[b]############################## | UsbFix V 7.183 | [Research][/b] User: Vincent (Administrator) # OKAZAKI Updated 30/09/2014 by El Desaparecido - SosVirus Started at 22:16:36 | 15/10/2014 Website : [url=http://www.en.usbfix.net/]http://www.en.usbfix.net/[/url] Changelog : [url=http://www.en.usbfix.net/changelog/]http://www.en.usbfix.net/changelog/[/url] Support : [url=http://www.sosvirus.net/]http://www.sosvirus.net/[/url] Upload Malware : [url=http://www.sosvirus.net/upload_malware.php]http://www.sosvirus.net/upload_malware.php[/url] Live detection : [url=http://how-to-remove.us/]http://how-to-remove.us/[/url] Contact : [url=http://www.en.usbfix.net/contact/]http://www.en.usbfix.net/contact/[/url] [b]################## | System information |[/b] MB: ASUSTeK COMPUTER INC. (N76VZ) CPU: Intel(R) Core(TM) i7-3610QM CPU @ 2.30GHz GC: NVIDIA GeForce GT 650M RAM -> [Total : 8014 Mo | Free : 4728 Mo] Bios: American Megatrends Inc. Boot: Normal boot OS: Microsoft™ Windows 7 Home Premium (6.1.7601 64-Bit) Service Pack 1 WB: Internet Explorer : 11.00.9600.16428 WB: Opera : 24.0.1558.64 [b]################## | Security Information |[/b] AV: avast! Antivirus [[b](!) Disabled[/b] |Updated] AS: Windows Defender [Enabled |Updated] AS: avast! Antivirus [[b](!) Disabled[/b] |Updated] FW: Windows Firewall [Enabled] SC: Security Center [Enabled] WU: Windows Update [Enabled] [b]################## | Disk Information |[/b] C:\ (%SystemDrive%) -> Fixed disk # 254 Gb (138 Gb free - 54%) [OS] # NTFS D:\ -> Fixed disk # 419 Gb (109 Gb free - 26%) [DATA] # NTFS E:\ -> CD-ROM # 7 Mb (0 Mb free - 0%) [Beeline] # CDFS G:\ -> Fixed disk # 932 Gb (328 Gb free - 35%) [Vincent] # NTFS [b]################## | Regedit Run |[/b] F2 - HKLM\..\Winlogon : [Shell] explorer.exe F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe F2 - HKLM\..\Winlogon : [Userinit] userinit.exe F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe, 04 - HKCU\..\Run : [DAEMON Tools Lite] "D:\Programy\DAEMON Tools Lite\DTLite.exe" -autorun 04 - HKCU\..\Run : [Steam] "D:\Programy\Steam\Steam.exe" -silent 04 - HKCU\..\Run : [MK LOL] "D:\gry\MKJogo\MK IM\Bin\MKIM.exe" -auto 04 - HKLM\..\Run : [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" 04 - HKLM\..\Run : [ASUSPRP] "C:\Program Files (x86)\ASUS\APRP\APRP.EXE" 04 - HKLM\..\Run : [ASUSWebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe /S 04 - HKLM\..\Run : [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" 04 - HKLM\..\Run : [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe 04 - HKLM\..\Run : [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe 04 - HKLM\..\Run : [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe 04 - HKLM\..\Run : [ASUS InstantKey] C:\Program Files (x86)\ASUS\ASUS Instant Key\Ikey_start.exe 04 - HKLM\..\Run : [Wireless Console 3] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe 04 - HKLM\..\Run : [RemoteControl10] "C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe" 04 - HKLM\..\Run : [BDRegion] C:\Program Files (x86)\Cyberlink\Shared files\brs.exe 04 - HKLM\..\Run : [UpdatePSTShortCut] "C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Cyberlink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter" 04 - HKLM\..\Run : [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices 04 - HKLM\..\Run : [AvastUI.exe] "D:\Programy\AVAST Software\Avast\AvastUI.exe" /nogui 04 - HKLM\..\Run : [NCUpdateHelper] C:\Program Files (x86)\NCWest\NCLauncher\NCUpdateHelper.exe 04 - HKLM\..\Run : [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe 04 - HKLM\..\Run : [BambooCore] C:\Program Files (x86)\Bamboo Dock\BambooCore.exe 04 - HKLM\..\Run : [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin 04 - HKLM\..\Run : [CheckNDISPortF0acAB] C:\Program Files (x86)\4G Hostless Modem\USB-modem Beeline\CheckNDISPort_df.exe 04 - HKLM\..\Run : [CancelAutoPlay_df] "C:\Program Files (x86)\4G Hostless Modem\USB-modem Beeline\CancelAutoPlay_df.exe" run 04 - HKLM\..\Run : [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe 04 - [x64] HKLM\..\Run : [IgfxTray] C:\Windows\system32\igfxtray.exe 04 - [x64] HKLM\..\Run : [HotKeysCmds] C:\Windows\system32\hkcmd.exe 04 - [x64] HKLM\..\Run : [ETDCtrl] %ProgramFiles%\Elantech\ETDCtrl.exe 04 - [x64] HKLM\..\Run : [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /MAXX3 04 - [x64] HKLM\..\Run : [BLEServicesCtrl] C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe 04 - [x64] HKLM\..\Run : [BTMTrayAgent] rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp 04 - [x64] HKLM\..\Run : [AmIcoSinglun64] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe 04 - [x64] HKLM\..\Run : [Nvtmru] "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" 04 - [x64] HKLM\..\Run : [ShadowPlay] C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart 04 - [x64] HKLM\..\Run : [NvBackend] "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" 04 - [x64] HKLM\..\Run : [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" 04 - [x64] HKLM\..\Run : [Launch LCore] C:\Program Files\Logitech Gaming Software\LCore.exe /minimized 04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun 04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun 04 - HKU\S-1-5-21-923326011-3395030656-3799992855-1001\..\Run : [DAEMON Tools Lite] "D:\Programy\DAEMON Tools Lite\DTLite.exe" -autorun 04 - HKU\S-1-5-21-923326011-3395030656-3799992855-1001\..\Run : [AdobeBridge] 04 - HKU\S-1-5-21-923326011-3395030656-3799992855-1001\..\Run : [Steam] "D:\Programy\Steam\Steam.exe" -silent 04 - HKU\S-1-5-21-923326011-3395030656-3799992855-1001\..\Run : [MK LOL] "D:\gry\MKJogo\MK IM\Bin\MKIM.exe" -auto 04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe 04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe [b]################## | Generic Research |[/b] Found! G:\$RECYCLE.BIN.lnk Found! G:\Adobe Photoshop CS6 13.0.1 Final Multilanguage (cracked dll) [ChingLiu].lnk Found! G:\BUDA.lnk Found! G:\Filmy.lnk Found! G:\Gry.lnk Found! G:\photoshop.lnk Found! G:\System Volume Information.lnk [b]################## | Registry |[/b] [b]################## | UsbFix - Information |[/b] Info : [url=https://www.youtube.com/watch?v=vUZYYASd7FE]How to remove shortcut virus on flash disk (Video)[/url] Info : [url=http://www.en.usbfix.net/2014/03/remove-shortcut-virus-usb/]Shortcut virus on flash disk, What is it ?[/url] [b]################## | Hijack |[/b] [b]################## | E.O.F | [url=http://www.sosvirus.net/]http://www.sosvirus.net/[/url] | [url=http://www.en.usbfix.net/]http://www.en.usbfix.net/[/url] |[/b]