[b]############################## | UsbFix V 7.

800 | [Limpiar][/b]
Usuario: Compaq (Administrador) # COMPAQ56
Actualizado el 10/11/2014 por El Desaparecido - SosVirus
Comenz a 12:30:44 | 20/08/2015
Sitio web : [url=http://www.es.usbfix.net/]http://www.es.usbfix.net/[/url]
Changelog : [url=http://www.usbfix.net/maj/]http://www.usbfix.net/maj/[/url]
Asistencia : [url=http://www.forospyware.com/foro-de-virus-y-spywares/]http://ww
w.forospyware.com/foro-de-virus-y-spywares/[/url]
Upload Malware : [url=http://www.sosvirus.net/upload_malware.php]http://www.sosv
irus.net/upload_malware.php[/url]
Dtection en directo : [url=http://como-eliminar.net/]http://como-eliminar.net/[/u
rl]
Contacto : [url=http://www.es.usbfix.net/contacto/]http://www.es.usbfix.net/cont
acto/[/url]
[b]################## | System information |[/b]
MB: Hewlett-Packard (1604)
CPU: AMD V160 Processor
RAM -> [Total : 3579 Mo | Free : 1360 Mo]
Bios: Hewlett-Packard
Boot: Normal boot
OS:
WB:
WB:
WB:

Microsoft Windows 7 Professional (6.1.7601 32-Bit) Service Pack 1

Internet Explorer : 8.00.7600.16385
Google Chrome : 44.0.2403.155
Mozilla Firefox : 39.0.3

[b]################## | Security Information |[/b]

AV:
AS:
AS:
FW:
SC:
WU:

ESET NOD32 Antivirus 5.2 [[b](!) Desactivado[/b] |[b](!) No actualizado[/b]]

ESET NOD32 Antivirus 5.2 [[b](!) Desactivado[/b] |[b](!) No actualizado[/b]]
Windows Defender [[b](!) Desactivado[/b] |[b](!) No actualizado[/b]]
Windows Firewall [Activado]
Security Center [Activado]
Windows Update [Activado]

[b]################## | Disk Information |[/b]

C:\
FS
D:\
E:\
G:\

(%SystemDrive%) -> Disco fijo # 141 Gb (589 Mb libre(s) - 0%) [SISTEMA] # NT

-> Disco fijo # 141 Gb (78 Gb libre(s) - 55%) [DATA] # NTFS
-> Disco fijo # 16 Gb (2 Gb libre(s) - 14%) [RECOVERY] # NTFS
-> Disco extrable # 2 Gb (2 Gb libre(s) - 98%) [SAADAM] # FAT

[b]################## | Bsqueda genrica |[/b]

(!) Archivos temporales suprimido. (1131.3321647644 MB)
[b]################## | Registro |[/b]
[b]################## | Regedit Run |[/b]
F2 - HKLM\..\Winlogon : [Shell] explorer.exe
F2 - HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
04 - HKCU\..\Run : [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield

\UpdateService\ISUSPM.exe" -startup
04 - HKCU\..\Run : [Facebook Update] "C:\Users\Compaq\AppData\Local\Facebook\Upd
ate\FacebookUpdate.exe" /c /nocrashserver
04 - HKLM\..\Run : [YouCam Mirage] "C:\Program Files\CyberLink\YouCam\YCMMirage.
exe"
04 - HKLM\..\Run : [YouCam Tray] "C:\Program Files\CyberLink\YouCam\YouCamTray.e
xe" /s
04 - HKLM\..\Run : [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSyn
c.exe
04 - HKLM\..\Run : [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
04 - HKLM\..\Run : [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\
UpdateService\issch.exe" -start
04 - HKLM\..\Run : [HP Software Update] C:\Program Files\HP\HP Software Update\H
PWuSchd2.exe
04 - HKLM\..\Run : [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Applic
ation Support\APSDaemon.exe"
04 - HKLM\..\Run : [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atb
oottime
04 - HKLM\..\Run : [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java
Update\jusched.exe"
04 - HKLM\..\Run : [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe"
/hide /waitservice
04 - HKLM\..\Run : [StatusAlerts] "C:\Program Files\HP\StatusAlerts\bin\HPStatus
Alerts.exe" /enum:on /alerts:on /notifications:on /fl:on /fr:on /appData:on /tmc
p:on
04 - HKLM\..\RunOnceEx : [Title] HP_f2a35610-e375-4aa3-b8fd-b6e379176c64
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe
/autoRun
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe
/autoRun
04 - HKU\S-1-5-21-1863020267-2220668814-1569235546-1000\..\Run : [ISUSPM Startup
] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startu
p
04 - HKU\S-1-5-21-1863020267-2220668814-1569235546-1000\..\Run : [Facebook Updat
e] "C:\Users\Compaq\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocras
hserver
04 - HKU\S-1-5-21-1863020267-2220668814-1569235546-1000\..\Run : [eyeBeam SIP Cl
ient]
04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
[b]################## | UsbFix - Informacin |[/b]
Info : [url=https://www.youtube.com/watch?v=vUZYYASd7FE]Cmo eliminar el virus de a
cceso directo en el disco flash ? (Video)[/url]
Info : [url=http://www.en.usbfix.net/2014/03/remove-shortcut-virus-usb/]Virus de
acceso directo en el disco flash, Qu es?[/url]
Dtection en directo : [url=http://como-eliminar.net/]http://como-eliminar.net/[/u
rl]
[b]################## | Hijack |[/b]
[b]################## | C:\ %SystemDrive% - Disco fijo (NTFS) |[/b]
[18/02/2014
[18/02/2014
[14/04/2014
[10/06/2009
[05/12/2013

22:44:27
23:21:53
10:28:20
16:42:20
20:25:22

|
|
|
|
|

A | 8 Ko] - C:\WPI_Log_2014.02.18_22.41.53.txt
A | 8 Ko] - C:\WPI_Log_2014.02.18_23.02.58.txt
A | 0 Ko] - C:\tcon02.tmp
A | 0 Ko] - C:\config.sys
RASH | 0 Ko] - C:\IO.SYS

[05/12/2013
[20/08/2015
[20/08/2015
[14/08/2015
[23/05/2014
[27/02/2015
[27/02/2015
[23/05/2014
[24/04/2014
[17/04/2015
[10/06/2009
[05/12/2013
[13/07/2009
[13/07/2009
[20/11/2010
[05/12/2013
[05/12/2013
[05/12/2013
[05/12/2013
[05/12/2013
[05/12/2013
[07/12/2013
[15/02/2014
[07/05/2014
[16/05/2014
[26/05/2014
[24/11/2014
[27/02/2015
[01/06/2015
[14/06/2015
[26/06/2015
[07/07/2015
[07/07/2015
[07/07/2015
[24/07/2015
[24/07/2015
[11/08/2015
[14/08/2015
[14/08/2015
[14/08/2015
[20/08/2015

20:25:22
04:40:28
04:40:36
16:32:41
00:25:29
20:14:31
20:20:58
00:23:16
04:21:32
12:39:54
16:42:20
12:21:12
21:37:05
23:53:55
16:29:06
12:21:11
18:30:38
18:30:39
20:16:35
20:38:08
22:05:38
21:11:16
01:01:42
02:45:45
01:33:54
23:47:45
14:53:48
20:15:54
17:08:39
16:26:23
17:32:43
13:22:25
15:30:30
19:13:05
06:22:38
06:22:38
03:33:27
15:45:27
16:54:02
17:33:18
09:32:25

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

RASH | 0 Ko] - C:\MSDOS.SYS

ASH | 2748596 Ko] - C:\hiberfil.sys
ASH | 3664796 Ko] - C:\pagefile.sys
D] - C:\Config.Msi
A | 109 Ko] - C:\acad.lsp
A | 2 Ko] - C:\AD020.LOG
A | 4 Ko] - C:\kl2log.htm
A | 16 Ko] - C:\Drawing1.dwg
A | 339 Ko] - C:\acadminidump.dmp
SHD] - C:\$RECYCLE.BIN
A | 0 Ko] - C:\autoexec.bat
RASH | 8 Ko] - C:\BOOTSECT.BAK
D] - C:\PerfLogs
SHD] - C:\Documents and Settings
RASH | 375 Ko] - C:\bootmgr
SHD] - C:\Boot
D] - C:\Archivos de programa
SHD] - C:\Recovery
D] - C:\PFiles
RHD] - C:\MSOCache
D] - C:\FFOutput
D] - C:\Cracked License Manager 10
RD] - C:\Users
D] - C:\MetradosKey
D] - C:\gabilos
D] - C:\SISTEMAS
D] - C:\HP_ePrint
D] - C:\MSSQL2005
D] - C:\Temp
HD] - C:\ProgramData
D] - C:\UsbFix
D] - C:\autodesk
D] - C:\Civil 3D Projects
D] - C:\Civil 3D Project Templates
D] - C:\WebUpdater
D] - C:\Garmin
D] - C:\Program Files
D] - C:\HP_SI_3b050369-8d19-413d-9dec-84ff278472eb
D] - C:\Windows
SHD] - C:\System Volume Information
D] - C:\S102000

[b]################## | D:\ - Disco fijo (NTFS) |[/b]

[04/06/2015
[04/06/2015
[04/06/2015
[14/04/2015
cx
[14/04/2015
I.docx
[05/12/2013
[09/08/2011
[19/12/2011
[20/11/2012
[05/12/2013
[05/12/2013
[05/12/2013
[10/04/2015
[16/04/2015

12:26:36
12:26:36
12:26:36
17:18:21

|
|
|
|

A
A
A
A

|
|
|
|

20480 Ko] - D:\Alto Camilaca_2.ndf

77952 Ko] - D:\Alto Camilaca_1.mdf
1472 Ko] - D:\Alto Camilaca_3.ldf
6125 Ko] - D:\PIP SISTEMA DE CONDUCCION CHILLANI.do

- 17:19:17 | A | 3308 Ko] - D:\PIP SISTEMA DE ALMACENAMIENTO PACAJON

-

18:31:04
11:04:59
18:24:09
09:08:41
07:52:16
16:57:27
21:09:18
06:01:42
09:14:05

|
|
|
|
|
|
|
|
|

SHD]
D] D] D] SHD]
D] D] D] D] -

- D:\$RECYCLE.BIN
D:\Drivers
D:\musica
D:\INSTALADORES
- D:\System Volume Information
D:\CONSERVAR INFORMACION
D:\SWSetup
D:\MUSICA CEL
D:\PIP_______________MEJORAMIENTO DE AREAS VERDES

[16/04/2015 - 09:14:10 | D] - D:\PIP____PALCA CARRET

[29/05/2015 - 12:30:18 | D] - D:\Deyson
[04/06/2015 - 10:22:24 | A | 70934 Ko] - D:\Alto Camilaca
[b]################## | E:\ - Disco fijo (NTFS) |[/b]
[09/08/2011 - 08:44:14 | A | 0 Ko] - E:\HPSF_Rep.txt
[02/07/2011 - 16:46:41 | D] - E:\system.sav
[28/11/2010 - 04:47:51 | N | 0 Ko] - E:\RPCONFIG.LOG
[02/07/2011 - 16:46:40 | N | 0 Ko] - [[url=https://www.virustotal.com/file/2b882
8a653a134bce0c662f6d0468485fa50018bfa7c241976179ba018be0660/analysis/1275007743/
]VirusTotal[/url] - (0/41)] - E:\language.ini
[02/07/2011 - 16:46:40 | N | 0 Ko] - E:\BT_COMPAQ.FLG
[28/11/2010 - 04:34:32 | N | 0 Ko] - E:\CSP.DAT
[02/07/2011 - 16:46:28 | N | 0 Ko] - E:\HP_WSD.dat
[05/12/2013 - 18:31:04 | SHD] - E:\$RECYCLE.BIN
[09/08/2011 - 09:23:38 | RASH | 8 Ko] - E:\BOOTSECT.BAK
[13/07/2009 - 20:38:58 | RASH | 375 Ko] - E:\bootmgr
[02/07/2011 - 16:46:40 | D] - E:\hp
[02/07/2011 - 16:46:40 | SHD] - E:\preload
[02/07/2011 - 16:46:40 | SD] - E:\Recovery
[09/08/2011 - 09:23:37 | SHD] - E:\boot
[22/04/2013 - 15:26:49 | N | 0 Ko] - E:\win7ldr
[22/04/2013 - 18:17:06 | | 405 Ko] - E:\KQJZD
[05/12/2013 - 07:52:13 | SHD] - E:\System Volume Information
[01/04/2015 - 10:44:43 | D] - E:\PROBANDO
[b]################## | G:\ - Disco extrable (FAT) |[/b]
[20/08/2015 - 10:29:48 | D] - G:\FERIA QUILAHUANI 2015
[17/08/2015 - 11:46:28 | A | 26 Ko] - G:\SOLICITUD.doc
[29/07/2015 - 21:11:18 | A | 19 Ko] - G:\Tejido Muscular.docx
[29/07/2015 - 21:10:16 | A | 22 Ko] - G:\HISTO PREGUNTAS.docx
[29/07/2015 - 20:08:26 | A | 2688 Ko] - G:\HISTOLOGIA MUESTRAS IMPRIMIR.docx
[28/07/2015 - 19:24:04 | A | 26 Ko] - G:\imprimir.docx
[28/07/2015 - 18:24:28 | A | 31 Ko] - G:\1.docx
[28/07/2015 - 18:23:32 | A | 9821 Ko] - G:\a-cuestionarios-respuestas (1).pdf
[28/07/2015 - 18:18:00 | A | 9821 Ko] - G:\a-cuestionarios-respuestas.pdf
[28/07/2015 - 18:03:54 | A | 11448 Ko] - G:\Atlas Cortes histologicos.pdf
[28/07/2015 - 18:03:28 | A | 203 Ko] - G:\Doc1.docx
[14/08/2013 - 22:26:30 | A | 77 Ko] - G:\FERIA QUILAHUANI 2015\ADMISION CANDARAV
E.xlsx
[26/05/2014 - 21:05:34 | A | 417 Ko] - G:\FERIA QUILAHUANI 2015\III EXPOSICIN AGR
OPECUARIA PROYECTO 2014.docx
[18/08/2014 - 21:57:36 | A | 111 Ko] - G:\FERIA QUILAHUANI 2015\INFORME DE LA EX
PO Q 2013.docx
[15/08/2015 - 22:59:48 | A | 110 Ko] - G:\FERIA QUILAHUANI 2015\INFORME DE LA EX
PO Q 2014.docx
[20/08/2014 - 18:48:52 | A | 739 Ko] - G:\FERIA QUILAHUANI 2015\oficios III EXPO
.docx
[15/08/2015 - 23:15:34 | A | 20 Ko] - G:\FERIA QUILAHUANI 2015\PRESUPUESTO ANALTI
CO II EXPOSICIN GANADERA QUILAHUANI 2013.xlsx
[13/08/2015 - 14:19:46 | AH | 0 Ko] - G:\FERIA QUILAHUANI 2015\~$FORME DE LA EXP
O Q 2013.docx
[13/08/2015 - 14:20:44 | AH | 0 Ko] - G:\FERIA QUILAHUANI 2015\~$I EXPOSICIN AGRO
PECUARIA PROYECTO 2014.docx
[20/08/2015 - 11:50:44 | AH | 0 Ko] - G:\FERIA QUILAHUANI 2015\~$PRESUPUESTO ANA
LTICO II EXPOSICIN GANADERA QUILAHUANI 2013.xlsx
[20/08/2015 - 12:18:50 | A | 405 Ko] - G:\FERIA QUILAHUANI 2015\IV EXPOSICIN AGRO
PECUARIA PROYECTO 2015.docx

[b]################## | Vaccin |[/b]

C:\Autorun.inf
D:\Autorun.inf
E:\Autorun.inf
G:\Autorun.inf

->
->
->
->

Vacuna
Vacuna
Vacuna
Vacuna

creada
creada
creada
creada

por
por
por
por

UsbFix
UsbFix
UsbFix
UsbFix

(El
(El
(El
(El

Desaparecido)
Desaparecido)
Desaparecido)
Desaparecido)

[b]################## | E.O.F | [url=http://www.sosvirus.net/]http://www.sosviru

s.net/[/url] | [url=http://www.es.usbfix.net/]http://www.es.usbfix.net/[/url] |[
/b]