[b]############################## | UsbFix V 7.183 | [Limpiar][/b]Usuario: Javicho (Administrador) # JAVICHO-PCActualizado el 30/09/2014 por El Desaparecido - SosVirusComenz a 13:53:48 | 06/11/2014Sitio web : [url=http://www.es.usbfix.net/]http://www.es.usbfix.net/[/url]Changelog : [url=http://www.usbfix.net/maj/]http://www.usbfix.net/maj/[/url]Asistencia : [url=http://www.forospyware.com/foro-de-virus-y-spywares/]http://www.forospyware.com/foro-de-virus-y-spywares/[/url]Upload Malware : [url=http://www.sosvirus.net/upload_malware.php]http://www.sosvirus.net/upload_malware.php[/url]Dtection en directo : [url=http://como-eliminar.net/]http://como-eliminar.net/[/url]Contacto : [url=http://www.es.usbfix.net/contacto/]http://www.es.usbfix.net/contacto/[/url][b]################## | System information |[/b]MB: Gigabyte Technology Co., Ltd. (GA-870A-UD3) CPU: AMD Phenom(tm) II X6 1055T ProcessorGC: NVIDIA GeForce GT 220 RAM -> [Total : 3070 Mo | Free : 2179 Mo]Bios: Award Software International, Inc.Boot: Normal bootOS: Microsoft Windows 7 Ultimate (6.1.7601 32-Bit) Service Pack 1WB: Google Chrome : 36.0.1985.125WB: Mozilla Firefox : 32.0.2[b]################## | Security Information |[/b]AV: Microsoft Security Essentials [Activado |Actualizado]AS: Microsoft Security Essentials [Activado |Actualizado]AS: Windows Defender [[b](!) Desactivado[/b] |[b](!) No actualizado[/b]]FW: Windows Firewall [Activado]SC: Security Center [Activado]WU: Windows Update [Activado][b]################## | Disk Information |[/b]C:\ (%SystemDrive%) -> Disco fijo # 195 Gb (71 Gb libre(s) - 37%) [] # NTFSD:\ -> Disco fijo # 146 Gb (57 Gb libre(s) - 39%) [] # NTFSE:\ -> Disco fijo # 124 Gb (92 Gb libre(s) - 74%) [] # NTFSG:\ -> Disco extrable # 2 Gb (2 Gb libre(s) - 86%) [JAVIXO 2] # FAT32[b]################## | Bsqueda genrica |[/b](!) Archivos temporales suprimido. (78.969331741333 MB)[b]################## | Registro |[/b][b]################## | Regedit Run |[/b]F2 - HKLM\..\Winlogon : [Shell] explorer.exeF2 - HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,04 - HKCU\..\Run : [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun04 - HKCU\..\Run : [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup04 - HKCU\..\Run : [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background04 - HKCU\..\Run : [ABBYY Screenshot Reader Bonus] "C:\Program Files\ABBYY FineReader 9.0 Sprint\Bonus.ScreenshotReader.exe" -autorun04 - HKCU\..\Run : [OfficeSyncProcess] "C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE"04 - HKCU\..\Run : [Vidalia] "C:\Program Files\Vidalia Bundle\Vidalia\vidalia.exe"04 - HKCU\..\Run : [GarenaPlus] "E:\musica de ivan no tocar\todo sobre ivan\Garena Plus\GarenaMessenger.exe" -autolaunch04 - HKCU\..\Run : [KiesPreload] C:\Program Files\Samsung\Kies\Kies.exe /preload04 - HKCU\..\Run : [KiesAirMessage] C:\Program Files\Samsung\Kies\KiesAirMessage.exe -startup04 - HKCU\..\Run : [AVG-Secure-Search-Update_0814tb] "C:\Program Files\AVG Security Toolbar\AVG-Secure-Search-Update_0814tb.exe" /PROMPT /CMPID=0814tb 04 - HKCU\..\Run : [EPLTarget\P0000000000000000] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIHJB.EXE /EPT "EPLTarget\P0000000000000000" /M "TX133 TX135" /EF "HKCU"04 - HKCU\..\RunOnce : [Application Restart #3] C:\Program Files\Google\Chrome\Application\chrome.exe --extensions-on-chrome-urls --test-type --load-extension="c:\Program Files\Google\Chrome\Application\Extensions\chrome\app" --load-component-extension="c:\Program Files\Google\Chrome\Application\Extensions\chrome\man" --flag-switches-begin --flag-switches-end --restore-last-session04 - HKLM\..\Run : [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start04 - HKLM\..\Run : [NeroFilterCheck] C:\Windows\system32\NeroCheck.exe04 - HKLM\..\Run : [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices04 - HKLM\..\Run : [EEventManager] "C:\Program Files\Epson Software\Event Manager\EEventManager.exe"04 - HKLM\..\Run : [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"04 - HKLM\..\Run : [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe04 - HKLM\..\Run : [TkBellExe] "C:\Program Files\Real\RealPlayer\update\realsched.exe" -osboot04 - HKLM\..\Run : [QuickFinder Scheduler] "c:\Program Files\Corel\WordPerfect Office X5\Programs\QFSCHD150.EXE"04 - HKLM\..\Run : [vProt] "C:\Program Files\AVG Secure Search\vprot.exe"04 - HKLM\..\Run : [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey04 - HKLM\..\Run : [KiesTrayAgent] C:\Program Files\Samsung\Kies\KiesTrayAgent.exe04 - HKLM\..\Run : [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun04 - HKU\S-1-5-21-549295623-3115610240-351994922-1000\..\Run : [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun04 - HKU\S-1-5-21-549295623-3115610240-351994922-1000\..\Run : [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup04 - HKU\S-1-5-21-549295623-3115610240-351994922-1000\..\Run : [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background04 - HKU\S-1-5-21-549295623-3115610240-351994922-1000\..\Run : [ABBYY Screenshot Reader Bonus] "C:\Program Files\ABBYY FineReader 9.0 Sprint\Bonus.ScreenshotReader.exe" -autorun04 - HKU\S-1-5-21-549295623-3115610240-351994922-1000\..\Run : [OfficeSyncProcess] "C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE"04 - HKU\S-1-5-21-549295623-3115610240-351994922-1000\..\Run : [Vidalia] "C:\Program Files\Vidalia Bundle\Vidalia\vidalia.exe"04 - HKU\S-1-5-21-549295623-3115610240-351994922-1000\..\Run : [GarenaPlus] "E:\musica de ivan no tocar\todo sobre ivan\Garena Plus\GarenaMessenger.exe" -autolaunch04 - HKU\S-1-5-21-549295623-3115610240-351994922-1000\..\Run : [KiesPreload] C:\Program Files\Samsung\Kies\Kies.exe /preload04 - HKU\S-1-5-21-549295623-3115610240-351994922-1000\..\Run : [KiesAirMessage] C:\Program Files\Samsung\Kies\KiesAirMessage.exe -startup04 - HKU\S-1-5-21-549295623-3115610240-351994922-1000\..\Run : [AVG-Secure-Search-Update_0814tb] "C:\Program Files\AVG Security Toolbar\AVG-Secure-Search-Update_0814tb.exe" /PROMPT /CMPID=0814tb 04 - HKU\S-1-5-21-549295623-3115610240-351994922-1000\..\Run : [EPLTarget\P0000000000000000] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIHJB.EXE /EPT "EPLTarget\P0000000000000000" /M "TX133 TX135" /EF "HKCU"04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe04 - HKU\S-1-5-21-549295623-3115610240-351994922-1000\..\RunOnce : [Application Restart #3] C:\Program Files\Google\Chrome\Application\chrome.exe --extensions-on-chrome-urls --test-type --load-extension="c:\Program Files\Google\Chrome\Application\Extensions\chrome\app" --load-component-extension="c:\Program Files\Google\Chrome\Application\Extensions\chrome\man" --flag-switches-begin --flag-switches-end --restore-last-session[b]################## | UsbFix - Informacin |[/b]Info : [url=https://www.youtube.com/watch?v=vUZYYASd7FE]Cmo eliminar el virus de acceso directo en el disco flash ? (Video)[/url]Info : [url=http://www.en.usbfix.net/2014/03/remove-shortcut-virus-usb/]Virus de acceso directo en el disco flash, Qu es?[/url][b]################## | Hijack |[/b]Restorado! [N] G:\Solicitud Quinto superior.docxRestorado! [N] G:\IMG_20141011_135206500.jpgRestorado! [N] G:\COMER PC5.pptxRestorado! [N] G:\final exp voladura.pptxRestorado! [N] G:\proyecto-olpc.pptRestorado! [N] G:\Alan Garca y El Zambo Cavero Y se llama Per.mp3Restorado! [N] G:\Criollo Y se llama Peru Karaoke.mp3Restorado! [N] G:\lectura 15.docRestorado! [N] G:\lectura 16.docRestorado! [N] G:\DECLOGO DE PREGUNTAS.docx[b]################## | C:\ %SystemDrive% - Disco fijo (NTFS) |[/b][10/06/2009 - 16:42:20 | A | 0 Ko] - C:\config.sys[06/05/2013 - 19:31:05 | RASH | 0 Ko] - C:\MSDOS.SYS[06/05/2013 - 19:31:05 | RASH | 0 Ko] - C:\IO.SYS[06/11/2014 - 11:08:31 | ASH | 2357416 Ko] - C:\hiberfil.sys[06/11/2014 - 11:08:33 | ASH | 3143224 Ko] - C:\pagefile.sys[16/10/2014 - 01:26:26 | D] - C:\Config.Msi[06/05/2013 - 19:37:33 | A | 24 Ko] - C:\sysupdate.log[02/02/2012 - 11:15:27 | SHD] - C:\$Recycle.Bin[10/06/2009 - 16:42:20 | A | 0 Ko] - C:\autoexec.bat[02/02/2012 - 05:06:48 | RASH | 8 Ko] - C:\BOOTSECT.BAK[13/07/2009 - 21:37:05 | D] - C:\PerfLogs[13/07/2009 - 23:53:55 | SHD] - C:\Documents and Settings[08/10/2009 - 21:48:10 | N | 0 Ko] - C:\7Emuldr[25/05/2010 - 19:16:50 | N | 202 Ko] - C:\grldr[20/11/2010 - 16:29:06 | RASH | 375 Ko] - C:\bootmgr[02/02/2012 - 05:06:47 | SHD] - C:\Boot[02/02/2012 - 11:14:36 | D] - C:\Archivos de programa[02/02/2012 - 11:14:37 | SHD] - C:\Recovery[02/02/2012 - 14:43:39 | D] - C:\Samsung[03/02/2012 - 20:32:54 | RHD] - C:\MSOCache[10/04/2012 - 16:41:15 | D] - C:\Autocad 2011 64BITS[19/02/2013 - 13:05:26 | D] - C:\BetCris[18/04/2013 - 00:02:13 | D] - C:\TMP[06/05/2013 - 21:44:40 | D] - C:\GCDBDB[20/06/2013 - 14:10:48 | D] - C:\Kpcms[02/09/2013 - 00:17:12 | D] - C:\Acrobat3[15/09/2013 - 12:46:51 | D] - C:\Drivers[20/04/2014 - 16:58:26 | D] - C:\MineSight[01/06/2014 - 22:36:53 | D] - C:\gemcom[01/06/2014 - 22:37:07 | D] - C:\GCDBSR[05/06/2014 - 22:42:29 | N | 0 Ko] - C:\0402C43FB786[15/06/2014 - 13:51:15 | D] - C:\Dev-Cpp[27/07/2014 - 15:29:01 | RD] - C:\Users[26/09/2014 - 23:51:20 | D] - C:\Windows[01/10/2014 - 20:57:02 | RD] - C:\Program Files[25/10/2014 - 21:46:30 | HD] - C:\ProgramData[05/11/2014 - 11:12:16 | SHD] - C:\System Volume Information[06/11/2014 - 13:53:27 | D] - C:\UsbFix[b]################## | D:\ - Disco fijo (NTFS) |[/b][07/11/2007 - 08:12:28 | A | 228 Ko] - D:\VC_RED.MSI[04/02/2014 - 12:00:40 | A | 5 Ko] - D:\INSTALL.LOG[06/06/2012 - 00:52:14 | A | 1 Ko] - D:\JAVIER - Acceso directo.lnk[07/11/2007 - 08:09:22 | A | 1409 Ko] - D:\VC_RED.cab[07/11/2007 - 08:00:40 | A | 6 Ko] - D:\vcredist.bmp[27/07/2013 - 18:07:05 | SHD] - D:\$RECYCLE.BIN[04/02/2014 - 12:00:35 | D] - D:\Dr. Software[25/10/2011 - 16:07:52 | SHD] - D:\RECYCLER[19/10/2012 - 17:26:29 | D] - D:\programas[07/10/2013 - 11:15:57 | SHD] - D:\System Volume Information[02/11/2014 - 00:16:55 | D] - D:\JAVIER[b]################## | E:\ - Disco fijo (NTFS) |[/b][22/01/2008 - 08:28:50 | A | 13 Ko] - E:\LicenseUK.txt[24/12/2012 - 11:53:11 | A | 1 Ko] - E:\francisca - Acceso directo.lnk[02/02/2012 - 11:15:27 | SHD] - E:\$RECYCLE.BIN[25/10/2011 - 14:08:10 | D] - E:\JAVIER[25/10/2011 - 16:07:52 | SHD] - E:\RECYCLER[23/11/2011 - 10:37:44 | D] - E:\ANGEL[02/02/2012 - 11:45:46 | D] - E:\Fondos de pantalla[14/07/2012 - 16:09:31 | RD] - E:\Pictures[14/07/2012 - 16:12:03 | RD] - E:\Videos[07/10/2013 - 11:16:05 | SHD] - E:\System Volume Information[05/06/2014 - 22:40:25 | D] - E:\musica de ivan no tocar[06/06/2014 - 00:22:05 | D] - E:\Adobe Photoshop CS6 Portable Esp[16/10/2014 - 13:28:20 | D] - E:\francisca[b]################## | G:\ - Disco extrable (FAT32) |[/b][13/09/2013 - 03:01:56 | N | 45332 Ko] - G:\Expert.Choice.v11.Cracked.WinAll-CPY.rar[30/06/2014 - 13:01:18 | N | 5298 Ko] - G:\final exp voladura.pptx[02/07/2014 - 13:19:34 | N | 2274 Ko] - G:\COMER PC5.pptx[01/08/2013 - 19:11:02 | A | 1085 Ko] - G:\GER-PROY POW-POINT RVDO 3 10 2012.ppt[02/10/2014 - 18:05:28 | N | 911 Ko] - G:\proyecto-olpc.ppt[17/04/2014 - 12:40:32 | N | 26609 Ko] - G:\rock-mechanics_for-underground-mining BRADY BROWN.pdf[21/04/2014 - 15:12:52 | N | 4823 Ko] - G:\Support_of_Underground_Excavations_in_Hard_Rock.pdf[12/08/2014 - 09:45:36 | N | 2911 Ko] - G:\CAMARAS Y PILARES OSORIO BAZAN.pdf[11/09/2014 - 12:04:22 | N | 14096 Ko] - G:\METODOLOGIA DE TRABAJOS CIENTIFICOS.pdf[02/10/2014 - 10:53:38 | N | 5800 Ko] - G:\MANUAL-MODELAMIENTO-Y-DISENO-EN-OPEN-PIT-v1-0.pdf[03/07/2014 - 20:54:26 | N | 5745 Ko] - G:\Alan Garca y El Zambo Cavero Y se llama Per.mp3[03/07/2014 - 21:09:26 | N | 8077 Ko] - G:\Criollo Y se llama Peru Karaoke.mp3[11/10/2014 - 13:59:24 | N | 1026 Ko] - G:\IMG_20141011_135206500.jpg[12/03/2014 - 10:02:14 | N | 91 Ko] - G:\Comandos Bsicos de AUTOCAD.docx[30/06/2014 - 11:40:08 | N | 191 Ko] - G:\FORMULARIOS.docx[26/08/2014 - 10:38:08 | N | 14 Ko] - G:\Solicitud Quinto superior.docx[25/09/2014 - 19:13:02 | N | 221 Ko] - G:\proyectt.docx[20/10/2014 - 09:46:12 | N | 8365 Ko] - G:\MANUAL-MODELAMIENTO-Y-DISENO-EN-OPEN-PIT-v1-0.docx[21/10/2014 - 14:09:36 | N | 121 Ko] - G:\INFORME 4.docx[31/10/2014 - 12:27:00 | N | 15 Ko] - G:\DECLOGO DE PREGUNTAS.docx[05/11/2014 - 12:27:46 | A | 15543 Ko] - G:\minesiht.osorio.docx[29/10/2014 - 17:01:18 | N | 238 Ko] - G:\CV.JAVIER_OSORIO_BAZAN.octubre.doc[31/10/2014 - 08:58:28 | N | 31 Ko] - G:\lectura 15.doc[31/10/2014 - 09:55:24 | N | 30 Ko] - G:\lectura 16.doc[01/01/2008 - 02:59:06 | D] - G:\[13/10/2014 - 16:25:54 | D] - G:\PROYECTO MINESIGHT[20/10/2014 - 14:22:40 | D] - G:\CLASES MINESIGHT GEOLOGOS[22/10/2014 - 07:10:50 | SHD] - G:\System Volume Information[31/10/2014 - 12:33:04 | D] - G:\temp[04/11/2014 - 11:51:06 | D] - G:\fomu 4-11-2014[b]################## | Vaccin |[/b]C:\Autorun.inf -> Vacuna creada por UsbFix (El Desaparecido)D:\Autorun.inf -> Vacuna creada por UsbFix (El Desaparecido)E:\Autorun.inf -> Vacuna creada por UsbFix (El Desaparecido)G:\Autorun.inf -> Vacuna creada por UsbFix (El Desaparecido)[b]################## | E.O.F | [url=http://www.sosvirus.net/]http://www.sosvirus.net/[/url] | [url=http://www.es.usbfix.net/]http://www.es.usbfix.net/[/url] |[/b]