Salut,voici le rapport:
############################## [ UsbFix V3.017 # Scan ]
# User : user (Administrateurs) # ETS-1CF03A92B9C
# Update on 06/05/09 by Chiquitine29, C_XX & Chimay8
# WebSite : http://pagesperso-orange.fr/NosTools/usbfix.html
# Start at: 21:08:54 | 06/05/2009
# Processeur Intel Celeron
# Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 2
# Internet Explorer 8.0.6001.18702
# Windows Firewall Status : Enabled
# AV : Avira AntiVir PersonalEdition Classic 8.0.1.30 [ Enabled | Updated ]
# A:\ # Lecteur de disquettes 3 ½ pouces
# C:\ # Disque fixe local # 19,53 Go (10,39 Go free) # NTFS
# D:\ # Disque fixe local # 19,53 Go (16,78 Go free) # NTFS
# E:\ # Disque fixe local # 19,53 Go (14,28 Go free) # NTFS
# F:\ # Disque fixe local # 18,08 Go (10,8 Go free) [Nouveau nom] # NTFS
# G:\ # Disque CD-ROM
# I:\ # Disque amovible # 986,04 Mo (221,43 Mo free) [SONIA] # FAT32
############################## [ Processus actifs ]
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\program files\Internet Download Manager\IDMan.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\wuauclt.exe
C:\program files\Internet Download Manager\IEMonitor.exe
D:\Program Files\Winamp\winampa.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
I:\mémoire.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avscan.exe
D:\logiciel\Rav antivirus\rav.exe
E:\Program Files\USB Disk Security\USBGuard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\GUARDGUI.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
################## [ Registre # Startup ]
HKCU_Main: "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
HKCU_Main: "Search Page"="http://www.google.com"
HKCU_Main: "Start Page"="http://www.google.fr/"
HKCU_Main: "Start Page Redirect Cache"="http://fr.msn.com/?ocid=iehp"
HKCU_Main: "Start Page Redirect Cache_TIMESTAMP"=hex:10,2e,be,3e,18,b1,c9,01
HKCU_Main: "Start Page Redirect Cache AcceptLangs"="fr"
HKLM_logon: "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
HKLM_logon: "DefaultUserName"="user"
HKLM_logon: "AltDefaultUserName"="user"
HKLM_logon: "LegalNoticeCaption"=""
HKLM_logon: "LegalNoticeText"=""
HKLM_Run: avgnt="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
HKLM_Run: !AVG Anti-Spyware="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
HKLM_Run: QuickTime Task="C:\Program Files\QuickTime\qttask.exe" -atboottime
HKLM_Run: WinampAgent="D:\Program Files\Winamp\winampa.exe"
HKLM_Run: TkBellExe="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
HKLM_Run: explorer=C:\WINDOWS\BackUp\explorer.exe
HKLM_Run: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
HKCU_Run: CTFMON.EXE=C:\WINDOWS\system32\ctfmon.exe
HKCU_Run: IDMan=C:\program files\Internet Download Manager\IDMan.exe /onboot
HKCU_Run: msnmsgr="C:\Program Files\MSN Messenger\msnmsgr.exe" /background
HKCU_Run: swg=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
################## [ Informations ]
################## [ Fichiers # Dossiers infectieux ]
Found ! C:\explorer.exe
Found ! I:\explorer.exe
################## [ Registre # Clés Run infectieuses ]
Found ! HKLM\software\microsoft\security center\\ "AntiVirusOverride"
# -> ( Value = 0x1 | Good = 0x0 Bad = 0x1 )
Found ! HKLM\Software\Microsoft\Windows\CurrentVersion\Run "Explorer"
Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe
################## [ Registre # Mountpoints2 ]
HKCU\Software\Microsoft\....\MountPoints2\{18519191-2d93-11de-bbf7-00e04c78f735}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{18519191-2d93-11de-bbf7-00e04c78f735}\Shell\explore\Command
HKCU\Software\Microsoft\....\MountPoints2\{18519191-2d93-11de-bbf7-00e04c78f735}\Shell\open\Command
HKCU\Software\Microsoft\....\MountPoints2\{8a811751-18af-11de-bbc0-00e04c78f735}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{8de94b42-050b-11de-bb82-00e04c78f735}\Shell\AutoRun\command
HKCU\Software\Microsoft\....\MountPoints2\{8de94b42-050b-11de-bb82-00e04c78f735}\Shell\open\Command
################## [ ! Fin du rapport # UsbFix V3.017 ! ]
Anti virus elimine explorer.exe
