[b]############################## | UsbFix V 8.

184 | [Clean][/b]

User: USER (Administrator) # SIMATIC

Updated 26/01/2016 by SosVirus
Started at 10:27:12 | 25/07/2017

Website : [url=http://www.en.usbfix.net/]http://www.en.usbfix.net/[/url]
Tutorial : [url=http://www.pt.usbfix.net/2014/03/tutorial-do-usbfix-
scan/]http://www.pt.usbfix.net/2014/03/tutorial-do-usbfix-scan/[/url]
Support : [url=http://www.sos-virus.net/]http://www.sos-virus.net/[/url]
Live detection : [url=http://how-to-remove.us/]http://how-to-remove.us/[/url]
Contact : [url=http://www.en.usbfix.net/contact/]http://www.en.usbfix.net/contact/
[/url]

[b]################## | System information |[/b]

CPU: Intel(R) Core(TM)2 Duo CPU T7500 @ 2.20GHz

RAM -> [Total : 2038 Mo | Free : 1060 Mo]
Boot: Normal boot

OS: Microsoft Windows XP (5.1.2600 32-Bit) Service Pack 3

WB: Internet Explorer : 8.00.6001.18702
WB: Google Chrome : 49.0.2623.112

[b]################## | Security Information |[/b]

AV: Microsoft Security Essentials [[b](!) Disabled[/b] |[b](!) Outdated[/b]]

FW: Windows Firewall [[b](!) Disabled[/b]]
SC: Security Center [Enabled]
WU: Windows Update [Enabled]

[b]################## | Disk Information |[/b]

C:\ (%SystemDrive%) -> Fixed disk # 30 Gb (1 Gb free - 4%) [SYSTEM] # NTFS

D:\ -> Fixed disk # 119 Gb (82 Gb free - 69%) [DATA] # NTFS

[b]################## | Generic Research |[/b]

(!) Temporary files deleted. (48.6521062850952 MB)

[b]################## | Startup |[/b]

F2 - HKLM\..\Winlogon : [Shell] Explorer.exe

F2 - HKLM\..\Winlogon : [Userinit] C:\WINDOWS\system32\Userinit.exe,
04 - HKCU\..\Run : [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
04 - HKLM\..\Run : [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe"
-hide -runkey
04 - HKLM\..\Run : [AvgUi] "C:\Program Files\AVG\Framework\Common\avguirnx.exe"
/lps=fmw
04 - HKLM\..\Run : [PuranADT] C:\Program Files\Puran Utilities\PuranADT.exe
04 - HKU\S-1-5-19\..\Run : [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE
04 - HKU\S-1-5-20\..\Run : [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE
04 - HKU\S-1-5-21-254282188-3688675899-2659733462-1008\..\Run : [ctfmon.exe]
C:\WINDOWS\system32\ctfmon.exe
04 - HKU\S-1-5-18\..\Run : [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE
04 - HKU\S-1-5-18\..\Run : [DWQueuedReporting]
"C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t
[b]################## | UsbFix - Information |[/b]

Info : [url=https://www.youtube.com/watch?v=vUZYYASd7FE]How to remove shortcut

virus on flash disk (Video)[/url]
Info : [url=http://www.en.usbfix.net/2014/03/remove-shortcut-virus-usb/]Shortcut
virus on flash disk, What is it ?[/url]
Live detection : [url=http://how-to-remove.us/]http://how-to-remove.us/[/url]

[b]################## | C:\ %SystemDrive% - Fixed drive (NTFS) |[/b]

[14/01/2011 - 12:46:00 | A | 1 Ko] - C:\NetworkCfg.xml

[12/02/2017 - 20:53:48 | A | 16 Ko] - C:\ReturnedFeatures.xml
[17/09/2012 - 09:20:42 | N | 0 Ko] - C:\boot.ini.vci
[20/08/2007 - 15:09:06 | A | 0 Ko] - C:\CONFIG.SYS
[20/08/2007 - 15:09:06 | RASH | 0 Ko] - C:\IO.SYS
[20/08/2007 - 15:09:06 | RASH | 0 Ko] - C:\MSDOS.SYS
[09/07/2017 - 14:23:45 | ASH | 2086948 Ko] - C:\hiberfil.sys
[09/07/2017 - 14:42:55 | ASH | 2085888 Ko] - C:\pagefile.sys
[04/08/2004 - 16:00:00 | A | 0 Ko] - C:\WIN51IP.SP2
[11/07/2017 - 12:45:15 | D] - C:\Config.Msi
[11/09/2011 - 16:17:56 | A | 16 Ko] - C:\drwtsn32.log
[30/10/2012 - 13:05:43 | A | 0 Ko] - C:\psetup.2012.10.30-10.05.43.log
[30/10/2012 - 13:07:22 | A | 0 Ko] - C:\psetup.2012.10.30-10.07.22.log
[23/04/2013 - 19:32:09 | A | 17 Ko] - C:\RASETUP1.LOG
[15/01/2017 - 14:45:12 | A | 81 Ko] - C:\RASETUP2.LOG
[12/02/2017 - 20:53:47 | A | 85 Ko] - C:\SeCon.log
[12/02/2017 - 21:53:19 | A | 65 Ko] - C:\RASETUP3.LOG
[12/02/2017 - 22:18:22 | A | 3 Ko] - C:\RASETUP4.LOG
[12/02/2017 - 22:19:01 | A | 12 Ko] - C:\RASETUP5.LOG
[12/02/2017 - 22:22:33 | A | 12 Ko] - C:\RASETUP.LOG
[06/04/2009 - 18:02:56 | A | 0 Ko] - C:\My S7-200 Network.lnk
[24/03/2017 - 15:00:36 | A | 0 Ko] - C:\prefs.js
[23/04/2013 - 19:16:02 | A | 1 Ko] - C:\boot_WinACRTX.ini
[12/09/2014 - 10:54:22 | A | 1 Ko] - C:\boot.ini
[20/08/2007 - 12:45:06 | N | 1 Ko] - C:\BOOTSECT.DOS
[28/02/2006 - 15:00:00 | N | 46 Ko] - C:\NTDETECT.COM
[20/08/2007 - 15:09:06 | A | 0 Ko] - C:\AUTOEXEC.BAT
[21/08/2007 - 16:45:37 | N | 0 Ko] - C:\BOOT.BAK
[28/01/2001 - 10:03:40 | RHD] - C:\MSOCache
[04/08/2004 - 16:00:00 | A | 0 Ko] - C:\WIN51IP
[04/08/2004 - 16:00:00 | A | 0 Ko] - C:\WIN51
[28/02/2006 - 15:00:00 | N | 254 Ko] - C:\cmldr
[20/08/2007 - 12:29:28 | D] - C:\I386
[20/08/2007 - 12:35:38 | D] - C:\DRIVERS
[20/08/2007 - 15:31:44 | D] - C:\AcroRead8
[20/08/2007 - 16:19:40 | D] - C:\Recycled
[21/08/2007 - 17:26:56 | D] - C:\NERO
[25/09/2007 - 03:13:00 | D] - C:\S5_INFO
[25/09/2007 - 03:13:08 | D] - C:\STEP5
[17/05/2008 - 12:17:52 | AD] - C:\INFO
[24/03/2010 - 12:29:14 | D] - C:\SINEC
[08/01/2011 - 22:29:30 | RASH | 244 Ko] - C:\ntldr
[30/10/2012 - 13:08:28 | D] - C:\FST4
[21/10/2013 - 18:13:24 | D] - C:\HWUpdates
[19/01/2015 - 08:54:44 | D] - C:\Temp
[22/05/2015 - 09:46:24 | A | 0 Ko] - C:\15d7c
[22/05/2015 - 10:00:40 | A | 0 Ko] - C:\142ff
[04/06/2015 - 10:49:57 | A | 0 Ko] - C:\16da9
[14/10/2015 - 13:16:11 | D] - C:\SIEMENS
[16/11/2015 - 09:06:00 | D] - C:\cmdcons
[19/11/2015 - 22:39:22 | D] - C:\SiLabs
[03/08/2016 - 18:43:20 | D] - C:\KEG
[28/09/2016 - 17:09:27 | D] - C:\Documents and Settings
[17/01/2017 - 22:43:49 | D] - C:\COM ET200
[15/02/2017 - 11:11:29 | D] - C:\AX NF ZZ
[05/04/2017 - 17:58:31 | D] - C:\LABEL
[29/04/2017 - 08:42:15 | RD] - C:\Program Files
[28/05/2017 - 15:15:27 | SHD] - C:\RECYCLER
[05/07/2017 - 11:37:09 | D] - C:\WINDOWS
[25/07/2017 - 10:26:52 | D] - C:\UsbFix

[b]################## | D:\ - Fixed drive (NTFS) |[/b]

[02/06/2015 - 13:28:25 | A | 0 Ko] - D:\MOVE.TRC

[10/04/2016 - 07:59:23 | A | 357 Ko] - D:\S7 CANOPENER.rar
[02/05/2002 - 17:24:46 | A | 137 Ko] - D:\comdlg32.ocx
[19/09/2002 - 20:28:10 | A | 1041 Ko] - D:\mscomctl.ocx
[18/03/2013 - 10:47:35 | A | 2583447 Ko] - D:\EBI_18_03_2013_CS.GHO
[18/03/2013 - 11:04:14 | A | 5166894 Ko] - D:\EBI_CU_GHO_INCLUS_18_03_2013.GHO
[18/03/2013 - 11:24:48 | A | 1381380 Ko] - D:\EBI_COMPRIMAT_18_03_2013.GHO
[18/03/2013 - 11:39:53 | A | 2759156 Ko] -
D:\EBI_COMPRIMAT_CU_GHO_INCLUS_18_03_2013.GHO
[07/10/2013 - 10:46:53 | ASH | 5 Ko] - D:\Thumbs.db
[08/01/2001 - 18:25:30 | A | 4307 Ko] - D:\DEFECT LA INFOLIAT DOZE.bmp
[27/09/2007 - 02:27:18 | D] - D:\Restore
[24/09/2008 - 23:47:07 | SHD] - D:\RECYCLER
[02/12/2008 - 16:13:25 | D] - D:\Easy
[10/12/2008 - 16:48:30 | D] - D:\MCT10
[24/03/2010 - 12:29:08 | D] - D:\STEP5
[08/01/2011 - 23:22:43 | D] - D:\702a6696037787dca8
[09/01/2011 - 00:28:12 | D] - D:\e56932b8b5a31835da58db56052b
[25/05/2011 - 11:19:54 | D] - D:\995104
[28/05/2012 - 12:59:11 | D] - D:\i36
[25/07/2012 - 13:37:30 | D] - D:\Card Step 7
[30/09/2012 - 11:34:17 | D] - D:\nicu_probe
[26/02/2013 - 12:21:23 | D] - D:\Ghost EBI
[14/06/2013 - 16:15:47 | D] - D:\PLM
[19/06/2013 - 17:23:40 | D] - D:\Documentatie
[08/08/2013 - 14:35:30 | D] - D:\Dezambalat
[07/10/2013 - 11:41:10 | D] - D:\paletizat doza 7 oct 2013
[31/10/2013 - 21:10:42 | D] - D:\probe opc marius
[12/11/2013 - 14:25:21 | D] - D:\BackUP PLC
[27/11/2013 - 08:47:26 | D] - D:\126725
[06/02/2014 - 15:23:38 | D] - D:\080E60
[11/04/2014 - 15:13:42 | D] - D:\Programe KHS
[24/09/2014 - 16:56:44 | D] - D:\paletizor doze Marius
[12/12/2014 - 16:16:14 | D] - D:\Euwa
[12/12/2014 - 16:22:50 | D] - D:\Pr2740_C
[11/03/2015 - 17:04:02 | D] - D:\costi_work
[14/04/2015 - 14:47:20 | D] - D:\transport paleti sticla
[04/05/2015 - 09:56:05 | D] - D:\zambelli de pe stick
[14/08/2015 - 17:47:08 | D] - D:\trimis de Bogdan pe mail
[14/10/2015 - 13:42:01 | D] - D:\AX NF ZZ
[13/11/2015 - 11:34:14 | D] - D:\transpack
[14/11/2015 - 22:13:14 | D] - D:\Festo PLC
[23/01/2016 - 13:51:22 | D] - D:\Danfoss
[06/05/2016 - 18:19:16 | D] - D:\CPU317-2
[06/05/2016 - 18:19:19 | D] - D:\S7 CANOPENER
[10/05/2016 - 16:00:22 | D] - D:\BREWHOUSE_2016_04_28
[12/05/2016 - 18:19:26 | D] - D:\programe desktop
[15/05/2016 - 20:50:32 | D] - D:\Programe instalate
[28/09/2016 - 18:16:06 | D] - D:\fierbere
[14/10/2016 - 18:21:10 | D] - D:\PROGRAME
[17/12/2016 - 17:32:49 | D] - D:\Cursuri Siemens_Pro
[15/01/2017 - 14:06:15 | D] - D:\SIMATIC WinCC flexible(2)
[24/03/2017 - 13:41:25 | D] - D:\S5
[24/03/2017 - 13:41:25 | D] - D:\COPIE FILLER 136
[26/03/2017 - 10:10:05 | D] - D:\KIT
[27/05/2017 - 19:22:08 | D] - D:\3 F
[03/07/2017 - 08:06:09 | D] - D:\programe 3f

[b]################## | Vaccin |[/b]

C:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)

D:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)

[b]Analysed in 27.38 seconds[/b]

[b]################## | E.O.F |
[url=http://www.sosvirus.net/]http://www.sosvirus.net/[/url] |
[url=http://www.en.usbfix.net/]http://www.en.usbfix.net/[/url] |[/b]