# ----------------------------------------------------

# UsbFix Antivirus Free

# ----------------------------------------------------
# Version : 11.010
# Database : 2019.05.21
# Contact : https://www.usb-antivirus.com/contact
# ----------------------------------------------------
# Scan type : Full
# User : Mohamed (Administrator)
# Device : MOHAMED-PC
# Started : 30/06/2019 13:57:05
# ----------------------------------------------------

------------ | Analyzed disks |

C:\ NTFS (24GB/149GB) [Fixed]

D:\ NTFS (94GB/149GB) [Fixed]

------------ | Infected elements |

Deleted! C:\Users\Mohamed\AppData\Local\Temp\5A75.tmp.exe

------------ | Run |

F2 - HKLM\..\Winlogon : [Shell] explorer.exe

F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
04 - HKCU\..\Run : [GoogleChromeAutoLaunch_AB1F151C5559B7EAF179528929D24797]
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-
window /prefetch:5
04 - HKCU\..\Run : [OneDrive]
"C:\Users\Mohamed\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
04 - HKCU\..\Run : [IDMan] C:\Program Files (x86)\Internet Download
Manager\IDMan.exe /onboot
04 - HKLM\..\Run : [Adobe ARM] "C:\Program Files (x86)\Common
Files\Adobe\ARM\1.0\AdobeARM.exe"
04 - HKLM\..\Run : [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate
Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
04 - HKLM\..\Run : [StartCCC] "C:\Program Files (x86)\ATI
Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
04 - [x64] HKLM\..\Run : [SecurityHealth] %ProgramFiles%\Windows
Defender\MSASCuiL.exe
04 - HKU\S-1-5-19\..\Run : [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe
/thfirstsetup
04 - HKU\S-1-5-20\..\Run : [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe
/thfirstsetup
04 - HKU\S-1-5-21-1073637359-1487714009-3904313588-1000\..\Run :
[GoogleChromeAutoLaunch_AB1F151C5559B7EAF179528929D24797] "C:\Program Files
(x86)\Google\Chrome\Application\chrome.exe" --no-startup-window /prefetch:5
04 - HKU\S-1-5-21-1073637359-1487714009-3904313588-1000\..\Run : [OneDrive]
"C:\Users\Mohamed\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
04 - HKU\S-1-5-21-1073637359-1487714009-3904313588-1000\..\Run : [IDMan] C:\Program
Files (x86)\Internet Download Manager\IDMan.exe /onboot
04GS - Avast Cleanup Premium.lnk : C:\Program Files (x86)\AVAST Software\Avast
Cleanup\TuneupUI.exe

------------ | Tasks |

Task - Avast TUNEUP Update --> C:\Program Files (x86)\AVAST Software\Avast

Cleanup\TUNEUpdate.exe
Task - AvastUpdateTaskMachineCore --> C:\Program Files (x86)\AVAST
Software\Browser\Update\AvastBrowserUpdate.exe /c
Task - AvastUpdateTaskMachineUA --> C:\Program Files (x86)\AVAST
Software\Browser\Update\AvastBrowserUpdate.exe /ua /installsource scheduler
Task - Driver Booster SkipUAC (Mohamed) --> C:\Program Files (x86)\IObit\Driver
Booster\5.3.0\DriverBooster.exe /skipuac
Task - GoogleUpdateTaskMachineCore --> C:\Program Files
(x86)\Google\Update\GoogleUpdate.exe /c
Task - GoogleUpdateTaskMachineUA --> C:\Program Files
(x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
Task - OneDrive Standalone Update Task-S-1-5-21-1073637359-1487714009-3904313588-
1000 --> %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
Task - Opera scheduled Autoupdate 1549136859 -->
C:\Users\Mohamed\AppData\Local\Programs\Opera\launcher.exe --scheduledautoupdate $
(Arg0)
Task - User_Feed_Synchronization-{5A611C49-D196-4FF6-AD56-FF014D105585} -->
C:\WINDOWS\system32\msfeedssync.exe sync

------------ | C:\ %SystemDrive% - Fixed drive (NTFS) |

[30/06/2019 - 13:51:13 | ASH | 2835172 Ko] - hiberfil.sys

[30/06/2019 - 13:51:14 | ASH | 3801088 Ko] - pagefile.sys
[30/06/2019 - 13:51:14 | ASH | 262144 Ko] - swapfile.sys
[13/05/2019 - 18:10:00 | AH | 0 Ko] - $WINRE_BACKUP_PARTITION.MARKER
[24/06/2019 - 12:06:20 | A | 5415 Ko] - aow_drv.log
[29/03/2019 - 09:40:49 | RASHD] - autorun.inf
[07/09/2018 - 13:14:24 | SHD] - $Recycle.Bin
[15/05/2019 - 17:33:21 | HD] - $WINDOWS.~BT
[14/07/2009 - 06:08:56 | SHD] - Documents and Settings
[12/04/2018 - 00:38:20 | D] - PerfLogs
[06/09/2018 - 21:21:28 | D] - AMD
[06/09/2018 - 21:32:28 | RD] - Users
[07/09/2018 - 05:01:48 | D] - inetpub
[09/09/2018 - 17:07:48 | D] - ESD
[22/12/2018 - 17:15:32 | RHD] - MSOCache
[28/12/2018 - 16:56:51 | D] - Temp
[13/05/2019 - 18:09:26 | SHD] - Recovery
[26/05/2019 - 14:07:31 | HD] - ProgramData
[14/06/2019 - 19:14:29 | D] - Windows
[21/06/2019 - 13:08:20 | RD] - Program Files
[24/06/2019 - 12:09:30 | RD] - Program Files (x86)

------------ | D:\ - Fixed drive (NTFS) |

[02/03/2019 - 22:33:38 | A | 2048 Ko] - Wifislax.vdi

[13/04/2018 - 19:12:58 | A | 3420060 Ko] - FaresCD.Com.Micanica.Cars.rar
[01/12/2017 - 21:00:07 | A | 130 Ko] - DV lottery 2019.pdf
[09/02/2015 - 13:19:14 | A | 9732 Ko] - ZA1_Ö_MS_A3.mp3
[09/02/2015 - 13:19:16 | A | 9765 Ko] - ZA1_Ö_MS_A2.mp3
[09/02/2015 - 13:19:18 | A | 8511 Ko] - ZA1_Ö_MS_A1.mp3
[29/03/2019 - 09:40:50 | RASHD] - autorun.inf
[10/04/2017 - 19:04:50 | A | 2355 Ko] - BitTorrent7.10.0-b-43581.exe
[22/07/2016 - 16:51:47 | D] - FaresCD.Com.Micanica.Cars
[08/06/2018 - 02:43:46 | SHD] - $RECYCLE.BIN
[12/04/2018 - 20:53:37 | D] - Moher
[08/06/2018 - 15:00:51 | D] - a1
[08/06/2018 - 15:00:53 | D] - A1 Horen
[08/06/2018 - 15:00:55 | D] - EXERCICES SI
[08/06/2018 - 15:00:59 | D] - Privat
[08/06/2018 - 15:01:01 | D] - EXERCICES EXCEL
[08/06/2018 - 15:01:07 | D] - PDF
[24/06/2018 - 01:05:29 | D] - ikram
[08/09/2018 - 14:49:44 | D] - e7249ed6d55758e6f2f46bb4297fb855
[24/10/2018 - 21:33:20 | D] - Mariage As
[24/10/2018 - 21:33:24 | D] - 100NCD60
[28/12/2018 - 17:18:25 | D] - Temp
[09/01/2019 - 00:56:09 | D] - ISO
[24/06/2019 - 12:06:45 | D] - Program Files

Infected elements : 1
Analyzed elements : 64510 in 00h 00m 55s

# UsbFix-Report-01.txt [5909B]

------------ | E.O.F |