[b]############################## | UsbFix V 7.

807 | [Nettoyage][/b]
Utilisateur: EL OUADIH MILOUD (Administrateur) # ELOUADIHMILOUD
Mis jour le 18/12/2014 par El Desaparecido - SosVirus
Lanc 18:00:40 | 28/02/2015
Site Web : [url=http://www.usbfix.net/]http://www.usbfix.net/[/url]
Changelog : [url=http://www.usbfix.net/maj/]http://www.usbfix.net/maj/[/url]
Assistance : [url=http://www.sosvirus.net/forum-virus-securite.html]http://www.s
osvirus.net/forum-virus-securite.html[/url]
Upload Malware : [url=http://www.sosvirus.net/upload_malware.php]http://www.sosv
irus.net/upload_malware.php[/url]
Dtection en Live : [url=http://comment-supprimer.fr/]http://comment-supprimer.fr/
[/url]
Contact : [url=http://www.usbfix.net/contact/]http://www.usbfix.net/contact/[/ur
l]
[b]################## | System information |[/b]
MB: LENOVO (CAPELL VALLEY(NAPA) CRB)
CPU: Intel(R) Celeron(R) M CPU
430 @ 1.73GHz
GC: Mobile Intel(R) 945 Express Chipset Family
RAM -> [Total : 1526 Mo | Free : 870 Mo]
Bios: LENOVO
Boot: Normal boot
OS: Microsoft Windows Se7en Titan (6.1.7600 32-Bit)
WB: Internet Explorer : 8.00.7600.16385
WB: Google Chrome : 40.0.2214.115
[b]################## | Security Information |[/b]
AV:
AS:
AS:
FW:
SC:
WU:

avast! Antivirus [Actif |A jour]

Windows Defender [Actif |[b](!) Non jour[/b]]
avast! Antivirus [Actif |A jour]
Windows Firewall [Actif]
Security Center [Actif]
Windows Update [Actif]

[b]################## | Disk Information |[/b]

C:\ (%SystemDrive%) -> Disque fixe # 29 Go (9 Go libre(s) - 31%) [] # NTFS
D:\ -> Disque fixe # 45 Go (15 Go libre(s) - 32%) [] # NTFS
F:\ -> Disque amovible # 2 Go (704 Mo libre(s) - 37%) [CARTE] # FAT32
[b]################## | Recherche gnrique |[/b]
Supprim!
Supprim!
Supprim!
Supprim!
Supprim!
Supprim!
Supprim!

F:\Nouveau Dossier.lnk
F:\MH.lnk
F:\pict.jpg
F:\Zain
F:\bin.doc
F:\bizo.doc
F:\img.jpg

(!) Fichiers temporaires supprims. (3.58328056335449 MB)

[b]################## | Registre |[/b]

[b]################## | Regedit Run |[/b]

F2 - HKLM\..\Winlogon : [Shell] explorer.exe
F2 - HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
04 - HKCU\..\Run : [OfficeSyncProcess] "C:\Program Files\Microsoft Office\Office
14\MSOSYNC.EXE"
04 - HKLM\..\Run : [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
04 - HKLM\..\Run : [IgfxTray] C:\Windows\system32\igfxtray.exe
04 - HKLM\..\Run : [HotKeysCmds] C:\Windows\system32\hkcmd.exe
04 - HKLM\..\Run : [Persistence] C:\Windows\system32\igfxpers.exe
04 - HKLM\..\Run : [Apoint] C:\Program Files\DellTPad\Apoint.exe
04 - HKLM\..\Run : [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.
exe" /nogui
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe
/autoRun
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe
/autoRun
04 - HKU\S-1-5-21-2809390235-2815731179-864468067-1000\..\Run : [OfficeSyncProce
ss] "C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE"
04 - HKU\S-1-5-18\..\Run : [Welcome Center] C:\Windows\system32\rundll32.exe C:\
Windows\system32\OobeFldr.dll,ShowWelcomeCenter LaunchedBy_StartMenuShortcut
04 - HKU\S-1-5-18\..\Run : [Sidebar] C:\Program Files\Windows Sidebar\sidebar.ex
e /autoRun
04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04GS - RocketDock.lnk : C:\Program Files\RocketDock\RocketDock.exe
[b]################## | UsbFix - Information |[/b]
Info : [url=https://www.youtube.com/watch?v=vUZYYASd7FE]Comment supprimer l'infe
ction des raccourcis sur USB ? (Video)[/url]
Info : [url=http://www.usbfix.net/2014/10/supprimer-virus-raccourcis-usb/]L'infe
ction des raccourcis USB, c'est quoi ?[/url]
Dtection en Live : [url=http://comment-supprimer.fr/]http://comment-supprimer.fr/
[/url]
[b]################## | Hijack |[/b]
Restaur! [N] F:\~$stag.pptx
Restaur! [N] F:\Photo0.jpg
[b]################## | C:\ %SystemDrive% - Disque Fixe (NTFS) |[/b]
[10/06/2009
[28/03/2014
[28/03/2014
[28/02/2015
[28/02/2015
[16/01/2015
[10/06/2009
[14/07/2009
[14/07/2009
[27/02/2014
[19/12/2014
[19/12/2014
[17/02/2015
[26/02/2015
[26/02/2015
[26/02/2015
[28/02/2015

21:42:20
12:54:44
12:54:44
17:51:48
17:51:52
12:29:07
21:42:20
02:37:05
04:53:55
16:12:14
19:31:43
19:35:44
16:28:49
07:26:30
07:54:41
10:20:33
18:00:30

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

A | 0 Ko] - C:\config.sys
RASH | 0 Ko] - C:\MSDOS.SYS
RASH | 0 Ko] - C:\IO.SYS
ASH | 1172344 Ko] - C:\hiberfil.sys
ASH | 1563128 Ko] - C:\pagefile.sys
SHD] - C:\$RECYCLE.BIN
A | 0 Ko] - C:\autoexec.bat
D] - C:\PerfLogs
SHD] - C:\Documents and Settings
D] - C:\TpSds
SHD] - C:\Recovery
RD] - C:\Users
RHD] - C:\MSOCache
HD] - C:\ProgramData
D] - C:\Windows
D] - C:\Program Files
D] - C:\UsbFix

[b]################## | D:\ - Disque Fixe (NTFS) |[/b]

[19/12/2014
[13/02/2015
[19/02/2015
[28/02/2015

19:36:06
15:13:56
22:55:27
17:59:09

|
|
|
|

SHD] - D:\$RECYCLE.BIN
RD] - D:\DOCUMENTS HAMID
RD] - D:\MILOUD DOC
RD] - D:\ABDELLATIF ZOUITINE

[b]################## | F:\ - Disque USB (FAT32) |[/b]

[09/11/2014
[09/11/2014
r
[22/11/2014
[21/12/2014
[12/01/2015
[12/01/2015
[12/01/2015
[12/01/2015
[12/02/2015
[18/02/2015
[28/02/2015
[28/02/2015
[11/02/2015
[03/12/2012
[15/08/2013
[19/11/2014
[26/10/2014
[11/12/2014
[11/01/2015
[11/01/2015
[11/01/2015
df
[12/01/2015
[13/01/2015
[23/09/2013
[11/01/2015
[24/02/2009
[12/11/2014
[14/11/2014
731.exe
[15/11/2014
[19/11/2014
[25/02/2015
[22/11/2014
??.docx
[14/01/2015
[25/02/2015
[25/02/2015
[11/01/2015
[22/02/2014
[31/10/2014
[12/11/2014
[15/11/2014
[12/12/2014
[24/12/2014
[31/10/2014
[13/01/2015
[12/12/2014
[13/01/2015

- 21:06:32 | A | 57 Ko] - F:\?????? ????????? ??????? 2014--2015.rar

- 21:06:40 | A | 1559 Ko] - F:\?????? ????????? ?????? 2014--2015.ra
-

17:32:04
21:42:06
09:46:28
09:46:28
11:36:28
09:46:28
00:07:36
22:00:40
09:09:18
09:47:18
21:29:24
09:05:18
01:35:58
21:21:46
18:51:48
13:23:16
11:56:32
12:01:26
12:02:30

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

A
A
A
A
A
A
A
A
A
N
A
A
A
A
A
A
A
A
A

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

5014 Ko] - F:\prsentation khalid et miloud.rar

6511 Ko] - F:\?????? ???????.rar
31 Ko] - F:\????????.pptx
31 Ko] - F:\???????.pptx
618 Ko] - F:\??????? ??????????? ???????.pptx
31 Ko] - F:\?????????.pptx
45 Ko] - F:\???? ????????.pptx
130 Ko] - F:\Prsentation1.pptx
14158 Ko] - F:\stag.pptx
0 Ko] - F:\~$stag.pptx
237 Ko] - F:\????????? ????????.pptm
4482 Ko] - F:\????? ???????.ppt
5269 Ko] - F:\????? ??????? ??????.ppt
247 Ko] - F:\????????? ??????? (2).ppt
129 Ko] - F:\??????? ??????.pdf
903 Ko] - F:\??? ???????.pdf
1041 Ko] - F:\02 ??? ????? ????????? (1).pdf
8123 Ko] - F:\elebda3.net-gh-115.pdf
1466 Ko] - F:\??????? - ????? ???????? ??????????.p

03:08:16
17:31:12
00:39:34
09:40:54
14:25:38
20:30:48
09:40:08

|
|
|
|
|
|
|

A
A
N
A
A
A
A

|
|
|
|
|
|
|

248 Ko] - F:\DemandeCandidature_708111.pdf

570 Ko] - F:\???????? ???????.pdf
3 Ko] - F:\Photo0.jpg
47 Ko] - F:\001.jpg
86101 Ko] - F:\EcoleAmazighe.exe
1766 Ko] - F:\pf-setup-fr-653.exe
10859 Ko] - F:\photofiltre-x-installer_10-8-1_fr_10

09:51:26
19:34:28
11:44:02
15:13:28

|
|
|
|

A
A
A
A

|
|
|
|

14
14
15
58

16:38:56
11:44:02
19:41:38
12:03:18
15:24:38
23:02:00
19:39:28
10:45:06
17:40:04
10:43:22
23:02:00
13:46:02
17:40:04
18:03:56

|
|
|
|
|
|
|
|
|
|
|
|
|
|

A | 17 Ko] - F:\????? ?????? ??????.docx

A | 15 Ko] - F:\Doc1.docx
A | 15 Ko] - F:\??????? ??????? ??????? ??????.docx
A | 64 Ko] - F:\nadhariyat_altaalum_0911009.doc
A | 31350 Ko] - F:\MOV01066.AVI
D] - F:\??????? ???????
D] - F:\HHHHH
D] - F:\?????? ????????? ???????
D] - F:\photo jdadat
D] - F:\MA7ATAT
D] - F:\????????
D] - F:\informatique
D] - F:\????? ?????????
D] - F:\maths groupe expo

Ko]
Ko]
Ko]
Ko]

F:\????? ?????????1.docx
F:\????????? ?????.docx
F:\?????????.docx
F:\?????? ?????? ???? ??????? ? ??????? ??

[15/01/2015
[17/01/2015
[21/01/2015
[11/02/2015
[26/02/2015
[28/02/2015
??????

09:48:04
08:34:38
08:11:50
19:26:16
10:48:54
10:24:30

|
|
|
|
|
|

D] - F:\ousb
D] - F:\Movie Maker 2014
D] - F:\POSTE11
D] - F:\UsbFix
RSHD] - F:\RECYCLER
D] - F:\??????? ????? ???? ?????????? ??????? ????????

[b]################## | Vaccin |[/b]

C:\Autorun.inf -> Vaccin cr par UsbFix (El Desaparecido)
D:\Autorun.inf -> Vaccin cr par UsbFix (El Desaparecido)
F:\Autorun.inf -> Vaccin cr par UsbFix (El Desaparecido)
[b]################## | E.O.F | [url=http://www.sosvirus.net/]http://www.sosviru
s.net/[/url] | [url=http://www.usbfix.net/]http://www.usbfix.net/[/url] |[/b]