] TELO�-PC.txt
[06/02/2014 - 07:44:40 | N | 15 Ko | AB18DBADE3CEB6CFCABF51C023B7634D] - C:\UsbFix [Scan 2] TELO�-PC.txt
[03/01/2013 - 15:12:46 | N | 0 Ko] - C:\user.js
[29/09/2013 - 11:46:48 | D] - C:\Users
[07/11/2007 - 08:00:40 | N | 6 Ko] - C:\vcredist.bmp
[07/11/2007 - 08:50:40 | N | 1883 Ko] - C:\VC_RED.cab
[07/11/2007 - 08:53:12 | N | 237 Ko] - C:\VC_RED.MSI
[26/01/2014 - 21:20:03 | D] - C:\Windows
[14/06/2010 - 20:35:26 | SHD] - E:\.Trashes
[14/06/2010 - 20:35:26 | SH | 4 Ko] - E:\._.Trashes
[30/01/2014 - 09:06:46 | SHD] - E:\.fseventsd
[29/02/2012 - 20:33:28 | SH | 24 Ko] - E:\.DS_Store
[16/02/2012 - 20:16:58 | N | 25 Ko] - E:\.BridgeCache
[23/01/2014 - 15:55:56 | N | 1456746 Ko] - E:\Le loup de wall street (2013).avi
[28/11/2010 - 11:27:34 | SHD] - E:\.Spotlight-V100
[15/04/2013 - 21:16:22 | SHD] - E:\.TemporaryItems
[15/04/2013 - 21:16:22 | SH | 4 Ko] - E:\._.TemporaryItems
[30/01/2014 - 08:02:00 | N | 252 Ko] - E:\Le loup de Wall street.srt
[16/02/2012 - 19:21:14 | N | 4 Ko] - E:\._.BridgeCache
[16/02/2012 - 20:16:58 | N | 3543 Ko] - E:\.BridgeCacheT
[16/02/2012 - 19:21:14 | N | 4 Ko] - E:\._.BridgeCacheT
[30/01/2014 - 09:11:54 | N | 4 Ko] - E:\._Le loup de Wall street.srt
[29/12/2011 - 19:02:36 | N | 0 Ko] - E:\.~lock.Michou.odt#
[26/10/2013 - 21:37:10 | D] - F:\2012-2013
[26/10/2013 - 21:35:12 | D] - F:\2013-2014
[15/01/2014 - 18:21:04 | N | 1 Ko | 557E6DF7B68EE34D03B7FC31D72CE912] - F:\Musique pop � �couter.txt
[15/01/2014 - 15:55:24 | N | 93 Ko] - F:\s2.jpg
[07/01/2014 - 10:13:30 | D] - F:\Stage
[26/10/2013 - 22:29:28 | D] - F:\Partitions
[09/12/2013 - 15:18:58 | D] - F:\ENGLISH-Oral presentation
[04/12/2013 - 17:25:10 | D] - F:\Organo
[22/01/2014 - 18:48:32 | N | 159 Ko] - F:\deri-MA109.pdf
[04/02/2014 - 08:55:02 | N | 210 Ko] - F:\LETT_048_0109.pdf
[08/01/2014 - 00:04:48 | D] - G:\jpg
[07/01/2014 - 13:37:30 | N | 14 Ko] - G:\freitag.docx
[07/01/2014 - 13:51:26 | N | 19 Ko] - G:\cible.docx
[05/11/2013 - 10:17:28 | D] - G:\Rapport de stage
[10/01/2014 - 16:43:58 | N | 33424 Ko] - G:\fille 1.pdf
[02/04/2013 - 16:13:52 | SHD] - G:\.Spotlight-V100
[10/01/2014 - 16:45:50 | N | 38490 Ko] - G:\fille 2.pdf
[01/01/1601 - 01:00:00 | SHD] - G:\.Trashes
[07/01/2014 - 17:44:12 | N | 5829 Ko] - G:\Rapport de stage finalis� (R�cup�r�).docx
[11/01/2014 - 16:02:46 | D] - G:\IMPRESSION
[01/01/1601 - 01:00:00 | SH | 4 Ko] - G:\._.Trashes
[08/04/2013 - 13:00:58 | N | 4 Ko] - G:\._CULTURE D EXPO.rtf
[07/01/2014 - 17:49:54 | D] - G:\Rapport de stage finalis� (R�cup�r�).pages
[07/01/2014 - 17:50:30 | N | 4 Ko] - G:\._Rapport de stage finalis� (R�cup�r�).pages
[07/01/2014 - 17:51:04 | N | 3843 Ko] - G:\Rapport de stage finalis� (R�cup�r�) 2.docx
[07/01/2014 - 17:51:04 | N | 4 Ko] - G:\._Rapport de stage finalis� (R�cup�r�) 2.docx
[18/12/2013 - 15:22:20 | D] - G:\faille programme
[08/01/2014 - 10:33:00 | N | 25773 Ko] - G:\impressionfaille.pdf
[08/01/2014 - 10:33:32 | N | 28786 Ko] - G:\impessionfaille2.pdf
[08/01/2014 - 10:34:04 | N | 31765 Ko] - G:\impressionfaille3.pdf
[07/01/2014 - 17:48:58 | N | 22 Ko] - G:\Fiche de lecture.docx
[12/01/2014 - 00:37:12 | N | 30 Ko] - G:\D�coupe.doc
[04/10/2013 - 15:18:12 | SHD] - G:\.TemporaryItems
[04/10/2013 - 15:18:12 | SH | 4 Ko] - G:\._.TemporaryItems
[10/01/2014 - 16:28:28 | N | 358 Ko] - G:\imprimer final jardin.pdf
[10/01/2014 - 16:41:12 | N | 223 Ko] - G:\impression final jardin 2.pdf
[13/01/2014 - 00:00:28 | N | 374 Ko] - G:\�crit accumulation.pdf
[29/01/2014 - 09:34:36 | N | 411 Ko] - G:\20140129092306.tif
[17/01/2014 - 15:48:32 | N | 80 Ko] - G:\._181229_140044409523061_121035564_n.tif
[29/01/2014 - 10:37:28 | N | 459 Ko] - G:\20140129092343.tif
[17/01/2014 - 15:48:54 | N | 89 Ko] - G:\._2466ca116638ce524d13e508637d39e1.tif
[29/01/2014 - 10:40:28 | N | 422 Ko] - G:\20140129092441.tif
[17/01/2014 - 15:49:10 | N | 88 Ko] - G:\._91e525522796218aa5f2fc6e5f294515.tif
[29/01/2014 - 11:00:04 | N | 475 Ko] - G:\20140129092500.tif
[17/01/2014 - 15:49:26 | N | 81 Ko] - G:\._82bbe167f80e3daef8ef19bd1 copie.tif
[17/01/2014 - 15:49:42 | N | 85 Ko] - G:\._6f16b462e662034e0cdfe96fb copie.tif
[17/01/2014 - 15:51:26 | N | 99 Ko] - G:\._Forgotten-Places19.tif
[17/01/2014 - 15:55:02 | N | 3010 Ko] - G:\RAPPORT DE STAGE.pdf
[17/01/2014 - 16:06:24 | N | 80 Ko] - G:\._Man laine ap.tif
[17/01/2014 - 16:07:02 | N | 101 Ko] - G:\._Forgotten-Places12 copie.tif
[17/01/2014 - 16:07:32 | N | 104 Ko] - G:\._Forgotten-P dor� copie.tif
[17/01/2014 - 16:08:10 | N | 101 Ko] - G:\._Forgotten-P .tif
[17/01/2014 - 16:08:48 | N | 103 Ko] - G:\._Forgotten drap de laine.tif
[19/01/2014 - 17:43:34 | N | 186 Ko] - G:\39f9f66a6ab7b4656e6221347f881844.jpg
[22/01/2014 - 09:53:10 | N | 4 Ko] - G:\._39f9f66a6ab7b4656e6221347f881844.jpg
[19/01/2014 - 17:43:16 | N | 79 Ko] - G:\4da0190ca36209da2bd0379412e40cd8.jpg
[22/01/2014 - 09:53:10 | N | 4 Ko] - G:\._4da0190ca36209da2bd0379412e40cd8.jpg
[02/02/2014 - 20:37:06 | D] - G:\bouchra jarrar
[01/12/2013 - 23:49:14 | N | 2911 Ko] - G:\fiche projet perso.docx
################## | Vaccin |
E:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
F:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
G:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
################## | E.O.F | http://www.usbfix.net - http://www.sosvirus.net |