[b]############################## | UsbFix V 8.011 | [Clean][/b]

User: ramyl (Administrator) # DESKTOP-AATTK99
Updated 09/08/2015 by El Desaparecido - SosVirus
Started at 22:20:35 | 31/07/2016

Website : [url=http://www.en.usbfix.net/]http://www.en.usbfix.net/[/url]
Changelog : [url=http://www.en.usbfix.net/changelog/]http://www.en.usbfix.net/changelog/[/url]
Support : [url=http://www.sos-virus.net/]http://www.sos-virus.net/[/url]
Live detection : [url=http://how-to-remove.us/]http://how-to-remove.us/[/url]
Contact : [url=http://www.en.usbfix.net/contact/]http://www.en.usbfix.net/contact/[/url]

[b]################## | System information |[/b]

MB: Dell Inc. (0KHNVP) 
CPU: Intel(R) Core(TM) i3-4005U CPU @ 1.70GHz
RAM -> [Total : 4000 Mo | Free : 2360 Mo]
Bios: Dell Inc.
Boot: Normal boot

OS: Microsoft™ Windows 10 Pro (6.3.9600 64-Bit) 
WB: Internet Explorer : 11.00.10586.0
WB: Microsoft Edge : 11.00.10586.494 (th2_release_sec.160630-1736)
WB: Google Chrome : 51.0.2704.103
WB: Mozilla Firefox : 43.0.4

[b]################## | Security Information |[/b]

AV: Windows Defender [[b](!) Disabled[/b] |Updated]
AV: avast! Antivirus [[b](!) Disabled[/b] |Updated]
AS: Windows Defender [[b](!) Disabled[/b] |Updated]
AS: avast! Antivirus [[b](!) Disabled[/b] |Updated]
AS: Malwarebytes Anti-Malware : 2.2.0.1024
FW: Windows Firewall [Enabled]
SC: Security Center [Enabled]
WU: Windows Update [Enabled]

[b]################## | Disk Information |[/b]

C:\ (%SystemDrive%) -> Fixed disk # 75 Gb (15 Gb free - 20%) [] # NTFS
D:\ -> Fixed disk # 195 Gb (5 Gb free - 3%) [] # FAT32
E:\ -> Fixed disk # 195 Gb (9 Gb free - 5%) [] # NTFS

[b]################## | Generic Research |[/b]

Deleted! D:\IDMan.exe
Deleted! C:\Program Files (x86)\Internet Download Manager\IDMan.exe
Deleted! E:\programs\IDMan.exe
Deleted! HKCU\Software\Microsoft\Windows\CurrentVersion\Run|IDMan

(!) Temporary files deleted. (109.407984733582 MB)

[b]################## | Startup |[/b]

F2 - HKLM\..\Winlogon : [Shell] explorer.exe
F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
04 - HKCU\..\Run : [OneDrive] "C:\Users\ramyl\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
04 - HKCU\..\Run : [EPSON TX117_119 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFBR.EXE /FU "C:\Windows\TEMP\E_S1471.tmp" /EF "HKCU"
04 - HKCU\..\Run : [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
04 - HKCU\..\RunOnce : [Uninstall C:\Users\ramyl\AppData\Local\Microsoft\OneDrive\17.3.6201.1019_1\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\ramyl\AppData\Local\Microsoft\OneDrive\17.3.6201.1019_1\amd64"
04 - HKLM\..\Run : [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
04 - HKLM\..\Run : [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
04 - HKLM\..\Run : [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
04 - HKLM\..\Run : [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE -startup
04 - HKLM\..\Run : [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
04 - HKLM\..\Run : [EEventManager] C:\PROGRA~2\EPSONS~1\EVENTM~1\EEVENT~1.EXE
04 - HKLM\..\Run : [MalwareProtectionLive] C:\Users\ramyl\AppData\Local\MalwareProtectionLive\MalwareProtectionClient.exe
04 - [x64] HKLM\..\Run : [RTHDVCPL] "C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
04 - [x64] HKLM\..\Run : [RtHDVBg] "C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /MAXX5REC
04 - [x64] HKLM\..\Run : [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
04 - [x64] HKLM\..\Run : [SoftEther VPN Client UI Helper] "C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe" /uihelp
04 - HKU\S-1-5-19\..\Run : [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup
04 - HKU\S-1-5-20\..\Run : [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup
04 - HKU\S-1-5-21-352367207-1889632325-2146249305-1001\..\Run : [OneDrive] "C:\Users\ramyl\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
04 - HKU\S-1-5-21-352367207-1889632325-2146249305-1001\..\Run : [EPSON TX117_119 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFBR.EXE /FU "C:\Windows\TEMP\E_S1471.tmp" /EF "HKCU"
04 - HKU\S-1-5-21-352367207-1889632325-2146249305-1001\..\Run : [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
04 - HKU\S-1-5-21-352367207-1889632325-2146249305-1001\..\RunOnce : [Uninstall C:\Users\ramyl\AppData\Local\Microsoft\OneDrive\17.3.6201.1019_1\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\ramyl\AppData\Local\Microsoft\OneDrive\17.3.6201.1019_1\amd64"
04GS - McAfee Security Scan Plus.lnk : C:\Program Files\McAfee Security Scan\3.11.334\SSScheduler.exe
04GS - SoftEther VPN Client Manager Startup.lnk : C:\Program Files\SoftEther VPN Client\vpncmgr_x64.exe

[b]################## | UsbFix - Information |[/b]

Info : [url=https://www.youtube.com/watch?v=vUZYYASd7FE]How to remove shortcut virus on flash disk (Video)[/url]
Info : [url=http://www.en.usbfix.net/2014/03/remove-shortcut-virus-usb/]Shortcut virus on flash disk, What is it ?[/url]
Live detection : [url=http://how-to-remove.us/]http://how-to-remove.us/[/url]

[b]################## | C:\ %SystemDrive% - Fixed drive (NTFS) |[/b]

[09/11/2015 - 22:18:34 | A | 0 Ko] - C:\HaxLogs.txt
[31/07/2016 - 12:52:59 | ASH | 1638472 Ko] - C:\hiberfil.sys
[31/07/2016 - 12:53:01 | ASH | 720896 Ko] - C:\pagefile.sys
[31/07/2016 - 12:53:01 | ASH | 262144 Ko] - C:\swapfile.sys
[31/07/2016 - 17:20:38 | D] - C:\Config.Msi
[28/11/2015 - 12:52:27 | N | 0 Ko] - C:\$WINRE_BACKUP_PARTITION.MARKER
[02/11/2015 - 11:28:48 | A | 0 Ko] - C:\ftconfig.ini
[22/04/2016 - 10:53:40 | SHD] - C:\$RECYCLE.BIN
[10/07/2015 - 12:00:31 | RASH | 386 Ko] - C:\bootmgr
[10/07/2015 - 13:21:38 | SHD] - C:\Documents and Settings
[16/08/2015 - 16:54:50 | D] - C:\Intel
[19/08/2015 - 19:09:31 | D] - C:\Riot Games
[28/08/2015 - 00:32:07 | RHD] - C:\MSOCache
[30/10/2015 - 08:18:34 | N | 0 Ko] - C:\BOOTNXT
[30/10/2015 - 08:24:24 | D] - C:\PerfLogs
[28/11/2015 - 04:23:24 | RD] - C:\Users
[27/12/2015 - 15:38:21 | D] - C:\Games
[29/05/2016 - 00:38:43 | SHD] - C:\Recovery
[30/05/2016 - 15:12:23 | AD] - C:\UsbFix
[16/07/2016 - 07:55:44 | RD] - C:\Program Files
[16/07/2016 - 07:55:45 | D] - C:\Windows
[27/07/2016 - 13:44:41 | AD] - C:\KMPlayer
[31/07/2016 - 13:41:36 | HD] - C:\ProgramData
[31/07/2016 - 17:20:21 | RD] - C:\Program Files (x86)

[b]################## | D:\ - Fixed drive (FAT32) |[/b]

[12/12/2015 - 13:32:50 | A | 276374 Ko] - D:\soudais12345.zip
[22/12/2015 - 13:50:44 | A | 106825 Ko] - D:\title_update_7_EN.zip
[16/07/2016 - 03:06:38 | N | 252054 Ko] - D:\xvideos.com 56095c104567c75ad81473d582e0a376 - XNXX.COM.TS
[02/05/2015 - 13:01:02 | N | 42 Ko] - D:\Prison Break - [1x08] -vineet.srt
[17/10/2015 - 10:04:50 | A | 6535 Ko] - D:\idman625build2.exe
[19/08/2015 - 13:00:48 | SHD] - D:\$RECYCLE.BIN
[26/07/2015 - 11:58:18 | AD] - D:\alsir salim
[19/08/2015 - 13:07:50 | D] - D:\image
[12/11/2015 - 20:09:22 | D] - D:\anime
[03/12/2015 - 12:20:24 | D] - D:\Movies-series
[04/12/2015 - 17:33:44 | D] - D:\manga
[27/12/2015 - 14:41:08 | D] - D:\cs go
[02/01/2016 - 17:08:54 | D] - D:\flt-sgw2
[24/03/2016 - 00:16:08 | D] - D:\music
[15/04/2016 - 17:56:16 | D] - D:\supernatural
[27/05/2016 - 11:45:44 | D] - D:\photos

[b]################## | E:\ - Fixed drive (NTFS) |[/b]

[09/07/2016 - 22:21:05 | A | 33 Ko] - E:\never-back-down-2-the-beatdown_english-474207.zip
[10/07/2016 - 17:25:26 | A | 336 Ko] - E:\lost-first-season_arabic-1017078.zip
[10/07/2016 - 17:53:26 | A | 316 Ko] - E:\lost-first-season_english-1051884.zip
[10/07/2016 - 19:01:07 | A | 0 Ko] - E:\lost-first-season_arabic-1070323.zip
[10/07/2016 - 19:02:11 | A | 360 Ko] - E:\lost-first-season_arabic-923390.zip
[23/12/2015 - 05:56:06 | D] - E:\Sniper.Ghost.Warrior-SKIDROW
[12/01/2014 - 17:20:22 | A | 0 Ko] - E:\ØÑíÞÉ ÝÊÍ ÌåÇÒ ãÞÝá ÈßáãÉ ÓÑ.txt
[03/12/2014 - 16:21:10 | A | 0 Ko] - E:\untitled.txt
[03/12/2014 - 21:30:08 | A | 0 Ko] - E:\great names.txt
[31/07/2015 - 18:53:05 | A | 0 Ko] - E:\skype.txt
[11/08/2015 - 00:24:08 | A | 0 Ko] - E:\imp.txt
[31/10/2015 - 21:21:17 | A | 0 Ko] - E:\IMEI my phone.txt
[20/11/2015 - 14:53:42 | A | 0 Ko] - E:\sniper death.txt
[20/02/2016 - 12:51:40 | A | 1 Ko] - E:\my information.txt
[18/11/2012 - 11:17:34 | N | 59 Ko] - E:\Sinister.2012.R5.LiNE.x264-LiFT.srt
[18/11/2012 - 11:17:34 | N | 59 Ko] - E:\Sinister.2012.R5.LiNE.XviD-Feel-Free.srt
[18/11/2012 - 11:17:34 | N | 59 Ko] - E:\Sinister.2012.R5.LINE.XviD.AC3-ADTRG.srt
[18/11/2012 - 11:17:34 | N | 59 Ko] - E:\Sinister.2012.R5.LiNE.XviD-BiDA.srt
[30/07/2016 - 23:24:26 | D] - E:\Mr.Robot.Season.1.720p.BluRay.x264.ShAaNiG
[19/07/2016 - 23:30:17 | D] - E:\Lost.S03.Season.3.720p.5.1Ch.BluRay.ReEnc-DeeJayAhmed
[29/07/2016 - 23:05:24 | D] - E:\Lost.S06.Season.6.720p.5.1Ch.BluRay.ReEnc-DeeJayAhmed
[09/07/2016 - 22:17:40 | A | 23 Ko] - E:\never-back-down-2-the-beatdown_arabic-569935.rar
[18/06/2016 - 04:20:29 | A | 63654 Ko] - E:\---Anouar Ney-y { MAGHBOUN - ãÛÈÜÜÜÜÜÜÜÜÜÜæä  } CLIP OFFICEL 2016 - YouTube.mp4
[23/06/2016 - 04:42:00 | A | 21114 Ko] - E:\---Saw Ultimate Theme Song - YouTube.mp4
[28/06/2016 - 04:01:32 | A | 11401 Ko] - E:\Chaba malak Habibi chu Ghayarek By Sido Lmaryoul.mp4
[27/12/2015 - 14:33:10 | A | 3710739 Ko] - E:\Counter-Strike Global Offensive.exe
[11/08/2015 - 18:09:12 | A | 3 Ko] - E:\just notes ...docx
[23/10/2015 - 13:00:18 | SHD] - E:\$RECYCLE.BIN
[16/01/2016 - 17:41:01 | D] - E:\Adobe After Effects CC 2015 v13.5 + Crack
[25/07/2015 - 12:10:37 | D] - E:\Screenshots
[25/07/2015 - 12:13:06 | D] - E:\M
[26/07/2015 - 11:58:23 | D] - E:\Gta save file
[26/07/2015 - 11:58:24 | D] - E:\mounia burkina
[26/07/2015 - 11:58:25 | D] - E:\my pics
[12/08/2015 - 18:17:13 | D] - E:\Mini Jeux
[25/08/2015 - 19:41:21 | D] - E:\New folder
[27/08/2015 - 20:35:13 | D] - E:\Design
[06/10/2015 - 21:57:52 | D] - E:\photos
[30/10/2015 - 17:37:17 | D] - E:\Music
[25/07/2015 - 12:13:06 | D] - E:\?
[24/12/2015 - 13:55:03 | D] - E:\Anime
[30/05/2016 - 04:36:55 | D] - E:\Windows 7 SP1 AIO (X86-X64) 33in1 (AR-EN-FR) ESD (May2016) -=Kazam-Atuia=-
[09/07/2016 - 23:50:34 | D] - E:\movies
[28/07/2016 - 12:49:56 | D] - E:\supernatural
[31/07/2016 - 14:18:55 | D] - E:\The Mentalist Season 1
[31/07/2016 - 22:21:31 | D] - E:\programs

[b]################## | Vaccin |[/b]

C:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
D:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
E:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)

[b]################## | E.O.F | [url=http://www.sosvirus.net/]http://www.sosvirus.net/[/url] | [url=http://www.en.usbfix.net/]http://www.en.usbfix.net/[/url] |[/b]