View original (French)

Folder turned into shortcut by a virus

kal31 -  
 lalalasong -
Hello,

Following a virus infection, my folders were turned into shortcuts. After cleaning the virus, they remained unchanged. How do I convert these shortcuts back into folders (Windows XP)?

5 answers

  1. krissing
     
    Hello
    I have the same problem currently but I can access my folders without issue: open the computer if you are on Windows XP or "My Computer" if you are on Vista or 7, then type in the address bar the letter of your HDD or USB drive (for example: if my USB key is F: in My Computer then in the address bar I simply enter f:) and press Enter on the keyboard. This way your USB drive will open and display your folders and files. To access a folder, you need to enter in the address bar the letter of your USB drive followed by the folder name (for example, I have a folder named "success" on my USB key which has the letter. I enter in the address bar "F:\success" and press Enter on the keyboard) to access a file on my USB drive, I click on start-run and I enter the drive letter+:+\+folder name.
    14
    1. beranger du camer
       
      Very cool and good tip, bravo krissing!
      0
    2. capidji
       
      thank you krssing
      0
    3. Jad
       
      But where is the address bar!! ??
      I have Vista!
      0
    4. ELMEHDI
       
      I have the same problem, thank you so much, I swear, I thank you sooooooo much.
      0
    5. memepblm
       
      Thank you, it works. I tried UsbFix, it finds the infected files but doesn’t solve the problem!!
      Thank you, your method is better ;)
      0
  2. youssef rjaibia Posted messages 3311 Status Member 324
     
    Good evening

    And when you right-click on the shortcuts and properties, is the size in kilobytes the original size or that of a shortcut of a few kilobytes?
    0
  3. fdupas67 Posted messages 2 Status Member
     
    There is a temporary solution that involves typing the following commands in the Windows command prompt. To open it as an administrator, simply type "cmd" in the search box, right-click on it, and select "Run as administrator."
    Then in the command prompt, you just need to write the following:

    attrib -h -r -s /s /d G:*.*
    del G:*.lnk
    del G:autorun.inf

    G represents the letter of your USB drive or external hard drive.

    Unfortunately, this is only a temporary fix, as if you restart your computer and try to open your USB drive again, your folders will again be transformed into shortcuts.

    To prevent this from happening again, you need to search your C drive for the exe file that is causing these shortcuts. If you find an exe file like service199.exe, I recommend checking it on the website www.virustotal.com

    There is a good chance it will indicate that it is a Trojan.
    In that case, close it in your processes and delete it permanently. You should then no longer have issues with folders turning into shortcuts.

    Good luck! ;o)
    0
  4. g3n-h@ckm@n
     
    I tried UsbFix, it finds the infected files but it doesn't fix the problem!!

    Of course it does, it's the research that has been done....
    --
    ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Pre_Scan_Concept ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
    0
  6. lalalasong
     
    ############################## | UsbFix V 7.150 | [Search]

    User: claudine (Administrator) # CLAUDINE-PC
    Updated on 08/11/2013 by El Desaparecido - Team SosVirus
    Launched at 17:50:54 | 17/11/2013

    Website: http://www.usbfix.net
    Forum: http://www.sosvirus.net/
    Upload Malware: http://www.sosvirus.net/upload_malware.php
    Contact: http://www.usbfix.net/contact/

    PC: ASUSTeK Computer Inc. (K43SJ)
    CPU: Intel(R) Core(TM) i3-2330M CPU @ 2.20GHz
    RAM -> [Total: 4073 | Free: 2062]
    Bios: American Megatrends Inc.
    Boot: Normal boot

    OS: Microsoft Windows 7 Home Premium Edition (6.1.7601 64-Bit) Service Pack 1
    WB: Windows Internet Explorer: 10.0.9200.16736

    SC: Security Center Service [Enabled]
    WU: Windows Update Service [Enabled]
    AV: avast! Antivirus [Enabled | Updated]
    AS: Windows Defender: 6.1.7600.16385 (win7_rtm.090713-1255)
    FW: Windows FireWall Service [Enabled]

    C:\ (%systemdrive%) -> Fixed disk # 306 Go (236 Go free - 77%) [OS] # NTFS
    D:\ -> Fixed disk # 368 Go (185 Go free - 50%) [DATA] # NTFS
    E:\ -> CD-ROM
    F:\ -> Removable disk # 2 Go (844 Mo free - 44%) [] # FAT

    ################## | Active Processes |

    C:\Windows\system32\csrss.exe (ID: 508 |ParentID: 500)
    C:\Windows\system32\wininit.exe (ID: 588 |ParentID: 500)
    C:\Windows\system32\csrss.exe (ID: 616 |ParentID: 600)
    C:\Windows\system32\services.exe (ID: 656 |ParentID: 588)
    C:\Windows\system32\lsass.exe (ID: 676 |ParentID: 588)
    C:\Windows\system32\lsm.exe (ID: 684 |ParentID: 588)
    C:\Windows\system32\winlogon.exe (ID: 736 |ParentID: 600)
    C:\Windows\system32\svchost.exe (ID: 824 |ParentID: 656)
    C:\Windows\system32\nvvsvc.exe (ID: 900 |ParentID: 656)
    C:\Windows\system32\svchost.exe (ID: 940 |ParentID: 656)
    C:\Windows\System32\svchost.exe (ID: 128 |ParentID: 656)
    C:\Windows\System32\svchost.exe (ID: 516 |ParentID: 656)
    C:\Windows\system32\svchost.exe (ID: 492 |ParentID: 656)
    C:\Windows\system32\svchost.exe (ID: 776 |ParentID: 656)
    C:\Windows\system32\svchost.exe (ID: 1184 |ParentID: 656)
    C:\Windows\system32\FBAgent.exe (ID: 1292 |ParentID: 656)
    C:\Windows\system32\WLANExt.exe (ID: 1316 |ParentID: 516)
    C:\Windows\system32\conhost.exe (ID: 1328 |ParentID: 508)
    C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe (ID: 1352 |ParentID: 656)
    C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (ID: 1372 |ParentID: 656)
    C:\Program Files\AVAST Software\Avast\AvastSvc.exe (ID: 1396 |ParentID: 656)
    C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe (ID: 1496 |ParentID: 900)
    C:\Windows\system32\nvvsvc.exe (ID: 1508 |ParentID: 900)
    C:\Windows\System32\spoolsv.exe (ID: 1752 |ParentID: 656)
    C:\Windows\system32\svchost.exe (ID: 1784 |ParentID: 656)
    C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe (ID: 1944 |ParentID: 656)
    C:\Program Files\Trend Micro\UniClient\UiFrmWrk\uiWatchDog.exe (ID: 1032 |ParentID: 1944)
    C:\Windows\system32\conhost.exe (ID: 1068 |ParentID: 508)
    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (ID: 1124 |ParentID: 656)
    C:\Program Files\Trend Micro\AMSP\coreFrameworkHost.exe (ID: 1332 |ParentID: 1944)
    C:\Windows\system32\conhost.exe (ID: 1608 |ParentID: 508)
    C:\Windows\system32\taskhost.exe (ID: 2508 |ParentID: 656)
    C:\Windows\system32\taskeng.exe (ID: 2540 |ParentID: 776)
    C:\Windows\system32\taskeng.exe (ID: 2604 |ParentID: 776)
    C:\Windows\system32\Dwm.exe (ID: 2784 |ParentID: 516)
    C:\Windows\Explorer.EXE (ID: 2820 |ParentID: 2756)
    C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (ID: 2900 |ParentID: 2540)
    C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe (ID: 2920 |ParentID: 2540)
    C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ID: 2928 |ParentID: 2604)
    C:\Program Files\P4G\BatteryLife.exe (ID: 2936 |ParentID: 2540)
    C:\Program Files\Intel\WiFi\bin\EvtEng.exe (ID: 2680 |ParentID: 656)
    C:\Windows\SysWOW64\ACEngSvr.exe (ID: 2548 |ParentID: 824)
    C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (ID: 1688 |ParentID: 656)
    C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (ID: 3092 |ParentID: 656)
    C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (ID: 3388 |ParentID: 656)
    C:\Windows\AsScrPro.exe (ID: 3424 |ParentID: 1292)
    C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (ID: 3440 |ParentID: 656)
    C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (ID: 3504 |ParentID: 1292)
    C:\Windows\system32\svchost.exe (ID: 3592 |ParentID: 656)
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (ID: 3624 |ParentID: 656)
    C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (ID: 3704 |ParentID: 656)
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (ID: 3796 |ParentID: 3624)
    C:\Windows\system32\wbem\unsecapp.exe (ID: 3920 |ParentID: 824)
    C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (ID: 3980 |ParentID: 656)
    C:\Windows\system32\svchost.exe (ID: 4212 |ParentID: 656)
    C:\Windows\system32\svchost.exe (ID: 4360 |ParentID: 656)
    C:\Windows\system32\wbem\wmiprvse.exe (ID: 4556 |ParentID: 824)
    C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (ID: 2344 |ParentID: 1292)
    C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (ID: 4872 |ParentID: 2820)
    C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (ID: 1048 |ParentID: 656)
    C:\Program Files\Elantech\ETDCtrl.exe (ID: 4472 |ParentID: 2820)
    C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (ID: 3500 |ParentID: 2820)
    C:\Users\claudine\AppData\Local\Google\Update\1.3.21.165\GoogleCrashHandler.exe (ID: 3496 |ParentID: 3540)
    C:\Users\claudine\AppData\Local\Google\Update\1.3.21.165\GoogleCrashHandler64.exe (ID: 4132 |ParentID: 3540)
    C:\Windows\system32\wbem\unsecapp.exe (ID: 4500 |ParentID: 824)
    C:\Program Files\Trend Micro\UniClient\UiFrmWrk\uiSeAgnt.exe (ID: 668 |ParentID: 1032)
    C:\Users\claudine\AppData\Roaming\cacaoweb\cacaoweb.exe (ID: 4904 |ParentID: 2820)
    C:\Program Files\Elantech\ETDCtrlHelper.exe (ID: 4144 |ParentID: 4472)
    C:\Windows\system32\SearchIndexer.exe (ID: 3552 |ParentID: 656)
    C:\Program Files\Windows Media Player\wmpnetwk.exe (ID: 5276 |ParentID: 656)
    C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe (ID: 5540 |ParentID: 2352)
    C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ID: 5704 |ParentID: 2352)
    C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ID: 5828 |ParentID: 2352)
    C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe (ID: 5836 |ParentID: 5500)
    C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe (ID: 5932 |ParentID: 2352)
    C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin (ID: 6024 |ParentID: 5836)
    C:\Program Files\AVAST Software\Avast\AvastUI.exe (ID: 6088 |ParentID: 2352)
    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (ID: 6132 |ParentID: 2352)
    C:\Windows\System32\svchost.exe (ID: 5240 |ParentID: 656)
    C:\Windows\system32\DllHost.exe (ID: 5384 |ParentID: 824)
    C:\Windows\System32\WUDFHost.exe (ID: 3544 |ParentID: 516)
    C:\Windows\system32\msiexec.exe (ID: 7136 |ParentID: 656)
    C:\Users\claudine\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 5624 |ParentID: 2820)
    C:\Users\claudine\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 6828 |ParentID: 5624)
    C:\Users\claudine\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 6616 |ParentID: 5624)
    C:\Users\claudine\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 7076 |ParentID: 5624)
    C:\Users\claudine\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 7084 |ParentID: 5624)
    C:\Users\claudine\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 712 |ParentID: 5624)
    C:\Windows\system32\taskeng.exe (ID: 6920 |ParentID: 776)
    C:\Users\claudine\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 5800 |ParentID: 5624)
    C:\Users\claudine\AppData\Local\Google\Chrome\Application\chrome.exe (ID: 2892 |ParentID: 5624)
    C:\Windows\system32\SearchProtocolHost.exe (ID: 5992 |ParentID: 3552)
    C:\Windows\system32\SearchFilterHost.exe (ID: 6440 |ParentID: 3552)
    C:\UsbFix\Go.exe (ID: 5320 |ParentID: 4388)
    C:\Windows\system32\wbem\wmiprvse.exe (ID: 4676 |ParentID: 824)

    ################## | Regedit Run |

    04 - HKLM\SOFTWARE | Run: [Nuance PDF Reader-reminder] - "C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe" -r "C:\ProgramData\Nuance\PDF Reader\Ereg\Ereg.ini"
    04 - HKLM\SOFTWARE | Run: [ASUSPRP] - "C:\Program Files (x86)\ASUS\APRP\APRP.EXE"
    04 - HKLM\SOFTWARE | Run: [ASUSWebStorage] - C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe /S
    04 - HKLM\SOFTWARE | Run: [SonicMasterTray] - C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe
    04 - HKLM\SOFTWARE | Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
    04 - HKLM\SOFTWARE | Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
    04 - HKLM\SOFTWARE | Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
    04 - HKLM\SOFTWARE | Run: [Wireless Console 3] - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
    04 - HKLM\SOFTWARE | Run: [UpdateLBPShortCut] - "C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
    04 - HKLM\SOFTWARE | Run: [UpdateP2GoShortCut] - "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
    04 - HKLM\SOFTWARE | Run: [avast] - "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
    04 - HKLM\SOFTWARE | Run: [SunJavaUpdateSched] - "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
    04 - HKLM\SOFTWARE | Run: [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    04 - HKLM\SOFTWARE | Run: [tuto4pc_fr_33] -
    04 - HKLM\SOFTWARE\wow6432Node | Run: [Nuance PDF Reader-reminder] - "C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe" -r "C:\ProgramData\Nuance\PDF Reader\Ereg\Ereg.ini"
    04 - HKLM\SOFTWARE\wow6432Node | Run: [ASUSPRP] - "C:\Program Files (x86)\ASUS\APRP\APRP.EXE"
    04 - HKLM\SOFTWARE\wow6432Node | Run: [ASUSWebStorage] - C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe /S
    04 - HKLM\SOFTWARE\wow6432Node | Run: [SonicMasterTray] - C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe
    04 - HKLM\SOFTWARE\wow6432Node | Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
    04 - HKLM\SOFTWARE\wow6432Node | Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
    04 - HKLM\SOFTWARE\wow6432Node | Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
    04 - HKLM\SOFTWARE\wow6432Node | Run: [Wireless Console 3] - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
    04 - HKLM\SOFTWARE\wow6432Node | Run: [UpdateLBPShortCut] - "C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
    04 - HKLM\SOFTWARE\wow6432Node | Run: [UpdateP2GoShortCut] - "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
    04 - HKLM\SOFTWARE\wow6432Node | Run: [avast] - "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
    04 - HKLM\SOFTWARE\wow6432Node | Run: [SunJavaUpdateSched] - "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
    04 - HKLM\SOFTWARE\wow6432Node | Run: [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    04 - HKLM\SOFTWARE\wow6432Node | Run: [tuto4pc_fr_33] -
    04 - HKLM\SOFTWARE | RunOnce: [] -
    04 - HKLM\SOFTWARE\wow6432Node | RunOnce: [] -
    04 - HKU\S-1-5-19\SOFTWARE | Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
    04 - HKU\S-1-5-20\SOFTWARE | Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
    04 - HKU\S-1-5-21-1815064778-3913500589-2222728630-1000\SOFTWARE | Run: [Google Update] - "C:\Users\claudine\AppData\Local\Google\Update\GoogleUpdate.exe" /c
    04 - HKU\S-1-5-21-1815064778-3913500589-2222728630-1000\SOFTWARE | Run: [cacaoweb] - "C:\Users\claudine\AppData\Roaming\cacaoweb\cacaoweb.exe" -noplayer
    04 - HKU\S-1-5-19\SOFTWARE | RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe
    04 - HKU\S-1-5-20\SOFTWARE | RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe

    ################## | Generic Search |

    Present! F:\_disk_id.lnk
    Present! F:\PapI.lnk
    Present! F:\MessePersMair2012.lnk
    Present! F:\reportingmai2012.lnk
    Present! F:\BOOTEX.lnk
    Present! F:\accuseReception (1).lnk
    Present! F:\JésusMisé.lnk
    Present! F:\~WRL0780.lnk
    Present! F:\listepastomjl.lnk
    Present! F:\CRChihab.lnk
    Present! F:\Invitation de prière Gerard_Ruvunabagabo.lnk
    Present! F:\Note d.lnk
    Present! F:\planactivités2013.lnk
    Present! F:\carnetchantsJésusMisé.lnk
    Present! F:\Messeu23juin2012%20(1)[1].lnk
    Present! F:\PLANNING ETP 2012-2013.lnk
    Present! F:\abecedaire2.lnk
    Present! F:\Prise en charge des addictions.lnk
    Present! F:\ClasseurCAMP.lnk
    Present! F:\Compte rendu Claude.lnk
    Present! F:\PROJET PERSONNALISE Marwin.lnk
    Present! F:\Etre Chrétien.lnk
    Present! F:\CR Réunion Mandela jeudi 27 septembre 2012.lnk
    Present! F:\Mandela sem46.lnk
    Present! F:\PROJET%20PERSONNALISE%20Jason[1].lnk
    Present! F:\Incident entre les jeunes El Moktar CHIHAB et Marvin ADJIWANOU.lnk
    Present! F:\Incident entre les jeunes El Moktar CHIHAB et Marvin ADJIWANOU (2).lnk
    Present! F:\Compte Rendu de la Synthèse du jeune Moussa COULIBALY.lnk
    Present! F:\Compte Rendu de la Synthèse du jeune Moussa DRAME.lnk
    Present! F:\Mandela sem47.lnk
    Present! F:\Compte Rendu de la Synthèse du jeune Moktar.lnk
    Present! F:\Compte Rendu Marvin.lnk
    Present! F:\CR Claude10déc.lnk
    Present! F:\Messe du 29 décembre 2012.lnk
    Present! F:\06-081_joyeux_Noel.lnk
    Present! F:\CRMOKTAR10.lnk
    Present! F:\CR du jeune Moussa DRAME.lnk
    Present! F:\sortieMandela.lnk
    Present! F:\sortieMandela[1].lnk
    Present! F:\Messe du Samedi 10 Août 2013.lnk
    Present! F:\Jubilé Sr Valérie.lnk
    Present! F:\Note d'incidentAndy.lnk
    Present! F:\Devis 020513[1].lnk
    Present! F:\Impots2012.lnk
    Present! F:\Note incident concernant Claude Alves.lnk
    Present! F:\Contrat d'assurance.lnk
    Present! F:\CRCOULIBALY.lnk
    Present! F:\Formulaire Demande Carte Familles Nombreuses.lnk
    Present! F:\FOUND.000.lnk
    Present! F:\contenuH.lnk
    Present! F:\Photos contrat d'assurance.lnk
    Present! F:\~WRL4087.lnk
    Present! F:\messe%20du%2014%2009%202013[1].lnk
    Present! F:\PLANNIG VACANCES mANDELA NOEL 112.lnk
    Present! F:\carnet de chants23juin.lnk
    Present! F:\trame faxe.lnk
    Present! F:\ATJMV.lnk
    Present! F:\.lnk
    Present! F:\taxefoncière2013.lnk

    ################## | Registry |

    ################## | Vaccine |

    C:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
    D:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)

    ################## | E.O.F | http://www.usbfix.net - http://www.sosvirus.net |
    0