Répondre à : USB infectées 2016-09-08T13:25:19+00:00
yas
Participant
Nombre d'articles : 4

c bon j’ai fait suppression voilà le rapport

Spoiler for 3cwj2qol

############################## | UsbFix V 7.154 | [Suppression]

Utilisateur: Administrateur (Administrateur) # JALEL-7B62DDBB1
Mis à jour le 13/12/2013 par El Desaparecido – Team SosVirus
Lancé à 13:38:21 | 15/12/2013

Site Web : http://www.usbfix.net” onclick=”window.open(this.href);return false;
Forum : https://www.sosvirus.net/” onclick=”window.open(this.href);return false;
Upload Malware : upload_malware.php
Contact : http://www.usbfix.net/contact/” onclick=”window.open(this.href);return false;

PC: ASRock (G41M-VS3.)
CPU: Processeur Intel Pentium III Xeon
RAM -> [Total : 3325 | Free : 1293]
Bios: American Megatrends Inc.
Boot: Normal boot

OS: Microsoft Windows XP Professionnel (5.1.2600 32-Bit) Service Pack 3
WB: Windows Internet Explorer : 8.0.6001.18702
WB: Google Chrome : 31.0.1650.63
WB: Mozilla Firefox : 23.0.1

SC: Security Center Service [(!) Disabled]
WU: Windows Update Service [Enabled]
FW: Windows FireWall Service [(!) Disabled]

C: (%systemdrive%) -> Disque fixe # 59 Go (11 Go libre(s) – 19%) [] # NTFS
D: -> Disque fixe # 407 Go (406 Go libre(s) – 100%) [] # NTFS
E: -> Disque amovible # 4 Go (3 Go libre(s) – 92%) [USB YAS] # FAT32
F: -> Disque amovible # 4 Go (2 Go libre(s) – 43%) [TRANSCEND] # FAT32
G: -> CD-ROM
H: -> CD-ROM

################## | Processus Stoppés |

Stoppé! C:Program FilesAVAST SoftwareAvastAvastSvc.exe (ID: 288 |ParentID: 1320)
Stoppé! C:Program FilesAVAST SoftwareAvastAvastUI.exe (ID: 3784 |ParentID: 540)
Stoppé! C:Program Filesdiamondataupdatediamondata.exe (ID: 3408 |ParentID: 1320)
Stoppé! C:Program Filesma-config.comMaConfigAgent.exe (ID: 3588 |ParentID: 1320)
Stoppé! C:Program FilesFichiers communsAppleMobile Device SupportAppleMobileDeviceService.exe (ID: 2860 |ParentID: 1320)
Stoppé! C:WINDOWSsystem32spoolsv.exe (ID: 2752 |ParentID: 1320)
Stoppé! C:WINDOWSExplorer.exe (ID: 3116 |ParentID: 2988)
Stoppé! C:WINDOWSsystem32NOTEPAD.EXE (ID: 3384 |ParentID: 2988)
Stoppé! C:Program FilesGoogleChromeApplicationchrome.exe (ID: 192 |ParentID: 3116)
Stoppé! C:Program FilesGoogleChromeApplicationchrome.exe (ID: 580 |ParentID: 192)
Stoppé! C:Program FilesGoogleChromeApplicationchrome.exe (ID: 3236 |ParentID: 192)
Stoppé! C:Program FilesGoogleChromeApplicationchrome.exe (ID: 3344 |ParentID: 192)
Stoppé! C:Program FilesGoogleChromeApplicationchrome.exe (ID: 3724 |ParentID: 192)
Stoppé! C:Program FilesGoogleChromeApplicationchrome.exe (ID: 2876 |ParentID: 192)
Stoppé! C:Program FilesGoogleChromeApplicationchrome.exe (ID: 708 |ParentID: 192)
Stoppé! C:Program FilesGoogleChromeApplicationchrome.exe (ID: 2944 |ParentID: 192)
Stoppé! C:Program FilesGoogleChromeApplicationchrome.exe (ID: 328 |ParentID: 192)
Stoppé! C:Program FilesGoogleChromeApplicationchrome.exe (ID: 3732 |ParentID: 192)
Stoppé! C:Program FilesJavajre7binjavaw.exe (ID: 3472 |ParentID: 2836)
Stoppé! C:Program FilesJavajre7binjavaw.exe (ID: 3676 |ParentID: 3472)
Stoppé! C:Program FilesGoogleChromeApplicationchrome.exe (ID: 2364 |ParentID: 192)

################## | Regedit Run |

04 – HKLMSOFTWARE | Run : [IgfxTray] – C:WINDOWSsystem32igfxtray.exe
04 – HKLMSOFTWARE | Run : [HotKeysCmds] – C:WINDOWSsystem32hkcmd.exe
04 – HKLMSOFTWARE | Run : [Persistence] – C:WINDOWSsystem32igfxpers.exe
04 – HKLMSOFTWARE | Run : [VistaDrive] – C:WINDOWSVistaDriveVistaDrive.exe
04 – HKLMSOFTWARE | Run : [scpcqwtnwp] – wscript.exe //B “C:Documents and SettingsAdministrateurApplication Datascpcqwtnwp..vbs”
04 – HKLMSOFTWARE | Run : [AVG_UI] – “C:Program FilesAVGAVG2013avgui.exe” /TRAYONLY
04 – HKLMSOFTWARE | Run : [vProt] – “C:Program FilesAVG Secure Searchvprot.exe”
04 – HKLMSOFTWARE | Run : [APSDaemon] – “C:Program FilesFichiers communsAppleApple Application SupportAPSDaemon.exe”
04 – HKLMSOFTWARE | Run : [iTunesHelper] – “C:Program FilesiTunesiTunesHelper.exe”
04 – HKLMSOFTWARE | Run : [HDAudDeck] – C:Program FilesVIAVIAudioiHDADeckHDeck.exe 1
04 – HKLMSOFTWARE | Run : [KernelFaultCheck] – %systemroot%system32dumprep 0 -k
04 – HKLMSOFTWARE | Run : [Adobe ARM] – “C:Program FilesFichiers communsAdobeARM1.0AdobeARM.exe”
04 – HKLMSOFTWARE | Run : [IndexSearch] – “C:Program FilesNuancePaperPortIndexSearch.exe”
04 – HKLMSOFTWARE | Run : [PaperPort PTD] – “C:Program FilesNuancePaperPortpptd40nt.exe”
04 – HKLMSOFTWARE | Run : [PPort12reminder] – “C:Program FilesNuancePaperPortEregEreg.exe” -r “C:Documents and SettingsAll UsersApplication DataScanSoftPaperPort12ConfigEregEreg.ini”
04 – HKLMSOFTWARE | Run : [PDFHook] – C:Program FilesNuancePDF Viewer Pluspdfpro5hook.exe
04 – HKLMSOFTWARE | Run : [PDF5 Registry Controller] – C:Program FilesNuancePDF Viewer PlusRegistryController.exe
04 – HKLMSOFTWARE | Run : [AvastUI.exe] – “C:Program FilesAVAST SoftwareAvastAvastUI.exe” /nogui
04 – HKLMSOFTWARE | Run : [nscgxohhbe] – wscript.exe //B “C:DOCUME~1ADMINI~1LOCALS~1Tempnscgxohhbe..vbs”
04 – HKLMSOFTWARE | Run : [help.vbs] – “C:DOCUME~1ADMINI~1LOCALS~1Temphelp.vbs”
04 – HKLMSOFTWARE | Run : [20131121] – C:Program FilesAVAST SoftwareAvastsetupemupdatedd62ebe4-7393-4bb1-b484-2ce0d928a8ba.exe /check
04 – HKLMSOFTWARE | Run : [ControlCenter4] – C:Program FilesControlCenter4BrCcBoot.exe /autorun
04 – HKLMSOFTWARE | Run : [BrStsMon00] – C:Program FilesBrowny02BrotherBrStMonW.exe /AUTORUN
04 – HKLMSOFTWARE | Run : [OTT_Tunisiana Aegean ModemListener] – C:Program FilesDenyaliveBackgroundServiceModemListener.exe start
04 – HKLMSOFTWARE | RunOnce : [] –
04 – HKUS-1-5-19SOFTWARE | Run : [CTFMON.EXE] – C:WINDOWSsystem32CTFMON.EXE
04 – HKUS-1-5-19SOFTWARE | Run : [RocketDock] – “C:Program FilesRocketDockRocketDock.exe”
04 – HKUS-1-5-19SOFTWARE | Run : [VisualTaskTip] – Program FilesVisualTaskTipsVisualTaskTips.exe
04 – HKUS-1-5-20SOFTWARE | Run : [CTFMON.EXE] – C:WINDOWSsystem32CTFMON.EXE
04 – HKUS-1-5-20SOFTWARE | Run : [RocketDock] – “C:Program FilesRocketDockRocketDock.exe”
04 – HKUS-1-5-20SOFTWARE | Run : [VisualTaskTip] – Program FilesVisualTaskTipsVisualTaskTips.exe
04 – HKUS-1-5-21-484763869-1364589140-1417001333-500SOFTWARE | Run : [VisualTaskTip] – Program FilesVisualTaskTipsVisualTaskTips.exe
04 – HKUS-1-5-21-484763869-1364589140-1417001333-500SOFTWARE | Run : [Sidebar] – C:Program FilesWindows Sidebarsidebar.exe /autoRun
04 – HKUS-1-5-21-484763869-1364589140-1417001333-500SOFTWARE | Run : [scpcqwtnwp] – wscript.exe //B “C:Documents and SettingsAdministrateurApplication Datascpcqwtnwp..vbs”
04 – HKUS-1-5-21-484763869-1364589140-1417001333-500SOFTWARE | Run : [DAEMON Tools Lite] – “C:Program FilesDAEMON Tools LiteDTLite.exe” -autorun
04 – HKUS-1-5-21-484763869-1364589140-1417001333-500SOFTWARE | Run : [uTorrent] – “C:Documents and SettingsAdministrateurApplication DatauTorrentuTorrent.exe” /MINIMIZED
04 – HKUS-1-5-21-484763869-1364589140-1417001333-500SOFTWARE | Run : [AppsHat] – C:Documents and SettingsAdministrateurLocal SettingsApplication DataWebPlayerAppsHatWebPlayer.exe
04 – HKUS-1-5-21-484763869-1364589140-1417001333-500SOFTWARE | Run : [ctfmon.exe] – C:WINDOWSsystem32ctfmon.exe
04 – HKUS-1-5-21-484763869-1364589140-1417001333-500SOFTWARE | Run : [ISUSPM] – C:Documents and SettingsAll UsersApplication DataFLEXnetConnect11ISUSPM.exe -scheduler
04 – HKUS-1-5-21-484763869-1364589140-1417001333-500SOFTWARE | Run : [nscgxohhbe] – wscript.exe //B “C:DOCUME~1ADMINI~1LOCALS~1Tempnscgxohhbe..vbs”
04 – HKUS-1-5-21-484763869-1364589140-1417001333-500SOFTWARE | Run : [help.vbs] – “C:DOCUME~1ADMINI~1LOCALS~1Temphelp.vbs”
04 – HKUS-1-5-18SOFTWARE | Run : [CTFMON.EXE] – C:WINDOWSsystem32CTFMON.EXE
04 – HKUS-1-5-18SOFTWARE | Run : [RocketDock] – “C:Program FilesRocketDockRocketDock.exe”
04 – HKUS-1-5-18SOFTWARE | Run : [VisualTaskTip] – Program FilesVisualTaskTipsVisualTaskTips.exe
04 – HKUS-1-5-19SOFTWARE | RunOnce : [nltide_2] – regsvr32 /s /n /i:U shell32
04 – HKUS-1-5-19SOFTWARE | RunOnce : [nltide_3] – rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
04 – HKUS-1-5-19SOFTWARE | RunOnce : [_nltide_3] – rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
04 – HKUS-1-5-20SOFTWARE | RunOnce : [nltide_2] – regsvr32 /s /n /i:U shell32
04 – HKUS-1-5-20SOFTWARE | RunOnce : [nltide_3] – rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
04 – HKUS-1-5-20SOFTWARE | RunOnce : [_nltide_3] – rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
04 – HKUS-1-5-18SOFTWARE | RunOnce : [nltide_2] – regsvr32 /s /n /i:U shell32
04 – HKUS-1-5-18SOFTWARE | RunOnce : [nltide_3] – rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
04 – HKUS-1-5-18SOFTWARE | RunOnce : [_nltide_3] – rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N

################## | Recherche générique |

Service supprimé! amsint32

Service supprimé! system

Supprimé! E:WinUsbDriver.vbs
Supprimé! E:gkallsrueq.vbs
Supprimé! E:uapvsokweo.vbs
Supprimé! E:hvvsxqkrsz.vbs
Supprimé! E:znmltjmmqg.vbs
Supprimé! E:chrome.exe
Supprimé! F:WinUsbDriver.vbs
Supprimé! F:hvvsxqkrsz.vbs
Supprimé! D:$AVG.lnk
Supprimé! E:VisualElementsManifest.xml.lnk
Supprimé! E:01-Al-Fatihah.mp3.lnk
Supprimé! E:debug.log.lnk
Supprimé! E:Win7Codec.exe.lnk
Supprimé! E:HH.vbs.lnk
Supprimé! E:Win7Codec, Supplement x64.exe.lnk
Supprimé! E:Botanical Garden.docx.lnk
Supprimé! E:hvvsxqkrsz.vbs.lnk
Supprimé! E:techno.docx.lnk
Supprimé! E:8515eb34d8f9de5af815466e9715b3e5.exe.lnk
Supprimé! E:soffaaaa.rtf.lnk
Supprimé! E:znmltjmmqg.vbs.lnk
Supprimé! E:bywgvanrez.lnk
Supprimé! E:chrome.exe.lnk
Supprimé! E:gkallsrueq.vbs.lnk
Supprimé! E:uapvsokweo.vbs.lnk
Supprimé! E:bywgvanrez.vbs.lnk
Supprimé! E:7350b4ce4c5b9059b3abecb448b12322.exe.lnk
Supprimé! E:7350b4ce4c5b9059b3abecb448b12322.lnk
Supprimé! E:8515eb34d8f9de5af815466e9715b3e5.lnk
Supprimé! E:wjhfspkqyp.vbs.lnk
Supprimé! E:hvvsxqkrsz.lnk
Supprimé! E:fjezchdhuu.vbs.lnk
Supprimé! E:Analyse des groupes stratégiques.docx.lnk
Supprimé! E:help.lnk
Supprimé! E:wjhfspkqyp.lnk
Supprimé! E:fjezchdhuu.lnk
Supprimé! E:HH.lnk
Supprimé! E:amina swayeah.rtf.lnk
Supprimé! E:chrome.lnk
Supprimé! E:debug.lnk
Supprimé! E:techno.lnk
Supprimé! E:uapvsokweo.lnk
Supprimé! E:amina swayeah.lnk
Supprimé! E:VisualElementsManifest.lnk
Supprimé! E:docdoc.lnk
Supprimé! E:01-Al-Fatihah.lnk
Supprimé! E:Botanical Garden.lnk
Supprimé! E:Win7Codec, Supplement x64.lnk
Supprimé! E:soffaaaa.lnk
Supprimé! E:gkallsrueq.lnk
Supprimé! E:le haj.lnk
Supprimé! E:Analyse des groupes stratégiques.lnk
Supprimé! E:Win7Codec.lnk
Supprimé! E:znmltjmmqg.lnk
Supprimé! E:WinUsbDriver.lnk
Supprimé! E:FOUND.000.lnk
Supprimé! E:31.0.1650.57.lnk
Supprimé! E:DOSSIER WORD.lnk
Supprimé! E:al hajj en ar.lnk
Supprimé! E:Nouveau dossier (2).lnk
Supprimé! E:Dictionaries.lnk
Supprimé! E:AV ALOUER.lnk
Supprimé! F:~$info.lnk
Supprimé! F:~$projet ERP ACHREF+AMEL.lnk
Supprimé! F:compt intern.lnk
Supprimé! F:WinUsbDriver.lnk
Supprimé! F:M ET S.lnk
Supprimé! F:info.lnk
Supprimé! F:lobna.lnk
Supprimé! F:3eme_Chapitre4_SQL.lnk
Supprimé! F:Ancient cultures.lnk
Supprimé! F:www.lnk
Supprimé! F:M2 Accounting UNIT1 Tax Accounting (1).lnk
Supprimé! F:3eme_Chapitre4_SQL-1.lnk
Supprimé! F:CHAPITRE 2.lnk
Supprimé! F:Chapitre 3.lnk
Supprimé! F:chapitre 4 org (2).lnk
Supprimé! F:Copie de Coef MRecherche.lnk
Supprimé! F:projet ERP ACHREF+AMEL.lnk
Supprimé! F:systhéme d_information RAGHDA MARIEM PDF.lnk
Supprimé! F:probleme 22.lnk
Supprimé! F:98.lnk
Supprimé! F:a112010.lnk
Supprimé! F:M2 UNIT 2 AUDITING.lnk
Supprimé! F:ppt projet Anglais (1).lnk
Supprimé! F:~$ppt projet Anglais (1).lnk
Supprimé! F:Faida IHEC Akrout.lnk
Supprimé! F:information M2 ;).lnk
Supprimé! F:INFORMATION COMPTABLE ET MARCHES.lnk
Supprimé! F:GOUVERNANCE.lnk
Supprimé! F:CONTROLE DE GESTION STRATEGIQUE.lnk
Supprimé! F:CONTROLE DE GESTION APPROFONDIE.lnk
Supprimé! F:COMPTABILITE INTERNATIONAL.lnk
Supprimé! F:THEORIE DE L AUDIT.lnk
Supprimé! F:RECHERCHE EN COMPTABILITE DE GESTION.lnk
Supprimé! F:RECHERCHE APPLIQUé EN COMPTABILITE.lnk
Supprimé! F:islem.lnk
Supprimé! F:premiere semestre.lnk
Supprimé! F:org.lnk
Supprimé! F:FAIDA.lnk
Supprimé! F:Deuxieme semestreM1.lnk
Supprimé! F:Nouveau dossier.lnk
Supprimé! F:evaluation.lnk
Supprimé! F:RECYCLER.lnk
Supprimé! F:FIANCIAILLE.lnk
Supprimé! F:Nouveau dossier (2).lnk
Supprimé! F:ONGLAIS DE RECHERCHE.lnk
Supprimé! F:INFORMATIQUE.lnk
Supprimé! F:Usb 2.0 Driver.lnk
Supprimé! F:deuxieme semestre.lnk
Supprimé! F:Données Comptabilité_SPSS (1).lnk
Supprimé! F:premier semestre.lnk
Supprimé! F:SPSS v20 – 32bit.lnk
Supprimé! F:premier semestre M2.lnk
Supprimé! F:NORMES.lnk
Supprimé! F:projet organisation.lnk
Supprimé! F:~$I.lnk
Supprimé! F:Chap 4ppt.lnk
Supprimé! F:Chap 2.lnk
Supprimé! F:Analyse Bivariée d.lnk
Supprimé! F:protocole.lnk
Supprimé! F:problem.lnk
Supprimé! F:config.lnk
Supprimé! F:audit2.lnk
Supprimé! F:http.lnk
Supprimé! F:aide.lnk
Supprimé! C:Documents and SettingsAdministrateurApplication Datadll-files.com
Non supprimé ! C:kernel
Supprimé! C:WINDOWSsystem32systemsvchost.exe
Supprimé! C:DOCUME~1ADMINI~1LOCALS~1Temptmp.bat
Supprimé! F:config.dat
Supprimé! F:Usb 2.0 Driver

################## | Référence de comparaison MD5 |

Md5 : 80E49685D1AC8A3623DD78779820AE5A -> E:WinUsbDriver.vbs
Md5 : 46139D75626629DD1396E1EAF278FD43 -> E:gkallsrueq.vbs
Md5 : 8C389470AB6B81D0753C2AF3895BC31C -> E:uapvsokweo.vbs
Md5 : CE1FEAE946F4BBACAC199969ECDC03E1 -> E:hvvsxqkrsz.vbs
Md5 : CE1FEAE946F4BBACAC199969ECDC03E1 -> E:znmltjmmqg.vbs
Md5 : 636D97B3BAF854511FF3F4093E895FED -> E:chrome.exe
Md5 : 80E49685D1AC8A3623DD78779820AE5A -> F:WinUsbDriver.vbs
Md5 : CE1FEAE946F4BBACAC199969ECDC03E1 -> F:hvvsxqkrsz.vbs

################## | Comparaison MD5 |

Supprimé! Md5 : 636D97B3BAF854511FF3F4093E895FED -> C:Program FilesGoogleChromeApplicationold_chrome.exe

################## | Registre |

Supprimé! HKLMSYSTEMControlSet002Servicesamsint32
Supprimé! HKLMSYSTEMControlSet002Servicessystem
Réparé ! HKLMSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem|EnableLUA -> 1
Réparé ! HKLMSoftwareMicrosoftSecurity Center|AntiVirusDisableNotify -> 0
Réparé ! HKLMSoftwareMicrosoftSecurity Center|FirewallDisableNotify -> 0
Réparé ! HKLMSoftwareMicrosoftSecurity Center|UpdatesDisableNotify -> 0
Réparé ! HKLMSoftwareMicrosoftSecurity Center|UacDisableNotify -> 0
Supprimé! HKUS-1-5-21-484763869-1364589140-1417001333-500SoftwareMicrosoftWindowsCurrentVersionRun|help.vbs
Supprimé! HKLMSoftwareMicrosoftWindowsCurrentVersionRun|help.vbs
Supprimé! HKUS-1-5-21-484763869-1364589140-1417001333-500Software….Mountpoints2{41f5c2f3-2687-11e3-b0d0-002522d6ce15}
Supprimé! HKUS-1-5-21-484763869-1364589140-1417001333-500Software….Mountpoints2{a6190094-3665-11e3-b0d9-002522d6ce15}

################## | Listing |

[14/12/2013 – 23:57:15 | N | 18 Ko] – C:UsbFix [Scan 1] JALEL-7B62DDBB1.txt
[15/12/2013 – 13:45:26 | A | 15 Ko] – C:UsbFix [Clean 2] JALEL-7B62DDBB1.txt
[29/07/2013 – 20:04:20 | N | 0 Ko] – C:MSDOS.SYS
[29/07/2013 – 20:04:20 | N | 0 Ko] – C:IO.SYS
[29/07/2013 – 20:04:20 | N | 0 Ko] – C:CONFIG.SYS
[14/12/2013 – 19:25:22 | ASH | 2095104 Ko] – C:pagefile.sys
[14/12/2013 – 19:25:24 | ASH | 3404884 Ko] – C:hiberfil.sys
[13/11/2013 – 14:56:58 | D] – C:Config.Msi
[01/04/2008 – 16:37:53 | N | 4 Ko] – C:DriverPack_Sound_A_wnt5_x86-32.ini
[12/04/2008 – 10:47:12 | | 3 Ko] – C:DriverPack_Sound_B_wnt5_x86-32.ini
[28/12/2008 – 19:46:35 | N | 1 Ko] – C:DriverPack_LAN_wnt5_x86-32.ini
[07/01/2009 – 22:44:38 | | 110 Ko] – C:DriverPack_MassStorage_wnt5_x86-32.ini
[06/02/2009 – 04:05:08 | | 1 Ko] – C:DriverPack_Chipset_wnt5_x86-32.ini
[10/12/2009 – 23:33:14 | N | 5 Ko] – C:DriverPack_Graphics_B_wnt5_x86-32.ini
[11/12/2009 – 22:45:27 | N | 7 Ko] – C:DriverPack_Graphics_C_wnt5_x86-32.ini
[11/12/2009 – 23:23:00 | N | 0 Ko] – C:DriverPack_CPU_wnt5_x86-32.ini
[16/12/2009 – 17:20:32 | N | 8 Ko] – C:DriverPack_Graphics_A_wnt5_x86-32.ini
[12/01/2010 – 06:24:34 | N | 1 Ko] – C:DPSFNSHR.INI
[29/07/2013 – 19:57:20 | SH | 0 Ko] – C:boot.ini
[27/01/2009 – 09:17:19 | N | 55 Ko | C4B470269324517EE838789C7CF5E606] – C:devcon.exe
[13/08/2013 – 12:19:04 | N | 319 Ko | 90EDB01167615693D1BB527DB466A853] – C:DPsFnshr.exe
[13/08/2013 – 12:19:09 | N | 277 Ko | F78D5AB3F3F60B955D6D314DBCBBC721] – C:DSPdsblr.exe
[13/08/2013 – 12:19:21 | N | 24 Ko | 8042B97BDF57B44349BCE4626D6F246C] – C:makePNF.exe
[13/08/2013 – 12:19:28 | N | 136 Ko | 2D61DA8087E01C3FA387F446BCEBCAF7] – C:mute.exe
[13/08/2013 – 12:19:35 | N | 267 Ko | 5B3528965C37D2408E6599AAE596AFC1] – C:pmtimer.exe
[21/11/2013 – 00:00:02 | N | 0 Ko] – C:config.dat
[12/01/2010 – 06:24:34 | N | 46 Ko | B2DE3452DE03674C6CEC68B8C8CE7C78] – C:NTDETECT.COM
[12/01/2010 – 06:24:34 | N | 5 Ko] – C:Bootfont.bin
[29/07/2013 – 20:04:20 | A | 0 Ko] – C:AUTOEXEC.BAT
[28/11/2013 – 12:05:07 | D] – C:found.000
[29/01/2008 – 11:26:32 | D] – C:D
[12/01/2010 – 06:24:34 | RASH | 246 Ko] – C:ntldr
[29/07/2013 – 20:09:12 | D] – C:Documents and Settings
[29/07/2013 – 20:09:34 | SHD] – C:RECYCLER
[11/08/2013 – 13:09:55 | D] – C:$AVG
[15/11/2013 – 12:18:22 | D] – C:security
[24/11/2013 – 09:32:11 | SHD] – C:System Volume Information
[07/12/2013 – 11:00:51 | D] – C:Brother
[14/12/2013 – 19:25:37 | D] – C:WINDOWS
[14/12/2013 – 23:48:07 | D] – C:Program Files
[15/12/2013 – 13:44:25 | D] – C:UsbFix
[15/12/2013 – 13:44:32 | D] – C:Kernel
[04/09/2013 – 18:44:49 | D] – D:msdownld.tmp
[14/12/2013 – 23:57:15 | RASHD] – D:Autorun.inf
[18/05/2013 – 17:24:12 | D] – D:adobe logiciel
[29/07/2013 – 20:09:35 | SHD] – D:RECYCLER
[11/08/2013 – 16:03:59 | D] – D:$AVG
[12/08/2013 – 12:10:25 | D] – D:72558512e01a3e0c8fb6be
[14/12/2013 – 23:57:15 | SHD] – D:System Volume Information
[14/11/2013 – 23:32:26 | N | 0 Ko] – E:VisualElementsManifest.xml
[02/12/2013 – 00:57:04 | N | 146919 Ko] – E:soffaaaa.rtf
[02/12/2013 – 02:29:00 | N | 53626 Ko] – E:amina swayeah.rtf
[11/12/2013 – 13:39:46 | N | 136 Ko] – E:le haj.pptx
[19/06/2009 – 19:42:10 | N | 151 Ko] – E:01-Al-Fatihah.mp3
[17/11/2013 – 12:07:08 | N | 0 Ko] – E:debug.log
[14/12/2013 – 23:57:16 | RASHD] – E:Autorun.inf
[19/10/2009 – 12:25:26 | N | 14836 Ko | 4F7CF5D41F62134E14704EE8D2ADBD95] – E:Win7Codec, Supplement x64.exe
[19/10/2009 – 13:49:24 | N | 20992 Ko | 63E614A9F720471F9D9A6E2CD5AA5AD4] – E:Win7Codec.exe
[23/11/2013 – 12:58:50 | N | 157 Ko] – E:Botanical Garden.docx
[28/11/2013 – 20:26:22 | N | 54 Ko] – E:techno.docx
[29/11/2013 – 00:41:08 | N | 106 Ko] – E:Analyse des groupes stratégiques.docx
[04/12/2013 – 14:45:18 | N | 10 Ko] – E:docdoc.docx
[14/11/2013 – 23:32:26 | D] – E:31.0.1650.57
[29/11/2013 – 07:07:20 | D] – E:FOUND.000
[10/07/2013 – 14:48:14 | N | 22 Ko] – E:master_preferences
[26/10/2013 – 20:48:12 | D] – E:Dictionaries
[11/12/2013 – 08:39:20 | D] – E:DOSSIER WORD
[11/12/2013 – 13:40:10 | D] – E:al hajj en ar
[11/12/2013 – 13:42:54 | D] – E:Nouveau dossier (2)
[11/12/2013 – 13:43:52 | D] – E:AV ALOUER
[22/05/2013 – 17:35:10 | N | 10 Ko] – F:Copie de Coef MRecherche.xlsx
[06/04/2013 – 20:02:02 | N | 0 Ko] – F:~$I.pptx
[22/05/2013 – 17:38:36 | N | 493 Ko] – F:projet ERP ACHREF+AMEL.pptx
[18/11/2013 – 19:42:46 | N | 2093 Ko] – F:98. Surplus de productivit+®.pptx
[18/11/2013 – 19:42:46 | N | 2093 Ko] – F:98. Surplus de productivit+® (2).pptx
[29/11/2013 – 11:39:00 | N | 0 Ko] – F:~$ppt projet Anglais (1).pptx
[29/11/2013 – 12:26:26 | N | 1170 Ko] – F:ppt projet Anglais (1).pptx
[29/11/2013 – 13:07:00 | N | 1170 Ko] – F:info.pptx
[22/05/2013 – 17:28:36 | N | 1390 Ko] – F:3eme_Chapitre4_SQL.ppt
[22/05/2013 – 17:42:06 | N | 1388 Ko] – F:3eme_Chapitre4_SQL-1.ppt
[14/04/2013 – 17:29:50 | N | 2162 Ko] – F:Chap 2.pdf
[16/05/2013 – 17:30:52 | N | 1084 Ko] – F:Chap 4ppt.pdf
[22/05/2013 – 17:30:16 | N | 1889 Ko] – F:audit2.pdf
[22/05/2013 – 17:40:46 | N | 4261 Ko] – F:systhéme d_information RAGHDA MARIEM PDF.pdf
[01/11/2013 – 10:49:34 | N | 123 Ko] – F:problem.pdf
[01/11/2013 – 10:53:38 | N | 1069 Ko] – F:probleme 22.pdf
[19/11/2013 – 21:22:44 | N | 256 Ko] – F:a112010.pdf
[14/12/2013 – 23:57:16 | RASHD] – F:Autorun.inf
[12/04/2013 – 16:11:50 | N | 13 Ko] – F:aide.docx
[22/04/2013 – 19:24:02 | N | 222 Ko] – F:projet organisation.docx
[07/05/2013 – 09:47:12 | N | 74 Ko] – F:NORMES.docx
[08/05/2013 – 08:59:18 | N | 118 Ko] – F:protocole.docx
[09/05/2013 – 20:05:26 | N | 357 Ko] – F:Analyse Bivariée d.docx
[10/05/2013 – 18:07:24 | N | 593 Ko] – F:chapitre 4 org (2).docx
[11/05/2013 – 21:33:04 | N | 189 Ko] – F:Ancient cultures.docx
[15/05/2013 – 18:07:18 | N | 573 Ko] – F:CHAPITRE 2.docx
[15/05/2013 – 18:15:32 | N | 156 Ko] – F:Chapitre 3.docx
[31/10/2013 – 19:52:32 | N | 10 Ko] – F:www.docx
[01/11/2013 – 15:49:28 | N | 2542 Ko] – F:M2 Accounting UNIT1 Tax Accounting (1).docx
[24/11/2013 – 16:43:52 | N | 5834 Ko] – F:M2 UNIT 2 AUDITING.docx
[29/11/2013 – 13:11:22 | N | 237 Ko] – F:lobna.docx
[10/12/2013 – 17:04:50 | N | 163 Ko] – F:compt intern.docx
[24/11/2013 – 17:15:34 | N | 20 Ko] – F:http.doc
[03/12/2013 – 20:08:54 | N | 1902 Ko] – F:M ET S.doc
[31/07/2008 – 05:22:30 | D] – F:Faida IHEC Akrout
[28/09/2012 – 20:32:16 | D] – F:FIANCIAILLE
[16/02/2013 – 00:18:32 | D] – F:Deuxieme semestreM1
[19/02/2013 – 17:14:26 | D] – F:premiere semestre
[03/03/2013 – 18:25:00 | D] – F:islem
[21/03/2013 – 23:37:52 | D] – F:Nouveau dossier
[07/04/2013 – 13:00:22 | SHD] – F:RECYCLER
[07/04/2013 – 13:22:24 | D] – F:Nouveau dossier (2)
[10/04/2013 – 20:43:20 | D] – F:premier semestre
[13/04/2013 – 22:11:46 | D] – F:evaluation
[15/04/2013 – 21:30:16 | D] – F:INFORMATIQUE
[07/05/2013 – 10:20:04 | D] – F:deuxieme semestre
[09/05/2013 – 10:24:00 | D] – F:SPSS v20 – 32bit
[15/05/2013 – 18:18:38 | D] – F:org
[16/05/2013 – 20:51:08 | D] – F:Données Comptabilité_SPSS (1)
[09/10/2013 – 16:43:48 | D] – F:COMPTABILITE INTERNATIONAL
[09/10/2013 – 16:46:04 | D] – F:RECHERCHE EN COMPTABILITE DE GESTION
[27/10/2013 – 07:39:40 | D] – F:INFORMATION COMPTABLE ET MARCHES
[30/10/2013 – 22:28:10 | D] – F:FAIDA
[19/11/2013 – 21:17:30 | D] – F:CONTROLE DE GESTION APPROFONDIE
[20/11/2013 – 10:21:58 | D] – F:GOUVERNANCE
[22/11/2013 – 20:35:58 | D] – F:THEORIE DE L AUDIT
[23/11/2013 – 19:00:14 | D] – F:RECHERCHE APPLIQUé EN COMPTABILITE
[24/11/2013 – 11:22:56 | D] – F:information M2 ;)
[24/11/2013 – 15:11:58 | D] – F:CONTROLE DE GESTION STRATEGIQUE
[25/11/2013 – 10:49:00 | D] – F:ONGLAIS DE RECHERCHE
[02/12/2013 – 19:25:40 | D] – F:premier semestre M2

################## | Vaccin |

D:Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
E:Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
F:Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)

################## | E.O.F | http://www.usbfix.net” onclick=”window.open(this.href);return false; – https://www.sosvirus.net” onclick=”window.open(this.href);return false; |[/spoiler:3cwj2qol]

je sais que ma version de Windows n’est pas conforme c normal je suis dans un pays du tiers monde il n’y a pas de version authentique la ou je suis :ange: toutes les version sont piraté

merci pour ton aide :merci2: