UsbFix Report

[b]############################## | UsbFix V 7.
812 | [Clean][/b]
User: Acer (Administrator) # ACER-PC
Updated 03/02/2015 by El Desaparecido - SosVirus
Started at 23:09:00 | 07/02/2015
Website : [url=http://www.en.usbfix.net/]http://www.en.usbfix.net/[/url]
Changelog : [url=http://www.en.usbfix.net/changelog/]http://www.en.usbfix.net/ch
angelog/[/url]
Support : [url=http://www.sos-virus.net/]http://www.sos-virus.net/[/url]
Live detection : [url=http://how-to-remove.us/]http://how-to-remove.us/[/url]
Contact : [url=http://www.en.usbfix.net/contact/]http://www.en.usbfix.net/contac
t/[/url]
[b]################## | System information |[/b]
MB: Acer (EA40_HW)
CPU: Intel(R) Core(TM) i5-4200U CPU @ 1.60GHz
GC: Intel(R) HD Graphics Family
RAM -> [Total : 3909 Mo | Free : 1055 Mo]
Bios: Phoenix Technologies Ltd.
Boot: Normal boot
OS:
WB:
WB:
WB:
Microsoft? Windows 8 Single Language (6.2.9200 64-Bit)

Internet Explorer : 10.00.9200.16384
Google Chrome : 41.0.2251.0
Mozilla Firefox : 36.0
[b]################## | Security Information |[/b]

AV:
AV:
AS:
AS:
AS:
FW:
SC:
WU:
ESET NOD32 Antivirus 7.0 [[b](!) Disabled[/b] |[b](!) Outdated[/b]]

Windows Defender [[b](!) Disabled[/b] |Updated]
Windows Defender [[b](!) Disabled[/b] |Updated]
ESET NOD32 Antivirus 7.0 [Enabled |[b](!) Outdated[/b]]
Malwarebytes Anti-Malware : 2.0.4.1028
Windows Firewall [Enabled]
Security Center [Enabled]
Windows Update [Enabled]
[b]################## | Disk Information |[/b]

C:\
D:\
F:\
G:\
(%SystemDrive%) -> Fixed disk # 342 Gb (261 Gb free - 76%) [Acer] # NTFS
-> Fixed disk # 243 Gb (214 Gb free - 88%) [Data & Document] # NTFS
-> Removable disk # 14 Gb (14 Gb free - 100%) [DENNIS_TEH] # FAT32
-> CD-ROM # 883 Mb (0 Mb free - 0%) [Ubuntu 13.10 amd] # CDFS
[b]################## | Generic Research |[/b]

Deleted! F:\SecureBrowsing.lnk
(!) Temporary files deleted. (235.399959564209 MB)
[b]################## | Registry |[/b]
Deleted! HKU\S-1-5-21-3071853377-3076908593-3284045495-1002\Software\Microsoft\W
indows\CurrentVersion\Run|CTFMON
Deleted! HKU\S-1-5-21-3071853377-3076908593-3284045495-1002-{ED1FC765-E35E-4C3DBF15-2C2B11260CE4}-0\Software\Microsoft\Windows\CurrentVersion\Run|CTFMON
[b]################## | Regedit Run |[/b]
F2 - HKLM\..\Winlogon : [Shell] explorer.exe

F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - HKLM\..\Winlogon : [Userinit] userinit.exe,
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
04 - HKCU\..\Run : [StartMenuX] C:\Program Files\Start Menu X\StartMenuX.exe
04 - HKCU\..\Run : [Facebook Update] "C:\Users\Acer\AppData\Local\Facebook\Updat
e\FacebookUpdate.exe" /c /nocrashserver
04 - HKCU\..\Run : [ImeGuardCom] C:\Program Files (x86)\SogouInput\Components\SG
ImeGuard\1.0.0.26\SGImeGuard.exe
04 - HKCU\..\Run : [DAEMON Tools Pro Agent] "C:\Program Files (x86)\DAEMON Tools
Pro\DTAgent.exe" -autorun
04 - HKCU\..\Run : [MiPhoneManager] "C:\Users\Acer\AppData\Local\MiPhoneManager\
main\MiPhoneHelper.exe"
04 - HKCU\..\Run : [GoogleChromeAutoLaunch_230339093C4B797E6562B70E84C4EEF2] "C:
\Users\Acer\AppData\Roaming\yfe\chrome.exe" --no-startup-window
04 - HKCU\..\Run : [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minim
ized /regrun
04 - HKLM\..\Run : [LauncherP205b] "C:\Program Files (x86)\Fuji Xerox\DocuPrint
SSW2\Launcher\fxlaunch.exe" /S FX DocuPrint P205 b
04 - HKLM\..\Run : [DocuPrint P205b RUN] "C:\Program Files (x86)\Fuji Xerox\Docu
Print SSW2\SimpleMonitor for AP\fxksmRun.exe"
04 - HKLM\..\Run : [StatusAutoRunP205b] "C:\Program Files (x86)\Fuji Xerox\DocuP
rint SSW2\SimpleMonitor for AP\fxksmpl.exe" FX DocuPrint P205 b,hide,\S
04 - HKLM\..\Run : [HP Software Update] C:\Program Files (x86)\Hp\HP Software Up
date\HPWuSchd2.exe
04 - HKLM\..\Policies\Explorer\run : [BtvStack] "C:\Program Files (x86)\Qualcomm
Atheros\Bluetooth Suite\BtvStack.exe"
04 - [x64] HKLM\..\Run : [IgfxTray] "C:\Windows\system32\igfxtray.exe"
04 - [x64] HKLM\..\Run : [HotKeysCmds] "C:\Windows\system32\hkcmd.exe"
04 - [x64] HKLM\..\Run : [Persistence] "C:\Windows\system32\igfxpers.exe"
04 - [x64] HKLM\..\Run : [ETDCtrl] %ProgramFiles%\Elantech\ETDCtrl.exe
04 - [x64] HKLM\..\Run : [RTHDVCPL] "C:\Program Files\Realtek\Audio\HDA\RAVCpl64
.exe" -s
04 - [x64] HKLM\..\Run : [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui
.exe" /hide /waitservice
04 - [x64] HKLM\..\Policies\Explorer\run : [BtvStack] "C:\Program Files (x86)\Qu
alcomm Atheros\Bluetooth Suite\BtvStack.exe"
04 - HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\..\Run : [Copy] "C:\U
sers\Acer\AppData\Roaming\Copy\CopyAgent.exe"
04 - HKU\S-1-5-21-3071853377-3076908593-3284045495-1002\..\Run : [StartMenuX] C:
\Program Files\Start Menu X\StartMenuX.exe
04 - HKU\S-1-5-21-3071853377-3076908593-3284045495-1002\..\Run : [Facebook Updat
e] "C:\Users\Acer\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashs
erver
04 - HKU\S-1-5-21-3071853377-3076908593-3284045495-1002\..\Run : [ImeGuardCom] C
:\Program Files (x86)\SogouInput\Components\SGImeGuard\1.0.0.26\SGImeGuard.exe
04 - HKU\S-1-5-21-3071853377-3076908593-3284045495-1002\..\Run : [DAEMON Tools P
ro Agent] "C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe" -autorun
04 - HKU\S-1-5-21-3071853377-3076908593-3284045495-1002\..\Run : [MiPhoneManager
] "C:\Users\Acer\AppData\Local\MiPhoneManager\main\MiPhoneHelper.exe"
04 - HKU\S-1-5-21-3071853377-3076908593-3284045495-1002\..\Run : [GoogleChromeAu
toLaunch_230339093C4B797E6562B70E84C4EEF2] "C:\Users\Acer\AppData\Roaming\yfe\ch
rome.exe" --no-startup-window
04 - HKU\S-1-5-21-3071853377-3076908593-3284045495-1002\..\Run : [Skype] "C:\Pro
gram Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
04 - HKU\S-1-5-21-3071853377-3076908593-3284045495-1002-{ED1FC765-E35E-4C3D-BF15
-2C2B11260CE4}-0\..\Run : [StartMenuX] C:\Program Files\Start Menu X\StartMenuX.
exe
04 - HKU\S-1-5-21-3071853377-3076908593-3284045495-1002-{ED1FC765-E35E-4C3D-BF15
-2C2B11260CE4}-0\..\Run : [Facebook Update] "C:\Users\Acer\AppData\Local\Faceboo

k\Update\FacebookUpdate.exe" /c /nocrashserver
04 - HKU\S-1-5-21-3071853377-3076908593-3284045495-1002-{ED1FC765-E35E-4C3D-BF15
-2C2B11260CE4}-0\..\Run : [ImeGuardCom] C:\Program Files (x86)\SogouInput\Compon
ents\SGImeGuard\1.0.0.26\SGImeGuard.exe
04 - HKU\S-1-5-21-3071853377-3076908593-3284045495-1002-{ED1FC765-E35E-4C3D-BF15
-2C2B11260CE4}-0\..\Run : [DAEMON Tools Pro Agent] "C:\Program Files (x86)\DAEMO
N Tools Pro\DTAgent.exe" -autorun
04 - HKU\S-1-5-21-3071853377-3076908593-3284045495-1002-{ED1FC765-E35E-4C3D-BF15
-2C2B11260CE4}-0\..\Run : [MiPhoneManager] "C:\Users\Acer\AppData\Local\MiPhoneM
anager\main\MiPhoneHelper.exe"
04 - HKU\S-1-5-21-3071853377-3076908593-3284045495-1002-{ED1FC765-E35E-4C3D-BF15
-2C2B11260CE4}-0\..\Run : [GoogleChromeAutoLaunch_230339093C4B797E6562B70E84C4EE
F2] "C:\Users\Acer\AppData\Roaming\yfe\chrome.exe" --no-startup-window
04 - HKU\S-1-5-21-3071853377-3076908593-3284045495-1002-{ED1FC765-E35E-4C3D-BF15
-2C2B11260CE4}-0\..\Run : [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe"
/minimized /regrun
04 - HKU\S-1-5-18\..\Run : [Copy] "C:\Users\Acer\AppData\Roaming\Copy\CopyAgent.
exe"
04GS - LCL_FileProtect.lnk : C:\Users\Acer\AppData\Roaming\SecureBrowsing\LCL_Fi
leProtect.exe
04GS - LCL_SecureBrowsing.lnk : C:\Users\Acer\AppData\Roaming\SecureBrowsing\LCL
_SecureBrowsing.exe
04GS - LCL_SysProtect.lnk : C:\Users\Acer\AppData\Roaming\SecureBrowsing\LCL_Sys
Protect.exe
04GS - LCL_WebProtect.lnk : C:\Users\Acer\AppData\Roaming\SecureBrowsing\LCL_Web
Protect.exe
04GS - PdaNet Desktop.lnk : C:\Program Files (x86)\PdaNet for Android\PdaNetPC.e
xe
[b]################## | UsbFix - Information |[/b]
Info : [url=https://www.youtube.com/watch?v=vUZYYASd7FE]How to remove shortcut v
irus on flash disk (Video)[/url]
Info : [url=http://www.en.usbfix.net/2014/03/remove-shortcut-virus-usb/]Shortcut
virus on flash disk, What is it ?[/url]
Live detection : [url=http://how-to-remove.us/]http://how-to-remove.us/[/url]
[b]################## | Hijack |[/b]
Restored! [D] F:\RMT_Core
Restored! [D] F:\RMT_UserData
[b]################## | C:\ %SystemDrive% - Fixed drive (NTFS) |[/b]
[07/11/2007
[07/11/2007
[07/11/2007
[07/11/2007
[07/11/2007
[07/11/2007
[07/11/2007
[07/11/2007
[07/11/2007
[07/02/2015
[07/02/2015
[07/02/2015
[07/11/2007
[05/03/2014
[05/02/2015
08:00:40
08:00:40
08:00:40
08:00:40
08:00:40
08:00:40
08:00:40
08:00:40
08:00:40
08:41:59
08:41:59
08:41:59
08:53:12
09:42:13
16:49:20
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
A |
A |
A |
A |
A |
A |
A |
A |
A |
ASH
ASH
ASH
A |
A |
A |
17 Ko] - C:\eula.3082.txt
| 3202072 Ko] - C:\hiberfil.sys
| 1835008 Ko] - C:\pagefile.sys
| 262144 Ko] - C:\swapfile.sys
237 Ko] - C:\VC_RED.MSI
8 Ko] - C:\wubildr.mbr
0 Ko] - C:\sparkraw.log
[07/11/2007 - 08:00:40 | A | 1 Ko] - [[url=https://www.virustotal.com/file/7912e

3fcf2698cf4f8625e563cd8215c6668739cae18bd6f27af2d25bec5c951/analysis/1421776363/
]VirusTotal[/url] - (0/57)] - C:\globdata.ini
[07/11/2007 - 08:00:40 | A | 1 Ko] - [[url=https://www.virustotal.com/file/67262
1b056188f8d3fa5ab8cd3df4f95530c962af9bb11cf7c9bd1127b3c3605/analysis/1422467114/
]VirusTotal[/url] - (0/57)] - C:\install.ini
[03/11/2013 - 16:22:42 | ASH | 0 Ko] - [[url=https://www.virustotal.com/file/5c4
859d21411a4160e318e714ba5bbb5e1e6641e2b1728f60cd519a2a689dcb7/analysis/136952611
5/]VirusTotal[/url] - (0/47)] - C:\desktop.ini
[07/11/2007 - 08:44:20 | A | 835 Ko] - [[url=https://www.virustotal.com/file/dc1
ba9cb15d0808dc2d80ce13acfa0b07acdfcfe2cdf94da47e0e570e7345f6d/analysis/142267555
7/]VirusTotal[/url] - (0/57)] - C:\install.exe
[07/11/2007 - 08:44:20 | A | 74 Ko] - [[url=https://www.virustotal.com/file/29ee
b7535005a69d7bc503d5a40fdb06e91db90aec04d95a39b7868b18ae274d/analysis/1419520603
/]VirusTotal[/url] - (0/56)] - C:\install.res.1028.dll
[07/11/2007 - 08:44:20 | A | 93 Ko] - [[url=https://www.virustotal.com/file/0ab1
8d157dc3658438bdbc097565bbdcd2f31447193f864ee327e084d7cba382/analysis/1419520783
f4813bc41ed6a6586d1ba01a5c3703ed60c2df060cba6791f449f3689de7/analysis/1419520814
[07/11/2007 - 08:44:20 | A | 94 Ko] - [[url=https://www.virustotal.com/file/6ba4
8823dd30cd857280535f303d3aad407654be4b7c2a6ce8843d5ca940d74b/analysis/1421977753
[07/11/2007 - 08:44:20 | A | 92 Ko] - [[url=https://www.virustotal.com/file/69f3
965fb955e076424cfaa3c5cb5e5414faa27a9864949cac531a08bc91000f/analysis/1421977702
[07/11/2007 - 08:44:20 | A | 79 Ko] - [[url=https://www.virustotal.com/file/aeec
0dff47bb952f63212655525b598b66b1b17e06b93150389f264bbe2c3235/analysis/1419521137
[07/11/2007 - 08:44:20 | A | 77 Ko] - [[url=https://www.virustotal.com/file/85c5
32de2266c5ba75d58e7f848f071082b802d5344a46e234cee69a5704264f/analysis/1419521253
[07/11/2007 - 08:44:20 | A | 73 Ko] - [[url=https://www.virustotal.com/file/ba36
839b267799cd24471f9d1bf63b16e2b90da2723ceddd66f290f4ebddd9ae/analysis/1419525834
[07/11/2007 - 08:44:20 | A | 93 Ko] - [[url=https://www.virustotal.com/file/a31f
7f80c1eb3cbda64666f80ca49f41ff745dec063203d59771db309e31cf26/analysis/1419526031
[07/11/2007 - 08:50:40 | A | 1883 Ko] - C:\VC_RED.cab
[07/11/2007 - 08:00:40 | A | 6 Ko] - C:\vcredist.bmp
[29/10/2013 - 23:27:49 | SHD] - C:\$Recycle.Bin
[02/06/2012 - 22:30:55 | N | 0 Ko] - C:\BOOTNXT
[26/07/2012 - 15:22:08 | SHD] - C:\Documents and Settings
[26/07/2012 - 15:33:46 | D] - C:\PerfLogs
[29/10/2013 - 23:26:17 | RD] - C:\Users
[30/10/2013 - 00:06:02 | RHD] - C:\MSOCache
[05/03/2014 - 09:42:13 | A | 157 Ko] - C:\wubildr
[06/03/2014 - 20:52:51 | D] - C:\GrandeDevice
[29/03/2014 - 18:37:22 | D] - C:\xampp
[07/05/2014 - 20:57:07 | D] - C:\temp
[18/05/2014 - 19:44:34 | SD] - C:\KuaiwanMiniGames
[07/07/2014 - 17:15:19 | D] - C:\Xiaomi
[09/09/2014 - 17:20:28 | D] - C:\wamp
[26/12/2014 - 18:59:56 | D] - C:\Testing Anywhere Files
[02/01/2015 - 12:45:08 | D] - C:\Windows
[04/01/2015 - 17:13:06 | D] - C:\AdwCleaner
[04/01/2015 - 18:08:57 | RD] - C:\Program Files
[12/01/2015 - 11:56:44 | HD] - C:\ProgramData
[27/01/2015 - 22:00:45 | D] - C:\Program Files (x86)
[07/02/2015 - 23:08:33 | D] - C:\UsbFix

[b]################## | D:\ - Fixed drive (NTFS) |[/b]
[07/11/2007 - 08:00:40 | A | 0 Ko] - D:\eula.1041.txt
[07/11/2007 - 08:00:40 | A | 17 Ko] - D:\eula.2052.txt
[07/11/2007 - 08:00:40 | A | 17 Ko] - D:\eula.1042.txt
[07/11/2007 - 08:00:40 | A | 17 Ko] - D:\eula.1028.txt
[07/11/2007 - 08:00:40 | A | 17 Ko] - D:\eula.1031.txt
[07/11/2007 - 08:00:40 | A | 10 Ko] - D:\eula.1033.txt
[07/11/2007 - 08:00:40 | A | 17 Ko] - D:\eula.1036.txt
[07/11/2007 - 08:00:40 | A | 17 Ko] - D:\eula.1040.txt
[07/11/2007 - 08:00:40 | A | 17 Ko] - D:\eula.3082.txt
[07/11/2007 - 08:12:28 | A | 228 Ko] - D:\VC_RED.MSI
[07/11/2007 - 08:00:40 | A | 1 Ko] - [[url=https://www.virustotal.com/file/7912e
3fcf2698cf4f8625e563cd8215c6668739cae18bd6f27af2d25bec5c951/analysis/1421776363/
]VirusTotal[/url] - (0/57)] - D:\globdata.ini
1b056188f8d3fa5ab8cd3df4f95530c962af9bb11cf7c9bd1127b3c3605/analysis/1422467114/
]VirusTotal[/url] - (0/57)] - D:\install.ini
66ce743aa1cbed0874933e104ef7b913188ecd8f0c679f7d8378516c51da2/analysis/142329596
7/]VirusTotal[/url] - (0/56)] - D:\install.exe
[07/11/2007 - 08:03:18 | A | 94 Ko] - [[url=https://www.virustotal.com/file/320c
305177ab4ec6e00883a2cf0886019b5d36557219e4a188cf9df3768f157f/analysis/1421230576
/]VirusTotal[/url] - (0/57)] - D:\install.res.3082.dll
324fe24006bc3d8928029dcaccbdae517eb09727f5dd47ea5aaeed3ee26d/analysis/1421230573
[07/11/2007 - 08:03:18 | A | 74 Ko] - [[url=https://www.virustotal.com/file/f7aa
6ebf1413a6e4816bcad5b77c47b6bbe0cfc05cafde4aa872abe3fbd5e62b/analysis/1421230577
[07/11/2007 - 08:03:18 | A | 78 Ko] - [[url=https://www.virustotal.com/file/7d86
f3ba0232c2ac4b4fce96e4cebb23700312a032d5d0db988ec6b358be1686/analysis/1421230576
f2436c96a70b0cdc8176883ee7a4614353f17ad61bfbd5a8d7a1906483d3/analysis/1421230567
5a90250c6818f73763775eea6379e06da6c38e8d2cf0f54eb6112a0a6aee/analysis/1421769061
[07/11/2007 - 08:03:18 | A | 94 Ko] - [[url=https://www.virustotal.com/file/5e49
c21b9a15c3a0fddde7ddc32fda220302ee57b8aff66f4f78b370e049410d/analysis/1421230568
[07/11/2007 - 08:03:18 | A | 89 Ko] - [[url=https://www.virustotal.com/file/9bf7
026a47daab7bb2948fd23e8cf42c06dd2e19ef8cdea0af7367453674a8f9/analysis/1421230567
[07/11/2007 - 08:03:18 | A | 95 Ko] - [[url=https://www.virustotal.com/file/2d1c
0a1b17266cff3be7d46cf3020b176e4a058fd7fc57f7b6b97e0760cc45db/analysis/1421230569
[10/12/2014 - 12:30:05 | D] - D:\HunanTV.cache
[07/11/2007 - 08:09:22 | A | 1409 Ko] - D:\VC_RED.cab
[07/11/2007 - 08:00:40 | A | 6 Ko] - D:\vcredist.bmp
[03/11/2013 - 15:40:25 | SHD] - D:\$RECYCLE.BIN
[04/11/2013 - 18:34:49 | D] - D:\BaiduMusic
[30/12/2013 - 14:08:39 | D] - D:\music
[07/02/2014 - 00:03:41 | D] - D:\Dennis_Photo_Album
[26/04/2014 - 21:54:14 | D] - D:\Media
[11/12/2014 - 17:24:29 | D] - D:\HK_DRAMA
[04/01/2015 - 18:08:20 | D] - D:\
[26/01/2015 - 14:46:50 | D] - D:\HunanTV

[b]################## | F:\ - Removable drive (FAT32) |[/b]
[07/02/2015 - 22:44:24 | D] - F:\RMT_UserData
[07/02/2015 - 22:44:24 | D] - F:\RMT_Core
[b]################## | Vaccin |[/b]
C:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
D:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
F:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
[b]################## | E.O.F | [url=http://www.sosvirus.net/]http://www.sosviru
s.net/[/url] | [url=http://www.en.usbfix.net/]http://www.en.usbfix.net/[/url] |[
/b]

UsbFix Report

Diunggah oleh

Informasi Dokumen

Hak Cipta

Format Tersedia

Bagikan dokumen Ini

Bagikan atau Tanam Dokumen

Opsi Berbagi

Apakah menurut Anda dokumen ini bermanfaat?

Apakah konten ini tidak pantas?

Hak Cipta:

Format Tersedia

UsbFix Report

Diunggah oleh

Hak Cipta:

Format Tersedia

[b]############################## | UsbFix V 7.

Microsoft? Windows 8 Single Language (6.2.9200 64-Bit)

[b]################## | Security Information |[/b]

ESET NOD32 Antivirus 7.0 [[b](!) Disabled[/b] |[b](!) Outdated[/b]]

[b]################## | Disk Information |[/b]

[b]################## | Generic Research |[/b]

F2 - HKLM\..\Winlogon : [Shell] explorer.exe

-2C2B11260CE4}-0\..\Run : [Facebook Update] "C:\Users\Acer\AppData\Local\Faceboo

[07/11/2007 - 08:00:40 | A | 1 Ko] - [[url=https://www.virustotal.com/file/7912e

[07/02/2015 - 23:08:33 | D] - C:\UsbFix

[26/01/2015 - 14:46:50 | D] - D:\HunanTV

Anda mungkin juga menyukai