[b]############################## | UsbFix V 8.110 | [Research][/b] User: mezoo (Administrator) # MEZO Updated 19/09/2015 by El Desaparecido - SosVirus Started at 22:08:53 | 20/09/2015 Website : [url=http://www.en.usbfix.net/]http://www.en.usbfix.net/[/url] Tutorial : [url=http://www.pt.usbfix.net/2014/03/tutorial-do-usbfix-scan/]http://www.pt.usbfix.net/2014/03/tutorial-do-usbfix-scan/[/url] Support : [url=http://www.sos-virus.net/]http://www.sos-virus.net/[/url] Live detection : [url=http://how-to-remove.us/]http://how-to-remove.us/[/url] Contact : [url=http://www.en.usbfix.net/contact/]http://www.en.usbfix.net/contact/[/url] [b]################## | System information |[/b] MB: Acer (Aspire M3985) CPU: Intel(R) Core(TM) i7-3770 CPU @ 3.40GHz GC: AMD Radeon HD 7470 RAM -> [Total : 8129 Mo | Free : 5690 Mo] Bios: American Megatrends Inc. Boot: Normal boot OS: Microsoft™ Windows 8 Single Language (6.2.9200 64-Bit) WB: Internet Explorer : 10.00.9200.16384 WB: Google Chrome : 45.0.2454.93 WB: Mozilla Firefox : 40.0.3 [b]################## | Security Information |[/b] AV: Windows Defender [Enabled |Updated] AS: Windows Defender [Enabled |Updated] AS: Malwarebytes Anti-Malware : 1.75.0001 FW: Windows Firewall [Enabled] SC: Security Center [Enabled] WU: Windows Update [Enabled] [b]################## | Disk Information |[/b] C:\ (%SystemDrive%) -> Fixed disk # 453 Gb (155 Gb free - 34%) [Acer] # NTFS D:\ -> Fixed disk # 454 Gb (127 Gb free - 28%) [DATA] # NTFS E:\ -> Fixed disk # 296 Mb (271 Mb free - 91%) [ESP] # FAT32 G:\ -> Fixed disk # 19 Gb (2 Gb free - 12%) [] # FAT32 H:\ -> Fixed disk # 56 Gb (33 Gb free - 60%) [LOCAL DISK] # NTFS [b]################## | Startup |[/b] F2 - HKLM\..\Winlogon : [Shell] explorer.exe F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe F2 - HKLM\..\Winlogon : [Userinit] userinit.exe, F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe, 04 - HKCU\..\Run : [Messenger (Yahoo!)] "C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe" -quiet 04 - HKCU\..\Run : [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe 04 - HKCU\..\Run : [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe"   04 - HKCU\..\Run : [BitComet] "C:\Program Files\BitComet\BitComet.exe" /tray 04 - HKCU\..\Run : [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot 04 - HKCU\..\Run : [Akamai NetSession Interface] "C:\Users\mezoo\AppData\Local\Akamai\netsession_win.exe" 04 - HKCU\..\Run : [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun 04 - HKCU\..\Run : [OfficeSyncProcess] "C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE" 04 - HKCU\..\Run : [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun 04 - HKCU\..\Run : [Dropbox Update] "C:\Users\mezoo\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c 04 - HKLM\..\Run : [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun 04 - HKLM\..\Run : [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices 04 - HKLM\..\Run : [Nike+ Connect] "C:\Program Files (x86)\Nike\Nike+ Connect\Nike+ Connect daemon.exe" 04 - HKLM\..\Run : [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" 04 - HKLM\..\Run : [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin 04 - HKLM\..\Run : [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe 04 - HKLM\..\Run : [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin 04 - HKLM\..\Run : [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" 04 - HKLM\..\Run : [Adobe Creative Cloud] "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true 04 - HKLM\..\Run : [AdobeCS5.5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin 04 - HKLM\..\Run : [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime 04 - HKLM\..\Run : [NeroCheck] C:\Windows\SysWOW64\\NeroCheck.exe 04 - HKLM\..\Run : [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe" 04 - HKLM\..\Run : [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe 04 - HKLM\..\Run : [TkBellExe] "C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe" -osboot 04 - HKLM\..\Run : [RealDownloader] C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe 04 - HKLM\..\Run : [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" 04 - [x64] HKLM\..\Run : [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s 04 - [x64] HKLM\..\Run : [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" 04 - [x64] HKLM\..\Run : [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" 04 - HKU\S-1-5-21-2355463451-85381230-1253174285-1002\..\Run : [Messenger (Yahoo!)] "C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe" -quiet 04 - HKU\S-1-5-21-2355463451-85381230-1253174285-1002\..\Run : [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe 04 - HKU\S-1-5-21-2355463451-85381230-1253174285-1002\..\Run : [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe"   04 - HKU\S-1-5-21-2355463451-85381230-1253174285-1002\..\Run : [BitComet] "C:\Program Files\BitComet\BitComet.exe" /tray 04 - HKU\S-1-5-21-2355463451-85381230-1253174285-1002\..\Run : [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot 04 - HKU\S-1-5-21-2355463451-85381230-1253174285-1002\..\Run : [Akamai NetSession Interface] "C:\Users\mezoo\AppData\Local\Akamai\netsession_win.exe" 04 - HKU\S-1-5-21-2355463451-85381230-1253174285-1002\..\Run : [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun 04 - HKU\S-1-5-21-2355463451-85381230-1253174285-1002\..\Run : [OfficeSyncProcess] "C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE" 04 - HKU\S-1-5-21-2355463451-85381230-1253174285-1002\..\Run : [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun 04 - HKU\S-1-5-21-2355463451-85381230-1253174285-1002\..\Run : [Dropbox Update] "C:\Users\mezoo\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c 04 - HKU\S-1-5-19\..\RunOnce : [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} 04 - HKU\S-1-5-20\..\RunOnce : [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} 04 - HKU\S-1-5-18\..\RunOnce : [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} 04GS - McAfee Security Scan Plus.lnk : C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe 04GS - RealPlayer Cloud Service UI.lnk : C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin64\rpsystray.exe [b]################## | Generic Research |[/b] Found! G:\download.zip.lnk Found! G:\.Trashes\501 [b]################## | UsbFix - Information |[/b] Info : [url=https://www.youtube.com/watch?v=vUZYYASd7FE]How to remove shortcut virus on flash disk (Video)[/url] Info : [url=http://www.en.usbfix.net/2014/03/remove-shortcut-virus-usb/]Shortcut virus on flash disk, What is it ?[/url] Live detection : [url=http://how-to-remove.us/]http://how-to-remove.us/[/url] [b]Analysed in 148.6 seconds[/b] [b]################## | E.O.F | [url=http://www.sosvirus.net/]http://www.sosvirus.net/[/url] | [url=http://www.en.usbfix.net/]http://www.en.usbfix.net/[/url] |[/b]