# ----------------------------------------------------

# UsbFix Antivirus Free

# ----------------------------------------------------
# Versión : 11.002
# Base de datos : 24-07-2018
# Contacto : https://www.usb-antivirus.com/es/contacto
# ----------------------------------------------------
# Tipo de escaneo : USB
# Usuario : SIOP (Administrador)
# Comenzó : 15/01/2019 17:15:01
# ----------------------------------------------------

------------ | Discos analizados |

F:\ FAT32 (12GB/29GB) [Removable]

------------ | Elemento(s) infectado(s) |

Borrado! F:\UsbFix.vbs
Borrado! F:\UsbFix.vbe

------------ | Run |

F2 - HKLM\..\Winlogon : [Shell] explorer.exe

F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe
F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe,
04 - HKCU\..\Run : [OneDrive]
"C:\Users\SIOP\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
04 - HKCU\..\Run : [HP OfficeJet Pro 8710 (NET)] "C:\Program Files\HP\HP OfficeJet
Pro 8710\Bin\ScanToPCActivationApp.exe" -deviceID "CN76EBT0J3:NW" -scfn "HP
OfficeJet Pro 8710 (NET)" -AutoStart 1
04 - HKLM\..\Run : [EEventManager] "C:\Program Files (x86)\Epson Software\Event
Manager\EEventManager.exe"
04 - HKLM\..\Run : [Adobe Acrobat Speed Launcher] "C:\Program Files
(x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
04 - HKLM\..\Run : [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat
9.0\Acrobat\Acrotray.exe"
04 - HKLM\..\Run : [HPMessageService] C:\Program Files (x86)\HP\HP System
Event\HPMSGSVC.exe
04 - HKLM\..\Run : [RtlS5Wake] C:\PROGRA~2\Realtek\PCIEWI~1\RTLS5W~1\RTLS5W~1.EXE
04 - [x64] HKLM\..\Run : [SecurityHealth] %ProgramFiles%\Windows
Defender\MSASCuiL.exe
04 - [x64] HKLM\..\Run : [RTHDVCPL] "C:\Program
Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
04 - HKU\S-1-5-19\..\Run : [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe
/thfirstsetup
04 - HKU\S-1-5-20\..\Run : [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe
/thfirstsetup
04 - HKU\S-1-5-21-4029736909-2810885901-1391284502-1001\..\Run : [OneDrive]
"C:\Users\SIOP\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
04 - HKU\S-1-5-21-4029736909-2810885901-1391284502-1001\..\Run : [HP OfficeJet Pro
8710 (NET)] "C:\Program Files\HP\HP OfficeJet Pro
8710\Bin\ScanToPCActivationApp.exe" -deviceID "CN76EBT0J3:NW" -scfn "HP OfficeJet
Pro 8710 (NET)" -AutoStart 1
04 - HKU\S-1-5-19\..\RunOnce : [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe
/Upgrade
04 - HKU\S-1-5-20\..\RunOnce : [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe
/Upgrade
04GS - AEHekKLaPYCODWHMW.lnk :
C:\Users\SIOP\AppData\Roaming\AEa3rE93AS\IntelI1Ams.exe

------------ | F:\ - Disco extraíble (FAT32) |

[15/01/2019 - 16:33:16 | A | 0 Ko] - UsbFix.vbs

[15/01/2019 - 16:33:16 | A | 0 Ko] - UsbFix.vbe
[17/09/2018 - 09:59:08 | D] - .Trashes
[17/09/2018 - 09:59:08 | A | 4 Ko] - ._.Trashes
[03/10/2018 - 18:03:04 | D] - .TemporaryItems
[03/10/2018 - 18:03:04 | A | 4 Ko] - ._.TemporaryItems
[17/09/2018 - 09:59:10 | D] - .Spotlight-V100
[19/12/2018 - 19:38:42 | A | 26837 Ko] - CV Ing.Rocio Anel Herrera Aguilar.pdf
[11/01/2019 - 18:01:14 | A | 406 Ko] - 1.pdf
[14/01/2019 - 11:39:46 | A | 1663 Ko] - Scan.pdf
[14/01/2019 - 11:39:46 | A | 1663 Ko] - CUADRO FRIO_31.pdf
[14/01/2019 - 18:58:08 | N | 4114 Ko] - tar 002.pdf
[14/01/2019 - 19:01:54 | N | 614 Ko] - acuse tarj.0002.pdf
[15/01/2019 - 09:33:06 | N | 982 Ko] - Ac.Of.2754.pdf
[09/01/2019 - 12:28:36 | A | 1843568 Ko] - jOhNwICk2.MP4
[15/01/2019 - 16:33:16 | A | 0 Ko] - UsbFix.js
[15/01/2019 - 16:33:16 | D] - 1stspeared.inf
[17/09/2018 - 18:44:04 | D] - .fseventsd
[09/01/2019 - 20:52:54 | A | 130 Ko] - Borrador Empresas 1.docx
[09/01/2019 - 20:52:54 | A | 130 Ko] - Borrador Empresas.docx
[15/01/2019 - 15:20:14 | A | 136 Ko] - Borrador para Juridico.docx
[15/01/2019 - 17:08:30 | A | 127 Ko] - OF. 002- OIC.docx
[23/12/2018 - 10:11:50 | A | 179 Ko] - 7.- DICTAMEN_TATAHUICAPAN-ZAPOTITLAN.doc
[20/09/2018 - 21:37:50 | A | 0 Ko] - .dropbox.device
[23/08/2010 - 15:53:18 | A | 1 Ko] - ReparaFicheros.bat
[15/01/2019 - 16:33:16 | A | 0 Ko] - UsbFix.bat
[11/01/2019 - 14:10:08 | D] - FOUND.001
[07/11/2018 - 15:29:38 | D] - FOUND.000
[02/10/2018 - 11:51:58 | D] - plano maver
[09/01/2019 - 13:50:36 | D] - Miguel
[10/01/2019 - 21:01:28 | D] - norte
[11/01/2019 - 11:38:02 | D] - CENTRO
[11/01/2019 - 11:39:28 | D] - CENTRO 1
[11/01/2019 - 11:52:24 | D] - CENTRO 2
[15/01/2019 - 16:33:12 | D] - System-Volume-Information

Elemento(s) infectado(s) : 2
Elementos analizados : 50177 en 00h 00m 07s

# UsbFix-Report-04.txt [4609B]

------------ | E.O.F |