- lun. 20 janv. 2014 18:03
#32215
D'abord merçi,
Voila le rapport, quoi faire?
Merçi
############################## | UsbFix V 7.161 | [Recherche]
Utilisateur: eugène triboi (Administrateur) # EUGàˆNE_TRIBOI
Mis à jour le 15/01/2014 par El Desaparecido - Team SosVirus
Lancé à 17:30:04 | 20/01/2014
Site Web : http://www.usbfix.net" onclick="window.open(this.href);return false;
Changelog : http://www.usbfix.net/maj/" onclick="window.open(this.href);return false;
Support : http://www.sosvirus.net/" onclick="window.open(this.href);return false;
Upload Malware : http://www.sosvirus.net/upload_malware.php" onclick="window.open(this.href);return false;
Contact : http://www.usbfix.net/contact/" onclick="window.open(this.href);return false;
PC: PEGATRON CORPORATION (Benicia)
CPU: Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz
RAM -> [Total : 3071 Mo| Free : 1899 Mo]
Bios: American Megatrends Inc.
Boot: Normal boot
OS: Microsoft® Windows Vistaâ„¢ à‰dition Familiale Premium (6.0.6002 32-Bit) Service Pack 2
WB: Windows Internet Explorer : 9.0.8112.16421
WB: Google Chrome : 32.0.1700.72
SC: Security Center Service [Enabled]
WU: Windows Update Service [Enabled]
AS: Windows Defender : 1.1.1600.0
AS: Malwarebytes' Anti-Malware : 1.75.0001
FW: Windows FireWall Service [Enabled]
C:\ (%systemdrive%) -> Disque fixe # 455 Go (93 Go libre(s) - 20%) [HP] # NTFS
D:\ -> Disque fixe # 11 Go (1019 Mo libre(s) - 9%) [FACTORY_IMAGE] # NTFS
E:\ -> CD-ROM
F:\ -> Disque fixe # 932 Go (476 Go libre(s) - 51%) [SAMSUNG] # NTFS
J:\ -> Disque fixe # 932 Go (161 Go libre(s) - 17%) [Disc intern C2] # NTFS
L:\ -> Disque amovible # 15 Go (10 Go libre(s) - 65%) [] # FAT32
################## | Processus Actif |
C:\Windows\system32\csrss.exe (ID: 556 |ParentID: 544)
C:\Windows\system32\wininit.exe (ID: 604 |ParentID: 544)
C:\Windows\system32\csrss.exe (ID: 616 |ParentID: 596)
C:\Windows\system32\services.exe (ID: 652 |ParentID: 604)
C:\Windows\system32\lsass.exe (ID: 664 |ParentID: 604)
C:\Windows\system32\lsm.exe (ID: 676 |ParentID: 604)
C:\Windows\system32\winlogon.exe (ID: 748 |ParentID: 596)
C:\Windows\system32\svchost.exe (ID: 868 |ParentID: 652)
C:\Windows\system32\svchost.exe (ID: 960 |ParentID: 652)
C:\Program Files\Microsoft Security Client\MsMpEng.exe (ID: 1020 |ParentID: 652)
C:\Windows\System32\svchost.exe (ID: 1184 |ParentID: 652)
C:\Windows\System32\svchost.exe (ID: 1212 |ParentID: 652)
C:\Windows\system32\svchost.exe (ID: 1224 |ParentID: 652)
C:\Windows\system32\svchost.exe (ID: 1332 |ParentID: 652)
C:\Windows\system32\svchost.exe (ID: 1420 |ParentID: 652)
C:\Windows\system32\svchost.exe (ID: 1652 |ParentID: 652)
C:\Windows\system32\svchost.exe (ID: 1912 |ParentID: 652)
C:\Windows\system32\svchost.exe (ID: 2284 |ParentID: 652)
C:\Windows\system32\svchost.exe (ID: 2352 |ParentID: 652)
C:\Windows\System32\svchost.exe (ID: 2412 |ParentID: 652)
C:\Windows\system32\Dwm.exe (ID: 3072 |ParentID: 1212)
C:\Windows\system32\wbem\wmiprvse.exe (ID: 4300 |ParentID: 868)
C:\Windows\system32\svchost.exe (ID: 4580 |ParentID: 652)
C:\Windows\System32\WUDFHost.exe (ID: 4976 |ParentID: 1212)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (ID: 2188 |ParentID: 652)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (ID: 1060 |ParentID: 2188)
C:\Windows\system32\SearchIndexer.exe (ID: 1112 |ParentID: 652)
C:\Windows\Explorer.exe (ID: 5884 |ParentID: 3928)
C:\Program Files\Windows Media Player\wmpnetwk.exe (ID: 4816 |ParentID: 652)
C:\Windows\system32\wbem\unsecapp.exe (ID: 3268 |ParentID: 868)
C:\Windows\system32\taskeng.exe (ID: 4780 |ParentID: 1224)
c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe (ID: 3552 |ParentID: 652)
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (ID: 1376 |ParentID: 652)
C:\Windows\System32\spoolsv.exe (ID: 1488 |ParentID: 652)
C:\Windows\system32\SLsvc.exe (ID: 720 |ParentID: 652)
C:\Windows\system32\SearchProtocolHost.exe (ID: 3776 |ParentID: 1112)
C:\Windows\system32\SearchFilterHost.exe (ID: 6072 |ParentID: 1112)
C:\Program Files\Microsoft Security Client\NisSrv.exe (ID: 2628 |ParentID: 652)
C:\Windows\system32\wbem\wmiprvse.exe (ID: 5372 |ParentID: 868)
################## | Regedit Run |
04 - HKLM\..\Run : [IAStorIcon] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
04 - HKLM\..\Run : [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
04 - HKLM\..\Run : [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
04 - HKLM\..\Run : [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
04 - HKLM\..\Run : [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
04 - HKLM\..\Run : [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
04 - HKLM\..\Run : [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
04 - HKLM\..\Run : [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
04 - HKLM\..\Run : [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
04 - HKLM\..\Run : [TkBellExe] "c:\program files\real\realplayer\Update\realsched.exe" -osboot
04 - HKLM\..\Run : [runeip] "C:\Program Files\Rising\AntiSpyware\rstray.exe" /startup
04 - HKLM\..\Run : [RtHDVCpl] RtHDVCpl.exe
04 - HKLM\..\Run : [BingDesktop] C:\Program Files\Microsoft\BingDesktop\BingDesktop.exe /fromkey
04 - HKLM\..\Run : [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
04 - HKLM\..\RunOnce : []
04 - HKU\S-1-5-21-1043331793-4104906715-1219497340-1000\..\Run : [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
04 - HKU\S-1-5-21-1043331793-4104906715-1219497340-1000\..\Run : [HPAdvisor] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe view=DOCKVIEW,SYSTRAY
04 - HKU\S-1-5-21-1043331793-4104906715-1219497340-1000\..\Run : [Google Update] "C:\Users\eugène triboi\AppData\Local\Google\Update\GoogleUpdate.exe" /c
04 - HKU\S-1-5-21-1043331793-4104906715-1219497340-1000\..\Run : [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
04 - HKU\S-1-5-21-1043331793-4104906715-1219497340-1000\..\Run : [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
04 - HKU\S-1-5-21-1043331793-4104906715-1219497340-1000\..\Run : [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
04 - HKU\S-1-5-21-1043331793-4104906715-1219497340-1000\..\Run : [ehTray.exe] C:\Windows\ehome\ehTray.exe
04 - HKU\S-1-5-21-1043331793-4104906715-1219497340-1000\..\Run : [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
################## | Recherche générique |
################## | Registre |
################## | Vaccin |
F:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
################## | E.O.F | http://www.usbfix.net" onclick="window.open(this.href);return false; - http://www.sosvirus.net" onclick="window.open(this.href);return false; |

D'abord merçi,
Voila le rapport, quoi faire?
Merçi
############################## | UsbFix V 7.161 | [Recherche]
Utilisateur: eugène triboi (Administrateur) # EUGàˆNE_TRIBOI
Mis à jour le 15/01/2014 par El Desaparecido - Team SosVirus
Lancé à 17:30:04 | 20/01/2014
Site Web : http://www.usbfix.net" onclick="window.open(this.href);return false;
Changelog : http://www.usbfix.net/maj/" onclick="window.open(this.href);return false;
Support : http://www.sosvirus.net/" onclick="window.open(this.href);return false;
Upload Malware : http://www.sosvirus.net/upload_malware.php" onclick="window.open(this.href);return false;
Contact : http://www.usbfix.net/contact/" onclick="window.open(this.href);return false;
PC: PEGATRON CORPORATION (Benicia)
CPU: Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz
RAM -> [Total : 3071 Mo| Free : 1899 Mo]
Bios: American Megatrends Inc.
Boot: Normal boot
OS: Microsoft® Windows Vistaâ„¢ à‰dition Familiale Premium (6.0.6002 32-Bit) Service Pack 2
WB: Windows Internet Explorer : 9.0.8112.16421
WB: Google Chrome : 32.0.1700.72
SC: Security Center Service [Enabled]
WU: Windows Update Service [Enabled]
AS: Windows Defender : 1.1.1600.0
AS: Malwarebytes' Anti-Malware : 1.75.0001
FW: Windows FireWall Service [Enabled]
C:\ (%systemdrive%) -> Disque fixe # 455 Go (93 Go libre(s) - 20%) [HP] # NTFS
D:\ -> Disque fixe # 11 Go (1019 Mo libre(s) - 9%) [FACTORY_IMAGE] # NTFS
E:\ -> CD-ROM
F:\ -> Disque fixe # 932 Go (476 Go libre(s) - 51%) [SAMSUNG] # NTFS
J:\ -> Disque fixe # 932 Go (161 Go libre(s) - 17%) [Disc intern C2] # NTFS
L:\ -> Disque amovible # 15 Go (10 Go libre(s) - 65%) [] # FAT32
################## | Processus Actif |
C:\Windows\system32\csrss.exe (ID: 556 |ParentID: 544)
C:\Windows\system32\wininit.exe (ID: 604 |ParentID: 544)
C:\Windows\system32\csrss.exe (ID: 616 |ParentID: 596)
C:\Windows\system32\services.exe (ID: 652 |ParentID: 604)
C:\Windows\system32\lsass.exe (ID: 664 |ParentID: 604)
C:\Windows\system32\lsm.exe (ID: 676 |ParentID: 604)
C:\Windows\system32\winlogon.exe (ID: 748 |ParentID: 596)
C:\Windows\system32\svchost.exe (ID: 868 |ParentID: 652)
C:\Windows\system32\svchost.exe (ID: 960 |ParentID: 652)
C:\Program Files\Microsoft Security Client\MsMpEng.exe (ID: 1020 |ParentID: 652)
C:\Windows\System32\svchost.exe (ID: 1184 |ParentID: 652)
C:\Windows\System32\svchost.exe (ID: 1212 |ParentID: 652)
C:\Windows\system32\svchost.exe (ID: 1224 |ParentID: 652)
C:\Windows\system32\svchost.exe (ID: 1332 |ParentID: 652)
C:\Windows\system32\svchost.exe (ID: 1420 |ParentID: 652)
C:\Windows\system32\svchost.exe (ID: 1652 |ParentID: 652)
C:\Windows\system32\svchost.exe (ID: 1912 |ParentID: 652)
C:\Windows\system32\svchost.exe (ID: 2284 |ParentID: 652)
C:\Windows\system32\svchost.exe (ID: 2352 |ParentID: 652)
C:\Windows\System32\svchost.exe (ID: 2412 |ParentID: 652)
C:\Windows\system32\Dwm.exe (ID: 3072 |ParentID: 1212)
C:\Windows\system32\wbem\wmiprvse.exe (ID: 4300 |ParentID: 868)
C:\Windows\system32\svchost.exe (ID: 4580 |ParentID: 652)
C:\Windows\System32\WUDFHost.exe (ID: 4976 |ParentID: 1212)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (ID: 2188 |ParentID: 652)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (ID: 1060 |ParentID: 2188)
C:\Windows\system32\SearchIndexer.exe (ID: 1112 |ParentID: 652)
C:\Windows\Explorer.exe (ID: 5884 |ParentID: 3928)
C:\Program Files\Windows Media Player\wmpnetwk.exe (ID: 4816 |ParentID: 652)
C:\Windows\system32\wbem\unsecapp.exe (ID: 3268 |ParentID: 868)
C:\Windows\system32\taskeng.exe (ID: 4780 |ParentID: 1224)
c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe (ID: 3552 |ParentID: 652)
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (ID: 1376 |ParentID: 652)
C:\Windows\System32\spoolsv.exe (ID: 1488 |ParentID: 652)
C:\Windows\system32\SLsvc.exe (ID: 720 |ParentID: 652)
C:\Windows\system32\SearchProtocolHost.exe (ID: 3776 |ParentID: 1112)
C:\Windows\system32\SearchFilterHost.exe (ID: 6072 |ParentID: 1112)
C:\Program Files\Microsoft Security Client\NisSrv.exe (ID: 2628 |ParentID: 652)
C:\Windows\system32\wbem\wmiprvse.exe (ID: 5372 |ParentID: 868)
################## | Regedit Run |
04 - HKLM\..\Run : [IAStorIcon] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
04 - HKLM\..\Run : [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
04 - HKLM\..\Run : [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
04 - HKLM\..\Run : [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
04 - HKLM\..\Run : [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
04 - HKLM\..\Run : [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
04 - HKLM\..\Run : [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
04 - HKLM\..\Run : [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
04 - HKLM\..\Run : [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
04 - HKLM\..\Run : [TkBellExe] "c:\program files\real\realplayer\Update\realsched.exe" -osboot
04 - HKLM\..\Run : [runeip] "C:\Program Files\Rising\AntiSpyware\rstray.exe" /startup
04 - HKLM\..\Run : [RtHDVCpl] RtHDVCpl.exe
04 - HKLM\..\Run : [BingDesktop] C:\Program Files\Microsoft\BingDesktop\BingDesktop.exe /fromkey
04 - HKLM\..\Run : [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
04 - HKLM\..\RunOnce : []
04 - HKU\S-1-5-21-1043331793-4104906715-1219497340-1000\..\Run : [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
04 - HKU\S-1-5-21-1043331793-4104906715-1219497340-1000\..\Run : [HPAdvisor] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe view=DOCKVIEW,SYSTRAY
04 - HKU\S-1-5-21-1043331793-4104906715-1219497340-1000\..\Run : [Google Update] "C:\Users\eugène triboi\AppData\Local\Google\Update\GoogleUpdate.exe" /c
04 - HKU\S-1-5-21-1043331793-4104906715-1219497340-1000\..\Run : [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
04 - HKU\S-1-5-21-1043331793-4104906715-1219497340-1000\..\Run : [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
04 - HKU\S-1-5-21-1043331793-4104906715-1219497340-1000\..\Run : [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
04 - HKU\S-1-5-21-1043331793-4104906715-1219497340-1000\..\Run : [ehTray.exe] C:\Windows\ehome\ehTray.exe
04 - HKU\S-1-5-21-1043331793-4104906715-1219497340-1000\..\Run : [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
################## | Recherche générique |
################## | Registre |
################## | Vaccin |
F:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
################## | E.O.F | http://www.usbfix.net" onclick="window.open(this.href);return false; - http://www.sosvirus.net" onclick="window.open(this.href);return false; |