############################## | UsbFix V 7.159 | [Suppression]
Utilisateur: ADMIN (Administrateur) # ADMIN-F50220F4B
Mis à jour le 06/01/2014 par El Desaparecido - Team SosVirus
Lancé à 18:05:10 | 22/01/2014
Site Web :
http://www.usbfix.net" onclick="window.open(this.href);return false;
Changelog :
http://www.usbfix.net/maj/" onclick="window.open(this.href);return false;
Support :
http://www.sosvirus.net/" onclick="window.open(this.href);return false;
Upload Malware :
http://www.sosvirus.net/upload_malware.php" onclick="window.open(this.href);return false;
Contact :
http://www.usbfix.net/contact/" onclick="window.open(this.href);return false;
PC: Hewlett-Packard (085Ch)
CPU: Intel(R) Pentium(R) 4 CPU 2.80GHz
RAM -> [Total : 1015 Mo| Free : 186 Mo]
Bios: Hewlett-Packard
Boot: Normal boot
OS: Microsoft Windows XP Professionnel (5.1.2600 32-Bit) Service Pack 3
WB: Windows Internet Explorer : 8.0.6001.18702
WB: Mozilla Firefox : 26.0
SC: Security Center Service [Enabled]
WU: Windows Update Service [Enabled]
FW: Windows FireWall Service [Enabled]
C:\ (%systemdrive%) -> Disque fixe # 23 Go (7 Go libre(s) - 29%) [] # NTFS
D:\ -> CD-ROM
F:\ -> Disque fixe # 14 Go (13 Go libre(s) - 92%) [DATA] # NTFS
################## | Processus Stoppés |
Stoppé! C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (ID: 1540 |ParentID: 740)
Stoppé! C:\WINDOWS\Explorer.EXE (ID: 1644 |ParentID: 1604)
Stoppé! C:\WINDOWS\system32\spoolsv.exe (ID: 1792 |ParentID: 740)
Stoppé! C:\Program Files\iTunes\iTunesHelper.exe (ID: 1968 |ParentID: 1644)
Stoppé! C:\WINDOWS\system32\ctfmon.exe (ID: 1992 |ParentID: 1644)
Stoppé! C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe (ID: 252 |ParentID: 740)
Stoppé! C:\Program Files\Bonjour\mDNSResponder.exe (ID: 312 |ParentID: 740)
Stoppé! C:\Program Files\EaseUS\Todo Backup\bin\Agent.exe (ID: 352 |ParentID: 740)
Stoppé! C:\Program Files\EaseUS\Todo Backup\bin\GuardAgent.exe (ID: 572 |ParentID: 740)
Stoppé! C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe (ID: 1044 |ParentID: 740)
Stoppé! C:\Program Files\iPod\bin\iPodService.exe (ID: 2060 |ParentID: 740)
Stoppé! C:\WINDOWS\System32\alg.exe (ID: 2504 |ParentID: 740)
Stoppé! C:\Program Files\Fichiers communs\Apple\Mobile Device Support\SyncServer.exe (ID: 3992 |ParentID: 660)
Stoppé! C:\Program Files\Alwil Software\Avast5\AvastUI.exe (ID: 3184 |ParentID: 1644)
Stoppé! C:\Program Files\Classic PhoneTools\phonTool.exe (ID: 2252 |ParentID: 1644)
Stoppé! C:\Program Files\Brownie\brstswnd.exe (ID: 1736 |ParentID: 2472)
Stoppé! C:\Program Files\Brownie\brpjp04a.exe (ID: 1912 |ParentID: 1736)
Stoppé! C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (ID: 1640 |ParentID: 1644)
Stoppé! C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE (ID: 3920 |ParentID: 1644)
Stoppé! C:\Program Files\Mozilla Firefox\firefox.exe (ID: 1020 |ParentID: 1644)
Stoppé! C:\WINDOWS\system32\taskmgr.exe (ID: 2796 |ParentID: 696)
Stoppé! C:\WINDOWS\system32\wscntfy.exe (ID: 3276 |ParentID: 1088)
Stoppé! C:\Program Files\Mozilla Firefox\plugin-container.exe (ID: 2056 |ParentID: 1020)
################## | Regedit Run |
04 - HKLM\..\Run : [APSDaemon] "C:\Program Files\Fichiers communs\Apple\Apple Application Support\APSDaemon.exe"
04 - HKLM\..\Run : [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
04 - HKLM\..\Run : [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
04 - HKLM\..\RunOnce : [20131224] C:\Program Files\Alwil Software\Avast5\setup\emupdate\857ffb45-f294-4ed9-ae41-e74f560dc640.exe /check
04 - HKLM\Software\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\..\Run : []
04 - HKLM\Software\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\..\RunOnce : []
04 - HKU\S-1-5-21-1202660629-1214440339-1417001333-1003\..\Run : [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
04 - HKU\S-1-5-21-1202660629-1214440339-1417001333-1003\..\Run : [MaxDownloadMgr] "C:\DOCUME~1\ADMIN\LOCALS~1\Temp\Stp2C_TMP.EXE"
################## | Recherche générique |
Supprimé! C:\RECYCLER\S-1-5-21-1202660629-1214440339-1417001333-1003
Supprimé! F:\RECYCLER\S-1-5-21-1202660629-1214440339-1417001333-1003
(!) Fichiers temporaires supprimés.
################## | Registre |
################## | Listing |
[21/01/2014 - 11:42:32 | D] - C:\AdwCleaner
[16/12/2011 - 16:36:50 | A | 0 Ko] - C:\AUTOEXEC.BAT
[06/01/2014 - 11:31:17 | D] - C:\backup
[13/01/2014 - 11:31:27 | SHD] - C:\BOOT
[13/01/2014 - 12:19:56 | ASH | 0 Ko] - C:\boot.ini
[14/04/2008 - 13:00:00 | N | 5 Ko] - C:\Bootfont.bin
[06/01/2014 - 00:00:01 | N | 2 Ko | 769374553735F3AB14D56E7EF9DDDC28] - C:\cclog.txt
[21/01/2014 - 11:44:16 | D] - C:\Config.Msi
[16/12/2011 - 16:36:50 | N | 0 Ko] - C:\CONFIG.SYS
[16/12/2011 - 16:36:58 | D] - C:\DELL
[08/01/2014 - 12:09:24 | D] - C:\Documents and Settings
[13/01/2014 - 09:35:27 | N | 192 Ko] - C:\ESLDR
[13/01/2014 - 09:35:33 | N | 8 Ko] - C:\ESLOADLX
[20/12/2013 - 17:07:05 | D] - C:\found.000
[31/12/2013 - 14:11:28 | D] - C:\HP v165w (E)
[16/12/2011 - 16:36:50 | N | 0 Ko] - C:\IO.SYS
[16/12/2011 - 16:36:50 | N | 0 Ko] - C:\MSDOS.SYS
[31/12/2013 - 14:23:44 | RHD] - C:\MSOCache
[14/04/2008 - 13:00:00 | N | 46 Ko | B2DE3452DE03674C6CEC68B8C8CE7C78] - C:\NTDETECT.COM
[14/04/2008 - 13:00:00 | RASH | 246 Ko] - C:\ntldr
[21/01/2014 - 11:44:16 | ASH | 774144 Ko] - C:\pagefile.sys
[06/01/2014 - 15:25:17 | N | 1 Ko] - C:\PhysicalMBR.bin
[20/01/2014 - 14:30:56 | D] - C:\Program Files
[15/01/2014 - 13:07:20 | SHD] - C:\RECYCLER
[14/01/2014 - 16:50:14 | D] - C:\rsit
[16/12/2011 - 15:46:24 | D] - C:\swsetup
[16/12/2011 - 16:42:56 | SHD] - C:\System Volume Information
[31/12/2013 - 17:51:44 | D] - C:\Temp
[22/01/2014 - 18:05:12 | D] - C:\UsbFix
[09/01/2014 - 15:20:47 | N | 4 Ko | 794F1FFCF3952CE5E5855FC34FE70702] - C:\UsbFix [Clean 10] ADMIN-F50220F4B.txt
[09/01/2014 - 15:25:44 | N | 12 Ko | B9F57F370F379DDA8F7639EF7321140D] - C:\UsbFix [Clean 11] ADMIN-F50220F4B.txt
[14/01/2014 - 12:37:31 | N | 7 Ko | 4A6B98899FCD839D79F7514F4B5AB021] - C:\UsbFix [Clean 12] ADMIN-F50220F4B.txt
[15/01/2014 - 11:42:28 | N | 3 Ko | 92587908761F682C3861BF1DCEB07172] - C:\UsbFix [Clean 13] ADMIN-F50220F4B.txt
[15/01/2014 - 11:47:13 | N | 6 Ko | 95699F0DE02A10A3971F9458D8A92087] - C:\UsbFix [Clean 14] ADMIN-F50220F4B.txt
[15/01/2014 - 11:55:11 | N | 6 Ko | CFEF33E69ABF33E2DD78E294E72ED394] - C:\UsbFix [Clean 15] ADMIN-F50220F4B.txt
[22/01/2014 - 18:05:46 | A | 6 Ko | 93125159FA2CC0AA2B6C3D4C87FEB2BC] - C:\UsbFix [Clean 16] ADMIN-F50220F4B.txt
[31/12/2013 - 14:17:30 | N | 12 Ko | 9282F15FD31574E5F426BFA6278101CA] - C:\UsbFix [Clean 2] ADMIN-F50220F4B.txt
[06/01/2014 - 19:56:16 | N | 3 Ko | C1AA3D66E4635BDD7779CB5E9BAD753C] - C:\UsbFix [Clean 3] ADMIN-F50220F4B.txt
[08/01/2014 - 12:38:09 | N | 3 Ko | A6A39739FA77CCBCA4D0DD266FFFD37A] - C:\UsbFix [Clean 4] ADMIN-F50220F4B.txt
[08/01/2014 - 12:47:02 | N | 10 Ko | E984AD75B6E3DFCD1B0A95FB24EC1B6C] - C:\UsbFix [Clean 5] ADMIN-F50220F4B.txt
[08/01/2014 - 15:04:05 | N | 3 Ko | B665E9950CD183B586362AE69230C29E] - C:\UsbFix [Clean 6] ADMIN-F50220F4B.txt
[08/01/2014 - 15:10:43 | N | 7 Ko | 741284DC61805ABE1252547749DE6246] - C:\UsbFix [Clean 7] ADMIN-F50220F4B.txt
[08/01/2014 - 15:15:46 | N | 3 Ko | 70ABAC345F7B9E43C6FEF63783164CFD] - C:\UsbFix [Clean 8] ADMIN-F50220F4B.txt
[08/01/2014 - 15:47:30 | N | 7 Ko | 8F5E17F4EA1B6037FD18A5A08DF2F09E] - C:\UsbFix [Clean 9] ADMIN-F50220F4B.txt
[31/12/2013 - 12:15:50 | N | 8 Ko | D85507B8E2128EB5DD5AD7674AA06363] - C:\UsbFix [Scan 1] ADMIN-F50220F4B.txt
[06/01/2014 - 19:16:53 | N | 4 Ko | 6104D34B5AF61B204FB7931869F70795] - C:\UsbFix [Scan 9] ADMIN-F50220F4B.txt
[21/01/2014 - 11:44:43 | D] - C:\WINDOWS
[06/01/2014 - 15:40:22 | D] - C:\_OTL
[15/01/2014 - 11:55:11 | RASHD] - F:\Autorun.inf
[20/01/2014 - 14:17:29 | D] - F:\doc
[15/01/2014 - 13:09:42 | D] - F:\doc sibour
[17/01/2014 - 13:54:46 | N | 235 Ko] - F:\FEUILE JOURNALIERES MODEL.xls
[13/01/2014 - 08:28:59 | N | 215 Ko] - F:\FEUILLE DECEMBRE 2013.xls
[09/01/2014 - 21:50:52 | N | 230 Ko] - F:\FEUILLE OCTOBRE 2013.xls
[09/01/2014 - 12:27:03 | N | 264 Ko] - F:\FEUILLE E NOVEMBRE 2013.xls
[13/01/2014 - 17:16:46 | N | 223 Ko] - F:\FEUILLE JUILLET 2013.xls
[13/01/2014 - 14:19:35 | N | 235 Ko] - F:\FEUILLE JOURNALIERE JANVIER 2014.xls
[15/01/2014 - 13:08:03 | SHD] - F:\RECYCLER
[13/01/2014 - 14:23:30 | D] - F:\RESERVATIONS
[13/01/2014 - 10:24:04 | SHD] - F:\System Volume Information
################## | Vaccin |
F:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
################## | E.O.F |
http://www.usbfix.net" onclick="window.open(this.href);return false; -
http://www.sosvirus.net" onclick="window.open(this.href);return false; |