[b]############################## | UsbFix V 7.184 | [Research][/b] User: Simon (Administrator) # SIMON-STUDIO Updated 20/10/2014 by El Desaparecido - SosVirus Started at 18:43:24 | 28/10/2014 Website : [url=http://www.en.usbfix.net/]http://www.en.usbfix.net/[/url] Changelog : [url=http://www.en.usbfix.net/changelog/]http://www.en.usbfix.net/changelog/[/url] Support : [url=http://www.sosvirus.net/]http://www.sosvirus.net/[/url] Upload Malware : [url=http://www.sosvirus.net/upload_malware.php]http://www.sosvirus.net/upload_malware.php[/url] Live detection : [url=http://how-to-remove.us/]http://how-to-remove.us/[/url] Contact : [url=http://www.en.usbfix.net/contact/]http://www.en.usbfix.net/contact/[/url] [b]################## | System information |[/b] MB: ASUSTeK Computer INC. (M5A78L-M/USB3) CPU: AMD Phenom(tm) II X4 965 Processor RAM -> [Total : 8190 Mo | Free : 4832 Mo] Bios: American Megatrends Inc. Boot: Normal boot OS: Microsoft™ Windows 7 Ultimate (6.1.7601 64-Bit) Service Pack 1 WB: Internet Explorer : 9.00.8112.16421 WB: Google Chrome : 38.0.2125.104 [b]################## | Security Information |[/b] AS: Windows Defender [Enabled |[b](!) Outdated[/b]] FW: Windows Firewall [Enabled] SC: Security Center [Enabled] WU: Windows Update [Enabled] [b]################## | Disk Information |[/b] C:\ (%SystemDrive%) -> Fixed disk # 912 Gb (723 Gb free - 79%) [] # NTFS D:\ -> Fixed disk # 20 Gb (20 Gb free - 100%) [] # NTFS F:\ -> CD-ROM # 1 Gb (0 Mb free - 0%) [Filpom101] # UDF G:\ -> Fixed disk # 466 Gb (322 Gb free - 69%) [ADATA CH94] # FAT32 [b]################## | Regedit Run |[/b] F2 - HKLM\..\Winlogon : [Shell] explorer.exe F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe F2 - HKLM\..\Winlogon : [Userinit] userinit.exe F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe, 04 - HKCU\..\Run : [TBPanel] "C:\Program Files (x86)\EXPERTool\TBPanel.exe" /A 04 - HKCU\..\Run : [EADM] "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart 04 - HKCU\..\Run : [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun 04 - HKCU\..\Run : [Spotify] "C:\Users\Simon\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart 04 - HKCU\..\Run : [Spotify Web Helper] "C:\Users\Simon\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" 04 - HKLM\..\Run : [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r 04 - HKLM\..\Run : [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" 04 - HKLM\..\Run : [ControlCenter4] C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe /autorun 04 - HKLM\..\Run : [BrStsMon00] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe /AUTORUN 04 - HKLM\..\Run : [BrStsInd00] C:\Program Files (x86)\BrownyInd\Brother\BrIndicator.exe /AUTORUN 04 - HKLM\..\Run : [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe" 04 - HKLM\..\Run : [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" 04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun 04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun 04 - HKU\S-1-5-21-883792977-1336613185-70257222-1000\..\Run : [TBPanel] "C:\Program Files (x86)\EXPERTool\TBPanel.exe" /A 04 - HKU\S-1-5-21-883792977-1336613185-70257222-1000\..\Run : [EADM] "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart 04 - HKU\S-1-5-21-883792977-1336613185-70257222-1000\..\Run : [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun 04 - HKU\S-1-5-21-883792977-1336613185-70257222-1000\..\Run : [Spotify] "C:\Users\Simon\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart 04 - HKU\S-1-5-21-883792977-1336613185-70257222-1000\..\Run : [Spotify Web Helper] "C:\Users\Simon\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" 04 - HKU\S-1-5-21-883792977-1336613185-70257222-1001\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun 04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe 04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe 04 - HKU\S-1-5-21-883792977-1336613185-70257222-1001\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe [b]################## | Generic Research |[/b] Found! G:\Thumbs.db [b]################## | Registry |[/b] [b]################## | UsbFix - Information |[/b] Info : [url=https://www.youtube.com/watch?v=vUZYYASd7FE]How to remove shortcut virus on flash disk (Video)[/url] Info : [url=http://www.en.usbfix.net/2014/03/remove-shortcut-virus-usb/]Shortcut virus on flash disk, What is it ?[/url] [b]################## | Hijack |[/b] [b]################## | E.O.F | [url=http://www.sosvirus.net/]http://www.sosvirus.net/[/url] | [url=http://www.en.usbfix.net/]http://www.en.usbfix.net/[/url] |[/b]