# ----------------------------------------------------

# UsbFix Antivirus Free

# ----------------------------------------------------
# Version : 11.016
# Database : 2019.05.21
# Contact : https://www.usb-antivirus.com/contact
# ----------------------------------------------------
# Scan type : USB
# User : Valdeir (Administrator)
# Device : DESKTOP-SDUS3V4
# Started : 28/05/2019 23:37:13
# ----------------------------------------------------

------------ | Analyzed disks |

D:\ FAT32 (2GB/7GB) [Removable]

------------ | Infected elements |

Restored! D:\
Deleted! D:\Removable Drive (8GB).lnk

------------ | Run |

F2 - HKLM\..\Winlogon : [Shell] explorer.exe

F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
04 - HKCU\..\Run : [OneDrive]
"C:\Users\Valdeir\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
04 - HKCU\..\Run : [AvastBrowserAutoLaunch_A8FA91F00264C3129A4E456F86F196AC]
"C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe"
--check-run=src=logon --auto-launch-at-startup --profile-directory="Default"
--restore-last-session
04 - [x64] HKLM\..\Run : [SecurityHealth] %windir
%\system32\SecurityHealthSystray.exe
04 - [x64] HKLM\..\Run : [IgfxTray] "C:\Windows\system32\igfxtray.exe"
04 - [x64] HKLM\..\Run : [HotKeysCmds] "C:\Windows\system32\hkcmd.exe"
04 - [x64] HKLM\..\Run : [Persistence] "C:\Windows\system32\igfxpers.exe"
04 - [x64] HKLM\..\Run : [AvastUI.exe] "C:\Program Files\AVAST
Software\Avast\AvLaunch.exe" /gui
04 - [x64] HKLM\..\Run : [Apoint] C:\Program Files\DellTPad\Apoint.exe
04 - HKU\S-1-5-19\..\Run : [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe
/thfirstsetup
04 - HKU\S-1-5-20\..\Run : [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe
/thfirstsetup
04 - HKU\S-1-5-21-1033668908-1499805776-883163155-1002\..\Run : [OneDrive]
"C:\Users\Valdeir\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
04 - HKU\S-1-5-21-1033668908-1499805776-883163155-1002\..\Run :
[AvastBrowserAutoLaunch_A8FA91F00264C3129A4E456F86F196AC] "C:\Program Files
(x86)\AVAST Software\Browser\Application\AvastBrowser.exe" --check-run=src=logon
--auto-launch-at-startup --profile-directory="Default" --restore-last-session
04GS - MEGAsync.lnk : C:\Users\Valdeir\AppData\Local\MEGAsync\MEGAsync.exe

------------ | Tasks |

Task - Avast Emergency Update --> C:\Program Files\AVAST

Software\Avast\AvEmUpdate.exe
Task - Avast Secure Browser Heartbeat Task (Hourly) --> C:\Program Files
(x86)\AVAST Software\Browser\Application\AvastBrowser.exe --type=heartbeat --hourly
Task - Avast Secure Browser Heartbeat Task (Logon) --> C:\Program Files (x86)\AVAST
Software\Browser\Application\AvastBrowser.exe --type=heartbeat --logon
Task - AvastUpdateTaskMachineCore --> C:\Program Files (x86)\AVAST
Software\Browser\Update\AvastBrowserUpdate.exe /c
Task - AvastUpdateTaskMachineUA --> C:\Program Files (x86)\AVAST
Software\Browser\Update\AvastBrowserUpdate.exe /ua /installsource scheduler
Task - GoogleUpdateTaskMachineCore --> C:\Program Files
(x86)\Google\Update\GoogleUpdate.exe /c
Task - GoogleUpdateTaskMachineUA --> C:\Program Files
(x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
Task - OneDrive Standalone Update Task-S-1-5-21-1033668908-1499805776-883163155-
1002 --> %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
Task - OneDrive Standalone Update Task-S-1-5-21-1033668908-1499805776-883163155-500
--> %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
Task - OneDrive Standalone Update Task-S-1-5-21-2670878923-1089209371-1036321788-
500 --> %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
Task - Online_KMS_Activation_Script-Renewal --> %windir
%\Online_KMS_Activation_Script\Online_KMS_Activation_Script-Renewal.cmd

------------ | D:\ - Removable drive (FAT32) |

[28/05/2019 - 21:53:42 | SHD] - FOUND.000

[21/05/2019 - 00:30:34 | D] -

Infected elements : 2
Analyzed elements : 47706 in 00h 00m 07s

# UsbFix-Report-01.txt [4082B]

------------ | E.O.F |