Publicité
Publicité
Format du document : text/plain
Prévisualisation
[b]############################## | UsbFix V 8.110 | [Research][/b]
User: mezoo (Administrator) # MEZO
Updated 19/09/2015 by El Desaparecido - SosVirus
Started at 22:08:53 | 20/09/2015
Website : [url=http://www.en.usbfix.net/]http://www.en.usbfix.net/[/url]
Tutorial : [url=http://www.pt.usbfix.net/2014/03/tutorial-do-usbfix-scan/]http://www.pt.usbfix.net/2014/03/tutorial-do-usbfix-scan/[/url]
Support : [url=http://www.sos-virus.net/]http://www.sos-virus.net/[/url]
Live detection : [url=http://how-to-remove.us/]http://how-to-remove.us/[/url]
Contact : [url=http://www.en.usbfix.net/contact/]http://www.en.usbfix.net/contact/[/url]
[b]################## | System information |[/b]
MB: Acer (Aspire M3985)
CPU: Intel(R) Core(TM) i7-3770 CPU @ 3.40GHz
GC: AMD Radeon HD 7470
RAM -> [Total : 8129 Mo | Free : 5690 Mo]
Bios: American Megatrends Inc.
Boot: Normal boot
OS: Microsoft™ Windows 8 Single Language (6.2.9200 64-Bit)
WB: Internet Explorer : 10.00.9200.16384
WB: Google Chrome : 45.0.2454.93
WB: Mozilla Firefox : 40.0.3
[b]################## | Security Information |[/b]
AV: Windows Defender [Enabled |Updated]
AS: Windows Defender [Enabled |Updated]
AS: Malwarebytes Anti-Malware : 1.75.0001
FW: Windows Firewall [Enabled]
SC: Security Center [Enabled]
WU: Windows Update [Enabled]
[b]################## | Disk Information |[/b]
C:\ (%SystemDrive%) -> Fixed disk # 453 Gb (155 Gb free - 34%) [Acer] # NTFS
D:\ -> Fixed disk # 454 Gb (127 Gb free - 28%) [DATA] # NTFS
E:\ -> Fixed disk # 296 Mb (271 Mb free - 91%) [ESP] # FAT32
G:\ -> Fixed disk # 19 Gb (2 Gb free - 12%) [] # FAT32
H:\ -> Fixed disk # 56 Gb (33 Gb free - 60%) [LOCAL DISK] # NTFS
[b]################## | Startup |[/b]
F2 - HKLM\..\Winlogon : [Shell] explorer.exe
F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - HKLM\..\Winlogon : [Userinit] userinit.exe,
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
04 - HKCU\..\Run : [Messenger (Yahoo!)] "C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe" -quiet
04 - HKCU\..\Run : [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
04 - HKCU\..\Run : [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe"
04 - HKCU\..\Run : [BitComet] "C:\Program Files\BitComet\BitComet.exe" /tray
04 - HKCU\..\Run : [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot
04 - HKCU\..\Run : [Akamai NetSession Interface] "C:\Users\mezoo\AppData\Local\Akamai\netsession_win.exe"
04 - HKCU\..\Run : [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
04 - HKCU\..\Run : [OfficeSyncProcess] "C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE"
04 - HKCU\..\Run : [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
04 - HKCU\..\Run : [Dropbox Update] "C:\Users\mezoo\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
04 - HKLM\..\Run : [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
04 - HKLM\..\Run : [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
04 - HKLM\..\Run : [Nike+ Connect] "C:\Program Files (x86)\Nike\Nike+ Connect\Nike+ Connect daemon.exe"
04 - HKLM\..\Run : [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
04 - HKLM\..\Run : [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
04 - HKLM\..\Run : [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
04 - HKLM\..\Run : [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
04 - HKLM\..\Run : [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
04 - HKLM\..\Run : [Adobe Creative Cloud] "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
04 - HKLM\..\Run : [AdobeCS5.5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin
04 - HKLM\..\Run : [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
04 - HKLM\..\Run : [NeroCheck] C:\Windows\SysWOW64\\NeroCheck.exe
04 - HKLM\..\Run : [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe"
04 - HKLM\..\Run : [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
04 - HKLM\..\Run : [TkBellExe] "C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe" -osboot
04 - HKLM\..\Run : [RealDownloader] C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe
04 - HKLM\..\Run : [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
04 - [x64] HKLM\..\Run : [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
04 - [x64] HKLM\..\Run : [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
04 - [x64] HKLM\..\Run : [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
04 - HKU\S-1-5-21-2355463451-85381230-1253174285-1002\..\Run : [Messenger (Yahoo!)] "C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe" -quiet
04 - HKU\S-1-5-21-2355463451-85381230-1253174285-1002\..\Run : [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
04 - HKU\S-1-5-21-2355463451-85381230-1253174285-1002\..\Run : [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe"
04 - HKU\S-1-5-21-2355463451-85381230-1253174285-1002\..\Run : [BitComet] "C:\Program Files\BitComet\BitComet.exe" /tray
04 - HKU\S-1-5-21-2355463451-85381230-1253174285-1002\..\Run : [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot
04 - HKU\S-1-5-21-2355463451-85381230-1253174285-1002\..\Run : [Akamai NetSession Interface] "C:\Users\mezoo\AppData\Local\Akamai\netsession_win.exe"
04 - HKU\S-1-5-21-2355463451-85381230-1253174285-1002\..\Run : [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
04 - HKU\S-1-5-21-2355463451-85381230-1253174285-1002\..\Run : [OfficeSyncProcess] "C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE"
04 - HKU\S-1-5-21-2355463451-85381230-1253174285-1002\..\Run : [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
04 - HKU\S-1-5-21-2355463451-85381230-1253174285-1002\..\Run : [Dropbox Update] "C:\Users\mezoo\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
04 - HKU\S-1-5-19\..\RunOnce : [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid}
04 - HKU\S-1-5-20\..\RunOnce : [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid}
04 - HKU\S-1-5-18\..\RunOnce : [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid}
04GS - McAfee Security Scan Plus.lnk : C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
04GS - RealPlayer Cloud Service UI.lnk : C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin64\rpsystray.exe
[b]################## | Generic Research |[/b]
Found! G:\download.zip.lnk
Found! G:\.Trashes\501
[b]################## | UsbFix - Information |[/b]
Info : [url=https://www.youtube.com/watch?v=vUZYYASd7FE]How to remove shortcut virus on flash disk (Video)[/url]
Info : [url=http://www.en.usbfix.net/2014/03/remove-shortcut-virus-usb/]Shortcut virus on flash disk, What is it ?[/url]
Live detection : [url=http://how-to-remove.us/]http://how-to-remove.us/[/url]
[b]Analysed in 148.6 seconds[/b]
[b]################## | E.O.F | [url=http://www.sosvirus.net/]http://www.sosvirus.net/[/url] | [url=http://www.en.usbfix.net/]http://www.en.usbfix.net/[/url] |[/b]
User: mezoo (Administrator) # MEZO
Updated 19/09/2015 by El Desaparecido - SosVirus
Started at 22:08:53 | 20/09/2015
Website : [url=http://www.en.usbfix.net/]http://www.en.usbfix.net/[/url]
Tutorial : [url=http://www.pt.usbfix.net/2014/03/tutorial-do-usbfix-scan/]http://www.pt.usbfix.net/2014/03/tutorial-do-usbfix-scan/[/url]
Support : [url=http://www.sos-virus.net/]http://www.sos-virus.net/[/url]
Live detection : [url=http://how-to-remove.us/]http://how-to-remove.us/[/url]
Contact : [url=http://www.en.usbfix.net/contact/]http://www.en.usbfix.net/contact/[/url]
[b]################## | System information |[/b]
MB: Acer (Aspire M3985)
CPU: Intel(R) Core(TM) i7-3770 CPU @ 3.40GHz
GC: AMD Radeon HD 7470
RAM -> [Total : 8129 Mo | Free : 5690 Mo]
Bios: American Megatrends Inc.
Boot: Normal boot
OS: Microsoft™ Windows 8 Single Language (6.2.9200 64-Bit)
WB: Internet Explorer : 10.00.9200.16384
WB: Google Chrome : 45.0.2454.93
WB: Mozilla Firefox : 40.0.3
[b]################## | Security Information |[/b]
AV: Windows Defender [Enabled |Updated]
AS: Windows Defender [Enabled |Updated]
AS: Malwarebytes Anti-Malware : 1.75.0001
FW: Windows Firewall [Enabled]
SC: Security Center [Enabled]
WU: Windows Update [Enabled]
[b]################## | Disk Information |[/b]
C:\ (%SystemDrive%) -> Fixed disk # 453 Gb (155 Gb free - 34%) [Acer] # NTFS
D:\ -> Fixed disk # 454 Gb (127 Gb free - 28%) [DATA] # NTFS
E:\ -> Fixed disk # 296 Mb (271 Mb free - 91%) [ESP] # FAT32
G:\ -> Fixed disk # 19 Gb (2 Gb free - 12%) [] # FAT32
H:\ -> Fixed disk # 56 Gb (33 Gb free - 60%) [LOCAL DISK] # NTFS
[b]################## | Startup |[/b]
F2 - HKLM\..\Winlogon : [Shell] explorer.exe
F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - HKLM\..\Winlogon : [Userinit] userinit.exe,
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
04 - HKCU\..\Run : [Messenger (Yahoo!)] "C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe" -quiet
04 - HKCU\..\Run : [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
04 - HKCU\..\Run : [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe"
04 - HKCU\..\Run : [BitComet] "C:\Program Files\BitComet\BitComet.exe" /tray
04 - HKCU\..\Run : [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot
04 - HKCU\..\Run : [Akamai NetSession Interface] "C:\Users\mezoo\AppData\Local\Akamai\netsession_win.exe"
04 - HKCU\..\Run : [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
04 - HKCU\..\Run : [OfficeSyncProcess] "C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE"
04 - HKCU\..\Run : [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
04 - HKCU\..\Run : [Dropbox Update] "C:\Users\mezoo\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
04 - HKLM\..\Run : [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
04 - HKLM\..\Run : [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
04 - HKLM\..\Run : [Nike+ Connect] "C:\Program Files (x86)\Nike\Nike+ Connect\Nike+ Connect daemon.exe"
04 - HKLM\..\Run : [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
04 - HKLM\..\Run : [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
04 - HKLM\..\Run : [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
04 - HKLM\..\Run : [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
04 - HKLM\..\Run : [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
04 - HKLM\..\Run : [Adobe Creative Cloud] "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
04 - HKLM\..\Run : [AdobeCS5.5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin
04 - HKLM\..\Run : [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
04 - HKLM\..\Run : [NeroCheck] C:\Windows\SysWOW64\\NeroCheck.exe
04 - HKLM\..\Run : [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe"
04 - HKLM\..\Run : [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
04 - HKLM\..\Run : [TkBellExe] "C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe" -osboot
04 - HKLM\..\Run : [RealDownloader] C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe
04 - HKLM\..\Run : [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
04 - [x64] HKLM\..\Run : [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
04 - [x64] HKLM\..\Run : [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
04 - [x64] HKLM\..\Run : [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
04 - HKU\S-1-5-21-2355463451-85381230-1253174285-1002\..\Run : [Messenger (Yahoo!)] "C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe" -quiet
04 - HKU\S-1-5-21-2355463451-85381230-1253174285-1002\..\Run : [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
04 - HKU\S-1-5-21-2355463451-85381230-1253174285-1002\..\Run : [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe"
04 - HKU\S-1-5-21-2355463451-85381230-1253174285-1002\..\Run : [BitComet] "C:\Program Files\BitComet\BitComet.exe" /tray
04 - HKU\S-1-5-21-2355463451-85381230-1253174285-1002\..\Run : [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot
04 - HKU\S-1-5-21-2355463451-85381230-1253174285-1002\..\Run : [Akamai NetSession Interface] "C:\Users\mezoo\AppData\Local\Akamai\netsession_win.exe"
04 - HKU\S-1-5-21-2355463451-85381230-1253174285-1002\..\Run : [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
04 - HKU\S-1-5-21-2355463451-85381230-1253174285-1002\..\Run : [OfficeSyncProcess] "C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE"
04 - HKU\S-1-5-21-2355463451-85381230-1253174285-1002\..\Run : [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
04 - HKU\S-1-5-21-2355463451-85381230-1253174285-1002\..\Run : [Dropbox Update] "C:\Users\mezoo\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
04 - HKU\S-1-5-19\..\RunOnce : [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid}
04 - HKU\S-1-5-20\..\RunOnce : [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid}
04 - HKU\S-1-5-18\..\RunOnce : [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid}
04GS - McAfee Security Scan Plus.lnk : C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
04GS - RealPlayer Cloud Service UI.lnk : C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin64\rpsystray.exe
[b]################## | Generic Research |[/b]
Found! G:\download.zip.lnk
Found! G:\.Trashes\501
[b]################## | UsbFix - Information |[/b]
Info : [url=https://www.youtube.com/watch?v=vUZYYASd7FE]How to remove shortcut virus on flash disk (Video)[/url]
Info : [url=http://www.en.usbfix.net/2014/03/remove-shortcut-virus-usb/]Shortcut virus on flash disk, What is it ?[/url]
Live detection : [url=http://how-to-remove.us/]http://how-to-remove.us/[/url]
[b]Analysed in 148.6 seconds[/b]
[b]################## | E.O.F | [url=http://www.sosvirus.net/]http://www.sosvirus.net/[/url] | [url=http://www.en.usbfix.net/]http://www.en.usbfix.net/[/url] |[/b]