# ----------------------------------------------------

# UsbFix Antivirus Free

# ----------------------------------------------------
# Version : 11.016
# Database :
# Contact : https://www.usb-antivirus.com/contact
# ----------------------------------------------------
# Scan type : USB
# User : Windows (Administrator)
# Device : WINDOWS-PC
# Started : 28/07/2019 23:40:52
# ----------------------------------------------------

------------ | Analyzed disks |

G:\ FAT32 (7GB/7GB) [Removable]

------------ | Infected elements |

Restored! G:\IMPRIMIR
Restored! G:\Manuel.doc
Restored! G:\netflix-4.16-200217-release.apk
Restored! G:\Savanna Oliveira Passarela.pdf
Deleted! HKCU\Software\Microsoft\Windows\CurrentVersion\Run|SysinfY2X
Deleted! G:\IMPRIMIR.lnk
Deleted! G:\Manuel.doc
Deleted! G:\netflix-4.16-200217-release.apk.lnk
Deleted! G:\Savanna Oliveira Passarela.pdf.lnk

------------ | Run |

F2 - HKLM\..\Winlogon : [Shell] explorer.exe

F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - HKLM\..\Winlogon : [Userinit] userinit.exe
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
04 - HKCU\..\Run : [transactionservicesmain]
C:\Users\Windows\Documents\TransactionServices Inc\transactionservices.exe.lnk
04 - HKCU\..\Run : [GoogleContactSync] "C:\Program Files (x86)\GO Contact Sync
Mod\GOContactSync.exe"
04 - HKCU\..\Run : [GoogleDriveSync] "C:\Program
Files\Google\Drive\googledrivesync.exe" /autostart
04 - HKCU\..\Run : [CallCenter JustPhone] C:\Program Files
(x86)\JustPhone\CallCenter\CallCenter.exe
04 - HKLM\..\Run : [SunJavaUpdateSched] "C:\Program Files (x86)\Common
Files\Java\Java Update\jusched.exe"
04 - HKLM\..\Run : [Wondershare Helper Compact.exe] C:\Program Files (x86)\Common
Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
04 - [x64] HKLM\..\Run : [IgfxTray] C:\Windows\system32\igfxtray.exe
04 - [x64] HKLM\..\Run : [HotKeysCmds] C:\Windows\system32\hkcmd.exe
04 - [x64] HKLM\..\Run : [Persistence] C:\Windows\system32\igfxpers.exe
04 - [x64] HKLM\..\Run : [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common
Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
04 - [x64] HKLM\..\Run : [Wondershare Helper Compact.exe] C:\Program Files\Common
Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
04 - [x64] HKLM\..\Run : [AvastUI.exe] "C:\Program Files\AVAST
Software\Avast\AvLaunch.exe" /gui
04 - [x64] HKLM\..\Run : [BTMTrayAgent] rundll32.exe "C:\Program Files
(x86)\Intel\Bluetooth\btmshell.dll",TrayApp
04 - HKU\S-1-5-19\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe
/autoRun
04 - HKU\S-1-5-20\..\Run : [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe
/autoRun
04 - HKU\S-1-5-21-1070285351-1715356266-2875392469-1000\..\Run :
[transactionservicesmain] C:\Users\Windows\Documents\TransactionServices
Inc\transactionservices.exe.lnk
04 - HKU\S-1-5-21-1070285351-1715356266-2875392469-1000\..\Run :
[GoogleContactSync] "C:\Program Files (x86)\GO Contact Sync Mod\GOContactSync.exe"
04 - HKU\S-1-5-21-1070285351-1715356266-2875392469-1000\..\Run : [GoogleDriveSync]
"C:\Program Files\Google\Drive\googledrivesync.exe" /autostart
04 - HKU\S-1-5-21-1070285351-1715356266-2875392469-1000\..\Run : [CallCenter
JustPhone] C:\Program Files (x86)\JustPhone\CallCenter\CallCenter.exe
04 - HKU\S-1-5-19\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04 - HKU\S-1-5-20\..\RunOnce : [mctadmin] C:\Windows\System32\mctadmin.exe
04GS - vhwdhwsu.lnk : C:\Windows\System32\cmd.exe

------------ | Tasks |

Task - Adobe Acrobat Update Task --> C:\Program Files (x86)\Common

Files\Adobe\ARM\1.0\AdobeARM.exe
Task - AutoPico Daily Restart --> "C:\Program Files\KMSpico\AutoPico.exe" /silent
Task - Avast Emergency Update --> C:\Program Files\AVAST
Software\Avast\AvEmUpdate.exe
Task - GoogleUpdateTaskMachineCore --> C:\Program Files
(x86)\Google\Update\GoogleUpdate.exe /c
Task - GoogleUpdateTaskMachineUA --> C:\Program Files
(x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
Task - IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 --> "C:\Program
Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe"
--automatic
Task - IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon -->
"C:\Program
Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe"
--automatic
Task - IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 --> C:\Program Files
(x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe --automatic
Task - Rerun Warsaw's CoreFixer --> C:\Windows\TEMP\is-5K913.tmp\corefixer.exe
/norerun
Task - SmartGameBooster SkipUAC (Windows) --> C:\Program Files
(x86)\PCGameBoost\Smart Game Booster\SgbMain.exe /skipuac
Task - User_Feed_Synchronization-{EA4DD125-EED5-4B9A-A27B-C6F3689F09D1} -->
C:\Windows\system32\msfeedssync.exe sync

------------ | G:\ - Removable drive (FAT32) |

[01/07/2019 - 15:47:46 | N | 225 Ko] - Savanna Oliveira Passarela.pdf

[05/05/2019 - 20:07:14 | N | 26081 Ko] - netflix-4.16-200217-release.apk
[20/05/2019 - 22:47:44 | D] - IMPRIMIR

Infected elements : 11
Analyzed elements : 52226 in 00h 00m 09s

# UsbFix-Report-01.txt [5172B]

------------ | E.O.F |