[b]############################## | UsbFix V 7.

812 | [Nettoyage][/b]

Utilisateur: Administrateur (Administrateur) # SERVEUR

Mis � jour le 03/02/2015 par El Desaparecido - SosVirus
Lanc� � 08:29:00 | 18/01/2022

Site Web : [url=http://www.usbfix.net/]http://www.usbfix.net/[/url]

Changelog : [url=http://www.usbfix.net/maj/]http://www.usbfix.net/maj/[/url]
Assistance :
[url=http://www.sosvirus.net/forum-virus-securite.html]http://www.sosvirus.net/
forum-virus-securite.html[/url]
D�tection en Live :
[url=http://comment-supprimer.fr/]http://comment-supprimer.fr/[/url]
Contact : [url=http://www.usbfix.net/contact/]http://www.usbfix.net/contact/[/url]

[b]################## | System information |[/b]

MB: Foxconn (H61MXV/-LE/H67MXV)

CPU: Intel(R) Pentium(R) CPU G840 @ 2.80GHz
RAM -> [Total : 1768 Mo | Free : 707 Mo]
Bios: American Megatrends Inc.
Boot: Normal boot

OS: Microsoft� Windows 7 Professional (6.1.7601 64-Bit) Service Pack 1

WB: Internet Explorer : 11.00.9600.16428
WB: Google Chrome : 97.0.4692.71

[b]################## | Security Information |[/b]

AV: Avast Antivirus [[b](!) D�sactiv�[/b] |A jour]

AV: Symantec Endpoint Protection [Actif |[b](!) Non � jour[/b]]
AS: Windows Defender [[b](!) D�sactiv�[/b] |A jour]
AS: Symantec Endpoint Protection [Actif |[b](!) Non � jour[/b]]
AS: Avast Antivirus [[b](!) D�sactiv�[/b] |A jour]
FW: Symantec Endpoint Protection [[b](!) D�sactiv�[/b]]
FW: Windows Firewall [Actif]
SC: Security Center [Actif]
WU: Windows Update [Actif]

[b]################## | Disk Information |[/b]

C:\ (%SystemDrive%) -> Disque fixe # 245 Go (134 Go libre(s) - 55%) [] # NTFS
D:\ -> Disque fixe # 212 Go (48 Go libre(s) - 23%) [Data] # NTFS
L:\ -> Disque amovible # 2 Go (986 Mo libre(s) - 50%) [FETTAH-MOUL] # FAT32

[b]################## | Recherche g�n�rique |[/b]

(!) Fichiers temporaires supprim�s. (18.5232181549072 MB)

[b]################## | Registre |[/b]

[b]################## | Regedit Run |[/b]

F2 - HKLM\..\Winlogon : [Shell] Explorer.exe

F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - HKLM\..\Winlogon : [Userinit] C:\windows\system32\userinit.exe
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
04 - HKCU\..\Run : [IDMan] C:\Program Files (x86)\Internet Download Manager\
IDMan.exe /onboot
04 - HKCU\..\Run : [Opera Browser Assistant] C:\Users\Administrateur\AppData\Local\
Programs\Opera\assistant\browser_assistant.exe
04 - [x64] HKLM\..\Run : [IgfxTray] C:\Windows\system32\igfxtray.exe
04 - [x64] HKLM\..\Run : [HotKeysCmds] C:\Windows\system32\hkcmd.exe
04 - [x64] HKLM\..\Run : [Persistence] C:\Windows\system32\igfxpers.exe
04 - [x64] HKLM\..\Run : [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
-s
04 - [x64] HKLM\..\Run : [CNAP2 Launcher] C:\windows\system32\spool\DRIVERS\x64\3\
CNAP2LAK.EXE
04 - [x64] HKLM\..\Run : [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common
Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
04 - [x64] HKLM\..\Run : [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\
AvLaunch.exe" /gui
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe
/autoRun
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe
/autoRun
04 - HKU\S-1-5-21-3798402982-3375699337-1559220121-500\..\Run : [IDMan] C:\Program
Files (x86)\Internet Download Manager\IDMan.exe /onboot
04 - HKU\S-1-5-21-3798402982-3375699337-1559220121-500\..\Run : [Opera Browser
Assistant] C:\Users\Administrateur\AppData\Local\Programs\Opera\assistant\
browser_assistant.exe
04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04GS - MagicDisc.lnk : C:\Program Files (x86)\MagicDisc\MagicDisc.exe
04GS - HP Digital Imaging Monitor.lnk : C:\Program Files (x86)\HP\Digital Imaging\
bin\hpqtra08.exe
04GS - TP-LINK Wireless Configuration Utility.lnk : C:\Program Files (x86)\TP-LINK\
TP-LINK Wireless Configuration Utility\TWCU.exe

[b]################## | UsbFix - Information |[/b]

Info : [url=https://www.youtube.com/watch?v=vUZYYASd7FE]Comment supprimer

l'infection des raccourcis sur USB ? (Video)[/url]
Info : [url=http://www.usbfix.net/2014/10/supprimer-virus-raccourcis-
usb/]L'infection des raccourcis USB, c'est quoi ?[/url]
D�tection en Live :
[url=http://comment-supprimer.fr/]http://comment-supprimer.fr/[/url]

[b]################## | Hijack |[/b]

[b]################## | C:\ %SystemDrive% - Disque Fixe (NTFS) |[/b]

[20/01/2015 - 11:00:22 | N | 0 Ko] - C:\Upload_UsbFix.zip

[21/01/2021 - 10:13:43 | A | 0 Ko] - C:\ScrubRetValFile.txt
[18/01/2022 - 08:02:26 | ASH | 1357968 Ko] - C:\hiberfil.sys
[18/01/2022 - 08:02:30 | ASH | 1810624 Ko] - C:\pagefile.sys
[09/01/2022 - 09:45:52 | D] - C:\Config.Msi
[23/01/2020 - 10:12:09 | A | 1 Ko] - C:\bar.emf
[19/09/2019 - 10:18:22 | A | 1 Ko] - C:\RECUP1.DOC
[01/12/2006 - 22:37:14 | A | 884 Ko] - C:\msdia80.dll
[12/07/2012 - 12:44:41 | SHD] - C:\$Recycle.Bin
[10/06/2012 - 13:37:06 | N | 8 Ko] - C:\BOOTSECT.BAK
[10/03/2020 - 11:07:58 | SHD] - C:\found.000
[14/07/2009 - 04:20:08 | D] - C:\PerfLogs
[14/07/2009 - 06:08:56 | SHD] - C:\Documents and Settings
[20/11/2010 - 03:40:08 | RASH | 375 Ko] - C:\bootmgr
[10/06/2012 - 15:06:50 | D] - C:\Intel
[12/06/2012 - 12:34:23 | D] - C:\WinNC32
[24/06/2012 - 12:01:03 | D] - C:\SolidWorks Data
[01/07/2012 - 20:52:27 | D] - C:\NVIDIA
[12/07/2012 - 14:58:49 | D] - C:\Users
[08/02/2017 - 12:19:16 | D] - C:\47720889403816a90e9e89e9b5fbecc4
[14/02/2017 - 11:57:49 | SHD] - C:\Boot
[06/04/2017 - 12:05:14 | D] - C:\381cfc484a2cffba6f
[19/09/2017 - 11:57:22 | D] - C:\c4d94c71825f39c46545bb005c
[21/01/2021 - 11:08:52 | RHD] - C:\MSOCache
[21/04/2021 - 10:16:09 | D] - C:\Program Files
[21/04/2021 - 10:16:09 | D] - C:\Program Files (x86)
[21/04/2021 - 11:15:47 | D] - C:\Windows
[01/06/2021 - 08:58:07 | D] - C:\Observations3
[10/10/2021 - 10:47:22 | HD] - C:\ProgramData
[16/01/2022 - 08:43:14 | N | 322 Ko] - C:\HJD02
[18/01/2022 - 08:28:54 | D] - C:\UsbFix

[b]################## | D:\ - Disque Fixe (NTFS) |[/b]

[28/01/2020 - 09:56:16 | A | 615908 Ko] - D:\Windows XP Pro SP3 FR [Adam Bedoui]

[TNSAT].zip
[24/11/2021 - 11:19:21 | A | 10 Ko] - D:\cotisation.xlsx
[31/08/2020 - 09:38:06 | A | 92021 Ko] - D:\UnDeuxTempsV21.rar
[25/01/2021 - 20:58:16 | A | 4268 Ko] - D:\Asmwsoft PC Optimizer 2017 v10.00 Build
3081.rar
[19/05/2021 - 10:40:56 | A | 14583 Ko] - D:\Bac Blanc 2021_1.rar
[11/10/2021 - 21:00:26 | A | 13395 Ko] - D:\AMAR AMMAR.rar
[11/09/2018 - 09:49:00 | A | 68920 Ko] - D:\0001188723b4c59e1b311.pdf
[16/02/2016 - 11:55:58 | A | 1130 Ko] - D:\PROF.docx
[16/11/2017 - 10:49:24 | N | 0 Ko] - D:\~$PROF.docx
[16/11/2017 - 10:51:33 | A | 1478 Ko] - D:\ELEVE2.docx
[16/05/2019 - 14:02:37 | A | 18 Ko] - D:\Read the text carefully then do the
activities.docx
[01/11/2020 - 09:17:20 | A | 17 Ko] - D:\��������� ��������� �����������
�������.docx
[27/06/2021 - 12:27:43 | A | 14 Ko] - D:\���� �� ���.docx
[30/01/2020 - 08:35:28 | SHD] - D:\$RECYCLE.BIN
[13/01/2022 - 09:23:15 | D] - D:\2. Logique combinatoire
[09/11/2015 - 13:44:12 | D] - D:\CD ressources insp
[08/09/2016 - 10:50:35 | D] - D:\sw15
[25/09/2016 - 11:33:27 | D] - D:\piece45
[06/04/2017 - 08:46:25 | D] - D:\flashdsc
[14/10/2018 - 09:49:57 | D] - D:\zidane12
[15/10/2018 - 11:32:47 | D] - D:\2016������� ��������
[19/03/2019 - 08:11:48 | D] - D:\samirB
[16/04/2019 - 10:12:52 | D] - D:\1anne tp
[30/04/2019 - 08:36:28 | D] - D:\cnmo
[23/09/2019 - 11:11:39 | D] - D:\����� ���������
[24/09/2019 - 10:45:18 | D] - D:\� traiter
[10/10/2019 - 10:34:26 | D] - D:\zidane2016
[27/10/2019 - 11:42:44 | D] - D:\ZIDANE 20152016
[05/11/2019 - 08:57:16 | D] - D:\physique
[21/11/2019 - 08:56:07 | D] - D:\livres mecaniques
[24/11/2019 - 11:38:39 | D] - D:\logiciel
[16/12/2019 - 12:50:51 | D] - D:\note 1t
[05/02/2020 - 12:18:39 | D] - D:\imprim�
[16/02/2020 - 10:31:07 | D] - D:\mouloud
[10/03/2020 - 13:43:27 | D] - D:\a trierrrrr
[12/03/2020 - 08:16:53 | D] - D:\note
[26/08/2020 - 08:50:01 | D] - D:\morsli 12t
[19/11/2020 - 11:38:51 | D] - D:\par bloc
[17/01/2021 - 13:12:44 | D] - D:\flash
[21/01/2021 - 09:54:36 | D] - D:\hh
[21/01/2021 - 09:54:41 | D] - D:\Nouveau dossier
[25/01/2021 - 10:41:12 | D] - D:\o13ppSP1TNSAT64_2
[20/05/2021 - 08:48:46 | D] - D:\Bac Blanc 2021_1
[01/06/2021 - 09:14:12 | D] - D:\2020-2021
[01/06/2021 - 10:51:18 | D] - D:\seminaire
[22/09/2021 - 10:43:22 | D] - D:\12T�� ���� ����
[22/09/2021 - 11:14:03 | D] - D:\UnDeuxTempsV21
[03/10/2021 - 10:18:28 | D] - D:\Morsli
[03/10/2021 - 11:09:00 | D] - D:\������ ���� �������
[12/10/2021 - 08:14:11 | D] - D:\AMAR AMMAR
[12/10/2021 - 09:19:45 | D] - D:\Windows XP Pro SP3 FR [Adam Bedoui] [TNSAT]
[07/11/2021 - 11:46:02 | D] - D:\ouaked
[11/11/2021 - 09:00:08 | D] - D:\Nouveau dossier (2)
[23/11/2021 - 08:46:18 | D] - D:\3tm
[06/01/2022 - 08:16:57 | D] - D:\2gm2015

[b]################## | L:\ - Disque USB (FAT32) |[/b]

[15/12/2021 - 15:30:18 | A | 36 Ko] - L:\����� ���� ����-����� �����.xls

[25/11/2021 - 09:49:38 | A | 2313 Ko] - L:\compo 1t 2021-2022 - 3tm.rar
[09/10/2017 - 12:22:40 | A | 1386 Ko] - L:\mecanique.pdf
[28/10/2021 - 08:12:48 | D] - L:\�
[25/11/2021 - 09:11:18 | D] - L:\compo 1t 2021-2022
[25/11/2021 - 09:11:18 | D] - L:\compo 1t 2021-2022 - 3tm
[25/11/2021 - 17:28:18 | D] - L:\devoir
[26/11/2021 - 09:27:58 | D] - L:\sarah
[26/11/2021 - 18:31:28 | D] - L:\COMPO ET DEV19
[05/01/2022 - 11:55:40 | D] - L:\note 2t zidane
[18/01/2022 - 07:35:58 | D] - L:\Nouveau dossier

[b]################## | Vaccin |[/b]

C:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)

D:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)
L:\Autorun.inf -> Vaccin cr�� par UsbFix (El Desaparecido)

[b]################## | E.O.F |
[url=http://www.sosvirus.net/]http://www.sosvirus.net/[/url] |
[url=http://www.usbfix.net/]http://www.usbfix.net/[/url] |[/b]