FORUM D’ENTRAIDE INFORMATIQUE (FEI)Site d’assistance et de sécurité informatique

[déhais]

Bonjour,

Premier pas sur un forum,
je suis infecté avec ituneshelper, j'ai installer Usbfix ou dois je poster le rapport.
Merci de votre réponse.

[2011N2]

Bonjour,



Fais un copié/collé du rapport dans ta prochaine réponse.

Gabriel.

[déhais]

Merci Gabriel voici le rapport:
############################## | UsbFix V 7.152 | [Research]

User: Administrator (Administrator) # EZC-2
Updated 20/11/2013 by El Desaparecido - Team SosVirus
Started at 10:27:11 | 20/01/2014

Website : http://www.en.usbfix.net
Forum : http://www.sosvirus.net/
Upload Malware : http://www.sosvirus.net/upload_malware.php
Contact : http://www.en.usbfix.net/contact/

PC: Supermicro (PDSBA)
CPU: Intel(R) Pentium(R) 4 CPU 3.40GHz
CPU: Intel(R) Pentium(R) 4 CPU 3.40GHz
RAM - [Total : 2038 | Free : 1502]
Bios: Phoenix Technologies LTD
Boot: Normal boot

OS: Microsoft Windows XP Professional (5.1.2600 32-Bit) Service Pack 2
WB: Windows Internet Explorer : 6.0.2900.2180

SC: Security Center Service [Enabled]
WU: Windows Update Service [Enabled]
FW: Windows FireWall Service [Enabled]

C:\ (%systemdrive%) - Fixed drive # 233 Gb (166 Mb free - 71%) [] # NTFS
D:\ - CD-ROM
E:\ - Removable drive # 4 Gb (485 Mb free - 13%) [] # FAT32
J:\ - Removable drive # 4 Gb (3 Mb free - 90%) [] # FAT32

################## | Active Processes |

C:\WINDOWS\System32\smss.exe (ID: 632 |ParentID: 4)
C:\WINDOWS\system32\winlogon.exe (ID: 776 |ParentID: 632)
C:\WINDOWS\system32\services.exe (ID: 820 |ParentID: 776)
C:\WINDOWS\system32\lsass.exe (ID: 832 |ParentID: 776)
C:\WINDOWS\system32\svchost.exe (ID: 992 |ParentID: 820)
C:\WINDOWS\System32\svchost.exe (ID: 1224 |ParentID: 820)
C:\WINDOWS\system32\spoolsv.exe (ID: 1628 |ParentID: 820)
C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe (ID: 1996 |ParentID: 820)
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (ID: 312 |ParentID: 820)
C:\Noritsukoki\EZ_Controller\Controller\Bin\ScsiAccess.EXE (ID: 504 |ParentID: 820)
C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe (ID: 612 |ParentID: 820)
C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe (ID: 1176 |ParentID: 820)
C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Security Runtime\sntlsrtsrvr.exe (ID: 1208 |ParentID: 820)
C:\WINDOWS\system32\svchost.exe (ID: 1636 |ParentID: 820)
C:\Noritsukoki\Printer\IJCommon\Bin\StsInfoSvc.exe (ID: 624 |ParentID: 820)
C:\WINDOWS\Explorer.EXE (ID: 1088 |ParentID: 956)
C:\WINDOWS\system32\igfxtray.exe (ID: 1916 |ParentID: 1088)
C:\WINDOWS\system32\hkcmd.exe (ID: 1920 |ParentID: 1088)
C:\WINDOWS\system32\igfxpers.exe (ID: 1760 |ParentID: 1088)
C:\WINDOWS\RTHDCPL.EXE (ID: 2052 |ParentID: 1088)
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ID: 2356 |ParentID: 1088)
C:\Program Files\EIZO\ScreenManager Pro for LCD\Lcdctrl.exe (ID: 2396 |ParentID: 1088)
C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe (ID: 2404 |ParentID: 1088)
C:\WINDOWS\system32\rundll32.exe (ID: 2432 |ParentID: 1088)
C:\WINDOWS\system32\wscript.exe (ID: 2488 |ParentID: 1088)
C:\WINDOWS\system32\ctfmon.exe (ID: 2520 |ParentID: 1088)
C:\Program Files\Messenger\msmsgs.exe (ID: 2552 |ParentID: 1088)
C:\WINDOWS\system32\wscntfy.exe (ID: 2656 |ParentID: 1224)
C:\SysCap\SystemCap.exe (ID: 2712 |ParentID: 1088)
C:\Noritsukoki\Common\ErrorModule\Bin\ErrorModule.exe (ID: 3528 |ParentID: 2704)
C:\Noritsukoki\Common\NoritsuHelper\Bin\NOritsuHelper.exe (ID: 4024 |ParentID: 2704)
C:\Noritsukoki\Common\NoritsuSwitcher\Bin\Switcher.exe (ID: 4084 |ParentID: 2704)
C:\UsbFix\Go.exe (ID: 1364 |ParentID: 4060)

################## | Regedit Run |

04 - HKLM\SOFTWARE | Run : [IMJPMIG8.1] - "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
04 - HKLM\SOFTWARE | Run : [MSPY2002] - C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
04 - HKLM\SOFTWARE | Run : [PHIME2002ASync] - C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
04 - HKLM\SOFTWARE | Run : [PHIME2002A] - C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
04 - HKLM\SOFTWARE | Run : [IgfxTray] - C:\WINDOWS\system32\igfxtray.exe
04 - HKLM\SOFTWARE | Run : [HotKeysCmds] - C:\WINDOWS\system32\hkcmd.exe
04 - HKLM\SOFTWARE | Run : [Persistence] - C:\WINDOWS\system32\igfxpers.exe
04 - HKLM\SOFTWARE | Run : [RTHDCPL] - RTHDCPL.EXE
04 - HKLM\SOFTWARE | Run : [SkyTel] - SkyTel.EXE
04 - HKLM\SOFTWARE | Run : [Alcmtr] - ALCMTR.EXE
04 - HKLM\SOFTWARE | Run : [egui] - "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
04 - HKLM\SOFTWARE | Run : [ScreenManager Pro for LCD] - C:\Program Files\EIZO\ScreenManager Pro for LCD\Lcdctrl.exe
04 - HKLM\SOFTWARE | Run : [EEventManager] - C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
04 - HKLM\SOFTWARE | Run : [BluetoothAuthenticationAgent] - rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
04 - HKLM\SOFTWARE | Run : [iTunesHelper] - wscript.exe //B "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\iTunesHelper.vbe"
04 - HKLM\SOFTWARE | RunOnce : [] -
04 - HKU\S-1-5-21-2635487792-1271515735-3474014198-500\SOFTWARE | Run : [ctfmon.exe] - C:\WINDOWS\system32\ctfmon.exe
04 - HKU\S-1-5-21-2635487792-1271515735-3474014198-500\SOFTWARE | Run : [MSMSGS] - "C:\Program Files\Messenger\msmsgs.exe" /background
04 - HKU\S-1-5-21-2635487792-1271515735-3474014198-500\SOFTWARE | Run : [iTunesHelper] - wscript.exe //B "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\iTunesHelper.vbe"
04 - HKU\S-1-5-18\SOFTWARE | Run : [CTFMON.EXE] - C:\WINDOWS\system32\CTFMON.EXE

################## | Generic Research |

Found ! C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\iTunesHelper.vbe
Found ! C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\iTunesHelper.vbe
Found ! E:\iTunesHelper.vbe
Found ! J:\iTunesHelper.vbe
Found ! E:\Toy Story 3.lnk
Found ! E:\Toy Story 2.lnk
Found ! E:\DCIM.lnk
Found ! E:\Vac lulu.lnk
Found ! E:\affinites_photos_sarl.lnk
Found ! E:\NIKON001.lnk
Found ! J:\photo.lnk
Found ! J:\NIKON001.lnk
Found ! J:\DCIM.lnk

################## | Reference of comparison MD5 |

Md5 : AED4FAF279ABF7D7605E81707BE3CE64 - C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\iTunesHelper.vbe
Md5 : AED4FAF279ABF7D7605E81707BE3CE64 - C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\iTunesHelper.vbe
Md5 : AF16FC297EC5B6836E60449498BF0F59 - E:\iTunesHelper.vbe
Md5 : AED4FAF279ABF7D7605E81707BE3CE64 - J:\iTunesHelper.vbe
Md5 : AED4FAF279ABF7D7605E81707BE3CE64 - C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\iTunesHelper.vbe

################## | Comparison MD5 |

Found ! Md5 : AED4FAF279ABF7D7605E81707BE3CE64 - C:\Documents and Settings\Administrator\Local Settings\Temp\iTunesHelper.vbe
Found ! Md5 : AED4FAF279ABF7D7605E81707BE3CE64 - C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\iTunesHelper.vbe
Found ! Md5 : AF16FC297EC5B6836E60449498BF0F59 - E:\iTunesHelper.vbe
Found ! Md5 : AED4FAF279ABF7D7605E81707BE3CE64 - J:\iTunesHelper.vbe

################## | Registry |

Found ! HKLM\Software\iTunesHelper
Found ! HKLM\Software\iTunesHelper
Found ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\Microsoft\Windows\CurrentVersion\Run|iTunesHelper
Found ! HKCU\Software\Microsoft\Windows\CurrentVersion\Run|iTunesHelper
Found ! HKLM\Software\Microsoft\Windows\CurrentVersion\Run|iTunesHelper

################## | Vaccin |

(!) This computer is not vaccinated!

################## | E.O.F | http://www.usbfix.net - http://www.sosvirus.net |

[2011N2]

Re,

Tu utilises une version obsolète du logiciel.
Supprime-le, puis télécharge-le de nouveau et recommence l'opération.

Gabriel.

[déhais]

Ok merci je cherche la nouvelle version

[déhais]

Voici le nouveau rapport
############################## | UsbFix V 7.161 | [Research]

User: Administrator (Administrator) # EZC-2
Updated 15/01/2014 by El Desaparecido - Team SosVirus
Started at 12:11:13 | 20/01/2014

Website : http://www.en.usbfix.net
Changelog : http://www.usbfix.net/maj/
Support : http://www.sosvirus.net/
Upload Malware : http://www.sosvirus.net/upload_malware.php
Contact : http://www.en.usbfix.net/contact/

PC: Supermicro (PDSBA)
CPU: Intel(R) Pentium(R) 4 CPU 3.40GHz
CPU: Intel(R) Pentium(R) 4 CPU 3.40GHz
RAM - [Total : 2038 Mo| Free : 1630 Mo]
Bios: Phoenix Technologies LTD
Boot: Normal boot

OS: Microsoft Windows XP Professional (5.1.2600 32-Bit) Service Pack 2
WB: Windows Internet Explorer : 6.0.2900.2180

SC: Security Center Service [Enabled]
WU: Windows Update Service [Enabled]
FW: Windows FireWall Service [Enabled]

C:\ (%systemdrive%) - Fixed drive # 233 Gb (166 Mb free - 71%) [] # NTFS
D:\ - CD-ROM
E:\ - Removable drive # 4 Gb (485 Mb free - 13%) [] # FAT32
J:\ - Removable drive # 4 Gb (3 Mb free - 90%) [] # FAT32

################## | Active Processes |

C:\WINDOWS\System32\smss.exe (ID: 632 |ParentID: 4)
C:\WINDOWS\system32\winlogon.exe (ID: 776 |ParentID: 632)
C:\WINDOWS\system32\services.exe (ID: 820 |ParentID: 776)
C:\WINDOWS\system32\lsass.exe (ID: 832 |ParentID: 776)
C:\WINDOWS\system32\svchost.exe (ID: 992 |ParentID: 820)
C:\WINDOWS\System32\svchost.exe (ID: 1224 |ParentID: 820)
C:\WINDOWS\system32\svchost.exe (ID: 1636 |ParentID: 820)
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (ID: 2172 |ParentID: 820)
C:\WINDOWS\system32\wscntfy.exe (ID: 3012 |ParentID: 1224)
C:\WINDOWS\system32\spoolsv.exe (ID: 440 |ParentID: 820)
C:\WINDOWS\Explorer.exe (ID: 2464 |ParentID: 1364)

################## | Regedit Run |

04 - HKLM\..\Run : [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
04 - HKLM\..\Run : [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
04 - HKLM\..\Run : [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
04 - HKLM\..\Run : [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
04 - HKLM\..\Run : [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
04 - HKLM\..\Run : [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
04 - HKLM\..\Run : [Persistence] C:\WINDOWS\system32\igfxpers.exe
04 - HKLM\..\Run : [RTHDCPL] RTHDCPL.EXE
04 - HKLM\..\Run : [SkyTel] SkyTel.EXE
04 - HKLM\..\Run : [Alcmtr] ALCMTR.EXE
04 - HKLM\..\Run : [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
04 - HKLM\..\Run : [ScreenManager Pro for LCD] C:\Program Files\EIZO\ScreenManager Pro for LCD\Lcdctrl.exe
04 - HKLM\..\Run : [EEventManager] C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
04 - HKLM\..\Run : [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
04 - HKLM\..\Run : [iTunesHelper] wscript.exe //B "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\iTunesHelper.vbe"
04 - HKLM\..\RunOnce : []
04 - HKLM\Software\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\..\Run : []
04 - HKLM\Software\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\..\RunOnce : []
04 - HKU\S-1-5-21-2635487792-1271515735-3474014198-500\..\Run : [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
04 - HKU\S-1-5-21-2635487792-1271515735-3474014198-500\..\Run : [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
04 - HKU\S-1-5-21-2635487792-1271515735-3474014198-500\..\Run : [iTunesHelper] wscript.exe //B "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\iTunesHelper.vbe"
04 - HKU\S-1-5-18\..\Run : [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE

################## | Generic Research |

Found ! C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\iTunesHelper.vbe
Found ! C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\iTunesHelper.vbe
Found ! E:\iTunesHelper.vbe
Found ! J:\iTunesHelper.vbe
Found ! E:\Toy Story 3.lnk
Found ! E:\Toy Story 2.lnk
Found ! E:\DCIM.lnk
Found ! E:\Vac lulu.lnk
Found ! E:\affinites_photos_sarl.lnk
Found ! E:\NIKON001.lnk
Found ! J:\photo.lnk
Found ! J:\NIKON001.lnk
Found ! J:\DCIM.lnk

################## | Registry |

Found ! HKLM\Software\iTunesHelper
Found ! HKLM64\Software\iTunesHelper
Found ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\Microsoft\Windows\CurrentVersion\Run|iTunesHelper
Found ! HKLM\Software\Microsoft\Windows\CurrentVersion\Run|iTunesHelper
Found ! HKLM64\Software\Microsoft\Windows\CurrentVersion\Run|iTunesHelper
Found ! HKCU\Software\Microsoft\Windows\CurrentVersion\Run|iTunesHelper

################## | Vaccin |


################## | E.O.F | http://www.usbfix.net - http://www.sosvirus.net |

[2011N2]

Re,

Passe-le en Suppression et poste le rapport.

Gabriel.

[déhais]

voici le rapport de suppression
############################## | UsbFix V 7.161 | [Deletion]

User: Administrator (Administrator) # EZC-2
Updated 15/01/2014 by El Desaparecido - Team SosVirus
Started at 12:20:13 | 20/01/2014

Website : http://www.en.usbfix.net
Changelog : http://www.usbfix.net/maj/
Support : http://www.sosvirus.net/
Upload Malware : http://www.sosvirus.net/upload_malware.php
Contact : http://www.en.usbfix.net/contact/

PC: Supermicro (PDSBA)
CPU: Intel(R) Pentium(R) 4 CPU 3.40GHz
CPU: Intel(R) Pentium(R) 4 CPU 3.40GHz
RAM - [Total : 2038 Mo| Free : 1650 Mo]
Bios: Phoenix Technologies LTD
Boot: Normal boot

OS: Microsoft Windows XP Professional (5.1.2600 32-Bit) Service Pack 2
WB: Windows Internet Explorer : 6.0.2900.2180

SC: Security Center Service [Enabled]
WU: Windows Update Service [Enabled]
FW: Windows FireWall Service [Enabled]

C:\ (%systemdrive%) - Fixed drive # 233 Gb (166 Mb free - 71%) [] # NTFS
D:\ - CD-ROM
E:\ - Removable drive # 4 Gb (485 Mb free - 13%) [] # FAT32
J:\ - Removable drive # 4 Gb (3 Mb free - 90%) [] # FAT32

################## | Stopped processes |

Stopped! C:\WINDOWS\Explorer.exe (ID: 2464 |ParentID: 1364)
Stopped! C:\WINDOWS\system32\wscntfy.exe (ID: 3660 |ParentID: 1224)
Stopped! C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (ID: 1640 |ParentID: 820)
Stopped! C:\WINDOWS\system32\spoolsv.exe (ID: 2880 |ParentID: 820)

################## | Regedit Run |

04 - HKLM\..\Run : [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
04 - HKLM\..\Run : [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
04 - HKLM\..\Run : [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
04 - HKLM\..\Run : [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
04 - HKLM\..\Run : [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
04 - HKLM\..\Run : [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
04 - HKLM\..\Run : [Persistence] C:\WINDOWS\system32\igfxpers.exe
04 - HKLM\..\Run : [RTHDCPL] RTHDCPL.EXE
04 - HKLM\..\Run : [SkyTel] SkyTel.EXE
04 - HKLM\..\Run : [Alcmtr] ALCMTR.EXE
04 - HKLM\..\Run : [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
04 - HKLM\..\Run : [ScreenManager Pro for LCD] C:\Program Files\EIZO\ScreenManager Pro for LCD\Lcdctrl.exe
04 - HKLM\..\Run : [EEventManager] C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
04 - HKLM\..\Run : [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
04 - HKLM\..\Run : [iTunesHelper] wscript.exe //B "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\iTunesHelper.vbe"
04 - HKLM\..\RunOnce : []
04 - HKLM\Software\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\..\Run : []
04 - HKLM\Software\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\..\RunOnce : []
04 - HKU\S-1-5-21-2635487792-1271515735-3474014198-500\..\Run : [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
04 - HKU\S-1-5-21-2635487792-1271515735-3474014198-500\..\Run : [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
04 - HKU\S-1-5-21-2635487792-1271515735-3474014198-500\..\Run : [iTunesHelper] wscript.exe //B "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\iTunesHelper.vbe"
04 - HKU\S-1-5-18\..\Run : [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE

################## | Generic Research |

Deleted ! C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\iTunesHelper.vbe
Deleted ! C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\iTunesHelper.vbe
Deleted ! E:\iTunesHelper.vbe
Deleted ! J:\iTunesHelper.vbe
Deleted ! E:\Toy Story 3.lnk
Deleted ! E:\Toy Story 2.lnk
Deleted ! E:\DCIM.lnk
Deleted ! E:\Vac lulu.lnk
Deleted ! E:\affinites_photos_sarl.lnk
Deleted ! E:\NIKON001.lnk
Deleted ! J:\photo.lnk
Deleted ! J:\NIKON001.lnk
Deleted ! J:\DCIM.lnk

(!) Temporary files deleted.

################## | Registry |

Deleted ! HKLM\Software\iTunesHelper
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\Microsoft\Windows\CurrentVersion\Run|iTunesHelper
Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Run|iTunesHelper
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{00bdd031-67b4-11e2-9016-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{06fcf6ff-06e0-11e2-8fa9-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{076baeb7-cb33-11e1-8f68-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{081eec1b-46c0-11e3-9109-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{0912e1f2-e942-11df-8d7a-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{0912e1f6-e942-11df-8d7a-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{0912e202-e942-11df-8d7a-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{0dc9f547-e905-11e0-8e6f-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{0ef5eaa8-bdff-11e2-9070-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{15e6d0f3-5d41-11e1-8ef2-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{21bf96ea-f8c1-11e1-8f98-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{2411b9b2-07c8-11e2-8faa-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{2494bc6c-256b-11e1-8eb1-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{24976d20-80cb-11e2-9031-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{29caa29e-c5be-11e0-8e49-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{2ad9d3dd-d764-11e2-908a-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{2bdf6b4f-e877-11df-8d79-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{2e194a20-9b6c-11e2-904c-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{382c6db0-a3e9-11e1-8f3c-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{3c30f8c2-7b0c-11e0-8dfb-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{404dadec-77fa-11e1-8f10-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{4099adcb-2b3b-11e3-90ea-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{4609d659-3952-11e2-8fe2-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{46843450-5a23-11e1-8eec-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{4c2788e7-363c-11e3-90f6-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{52b47d4a-8f82-11e1-8f29-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{55b96d22-9e63-11e0-8e22-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{59c12e32-eace-11e2-90a2-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{5ee78ffb-2631-11e1-8eb2-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{67b50c80-e213-11e1-8f7f-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{694a8a61-4282-11e1-8ed1-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{6994de6b-f82d-11e1-8f97-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{7e674f0f-56f6-11e1-8ee7-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{817660a4-360c-11e2-8fdf-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{8772813b-2d7e-11e2-8fd5-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{8af1eaf4-5c33-11e0-8dd9-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{8b40a70e-5029-11e2-8ffd-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{926f4c2a-eadd-11df-8d7b-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{92d574d4-2342-11e2-8fc9-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{93213c0e-0578-11e1-8e8f-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{99205267-c9c8-11e1-8f66-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{a2fe894c-484a-11e2-8ff3-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{a633586d-ecfa-11e1-8f89-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{b28a7796-12c5-11e2-8fb6-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{bae9f590-182f-11e1-8ea3-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{bea61b4d-c912-11e2-907b-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{bfe8eaba-2a2a-11e1-8eb6-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{c453fbe9-dae4-11e1-8f78-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{c64a7f6b-4611-11e3-9108-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{c94e40a7-4c17-11e2-8ff8-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{c9ce831b-e9b7-11e0-8e70-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{d30bfbbf-ea3d-11e2-90a1-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{dfb764ba-b2c8-11e0-8e37-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{e307ed5c-8318-11e2-9034-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{efe278be-b6d0-11e1-8f51-002590034197}
Deleted ! HKU\S-1-5-21-2635487792-1271515735-3474014198-500\Software\.\.\.\.\Mountpoints2\{fa43944c-bebc-11e1-8f5a-002590034197}

################## | Listing |

[28/01/2007 - 23:37:32 | A | 0 Ko] - C:\AUTOEXEC.BAT
[19/10/2011 - 10:12:11 | D] - C:\Backup
[18/10/2013 - 12:03:59 | D] - C:\BandingDebug
[25/11/2013 - 13:11:20 | ASH | 0 Ko] - C:\boot.ini
[28/01/2007 - 23:37:32 | N | 0 Ko] - C:\CONFIG.SYS
[27/07/2010 - 02:14:22 | D] - C:\Documents and Settings
[13/06/2013 - 13:35:33 | D] - C:\EditData
[20/10/2011 - 10:07:05 | N | 0 Ko] - C:\EzcCmnInstaller.log
[20/10/2011 - 10:08:50 | N | 0 Ko] - C:\EzcFmtInstaller.log
[20/10/2011 - 10:07:23 | N | 0 Ko] - C:\EzcImgInstaller.log
[18/01/2014 - 11:44:37 | D] - C:\EZController_Orde

[déhais]

Merci tout est ok

[2011N2]

Re,

Bien.

Souhaites-tu vérifier si ton PC n'est pas infecté par d'autres éléments ?

Gabriel.

[Dori@n]

Où en-est votre problème ?

Deux solutions,

• Votre problème est résolu, dans ce cas pensez à nous en faire part.
• Votre problème est toujours d'actualité, merci de nous renseigner sur ce qui ne va pas, et donner des nouvelles régulièrement.
  
  
  À bientôt sur FEI !

[Dori@n]

Bonjour,

Nous n'avons plus de nouvelle de l'auteur de ce sujet depuis plus de 10 jours. Nous considérons donc ce problème comme résolu ou abandonné par son auteur. La prochaine fois, merci de nous tenir au courant de l'évolution de votre problème, ou à faire un UP régulièrement !

Ce sujet est verrouillé, si vous souhaitez le reprendre, merci de contacter par message privé un membre de l'équipe de modération du forum.

À bientôt sur FEI !

[WARRIORXAV]

Bonjour,

Le sujet est à présent résolu, nous nous chargeons donc de le mettre en résolu et nous le verrouillons.
Vous pouvez si vous le souhaitez, mettre en valeur les messages ayant résolu votre problème comme ceci : http://www.forum-entraide-informatique. ... onse-utile

Cela permettra une meilleure visibilité du sujet pour les autres utilisateurs ayant le même souci.

Si le forum vous a aider dans la résolution de votre problème et que vous souhaitez le remercier, vous avez la possibilité de faire un don afin de l'encourager dans ses démarches en cliquant sur le bouton suivant :




Vous pouvez aussi suivre FEI sur Facebook en cliquant sur J'aime ci-dessous :



Merci d'avance,
À bientôt sur FEI !