[b]############################## | UsbFix V 8.

110 | [Clean][/b]
User: Lenovo (Administrator) # LENOVO-PC
Updated 19/09/2015 by El Desaparecido - SosVirus
Started at 23:38:42 | 15/10/2015
Website : [url=http://www.en.usbfix.net/]http://www.en.usbfix.net/[/url]
Tutorial : [url=http://www.pt.usbfix.net/2014/03/tutorial-do-usbfix-scan/]http:/
/www.pt.usbfix.net/2014/03/tutorial-do-usbfix-scan/[/url]
Support : [url=http://www.sos-virus.net/]http://www.sos-virus.net/[/url]
Live detection : [url=http://how-to-remove.us/]http://how-to-remove.us/[/url]
Contact : [url=http://www.en.usbfix.net/contact/]http://www.en.usbfix.net/contac
t/[/url]
[b]################## | System information |[/b]
MB: LENOVO (Lenovo Flex 2-14)
CPU: Intel(R) Core(TM) i5-4210U CPU @ 1.70GHz
GC: Intel(R) HD Graphics Family
RAM -> [Total : 3246 Mo | Free : 1558 Mo]
Bios: LENOVO
Boot: Normal boot
OS: Microsoft Windows 8.1 Single Language (6.3.9600 64-Bit)
WB: Internet Explorer : 11.00.9600.16384
WB: Google Chrome : 45.0.2454.101
[b]################## | Security Information |[/b]
AV:
AS:
FW:
SC:
WU:

Windows Defender [Enabled |[b](!) Outdated[/b]]

Windows Defender [Enabled |[b](!) Outdated[/b]]
Windows Firewall [[b](!) Disabled[/b]]
Security Center [Enabled]
Windows Update [Enabled]

[b]################## | Disk Information |[/b]

C:\
TFS
D:\
E:\
F:\

(%SystemDrive%) -> Fixed disk # 424 Gb (274 Gb free - 64%) [Windows8_OS] # N

-> Fixed disk # 25 Gb (22 Gb free - 87%) [LENOVO] # NTFS
-> CD-ROM # 4 Gb (0 Mb free - 0%) [acad2015] # CDFS
-> Removable disk # 7 Gb (7 Gb free - 100%) [NAZIRUL] # FAT32

[b]################## | Generic Research |[/b]

Deleted! F:\NAZIRUL (8GB).lnk
Deleted! F:\\{72D2BBB1-2660-4386-B874-08E1ADBBCDF3}.{76209AC5-BBE5-470C-9AB6-1771
5D486047}
Deleted! C:\Users\Lenovo\AppData\Local\Temp\LenovoRecommends\LAPTOP.png
Deleted! C:\Users\Lenovo\AppData\Local\Temp\LenovoRecommends\STAND.png
Deleted! C:\Users\Lenovo\AppData\Local\Temp\LenovoRecommends\TABLET.png
Deleted! C:\Users\Lenovo\AppData\Local\Temp\LenovoRecommends\TENT.png
Deleted! C:\Users\Lenovo\AppData\Local\Temp\LenovoRecommends
Restored! [D] F:\
Restored! F:\\desktop.ini -> F:\desktop.ini
Restored! F:\\Chapter 4 - ALCOHOLS, PHENOLS ETHERS.pdf -> F:\Chapter 4 - ALCOHOL
S, PHENOLS ETHERS.pdf
Restored! F:\\Chapter 5 - ALDEHYDES KETONES.pdf -> F:\Chapter 5 - ALDEHYDES KET
ONES.pdf
Restored! F:\\OBJECTIVE ACHOY.docx -> F:\OBJECTIVE ACHOY.docx

Restored! F:\\ABSRACT ACHOY.docx -> F:\ABSRACT ACHOY.docx

Restored! F:\\HUHU.docx -> F:\HUHU.docx
Restored! F:\\IndexerVolumeGuid -> F:\IndexerVolumeGuid
(!) Temporary files deleted. (37.1566648483276 MB)
[b]################## | Startup |[/b]
F2 - HKLM\..\Winlogon : [Shell] explorer.exe
F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - HKLM\..\Winlogon : [Userinit] userinit.exe
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
04 - HKCU\..\Run : [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.e
xe" /MONITOR
04 - HKCU\..\Run : [Spotify Web Helper] "C:\Users\Lenovo\AppData\Roaming\Spotify
\SpotifyWebHelper.exe"
04 - HKCU\..\Run : [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minim
ized /regrun
04 - HKCU\..\Run : [Dxtory Update Checker 2.0] C:\Program Files (x86)\ExKode\Dxt
ory2.0\UpdateChecker.exe
04 - HKCU\..\Run : [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools
Lite\DTAgent.exe" -autorun
04 - HKCU\..\Run : [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSyn
c.exe
04 - HKCU\..\Run : [Spotify] "C:\Users\Lenovo\AppData\Roaming\Spotify\spotify.ex
e" -autostart -minimized
04 - HKLM\..\Run : [Lenovo Recommends] C:\Program Files (x86)\Lenovo\Lenovo Reco
mmends\Lenovo Recommends.exe -s
04 - HKLM\..\Run : [CheckNDISPortF0acE1] C:\Program Files (x86)\Hostless Modem\M
axis Broadband\CheckNDISPort_df.exe
04 - HKLM\..\Run : [CancelAutoPlay_df] "C:\Program Files (x86)\Hostless Modem\Ma
xis Broadband\CancelAutoPlay_df.exe" run
04 - HKLM\..\Run : [ProductUpdater] C:\Program Files (x86)\Common Files\Freemake
Shared\ProductUpdater\ProductUpdater.exe
04 - HKLM\..\Run : [Dropbox] "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe"
/systemstartup
04 - HKLM\..\Run : [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe
" -atboottime
04 - HKLM\..\Run : [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Jav
a\Java Update\jusched.exe"
04 - HKLM\..\Run : [ADSKAppManager] "C:\Program Files (x86)\Common Files\Autodes
k Shared\AppManager\R1\AdAppMgr.exe" -showminimized -checkautorun
04 - HKLM\..\Run : [NI Update Service] "C:\Program Files (x86)\National Instrume
nts\Shared\Update Service\NIUpdateService.exe" -startupTask
04 - [x64] HKLM\..\Run : [IgfxTray] "C:\windows\system32\igfxtray.exe"
04 - [x64] HKLM\..\Run : [IAStorIcon] "C:\Program Files\Intel\Intel(R) Rapid Sto
rage Technology\IAStorIconLaunch.exe" "C:\Program Files\Intel\Intel(R) Rapid Sto
rage Technology\IAStorIcon.exe" 60
04 - [x64] HKLM\..\Run : [NvBackend] "C:\Program Files (x86)\NVIDIA Corporation\
Update Core\NvBackend.exe"
04 - [x64] HKLM\..\Run : [ShadowPlay] C:\windows\system32\rundll32.exe C:\window
s\system32\nvspcap64.dll,ShadowPlayOnSystemStart
04 - [x64] HKLM\..\Run : [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.
exe -s
04 - [x64] HKLM\..\Run : [RtHDVBg_Dolby] "C:\Program Files\Realtek\Audio\HDA\RAV
Bg64.exe" /FORPCEE4
04 - [x64] HKLM\..\Run : [RtHDVBg_LENOVO_DOLBYDRAGON] "C:\Program Files\Realtek\
Audio\HDA\RAVBg64.exe" /LENOVO_DOLBYDRAGON
04 - [x64] HKLM\..\Run : [RtHDVBg_LENOVO_MICPKEY] "C:\Program Files\Realtek\Audi
o\HDA\RAVBg64.exe" /LENOVO_MICPKEY

04 - [x64] HKLM\..\Run : [BTMTrayAgent] rundll32.exe "C:\Program Files (x86)\Int

el\Bluetooth\btmshellex.dll",TrayApp
04 - [x64] HKLM\..\Run : [AutoStartTransition] C:\Program Files (x86)\Lenovo\Len
ovo Transition\Transition.exe AutoRun
04 - [x64] HKLM\..\Run : [PhoneCompanion] C:\Program Files\Lenovo PhoneCompanion
\Phone Companion.exe
04 - [x64] HKLM\..\Run : [Energy Manager] C:\Program Files (x86)\Lenovo\Energy M
anager\Energy Manager.exe
04 - [x64] HKLM\..\Run : [Lenovo Utility] C:\Program Files (x86)\Lenovo\Energy M
anager\Utility.exe
04 - [x64] HKLM\..\Run : [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.ex
e"
04 - HKU\S-1-5-21-1832886400-3677378555-3308127329-1001\..\Run : [CCleaner Monit
oring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
04 - HKU\S-1-5-21-1832886400-3677378555-3308127329-1001\..\Run : [Spotify Web He
lper] "C:\Users\Lenovo\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
04 - HKU\S-1-5-21-1832886400-3677378555-3308127329-1001\..\Run : [Skype] "C:\Pro
gram Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
04 - HKU\S-1-5-21-1832886400-3677378555-3308127329-1001\..\Run : [AdobeBridge]
04 - HKU\S-1-5-21-1832886400-3677378555-3308127329-1001\..\Run : [Dxtory Update
Checker 2.0] C:\Program Files (x86)\ExKode\Dxtory2.0\UpdateChecker.exe
04 - HKU\S-1-5-21-1832886400-3677378555-3308127329-1001\..\Run : [DAEMON Tools L
ite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
04 - HKU\S-1-5-21-1832886400-3677378555-3308127329-1001\..\Run : [Autodesk Sync]
C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
04 - HKU\S-1-5-21-1832886400-3677378555-3308127329-1001\..\Run : [Spotify] "C:\U
sers\Lenovo\AppData\Roaming\Spotify\spotify.exe" -autostart -minimized
04 - HKU\S-1-5-18\..\Run : [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sy
nc\AdSync.exe
04GS - NI Error Reporting.lnk : C:\Program Files (x86)\National Instruments\Shar
ed\NI Error Reporting\nierserver.exe
[b]################## | UsbFix - Information |[/b]
Info : [url=https://www.youtube.com/watch?v=vUZYYASd7FE]How to remove shortcut v
irus on flash disk (Video)[/url]
Info : [url=http://www.en.usbfix.net/2014/03/remove-shortcut-virus-usb/]Shortcut
virus on flash disk, What is it ?[/url]
Live detection : [url=http://how-to-remove.us/]http://how-to-remove.us/[/url]
[b]################## | C:\ %SystemDrive% - Fixed drive (NTFS) |[/b]
[10/10/2015
[10/10/2015
[10/10/2015
[01/10/2015
[06/07/2015
[28/11/2014
[18/06/2013
[22/08/2013
[22/08/2013
[18/03/2014
[04/04/2014
[04/04/2014
[11/07/2014
[08/10/2014
[30/11/2014
[27/05/2015
[25/06/2015
[27/06/2015

04:30:44
04:30:44
04:30:44
07:21:06
08:42:02
14:30:28
20:18:29
22:45:52
23:22:35
17:54:57
02:44:15
03:14:58
15:12:24
04:14:42
23:00:10
02:22:55
05:43:18
04:23:01

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

ASH | 2659128 Ko] - C:\hiberfil.sys

ASH | 3407872 Ko] - C:\pagefile.sys
ASH | 262144 Ko] - C:\swapfile.sys
D] - C:\Autorun.inf
A | 5 Ko] - C:\WirelessDiagLog.csv
SHD] - C:\$Recycle.Bin
N | 0 Ko] - C:\BOOTNXT
SHD] - C:\Documents and Settings
D] - C:\PerfLogs
RASH | 389 Ko] - C:\bootmgr
SHD] - C:\Recovery
SHD] - C:\Boot
D] - C:\UserGuidePDF
AD] - C:\Users
D] - C:\Games
D] - C:\Photoshop
N | 0 Ko] - C:\029EE5F8E774
D] - C:\Intel

[07/07/2015
[11/09/2015
[15/09/2015
[02/10/2015
[03/10/2015
[03/10/2015
[03/10/2015
[15/10/2015

15:31:33
09:00:30
02:57:13
21:30:00
04:43:39
04:47:00
04:52:46
22:08:14

|
|
|
|
|
|
|
|

N | 0 Ko] - C:\E889EACE8566
RHD] - C:\MSOCache
AD] - C:\adb
D] - C:\UsbFix
HD] - C:\ProgramData
RD] - C:\Program Files
RD] - C:\Program Files (x86)
AD] - C:\Windows

[b]################## | D:\ - Fixed drive (NTFS) |[/b]

[01/10/2015
[08/10/2014
[11/07/2014
[11/07/2014
[27/05/2015

07:21:07
04:19:16
16:23:01
16:23:01
02:22:39

|
|
|
|
|

D] SHD]
D] D] D] -

D:\Autorun.inf
- D:\$RECYCLE.BIN
D:\Drivers
D:\Applications
D:\Pot

[b]################## | F:\ - Removable drive (FAT32) |[/b]

[15/10/2015
[15/10/2015
[30/09/2015
.pdf
[30/09/2015
[15/10/2015
[15/10/2015
[15/10/2015
[15/10/2015
[13/10/2015
[13/10/2015

- 06:57:26 | D] - F:\
- 06:57:40 | N | 0 Ko] - F:\desktop.ini
- 20:31:00 | N | 1853 Ko] - F:\Chapter 4 - ALCOHOLS, PHENOLS ETHERS
-

20:31:46
11:42:00
15:08:44
15:07:54
06:57:44
12:21:06
12:21:06

|
|
|
|
|
|
|

N | 1136 Ko] - F:\Chapter 5 - ALDEHYDES KETONES.pdf

N | 11 Ko] - F:\OBJECTIVE ACHOY.docx
N | 13 Ko] - F:\ABSRACT ACHOY.docx
N | 13 Ko] - F:\HUHU.docx
N | 600 Ko] - F:\IndexerVolumeGuid
D] - F:\\autorun.inf
RSHD] - F:\\autorun.inf\Protection for Autorun

[b]################## | Vaccin |[/b]

F:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
[b]Analysed in 441.2 seconds[/b]
[b]################## | E.O.F | [url=http://www.sosvirus.net/]http://www.sosviru
s.net/[/url] | [url=http://www.en.usbfix.net/]http://www.en.usbfix.net/[/url] |[
/b]