[b]############################## | UsbFix V 7.

183 | [Limpiar][/b]
Usuario: Ricardo (Administrador) # RICHARD
Actualizado el 30/09/2014 por El Desaparecido - SosVirus
Comenz a 13:37:04 | 08/02/2015
Sitio web : [url=http://www.es.usbfix.net/]http://www.es.usbfix.net/[/url]
Changelog : [url=http://www.usbfix.net/maj/]http://www.usbfix.net/maj/[/url]
Asistencia : [url=http://www.forospyware.com/foro-de-virus-y-spywares/]http://ww
w.forospyware.com/foro-de-virus-y-spywares/[/url]
Upload Malware : [url=http://www.sosvirus.net/upload_malware.php]http://www.sosv
irus.net/upload_malware.php[/url]
Dtection en directo : [url=http://como-eliminar.net/]http://como-eliminar.net/[/u
rl]
Contacto : [url=http://www.es.usbfix.net/contacto/]http://www.es.usbfix.net/cont
acto/[/url]
[b]################## | System information |[/b]
MB: ASUSTeK COMPUTER INC. (X200MA)
CPU: Intel(R) Celeron(R) CPU N2815 @ 1.86GHz
GC: Intel(R) HD Graphics
RAM -> [Total : 3967 Mo | Free : 1388 Mo]
Bios: American Megatrends Inc.
Boot: Normal boot
OS:
WB:
WB:
WB:
WB:

Microsoft Windows 8.1 (6.3.9600 64-Bit)

Internet Explorer : 11.00.9600.16384
Google Chrome : 40.0.2214.111
Mozilla Firefox : 34.0.5
Safari : 534.57.2

[b]################## | Security Information |[/b]

AV:
AV:
AS:
AS:
FW:
SC:
WU:

ESET NOD32 Antivirus 8.0 [Activado |Actualizado]

Windows Defender [[b](!) Desactivado[/b] |Actualizado]
Windows Defender [[b](!) Desactivado[/b] |Actualizado]
ESET NOD32 Antivirus 8.0 [Activado |Actualizado]
Windows Firewall [Activado]
Security Center [Activado]
Windows Update [Activado]

[b]################## | Disk Information |[/b]

C:\ (%SystemDrive%) -> Disco fijo # 445 Gb (176 Gb libre(s) - 39%) [OS] # NTFS
D:\ -> CD-ROM # 624 Mb (0 Mb libre(s) - 0%) [New] # CDFS
H:\ -> Disco extrable # 8 Gb (3 Gb libre(s) - 40%) [W7AIO] # NTFS
[b]################## | Bsqueda genrica |[/b]
(!) Archivos temporales suprimido. (124.396155357361 MB)
[b]################## | Registro |[/b]
Borrado! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution
Options\asuswspanel.exe
Borrado! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution
Options\gameconsole-wt.exe

[b]################## | Regedit Run |[/b]

F2 - HKLM\..\Winlogon : [Shell] explorer.exe
F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - HKLM\..\Winlogon : [Userinit] userinit.exe
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
04 - HKCU\..\Run : [GoogleChromeAutoLaunch_84854A84C743E25857292618D6239639] "C:
\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
04 - HKCU\..\Run : [Spotify] "C:\Users\Ricardo\AppData\Roaming\Spotify\Spotify.e
xe" /uri spotify:autostart
04 - HKCU\..\Run : [GoogleDriveSync] "C:\Program Files (x86)\Google\Drive\google
drivesync.exe" /autostart
04 - HKCU\..\Run : [Spotify Web Helper] "C:\Users\Ricardo\AppData\Roaming\Spotif
y\Data\SpotifyWebHelper.exe"
04 - HKCU\..\Run : [Facebook Update] "C:\Users\Ricardo\AppData\Local\Facebook\Up
date\FacebookUpdate.exe" /c /nocrashserver
04 - HKCU\..\Run : [Nokia Internet Modem] "C:\Program Files (x86)\Nokia\Nokia In
ternet Modem\WellPhone2.exe" /background
04 - HKCU\..\Run : [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.e
xe" /MONITOR
04 - HKCU\..\Run : [DAEMON Tools Pro Agent] "C:\Program Files (x86)\DAEMON Tools
Pro\DTAgent.exe" -autorun
04 - HKCU\..\Run : [RESTART_STICKY_NOTES] C:\Windows\system32\StikyNot.exe
04 - HKLM\..\Run : [ASUSPRP] "C:\Program Files (x86)\ASUS\APRP\APRP.EXE"
04 - HKLM\..\Run : [WebStorage] C:\Program Files (x86)\ASUS\WebStorage\2.0.3.226
\ASUSWSLoader.exe
04 - HKLM\..\Run : [vmware-tray.exe] "C:\Program Files (x86)\VMware\VMware Works
tation\vmware-tray.exe"
04 - HKLM\..\Run : [Adobe Creative Cloud] "C:\Program Files (x86)\Adobe\Adobe Cr
eative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
04 - HKLM\..\Run : [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\Switc
hBoard\SwitchBoard.exe
04 - HKLM\..\Run : [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files
\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
04 - HKLM\..\Run : [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.ex
e"
04 - HKLM\..\Run : [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe
" -atboottime
04 - HKLM\..\Run : [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Jav
a\Java Update\jusched.exe"
04 - [x64] HKLM\..\Run : [IgfxTray] "C:\Windows\system32\igfxtray.exe"
04 - [x64] HKLM\..\Run : [HotKeysCmds] "C:\Windows\system32\hkcmd.exe"
04 - [x64] HKLM\..\Run : [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Fi
les\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
04 - [x64] HKLM\..\Run : [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui
.exe" /hide /waitservice
04 - [x64] HKLM\..\Run : [Connectify Hotspot] C:\Program Files (x86)\Connectify\
Connectify.exe autorun
04 - [x64] HKLM\..\Run : [Connectify Dispatch] C:\Program Files (x86)\Connectify
\DispatchUI.exe autorun
04 - HKU\S-1-5-21-1825218253-1881555232-884796097-1001\..\Run : [GoogleChromeAut
oLaunch_84854A84C743E25857292618D6239639] "C:\Program Files (x86)\Google\Chrome\
Application\chrome.exe" --no-startup-window
04 - HKU\S-1-5-21-1825218253-1881555232-884796097-1001\..\Run : [Spotify] "C:\Us
ers\Ricardo\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
04 - HKU\S-1-5-21-1825218253-1881555232-884796097-1001\..\Run : [GoogleDriveSync
] "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
04 - HKU\S-1-5-21-1825218253-1881555232-884796097-1001\..\Run : [Spotify Web Hel
per] "C:\Users\Ricardo\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
04 - HKU\S-1-5-21-1825218253-1881555232-884796097-1001\..\Run : [Facebook Update

] "C:\Users\Ricardo\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocras
hserver
04 - HKU\S-1-5-21-1825218253-1881555232-884796097-1001\..\Run : [Nokia Internet
Modem] "C:\Program Files (x86)\Nokia\Nokia Internet Modem\WellPhone2.exe" /backg
round
04 - HKU\S-1-5-21-1825218253-1881555232-884796097-1001\..\Run : [CCleaner Monito
ring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
04 - HKU\S-1-5-21-1825218253-1881555232-884796097-1001\..\Run : [DAEMON Tools Pr
o Agent] "C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe" -autorun
04 - HKU\S-1-5-21-1825218253-1881555232-884796097-1001\..\Run : [RESTART_STICKY_
NOTES] C:\Windows\system32\StikyNot.exe
[b]################## | UsbFix - Informacin |[/b]
Info : [url=https://www.youtube.com/watch?v=vUZYYASd7FE]Cmo eliminar el virus de a
cceso directo en el disco flash ? (Video)[/url]
Info : [url=http://www.en.usbfix.net/2014/03/remove-shortcut-virus-usb/]Virus de
acceso directo en el disco flash, Qu es?[/url]
[b]################## | Hijack |[/b]
[b]################## | C:\ %SystemDrive% - Disco fijo (NTFS) |[/b]
[06/02/2015
[06/02/2015
[06/02/2015
[13/08/2014
[18/06/2013
[22/08/2013
[22/08/2013
[13/12/2013
[13/12/2013
[13/12/2013
[17/02/2014
[17/02/2014
[13/08/2014
[04/10/2014
[01/11/2014
[24/11/2014
[06/12/2014
[05/01/2015
[18/01/2015
[24/01/2015
[03/02/2015
[06/02/2015
[07/02/2015

20:16:42
20:16:42
20:16:42
15:59:42
06:18:29
08:45:52
09:22:35
16:17:57
16:35:00
17:00:47
16:24:38
16:25:39
15:39:20
13:18:25
14:25:57
17:10:30
09:03:53
16:24:39
09:53:28
12:57:35
18:01:45
20:16:42
05:28:05

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

ASH | 3249760 Ko] - C:\hiberfil.sys

ASH | 4063232 Ko] - C:\pagefile.sys
ASH | 262144 Ko] - C:\swapfile.sys
SHD] - C:\$Recycle.Bin
N | 0 Ko] - C:\BOOTNXT
SHD] - C:\Documents and Settings
D] - C:\PerfLogs
RASH | 389 Ko] - C:\bootmgr
SHD] - C:\Boot
SHD] - C:\Recovery
D] - C:\eSupport
D] - C:\AsusVibeData
RD] - C:\Users
D] - C:\UsbFix
D] - C:\metasploit
D] - C:\Linksys Driver
D] - C:\Mir Video Cursos
D] - C:\AdwCleaner
RD] - C:\Program Files
HD] - C:\ProgramData
RD] - C:\Program Files (x86)
AD] - C:\Windows
SHD] - C:\System Volume Information

[b]################## | Vaccin |[/b]

C:\Autorun.inf -> Vacuna creada por UsbFix (El Desaparecido)
[b]################## | E.O.F | [url=http://www.sosvirus.net/]http://www.sosviru
s.net/[/url] | [url=http://www.es.usbfix.net/]http://www.es.usbfix.net/[/url] |[
/b]