[b]############################## | UsbFix V 7.987 | [Research][/b] User: iwo (Administrator) # L30-PC Updated 10/07/2015 by El Desaparecido - SosVirus Started at 14:01:29 | 10/07/2015 Website : [url=http://www.en.usbfix.net/]http://www.en.usbfix.net/[/url] Changelog : [url=http://www.en.usbfix.net/changelog/]http://www.en.usbfix.net/changelog/[/url] Support : [url=http://www.sos-virus.net/]http://www.sos-virus.net/[/url] Live detection : [url=http://how-to-remove.us/]http://how-to-remove.us/[/url] Contact : [url=http://www.en.usbfix.net/contact/]http://www.en.usbfix.net/contact/[/url] [b]################## | System information |[/b] MB: TOSHIBA (Satellite L30) CPU: Intel(R) Celeron(R) M CPU 410 @ 1.46GHz RAM -> [Total : 1918 Mo | Free : 1343 Mo] Bios: TOSHIBA Boot: Normal boot OS: Microsoft™ Windows 7 Enterprise (6.1.7601 32-Bit) Service Pack 1 WB: Internet Explorer : 11.00.9600.16428 WB: Google Chrome : 43.0.2357.132 WB: Mozilla Firefox : 39.0 [b]################## | Security Information |[/b] AV: Microsoft Security Essentials [Enabled |Updated] AS: Microsoft Security Essentials [Enabled |Updated] AS: Windows Defender [[b](!) Disabled[/b] |Updated] FW: Windows Firewall [Enabled] SC: Security Center [Enabled] WU: Windows Update [Enabled] [b]################## | Disk Information |[/b] C:\ (%SystemDrive%) -> Fixed disk # 119 Gb (86 Gb free - 72%) [] # NTFS [b]################## | Startup |[/b] F2 - HKLM\..\Winlogon : [Shell] explorer.exe F2 - HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe, 04 - HKCU\..\Run : [GoogleDriveSync] "C:\Program Files\Google\Drive\googledrivesync.exe" /autostart 04 - HKLM\..\Run : [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe 04 - HKLM\..\Run : [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey 04 - HKLM\..\Run : [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices 04 - HKLM\..\Run : [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" 04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun 04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun 04 - HKU\S-1-5-21-4122640607-1481324749-376337097-1000\..\Run : [GoogleDriveSync] "C:\Program Files\Google\Drive\googledrivesync.exe" /autostart 04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe 04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe [b]################## | Generic Research |[/b] Found! C:\temp\p3plcpnl0863.prod.phx3.secureserver.net Secure WebDisk.vbs [b]################## | UsbFix - Information |[/b] Info : [url=https://www.youtube.com/watch?v=vUZYYASd7FE]How to remove shortcut virus on flash disk (Video)[/url] Info : [url=http://www.en.usbfix.net/2014/03/remove-shortcut-virus-usb/]Shortcut virus on flash disk, What is it ?[/url] Live detection : [url=http://how-to-remove.us/]http://how-to-remove.us/[/url] [b]################## | E.O.F | [url=http://www.sosvirus.net/]http://www.sosvirus.net/[/url] | [url=http://www.en.usbfix.net/]http://www.en.usbfix.net/[/url] |[/b]