Publicité
Publicité
Format du document : text/plain
Prévisualisation
[b]############################## | UsbFix V 8.011 | [Research][/b]
User: Dr.M.Abou Shaar (Administrator) # DRMABOUSHAAR-PC
Updated 09/08/2015 by El Desaparecido - SosVirus
Started at 23:20:09 | 11/08/2015
Website : [url=http://www.en.usbfix.net/]http://www.en.usbfix.net/[/url]
Changelog : [url=http://www.en.usbfix.net/changelog/]http://www.en.usbfix.net/changelog/[/url]
Support : [url=http://www.sos-virus.net/]http://www.sos-virus.net/[/url]
Live detection : [url=http://how-to-remove.us/]http://how-to-remove.us/[/url]
Contact : [url=http://www.en.usbfix.net/contact/]http://www.en.usbfix.net/contact/[/url]
[b]################## | System information |[/b]
MB: Hewlett-Packard (1670)
CPU: Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz
GC: Intel(R) HD Graphics 3000
RAM -> [Total : 2510 Mo | Free : 904 Mo]
Bios: Hewlett-Packard
Boot: Normal boot
OS: Microsoft Windows 7 Ultimate (6.1.7601 32-Bit) Service Pack 1
WB: Internet Explorer : 11.00.9600.16428
WB: Mozilla Firefox : 36.0.4
[b]################## | Security Information |[/b]
AV: ESET Smart Security 7.0 [[b](!) Disabled[/b] |[b](!) Outdated[/b]]
AS: Windows Defender [Enabled |[b](!) Outdated[/b]]
AS: ESET Smart Security 7.0 [[b](!) Disabled[/b] |[b](!) Outdated[/b]]
FW: ESET Personal firewall [Enabled]
FW: Windows Firewall [Enabled]
SC: Security Center [Enabled]
WU: Windows Update [Enabled]
[b]################## | Disk Information |[/b]
C:\ (%SystemDrive%) -> Fixed disk # 100 Gb (21 Gb free - 21%) [] # NTFS
D:\ -> Fixed disk # 120 Gb (2 Gb free - 2%) [] # NTFS
E:\ -> Fixed disk # 120 Gb (13 Gb free - 11%) [] # NTFS
F:\ -> Fixed disk # 126 Gb (86 Gb free - 68%) [] # NTFS
I:\ -> Removable disk # 4 Gb (4 Gb free - 99%) [ABOU SHAAR] # FAT32
[b]################## | Startup |[/b]
F2 - HKLM\..\Winlogon : [Shell] Explorer.exe
F2 - HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
F3 - HKCU\..\Windows : [Load] C:\ProgramData\msmfpfu.exe
04 - HKCU\..\Run : [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
04 - HKCU\..\Run : [IDMan] C:\Program Files\MisterKen-Studios\Internet Download Manager\IDMan.exe /onboot
04 - HKCU\..\Run : [Steam] C:\Program Files\Steam\Steam.exe -silent
04 - HKCU\..\Run : [????????] C:\Program Files\Tongbu\tbMobileService.exe /start
04 - HKLM\..\Run : [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
04 - HKLM\..\Run : [cmsc] "c:\program files\cmcm\Clean Master\cmtray.exe" -autorun
04 - HKLM\..\Run : [IgfxTray] "C:\Windows\system32\igfxtray.exe"
04 - HKLM\..\Run : [Persistence] "C:\Windows\system32\igfxpers.exe"
04 - HKLM\..\Run : [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
04 - HKLM\..\Run : [HotKeysCmds] "C:\Windows\system32\hkcmd.exe"
04 - HKLM\..\Run : [BlueStacks Agent] C:\Program Files\BlueStacks\HD-Agent.exe
04 - HKLM\..\Run : [SysTrayApp] C:\Program Files\IDT\WDM\sttray.exe
04 - HKLM\..\Run : [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
04 - HKLM\..\Run : [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-21-1935820700-733707283-127377599-1000\..\Run : [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
04 - HKU\S-1-5-21-1935820700-733707283-127377599-1000\..\Run : [IDMan] C:\Program Files\MisterKen-Studios\Internet Download Manager\IDMan.exe /onboot
04 - HKU\S-1-5-21-1935820700-733707283-127377599-1000\..\Run : [Steam] C:\Program Files\Steam\Steam.exe -silent
04 - HKU\S-1-5-21-1935820700-733707283-127377599-1000\..\Run : [????????] C:\Program Files\Tongbu\tbMobileService.exe /start
04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-18\..\RunOnce : [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601
[b]################## | Generic Research |[/b]
Found! I:\ABOU SHAAR (4GB).lnk
Found! I:\ \qS8oIua.kM2eK4s.iGs.YEqW8w.GwAqG.wU2S4c.KoQuC.8oU6aGwE
Found! C:\ProgramData\msmfpfu.exe
Found! I:\ \æÓíã ÃÞÏÍ\- Shortcut.lnk
Found! C:\Users\All Users\msmfpfu.exe
Found! HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows|load (C:\ProgramData\msmfpfu.exe)
Found! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsemngr.exe
Found! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsermngr.exe
Found! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cltmngsvc.exe
Found! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\delta babylon.exe
Found! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\delta tb.exe
Found! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\delta2.exe
Found! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\deltainstaller.exe
Found! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\deltasetup.exe
Found! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\deltatb_2501-c733154b.exe
Found! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iminentsetup.exe
Found! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rjatydimofu.exe
Found! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sweetimsetup.exe
Found! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tbdelta.exetoolbar783881609.exe
[b]################## | UsbFix - Information |[/b]
Info : [url=https://www.youtube.com/watch?v=vUZYYASd7FE]How to remove shortcut virus on flash disk (Video)[/url]
Info : [url=http://www.en.usbfix.net/2014/03/remove-shortcut-virus-usb/]Shortcut virus on flash disk, What is it ?[/url]
Live detection : [url=http://how-to-remove.us/]http://how-to-remove.us/[/url]
[b]################## | E.O.F | [url=http://www.sosvirus.net/]http://www.sosvirus.net/[/url] | [url=http://www.en.usbfix.net/]http://www.en.usbfix.net/[/url] |[/b]
User: Dr.M.Abou Shaar (Administrator) # DRMABOUSHAAR-PC
Updated 09/08/2015 by El Desaparecido - SosVirus
Started at 23:20:09 | 11/08/2015
Website : [url=http://www.en.usbfix.net/]http://www.en.usbfix.net/[/url]
Changelog : [url=http://www.en.usbfix.net/changelog/]http://www.en.usbfix.net/changelog/[/url]
Support : [url=http://www.sos-virus.net/]http://www.sos-virus.net/[/url]
Live detection : [url=http://how-to-remove.us/]http://how-to-remove.us/[/url]
Contact : [url=http://www.en.usbfix.net/contact/]http://www.en.usbfix.net/contact/[/url]
[b]################## | System information |[/b]
MB: Hewlett-Packard (1670)
CPU: Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz
GC: Intel(R) HD Graphics 3000
RAM -> [Total : 2510 Mo | Free : 904 Mo]
Bios: Hewlett-Packard
Boot: Normal boot
OS: Microsoft Windows 7 Ultimate (6.1.7601 32-Bit) Service Pack 1
WB: Internet Explorer : 11.00.9600.16428
WB: Mozilla Firefox : 36.0.4
[b]################## | Security Information |[/b]
AV: ESET Smart Security 7.0 [[b](!) Disabled[/b] |[b](!) Outdated[/b]]
AS: Windows Defender [Enabled |[b](!) Outdated[/b]]
AS: ESET Smart Security 7.0 [[b](!) Disabled[/b] |[b](!) Outdated[/b]]
FW: ESET Personal firewall [Enabled]
FW: Windows Firewall [Enabled]
SC: Security Center [Enabled]
WU: Windows Update [Enabled]
[b]################## | Disk Information |[/b]
C:\ (%SystemDrive%) -> Fixed disk # 100 Gb (21 Gb free - 21%) [] # NTFS
D:\ -> Fixed disk # 120 Gb (2 Gb free - 2%) [] # NTFS
E:\ -> Fixed disk # 120 Gb (13 Gb free - 11%) [] # NTFS
F:\ -> Fixed disk # 126 Gb (86 Gb free - 68%) [] # NTFS
I:\ -> Removable disk # 4 Gb (4 Gb free - 99%) [ABOU SHAAR] # FAT32
[b]################## | Startup |[/b]
F2 - HKLM\..\Winlogon : [Shell] Explorer.exe
F2 - HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
F3 - HKCU\..\Windows : [Load] C:\ProgramData\msmfpfu.exe
04 - HKCU\..\Run : [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
04 - HKCU\..\Run : [IDMan] C:\Program Files\MisterKen-Studios\Internet Download Manager\IDMan.exe /onboot
04 - HKCU\..\Run : [Steam] C:\Program Files\Steam\Steam.exe -silent
04 - HKCU\..\Run : [????????] C:\Program Files\Tongbu\tbMobileService.exe /start
04 - HKLM\..\Run : [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
04 - HKLM\..\Run : [cmsc] "c:\program files\cmcm\Clean Master\cmtray.exe" -autorun
04 - HKLM\..\Run : [IgfxTray] "C:\Windows\system32\igfxtray.exe"
04 - HKLM\..\Run : [Persistence] "C:\Windows\system32\igfxpers.exe"
04 - HKLM\..\Run : [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
04 - HKLM\..\Run : [HotKeysCmds] "C:\Windows\system32\hkcmd.exe"
04 - HKLM\..\Run : [BlueStacks Agent] C:\Program Files\BlueStacks\HD-Agent.exe
04 - HKLM\..\Run : [SysTrayApp] C:\Program Files\IDT\WDM\sttray.exe
04 - HKLM\..\Run : [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
04 - HKLM\..\Run : [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 - HKU\S-1-5-21-1935820700-733707283-127377599-1000\..\Run : [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
04 - HKU\S-1-5-21-1935820700-733707283-127377599-1000\..\Run : [IDMan] C:\Program Files\MisterKen-Studios\Internet Download Manager\IDMan.exe /onboot
04 - HKU\S-1-5-21-1935820700-733707283-127377599-1000\..\Run : [Steam] C:\Program Files\Steam\Steam.exe -silent
04 - HKU\S-1-5-21-1935820700-733707283-127377599-1000\..\Run : [????????] C:\Program Files\Tongbu\tbMobileService.exe /start
04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-18\..\RunOnce : [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601
[b]################## | Generic Research |[/b]
Found! I:\ABOU SHAAR (4GB).lnk
Found! I:\ \qS8oIua.kM2eK4s.iGs.YEqW8w.GwAqG.wU2S4c.KoQuC.8oU6aGwE
Found! C:\ProgramData\msmfpfu.exe
Found! I:\ \æÓíã ÃÞÏÍ\- Shortcut.lnk
Found! C:\Users\All Users\msmfpfu.exe
Found! HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows|load (C:\ProgramData\msmfpfu.exe)
Found! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsemngr.exe
Found! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsermngr.exe
Found! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cltmngsvc.exe
Found! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\delta babylon.exe
Found! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\delta tb.exe
Found! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\delta2.exe
Found! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\deltainstaller.exe
Found! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\deltasetup.exe
Found! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\deltatb_2501-c733154b.exe
Found! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iminentsetup.exe
Found! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rjatydimofu.exe
Found! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sweetimsetup.exe
Found! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tbdelta.exetoolbar783881609.exe
[b]################## | UsbFix - Information |[/b]
Info : [url=https://www.youtube.com/watch?v=vUZYYASd7FE]How to remove shortcut virus on flash disk (Video)[/url]
Info : [url=http://www.en.usbfix.net/2014/03/remove-shortcut-virus-usb/]Shortcut virus on flash disk, What is it ?[/url]
Live detection : [url=http://how-to-remove.us/]http://how-to-remove.us/[/url]
[b]################## | E.O.F | [url=http://www.sosvirus.net/]http://www.sosvirus.net/[/url] | [url=http://www.en.usbfix.net/]http://www.en.usbfix.net/[/url] |[/b]