[b]############################## | UsbFix V 8.

011 | [Clean][/b]
User: AMIT (Administrator) # ASUS
Updated 09/08/2015 by El Desaparecido - SosVirus
Started at 19:40:40 | 05/08/2016
Website : [url=http://www.en.usbfix.net/]http://www.en.usbfix.net/[/url]
Changelog : [url=http://www.en.usbfix.net/changelog/]http://www.en.usbfix.net/ch
angelog/[/url]
Support : [url=http://www.sos-virus.net/]http://www.sos-virus.net/[/url]
Live detection : [url=http://how-to-remove.us/]http://how-to-remove.us/[/url]
Contact : [url=http://www.en.usbfix.net/contact/]http://www.en.usbfix.net/contac
t/[/url]
[b]################## | System information |[/b]
MB: ASUSTeK COMPUTER INC. (X555LD)
CPU: Intel(R) Core(TM) i5-4210U CPU @ 1.70GHz
GC: Intel(R) HD Graphics Family
RAM -> [Total : 8075 Mo | Free : 6702 Mo]
Bios: American Megatrends Inc.
Boot: Normal boot
OS:
WB:
WB:
WB:

Microsoft Windows 8.1 Single Language (6.3.9600 64-Bit)

Internet Explorer : 11.00.9600.16384
Google Chrome : 51.0.2704.103
Opera : 32.0.1948.69

[b]################## | Security Information |[/b]

AV:
AS:
FW:
SC:
WU:

Windows Defender [Enabled |Updated]

Windows Defender [Enabled |Updated]
Windows Firewall [Enabled]
Security Center [Enabled]
Windows Update [Enabled]

[b]################## | Disk Information |[/b]

C:\
D:\
F:\
G:\

(%SystemDrive%) -> Fixed disk # 373 Gb (252 Gb free - 68%) [OS] # NTFS
-> Fixed disk # 342 Gb (212 Gb free - 62%) [Data] # NTFS
-> Fixed disk # 195 Gb (64 Gb free - 33%) [New Volume] # NTFS
-> Removable disk # 4 Gb (1 Gb free - 27%) [] # FAT32

[b]################## | Generic Research |[/b]

Deleted! G:\\\\\\\\\\\\%%%~@~~@~~@@~@%~.1
Deleted! C:\Users\AMIT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sta
rtup\d.lnk
Deleted! C:\Users\AMIT\AppData\Roaming\obgqnyucfm.exe
Restored! [D] G:\
Restored! G:\\Android\data\.nomedia -> G:\Android\data\.nomedia
Restored! G:\\Android\data\com.google.android.music\files\._playmusicid -> G:\And
roid\data\com.google.android.music\files\._playmusicid
Restored! G:\\.backup-info -> G:\.backup-info
Restored! G:\\Now You See Me (2013) EXTENDED 720p Blu-Ray x264 [Dual-Audio][Engli
sh 5.1 + Hindi] - Mafiaking.mkv -> G:\Now You See Me (2013) EXTENDED 720p Blu-Ra
y x264 [Dual-Audio][English 5.1 + Hindi] - Mafiaking.mkv
Restored! G:\\XII-3.10.Galvanometer(2014) Pradeep Kshetrapal Physics.mp4 -> G:\XI
I-3.10.Galvanometer(2014) Pradeep Kshetrapal Physics.mp4
Restored! G:\\%~~~~%%@~~@%@%@%.1 -> G:\%~~~~%%@~~@%@%@%.1

Restored! G:\\desktop.ini -> G:\desktop.ini

Restored! G:\\IndexerVolumeGuid -> G:\IndexerVolumeGuid
(!) Temporary files deleted. (26.9428815841675 MB)
[b]################## | Startup |[/b]
F2 - HKLM\..\Winlogon : [Shell] explorer.exe
F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - HKLM\..\Winlogon : [Userinit] userinit.exe
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
04 - HKCU\..\Run : [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.e
xe" /MONITOR
04 - HKCU\..\Run : [Akamai NetSession Interface] "C:\Users\AMIT\AppData\Local\Ak
amai\netsession_win.exe"
04 - HKCU\..\Run : [{60D90F7A-1D4A-46DE-A69A-54D613516E3E}] C:\Windows\system32\
WindowsPowerShell\v1.0\powershell.exe -noprofile -windowstyle hidden -executionp
olicy bypass iex ([Text.Encoding]::ASCII.GetString([Convert]::FromBase64String((
gp 'HKCU:\Software\Classes\YSROCKNUPCSMEBG').FVGQASRTM)));
04 - HKCU\..\Run : [Chromium] "c:\users\amit\appdata\local\chromium\application\
chrome.exe" --auto-launch-at-startup --profile-directory="Default" --restore-las
t-session
04 - HKLM\..\Run : [ASUSPRP] "C:\Program Files (x86)\ASUS\APRP\APRP.EXE"
04 - HKLM\..\Run : [HP Software Update] C:\Program Files (x86)\Hp\HP Software Up
date\HPWuSchd2.exe
04 - HKLM\..\Run : [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\R
eader 9.0\Reader\Reader_sl.exe"
04 - HKLM\..\Run : [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.
0\AdobeARM.exe"
04 - HKLM\..\Run : [BlueStacks Agent] C:\Program Files (x86)\BlueStacks\HD-Agent
.exe
04 - [x64] HKLM\..\Run : [DptfPolicyLpmServiceHelper] C:\Windows\system32\DptfPo
licyLpmServiceHelper.exe
04 - [x64] HKLM\..\Run : [NvBackend] "C:\Program Files (x86)\NVIDIA Corporation\
Update Core\NvBackend.exe"
04 - HKU\S-1-5-21-2274696846-1345347885-2305215737-1001\..\Run : [CCleaner Monit
oring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
04 - HKU\S-1-5-21-2274696846-1345347885-2305215737-1001\..\Run : [Akamai NetSess
ion Interface] "C:\Users\AMIT\AppData\Local\Akamai\netsession_win.exe"
04 - HKU\S-1-5-21-2274696846-1345347885-2305215737-1001\..\Run : [{60D90F7A-1D4A
-46DE-A69A-54D613516E3E}] C:\Windows\system32\WindowsPowerShell\v1.0\powershell.
exe -noprofile -windowstyle hidden -executionpolicy bypass iex ([Text.Encoding]:
:ASCII.GetString([Convert]::FromBase64String((gp 'HKCU:\Software\Classes\YSROCKN
UPCSMEBG').FVGQASRTM)));
04 - HKU\S-1-5-21-2274696846-1345347885-2305215737-1001\..\Run : [Chromium] "c:\
users\amit\appdata\local\chromium\application\chrome.exe" --auto-launch-at-start
up --profile-directory="Default" --restore-last-session
04GS - Bluetooth.lnk : C:\Program Files (x86)\ASUS\Bluetooth Software\BTTray.exe
[b]################## | UsbFix - Information |[/b]
Info : [url=https://www.youtube.com/watch?v=vUZYYASd7FE]How to remove shortcut v
irus on flash disk (Video)[/url]
Info : [url=http://www.en.usbfix.net/2014/03/remove-shortcut-virus-usb/]Shortcut
virus on flash disk, What is it ?[/url]
Live detection : [url=http://how-to-remove.us/]http://how-to-remove.us/[/url]
[b]################## | C:\ %SystemDrive% - Fixed drive (NTFS) |[/b]
[05/08/2016 - 16:32:51 | ASH | 6615248 Ko] - C:\hiberfil.sys

[05/08/2016
[05/08/2016
[27/07/2015
[08/02/2016
[08/02/2016
[18/06/2013
[22/08/2013
[18/03/2014
[24/05/2014
[24/05/2014
[25/11/2014
[25/11/2014
[30/03/2015
[05/04/2015
[09/05/2015
[05/09/2015
[25/11/2015
[24/12/2015
[24/12/2015
[21/01/2016
[13/03/2016
[16/03/2016
[20/03/2016
[12/04/2016
[09/06/2016
[29/06/2016
[30/06/2016
[30/07/2016
[05/08/2016

16:32:57
16:32:57
13:56:58
21:09:42
21:09:47
20:18:29
23:22:35
17:54:57
10:49:10
11:20:14
03:50:30
04:04:53
20:26:24
23:03:21
00:46:59
10:00:56
07:07:02
04:47:10
08:16:13
08:28:15
19:25:40
18:48:31
10:07:52
15:13:11
12:10:39
15:37:44
13:17:26
17:22:26
19:40:27

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

ASH | 1310720 Ko] - C:\pagefile.sys

ASH | 262144 Ko] - C:\swapfile.sys
SHD] - C:\$RECYCLE.BIN
D] - C:\$Windows.~WS
D] - C:\$WINDOWS.~BT
N | 0 Ko] - C:\BOOTNXT
D] - C:\PerfLogs
RASH | 389 Ko] - C:\bootmgr
SHD] - C:\Recovery
SHD] - C:\Boot
D] - C:\Intel
RD] - C:\Users
D] - C:\Asus WebStorage
RHD] - C:\MSOCache
D] - C:\Autodesk
D] - C:\WebStorage
D] - C:\Flpl
D] - C:\$360Section
D] - C:\WinShell
D] - C:\eSupport
D] - C:\Daum
D] - C:\Helios
D] - C:\New folder
D] - C:\Recovered Files
RD] - C:\Program Files
RD] - C:\Program Files (x86)
HD] - C:\ProgramData
AD] - C:\Windows
D] - C:\UsbFix

[b]################## | D:\ - Fixed drive (NTFS) |[/b]

[19/05/2016 - 21:12:28 | A | 92216 Ko] - D:\5.3 Vant Hoff factor (Solution)_low.
mp4
[10/06/2004 - 17:19:56 | A | 296589 Ko] - D:\Grand Thief Auto Vice City 2005.exe
[05/05/2007 - 16:25:46 | A | 680157 Ko] - D:\GTA SA.exe
[04/02/2013 - 06:27:38 | A | 61991 Ko] - D:\Plants vs Zombies 2012 Final Full PC
Version.exe
[27/04/2015 - 21:36:34 | SHD] - D:\$RECYCLE.BIN
[01/05/2016 - 15:44:22 | A | 397594 Ko] - D:\11.avi
[05/03/2016 - 15:44:41 | D] - D:\Rainbow Six Vegas 2 7.7
[08/09/2015 - 11:22:10 | A | 29105 Ko] - D:\Balancing of Redox reaction for Clas
s 11 , JEE-Main, JEE-Advanced, AIPMT.3gp
[05/05/2007 - 20:28:01 | D] - D:\GTA SA
[22/03/2015 - 13:04:23 | D] - D:\Watch Dogs
[07/06/2015 - 19:47:19 | D] - D:\Battlefield 2
[07/06/2015 - 19:47:22 | D] - D:\Brothers_A_Tale_of_Two_Sons-FLT
[13/06/2015 - 11:59:09 | D] - D:\Need For Speed Most Wanted 2
[04/10/2015 - 13:27:45 | D] - D:\New folder
[26/11/2015 - 05:56:55 | D] - D:\audios
[10/12/2015 - 10:21:40 | D] - D:\Shareit
[10/12/2015 - 11:20:04 | D] - D:\metal
[24/12/2015 - 04:51:56 | D] - D:\tekken
[19/02/2016 - 23:46:19 | D] - D:\Tally9
[10/06/2016 - 13:16:31 | RD] - D:\Grand Theft Auto V
[30/06/2016 - 13:18:50 | D] - D:\cu
[28/07/2016 - 09:50:37 | D] - D:\lavva
[31/07/2016 - 20:28:08 | D] - D:\5surface chemistry
[31/07/2016 - 20:28:39 | D] - D:\4chemical kinetics
[31/07/2016 - 20:29:10 | D] - D:\New folder (2)

[31/07/2016 - 20:32:13 | D] - D:\Now You See Me

[b]################## | F:\ - Fixed drive (NTFS) |[/b]
[21/07/2014 - 04:26:37 | A | 869894 Ko] - F:\XII-3.11.Ammeter and Voltmeter(2014
)Pradeep Kshetrapal Physics.mp4.mp4
[22/03/2015 - 13:02:59 | SHD] - F:\$RECYCLE.BIN
[27/03/2015 - 20:41:31 | D] - F:\IMAGES
[30/08/2015 - 03:54:26 | D] - F:\memo card
[04/10/2015 - 08:30:25 | D] - F:\VIDEOES
[05/10/2015 - 13:04:16 | D] - F:\pradeep
[19/04/2016 - 10:54:44 | D] - F:\latest new song
[11/05/2016 - 23:30:35 | D] - F:\Haloalkanes and haloarenes
[15/05/2016 - 18:35:07 | D] - F:\Solutions
[25/05/2016 - 11:41:00 | D] - F:\Ecosystem
[25/05/2016 - 11:41:57 | D] - F:\Reproductive health
[08/06/2016 - 11:26:34 | D] - F:\Principles of inheritance
[24/06/2016 - 10:18:38 | D] - F:\3Electrochemstry
[08/07/2016 - 22:09:16 | D] - F:\bakti
[16/07/2016 - 12:25:22 | D] - F:\MOVIES
[27/07/2016 - 22:47:58 | D] - F:\SOFTWARE
[b]################## | G:\ - Removable drive (FAT32) |[/b]
[05/08/2016 - 19:35:40 | D] - G:\
[05/08/2016 - 19:43:24 | RA | 863887 Ko] - G:\The.Conjuring.2013.WEBRip.XViD.AC3
.ReLeNTLesS.avi
[05/08/2016 - 19:44:20 | D] - G:\Android
[03/08/2016 - 20:14:02 | N | 0 Ko] - G:\.backup-info
[28/07/2016 - 19:43:02 | N | 1040959 Ko] - G:\Now You See Me (2013) EXTENDED 720
p Blu-Ray x264 [Dual-Audio][English 5.1 + Hindi] - Mafiaking.mkv
[20/07/2014 - 12:51:56 | N | 938788 Ko] - G:\XII-3.10.Galvanometer(2014) Pradeep
Kshetrapal Physics.mp4
[05/08/2016 - 19:36:52 | N | 5824 Ko] - G:\%~~~~%%@~~@%@%@%.1
[05/08/2016 - 19:40:10 | N | 0 Ko] - G:\desktop.ini
[05/08/2016 - 19:40:10 | N | 589 Ko] - G:\IndexerVolumeGuid
[03/08/2016 - 20:14:00 | D] - G:\\LOST.DIR
[03/08/2016 - 20:14:04 | D] - G:\\Android
[05/08/2016 - 19:38:06 | N | 863887 Ko] - G:\\The.Conjuring.2013.WEBRip.XViD.AC3.
ReLeNTLesS.avi
[03/08/2016 - 20:14:04 | D] - G:\\Android\data
[03/08/2016 - 20:14:04 | D] - G:\\Android\data\com.google.android.music
[03/08/2016 - 20:14:04 | D] - G:\\Android\data\com.google.android.music\files
[05/08/2016 - 19:44:22 | D] - G:\Android\data
[03/08/2016 - 20:14:04 | N | 0 Ko] - G:\Android\data\.nomedia
[05/08/2016 - 19:44:24 | D] - G:\Android\data\com.google.android.music
[05/08/2016 - 19:44:26 | D] - G:\Android\data\com.google.android.music\files
[03/08/2016 - 20:14:04 | N | 0 Ko] - G:\Android\data\com.google.android.music\fi
les\._playmusicid
[b]################## | Vaccin |[/b]
C:\Autorun.inf
D:\Autorun.inf
F:\Autorun.inf
G:\Autorun.inf

->
->
->
->

Vaccine
Vaccine
Vaccine
Vaccine

created
created
created
created

by
by
by
by

UsbFix
UsbFix
UsbFix
UsbFix

(El
(El
(El
(El

Desaparecido)
Desaparecido)
Desaparecido)
Desaparecido)

[b]################## | E.O.F | [url=http://www.sosvirus.net/]http://www.sosviru

s.net/[/url] | [url=http://www.en.usbfix.net/]http://www.en.usbfix.net/[/url] |[
/b]