[fusion_builder_container hundred_percent=»yes» overflow=»visible»][fusion_builder_row][fusion_builder_column type=»1_1″ background_position=»left top» background_color=»» border_size=»» border_color=»» border_style=»solid» spacing=»yes» background_image=»» background_repeat=»no-repeat» padding=»» margin_top=»0px» margin_bottom=»0px» class=»» id=»» animation_type=»» animation_speed=»0.3″ animation_direction=»left» hide_on_mobile=»no» center_content=»no» min_height=»none»][fusion_title size=2″]Manual UsbFix – Efectuar un scan.[/fusion_title]
[/fusion_builder_column][fusion_builder_column type=»1_1″ background_position=»left top» background_color=»» border_size=»» border_color=»» border_style=»solid» spacing=»yes» background_image=»» background_repeat=»no-repeat» padding=»» margin_top=»0px» margin_bottom=»0px» class=»» id=»» animation_type=»» animation_speed=»0.3″ animation_direction=»left» hide_on_mobile=»no» center_content=»no» min_height=»none»][fusion_checklist size=»15px» icon=»arrow» iconcolor=»dark» circle=»no»]
- Descarga UsbFix sobre su escritorio y ejecútelo.
- UsbFix se lanzará automáticamente.
- Conecte todas sus unidades extraíbles a su PC (llave USB, disco duro externo, etc) sin abrirlos.
- Pulsa el opción «Buscar«.
[/fusion_checklist]
[fusion_separator style_type=»none» top_margin=»10″ bottom_margin=»10″ sep_color=»» border_size=»» icon=»» icon_circle=»» icon_circle_color=»» width=»» alignment=»center» class=»» id=»»/]
[fusion_imageframe style=»bottomshadow» lightbox=»yes» bordercolor=»#d1d1d1″ bordersize=»0px» stylecolor=»#ffffff» align=»»][/fusion_imageframe]
[fusion_separator style_type=»none» top_margin=»10″ bottom_margin=»10″ sep_color=»» border_size=»» icon=»» icon_circle=»» icon_circle_color=»» width=»» alignment=»center» class=»» id=»»/]
[/fusion_builder_column][fusion_builder_column type=»1_1″ background_position=»left top» background_color=»» border_size=»» border_color=»» border_style=»solid» spacing=»yes» background_image=»» background_repeat=»no-repeat» padding=»» margin_top=»0px» margin_bottom=»0px» class=»» id=»» animation_type=»» animation_speed=»0.3″ animation_direction=»left» hide_on_mobile=»no» center_content=»no» min_height=»none»][fusion_checklist size=»15px» icon=»arrow» iconcolor=»dark» circle=»no»]
- La ventana que sigue es un recuerdo a las consignas aquí abajo:
[/fusion_checklist]
[fusion_separator style_type=»none» top_margin=»10″ bottom_margin=»10″ sep_color=»» border_size=»» icon=»» icon_circle=»» icon_circle_color=»» width=»» alignment=»center» class=»» id=»»/]
Conecte todas sus unidades extraíbles a su PC (llave USB, disco duro externo, etc) sin abrirlos.
[fusion_separator style_type=»none» top_margin=»10″ bottom_margin=»10″ sep_color=»» border_size=»» icon=»» icon_circle=»» icon_circle_color=»» width=»» alignment=»center» class=»» id=»»/]
[/fusion_builder_column][fusion_builder_column type=»1_1″ background_position=»left top» background_color=»» border_size=»» border_color=»» border_style=»solid» spacing=»yes» background_image=»» background_repeat=»no-repeat» padding=»» margin_top=»0px» margin_bottom=»0px» class=»» id=»» animation_type=»» animation_speed=»0.3″ animation_direction=»left» hide_on_mobile=»no» center_content=»no» min_height=»none»][fusion_checklist size=»15px» icon=»arrow» iconcolor=»dark» circle=»no»]
- Una vez hecho, haga un clic sobre OK.
[/fusion_checklist]
[fusion_separator style_type=»none» top_margin=»10″ bottom_margin=»10″ sep_color=»» border_size=»» icon=»» icon_circle=»» icon_circle_color=»» width=»» alignment=»center» class=»» id=»»/]
[fusion_imageframe style=»bottomshadow» lightbox=»yes» bordercolor=»#d1d1d1″ bordersize=»0px» stylecolor=»#ffffff» align=»»][/fusion_imageframe]
[fusion_separator style_type=»none» top_margin=»10″ bottom_margin=»10″ sep_color=»» border_size=»» icon=»» icon_circle=»» icon_circle_color=»» width=»» alignment=»center» class=»» id=»»/]
[/fusion_builder_column][fusion_builder_column type=»1_1″ background_position=»left top» background_color=»» border_size=»» border_color=»» border_style=»solid» spacing=»yes» background_image=»» background_repeat=»no-repeat» padding=»» margin_top=»0px» margin_bottom=»0px» class=»» id=»» animation_type=»» animation_speed=»0.3″ animation_direction=»left» hide_on_mobile=»no» center_content=»no» min_height=»none»][fusion_checklist size=»15px» icon=»arrow» iconcolor=»dark» circle=»no»]
- Espere el tiempo del scan (varía según la configuración del PC).
[/fusion_checklist]
[fusion_separator style_type=»none» top_margin=»10″ bottom_margin=»10″ sep_color=»» border_size=»» icon=»» icon_circle=»» icon_circle_color=»» width=»» alignment=»center» class=»» id=»»/]
[fusion_imageframe style=»bottomshadow» lightbox=»yes» bordercolor=»#d1d1d1″ bordersize=»0px» stylecolor=»#ffffff» align=»»] [/fusion_imageframe]
[fusion_separator style_type=»none» top_margin=»10″ bottom_margin=»10″ sep_color=»» border_size=»» icon=»» icon_circle=»» icon_circle_color=»» width=»» alignment=»center» class=»» id=»»/]
[/fusion_builder_column][fusion_builder_column type=»1_1″ background_position=»left top» background_color=»» border_size=»» border_color=»» border_style=»solid» spacing=»yes» background_image=»» background_repeat=»no-repeat» padding=»» margin_top=»0px» margin_bottom=»0px» class=»» id=»» animation_type=»» animation_speed=»0.3″ animation_direction=»left» hide_on_mobile=»no» center_content=»no» min_height=»none»][fusion_checklist size=»15px» icon=»arrow» iconcolor=»dark» circle=»no»]
- Durante el scan, UsbFix le informa del número de elementos analizados y le señala el número de elementos infectados.
[/fusion_checklist]
[fusion_separator style_type=»none» top_margin=»10″ bottom_margin=»10″ sep_color=»» border_size=»» icon=»» icon_circle=»» icon_circle_color=»» width=»» alignment=»center» class=»» id=»»/]
[fusion_imageframe style=»bottomshadow» lightbox=»yes» bordercolor=»#d1d1d1″ bordersize=»0px» stylecolor=»#ffffff» align=»»] [/fusion_imageframe]
[fusion_separator style_type=»none» top_margin=»10″ bottom_margin=»10″ sep_color=»» border_size=»» icon=»» icon_circle=»» icon_circle_color=»» width=»» alignment=»center» class=»» id=»»/]
[/fusion_builder_column][fusion_builder_column type=»1_1″ background_position=»left top» background_color=»» border_size=»» border_color=»» border_style=»solid» spacing=»yes» background_image=»» background_repeat=»no-repeat» padding=»» margin_top=»0px» margin_bottom=»0px» class=»» id=»» animation_type=»» animation_speed=»0.3″ animation_direction=»left» hide_on_mobile=»no» center_content=»no» min_height=»none»][fusion_checklist size=»15px» icon=»arrow» iconcolor=»dark» circle=»no»]
- Una vez el scan acabado, un informe va abrirse.
[/fusion_checklist]
[fusion_separator style_type=»none» top_margin=»10″ bottom_margin=»10″ sep_color=»» border_size=»» icon=»» icon_circle=»» icon_circle_color=»» width=»» alignment=»center» class=»» id=»»/]
[fusion_imageframe style=»bottomshadow» lightbox=»yes» bordercolor=»#d1d1d1″ bordersize=»0px» stylecolor=»#ffffff» align=»»][/fusion_imageframe]
[fusion_separator style_type=»none» top_margin=»10″ bottom_margin=»10″ sep_color=»» border_size=»» icon=»» icon_circle=»» icon_circle_color=»» width=»» alignment=»center» class=»» id=»»/]
[/fusion_builder_column][fusion_builder_column type=»1_1″ background_position=»left top» background_color=»» border_size=»» border_color=»» border_style=»solid» spacing=»yes» background_image=»» background_repeat=»no-repeat» padding=»» margin_top=»0px» margin_bottom=»0px» class=»» id=»» animation_type=»» animation_speed=»0.3″ animation_direction=»left» hide_on_mobile=»no» center_content=»no» min_height=»none»][fusion_checklist size=»15px» icon=»arrow» iconcolor=»dark» circle=»no»]
- Copia y pegue el contenido de este informe sobre el foro o usted se encarga.
- Una copia del informe es depositada sobre su escritorio : UsbFix_Report.txt, el informe además es salvaguardado bajo : C:\UbsFix\Log\UsbFix [Scan 1] ****.txt
- Usted piensa ser infectado ? Le invitamos a crear un sujeto sobre el foro de desinfección de nuestro colaborador InfoSpyware.
Usted recibirá una ayuda gratuita, personalizada y profesional.
[/fusion_checklist]
[fusion_separator style_type=»shadow» top_margin=»40″ bottom_margin=»40″ sep_color=»» icon=»» width=»» class=»» id=»»/]
[/fusion_builder_column][fusion_builder_column type=»1_2″ last=»no» class=»» id=»»][fusion_separator style_type=»none» top_margin=»15″ bottom_margin=»15″ sep_color=»» icon=»» width=»» class=»» id=»»/][fusion_imageframe lightbox=»no» style_type=»none» bordercolor=»#d1d1d1″ bordersize=»0px» stylecolor=»#ffffff» align=»center» link=»» linktarget=»_self» animation_type=»0″ animation_direction=»» animation_speed=»0.1″ class=»» id=»»][/fusion_imageframe][/fusion_builder_column][fusion_builder_column type=»1_2″ last=»yes» class=»» id=»»][fusion_text]
Asistencia Gratuita
[/fusion_text][fusion_button link=»https://www.sosvirus.net/es/» color=»custom» size=»large» type=»shake» shape=»square» target=»_blank» title=»Assistance Gratuite» gradient_colors=»transparent|» gradient_hover_colors=»rgba(000,000,000,.05)|» accent_color=»#a0ce4e» accent_hover_color=»#96c346″ bevel_color=»» border_width=»2px» shadow=»no» icon=»fa-star» icon_position=»left» icon_divider=»yes» modal=»» animation_type=»0″ animation_direction=»up» animation_speed=»1″ alignment=»» class=»» id=»»]SOSVirus[/fusion_button][/fusion_builder_column][fusion_builder_column type=»1_1″ background_position=»left top» background_color=»» border_size=»» border_color=»» border_style=»solid» spacing=»yes» background_image=»» background_repeat=»no-repeat» padding=»» margin_top=»0px» margin_bottom=»0px» class=»» id=»» animation_type=»» animation_speed=»0.3″ animation_direction=»left» hide_on_mobile=»no» center_content=»no» min_height=»none»][fusion_separator style_type=»shadow» top_margin=»40″ bottom_margin=»40″ sep_color=»» icon=»» width=»» class=»» id=»»/][/fusion_builder_column][fusion_builder_column type=»1_2″ last=»no» class=»» id=»»][fusion_text]
Usted puede modificar el valor utilizando el slider
[/fusion_text][/fusion_builder_column][fusion_builder_column type=»1_2″ last=»yes» class=»» id=»»][fusion_title size=»3″ content_align=»left» style_type=»» sep_color=»» class=»» id=»»]Vota por este manual[/fusion_title][fusion_separator style_type=»none» top_margin=»20″ bottom_margin=»» sep_color=»» icon=»» width=»» class=»» id=»»/][fusion_text][ratings][/fusion_text][/fusion_builder_column]
[fusion_builder_column type=»1_1″ background_position=»left top» background_color=»» border_size=»» border_color=»» border_style=»solid» spacing=»yes» background_image=»» background_repeat=»no-repeat» padding=»» margin_top=»0px» margin_bottom=»0px» class=»» id=»» animation_type=»» animation_speed=»0.3″ animation_direction=»left» hide_on_mobile=»no» center_content=»no» min_height=»none»][fusion_separator style_type=»shadow» top_margin=»40″ bottom_margin=»40″ sep_color=»» icon=»» width=»» class=»» id=»»/]
[/fusion_builder_column][fusion_builder_column type=»1_1″ background_position=»left top» background_color=»» border_size=»» border_color=»» border_style=»solid» spacing=»yes» background_image=»» background_repeat=»no-repeat» padding=»» margin_top=»0px» margin_bottom=»0px» class=»» id=»» animation_type=»» animation_speed=»0.3″ animation_direction=»left» hide_on_mobile=»no» center_content=»no» min_height=»none»][fusion_title size=»4″]Aquí un ejemplo de informe completo que muestra la presencia de infección :[/fusion_title]
[fusion_separator style_type=»none» top_margin=»10″ bottom_margin=»10″ sep_color=»» icon=»» width=»» class=»» id=»»/]
############################## | UsbFix V 7.167 | [/fusion_builder_column][fusion_builder_column type=»1_1″ background_position=»left top» background_color=»» border_size=»» border_color=»» border_style=»solid» spacing=»yes» background_image=»» background_repeat=»no-repeat» padding=»» margin_top=»0px» margin_bottom=»0px» class=»» id=»» animation_type=»» animation_speed=»0.3″ animation_direction=»left» hide_on_mobile=»no» center_content=»no» min_height=»none»][Buscar]
Usuario: SosVirus (Administrador) # WIN-09IAK1HLCUV
Actualizado el 13/03/2014 por El Desaparecido – Team SosVirus
Comenzó a 17:06:22 | 14/03/2014
Sitio web : //www.usb-antivirus.com/es/
Changelog : https://www.usb-antivirus.com/maj/
Contacto : //www.usb-antivirus.com/es/contacto/
PC: Intel Corporation (440BX Desktop Reference Platform)
CPU: AMD FX(tm)-8150 Eight-Core Processor
RAM -> [Total : 2047 Mo| Free : 1441 Mo]
Bios: Phoenix Technologies LTD
Boot: Normal boot
OS: Microsoft Windows 7 Édition Intégrale (6.1.7600 64-Bit)
WB: Windows Internet Explorer : 8.0.7600.16385
SC: Security Center [Enabled]
WU: Windows Update [Enabled]
AS: Windows Defender [Enabled | (!) Outdated]
FW: Windows FireWall [Enabled]
C:\ (%systemdrive%) -> Disco fijo # 60 Gb (46 Mb libre(s) – 77%) [] # NTFS
D:\ -> CD-ROM
E:\ -> Disco extraíble # 15 Gb (15 Mb libre(s) – 99%) [UsbFix] # NTFS
################## | Procesos Activos |
C:\Windows\system32\csrss.exe (ID: 356 |ParentID: 348)
C:\Windows\system32\wininit.exe (ID: 408 |ParentID: 348)
C:\Windows\system32\csrss.exe (ID: 420 |ParentID: 400)
C:\Windows\system32\winlogon.exe (ID: 468 |ParentID: 400)
C:\Windows\system32\services.exe (ID: 496 |ParentID: 408)
C:\Windows\system32\lsass.exe (ID: 504 |ParentID: 408)
C:\Windows\system32\lsm.exe (ID: 512 |ParentID: 408)
C:\Windows\system32\svchost.exe (ID: 636 |ParentID: 496)
C:\Windows\system32\svchost.exe (ID: 708 |ParentID: 496)
C:\Windows\System32\svchost.exe (ID: 744 |ParentID: 496)
C:\Windows\System32\svchost.exe (ID: 860 |ParentID: 496)
C:\Windows\system32\svchost.exe (ID: 920 |ParentID: 496)
C:\Windows\system32\svchost.exe (ID: 360 |ParentID: 496)
C:\Windows\system32\svchost.exe (ID: 652 |ParentID: 496)
C:\Windows\System32\spoolsv.exe (ID: 1224 |ParentID: 496)
C:\Windows\system32\taskhost.exe (ID: 1256 |ParentID: 496)
C:\Windows\system32\svchost.exe (ID: 1280 |ParentID: 496)
C:\Program Files\VMware\VMware Tools\vmtoolsd.exe (ID: 1580 |ParentID: 496)
C:\Program Files\VMware\VMware Tools\TPAutoConnSvc.exe (ID: 1836 |ParentID: 496)
C:\Windows\system32\sppsvc.exe (ID: 1912 |ParentID: 496)
C:\Windows\system32\svchost.exe (ID: 1996 |ParentID: 496)
C:\Windows\system32\dllhost.exe (ID: 1124 |ParentID: 496)
C:\Program Files\VMware\VMware Tools\TPAutoConnect.exe (ID: 2052 |ParentID: 1836)
C:\Windows\system32\conhost.exe (ID: 2060 |ParentID: 420)
C:\Windows\System32\msdtc.exe (ID: 2148 |ParentID: 496)
C:\Windows\system32\Dwm.exe (ID: 2500 |ParentID: 860)
C:\Windows\Explorer.EXE (ID: 2512 |ParentID: 2492)
C:\Program Files\VMware\VMware Tools\vmtoolsd.exe (ID: 2608 |ParentID: 2512)
C:\Windows\system32\SearchIndexer.exe (ID: 2784 |ParentID: 496)
C:\Program Files\Windows Media Player\wmpnetwk.exe (ID: 2880 |ParentID: 496)
C:\Windows\system32\svchost.exe (ID: 3020 |ParentID: 496)
C:\Windows\System32\svchost.exe (ID: 2892 |ParentID: 496)
C:\Windows\system32\WUDFHost.exe (ID: 1148 |ParentID: 860)
C:\Windows\system32\wbem\wmiprvse.exe (ID: 1676 |ParentID: 636)
C:\Program Files (x86)\AutoIt3\SciTE\SciTE.exe (ID: 1908 |ParentID: 2512)
C:\Windows\system32\SearchProtocolHost.exe (ID: 2336 |ParentID: 2784)
C:\Windows\system32\SearchFilterHost.exe (ID: 2860 |ParentID: 2784)
C:\Windows\System32\wscript.exe (ID: 2464 |ParentID: 1008)
C:\Windows\System32\wscript.exe (ID: 1972 |ParentID: 2912)
################## | Regedit Run |
04 – HKCU\..\Run : [antaw4r4] C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-56814\atnxwa4.exe
04 – HKCU\..\Run : [atgtzheqpp] wscript.exe //B «C:\Users\SosVirus\AppData\Local\Temp\atgtzheqpp..vbs»
04 – HKCU\..\Run : [avhdhkrlzf] wscript.exe //B «C:\Users\SosVirus\AppData\Local\Temp\avhdhkrlzf..vbs»
04 – [64bit] HKLM\..\Run : [VMware User Process] «C:\Program Files\VMware\VMware Tools\vmtoolsd.exe» -n vmusr
04 – HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 – HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
04 – HKU\S-1-5-21-3646584570-386733232-1750847734-1000\..\Run : [antaw4r4] C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-56814\atnxwa4.exe
04 – HKU\S-1-5-21-3646584570-386733232-1750847734-1000\..\Run : [atgtzheqpp] wscript.exe //B «C:\Users\SosVirus\AppData\Local\Temp\atgtzheqpp..vbs»
04 – HKU\S-1-5-21-3646584570-386733232-1750847734-1000\..\Run : [avhdhkrlzf] wscript.exe //B «C:\Users\SosVirus\AppData\Local\Temp\avhdhkrlzf..vbs»
04 – HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 – HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
################## | Búsqueda genérica |
Encontrado ! C:\Users\SosVirus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\atgtzheqpp..vbs
Encontrado ! C:\Users\SosVirus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\avhdhkrlzf..vbs
Encontrado ! E:\atgtzheqpp..vbs
Encontrado ! E:\avhdhkrlzf..vbs
Encontrado ! C:\Users\SosVirus\AppData\Local\Temp\atgtzheqpp..vbs
Encontrado ! C:\Users\SosVirus\AppData\Local\Temp\avhdhkrlzf..vbs
Encontrado ! C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-56814\atnxwa4.exe
Encontrado ! E:\atgtzheqpp.lnk
Encontrado ! E:\Autorun.inf.lnk
Encontrado ! E:\avhdhkrlzf.lnk
Encontrado ! E:\System Volume Information.lnk
Encontrado ! E:\UsbFix V7.lnk
Encontrado ! C:\Recycler\S-1-5-21-0243556031-888888379-781863308-56814
################## | Registro |
Encontrado ! HKU\S-1-5-21-3646584570-386733232-1750847734-1000\Software\Microsoft\Windows\CurrentVersion\Run|antaw4r4
Encontrado ! HKCU\Software\Microsoft\Windows\CurrentVersion\Run|antaw4r4
Encontrado ! HKU\S-1-5-21-3646584570-386733232-1750847734-1000\Software\Microsoft\Windows\CurrentVersion\Run|atgtzheqpp
Encontrado ! HKCU\Software\Microsoft\Windows\CurrentVersion\Run|atgtzheqpp
Encontrado ! HKU\S-1-5-21-3646584570-386733232-1750847734-1000\Software\Microsoft\Windows\CurrentVersion\Run|avhdhkrlzf
Encontrado ! HKCU\Software\Microsoft\Windows\CurrentVersion\Run|avhdhkrlzf
################## | E.O.F | //www.usb-antivirus.com/es/ – https://www.sosvirus.net |
[fusion_separator style_type=»shadow» top_margin=»40″ bottom_margin=»40″ sep_color=»» icon=»» width=»» class=»» id=»»/]
[fusion_separator style_type=»none» top_margin=»40″ bottom_margin=»» sep_color=»» icon=»» width=»» class=»» id=»»/][/fusion_builder_column][/fusion_builder_row][/fusion_builder_container]
https://www.virustotal.com/en/file/0f986b8ff2f211aa12fc54cc2954e1ab35da879cd7b057f37cfce2af9758b097/analysis/1432326616/
mmmm?
Hola Oscar,
Es un falso positivo, he contactado este «antivirus» pero no responde …
Entonces, no puedo hacer nada .. :(
Saludos