You are on page 1of 7

############################## | UsbFix V 7.

078 | [Supresin]
Usuario: Administrador (Administrador) # HP
Actualizado el 06/01/2012 por El Desaparecido
Comenz a 19:24:04 | 04/11/2013
Sitio web: http://eldesaparecido.com
Archivo sospechoso ? : http://eldesaparecido.com/upload.html
Contacto: contact@eldesaparecido.com
PC: Hewlett-Packard (HP Pavilion g4 Notebook PC
) (x64-based PC) # Notebook
CPU: Intel(R) Core(TM) i3-2330M CPU @ 2.20GHz (2200)
RAM -> [ Total : 4044 | Free : 1718 ]
BIOS: InsydeH2O Version 03.61.01F.33
BOOT: Normal boot
OS: Microsoft Windows 7 Home Basic (6.1.7601 64-Bit) # Service Pack 1
WB: Windows Internet Explorer 9.10.9200.16635
SC:
WU:
AV:
FW:

Security Center Service [ (!) Disabled ]


Windows Update Service [ (!) Disabled ]
avast! Internet Security [ Enabled | (!) Outdated ]
Windows FireWall Service [ (!) Disabled ]

C:\
D:\
E:\
F:\
H:\
I:\
J:\

(%systemdrive%)
-> Disco fijo #
-> Disco fijo #
-> CD-ROM
-> CD-ROM
-> Disco fijo #
-> Disco fijo #

-> Disco fijo # 446 Gb (290 Mb libre(s) - 65%) [] # NTFS


15 Gb (2 Mb libre(s) - 11%) [Recovery] # NTFS
4 Gb (1 Mb libre(s) - 27%) [HP_TOOLS] # FAT32
32 Gb (32 Mb libre(s) - 100%) [ACER] # NTFS
32 Gb (32 Mb libre(s) - 99%) [DATA] # NTFS

################## | Procesos Activos |


C:\Windows\system32\csrss.exe (428)
C:\Windows\system32\wininit.exe (520)
C:\Windows\system32\csrss.exe (556)
C:\Windows\system32\services.exe (584)
C:\Windows\system32\lsass.exe (604)
C:\Windows\system32\lsm.exe (612)
C:\Windows\system32\winlogon.exe (724)
C:\Windows\system32\svchost.exe (764)
C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe (840)
C:\Windows\system32\svchost.exe (900)
C:\Windows\System32\svchost.exe (984)
C:\Windows\System32\svchost.exe (352)
C:\Windows\system32\svchost.exe (436)
C:\Windows\system32\svchost.exe (472)
C:\Windows\system32\svchost.exe (1304)
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (1376)
C:\Windows\system32\WLANExt.exe (1384)
C:\Windows\system32\conhost.exe (1396)
C:\Program Files\Alwil Software\Avast5\afwServ.exe (1476)
C:\Windows\System32\spoolsv.exe (1936)
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (1748)
C:\Windows\system32\taskhost.exe (1724)
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDevic
eService.exe (1580)
C:\Program Files\Bonjour\mDNSResponder.exe (2088)
C:\Windows\system32\Dwm.exe (2144)

C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (2168)


C:\Windows\System32\svchost.exe (2192)
C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe (2276)
C:\Windows\system32\HPSIsvc.exe (2332)
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (2380)
C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe (2404)
C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe (2424)
C:\Windows\SysWOW64\lkcitdl.exe (2452)
C:\Windows\SysWOW64\lkads.exe (2476)
C:\Windows\SysWOW64\lktsrv.exe (2516)
C:\Program Files (x86)\National Instruments\Shared\Security\nidmsrv.exe (2660)
C:\Windows\SysWOW64\nisvcloc.exe (2724)
C:\Windows\SysWOW64\PnkBstrA.exe (2820)
C:\Windows\SysWOW64\PnkBstrB.exe (2848)
C:\Program Files (x86)\Realtek\RTL8187 Wireless LAN Utility\RtlService.exe (2872
)
C:\Windows\system32\svchost.exe (2916)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (2948)
C:\Windows\system32\svchost.exe (2648)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (2300)
C:\Windows\System32\rundll32.exe (3148)
C:\Program Files (x86)\Realtek\RTL8187 Wireless LAN Utility\RtWlan.exe (3368)
C:\Windows\System32\hkcmd.exe (3700)
C:\Windows\System32\igfxpers.exe (3708)
C:\Windows\system32\wbem\wmiprvse.exe (3868)
C:\Windows\syswow64\svchost.exe (3904)
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (4020)
C:\Program Files\IDT\WDM\sttray64.exe (4048)
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (4080)
C:\Program Files\Hewlett-Packard\HP LaunchBox\HPTaskBar1.exe (3636)
C:\Program Files\Hewlett-Packard\HP LaunchBox\HPTaskBar2.exe (3624)
C:\Windows\system32\SearchIndexer.exe (4144)
C:\Program Files (x86)\Ares\Ares.exe (4192)
C:\Users\Administrador\AppData\Local\Learnpulse\Screenpresso\Screenpresso.exe (4
248)
C:\Users\Administrador\AppData\Roaming\uTorrent\uTorrent.exe (4268)
C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe (4308)
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (4528)
C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe (4668)
C:\Program Files (x86)\Common Files\Gestor de instalacin de SolidWorks\Background
Downloading\sldBgDwld.exe (4752)
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (4
904)
C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe (4912)
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (4920)
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (4936)
C:\Windows\system32\svchost.exe (4968)
C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe (5004)
C:\Program Files\Alwil Software\Avast5\AvastUI.exe (5028)
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (5056)
C:\Program Files (x86)\PDF24\pdf24.exe (5064)
C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe (5072)
C:\Program Files (x86)\iTunes\iTunesHelper.exe (5080)
C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe (916)
C:\Program Files\iPod\bin\iPodService.exe (3952)
C:\Windows\SysWOW64\RunDll32.exe (5432)
C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe (89
6)
C:\Windows\system32\svchost.exe (5328)
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.

exe (2564)
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (
4836)
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (
4620)
C:\Windows\system32\svchost.exe (6812)
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe (6444)
C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.exe (6320)
C:\Windows\system32\wbem\unsecapp.exe (404)
C:\Program Files\Alwil Software\Avast5\setup\avast.setup (5676)
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\
OSPPSVC.EXE (7844)
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (5184)
C:\Users\Administrador\Documents\San andreas\gta_sa.exe (16972)
C:\Windows\SysWOW64\rundll32.exe (21048)
C:\Windows\System32\svchost.exe (22736)
C:\Windows\system32\taskhost.exe (23360)
C:\Windows\splwow64.exe (6736)
C:\Program Files\Internet Explorer\iexplore.exe (15052)
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE (8224)
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE (23056)
C:\Program Files (x86)\Mozilla Firefox\firefox.exe (14316)
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe (10844)
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe (21220)
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe (19000)
C:\Windows\explorer.exe (22696)
C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE (15952)
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe (15320)
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe (6068)
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe (23784)
C:\Windows\system32\AUDIODG.EXE (16028)
C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe (171
72)
C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.
exe (7756)
C:\Program Files (x86)\CyberLink\PowerDVD13\PowerDVD13Agent.exe (10984)
C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE (9308)
C:\Program Files (x86)\HP SimplePass 2011\TouchControl.exe (16584)
C:\Program Files (x86)\HP SimplePass 2011\BioMonitor.exe (9128)
C:\UsbFix\Go.exe (8508)
C:\Windows\system32\wbem\wmiprvse.exe (20292)
################## | Procesos Parados |
Parado! C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe (840)
Parado! C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (1376)
Parado! C:\Windows\system32\WLANExt.exe (1384)
Parado! C:\Windows\system32\conhost.exe (1396)
Parado! C:\Program Files\Alwil Software\Avast5\afwServ.exe (1476)
Parado! C:\Windows\System32\spoolsv.exe (1936)
Parado! C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (1748)
Parado! C:\Windows\system32\taskhost.exe (1724)
Parado! C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMob
ileDeviceService.exe (1580)
Parado! C:\Program Files\Bonjour\mDNSResponder.exe (2088)
Parado! C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (2168)
Parado! C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(2276)
Parado! C:\Windows\system32\HPSIsvc.exe (2332)
Parado! C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (238

0)
Parado! C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe (24
04)
Parado! C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe (2424)
Parado! C:\Windows\SysWOW64\lkcitdl.exe (2452)
Parado! C:\Windows\SysWOW64\lkads.exe (2476)
Parado! C:\Windows\SysWOW64\lktsrv.exe (2516)
Parado! C:\Program Files (x86)\National Instruments\Shared\Security\nidmsrv.exe
(2660)
Parado! C:\Windows\SysWOW64\nisvcloc.exe (2724)
Parado! C:\Windows\SysWOW64\PnkBstrA.exe (2820)
Parado! C:\Windows\SysWOW64\PnkBstrB.exe (2848)
Parado! C:\Program Files (x86)\Realtek\RTL8187 Wireless LAN Utility\RtlService.e
xe (2872)
Parado! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(2948)
Parado! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(2300)
Parado! C:\Windows\System32\rundll32.exe (3148)
Parado! C:\Program Files (x86)\Realtek\RTL8187 Wireless LAN Utility\RtWlan.exe (
3368)
Parado! C:\Windows\System32\hkcmd.exe (3700)
Parado! C:\Windows\System32\igfxpers.exe (3708)
Parado! C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (4020)
Parado! C:\Program Files\IDT\WDM\sttray64.exe (4048)
Parado! C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (4080)
Parado! C:\Program Files\Hewlett-Packard\HP LaunchBox\HPTaskBar1.exe (3636)
Parado! C:\Program Files\Hewlett-Packard\HP LaunchBox\HPTaskBar2.exe (3624)
Parado! C:\Windows\system32\SearchIndexer.exe (4144)
Parado! C:\Program Files (x86)\Ares\Ares.exe (4192)
Parado! C:\Users\Administrador\AppData\Local\Learnpulse\Screenpresso\Screenpress
o.exe (4248)
Parado! C:\Users\Administrador\AppData\Roaming\uTorrent\uTorrent.exe (4268)
Parado! C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe (4308)
Parado! C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (4528)
Parado! C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe (4668)
Parado! C:\Program Files (x86)\Common Files\Gestor de instalacin de SolidWorks\Ba
ckgroundDownloading\sldBgDwld.exe (4752)
Parado! C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIco
n.exe (4904)
Parado! C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe (4912)
Parado! C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (4920)
Parado! C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (493
6)
Parado! C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe (5
004)
Parado! C:\Program Files\Alwil Software\Avast5\AvastUI.exe (5028)
Parado! C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (5056)
Parado! C:\Program Files (x86)\PDF24\pdf24.exe (5064)
Parado! C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe (5072)
Parado! C:\Program Files (x86)\iTunes\iTunesHelper.exe (5080)
Parado! C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe (916)
Parado! C:\Program Files\iPod\bin\iPodService.exe (3952)
Parado! C:\Windows\SysWOW64\RunDll32.exe (5432)
Parado! C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service
.exe (896)
Parado! C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDat
aMgrSvc.exe (2564)
Parado! C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\L
MS.exe (4836)

Parado! C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\U


NS.exe (4620)
Parado! C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe (6444)
Parado! C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.exe (6320)
Parado! C:\Program Files\Alwil Software\Avast5\setup\avast.setup (5676)
Parado! C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionP
latform\OSPPSVC.EXE (7844)
Parado! C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(5184)
Parado! C:\Users\Administrador\Documents\San andreas\gta_sa.exe (16972)
Parado! C:\Windows\SysWOW64\rundll32.exe (21048)
Parado! C:\Windows\system32\taskhost.exe (23360)
Parado! C:\Windows\splwow64.exe (6736)
Parado! C:\Program Files\Internet Explorer\iexplore.exe (15052)
Parado! C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE (8224)
Parado! C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE (23056)
Parado! C:\Program Files (x86)\Mozilla Firefox\firefox.exe (14316)
Parado! C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe (10844)
Parado! C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe (21220)
Parado! C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe (19000)
Parado! C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE (15952)
Parado! C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe (15320)
Parado! C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe (6
068)
Parado! C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe (2
3784)
Parado! C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.
exe (17172)
Parado! C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServic
ePDVD13.exe (7756)
Parado! C:\Program Files (x86)\CyberLink\PowerDVD13\PowerDVD13Agent.exe (10984)
Parado! C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE (9308)
Parado! C:\Program Files (x86)\HP SimplePass 2011\TouchControl.exe (16584)
Parado! C:\Program Files (x86)\HP SimplePass 2011\BioMonitor.exe (9128)
################## | Archivos # Carpetas infectadas |
Suprimido
Suprimido
Suprimido
Suprimido
Suprimido
Suprimido
Suprimido
Suprimido
Suprimido

!
!
!
!
!
!
!
!
!

I:\ACER (33GB).lnk
J:\DATA (33GB).lnk
C:\$RECYCLE.BIN\S-1-5-21-3902498660-1967111226-1631022483-500
C:\$RECYCLE.BIN\S-1-5-21-3913999383-3712117542-333525857-1000
C:\$RECYCLE.BIN\S-1-5-21-3913999383-3712117542-333525857-500
C:\$RECYCLE.BIN\S-1-5-21-3913999383-3712117542-333525857-501
D:\$RECYCLE.BIN\S-1-5-21-3913999383-3712117542-333525857-1000
D:\$RECYCLE.BIN\S-1-5-21-3913999383-3712117542-333525857-500
D:\$RECYCLE.BIN\S-1-5-21-3913999383-3712117542-333525857-501

(!) Archivos temporales suprimido.


################## | Registro |
################## | Mountpoints2 |
Suprimido ! HKCU\.\.\.\.\Explorer\MountPoints2\{034e3b57-222b-11e2-92e9-9439e5cd
8aff}
Suprimido ! HKCU\.\.\.\.\Explorer\MountPoints2\{9a31b7e9-b883-11e1-8db9-9439e5cd
8aff}
Suprimido ! HKCU\.\.\.\.\Explorer\MountPoints2\{ec2e9882-6ef8-11e2-8519-9439e5cd
8aff}

################## | Listing |
[04/11/2013
[11/08/2012
[21/02/2013
[21/12/2011
[17/06/2012
[04/07/2011
[20/11/2010
[11/04/2012
[03/11/2013
[13/07/2009
[16/03/2013
[11/08/2012
[24/10/2013
[22/09/2011
[21/10/2012
[22/09/2011
[01/12/2006
[21/12/2011
[01/11/2013
[13/07/2009
[19/10/2013
[03/11/2013
[03/11/2013
[21/12/2011
[22/06/2012
[28/07/2012
[28/10/2012
[21/12/2011
[02/10/2013
[21/12/2011
[27/09/2013
[04/11/2013
[04/11/2013
[14/07/2012
[21/09/2013
[02/05/2013
[04/11/2013
[04/11/2013
[21/12/2011
[14/07/2009
[23/05/2010
[21/12/2011
[21/12/2011
[30/03/2012
[21/12/2011
[21/12/2011
[20/05/2012
[21/12/2011
[17/02/2012
[08/06/2012
[23/09/2011
[01/11/2013
[30/03/2012
[04/11/2013
[04/11/2013
[04/11/2013
[04/11/2013

19:34:45
20:57:43
10:44:02
11:50:27
21:11:38
16:01:49
21:23:51
15:50:27
23:25:13
23:08:56
13:50:33
20:57:43
13:53:15
17:58:34
22:37:19
17:35:58
23:37:14
12:06:47
14:43:52
21:20:08
23:01:21
23:43:10
23:25:28
11:51:18
19:30:34
17:42:21
19:18:09
11:56:34
21:30:29
11:51:24
15:13:48
19:34:46
19:25:20
19:47:47
20:45:03
14:40:33
19:32:40
19:34:46
11:56:38
12:39:00
06:55:46
11:56:39
11:56:38
20:37:48
11:56:29
11:56:38
16:56:04
11:56:38
10:47:07
12:17:20
02:05:46
15:17:50
20:37:50
19:34:45
19:29:59
19:29:59
19:29:59

|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

SHD ] C:\$Recycle.Bin
N | 112]
C:\621629E14840
N | 0]
C:\acadminidump.dmp
D ]
C:\Archivos de programa
D ]
C:\Autodesk
D ]
C:\boot
RASH | 383786]
C:\bootmgr
D ]
C:\c8779432268d3dca02
D ]
C:\Config.Msi
SHD ] C:\Documents and Settings
D ]
C:\downloads
N | 40]
C:\FBBCB74A6A78
ASH | 3180220416]
C:\hiberfil.sys
D ]
C:\HP
D ]
C:\IMAGY
D ]
C:\Intel
N | 904704]
C:\msdia80.dll
RHD ] C:\MSOCache
ASH | 4240293888]
C:\pagefile.sys
D ]
C:\PerfLogs
D ]
C:\Program Files
D ]
C:\Program Files (x86)
HD ] C:\ProgramData
SHD ] C:\Recovery
N | 2900]
C:\shared.log
D ]
C:\Sierra
D ]
C:\SolidWorks Data
D ]
C:\SWSetup
SHD ] C:\System Volume Information
D ]
C:\SYSTEM.SAV
D ]
C:\TMP
D ]
C:\UsbFix
A | 14327]
C:\UsbFix.txt
N | 447]
C:\user.js
D ]
C:\Users
N | 1114]
C:\Vdeos - Acceso directo.lnk
D ]
C:\Windows
SHD ] D:\$RECYCLE.BIN
D ]
D:\boot
RASH | 383562]
D:\bootmgr
RASH | 67]
D:\Desktop.ini
D ]
D:\FactoryUpdate
D ]
D:\hp
N | 20]
D:\HPSF_Rep.txt
N | 8]
D:\HP_WSD.dat
D ]
D:\preload
RSD ] D:\recovery
D ]
D:\RM_Reserve
SHD ] D:\System Volume Information
D ]
E:\Hewlett-Packard
SHD ] E:\$RECYCLE.BIN
N | 8]
E:\HP_WSD.dat
N | 20]
E:\HPSF_Rep.txt
SHD ] I:\$RECYCLE.BIN
ASH | 0]
I:\autorun.inf
RASH | 3081] I:\desktop.ini
RASH | 423424]
I:\Thumbs.db

[04/11/2013
[04/11/2013
[04/11/2013
[04/11/2013
[04/11/2013
[04/11/2013
[04/11/2013
[04/11/2013

19:29:59
19:29:59
19:34:46
19:29:59
19:29:59
19:29:59
19:29:59
19:29:59

|
|
|
|
|
|
|
|

RASH | 4273] I:\_WOS.init


SHD ] I:\
SHD ] J:\$RECYCLE.BIN
ASH | 0]
J:\autorun.inf
RASH | 3081] J:\desktop.ini
RASH | 423424]
J:\Thumbs.db
RASH | 4273] J:\_WOS.init
SHD ] J:\

################## | Vaccin |
C:\Autorun.inf -> Vacuna creada por UsbFix (El Desaparecido)
D:\Autorun.inf -> Vacuna creada por UsbFix (El Desaparecido)
E:\Autorun.inf -> Vacuna creada por UsbFix (El Desaparecido)
################## | Upload |
Por favor, envie el archivo: C:\UsbFix_Upload_Me_HP.zip
http://eldesaparecido.com/upload.html
Gracias por su contribucin.
################## | E.O.F |

You might also like