[b]############################## | UsbFix Basic V8.

210 | [Limpiar][/b]
Usuario: APRENDIZ (Administrador) # PC-7
Actualizado el 14/10/2015 por SosVirus
Comenz a 03:18:31 | 09/03/2016
Sitio web : [url=http://www.es.usbfix.net/]http://www.es.usbfix.net/[/url]
Manual : [url=http://www.es.usbfix.net/2014/03/manual-usbfix-efectuar-un-scan/]h
ttp://www.es.usbfix.net/2014/03/manual-usbfix-efectuar-un-scan/[/url]
Asistencia : [url=http://www.sos-virus.net/es/]http://www.sos-virus.net/es/[/url
]
Contacto : [url=http://www.es.usbfix.net/contacto/]http://www.es.usbfix.net/cont
acto/[/url]
[b]################## | System information |[/b]
MB: LENOVO (Dory CRB)
CPU: AMD FX(tm)-4100 Quad-Core Processor
RAM -> [Total : 7657 Mo | Free : 6202 Mo]
Bios: LENOVO
Boot: Normal boot
OS:
WB:
WB:
WB:

Microsoft Windows 7 Enterprise (6.1.7600 64-Bit)

Internet Explorer : 8.00.7600.16385
Google Chrome : 48.0.2564.116
Mozilla Firefox : 44.0.2

[b]################## | Security Information |[/b]

AS:
FW:
SC:
WU:

Windows Defender [Activado |[b](!) No actualizado[/b]]

Windows Firewall [Activado]
Security Center [Activado]
Windows Update [Activado]

[b]################## | Disk Information |[/b]

C:\ (%SystemDrive%) -> Disco fijo # 931 Gb (821 Gb libre(s) - 88%) [] # NTFS
E:\ -> Disco extrable # 15 Gb (7 Gb libre(s) - 50%) [JHONATAN 16] # FAT32
[b]################## | Bsqueda genrica |[/b]
Borrado! E:\JHONATAN 16 (16GB).lnk
Borrado! E:\\\\\\\\\\\\%@@%~%@~~~%%@@[email protected]
Borrado! C:\ProgramData\msngu.exe
Reparado ! HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows|load ("")
Borrado! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution
Options\AcroRd32.exe
Borrado! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution
Options\adappmgr.exe
Borrado! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution
Options\addrbook.exe
Borrado! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution
Options\brctrcen.exe
Borrado! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution
Options\brinstck.exe
Borrado! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution
Options\brmfcwnd.exe
Borrado! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution
Options\brolink0.exe
Borrado! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution

Options\brscutil.exe
Borrado! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution
Options\ccleaner64.exe
Borrado! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution
Options\chrome.exe
Borrado! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution
Options\connect.service.contentservice.admin.exe
Borrado! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution
Options\javacpl.exe
Borrado! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution
Options\javaw.exe
Borrado! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution
Options\javaws.exe
Borrado! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution
Options\jswscapp.exe
Borrado! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution
Options\megasync.exe
Borrado! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution
Options\pcfxset.exe
Borrado! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution
Options\setup.exe
Borrado! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution
Options\unins000.exe
Borrado! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution
Options\uninst.exe
Borrado! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution
Options\uninstaler_skipuac.exe
Borrado! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution
Options\uninstalltool.exe
Restorado! [D] E:\
Restorado! E:\\desktop.ini -> E:\desktop.ini
Restorado! E:\\H9ko8183YIff74q59u -> E:\H9ko8183YIff74q59u
Restorado! E:\\14.v3nd3r4.d3.r0s4s.mp4 -> E:\14.v3nd3r4.d3.r0s4s.mp4
Restorado! E:\\3l.m43str0.d3.l4.kung.fus10n.www.peliculasputlocker.net.avi -> E:\
3l.m43str0.d3.l4.kung.fus10n.www.peliculasputlocker.net.avi
Restorado! E:\\ARMADAS Y PELIGROSAS.avi -> E:\ARMADAS Y PELIGROSAS.avi
Restorado! E:\\0nd3taaN03_[www.peliculasmega1k.com].avi -> E:\0nd3taaN03_[www.pel
iculasmega1k.com].avi
Restorado! E:\\el jinete sin cabeza.avi -> E:\el jinete sin cabeza.avi
Restorado! E:\\la peor noche de mi vida.avi -> E:\la peor noche de mi vida.avi
Restorado! E:\\la vida es vella.avi -> E:\la vida es vella.avi
Restorado! E:\\Malditos Vecinos.www.peliculasputlocker.net.avi -> E:\Malditos Vec
inos.www.peliculasputlocker.net.avi
Restorado! E:\\MUJERES.DVD.LAT.Www.Hackstore.Net.avi -> E:\MUJERES.DVD.LAT.Www.Ha
ckstore.Net.avi
Restorado! E:\\PG-NFSPEED.avi -> E:\PG-NFSPEED.avi
Restorado! E:\\driver pack17.txt -> E:\driver pack17.txt
Restorado! E:\\gUsbFix_Basic.exe -> E:\gUsbFix_Basic.exe
Restorado! E:\\IndexerVolumeGuid -> E:\IndexerVolumeGuid
(!) Archivos temporales suprimido. (13.8111295700073 MB)
[b]################## | Startup |[/b]
F2 - HKLM\..\Winlogon : [Shell] explorer.exe
F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - HKLM\..\Winlogon : [Userinit] userinit.exe
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
04 - HKCU\..\Run : [OfficeSyncProcess] "C:\Program Files (x86)\Microsoft Office\
Office14\MSOSYNC.EXE"

04 - HKLM\..\Run : [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\B

CSSync.exe" /DelayServices
04 - HKLM\..\Run : [ADSKAppManager] "C:\Program Files (x86)\Common Files\Autodes
k Shared\AppManager\R1\AdAppMgr.exe" -showminimized -checkautorun
04 - HKLM\..\Run : [vmware-tray.exe] "C:\Program Files (x86)\VMware\VMware Works
tation\vmware-tray.exe"
04 - HKLM\..\Run : [BrMfcWnd] C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.e
xe /AUTORUN
04 - HKLM\..\Run : [ControlCenter3] C:\Program Files (x86)\Brother\ControlCenter
3\brctrcen.exe /autorun
04 - HKLM\..\Run : [AvgUi] "C:\Program Files (x86)\AVG\Framework\Common\avguirnx
.exe" /lps=fmw
04 - HKLM\..\Run : [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Jav
a\Java Update\jusched.exe"
04 - HKLM\..\Run : [BossD] "C:\Program Files (x86)\LEVERIT\AGENT\nicand.exe" /no
rmal
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe
/autoRun
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe
/autoRun
04 - HKU\S-1-5-21-3024796046-2084088644-2793984810-1000\..\Run : [OfficeSyncProc
ess] "C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE"
04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04GS - MEGAsync.lnk : C:\Users\APRENDIZ\AppData\Local\MEGAsync\MEGAsync.exe
04GS - PdaNet Desktop.lnk : C:\Program Files (x86)\PdaNet for Android\PdaNetPC.e
xe
04GS - ActiClean USB.lnk : C:\Program Files (x86)\Elohim Soft\ActiClean USB\Acti
Clean USB.exe
[b]################## | C:\ %SystemDrive% - Disco fijo (NTFS) |[/b]
[03/09/2015
[08/03/2016
[08/03/2016
[09/03/2016
[27/01/2016
[17/06/2014
[14/07/2009
[03/09/2015
[03/09/2015
[03/09/2015
[03/09/2015
[15/09/2015
[16/10/2015
[30/10/2015
[26/11/2015
[27/01/2016
[24/02/2016
[02/03/2016

11:16:26
21:34:14
21:34:16
03:16:41
08:08:21
15:06:54
00:08:56
09:53:52
09:53:52
10:27:26
11:01:56
08:53:10
00:24:49
22:09:51
07:35:17
08:08:13
09:52:13
10:54:02

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

A | 1 Ko] - C:\res.txt
ASH | 5880656 Ko] - C:\hiberfil.sys
ASH | 7840876 Ko] - C:\pagefile.sys
A | 0 Ko] - C:\res.dat
SHD] - C:\$Recycle.Bin
D] - C:\Halo CE v1.11 ES Portable by bAe
SHD] - C:\Documents and Settings
SHD] - C:\Archivos de programa
SHD] - C:\Recovery
D] - C:\Cadence
D] - C:\Autodesk
D] - C:\SPB_Data
D] - C:\IDE
D] - C:\123
D] - C:\TMP
RD] - C:\Users
D] - C:\Quarantine
RD] - C:\Program Files

[08/03/2016
[08/03/2016
[09/03/2016
[09/03/2016
[09/03/2016

22:47:45
23:16:45
03:16:14
03:16:36
03:20:17

|
|
|
|
|

D] - C:\Program Files (x86)

D] - C:\[Rodrigopolis de T!] H3 ODST Reflex Edition
D] - C:\UsbFix
D] - C:\Windows
HD] - C:\ProgramData

[b]################## | E:\ - Disco extrable (FAT32) |[/b]

[09/03/2016 - 03:16:00 | D] - E:\
[09/03/2016 - 03:16:02 | N | 0 Ko] - E:\desktop.ini
[09/03/2016 - 02:59:22 | N | 0 Ko] - E:\H9ko8183YIff74q59u
[30/10/2013 - 00:11:38 | N | 340261 Ko] - E:\14.v3nd3r4.d3.r0s4s.mp4
[05/03/2011 - 19:19:50 | N | 725058 Ko] - E:\3l.m43str0.d3.l4.kung.fus10n.www.pe
liculasputlocker.net.avi
[09/10/2013 - 22:24:26 | N | 819180 Ko] - E:\ARMADAS Y PELIGROSAS.avi
[21/10/2015 - 21:10:16 | N | 1193518 Ko] - E:\0nd3taaN03_[www.peliculasmega1k.co
m].avi
[31/07/2014 - 19:22:40 | N | 823786 Ko] - E:\el jinete sin cabeza.avi
[15/10/2014 - 01:05:12 | N | 716348 Ko] - E:\la peor noche de mi vida.avi
[02/07/2015 - 11:50:32 | N | 736464 Ko] - E:\la vida es vella.avi
[14/08/2014 - 21:17:44 | N | 712714 Ko] - E:\Malditos Vecinos.www.peliculasputlo
cker.net.avi
[19/07/2014 - 16:23:12 | N | 956164 Ko] - E:\MUJERES.DVD.LAT.Www.Hackstore.Net.a
vi
[16/07/2014 - 16:42:52 | N | 707638 Ko] - E:\PG-NFSPEED.avi
[04/03/2016 - 02:54:08 | N | 0 Ko] - E:\driver pack17.txt
[14/10/2015 - 05:59:26 | N | 3009 Ko] - E:\gUsbFix_Basic.exe
[09/03/2016 - 03:20:28 | D] - E:\Autorun.inf
[09/03/2016 - 03:16:02 | N | 547 Ko] - E:\IndexerVolumeGuid
[09/03/2016 - 03:09:50 | D] - E:\\Autorun.inf
[265/122/63600 - 60120:1118:5216 | A | 0 Ko] - E:\\Autorun.inf\lpt1.UsbFix
[b]################## | Vaccin |[/b]
C:\Autorun.inf -> Vacuna creada por UsbFix (El Desaparecido)
E:\Autorun.inf -> Vacuna creada por UsbFix (El Desaparecido)
[b]Anlisis realizada en 118.7 segundos[/b]
[b]################## | E.O.F | [url=http://www.sosvirus.net/]http://www.sosviru
s.net/[/url] | [url=http://www.es.usbfix.net/]http://www.es.usbfix.net/[/url] |[
/b]