[b]############################## | UsbFix V 7.921.

2 | [Clean][/b]
User: ABDULAHAD (Administrator) # ABDULAHAD-PC
Updated 10/04/2015 by El Desaparecido - SosVirus
Started at 06:08:12 | 11/04/2015
Website : [url=http://www.en.usbfix.net/]http://www.en.usbfix.net/[/url]
Changelog : [url=http://www.en.usbfix.net/changelog/]http://www.en.usbfix.net/ch
angelog/[/url]
Support : [url=http://www.sos-virus.net/]http://www.sos-virus.net/[/url]
Live detection : [url=http://how-to-remove.us/]http://how-to-remove.us/[/url]
Contact : [url=http://www.en.usbfix.net/contact/]http://www.en.usbfix.net/contac
t/[/url]
[b]################## | System information |[/b]
MB: Dell Inc. (0YY3FH)
CPU: Intel(R) Atom(TM) CPU N550 @ 1.50GHz
RAM -> [Total : 2037 Mo | Free : 1202 Mo]
Bios: Dell Inc.
Boot: Normal boot
OS: Microsoft Windows 7 Ultimate (6.1.7601 32-Bit) Service Pack 1
WB: Internet Explorer : 8.00.7600.16385
WB: Mozilla Firefox : 36.0.4
[b]################## | Security Information |[/b]
AS:
FW:
SC:
WU:

Windows Defender [Enabled |[b](!) Outdated[/b]]

Windows Firewall [Enabled]
Security Center [Enabled]
Windows Update [Enabled]

[b]################## | Disk Information |[/b]

C:\
D:\
E:\
F:\

(%SystemDrive%)
-> Fixed disk #
-> Fixed disk #
-> Fixed disk #

-> Fixed disk # 49 Gb (35 Gb free - 71%) [] # NTFS

49 Gb (48 Gb free - 99%) [RIDA ] # NTFS
51 Gb (51 Gb free - 100%) [] # NTFS
100 Mb (67 Mb free - 67%) [System Reserved] # NTFS

[b]################## | Autorun |[/b]

[b]################## | Generic Research |[/b]
Deleted! C:\Users\ABDULAHAD\AppData\Roaming\qfujfoxoyk..vbs
Deleted! C:\Users\ABDULAHAD\AppData\Roaming\Microsoft\Windows\Start Menu\Program
s\Startup\qfujfoxoyk..vbs
(!) Temporary files deleted. (129.417725563049 MB)
[b]################## | Registry |[/b]
Deleted! HKU\S-1-5-21-1078349819-3225104864-2002735437-1000\Software\Microsoft\W
indows\CurrentVersion\Run|qfujfoxoyk
Deleted! HKLM\Software\Microsoft\Windows\CurrentVersion\Run|qfujfoxoyk
[b]################## | Regedit Run |[/b]
F2 - HKLM\..\Winlogon : [Shell] explorer.exe

F2 - HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,

04 - HKLM\..\Run : [IgfxTray] C:\Windows\system32\igfxtray.exe
04 - HKLM\..\Run : [HotKeysCmds] C:\Windows\system32\hkcmd.exe
04 - HKLM\..\Run : [Persistence] C:\Windows\system32\igfxpers.exe
04 - HKLM\..\Run : [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
04 - HKLM\..\Run : [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\G
rooveMonitor.exe"
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe
/autoRun
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe
/autoRun
04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
[b]################## | UsbFix - Information |[/b]
Info : [url=https://www.youtube.com/watch?v=vUZYYASd7FE]How to remove shortcut v
irus on flash disk (Video)[/url]
Info : [url=http://www.en.usbfix.net/2014/03/remove-shortcut-virus-usb/]Shortcut
virus on flash disk, What is it ?[/url]
Live detection : [url=http://how-to-remove.us/]http://how-to-remove.us/[/url]
[b]################## | Attrib - Restore |[/b]
[b]################## | C:\ %SystemDrive% - Fixed drive (NTFS) |[/b]
[10/06/2009
[11/04/2015
[11/04/2015
[27/02/2015
[10/06/2009
[13/07/2009
[27/02/2015
[27/02/2015
[16/03/2015
[16/03/2015
[16/03/2015
[23/03/2015
[11/04/2015

14:42:20
18:01:25
18:01:28
08:23:30
14:42:20
21:53:55
08:22:45
08:22:57
00:28:14
00:28:31
00:31:44
03:43:04
06:07:51

|
|
|
|
|
|
|
|
|
|
|
|
|

A | 0 Ko] - C:\config.sys
ASH | 1564692 Ko] - C:\hiberfil.sys
ASH | 2086260 Ko] - C:\pagefile.sys
SHD] - C:\$Recycle.Bin
A | 0 Ko] - C:\autoexec.bat
SHD] - C:\Documents and Settings
SHD] - C:\Recovery
RD] - C:\Users
RHD] - C:\MSOCache
HD] - C:\ProgramData
D] - C:\Windows
RD] - C:\Program Files
D] - C:\UsbFix

[b]################## | D:\ - Fixed drive (NTFS) |[/b]

[08/04/2015
[27/02/2015
[05/03/2015
[04/04/2015
[08/04/2015
[11/04/2015

18:37:37
08:23:30
11:54:35
02:10:35
18:06:45
18:02:40

|
|
|
|
|
|

A | 12 Ko] - D:\What is chemistry.docx

SHD] - D:\$RECYCLE.BIN
D] - D:\walpapers
D] - D:\Songs
D] - D:\Rida pics
D] - D:\college data

[b]################## | E:\ - Fixed drive (NTFS) |[/b]

[12/03/2015 15 - Copy.jpg
[12/03/2015 g
[05/03/2015 [27/02/2015 -

03:12:20 | A | 227 Ko] - E:\BISE Quetta Board FA FSc Date Sheet 20

10:38:31 | A | 51 Ko] - E:\11051035_397717080389695_844523303_n.jp
00:12:21 | A | 68 Ko] - E:\uxam2.gif
08:23:30 | SHD] - E:\$RECYCLE.BIN

[b]################## | F:\ - Fixed drive (NTFS) |[/b]

[27/02/2015
[27/02/2015
[25/07/2012
[25/07/2012
[14/02/2015
[14/02/2015
[27/02/2015
[27/02/2015

08:23:30
08:07:24
22:10:16
22:10:16
07:29:16
07:29:16
08:07:23
08:29:17

|
|
|
|
|
|
|
|

SHD] - F:\$RECYCLE.BIN
RASH | 8 Ko] - F:\BOOTSECT.BAK
N | 0 Ko] - F:\BOOTNXT
RASH | 389 Ko] - F:\bootmgr
N | 0 Ko] - F:\wedaolu
N | 201 Ko] - F:\YBKOH
SHD] - F:\Boot
| 306 Ko] - F:\UEWBK

[b]################## | Vaccin |[/b]

C:\Autorun.inf
D:\Autorun.inf
E:\Autorun.inf
F:\Autorun.inf

->
->
->
->

Vaccine
Vaccine
Vaccine
Vaccine

created
created
created
created

by
by
by
by

UsbFix
UsbFix
UsbFix
UsbFix

(El
(El
(El
(El

Desaparecido)
Desaparecido)
Desaparecido)
Desaparecido)

[b]################## | E.O.F | [url=http://www.sosvirus.net/]http://www.sosviru

s.net/[/url] | [url=http://www.en.usbfix.net/]http://www.en.usbfix.net/[/url] |[
/b]