Done ! Press ENTER to exit ...
M3 - MFPP: Plugins - [Marius] -- C:\Users\Marius\AppData\Roaming\Mozilla\Firefox\Profiles\vqpkx8vf.default\searchplugins\kiwee-toolbar.xml => Infection BT (KiweeToolbar)
M2 - MFEP: prefs.js [Marius - vqpkx8vf.default\{28387537-e3f9-4ed7-860c-11e69af4a8a0}] [] MediaBar v4.1.0.00 (.Visicom Media Inc..) => Infection PUP (PUP.iMesh)
O4 - HKLM\..\Run: [DATAMNGR] C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\DATAMN~1.exe (.not file.) => Infection PUP (PUP.iMesh)
[MD5.00000000000000000000000000000000] [APT] [{22116563-108C-42c0-A7CE-60161B75E508}] (...) -- C:\Users\Marius\AppData\Local\Temp\Dx1.exe (.not file.) => Infection FakeAlert (Trojan.FakeAlert)
[MD5.00000000000000000000000000000000] [APT] [{BBAEAEAF-1275-40e2-BD6C-BC8F88BD114A}] (...) -- C:\Users\Marius\AppData\Local\Temp\Dx2.exe (.not file.) => Infection FakeAlert (Trojan.FakeAlert)
[MD5.46E2D72A986DCEF5B2827311E3B5C2EC] [SPRF][15/01/2009] (.Kiwee - Installer Control.) -- C:\Windows\Downloaded Program Files\InstallerControl.dll [204800] => Infection BT (Toolbar.Kiwee)
O87 - FAEL: "{BBEB703F-EB73-480A-8222-5035CB833EC1}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files\CrazyLoader\crazyloader.exe (.not file.) => Infection BT (Adware.SPointer)
O87 - FAEL: "{CED40D9F-8E8C-43DE-81D2-794E52FB646C}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files\CrazyLoader\crazyloader.exe (.not file.) => Infection BT (Adware.SPointer)
O87 - FAEL: "{E33E7694-5390-483A-9469-93122155237C}" |In - Domain - P6 - TRUE | .(...) -- C:\Program Files\iMesh Applications\iMesh\iMesh.exe (.not file.) => Infection PUP (PUP.iMesh)
O87 - FAEL: "{5AE81B96-B964-4110-A3B3-897143550F61}" |In - Domain - P17 - TRUE | .(...) -- C:\Program Files\iMesh Applications\iMesh\iMesh.exe (.not file.) => Infection PUP (PUP.iMesh)
O87 - FAEL: "{BB05E1CB-4D6B-49D8-BD6B-C9A67851D51B}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files\iMesh Applications\iMesh\iMesh.exe (.not file.) => Infection PUP (PUP.iMesh)
O87 - FAEL: "{04319EA2-462F-4690-9375-4CFD84A748DB}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files\iMesh Applications\iMesh\iMesh.exe (.not file.) => Infection PUP (PUP.iMesh)
O87 - FAEL: "TCP Query User{78C453D2-20BA-4275-AFE8-9633398E21BB}C:\program files\imesh applications\imesh\imesh.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\imesh applications\imesh\imesh.exe (.not file.) => Infection PUP (PUP.iMesh)
O87 - FAEL: "UDP Query User{9BF0D141-0F57-47B2-BE42-4B46306CEF09}C:\program files\imesh applications\imesh\imesh.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\imesh applications\imesh\imesh.exe (.not file.) => Infection PUP (PUP.iMesh)
Combien cela coûte-t-il au total ? Quelles aides apportent l'état et les acteurs du marché pour alléger cette charge non choisie ? Tous les détails sur Commentçamarche.net.
############################## | UsbFix 7.054 | [Recherche]
Utilisateur: Marius (Administrateur) # PC-DE-MARIUS [PACKARD BELL BV EasyNote MH36]
Mis à jour le 04/08/2011 par El Desaparecido
Lancé à 23:23:20 | 04/08/2011
Site Web: http://www.teamxscript.org
Submit your sample: http://www.teamxscript.org/Upload.php
Contact: TeamXscript.ElDesaparecido@gmail.com
CPU: Intel(R) Pentium(R) Dual CPU T3400 @ 2.16GHz
CPU 2: Intel(R) Pentium(R) Dual CPU T3400 @ 2.16GHz
Microsoft® Windows Vista(TM) Édition Familiale Basique (6.0.6002 32-Bit) # Service Pack 2
Internet Explorer 9.0.8112.16421
Pare-feu Windows: Activé
RAM -> 3000 Mo
C:\ (%systemdrive%) -> Disque fixe # 221 Go (67 Go libre(s) - 31%) [HDD] # NTFS
D:\ -> CD-ROM
E:\ -> CD-ROM
F:\ -> Disque fixe # 466 Go (239 Go libre(s) - 51%) [MARIUS] # FAT32
J:\ -> CD-ROM
################## | Éléments infectieux |
Présent! F:\msdownld.tmp.lnk
Présent! F:\Verbatim.lnk
Présent! F:\PSP.lnk
Présent! F:\cours.lnk
Présent! F:\Recycled.lnk
Présent! F:\Photos.lnk
Présent! F:\Années 80.lnk
Présent! F:\Travail DGER.lnk
Présent! F:\Travail Mili.lnk
Présent! F:\Best Of The 90's.lnk
Présent! F:\Dessins animés.lnk
Présent! F:\RTL Les plus belles chansons d'amour CD1.lnk
Présent! F:\RTL Les plus belles chansons d'amour CD2.lnk
Présent! F:\Sons G.lnk
Présent! F:\Logiciels.lnk
Présent! C:\Users\Public\Ordinateur - Raccourci.lnk
Présent! C:\Windows\Tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
Présent! C:\Windows\Tasks\{BBAEAEAF-1275-40e2-BD6C-BC8F88BD114A}.job
################## | Registre |
Présent! HKCU\Software\6BTOP2GA8A
Présent! HKCU\Software\Microsoft\Handle
Présent! HKCU\Software\NtWqIVLZEWZU
Présent! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{22116563-108C-42c0-A7CE-60161B75E508}
Présent! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{BBAEAEAF-1275-40e2-BD6C-BC8F88BD114A}
Présent! HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\
################## | Mountpoints2 |
HKCU\.\.\.\.\Explorer\MountPoints2\G
Shell\AutoRun\Command = G:\AutoRun.exe
HKCU\.\.\.\.\Explorer\MountPoints2\{0133de82-7cd1-11e0-abf6-001e101fe5e1}
Shell\AutoRun\Command = F:\AutoRun.exe
HKCU\.\.\.\.\Explorer\MountPoints2\{0133dea3-7cd1-11e0-abf6-00238b32f470}
Shell\AutoRun\Command = F:\AutoRun.exe
HKCU\.\.\.\.\Explorer\MountPoints2\{0261d9ca-9b3f-11df-b539-0017c4589c4f}
Shell\AutoRun\Command = E:\AutoRun.exe
HKCU\.\.\.\.\Explorer\MountPoints2\{0261d9e8-9b3f-11df-b539-001e101fa1f5}
Shell\AutoRun\Command = E:\AutoRun.exe
HKCU\.\.\.\.\Explorer\MountPoints2\{0720ae5a-9c65-11df-8221-00238b32f470}
Shell\AutoRun\Command = F:\AutoRun.exe
HKCU\.\.\.\.\Explorer\MountPoints2\{0c8384aa-2e8d-11df-b613-00238b32f470}
Shell\AutoRun\Command = E:\LaunchU3.exe -a
HKCU\.\.\.\.\Explorer\MountPoints2\{0dbcab2c-97b9-11df-aacb-00238b32f470}
Shell\AutoRun\Command = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL riUOm.EXE
HKCU\.\.\.\.\Explorer\MountPoints2\{13934cc3-95a7-11e0-915e-00238b32f470}
Shell\AutoRun\Command = F:\AutoRun.exe
HKCU\.\.\.\.\Explorer\MountPoints2\{222030c1-7db2-11e0-835b-001e101f4e71}
Shell\AutoRun\Command = F:\AutoRun.exe
HKCU\.\.\.\.\Explorer\MountPoints2\{36c4d616-81e6-11de-b4b6-0017c4589c4f}
Shell\AutoRun\Command = E:\8dtyjjf.exe
Shell\open\Command = E:\8dtyjjf.exe
HKCU\.\.\.\.\Explorer\MountPoints2\{38a17be1-97aa-11e0-a75d-0017c4589c4f}
Shell\AutoRun\Command = F:\AutoRun.exe
HKCU\.\.\.\.\Explorer\MountPoints2\{3bb3db26-4742-11df-b59d-00238b32f470}
Shell\AutoRun\Command = F:\LaunchU3.exe -a
HKCU\.\.\.\.\Explorer\MountPoints2\{410ce49b-9601-11e0-be68-001e101f57d0}
Shell\AutoRun\Command = F:\AutoRun.exe
HKCU\.\.\.\.\Explorer\MountPoints2\{479169af-4e51-11e0-a824-0017c4589c4f}
Shell\AutoRun\Command = E:\Toshiba\Launcher\start.exe
HKCU\.\.\.\.\Explorer\MountPoints2\{6132b51a-a86b-11df-b241-00238b32f470}
Shell\AutoRun\Command = E:\npeuinst.exe
HKCU\.\.\.\.\Explorer\MountPoints2\{62913757-49bd-11de-8790-00238b32f470}
Shell\AutoRun\Command = c:\windows\explorer.exe
HKCU\.\.\.\.\Explorer\MountPoints2\{6625029f-cf98-11df-87b8-00238b32f470}
Shell\AutoRun\Command = E:\LaunchU3.exe
HKCU\.\.\.\.\Explorer\MountPoints2\{678d856f-7bbe-11de-bbb7-0017c4589c4f}
Shell\1\Command = Recycle.exe
Shell\2\Command = Recycle.exe
Shell\AutoRun\Command = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycle.exe
HKCU\.\.\.\.\Explorer\MountPoints2\{69a5d3e5-b3f1-11e0-ab96-0017c4589c4f}
Shell\AutoRun\Command = G:\AutoRun.exe
HKCU\.\.\.\.\Explorer\MountPoints2\{73e87f84-7c27-11e0-a6dd-0017c4589c4f}
Shell\AutoRun\Command = F:\AutoRun.exe
HKCU\.\.\.\.\Explorer\MountPoints2\{73e87f9d-7c27-11e0-a6dd-00238b32f470}
Shell\AutoRun\Command = F:\AutoRun.exe
HKCU\.\.\.\.\Explorer\MountPoints2\{7d1dcc32-037d-11df-90bf-00238b32f470}
Shell\AutoRun\Command = F:\LaunchU3.exe -a
HKCU\.\.\.\.\Explorer\MountPoints2\{94c2c1be-ed93-11de-8712-00238b32f470}
Shell\AutoRun\Command = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL KAPEf.exE
HKCU\.\.\.\.\Explorer\MountPoints2\{c8ec421a-9e54-11df-be97-806e6f6e6963}
Shell\AutoRun\Command = E:\AutoRun.exe
HKCU\.\.\.\.\Explorer\MountPoints2\{cecd3db4-38a9-11e0-ad5f-00238b32f470}
Shell\AutoRun\Command = H:\Suppress_AutoRun.exe
HKCU\.\.\.\.\Explorer\MountPoints2\{d8bf566e-9565-11e0-98a6-00238b32f470}
Shell\AutoRun\Command = F:\AutoRun.exe
HKCU\.\.\.\.\Explorer\MountPoints2\{e390f4ad-ea3f-11de-bffd-00238b32f470}
Shell\AutoRun\Command = ph.exe
Shell\open\Command = ph.exe
HKCU\.\.\.\.\Explorer\MountPoints2\{e5751a87-7d5a-11e0-94f7-001e101f4da1}
Shell\AutoRun\Command = F:\AutoRun.exe
HKCU\.\.\.\.\Explorer\MountPoints2\{e82bb236-88be-11e0-99f9-806e6f6e6963}
Shell\AutoRun\Command = G:\AutoRun.exe
HKCU\.\.\.\.\Explorer\MountPoints2\{f2bb9707-1194-11df-ae0c-00238b32f470}
Shell\AutoRun\Command = E:\LaunchU3.exe -a
HKCU\.\.\.\.\Explorer\MountPoints2\{f66e1ef0-8a53-11de-9c3a-0017c4589c4f}
Shell\auToplAY\Command = bbem.pif
Shell\AutoRun\Command = bbem.pif
Shell\EXpLOre\Command = bbem.pif
Shell\Open\Command = bbem.pif
HKCU\.\.\.\.\Explorer\MountPoints2\{f92b1d91-82b1-11de-93a7-0017c4589c4f}
Shell\AutoRun\Command = wscript.exe antinul.vbe
Shell\open\Command = wscript.exe antinul.vbe
HKCU\.\.\.\.\Explorer\MountPoints2\{fb766143-1e50-11df-91b5-00238b32f470}
Shell\AutoRun\Command = F:\LaunchU3.exe -a
################## | Vaccin |
(!) Cet ordinateur n'est pas vacciné!
################## | E.O.F |