This document is a system scan report from UsbFix V 7.181. It summarizes the system information, security status, installed applications, startup programs, and disk information of an HP laptop running Windows 8. The report finds that the antivirus is outdated, temporary files were deleted, and vaccines were created on removable drives to prevent shortcut virus infections from removable media.

1. [b]############################## | UsbFix V 7.181 | [Clean][/b]
User: hp (Administrator) # HPW
Updated 31/08/2014 by El Desaparecido - SosVirus
Started at 02:08:36 | 27/03/2015
Website : [url=http://www.en.usbfix.net/]http://www.en.usbfix.net/[/url]
Changelog :
[url=http://www.en.usbfix.net/changelog/]http://www.en.usbfix.net/changelog/
[/url]
Support : [url=http://www.sosvirus.net/]http://www.sosvirus.net/[/url]
Upload Malware :
[url=http://www.sosvirus.net/upload_malware.php]http://www.sosvirus.net/upload_m
alware.php[/url]
Contact :
[url=http://www.en.usbfix.net/contact/]http://www.en.usbfix.net/contact/[/url]
[b]################## | System information |[/b]
MB: Hewlett-Packard (196F)
CPU: Intel(R) Core(TM) i3-3110M CPU @ 2.40GHz
GC: Intel(R) HD Graphics 4000
RAM -> [Total : 1940 Mo | Free : 931 Mo]
Bios: Insyde
Boot: Normal boot
OS: Microsoft™ Windows 8 Single Language (6.2.9200 64-Bit)
WB: Internet Explorer : 10.00.9200.16384
WB: Mozilla Firefox : 36.0.4
[b]################## | Security Information |[/b]
AV: Quick Heal Total Security 2014 [Enabled |[b](!) Outdated[/b]]
AV: Windows Defender [[b](!) Disabled[/b] |Updated]
AS: Quick Heal Total Security 2014 [Enabled |Updated]
AS: Windows Defender [[b](!) Disabled[/b] |Updated]
FW: Quick Heal Firewall [Enabled]
FW: Windows Firewall [Enabled]
SC: Security Center [Enabled]
WU: Windows Update [Enabled]
[b]################## | Disk Information |[/b]
C: (%SystemDrive%) -> Fixed disk # 221 Gb (159 Gb free - 72%) [Windows] # NTFS
D: -> Fixed disk # 24 Gb (2 Gb free - 10%) [RECOVERY] # NTFS
F: -> Fixed disk # 220 Gb (103 Gb free - 47%) [New Volume] # NTFS
[b]################## | Generic Research |[/b]
(!) Temporary files deleted. (3.32225227355957 MB)
[b]################## | Registry |[/b]
[b]################## | Regedit Run |[/b]
F2 - HKLM..Winlogon : [Shell] Explorer.exe
F2 - [x64] HKLM..Winlogon : [Shell] explorer.exe
F2 - HKLM..Winlogon : [Userinit]
C:Windowssystem32userinit.exe,C:WindowsSysWOW64userinit.exe,
F2 - [x64] HKLM..Winlogon : [Userinit] C:Windowssystem32userinit.exe,
04 - HKCU..Run : [Facebook Update]
"C:UsershpAppDataLocalFacebookUpdateFacebookUpdate.exe" /c /nocrashserver

2. 04 - HKCU..Run : [NextLive] C:WindowsSysWOW64rundll32.exe
"C:UsershpAppDataRoamingnewnext.menengine.dll",EntryPoint -m l
04 - HKCU..Run : [PcSync] C:Program Files (x86)NokiaNokia PC Suite
6PcSync2.exe /NoDialog
04 - HKCU..Run : [ALLUpdate] "C:Program Files (x86)ALLPlayerALLUpdate.exe"
"sleep"
04 - HKCU..Run : [ALLPlayer WiFi Remote] C:Program Files (x86)ALLPlayer
RemoteALLPlayerRemoteControl.exe
04 - HKLM..Run : [BtTray] "C:Program Files (x86)Ralink CorporationRalink
Bluetooth StackBtTray.exe"
04 - HKLM..Run : [RemoteControl10] "C:Program Files
(x86)CyberLinkPowerDVD10PDVD10Serv.exe"
04 - HKLM..Run : [HPMessageService] C:Program Files (x86)Hewlett-PackardHP
System EventHPMSGSVC.exe
04 - HKLM..Run : [HP CoolSense] C:Program Files (x86)Hewlett-PackardHP
CoolSenseCoolSense.exe -byrunkey
04 - HKLM..Run : [Adobe Reader Speed Launcher] "C:Program Files
(x86)AdobeReader 9.0ReaderReader_sl.exe"
04 - HKLM..Run : [Adobe ARM] "C:Program Files (x86)Common
FilesAdobeARM1.0AdobeARM.exe"
04 - HKLM..Run : [BCSSync] "C:Program Files (x86)Microsoft
OfficeOffice14BCSSync.exe" /DelayServices
04 - HKLM..Run : [PCSuiteTrayApplication]
C:PROGRA~2NokiaNOKIAP~1LAUNCH~1.EXE -startup
04 - HKLM..Run : [AdobeCEPServiceManager] "C:Program Files (x86)Common
FilesAdobeCEPServiceManager4CEPServiceManager.exe" -launchedbylogin
04 - HKLM..Run : [Intex Speed 3.5G Datacard] C:Program Files (x86)Intex
Speed 3.5G DatacardDriverMobileAgent.exe
04 - [x64] HKLM..Run : [IgfxTray] C:Windowssystem32igfxtray.exe
04 - [x64] HKLM..Run : [HotKeysCmds] C:Windowssystem32hkcmd.exe
04 - [x64] HKLM..Run : [Persistence] C:Windowssystem32igfxpers.exe
04 - [x64] HKLM..Run : [RTHDVCPL] C:Program
FilesRealtekAudioHDARtkNGUI64.exe -s
04 - [x64] HKLM..Run : [SynTPEnh] %ProgramFiles%SynapticsSynTPSynTPEnh.exe
04 - [x64] HKLM..Run : [Quick Heal Core UI] "C:UsershpDesktopQuick Heal
Total Securitystrtupap.exe"
04 - [x64] HKLM..Run : [AdobeAAMUpdater-1.0] "C:Program Files (x86)Common
FilesAdobeOOBEPDAppUWAUpdaterStartupUtility.exe"
04 - HKUS-1-5-21-3834751363-4055730730-1076691404-1001..Run : [Facebook
Update] "C:UsershpAppDataLocalFacebookUpdateFacebookUpdate.exe" /c
/nocrashserver
04 - HKUS-1-5-21-3834751363-4055730730-1076691404-1001..Run : [NextLive]
C:WindowsSysWOW64rundll32.exe
"C:UsershpAppDataRoamingnewnext.menengine.dll",EntryPoint -m l
04 - HKUS-1-5-21-3834751363-4055730730-1076691404-1001..Run : [PcSync]
C:Program Files (x86)NokiaNokia PC Suite 6PcSync2.exe /NoDialog
04 - HKUS-1-5-21-3834751363-4055730730-1076691404-1001..Run : [ALLUpdate]
"C:Program Files (x86)ALLPlayerALLUpdate.exe" "sleep"
04 - HKUS-1-5-21-3834751363-4055730730-1076691404-1001..Run : [ALLPlayer WiFi
Remote] C:Program Files (x86)ALLPlayer RemoteALLPlayerRemoteControl.exe
[b]################## | UsbFix - Information |[/b]
Info : [url=https://www.youtube.com/watch?v=vUZYYASd7FE]How to remove shortcut
virus on flash disk (Video)[/url]
Info : [url=http://www.en.usbfix.net/2014/03/remove-shortcut-virus-usb/]Shortcut
virus on flash disk, What is it ?[/url]
[b]################## | Hijack |[/b]
[b]################## | Vaccin |[/b]
C:Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)

3. D:Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
F:Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
[b]################## | E.O.F |
[url=http://www.sosvirus.net/]http://www.sosvirus.net/[/url] |
[url=http://www.en.usbfix.net/]http://www.en.usbfix.net/[/url] |[/b]