Et voilà le résultat !
J'ai regardé un peu le résultat du log. cela me semble correct. Maintenant à vous de me le confirmer.
############################## | UsbFix V6.012 |
User : Romain (Administrateurs) # PC-DE-ROMAIN
Update on 29/07/09 by Chiquitine29 & C_XX
Start at: 16:21:07 | 31/07/2009
Website :
http://pagesperso-orange.fr/NosTools/index.html
Intel(R) Core(TM)2 Duo CPU T7250 @ 2.00GHz
Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6001 32-bit) # Service Pack 1
Internet Explorer 8.0.6001.18783
Windows Firewall Status : Enabled
AV : BitDefender Antivirus 12.0 [ Enabled | Updated ]
FW : BitDefender Firewall[ (!) Disabled ]12.0
C:\ -> Disque fixe local # 138,97 Go (39,06 Go free) # NTFS
D:\ -> Disque amovible # 951,94 Mo (951,69 Mo free) # FAT
E:\ -> Disque amovible
F:\ -> Disque CD-ROM
############################## | Processus actifs |
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\winlogon.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\LogonUI.exe
C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\LogiShrd\Bluetooth\LBTServ.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Windows\system32\svchost.exe
C:\Windows\system32\stacsv.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\runonce.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
C:\Windows\System32\svchost.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\DRIVERS\xaudio.exe
C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
C:\Program Files\Sony\VAIO Event Service\VESMgrSub.exe
C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\WUDFHost.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
################## | Fichiers # Dossiers infectieux |
Supprimé ! C:\Windows\winsvcs32.exe
Supprimé ! D:\Recycler\S-1-6-21-2434476501-1644491937-600003330-1213
################## | Registre # Clés Run infectieuses |
Supprimé ! HKLM\Software\Microsoft\Windows\CurrentVersion\Run "winsvc32"
# HKLM\software\microsoft\security center\Svc "AntiVirusOverride" # -> Reset sucessfully !
################## | Registre # Mountpoints2 |
Supprimé ! HKCU\...\Explorer\MountPoints2\{71c68b98-7539-11de-af06-001a80190c8d}\Shell\AutoRun\Command
################## | Listing des fichiers présent |
[18/09/2006 23:43|--a------|24] -> C:\autoexec.bat
[19/01/2008 09:45|-rahs----|333203] -> C:\bootmgr
[21/07/2007 03:27|-ra-s----|8192] -> C:\BOOTSECT.BAK
[18/09/2006 23:43|--a------|10] -> C:\config.sys
[30/07/2009 19:18|--a------|132] -> C:\httpdwl.dat
[27/02/2009 21:20|-rahs----|0] -> C:\IO.SYS
[27/02/2009 21:20|-rahs----|0] -> C:\MSDOS.SYS
[?|?|?] -> C:\pagefile.sys
[14/07/2008 09:49|--a------|668180] -> C:\SystemEvent.log
[31/07/2009 16:30|--a------|4297] -> C:\UsbFix.txt
[14/07/2008 09:46|--a------|68166] -> C:\WinSSEvent.log
[31/07/2009 16:20|--a------|1460] -> D:\BOOTEX.LOG
################## | Vaccination |
# C:\autorun.inf ( # Not infected ) -> Folder created by VaccinUsb.
# C:\adober.exe ( # Not infected ) -> Folder created by VaccinUsb.
# C:\copy.exe ( # Not infected ) -> Folder created by VaccinUsb.
# C:\comment.htt ( # Not infected ) -> Folder created by VaccinUsb.
# C:\host.exe ( # Not infected ) -> Folder created by VaccinUsb.
# C:\info.exe ( # Not infected ) -> Folder created by VaccinUsb.
# C:\msvcr71.dll ( # Not infected ) -> Folder created by VaccinUsb.
# C:\ravmon.exe ( # Not infected ) -> Folder created by VaccinUsb.
# C:\ravmon.log ( # Not infected ) -> Folder created by VaccinUsb.
# C:\sqlserv.exe ( # Not infected ) -> Folder created by VaccinUsb.
# C:\start.exe ( # Not infected ) -> Folder created by VaccinUsb.
# C:\temp.exe ( # Not infected ) -> Folder created by VaccinUsb.
# C:\temp1.exe ( # Not infected ) -> Folder created by VaccinUsb.
# C:\temp2.exe ( # Not infected ) -> Folder created by VaccinUsb.
# C:\winfile.exe ( # Not infected ) -> Folder created by VaccinUsb.
# C:\ntdelect.com ( # Not infected ) -> Folder created by VaccinUsb.
# D:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
################## | Cracks / Keygens / Serials |
################## | ! Fin du rapport # UsbFix V6.012 ! |
