[b]############################## | UsbFix V 7.

176 | [Nettoyage][/b]
Utilisateur: HP (Administrateur) # HP-PC
Mis jour le 18/07/2014 par El Desaparecido - SosVirus
Lanc 20:21:41 | 03/08/2016
Site Web : [url=http://www.usbfix.net/]http://www.usbfix.net/[/url]
Changelog : [url=http://www.usbfix.net/maj/]http://www.usbfix.net/maj/[/url]
Assistance : [url=http://www.sosvirus.net/]http://www.sosvirus.net/[/url]
Upload Malware : [url=http://www.sosvirus.net/upload_malware.php]http://www.sosv
irus.net/upload_malware.php[/url]
Contact : [url=http://www.usbfix.net/contact/]http://www.usbfix.net/contact/[/ur
l]
[b]################## | System information |[/b]
MB: Hewlett-Packard (166F)
CPU: Intel(R) Core(TM) i5-2430M CPU @ 2.40GHz
RAM -> [Total : 4044 Mo | Free : 2669 Mo]
Bios: Hewlett-Packard
Boot: Normal boot
OS:
WB:
WB:
WB:

Microsoft Windows 7 Professional (6.1.7601 64-Bit) Service Pack 1

Internet Explorer : 9.00.8112.16421
Google Chrome : 51.0.2704.103
Mozilla Firefox : 47.0

[b]################## | Security Information |[/b]

AV:
AS:
AS:
FW:
SC:
WU:

Avira Antivirus [Actif |A jour]

Avira Antivirus [Actif |A jour]
Windows Defender [[b](!) Dsactiv[/b] |A jour]
Windows Firewall [Actif]
Security Center [Actif]
Windows Update [Actif]

[b]################## | Disk Information |[/b]

C:\ (%SystemDrive%) -> Disque fixe # 171 Go (53 Go libre(s) - 31%) [Windows 7] #
NTFS
D:\ -> Disque fixe # 127 Go (73 Go libre(s) - 57%) [Travail] # NTFS
[b]################## | Processus Stopps |[/b]
C:\Program Files\IDT\WDM\stacsv64.exe (ID: 1004|ParentID: 504)
C:\Windows\System32\wlanext.exe (ID: 1236|ParentID: 908)
C:\Windows\System32\spoolsv.exe (ID: 1372|ParentID: 504)
C:\Windows\System32\taskhost.exe (ID: 1468|ParentID: 504|HP)
C:\Windows\explorer.exe (ID: 1608|ParentID: 1544|HP)
C:\Windows\System32\taskeng.exe (ID: 1660|ParentID: 952|Systme)
C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler.exe (ID: 1484|P
arentID: 1704|Systme)
C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler64.exe (ID: 1600
|ParentID: 1704|Systme)
C:\Windows\System32\igfxpers.exe (ID: 1932|ParentID: 1608|HP)
C:\Program Files (x86)\CST STUDIO SUITE 2014\License Manager\lmgrd.exe (ID: 2060
|ParentID: 504|Systme)
C:\Program Files\IDT\WDM\sttray64.exe (ID: 2096|ParentID: 1608|HP)
C:\Windows\System32\conhost.exe (ID: 2124|ParentID: 380|Systme)
C:\Program Files (x86)\CST STUDIO SUITE 2014\License Manager\lmgrd.exe (ID: 2140

|ParentID: 2060|Systme)
C:\Program Files (x86)\CST STUDIO SUITE 2014\DC Main Controller\CSTDCMainControl
ler.exe (ID: 2192|ParentID: 504|Systme)
C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe (ID: 2200|ParentID: 1608|HP)
C:\Program Files (x86)\Internet Download Manager\IDMan.exe (ID: 2324|ParentID: 1
608|HP)
C:\Users\HP\AppData\Roaming\ScreenMaker\SSMaker.exe (ID: 2464|ParentID: 1608|HP)
C:\Program Files (x86)\CST STUDIO SUITE 2014\DC Solver Server\CSTDCSolverServer.
exe (ID: 2708|ParentID: 504|Systme)
C:\Program Files (x86)\Micro Application\38 Dictionnaires et Recueils de Corresp
ondance\MediaDico38.exe (ID: 2736|ParentID: 2260|HP)
C:\Program Files (x86)\Micro Application\38 Dictionnaires et Recueils de Corresp
ondance\RAC38.exe (ID: 2936|ParentID: 2260|HP)
C:\Windows\System32\hasplms.exe (ID: 3068|ParentID: 504|Systme)
C:\Program Files\Online-IO\guardian\10\Online-Guardian.exe (ID: 2452|ParentID: 9
28|Systme)
C:\Program Files (x86)\Common Files\InstallShield Shared\Service\InstallShield L
icensing Service.exe (ID: 2804|ParentID: 504|Systme)
C:\MATLAB701\webserver\bin\win32\matlabserver.exe (ID: 1616|ParentID: 504|Systme)
C:\MATLAB701\bin\win32\MATLAB.exe (ID: 3132|ParentID: 684|Systme)
C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\mdm.exe (ID: 3144|
ParentID: 504|Systme)
C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe (ID: 3360|ParentID:
504|Systme)
C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe (ID: 3724|ParentI
D: 2324|HP)
C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe (ID: 3988|ParentID: 3360
|HP)
C:\Windows\System32\SearchIndexer.exe (ID: 4564|ParentID: 504|Systme)
C:\Windows\System32\alg.exe (ID: 5060|ParentID: 504|SERVICE LOCAL)
[b]################## | Autorun |[/b]
[b]################## | Recherche gnrique |[/b]
(!) Fichiers temporaires supprims.
[b]################## | Registre |[/b]
[b]################## | Regedit Run |[/b]
F2 - HKLM\..\Winlogon : [Shell] explorer.exe
F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - HKLM\..\Winlogon : [Userinit] C:\Windows\System32\Userinit.exe,
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\System32\Userinit.exe,
04 - HKCU\..\Run : [ManyCam] "C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe" /s
ilent
04 - HKCU\..\Run : [MediaDICO38] C:\Program Files (x86)\Micro Application\38 Dic
tionnaires et Recueils de Correspondance\LanceMediaDICO38.exe Lancement
04 - HKCU\..\Run : [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMa
n.exe /onboot
04 - HKCU\..\Run : [MaxigetMasterUpdate] -autorun
04 - HKCU\..\Run : [SSMaker] "C:\Users\HP\AppData\Roaming\ScreenMaker\SSMaker.ex
e"
04 - HKLM\..\Run : [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.e
xe" /min
04 - HKLM\..\Run : [Avira SystrayStartTrigger] C:\Program Files (x86)\Avira\Laun

cher\Avira.SystrayStartTrigger.exe
04 - HKLM\..\Run : [IseUI] C:\Program Files (x86)\COMODO\Internet Security Essen
tials\vkise.exe
04 - [x64] HKLM\..\Run : [IgfxTray] C:\Windows\system32\igfxtray.exe
04 - [x64] HKLM\..\Run : [Persistence] C:\Windows\system32\igfxpers.exe
04 - [x64] HKLM\..\Run : [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe
/autoRun
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe
/autoRun
04 - HKU\S-1-5-21-1686694159-2274052797-833094257-1000\..\Run : [ManyCam] "C:\Pr
ogram Files (x86)\ManyCam\Bin\ManyCam.exe" /silent
04 - HKU\S-1-5-21-1686694159-2274052797-833094257-1000\..\Run : [MediaDICO38] C:
\Program Files (x86)\Micro Application\38 Dictionnaires et Recueils de Correspon
dance\LanceMediaDICO38.exe Lancement
04 - HKU\S-1-5-21-1686694159-2274052797-833094257-1000\..\Run : [IDMan] C:\Progr
am Files (x86)\Internet Download Manager\IDMan.exe /onboot
04 - HKU\S-1-5-21-1686694159-2274052797-833094257-1000\..\Run : [MaxigetMasterUp
date] -autorun
04 - HKU\S-1-5-21-1686694159-2274052797-833094257-1000\..\Run : [SSMaker] "C:\Us
ers\HP\AppData\Roaming\ScreenMaker\SSMaker.exe"
04 - HKU\S-1-5-18\..\Run : [AviraSpeedup] "C:\Program Files (x86)\Avira\AviraSpe
edup\avira_system_speedup.exe" -autorun
04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
[b]################## | C:\ %SystemDrive% - Disque Fixe (NTFS) |[/b]
[16/06/2015 - 11:57:56 | N | 0 Ko] - C:\ztrace.txt
[03/08/2016 - 20:12:24 | ASH | 3105684 Ko] - C:\hiberfil.sys
[03/08/2016 - 20:12:27 | ASH | 4140912 Ko] - C:\pagefile.sys
[29/07/2016 - 02:31:42 | D] - C:\Config.Msi
[02/12/2006 - 00:37:14 | N | 884 Ko | [url=https://www.virustotal.com/file/c883b
5d2e16d22b09b176ca0786128f8064d47edf26186b95845aa3678868496/analysis/1470227777/
]VirusTotal[/url] - (0/53)] - C:\msdia80.dll
[11/03/2014 - 15:07:18 | SHD] - C:\$Recycle.Bin
[14/07/2009 - 05:20:08 | D] - C:\PerfLogs
[14/07/2009 - 07:08:56 | SHD] - C:\Documents and Settings
[11/03/2014 - 15:06:41 | SHD] - C:\Recovery
[11/03/2014 - 15:06:52 | D] - C:\Users
[11/03/2014 - 16:25:54 | D] - C:\Intel
[11/03/2014 - 16:45:59 | RD] - C:\MSOCache
[11/03/2014 - 16:48:26 | D] - C:\IDE
[12/03/2014 - 12:04:32 | D] - C:\MATLAB701
[12/03/2014 - 12:15:00 | D] - C:\Application Data
[02/08/2014 - 16:14:13 | D] - C:\logecole
[07/10/2015 - 09:31:13 | D] - C:\tmp
[07/10/2015 - 09:33:06 | D] - C:\Agilent
[20/05/2016 - 23:06:17 | D] - C:\Windows
[26/07/2016 - 03:33:58 | D] - C:\LGD686
[27/07/2016 - 11:41:37 | D] - C:\adb
[29/07/2016 - 02:18:26 | D] - C:\Program Files
[29/07/2016 - 02:19:35 | HD] - C:\ProgramData
[29/07/2016 - 02:27:00 | D] - C:\CCAV
[30/07/2016 - 10:44:31 | D] - C:\Program Files (x86)
[01/08/2016 - 14:56:09 | SHD] - C:\System Volume Information
[03/08/2016 - 20:21:12 | D] - C:\UsbFix
[b]################## | D:\ - Disque Fixe (NTFS) |[/b]

[11/03/2014
[30/05/2012
[07/03/2014
[07/03/2014
[07/03/2014
[07/03/2014
[07/03/2014
[11/03/2014
[01/07/2014
[31/10/2014
[24/05/2015
[09/08/2015
[09/08/2015
[16/08/2015
[11/10/2015
[11/10/2015
[07/12/2015
[22/12/2015
[23/12/2015
[23/12/2015
[26/12/2015
[01/01/2016
[01/01/2016
[30/01/2016
[30/01/2016
[13/05/2016
[13/05/2016
[22/06/2016
[24/07/2016
[28/07/2016

15:07:18
22:21:30
17:18:58
17:23:15
17:24:05
17:25:12
17:55:07
14:54:20
11:56:08
18:37:27
23:25:36
14:09:13
15:14:49
15:33:03
10:51:20
10:52:27
20:53:53
14:11:05
12:01:40
12:14:57
21:07:05
08:43:34
08:44:09
18:01:23
22:14:07
18:28:09
18:36:25
08:26:46
16:48:36
08:55:28

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

SHD]
D] D] D] D] D] D] SHD]
D] D] D] D] D] D] D] D] D] D] D] D] D] D] D] D] D] D] D] D] D] D] -

- D:\$RECYCLE.BIN
D:\Mes eBooks
D:\cours university
D:\Matlab Dossier
D:\MAGISTERE
D:\HFSS
D:\LO
- D:\System Volume Information
D:\Downloads
D:\photo
D:\primaire
D:\project doctorat
D:\Disque Dur
D:\Ansoft
D:\0_prj
D:\0_wrk
D:\MATLAB
D:\program
D:\Mesure
D:\measured
D:\new results
D:\electrotechnique
D:\amplifiers
D:\Nouveau dossier (2)
D:\ICATS_15
D:\Nouveau dossier
D:\doctorat
D:\mouhouche faiza
D:\logiciel
D:\VIDEO

[b]################## | Vaccin |[/b]

D:\Autorun.inf -> Vaccin cr par UsbFix (El Desaparecido)
[b]################## | E.O.F | [url=http://www.sosvirus.net/]http://www.sosviru
s.net/[/url] | [url=http://www.usbfix.net/]http://www.usbfix.net/[/url] |[/b]