[b]############################## | UsbFix V 8.

104 | [Nettoyage][/b]

Utilisateur: sunset (Administrateur) # DESKTOP-NBK1L4P

Mis à jour le 11/09/2015 par El Desaparecido - SosVirus
Lancé à 20:09:04 | 18/01/2020

Site Web : [url=http://www.usbfix.net/]http://www.usbfix.net/[/url]

Tutoriel : [url=http://www.sosvirus.net/tutoriel-
usbfix/]http://www.sosvirus.net/tutoriel-usbfix/[/url]
Assistance : [url=http://www.sosvirus.net/forum-virus-
securite.html]http://www.sosvirus.net/forum-virus-securite.html[/url]
Détection en Live : [url=http://comment-supprimer.fr/]http://comment-supprimer.fr/
[/url]
Contact : [url=http://www.usbfix.net/contact/]http://www.usbfix.net/contact/[/url]

[b]################## | System information |[/b]

MB: Hewlett-Packard (3397)

CPU: Intel(R) Core(TM) i3-2120 CPU @ 3.30GHz
RAM -> [Total : 1921 Mo | Free : 653 Mo]
Bios: Hewlett-Packard
Boot: Normal boot

OS: Microsoft™ Windows 10 Enterprise (6.3.18362 64-Bit)

WB: Internet Explorer : 11.00.18362.592
WB: Microsoft Edge : 11.00.18362.476 (WinBuild.160101.0800)
WB: Google Chrome : 79.0.3945.117

[b]################## | Security Information |[/b]

AV: Windows Defender [Actif |A jour]

FW: Windows Firewall [Actif]
SC: Security Center [Actif]
WU: Windows Update [Actif]

[b]################## | Disk Information |[/b]

C:\ (%SystemDrive%) -> Disque fixe # 148 Go (58 Go libre(s) - 39%) [] # NTFS
D:\ -> Disque amovible # 0 Mo (0 Mo libre(s) - 0%) [] # FAT
F:\ -> Disque amovible # 4 Go (476 Mo libre(s) - 13%) [F28] # FAT32

[b]################## | Recherche générique |[/b]

Restauré! [D] D:\@cstardata

Restauré! [D] F:\@BTRecv
Restauré! [D] F:\Received
Restauré! [D] F:\@wcache
Restauré! [D] F:\Browser
Restauré! [D] F:\Voicecall
Restauré! [D] F:\mre
Restauré! [D] F:\LOST.DIR
Restauré! [D] F:\DCIM
Restauré! [D] F:\Filearray
Restauré! [D] F:\JBed
Restauré! [D] F:\Java
Restauré! [D] F:\Audio
Restauré! [D] F:\Cool_Ebook
Restauré! [D] F:\DRM_BRO
Restauré! [D] F:\@cstardata
Restauré! [D] F:\java_dir
Restauré! [D] F:\vCard
Restauré! [D] F:\Others
Restauré! [D] F:\Alarm
Restauré! [N] F:\WD14!C~2.DLL
Restauré! [N] F:\WD140ACTION (2) (2).DLL
Restauré! [N] F:\WD140ACTION (2).DLL
Restauré! [N] F:\WD140ACTION.DLL
Restauré! [N] F:\WD140COM (2) (2).DLL
Restauré! [N] F:\WD140COM (2).DLL
Restauré! [N] F:\WD140COM.DLL
Restauré! [N] F:\WD140CPL (2) (2) (2).DLL
Restauré! [N] F:\WD140CPL (2) (2).DLL
Restauré! [N] F:\WD140CPL (2).DLL
Restauré! [N] F:\WD140CPL.DLL
Restauré! [N] F:\WD140GRF (2) (2).DLL
Restauré! [N] F:\WD140GRF (2).DLL
Restauré! [N] F:\WD140GRF.DLL
Restauré! [N] F:\WD140HF (2) (2).DLL
Restauré! [N] F:\WD140HF (2) (3).DLL
Restauré! [N] F:\WD140HF (2).DLL
Restauré! [N] F:\WD140HF (3).DLL
Restauré! [N] F:\WD140HF.DLL
Restauré! [N] F:\WD140HTML (2) (2).DLL
Restauré! [N] F:\WD140HTML (2) (3).DLL
Restauré! [N] F:\WD140HTML (2).DLL
Restauré! [N] F:\WD140HTML (3).DLL
Restauré! [N] F:\WD140HTML.DLL
Restauré! [N] F:\WD140IMG2 (2) (2) (2).DLL
Restauré! [N] F:\WD140IMG2 (2) (2).DLL
Restauré! [N] F:\WD140IMG2 (2).DLL
Restauré! [N] F:\WD140IMG2.DLL
Restauré! [N] F:\WD140OBJ (2) (2).DLL
Restauré! [N] F:\WD140OBJ (2).DLL
Restauré! [N] F:\WD140OBJ (3).DLL
Restauré! [N] F:\WD140OBJ.DLL
Restauré! [N] F:\WD140PDF (2) (2).DLL
Restauré! [N] F:\WD140PDF (2).DLL
Restauré! [N] F:\WD140PDF.DLL
Restauré! [N] F:\WD140RTF (2) (2).DLL
Restauré! [N] F:\WD140RTF (2).DLL
Restauré! [N] F:\WD140RTF (3).DLL
Restauré! [N] F:\WD140RTF.DLL
Restauré! [N] F:\WD140SQL (2) (2).DLL
Restauré! [N] F:\WD140SQL (2).DLL
Restauré! [N] F:\WD140SQL (3).DLL
Restauré! [N] F:\WD140SQL.DLL
Restauré! [N] F:\WD140STD (2) (2).DLL
Restauré! [N] F:\WD140STD (2) (3).DLL
Restauré! [N] F:\WD140STD (2).DLL
Restauré! [N] F:\WD140STD (3).DLL
Restauré! [N] F:\WD140STD.DLL
Restauré! [N] F:\WD140UNI (2) (2).DLL
Restauré! [N] F:\WD140UNI (2).DLL
Restauré! [N] F:\WD140UNI.DLL
Restauré! [N] F:\WD140VM (2) (2).DLL
Restauré! [N] F:\WD140VM (2).DLL
Restauré! [N] F:\WD140VM (3).DLL
Restauré! [N] F:\WD140VM.DLL
Restauré! [N] F:\WD140XLS (2) (2).DLL
Restauré! [N] F:\WD140XLS (2).DLL
Restauré! [N] F:\WD140XLS.DLL
Restauré! [N] F:\WD148S~3.DLL
Restauré! [N] F:\ldupver.txt

(!) Fichiers temporaires supprimés. (0.424769401550293 MB)

[b]################## | Startup |[/b]

F2 - HKLM\..\Winlogon : [Shell] explorer.exe

F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
04 - HKCU\..\Run : [OneDrive]
"C:\Users\sunset\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
04 - HKCU\..\Run : [uTorrent]
"C:\Users\sunset\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
04 - HKCU\..\Run : [IDMan] C:\Program Files (x86)\Internet Download
Manager\IDMan.exe /onboot
04 - [x64] HKLM\..\Run : [SecurityHealth] %windir
%\system32\SecurityHealthSystray.exe
04 - [x64] HKLM\..\Run : [RTHDVCPL] "C:\Program
Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
04 - [x64] HKLM\..\Run : [IgfxTray] "C:\WINDOWS\system32\igfxtray.exe"
04 - [x64] HKLM\..\Run : [HotKeysCmds] "C:\WINDOWS\system32\hkcmd.exe"
04 - [x64] HKLM\..\Run : [Persistence] "C:\WINDOWS\system32\igfxpers.exe"
04 - HKU\S-1-5-19\..\Run : [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe
/thfirstsetup
04 - HKU\S-1-5-20\..\Run : [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe
/thfirstsetup
04 - HKU\S-1-5-21-738052441-684113982-1359104263-1001\..\Run : [OneDrive]
"C:\Users\sunset\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
04 - HKU\S-1-5-21-738052441-684113982-1359104263-1001\..\Run : [uTorrent]
"C:\Users\sunset\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
04 - HKU\S-1-5-21-738052441-684113982-1359104263-1001\..\Run : [IDMan] C:\Program
Files (x86)\Internet Download Manager\IDMan.exe /onboot

[b]################## | UsbFix - Information |[/b]

Info : [url=https://www.youtube.com/watch?v=vUZYYASd7FE]Comment supprimer

l'infection des raccourcis sur USB ? (Video)[/url]
Info : [url=http://www.usbfix.net/2014/10/supprimer-virus-raccourcis-
usb/]L'infection des raccourcis USB, c'est quoi ?[/url]
Détection en Live : [url=http://comment-supprimer.fr/]http://comment-supprimer.fr/
[/url]

[b]################## | C:\ %SystemDrive% - Disque Fixe (NTFS) |[/b]

[18/01/2020 - 15:13:11 | ASH | 786816 Ko] - C:\hiberfil.sys

[18/01/2020 - 15:13:11 | ASH | 262144 Ko] - C:\swapfile.sys
[18/01/2020 - 20:05:53 | ASH | 2807536 Ko] - C:\pagefile.sys
[08/01/2020 - 15:23:52 | D] - C:\Windows.old
[14/01/2020 - 16:03:28 | SHD] - C:\$Recycle.Bin
[19/03/2019 - 05:52:43 | D] - C:\PerfLogs
[07/01/2020 - 16:03:13 | SHD] - C:\Documents and Settings
[07/01/2020 - 16:28:36 | D] - C:\Intel
[08/01/2020 - 15:09:07 | RD] - C:\Users
[08/01/2020 - 15:23:14 | SHD] - C:\Recovery
[09/01/2020 - 14:04:24 | D] - C:\HP_LaserJet_Professional_M1530_MFP_Series
[10/01/2020 - 14:41:57 | HD] - C:\ProgramData
[15/01/2020 - 19:37:17 | D] - C:\Windows
[15/01/2020 - 19:45:19 | RD] - C:\Program Files (x86)
[18/01/2020 - 16:34:48 | RD] - C:\Program Files
[18/01/2020 - 20:07:58 | D] - C:\UsbFix

[b]################## | D:\ - Disque USB (FAT) |[/b]

[01/01/2018 - 00:00:28 | AD] - D:\Filearray

[01/01/2018 - 00:00:14 | D] - D:\JBed
[01/01/2018 - 00:00:14 | AD] - D:\Cool_Ebook
[01/01/2018 - 00:00:16 | D] - D:\DRM_BRO
[01/01/2018 - 00:00:16 | D] - D:\@cstardata
[01/01/2018 - 00:00:20 | D] - D:\New_Word
[01/01/2018 - 00:00:44 | AD] - D:\Cool_Photo
[16/07/2019 - 16:10:14 | AD] - D:\Cool_Music
[29/06/2019 - 20:17:30 | AD] - D:\Cool_Video
[29/06/2019 - 20:17:30 | AD] - D:\vCard
[29/06/2019 - 20:17:30 | AD] - D:\Others
[29/06/2019 - 20:17:30 | RASHD] - D:\System
[16/07/2019 - 16:10:14 | AD] - D:\Alarm
[01/01/2018 - 00:00:14 | AD] - D:\Browser
[30/06/2019 - 14:48:50 | AH | 0 Ko] - D:\Filearray\VIRTUALARRAY_35509
[01/01/2019 - 00:00:00 | A | 0 Ko] - D:\@cstardata\compile.time
[01/01/2018 - 00:04:06 | A | 9 Ko] - D:\@cstardata\udb.cache
[01/01/2018 - 00:00:22 | A | 3 Ko] - D:\New_Word\userdata.txt
[23/12/2019 - 05:28:06 | AH | 0 Ko] - D:\New_Word\userdata.BMK
[30/06/2019 - 14:48:50 | AD] - D:\System\Mp3_res
[02/10/2019 - 13:10:02 | AD] - D:\System\moreringset
[30/06/2019 - 14:48:50 | A | 0 Ko] - D:\System\Mp3_res\List 1
[30/06/2019 - 14:48:50 | A | 0 Ko] - D:\System\Mp3_res\List 2
[30/06/2019 - 14:48:50 | A | 0 Ko] - D:\System\Mp3_res\List 3
[02/10/2019 - 13:10:04 | A | 0 Ko] - D:\System\moreringset\envset.ini
[01/01/2018 - 00:00:14 | AD] - D:\Browser\History
[10/07/2019 - 08:10:30 | AD] - D:\Browser\caches
[10/07/2019 - 08:11:00 | A | 0 Ko] - D:\Browser\cookie.dat
[10/07/2019 - 08:10:58 | A | 62 Ko] - D:\Browser\History\history001.dat
[10/07/2019 - 08:11:00 | A | 0 Ko] - D:\Browser\caches\index

[b]################## | F:\ - Disque USB () |[/b]

[b]################## | Vaccin |[/b]

C:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)

[b]Analyse réalisée en 138.4 secondes[/b]

[b]################## | E.O.F |
[url=http://www.sosvirus.net/]http://www.sosvirus.net/[/url] |
[url=http://www.usbfix.net/]http://www.usbfix.net/[/url] |[/b]