[b]############################## | UsbFix V 7.901 | [Recherche][/b] Utilisateur: Romain (Administrateur) # FLORIAN-PC Mis à jour le 25/02/2015 par El Desaparecido - SosVirus Lancé à 21:43:40 | 03/03/2015 Site Web : [url=http://www.usbfix.net/]http://www.usbfix.net/[/url] Changelog : [url=http://www.usbfix.net/maj/]http://www.usbfix.net/maj/[/url] Assistance : [url=http://www.sosvirus.net/forum-virus-securite.html]http://www.sosvirus.net/forum-virus-securite.html[/url] Détection en Live : [url=http://comment-supprimer.fr/]http://comment-supprimer.fr/[/url] Contact : [url=http://www.usbfix.net/contact/]http://www.usbfix.net/contact/[/url] [b]################## | System information |[/b] MB: PEGATRON CORPORATION (Eureka3) CPU: Intel(R) Core(TM)2 Quad CPU Q8300 @ 2.50GHz GC: NVIDIA GeForce GT 220 RAM -> [Total : 8191 Mo | Free : 4587 Mo] Bios: American Megatrends Inc. Boot: Normal boot OS: Microsoft™ Windows 7 Home Premium (6.1.7601 64-Bit) Service Pack 1 WB: Internet Explorer : 11.00.9600.16428 WB: Google Chrome : 40.0.2214.115 WB: Mozilla Firefox : 26.0 WB: Safari : 534.57.2 [b]################## | Security Information |[/b] AS: Malwarebytes Anti-Malware : 2.0.4.1028 FW: Windows Firewall [Actif] SC: Security Center [[b](!) Désactivé[/b]] WU: Windows Update [Actif] [b]################## | Disk Information |[/b] C:\ (%SystemDrive%) -> Disque fixe # 918 Go (524 Go libre(s) - 57%) [HP] # NTFS D:\ -> Disque fixe # 14 Go (2 Go libre(s) - 17%) [FACTORY_IMAGE] # NTFS [b]################## | Regedit Run |[/b] F2 - HKLM\..\Winlogon : [Shell] explorer.exe F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe F2 - HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe, F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe, 04 - HKCU\..\Run : [Google Update] "C:\Users\Romain\AppData\Local\Google\Update\GoogleUpdate.exe" /c 04 - HKCU\..\Run : [Facebook Update] "C:\Users\Romain\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver 04 - HKCU\..\Run : [MobileDocuments] C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe 04 - HKCU\..\Run : [Akamai NetSession Interface] "C:\Users\Romain\AppData\Local\Akamai\netsession_win.exe" 04 - HKCU\..\Run : [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent 04 - HKCU\..\Run : [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun 04 - HKCU\..\Run : [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun 04 - HKCU\..\Run : [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun 04 - HKCU\..\Run : [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR 04 - HKLM\..\Run : [hpsysdrv] c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe 04 - HKLM\..\Run : [HP Software Update] c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe 04 - HKLM\..\Run : [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe 04 - HKLM\..\Run : [UpdatePRCShortCut] "C:\Program Files (x86)\Hewlett-Packard\Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Hewlett-Packard\Recovery" UpdateWithCreateOnce "Software\CyberLink\PowerRecover" 04 - HKLM\..\Run : [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" 04 - HKLM\..\Run : [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" 04 - HKLM\..\Run : [Magic Desktop for HP notification] "C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe" 04 - HKLM\..\Run : [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" 04 - HKLM\..\Run : [LifeCam] "C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe" 04 - HKLM\..\Run : [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" 04 - HKLM\..\Run : [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime 04 - HKLM\..\Run : [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start 04 - [x64] HKLM\..\Run : [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" 04 - [x64] HKLM\..\Run : [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey 04 - [x64] HKLM\..\Run : [NvBackend] "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" 04 - [x64] HKLM\..\Run : [ShadowPlay] C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart 04 - [x64] HKLM\..\Run : [Launch LCore] C:\Program Files\Logitech Gaming Software\LCore.exe /minimized 04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun 04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun 04 - HKU\S-1-5-21-1857643406-1364530019-2282397469-1001\..\Run : [Google Update] "C:\Users\Romain\AppData\Local\Google\Update\GoogleUpdate.exe" /c 04 - HKU\S-1-5-21-1857643406-1364530019-2282397469-1001\..\Run : [Facebook Update] "C:\Users\Romain\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver 04 - HKU\S-1-5-21-1857643406-1364530019-2282397469-1001\..\Run : [MobileDocuments] C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe 04 - HKU\S-1-5-21-1857643406-1364530019-2282397469-1001\..\Run : [Akamai NetSession Interface] "C:\Users\Romain\AppData\Local\Akamai\netsession_win.exe" 04 - HKU\S-1-5-21-1857643406-1364530019-2282397469-1001\..\Run : [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent 04 - HKU\S-1-5-21-1857643406-1364530019-2282397469-1001\..\Run : [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun 04 - HKU\S-1-5-21-1857643406-1364530019-2282397469-1001\..\Run : [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun 04 - HKU\S-1-5-21-1857643406-1364530019-2282397469-1001\..\Run : [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun 04 - HKU\S-1-5-21-1857643406-1364530019-2282397469-1001\..\Run : [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR 04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe 04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe 04GS - Dropbox.lnk : C:\Users\Romain\AppData\Roaming\Dropbox\bin\Dropbox.exe 04GS - VPro620.lnk : C:\Windows\VPro620.exe [b]################## | Recherche générique |[/b] Présent! C:\Users\Romain\AppData\Roaming\java\webview\.lock Présent! C:\Users\Romain\AppData\Roaming\java [b]################## | Registre |[/b] [b]################## | UsbFix - Information |[/b] Info : [url=https://www.youtube.com/watch?v=vUZYYASd7FE]Comment supprimer l'infection des raccourcis sur USB ? (Video)[/url] Info : [url=http://www.usbfix.net/2014/10/supprimer-virus-raccourcis-usb/]L'infection des raccourcis USB, c'est quoi ?[/url] Détection en Live : [url=http://comment-supprimer.fr/]http://comment-supprimer.fr/[/url] [b]################## | Hijack |[/b] [b]################## | E.O.F | [url=http://www.sosvirus.net/]http://www.sosvirus.net/[/url] | [url=http://www.usbfix.net/]http://www.usbfix.net/[/url] |[/b]