[b]############################## | UsbFix V 7.

806 | [Clean][/b]
User: medjamaai (Administrator) # I-M
Updated 30/11/2014 by El Desaparecido - SosVirus
Started at 13:43:05 | 26/02/2017
Website : [url=http://www.en.usbfix.net/]http://www.en.usbfix.net/[/url]
Changelog : [url=http://www.en.usbfix.net/changelog/]http://www.en.usbfix.net/ch
angelog/[/url]
Support : [url=http://www.sosvirus.net/]http://www.sosvirus.net/[/url]
Upload Malware : [url=http://www.sosvirus.net/upload_malware.php]http://www.sosv
irus.net/upload_malware.php[/url]
Live detection : [url=http://how-to-remove.us/]http://how-to-remove.us/[/url]
Contact : [url=http://www.en.usbfix.net/contact/]http://www.en.usbfix.net/contac
t/[/url]
[b]################## | System information |[/b]
MB: Hewlett-Packard (2170)
CPU: AMD A6-5200 APU with Radeon(TM) HD Graphics
GC: AMD Radeon HD 8400
RAM -> [Total : 3558 Mo | Free : 1886 Mo]
Bios: Insyde
Boot: Normal boot
OS: Microsoft Windows 8.1 Pro (6.3.9600 64-Bit)
WB: Internet Explorer : 11.00.9600.16384
WB: Google Chrome : 56.0.2924.87
[b]################## | Security Information |[/b]
AV: Windows Defender [[b](!) Disabled[/b] |[b](!) Outdated[/b]]
AS: Windows Defender [[b](!) Disabled[/b] |[b](!) Outdated[/b]]
FW: Windows Firewall [Enabled]
SC: Security Center [Enabled]
WU: Windows Update [Enabled]
[b]################## | Disk Information |[/b]
C:\ (%SystemDrive%) -> Fixed disk # 253 Gb (225 Gb free - 89%) [] # NTFS
D:\ -> Removable disk # 2 Gb (226 Mb free - 14%) [WPKEY] # FAT32
E:\ -> Fixed disk # 250 Gb (10 Gb free - 4%) [MOHAMED] # NTFS
F:\ -> Fixed disk # 196 Gb (45 Gb free - 23%) [JAMAAI] # NTFS
[b]################## | Generic Research |[/b]
Deleted! D:\Nouveau dossier.lnk
Deleted! D:\My Games.lnk
Deleted! D:\My Videos.lnk
Deleted! D:\Hot.lnk
Deleted! D:\My Pictuers.lnk
Deleted! D:\Downloads.lnk
Deleted! D:\Movies.lnk
Deleted! D:\Mes images.lnk
Deleted! D:\Skypee\AutoIt3.exe
Deleted! D:\Skypee\googleupdate.a3x
Deleted! D:\Skypee\GoogleUpdate.lnk
Deleted! D:\Skypee\Google.lnk
Deleted! D:\Skypee\Skypee.lnk
Deleted! D:\Skypee\Windowsupdate.lnk
Deleted! D:\Skypee\VEFLSQM
Deleted! D:\Skypee
(!) Temporary files deleted. (74.7716417312622 MB)
[b]################## | Registry |[/b]

[b]################## | Regedit Run |[/b]

F2 - HKLM\..\Winlogon : [Shell] explorer.exe
F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - HKLM\..\Winlogon : [Userinit] userinit.exe
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
04 - HKCU\..\Run : [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMa
n.exe /onboot
04 - HKLM\..\Run : [IAM_Morocco Estoril ModemListener] C:\Program Files (x86)\My
Connection\L850\BackgroundService\ModemListener.exe start
04 - HKLM\..\Run : [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\C
ore-Static\amd64\CLIStart.exe" MSRun
04 - [x64] HKLM\..\RunOnce : [wd] C:\Windows\TEMP\g8C1.tmp.exe
04 - HKU\S-1-5-21-1746876204-2314703778-2787168192-1001\..\Run : [IDMan] C:\Prog
ram Files (x86)\Internet Download Manager\IDMan.exe /onboot
[b]################## | UsbFix - Information |[/b]
Info : [url=https://www.youtube.com/watch?v=vUZYYASd7FE]How to remove shortcut v
irus on flash disk (Video)[/url]
Info : [url=http://www.en.usbfix.net/2014/03/remove-shortcut-virus-usb/]Shortcut
virus on flash disk, What is it ?[/url]
Live detection : [url=http://how-to-remove.us/]http://how-to-remove.us/[/url]
[b]################## | Hijack |[/b]
Restored! [N] D:\VEFLSQM
[b]################## | C:\ %SystemDrive% - Fixed drive (NTFS) |[/b]
[25/02/2017 - 04:12:00 | ASH | 2914856 Ko] - C:\hiberfil.sys
[25/02/2017 - 04:12:00 | ASH | 3801088 Ko] - C:\pagefile.sys
[25/02/2017 - 04:12:01 | ASH | 262144 Ko] - C:\swapfile.sys
[04/11/2015 - 20:09:04 | A | 0 Ko] - C:\main.f95
[11/01/2017 - 00:15:33 | SHD] - C:\$Recycle.Bin
[18/06/2013 - 12:18:29 | N | 0 Ko] - C:\BOOTNXT
[22/08/2013 - 14:45:52 | SHD] - C:\Documents and Settings
[22/08/2013 - 15:22:35 | D] - C:\PerfLogs
[30/09/2013 - 04:17:59 | RASH | 389 Ko] - C:\bootmgr
[24/12/2016 - 12:15:46 | RHD] - C:\MSOCache
[24/12/2016 - 13:54:21 | D] - C:\AMD
[24/12/2016 - 14:02:44 | RD] - C:\Program Files
[24/12/2016 - 20:02:54 | SHD] - C:\Recovery
[24/12/2016 - 20:10:34 | RD] - C:\Users
[26/01/2017 - 17:23:07 | D] - C:\Windows
[01/02/2017 - 17:32:46 | HD] - C:\ProgramData
[24/02/2017 - 20:48:37 | RD] - C:\Program Files (x86)
[26/02/2017 - 13:42:45 | D] - C:\UsbFix
[b]################## | D:\ - Removable drive (FAT32) |[/b]
[23/01/2014 - 11:04:10 | A | 69 Ko] - D:\escape-plan-yify-arabic (2).srt
[23/01/2014 - 11:04:10 | A | 69 Ko] - D:\escape-plan-yify-arabic.srt
[16/01/2017 - 14:24:08 | A | 587 Ko] - D:\PRESENTING A COMPANY.ppt
[17/01/2017 - 19:47:06 | A | 6370 Ko] - D:\anglais.pdf
[28/01/2017 - 16:31:30 | A | 50970 Ko] - D:\ProfessionalEnglishInUseEngineering-
2009-hq.pdf
[07/10/2016 - 16:11:18 | A | 276486 Ko] - D:\---???? ?????? ?????? ?????? ?? ???
?? ??????? ?????? ????? . Escape Plan.mp4
[05/02/2017 - 15:24:38 | A | 0 Ko] - D:\brahim hajji.lnk
[31/10/2016 - 14:52:48 | A | 687 Ko] - D:\cv_abdllah.docx
[08/11/2016 - 12:23:00 | A | 54 Ko] - D:\cv_brahim.docx
[24/11/2016 - 22:13:24 | A | 24 Ko] - D:\Rsumm du cours.docx
[25/11/2016 - 00:18:42 | A | 20 Ko] - D:\soutien_algbre.docx
[08/12/2016 - 23:32:04 | A | 27 Ko] - D:\Exercice I.docx
[03/02/2017 - 19:03:34 | A | 20 Ko] - D:\Soutien 2.docx
[26/02/2017 - 11:02:52 | A | 5699 Ko] - D:\rapport mdf.doc
[09/11/2016 - 11:08:38 | D] - D:\LOST.DIR
[09/11/2016 - 11:08:40 | D] - D:\.android_secure
[16/05/2015 - 12:29:26 | N | 46 Ko] - D:\VEFLSQM
[17/07/2016 - 22:49:08 | D] - D:\thermodynamique
[06/09/2016 - 09:15:20 | D] - D:\Mes images
[06/09/2016 - 09:15:20 | D] - D:\Nouveau dossier
[09/11/2016 - 11:08:40 | D] - D:\Android
[18/01/2017 - 12:23:28 | D] - D:\compaq fortran
[19/01/2017 - 21:22:16 | D] - D:\Tomorrowland
[26/02/2017 - 11:03:50 | D] - D:\les TP; fluides et Hydrolique
[b]################## | E:\ - Fixed drive (NTFS) |[/b]
[03/02/2016 - 09:09:37 | A | 58 Ko] - E:\citizenfour.(2014).ara.1cd.(6287632).zi
p
[02/09/2016 - 15:44:09 | A | 174 Ko] - E:\game-of-thrones-fifth-season-2015_arab
ic-1122856.zip
[24/12/2016 - 20:11:42 | SHD] - E:\$RECYCLE.BIN
[05/02/2016 - 21:06:55 | D] - E:\counter strike 1.6
[04/04/2015 - 14:28:17 | D] - E:\scne
[31/05/2015 - 15:15:57 | D] - E:\documentarie
[29/06/2015 - 15:53:10 | D] - E:\Jeux
[27/12/2015 - 12:00:01 | D] - E:\Musique
[05/02/2016 - 14:24:49 | D] - E:\thmes
[06/04/2016 - 17:22:24 | D] - E:\Movies
[16/11/2016 - 15:55:09 | D] - E:\rapelle
[22/11/2016 - 10:48:36 | D] - E:\Nouveau dossier
[01/02/2017 - 17:32:58 | D] - E:\programme
[b]################## | F:\ - Fixed drive (NTFS) |[/b]
[25/08/2009 - 23:28:32 | A | 11592 Ko] - F:\maths en pratique.pdf
[11/09/2014 - 14:11:42 | A | 2076 Ko] - F:\Algorithmique_et_Programmation__Micha
el_Griffith_.pdf
[07/11/2014 - 22:15:00 | RA | 457345 Ko] - F:\The.Walking.Dead.S04E16.HDTV.x264-
EXCELLENCE.mp4
[08/11/2014 - 00:27:38 | RA | 460736 Ko] - F:\the.walking.dead.s04e15.hdtv.x264-
2hd.mp4
[13/10/2013 - 16:26:56 | N | 0 Ko] - F:\bizo.mp3
[03/01/2015 - 13:20:02 | A | 11 Ko] - F:\10723584_457393851065390_576532010_n.jp
g
[10/01/2015 - 19:35:13 | D] - F:\mpsiddl.free.fr
[24/12/2016 - 20:11:42 | SHD] - F:\$RECYCLE.BIN
[01/01/2002 - 09:16:38 | N | 0 Ko] - F:\boot
[13/10/2013 - 16:25:28 | N | 18 Ko] - F:\AUTOEXE
[13/10/2013 - 16:26:56 | N | 0 Ko] - F:\system
[01/01/2015 - 21:26:54 | D] - F:\download
[28/02/2015 - 16:24:20 | D] - F:\Documents
[05/03/2015 - 19:46:09 | D] - F:\ensa1
[09/03/2015 - 14:55:01 | D] - F:\Quran
[18/05/2015 - 11:40:41 | D] - F:\expos
[24/05/2015 - 18:50:04 | D] - F:\langue
[19/11/2015 - 20:51:10 | D] - F:\learn french
[19/02/2016 - 20:19:08 | D] - F:\Harry Potter Complete 1-8 2001-2011 BluRay 720p
x264 aac jbr
[09/03/2016 - 11:45:28 | D] - F:\language c
[25/03/2016 - 10:18:16 | D] - F:\Friends
[25/05/2016 - 11:05:15 | D] - F:\hihoo
[16/10/2016 - 19:37:02 | D] - F:\Music
[26/10/2016 - 09:29:58 | D] - F:\bluetooth
[05/11/2016 - 15:45:11 | RD] - F:\Downloads
[07/01/2017 - 20:48:53 | D] - F:\Ensa
[23/01/2017 - 21:47:51 | D] - F:\tarfiih
[25/01/2017 - 21:38:10 | D] - F:\books
[26/01/2017 - 19:09:49 | D] - F:\yassmin
[30/01/2017 - 16:25:10 | D] - F:\pres
[31/01/2017 - 20:34:11 | D] - F:\image
[01/02/2017 - 17:32:45 | D] - F:\Kingston
[01/02/2017 - 17:32:45 | D] - F:\famille
[17/02/2017 - 20:34:38 | D] - F:\stage 1
[b]################## | Vaccin |[/b]
C:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
D:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
E:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
F:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
[b]################## | E.O.F | [url=http://www.sosvirus.net/]http://www.sosviru
s.net/[/url] | [url=http://www.en.usbfix.net/]http://www.en.usbfix.net/[/url] |[
/b]