virus USB : Infection spotlight v100 et iTunesHelper.vbe

[luce28]

Bonjour,
J'ai attrapé un virus via ma clée usb.
J'ai téléchargé USB fix pour essayer de m'en débarrasser. Le logiciel m'a édité un rapport (voir ci-dessous) après avoir fait une recherche. Je ne sais pas si je peux passer au nettoyage? J'ai peur de perdre des fichiers importants... Qu'en pensez-vous?
Merci!
############################## | UsbFix V 7.165 | [Recherche]

Utilisateur: Lucie (Administrateur) # LUCIE-HP
Mis à jour le 20/02/2014 par El Desaparecido - Team SosVirus
Lancé à 18:34:24 | 22/02/2014

Site Web : http://www.usbfix.net/
Changelog : http://www.usbfix.net/maj/
Support : http://www.sosvirus.net/
Upload Malware : http://www.sosvirus.net/upload_malware.php
Contact : http://www.usbfix.net/contact/

PC: Hewlett-Packard (3387)
CPU: AMD E-450 APU with Radeon(tm) HD Graphics
RAM -> [Total : 3689 Mo| Free : 1774 Mo]
Bios: Hewlett-Packard
Boot: Normal boot

OS: Microsoft Windows 7 Édition Familiale Premium (6.1.7601 64-Bit) Service Pack 1
WB: Windows Internet Explorer : 11.0.9600.16518
WB: Google Chrome : 32.0.1700.107

SC: Security Center [Enabled]
WU: Windows Update [Enabled]
AV: Norton Internet Security [(!) Disabled | (!) Outdated]
AV: avast! Antivirus [Enabled | Updated]
AS: Windows Defender [Enabled | Updated]
AS: avast! Antivirus [Enabled | Updated]
AS: Norton Internet Security [(!) Disabled | (!) Outdated]
FW: Norton Internet Security [(!) Disabled]
FW: Windows FireWall [Enabled]

C:\ (%systemdrive%) -> Disque fixe # 438 Go (372 Go libre(s) - 85%) [] # NTFS
D:\ -> Disque fixe # 23 Go (2 Go libre(s) - 11%) [Recovery] # NTFS
E:\ -> Disque fixe # 4 Go (1 Go libre(s) - 27%) [HP_TOOLS] # FAT32
F:\ -> Disque amovible # 245 Mo (138 Mo libre(s) - 56%) [BLA_POLYSOU] # FAT
G:\ -> Disque amovible # 982 Mo (904 Mo libre(s) - 92%) [LUCIE] # FAT32

################## | Processus Actif |

C:\Windows\system32\csrss.exe (ID: 456 |ParentID: 448)
C:\Windows\system32\wininit.exe (ID: 524 |ParentID: 448)
C:\Windows\system32\csrss.exe (ID: 536 |ParentID: 516)
C:\Windows\system32\services.exe (ID: 584 |ParentID: 524)
C:\Windows\system32\lsass.exe (ID: 600 |ParentID: 524)
C:\Windows\system32\lsm.exe (ID: 608 |ParentID: 524)
C:\Windows\system32\winlogon.exe (ID: 656 |ParentID: 516)
C:\Windows\system32\svchost.exe (ID: 768 |ParentID: 584)
C:\Windows\system32\svchost.exe (ID: 864 |ParentID: 584)
C:\Windows\system32\atiesrxx.exe (ID: 916 |ParentID: 584)
C:\Windows\System32\svchost.exe (ID: 1012 |ParentID: 584)
C:\Windows\System32\svchost.exe (ID: 360 |ParentID: 584)
C:\Windows\system32\svchost.exe (ID: 460 |ParentID: 584)
C:\Windows\system32\svchost.exe (ID: 400 |ParentID: 584)
C:\Program Files\IDT\WDM\STacSV64.exe (ID: 1044 |ParentID: 584)
C:\Windows\system32\atieclxx.exe (ID: 1328 |ParentID: 916)
C:\Windows\system32\svchost.exe (ID: 1356 |ParentID: 584)
C:\Program Files\AVAST Software\Avast\AvastSvc.exe (ID: 1480 |ParentID: 584)
C:\Windows\system32\WLANExt.exe (ID: 1488 |ParentID: 360)
C:\Windows\system32\conhost.exe (ID: 1496 |ParentID: 456)
C:\Windows\System32\spoolsv.exe (ID: 1700 |ParentID: 584)
C:\Windows\system32\svchost.exe (ID: 1728 |ParentID: 584)
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (ID: 1868 |ParentID: 584)
C:\Program Files\IDT\WDM\AESTSr64.exe (ID: 1904 |ParentID: 584)
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (ID: 1948 |ParentID: 584)
C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (ID: 1996 |ParentID: 584)
C:\Program Files\Bonjour\mDNSResponder.exe (ID: 2044 |ParentID: 584)
C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (ID: 1252 |ParentID: 584)
C:\Windows\SysWOW64\ezSharedSvcHost.exe (ID: 1560 |ParentID: 584)
C:\Windows\system32\svchost.exe (ID: 1852 |ParentID: 584)
C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe (ID: 1960 |ParentID: 584)
C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe (ID: 1316 |ParentID: 584)
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (ID: 2092 |ParentID: 584)
C:\ProgramData\DatacardService\HWDeviceService64.exe (ID: 2136 |ParentID: 584)
C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (ID: 2504 |ParentID: 584)
C:\Windows\system32\svchost.exe (ID: 2552 |ParentID: 584)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (ID: 2596 |ParentID: 584)
C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (ID: 2648 |ParentID: 584)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (ID: 2828 |ParentID: 2596)
C:\Windows\system32\taskhost.exe (ID: 2336 |ParentID: 584)
C:\Windows\system32\Dwm.exe (ID: 3144 |ParentID: 360)
C:\Windows\Explorer.EXE (ID: 3164 |ParentID: 3120)
C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (ID: 3240 |ParentID: 584)
C:\Windows\system32\svchost.exe (ID: 3376 |ParentID: 584)
C:\Windows\system32\svchost.exe (ID: 3648 |ParentID: 584)
C:\ProgramData\DatacardService\DCSHelper.exe (ID: 4028 |ParentID: 2136)
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (ID: 3976 |ParentID: 3164)
C:\Program Files\IDT\WDM\sttray64.exe (ID: 1228 |ParentID: 3164)
C:\Program Files\Hewlett-Packard\HP LaunchBox\HPTaskBar1.exe (ID: 1004 |ParentID: 996)
C:\Program Files\Hewlett-Packard\HP LaunchBox\HPTaskBar2.exe (ID: 4112 |ParentID: 996)
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (ID: 4300 |ParentID: 3164)
C:\Windows\system32\taskeng.exe (ID: 4308 |ParentID: 400)
C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe (ID: 4420 |ParentID: 4240)
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (ID: 4476 |ParentID: 3976)
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe (ID: 4496 |ParentID: 4308)
C:\Windows\system32\SearchIndexer.exe (ID: 4532 |ParentID: 584)
C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe (ID: 4692 |ParentID: 4240)
C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe (ID: 4708 |ParentID: 4240)
C:\Windows\SysWOW64\RunDll32.exe (ID: 4716 |ParentID: 4300)
C:\Program Files\AVAST Software\Avast\AvastUI.exe (ID: 4752 |ParentID: 4240)
C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe (ID: 4856 |ParentID: 584)
C:\Users\Lucie\AppData\Roaming\Dropbox\bin\Dropbox.exe (ID: 5036 |ParentID: 3164)
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (ID: 5088 |ParentID: 4240)
C:\Program Files\Windows Media Player\wmpnetwk.exe (ID: 4132 |ParentID: 584)
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe (ID: 4172 |ParentID: 4240)
C:\Windows\system32\wbem\wmiprvse.exe (ID: 4528 |ParentID: 768)
C:\Program Files (x86)\iTunes\iTunesHelper.exe (ID: 4508 |ParentID: 4240)
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe (ID: 4448 |ParentID: 768)
C:\Windows\System32\svchost.exe (ID: 1056 |ParentID: 584)
C:\Program Files\iPod\bin\iPodService.exe (ID: 5124 |ParentID: 584)
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ID: 2308 |ParentID: 4412)
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (ID: 5380 |ParentID: 2308)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (ID: 5100 |ParentID: 3164)
C:\Windows\system32\DllHost.exe (ID: 3744 |ParentID: 768)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (ID: 4816 |ParentID: 5100)
C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe (ID: 5540 |ParentID: 584)
C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\ccSvcHst.exe (ID: 2536 |ParentID: 584)
C:\Windows\System32\svchost.exe (ID: 6124 |ParentID: 584)
C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\ccSvcHst.exe (ID: 4340 |ParentID: 2536)
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (ID: 376 |ParentID: 584)
C:\Windows\system32\svchost.exe (ID: 1152 |ParentID: 584)
C:\Program Files (x86)\Internet Explorer\IELowutil.exe (ID: 5216 |ParentID: 2580)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (ID: 4916 |ParentID: 5100)
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (ID: 5560 |ParentID: 5100)
C:\Windows\system32\taskeng.exe (ID: 6852 |ParentID: 400)
C:\ProgramData\HP Photo Creations\Communicator.exe (ID: 6100 |ParentID: 6852)
C:\Windows\System32\WUDFHost.exe (ID: 2860 |ParentID: 360)
C:\Windows\system32\wbem\wmiprvse.exe (ID: 6876 |ParentID: 768)

################## | Regedit Run |

04 - HKCU\..\Run : [Mobile Partner] C:\Program Files (x86)\Hotspot 4G BTelecom\Hotspot 4G BTelecom
04 - HKLM\..\Run : [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
04 - HKLM\..\Run : [HPQuickWebProxy] "C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe"
04 - HKLM\..\Run : [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
04 - HKLM\..\Run : [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
04 - HKLM\..\Run : [HP CoolSense] C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe -byrunkey
04 - HKLM\..\Run : [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
04 - HKLM\..\Run : [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
04 - HKLM\..\Run : [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
04 - HKLM\..\Run : [Magic Desktop for HP notification] "C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe"
04 - HKLM\..\Run : [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
04 - HKLM\..\Run : [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
04 - HKLM\..\Run : []
04 - HKLM\..\Run : [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
04 - HKLM\..\RunOnce : []
04 - HKLM64\..\Run : [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
04 - HKLM64\..\Run : [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe
04 - HKLM64\..\Run : [SetDefault] C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe
04 - HKLM64\..\RunOnce : [NCPluginUpdater] "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-21-3153483735-741697373-3214791728-1000\..\Run : [Mobile Partner] C:\Program Files (x86)\Hotspot 4G BTelecom\Hotspot 4G BTelecom
04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe

################## | Recherche générique |

Présent! F:\iTunesHelper.vbe
Présent! G:\iTunesHelper.vbe
Présent! F:\drome.lnk
Présent! F:\impots2013(rev2012).lnk
Présent! F:\.Spotlight-V100.lnk
Présent! G:\le_faux_fromage11.lnk
Présent! G:\.lnk
Présent! G:\.Spotlight-V100.lnk

################## | Registre |

Présent! HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer|EnableShellExecuteHooks -> 1

################## | E.O.F | http://www.usbfix.net/ - http://www.sosvirus.net |

[angelique]

oui tu peux faire suppression.

[luce28]

Merci Angelique!
Voilà le rapport...
############################## | UsbFix V 7.165 | [Suppression]

Utilisateur: Lucie (Administrateur) # LUCIE-HP
Mis à jour le 20/02/2014 par El Desaparecido - Team SosVirus
Lancé à 19:06:20 | 02/03/2014

Site Web : http://www.usbfix.net/
Changelog : http://www.usbfix.net/maj/
Support : http://www.sosvirus.net/
Upload Malware : http://www.sosvirus.net/upload_malware.php
Contact : http://www.usbfix.net/contact/

PC: Hewlett-Packard (3387)
CPU: AMD E-450 APU with Radeon(tm) HD Graphics
RAM -> [Total : 3689 Mo| Free : 2714 Mo]
Bios: Hewlett-Packard
Boot: Normal boot

OS: Microsoft Windows 7 Édition Familiale Premium (6.1.7601 64-Bit) Service Pack 1
WB: Windows Internet Explorer : 11.0.9600.16518
WB: Google Chrome : 33.0.1750.117
WB: Mozilla Firefox : 27.0.1

SC: Security Center [Enabled]
WU: Windows Update [Enabled]
AV: Norton Internet Security [(!) Disabled | (!) Outdated]
AV: avast! Antivirus [Enabled | Updated]
AS: Windows Defender [Enabled | Updated]
AS: avast! Antivirus [Enabled | Updated]
AS: Norton Internet Security [(!) Disabled | (!) Outdated]
FW: Norton Internet Security [(!) Disabled]
FW: Windows FireWall [Enabled]

C:\ (%systemdrive%) -> Disque fixe # 438 Go (370 Go libre(s) - 85%) [] # NTFS
D:\ -> Disque fixe # 23 Go (2 Go libre(s) - 11%) [Recovery] # NTFS
E:\ -> Disque fixe # 4 Go (1 Go libre(s) - 27%) [HP_TOOLS] # FAT32
F:\ -> Disque amovible # 245 Mo (138 Mo libre(s) - 56%) [BLA_POLYSOU] # FAT
G:\ -> Disque amovible # 982 Mo (904 Mo libre(s) - 92%) [LUCIE] # FAT32

################## | Processus Actif |

C:\Windows\system32\csrss.exe (ID: 416 |ParentID: 380)
C:\Windows\system32\wininit.exe (ID: 516 |ParentID: 380)
C:\Windows\system32\csrss.exe (ID: 528 |ParentID: 508)
C:\Windows\system32\services.exe (ID: 572 |ParentID: 516)
C:\Windows\system32\lsass.exe (ID: 588 |ParentID: 516)
C:\Windows\system32\lsm.exe (ID: 596 |ParentID: 516)
C:\Windows\system32\svchost.exe (ID: 704 |ParentID: 572)
C:\Windows\system32\winlogon.exe (ID: 756 |ParentID: 508)
C:\Windows\system32\svchost.exe (ID: 844 |ParentID: 572)
C:\Windows\system32\atiesrxx.exe (ID: 888 |ParentID: 572)
C:\Windows\System32\svchost.exe (ID: 968 |ParentID: 572)
C:\Windows\System32\svchost.exe (ID: 112 |ParentID: 572)
C:\Windows\system32\svchost.exe (ID: 352 |ParentID: 572)
C:\Windows\system32\svchost.exe (ID: 564 |ParentID: 572)
C:\Program Files\IDT\WDM\STacSV64.exe (ID: 312 |ParentID: 572)
C:\Windows\system32\svchost.exe (ID: 1336 |ParentID: 572)
C:\Windows\system32\atieclxx.exe (ID: 1372 |ParentID: 888)
C:\Program Files\AVAST Software\Avast\AvastSvc.exe (ID: 1452 |ParentID: 572)
C:\Windows\system32\WLANExt.exe (ID: 1464 |ParentID: 112)
C:\Windows\system32\conhost.exe (ID: 1476 |ParentID: 416)
C:\Windows\System32\spoolsv.exe (ID: 1688 |ParentID: 572)
C:\Windows\system32\taskeng.exe (ID: 1724 |ParentID: 564)
C:\Windows\system32\svchost.exe (ID: 1736 |ParentID: 572)
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (ID: 1892 |ParentID: 572)
C:\Program Files\IDT\WDM\AESTSr64.exe (ID: 1928 |ParentID: 572)
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (ID: 1956 |ParentID: 572)
C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (ID: 1208 |ParentID: 572)
C:\Program Files\Bonjour\mDNSResponder.exe (ID: 1600 |ParentID: 572)
C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (ID: 1764 |ParentID: 572)
C:\Windows\SysWOW64\ezSharedSvcHost.exe (ID: 1164 |ParentID: 572)
C:\Windows\system32\svchost.exe (ID: 336 |ParentID: 572)
C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe (ID: 2056 |ParentID: 572)
C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe (ID: 2124 |ParentID: 572)
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (ID: 2164 |ParentID: 572)
C:\ProgramData\DatacardService\HWDeviceService64.exe (ID: 2192 |ParentID: 572)
C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (ID: 2496 |ParentID: 572)
C:\Program Files (x86)\Skype\Updater\Updater.exe (ID: 2516 |ParentID: 572)
C:\Windows\system32\svchost.exe (ID: 2544 |ParentID: 572)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (ID: 2584 |ParentID: 572)
C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (ID: 2628 |ParentID: 572)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (ID: 2796 |ParentID: 2584)
C:\Windows\system32\taskhost.exe (ID: 3000 |ParentID: 572)
C:\Windows\system32\Dwm.exe (ID: 3064 |ParentID: 112)
C:\Windows\Explorer.EXE (ID: 2888 |ParentID: 3056)
C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (ID: 3356 |ParentID: 572)
C:\Windows\servicing\TrustedInstaller.exe (ID: 3472 |ParentID: 572)
C:\Windows\system32\svchost.exe (ID: 3496 |ParentID: 572)
C:\Windows\system32\svchost.exe (ID: 3696 |ParentID: 572)
C:\ProgramData\DatacardService\DCSHelper.exe (ID: 3996 |ParentID: 2192)
C:\Windows\System32\WUDFHost.exe (ID: 4048 |ParentID: 112)
C:\Windows\System32\rundll32.exe (ID: 2568 |ParentID: 704)
C:\Windows\system32\runonce.exe (ID: 3532 |ParentID: 2888)
C:\Windows\system32\taskeng.exe (ID: 2764 |ParentID: 564)
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe (ID: 3964 |ParentID: 2764)
C:\Windows\system32\wbem\wmiprvse.exe (ID: 984 |ParentID: 704)

################## | Regedit Run |

04 - HKCU\..\Run : [Mobile Partner] C:\Program Files (x86)\Hotspot 4G BTelecom\Hotspot 4G BTelecom
04 - HKLM\..\Run : [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
04 - HKLM\..\Run : [HPQuickWebProxy] "C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe"
04 - HKLM\..\Run : [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
04 - HKLM\..\Run : [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
04 - HKLM\..\Run : [HP CoolSense] C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe -byrunkey
04 - HKLM\..\Run : [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
04 - HKLM\..\Run : [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
04 - HKLM\..\Run : [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
04 - HKLM\..\Run : [Magic Desktop for HP notification] "C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe"
04 - HKLM\..\Run : [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
04 - HKLM\..\Run : [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
04 - HKLM\..\Run : []
04 - HKLM\..\Run : [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
04 - HKLM64\..\Run : [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
04 - HKLM64\..\Run : [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe
04 - HKLM64\..\Run : [SetDefault] C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe
04 - HKLM64\..\RunOnce : [NCPluginUpdater] "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-21-3153483735-741697373-3214791728-1000\..\Run : [Mobile Partner] C:\Program Files (x86)\Hotspot 4G BTelecom\Hotspot 4G BTelecom
04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe

################## | Recherche générique |

Supprimé! F:\iTunesHelper.vbe
Supprimé! G:\iTunesHelper.vbe
Supprimé! F:\drome.lnk
Supprimé! F:\impots2013(rev2012).lnk
Supprimé! F:\.Spotlight-V100.lnk
Supprimé! G:\le_faux_fromage11.lnk
Supprimé! G:\.lnk
Supprimé! G:\.Spotlight-V100.lnk

(!) Fichiers temporaires supprimés.

################## | Registre |

Réparé ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|EnableLUA -> 1
Réparé ! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|ConsentPromptBehaviorAdmin -> 5
Réparé ! HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer|EnableShellExecuteHooks -> 0
Supprimé! HKU\S-1-5-21-3153483735-741697373-3214791728-1000\Software\.\.\.\.\Mountpoints2\F
Supprimé! HKU\S-1-5-21-3153483735-741697373-3214791728-1000\Software\.\.\.\.\Mountpoints2\{53ebf1ab-90ca-11e3-b8dd-642737c03973}
Supprimé! HKU\S-1-5-21-3153483735-741697373-3214791728-1000\Software\.\.\.\.\Mountpoints2\{d40065eb-8fe7-11e3-ae39-642737c03973}

################## | Listing |

[08/02/2014 - 15:36:17 | SHD] - C:\$Recycle.Bin
[23/10/2011 - 21:22:23 | SHD] - C:\boot
[21/11/2010 - 04:23:51 | RASH | 375 Ko] - C:\bootmgr
[27/02/2014 - 23:16:44 | D] - C:\Config.Msi
[14/07/2009 - 06:08:56 | SHD] - C:\Documents and Settings
[02/03/2014 - 19:04:20 | ASH | 2833464 Ko] - C:\hiberfil.sys
[03/02/2012 - 01:26:57 | D] - C:\HP
[07/09/2013 - 17:37:25 | RHD] - C:\MSOCache
[02/03/2014 - 19:04:23 | ASH | 3777952 Ko] - C:\pagefile.sys
[14/07/2009 - 04:20:08 | D] - C:\PerfLogs
[18/02/2014 - 11:55:21 | D] - C:\Program Files
[26/02/2014 - 19:57:01 | D] - C:\Program Files (x86)
[26/02/2014 - 19:57:03 | HD] - C:\ProgramData
[27/08/2013 - 19:09:28 | SHD] - C:\Recovery
[03/02/2014 - 20:15:27 | D] - C:\SWSetup
[27/02/2014 - 22:30:43 | SHD] - C:\System Volume Information
[27/08/2013 - 19:09:35 | D] - C:\SYSTEM.SAV
[22/02/2014 - 18:31:08 | D] - C:\UsbFix
[02/03/2014 - 19:19:01 | A | 9 Ko | F64E3DE5F73714F06399E982778BEFF6] - C:\UsbFix [Clean 2] LUCIE-HP.txt
[22/02/2014 - 18:46:31 | N | 11 Ko | A992AA5599F3F8A4111D55F2CF6BD599] - C:\UsbFix [Scan 1] LUCIE-HP.txt
[27/08/2013 - 19:07:48 | D] - C:\Users
[27/02/2014 - 22:30:01 | D] - C:\Windows
[24/03/2012 - 13:21:30 | SHD] - D:\$RECYCLE.BIN
[24/03/2012 - 13:21:23 | RASHD] - D:\boot
[14/07/2009 - 19:39:00 | RASH | 375 Ko] - D:\bootmgr
[23/05/2010 - 13:55:46 | RASH | 0 Ko] - D:\Desktop.ini
[24/03/2012 - 13:21:23 | D] - D:\FactoryUpdate
[24/03/2012 - 13:21:23 | D] - D:\hp
[25/03/2012 - 12:48:34 | N | 0 Ko | E27E0A9CB4D3B735D42E5C7682833DA6] - D:\HPSF_Rep.txt
[24/03/2012 - 13:17:06 | N | 0 Ko] - D:\HP_WSD.dat
[24/03/2012 - 13:21:23 | RSHD] - D:\preload
[27/08/2013 - 19:09:35 | RSD] - D:\recovery
[24/03/2012 - 13:21:23 | D] - D:\RM_Reserve
[12/12/2013 - 08:26:08 | SHD] - D:\System Volume Information
[23/06/2013 - 15:50:10 | D] - E:\Hewlett-Packard
[03/02/2012 - 01:33:50 | SHD] - E:\$RECYCLE.BIN
[11/12/2013 - 14:49:20 | N | 0 Ko] - E:\HP_WSD.dat
[25/03/2012 - 13:48:36 | N | 0 Ko | E27E0A9CB4D3B735D42E5C7682833DA6] - E:\HPSF_Rep.txt
[18/01/2011 - 07:59:10 | SH | 4 Ko] - F:\._.Trashes
[02/12/2013 - 05:57:28 | N | 27 Ko] - F:\annonce.odt
[18/01/2011 - 07:59:10 | SHD] - F:\.Trashes
[02/12/2013 - 10:39:42 | N | 21 Ko] - F:\annonce.docx
[18/01/2011 - 07:59:10 | SHD] - F:\.Spotlight-V100
[08/11/2013 - 11:39:28 | N | 15 Ko] - F:\lettre_motivation_crieppam2013.docx
[04/11/2013 - 13:37:28 | N | 15 Ko] - F:\lettre_motivation_acta2013.docx
[09/02/2014 - 12:23:40 | N | 40 Ko] - F:\cvluciebicrel.docx
[01/12/2013 - 21:58:44 | N | 207 Ko] - F:\6-Maraich bio et biodyn janv2014.pdf
[01/12/2013 - 22:00:40 | N | 205 Ko] - F:\7-Phytothrapie vgtale fev2014.pdf
[09/02/2011 - 14:14:08 | N | 13 Ko] - F:\~WRL3870.tmp
[04/10/2011 - 13:36:56 | N | 5008 Ko] - F:\.HPIMAGE.VFS
[04/02/2014 - 08:36:08 | N | 16 Ko] - F:\lettre_motivation_Senura2014.docx
[11/03/2011 - 12:49:54 | N | 0 Ko] - F:\~$Lignine et transgénèse.pptx
[05/02/2014 - 15:09:18 | N | 66 Ko] - F:\ANNONCE Expérimentation Eurofins - janvier 2014.pdf
[05/02/2014 - 15:11:58 | N | 14 Ko] - F:\ccparm.docx
[05/02/2014 - 15:14:16 | N | 14 Ko] - F:\drome.docx
[05/02/2014 - 15:31:36 | N | 54 Ko] - F:\sitecpparm.docx
[08/02/2014 - 20:54:10 | N | 35 Ko] - F:\impots2013(rev2012).pdf
[06/02/2014 - 17:42:26 | N | 33911 Ko] - F:\Présentation1.pptx
[24/10/2013 - 15:11:36 | N | 96 Ko] - F:\avis impots 2012 (rev2011).pdf
[10/02/2014 - 16:59:48 | N | 40 Ko] - G:\cvluciebicrel.docx
[06/01/2011 - 17:42:28 | SHD] - G:\.Trashes
[11/02/2014 - 16:45:44 | N | 639 Ko] - G:\le_faux_fromage11.ppsm
[11/02/2014 - 16:40:44 | N | 834 Ko] - G:\le_faux_fromage11.pps
[14/08/2013 - 12:31:40 | D] - G:\à trier
[06/01/2011 - 17:42:28 | SH | 4 Ko] - G:\._.Trashes
[06/01/2011 - 17:42:28 | SHD] - G:\.Spotlight-V100
[31/10/2013 - 10:29:18 | D] - G:\Avis d'imposition - Impôt sur le revenu - 2011_fichiers
[08/11/2013 - 11:12:24 | D] - G:\rechemploi

################## | Vaccin |

D:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
E:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
F:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
G:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)

################## | E.O.F | http://www.usbfix.net/ - http://www.sosvirus.net |

[angelique]

ç'est OK alors onglet desinstallation dans usbfix