Virus transformant les dossiers en raccourci

voici le rapport


############################## | UsbFix V 7.072 | [Research]

User: Binta (Administrator) # BINTA-PC
Updated 04/12/2011 by El Desaparecido
Started at 21:52:48 | 05/12/2011

Website: https://www.sosvirus.net/
Suspicious file ? : http://eldesaparecido.com/support.php
Contact: contact@eldesaparecido.com

PC: SAMSUNG ELECTRONICS CO., LTD. (R530/R730/R540 ) (x64-based PC) # Notebook
CPU: Intel(R) Core(TM) i3 CPU M 380 @ 2.53GHz (2533)
RAM -> [ Total : 3893 | Free : 2483 ]
BIOS: Phoenix SecureCore(tm) NB Version 08JV.M029.20100621.hkk
BOOT: Normal boot

OS: Microsoft Windows 7 Édition Familiale Premium (6.1.7600 64-Bit) #
WB: Windows Internet Explorer 8.0.7600.16385

SC: Security Center Service [ Enabled ]
WU: Windows Update Service [ Enabled ]
AV: F-Secure Client Security 9.00 [ Enabled | Updated ]
FW: Windows FireWall Service [ Enabled ]

C:\ (%systemdrive%) -> Fixed drive # 278 Gb (164 Mb free - 59%) [] # NTFS
D:\ -> CD-ROM
E:\ -> Removable drive # 4 Gb (2 Mb free - 43%) [4 GO] # FAT32

################## | Active Processes |

C:\Windows\system32\csrss.exe (452)
C:\Windows\system32\wininit.exe (568)
C:\Windows\system32\csrss.exe (592)
C:\Windows\system32\services.exe (628)
C:\Windows\system32\lsass.exe (652)
C:\Windows\system32\lsm.exe (660)
C:\Windows\system32\svchost.exe (756)
C:\Windows\system32\svchost.exe (836)
C:\Windows\system32\winlogon.exe (892)
C:\Windows\System32\svchost.exe (988)
C:\Windows\System32\svchost.exe (128)
C:\Windows\system32\svchost.exe (336)
C:\Windows\system32\svchost.exe (444)
C:\Windows\system32\svchost.exe (496)
C:\Windows\System32\spoolsv.exe (1144)
C:\Windows\system32\svchost.exe (1176)
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (1336)
C:\Windows\system32\taskhost.exe (1452)
C:\Windows\system32\Dwm.exe (1544)
C:\Windows\Explorer.EXE (1588)
C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe (1704)
C:\Windows\system32\taskeng.exe (1716)
C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe (1808)
C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe (1836)
C:\Program Files (x86)\Samsung\Samsung Recovery Solution 4\WCScheduler.exe (1844)
C:\Windows\system32\dgdersvc.exe (1884)
C:\Program Files (x86)\F-Secure\Anti-Virus\fsgk32st.exe (1936)
C:\Windows\system32\svchost.exe (1964)
C:\Program Files (x86)\F-Secure\Anti-Virus\FSGK32.EXE (1972)
C:\Program Files (x86)\F-Secure\Common\FSMA32.EXE (1996)
C:\Windows\system32\svchost.exe (1220)
C:\Program Files (x86)\F-Secure\Common\FSHDLL32.EXE (1288)
C:\Windows\System32\svchost.exe (1612)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (2176)
C:\Program Files (x86)\F-Secure\Common\FSHDLL64.EXE (2184)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (2616)
C:\Program Files (x86)\F-Secure\FWES\Program\fsdfwd.exe (2940)
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (3052)
C:\Program Files\Elantech\ETDCtrl.exe (3068)
C:\Windows\System32\igfxtray.exe (1604)
C:\Windows\System32\hkcmd.exe (2160)
C:\Windows\System32\igfxpers.exe (2380)
C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe (2448)
C:\Program Files (x86)\uTorrent\uTorrent.exe (2392)
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (2584)
C:\Program Files (x86)\F-Secure\Common\FNRB32.EXE (3260)
C:\Program Files (x86)\F-Secure\Common\FIH32.EXE (3300)
C:\Program Files (x86)\F-Secure\ORSP Client\fsorsp.exe (3352)
C:\Windows\system32\svchost.exe (3480)
C:\Program Files\Elantech\ETDCtrlHelper.exe (3592)
C:\Program Files (x86)\F-Secure\common\FSM32.EXE (3760)
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (3844)
C:\Program Files (x86)\F-Secure\Anti-Virus\fssm32.exe (3968)
C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe (3104)
C:\Windows\system32\igfxext.exe (3316)
C:\Windows\system32\igfxsrvc.exe (3456)
C:\Program Files (x86)\Brother\ControlCenter3\brccMCtl.exe (4108)
C:\Program Files (x86)\Browny02\BrYNSvc.exe (4132)
C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe (4144)
C:\Windows\system32\SearchIndexer.exe (4216)
C:\Program Files (x86)\F-Secure\Anti-Virus\fsav32.exe (4960)
C:\Windows\System32\svchost.exe (5096)
C:\Program Files\Windows Media Player\wmpnetwk.exe (3612)
C:\Windows\system32\DllHost.exe (964)
C:\Program Files (x86)\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe (5528)
C:\Windows\system32\wuauclt.exe (1280)
C:\Users\Binta\AppData\Local\Google\Chrome\Application\chrome.exe (4628)
C:\Users\Binta\AppData\Local\Google\Chrome\Application\chrome.exe (2936)
C:\Users\Binta\AppData\Local\Google\Chrome\Application\chrome.exe (5372)
C:\Windows\SysWOW64\rundll32.exe (4668)
C:\Users\Binta\AppData\Local\Google\Chrome\Application\chrome.exe (4428)
C:\Windows\system32\WUDFHost.exe (4168)
C:\UsbFix\UsbFix.exe (6060)
C:\Windows\system32\wbem\wmiprvse.exe (5916)

################## | Files # Infected Folders |

Found ! D:\Setup.exe
Found ! D:\autorun.inf
Found ! E:\unjah.pif
Found ! E:\xxtc.pif
Found ! E:\reiseu.pif
Found ! E:\explorer.vbe
Found ! E:\Recycler\desktop.ini

################## | Registry |


################## | Mountpoints2 |

HKCU\.\.\.\.\Explorer\MountPoints2\{d68f4308-2abf-11e0-9f6f-806e6f6e6963}
Shell\AutoRun\Command = D:\Setup.exe



################## | Vaccin |

(!) This computer is not vaccinated!

################## | E.O.F |

merciiiiiiiiiiiiiiiii ça a marché !!!! <3