# ----------------------------------------------------

# UsbFix Antivirus Free

# ----------------------------------------------------
# Versión : 11.015
# Base de datos :
# Contacto : https://www.usb-antivirus.com/es/contacto
# ----------------------------------------------------
# Tipo de escaneo : Full
# Usuario : ADMIN (Administrador)
# Dispositivo : ADMIN-PC
# Comenzó : 18/06/2019 08:56:26
# ----------------------------------------------------

------------ | Discos analizados |

C:\ NTFS (17GB/130GB) [Fixed]

D:\ NTFS (52GB/103GB) [Fixed]

------------ | Elemento(s) infectado(s) |

Borrado! HKCU\Software\Microsoft\Windows\CurrentVersion\Run|{88A50D18-F260-522F-
4610-A4C4700E45B4}
Borrado! c:\programdata\{14b52528-da50-ce3f-4610-a4c4700e45b4}\b90af5b7.exe

------------ | Run |

F2 - HKLM\..\Winlogon : [Shell] explorer.exe

F2 - HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
F3 - HKCU\..\Windows : [Load] C:\ProgramData\msquaz.exe
04 - HKCU\..\Run : [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol
120\AxAutoMntSrv.exe" -automount
04 - HKCU\..\Run : [Adobe Reader Synchronizer] "C:\Program Files\Adobe\Reader
10.0\Reader\AdobeCollabSync.exe"
04 - HKCU\..\Run : [CCleaner Monitoring] "C:\Program
Files\CCleaner\CCleaner.exe" /MONITOR
04 - HKCU\..\Run : [Chromium]
"c:\users\admin\appdata\local\chromium\application\chrome.exe" --profile-
directory="Default" --auto-launch-at-startup --restore-last-session
04 - HKCU\..\Run : [Bazinga] C:\ProgramData\Bazinga\bazinga.exe
04 - HKCU\..\Run : [CCleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
04 - HKCU\..\Run : [eeipb] C:\Users\ADMIN\AppData\Roaming\vevufvdu\vrjvduvi.exe
04 - HKLM\..\Run : [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe -s
04 - HKLM\..\Run : [UCam_Menu] "C:\Program
Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program
Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\2.0"
04 - HKLM\..\Run : [RemoteControl10] "C:\Program
Files\CyberLink\PowerDVD10\PDVD10Serv.exe"
04 - HKLM\..\Run : [BDRegion] C:\Program Files\Cyberlink\Shared files\brs.exe
04 - HKLM\..\Run : [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader
10.0\Reader\Reader_sl.exe"
04 - HKLM\..\Run : [AvastUI.exe] "C:\Program Files\AVAST
Software\Avast\AvastUI.exe" /nogui
04 - HKLM\..\Run : [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java
Update\jusched.exe"
04 - HKLM\..\RunOnce : [Tufibek] C:\Windows\system32\wscript.exe /E:vbscript /B
"C:\Users\ADMIN\AppData\Local\24EF1F~1\Merahotu.dat"
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe
/autoRun
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe
/autoRun
04 - HKU\S-1-5-21-689641060-2775426945-3699441310-1000\..\Run : [AlcoholAutomount]
"C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe" -automount
04 - HKU\S-1-5-21-689641060-2775426945-3699441310-1000\..\Run : [Adobe Reader
Synchronizer] "C:\Program Files\Adobe\Reader 10.0\Reader\AdobeCollabSync.exe"
04 - HKU\S-1-5-21-689641060-2775426945-3699441310-1000\..\Run : [CCleaner
Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
04 - HKU\S-1-5-21-689641060-2775426945-3699441310-1000\..\Run : [Chromium]
"c:\users\admin\appdata\local\chromium\application\chrome.exe" --profile-
directory="Default" --auto-launch-at-startup --restore-last-session
04 - HKU\S-1-5-21-689641060-2775426945-3699441310-1000\..\Run : [Bazinga]
C:\ProgramData\Bazinga\bazinga.exe
04 - HKU\S-1-5-21-689641060-2775426945-3699441310-1000\..\Run : [CCleaner]
"C:\Program Files\CCleaner\CCleaner.exe" /AUTO
04 - HKU\S-1-5-21-689641060-2775426945-3699441310-1000\..\Run : [eeipb]
C:\Users\ADMIN\AppData\Roaming\vevufvdu\vrjvduvi.exe
04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe

------------ | Tasks |

Task - Adobe Flash Player PPAPI Notifier -->

C:\Windows\system32\Macromed\Flash\FlashUtil32_28_0_0_126_pepper.exe -check
pepperplugin
Task - Adobe Flash Player Updater -->
C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task - Avast Emergency Update --> C:\Program Files\AVAST
Software\Avast\AvastEmUpdate.exe
Task - CCleanerSkipUAC --> "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
Task - GoogleUpdateTaskMachineCore --> C:\Program
Files\Google\Update\GoogleUpdate.exe /c
Task - GoogleUpdateTaskMachineUA --> C:\Program
Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
Task - Opera scheduled Autoupdate 1536788742 -->
C:\Users\ADMIN\AppData\Local\Programs\Opera\launcher.exe --scheduledautoupdate $
(Arg0)
Task - Yahoo! Powered nimim --> C:\Windows\system32\wscript.exe "C:\ProgramData\
{6836AD55-E274-2793-64B2-B9D1FEF0321F}\tira"
"68747470733a2f2f643277763764656e63316a78397a2e636c6f756466726f6e742e6e6574" "//B"
"//E:jscript" "--IsErIk"
Task - {110A9D92-4F6A-46A5-A71D-C8834AB9ED59} -->
C:\Users\ADMIN\AppData\Local\Google\Chrome\Application\chrome.exe
Task - {15396254-C612-4317-9173-82DD3224D891} --> C:\Program Files\Ares\Ares.exe
Task - {1ED1447D-2C57-49F6-BC75-C2AE1E747D98} --> C:\Windows\system32\pcalua.exe -a
C:\Users\ADMIN\Downloads\jxpiinstall.exe -d C:\Users\ADMIN\Downloads
Task - {232766D3-AED3-7924-9944-3F8077E194C5} -->
C:\Users\ADMIN\AppData\Roaming\HAGOMA~1\updane.exe /Check
Task - {28A13B13-05E7-441A-B962-E535D71030BD} --> C:\Windows\system32\pcalua.exe -a
C:\Users\ADMIN\AppData\Roaming\yoursearching\UninstallManager.exe -c -ptid=smt
Task - {3558BF06-54B5-47FC-91C3-822B610151D6} -->
C:\Users\ADMIN\AppData\Local\Google\Chrome\Application\chrome.exe
Task - {3773EFDE-A7D4-B598-839D-4CBEFBBC7EE0} -->
C:\Users\ADMIN\AppData\Roaming\3773EF~1\Misag.exe /Check
Task - {3B65C1BE-4DB6-A729-EC48-7A865F9C25A9} --> C:\Users\ADMIN\AppData\Local\
{7FEA4~1\SYNCVE~1.EXE /Check
Task - {440F5FCA-5967-4FE8-B642-5BEA7AA02323} --> C:\Windows\system32\pcalua.exe -a
C:\Users\ADMIN\Downloads\chromeinstall-8u181.exe -d C:\Users\ADMIN\Downloads
Task - {64AA4449-71BB-2D69-497E-3665EE3028A5} -->
C:\Users\ADMIN\AppData\Roaming\KIDILU~1\tenig.exe /Gogu
Task - {88A50D18-F260-522F-4610-A4C4700E45B4} --> c:\programdata\{14B52528-DA50-
CE3F-4610-A4C4700E45B4}\b90af5b7.exe
Task - {97ECCD1F-8F6C-42F9-B1FC-DBC275AB1B84} -->
C:\Users\ADMIN\AppData\Local\Google\Chrome\Application\chrome.exe
Task - {9B978C03-64EB-4B10-835D-3CFEA0D6E210} --> C:\Program Files\Adobe\Reader
10.0\Reader\AcroRd32.exe
Task - {B2CB767A-5346-45BF-95C2-589B181DACCD} --> C:\users\admin\appdata\local\
{01293~1\SYNHEL~1.EXE /Check
Task - {BBB1E5B4-6DFA-4619-9531-8AD26FA89C43} -->
C:\Users\ADMIN\AppData\Local\Google\Chrome\Application\chrome.exe
Task - {BE6CA8F0-6936-4232-8851-045EE3AE5402} --> C:\Program Files\Adobe\Reader
10.0\Reader\AcroRd32.exe
Task - {CD330159-3177-4170-8757-83853FDD4BCA} -->
C:\Users\ADMIN\AppData\Local\Google\Chrome\Application\chrome.exe
Task - {DC8065A8-539C-4BBD-B2ED-5953CCD2A964} -->
C:\Users\ADMIN\AppData\Local\Google\Chrome\Application\chrome.exe

------------ | C:\ %SystemDrive% - Disco fijo (NTFS) |

[13/09/2018 - 12:09:26 | A | 9 Ko] - InfoSat.txt

[10/06/2009 - 17:12:20 | A | 0 Ko] - config.sys
[18/06/2019 - 08:48:04 | ASH | 1261752 Ko] - hiberfil.sys
[18/06/2019 - 08:48:04 | ASH | 1682336 Ko] - pagefile.sys
[31/05/2019 - 14:34:07 | A | 342 Ko] - unp307424992667799406.mdmp
[31/05/2019 - 20:24:58 | A | 268 Ko] - unp307425482649999806.mdmp
[01/06/2019 - 02:15:46 | A | 286 Ko] - unp307425972741502118.mdmp
[01/06/2019 - 12:28:54 | A | 390 Ko] - unp307426831256205272.mdmp
[02/06/2019 - 14:28:09 | A | 328 Ko] - unp30742901503113664.mdmp
[02/06/2019 - 15:52:09 | A | 259 Ko] - unp307429123621444549.mdmp
[02/06/2019 - 17:53:03 | A | 344 Ko] - unp307429293189969402.mdmp
[03/06/2019 - 20:04:40 | A | 288 Ko] - unp307431491238138422.mdmp
[03/06/2019 - 21:24:52 | A | 310 Ko] - unp307431602136854465.mdmp
[04/06/2019 - 12:47:58 | A | 351 Ko] - unp307432891950049158.mdmp
[05/06/2019 - 16:45:53 | A | 312 Ko] - unp307435233675399824.mdmp
[06/06/2019 - 08:48:38 | A | 283 Ko] - unp307436581502857612.mdmp
[07/06/2019 - 09:15:03 | A | 290 Ko] - unp30743863880331703.mdmp
[07/06/2019 - 12:17:03 | A | 301 Ko] - unp307438882715384783.mdmp
[07/06/2019 - 14:40:21 | A | 299 Ko] - unp307439082774688736.mdmp
[07/06/2019 - 23:07:12 | A | 270 Ko] - unp307439791959318458.mdmp
[08/06/2019 - 13:57:31 | A | 299 Ko] - unp307441033572207861.mdmp
[09/06/2019 - 10:22:18 | A | 313 Ko] - unp307442744005625180.mdmp
[09/06/2019 - 15:38:08 | A | 288 Ko] - unp30744319193407417.mdmp
[09/06/2019 - 18:30:07 | A | 292 Ko] - unp30744343339792004.mdmp
[10/06/2019 - 09:17:11 | A | 339 Ko] - unp3074446712790711.mdmp
[10/06/2019 - 19:51:20 | A | 296 Ko] - unp307445552535305353.mdmp
[11/06/2019 - 10:38:09 | A | 297 Ko] - unp307446792050083356.mdmp
[12/06/2019 - 01:36:32 | A | 301 Ko] - unp307448044210497324.mdmp
[12/06/2019 - 11:11:51 | A | 293 Ko] - unp307448851510193479.mdmp
[13/06/2019 - 02:27:48 | A | 296 Ko] - unp307450131317225066.mdmp
[13/06/2019 - 10:15:59 | A | 297 Ko] - unp307450783060712230.mdmp
[13/06/2019 - 18:57:20 | A | 292 Ko] - unp307451512344209384.mdmp
[14/06/2019 - 13:00:53 | A | 315 Ko] - unp307453023927322998.mdmp
[14/06/2019 - 20:32:02 | A | 293 Ko] - unp307453654041298874.mdmp
[15/06/2019 - 02:16:50 | A | 291 Ko] - unp30745414461178771.mdmp
[15/06/2019 - 13:00:09 | A | 307 Ko] - unp307455034204387433.mdmp
[16/06/2019 - 03:02:55 | A | 307 Ko] - unp307456213026796108.mdmp
[16/06/2019 - 11:07:00 | A | 301 Ko] - unp307456891438958333.mdmp
[17/06/2019 - 21:03:49 | A | 353 Ko] - unp307459733771106561.mdmp
[19/04/2018 - 23:34:12 | A | 1 Ko] - test.log
[11/04/2017 - 23:02:16 | A | 0 Ko] - AVScanner.ini
[24/05/2019 - 20:03:59 | RASHD] - autorun.inf
[02/12/2015 - 06:48:09 | D] - www.landerextremo.s5.com
[02/12/2015 - 12:26:41 | SHD] - $Recycle.Bin
[10/06/2009 - 17:12:20 | A | 0 Ko] - autoexec.bat
[17/04/2018 - 14:19:27 | SHD] - found.000
[13/07/2009 - 22:07:05 | D] - PerfLogs
[14/07/2009 - 00:23:55 | SHD] - Documents and Settings
[02/12/2015 - 12:25:44 | SHD] - Archivos de programa
[02/12/2015 - 12:25:44 | SHD] - Recovery
[02/12/2015 - 12:26:26 | RD] - Users
[02/12/2015 - 13:13:06 | RHD] - MSOCache
[06/12/2015 - 19:43:28 | AH | 0 Ko] - 51F41E5F89D0
[01/09/2016 - 15:23:17 | D] - avast! sandbox
[21/10/2016 - 08:18:13 | D] - sh4ldr
[05/01/2018 - 02:40:06 | AD] - adb
[09/09/2018 - 17:55:02 | D] - Muestras
[11/09/2018 - 15:36:43 | D] - Minecraft_Backup
[24/05/2019 - 21:38:25 | RD] - Program Files
[14/06/2019 - 19:52:49 | HD] - ProgramData
[18/06/2019 - 08:49:05 | D] - Windows

------------ | D:\ - Disco fijo (NTFS) |

[03/03/2019 - 06:16:26 | A | 105680 Ko] - Yokusoku no Neverland 08.mp4

[12/03/2019 - 14:11:34 | A | 195627 Ko] - Yokusoku no Neverland 09.mp4
[14/03/2019 - 13:43:54 | A | 184513 Ko] - Yokusoku no Neverland 10 - copia.mp4
[14/03/2019 - 13:43:54 | A | 184513 Ko] - Yokusoku no Neverland 10.mp4
[09/04/2019 - 07:20:36 | A | 81935 Ko] - Nande Koko ni Sensei ga 01.mp4
[24/05/2019 - 20:03:59 | RASHD] - autorun.inf
[13/11/2016 - 21:37:25 | SHD] - $RECYCLE.BIN
[08/04/2019 - 16:36:20 | D] - Capitulo 01.2
[20/09/2018 - 01:26:39 | D] - Nueva carpeta
[07/03/2019 - 00:31:17 | RD] - Temporada 1
[07/03/2019 - 00:35:07 | D] - Temporada 2
[09/03/2019 - 10:41:59 | RD] - Angolmois Genkou Kassenki
[08/04/2019 - 16:36:19 | D] - Capitulo 07
[08/04/2019 - 16:36:19 | D] - Capitulo 01
[08/04/2019 - 16:36:22 | D] - Capitulo 02
[08/04/2019 - 16:36:23 | D] - Capitulo 03
[08/04/2019 - 16:36:26 | D] - Capitulo 04
[08/04/2019 - 16:36:28 | D] - Capitulo 05
[08/04/2019 - 16:36:29 | D] - Capitulo 06
[13/04/2019 - 20:42:28 | RD] - Tate no Yuusha no Nariagari
[23/04/2019 - 22:53:48 | D] - solanin
[23/04/2019 - 22:56:03 | D] - Ano Hi Mita Hana No Namae O Bokutachi WA Mada
Shizanai
[23/04/2019 - 22:57:24 | D] - Boku Dake Ga Inai Machi
[23/04/2019 - 22:58:53 | RD] - Boogiepop wa Warawanai
[23/04/2019 - 23:00:21 | D] - Caramelo de Cianuro
[23/04/2019 - 23:08:43 | D] - Durarara !!
[23/04/2019 - 23:14:30 | D] - Fate Apocrypha
[23/04/2019 - 23:16:10 | D] - Fate Extra Last Encore
[23/04/2019 - 23:16:49 | RD] - Fate Grand Order First Order
[23/04/2019 - 23:25:22 | RD] - Golden Kamuy season 2
[23/04/2019 - 23:27:34 | RD] - Gosick
[23/04/2019 - 23:29:26 | D] - inuyashiki
[23/04/2019 - 23:33:35 | RD] - Kaguya Sama wa Kokurasetai
[23/04/2019 - 23:34:47 | D] - Kekkai Sensen
[23/04/2019 - 23:36:49 | RD] - kekkai sensen y Beyond
[23/04/2019 - 23:44:59 | D] - Nanatsu no Taizai Imashime no Fukkatsu
[23/04/2019 - 23:46:07 | D] - occultic nine
[23/04/2019 - 23:49:11 | D] - Plastic Memories
[23/04/2019 - 23:50:23 | D] - Rakudai Kishi No Cavalry
[23/04/2019 - 23:50:33 | D] - root
[23/04/2019 - 23:51:04 | D] - Sekai no Owari to Yoakemae - MangaDistopia
[25/04/2019 - 18:20:10 | RD] - Kimetsu no Yaiba
[21/05/2019 - 00:14:19 | D] - metal, Rock, screamo, hardcore,metalcore
,alternativo,industrial, etc
[03/06/2019 - 21:36:40 | D] - kpop yefre

Elemento(s) infectado(s) : 5
Elementos analizados : 194133 en 00h 01m 06s

# UsbFix-Report-12.txt [13182B]

------------ | E.O.F |